PRIVACY & DATA PROTECTION

Privacy Policy

Transparent information about how Institut+ processes personal data on the website, in the protected participant area and in the Institut+ app.
Effective from 16 September 2026

Privacy at a glance

This policy covers the Institut+ website, participant area and app. It includes information about account and course data, cookies, analytics, the pronunciation trainer with Microsoft Azure Speech, data recipients and your GDPR rights.

01

General Information

Protecting your personal data is important to us. The following information explains how we process your personal data when you use our website, the protected participant area, and the Institut+ app, as well as the rights you have in relation to this processing.

02

Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Benjamin Nocke
Institut+
Brunnenstraße 3
34130 Kassel
Germany

Phone: +49 561 7 66 85 90
Email: info@institutplus.de

Institut+ is a service provided by Benjamin Nocke as a sole proprietorship.

03A

When Visiting the Website

When you visit our website at www.institutplus.de, information is automatically transmitted by the browser used on your device to our website server. This information is temporarily stored in so-called server log files:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the requested file
  • Website from which access was made (referrer URL)
  • Browser used and, where applicable, operating system and name of the access provider

Purpose of processing:

  • Ensuring a smooth connection to the website
  • Ensuring convenient use of our website
  • Evaluating system security and stability

Legal basis: Article 6(1)(f) GDPR (legitimate interests)

03B

When Using the Contact Form

If you contact us using the contact form provided on our website, we process the data you enter, in particular your name, email address and message, solely for the purpose of handling and responding to your inquiry.

Legal basis: If your contact relates to entering into or performing a contract, processing is carried out in accordance with Article 6(1)(b) GDPR. For other inquiries, processing is based on our legitimate interest in handling and responding to your inquiry in accordance with Article 6(1)(f) GDPR.

03C

Participants and Contract Administration

If you register for one of our courses, we process the personal data you provide, such as your name, address, telephone number and email address, for the purpose of performing and administering the contractual relationship.

We use your email address in particular to provide access to our internal online tools at institutplus.de and to send you important information relating to your course, such as organizational information or changes.

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

The data is stored only for as long as necessary for the performance of the contract and in accordance with statutory retention obligations.

03D

Pronunciation Trainer and Microsoft Azure Speech

Within the protected participant area and the Institut+ app, we provide a pronunciation trainer. If you actively use this feature, a short voice recording is created using the microphone of your device.

The voice recording is used exclusively to technically analyze your pronunciation of the displayed practice sentence and to provide you with an immediate pronunciation assessment. This may include, in particular, pronunciation accuracy, fluency, completeness, and assessments of individual words and sounds.

For technical analysis, the voice recording and the associated practice sentence are transmitted to Microsoft Azure Speech – Pronunciation Assessment. The Azure Speech resource used by Institut+ is hosted in the Microsoft Azure region Germany West Central (Frankfurt, Germany).

Processing takes place on the server side. The Azure access key required for the service is not transmitted to the participant’s device or browser.

According to Microsoft, audio and input data provided for real-time speech recognition and Pronunciation Assessment are not stored or permanently retained by Microsoft after the respective request has been completed. Institut+ likewise does not permanently store the audio file created for pronunciation assessment. Temporarily created audio files are used solely for the respective assessment and are then discarded.

Only results required for learning progress are stored permanently, for example the language and language level used, exercise progress and achieved pronunciation scores. The actual voice recording does not become part of the participant’s permanent profile.

The voice recording is not used to identify or authenticate a person and is not used to create a voice profile.

Purpose of processing: Providing pronunciation assessment and storing and displaying personal learning progress.

Legal basis: Article 6(1)(b) GDPR, insofar as use of the pronunciation trainer forms part of the Institut+ services used by you and the processing is necessary to provide the pronunciation assessment actively requested by you.

Granting microphone access on your device is a technical requirement for using the recording function. It does not constitute a separate consent under data protection law. Without microphone access, the pronunciation trainer cannot be used for voice assessment.

Recipient / processor: Microsoft in connection with Microsoft Azure. The processing of customer data in Azure is governed in particular by the Microsoft Products and Services Data Protection Addendum (DPA) and the applicable Microsoft privacy and security terms.

Microsoft has established an EU Data Boundary for its enterprise online services, including Azure. Regional Azure services that, like the Institut+ service, are provided in an EU region generally fall within this EU Data Boundary. Microsoft notes that, in limited cases, processing or transfers outside this boundary may nevertheless occur. Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfers are carried out on the basis of the applicable safeguards required under data protection law.

Use of the pronunciation trainer is voluntary. A voice recording is started only when you actively start the recording function yourself.

04

Cookies and Consent Management

We use cookies on our website. These help us make our website more user-friendly, effective and secure. We use both essential cookies and cookies for statistical and marketing purposes.

Cookie Consent with Complianz

This website uses the Complianz plugin to obtain your consent to store certain cookies in your browser. When you first visit the website, you can decide in the cookie banner which categories of cookies you wish to allow.

Legal basis:

For storage of, or access to, information on your device that is strictly necessary for technical purposes, Section 25(2) TDDDG applies. Subsequent processing of personal data is carried out, where applicable, on the basis of Article 6(1)(f) GDPR.

For non-essential cookies and comparable technologies, storage or access is carried out only with your consent in accordance with Section 25(1) TDDDG. Subsequent processing of personal data is carried out on the basis of Article 6(1)(a) GDPR.

05

Embedded Third-Party Content

a) Google Analytics

This website uses Google Analytics to measure reach and analyze user behavior, provided that you have explicitly consented to this in the cookie banner.

Provider: Google Ireland Limited
IP anonymization: enabled
Legal basis: Article 6(1)(a) GDPR (consent)

b) YouTube

We occasionally embed YouTube videos on our website. When a video is played, a connection is established to YouTube (Google) servers. This occurs only if you have previously consented to the “Marketing” category in the cookie banner.

06

Disclosure of Data

Your personal data is disclosed to third parties only where:

  • You have expressly given your consent (Article 6(1)(a) GDPR)
  • Processing is necessary for the performance of a contract (Article 6(1)(b) GDPR)
  • There is a legal obligation to process the data (Article 6(1)(c) GDPR)
  • There is a legitimate interest (Article 6(1)(f) GDPR) and there are no overriding interests on your part requiring protection
07

Your Rights

You have the right at any time to:

  • Access your stored personal data (Article 15 GDPR)
  • Rectification of inaccurate personal data (Article 16 GDPR)
  • Erasure of your personal data (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Object to processing (Article 21 GDPR)
  • Withdraw consent at any time with effect for the future (Article 7(3) GDPR)
  • Lodge a complaint with a supervisory authority (Article 77 GDPR)
08

Data Security

We use SSL encryption on our website in conjunction with the highest level of encryption supported by your browser. This provides the best possible technical protection for your data when visiting our website.

09

Validity and Changes to this Privacy Policy

This Privacy Policy is effective from 16 September 2026.

As our website develops or legal requirements change, it may become necessary to update this Privacy Policy. The current English version will always be available at:

https://institutplus.de/en/privacy-policy/

10

Changing Cookie Settings and Consent

You can change or withdraw your consent to the use of cookies at any time.

Please use the following link to adjust your settings:

Open Cookie Settings

There you will also find a complete overview of all cookies used as well as detailed information about their purpose and storage duration.