Privacy Policy for Nutrix Pflegeakademie

1. Data Controller and Data Protection Officer

We are pleased that you are visiting our website. Protecting your personal information is very important to us. In this Privacy Policy, we explain what information we collect when you visit www.nutrix-akademie.de process, for what purpose, and on what legal basis.

Data Controller as defined in the General Data Protection Regulation (GDPR), is:

Nutrix GmbH
Steinweg 23a
57627 Hachenburg
Deutschland

Hanover Location: Große Packhofstraße 26A, 30159 Hanover

Represented by the management: Alisa Galeski
Email: info@nutrix-akademie.de

Data Protection Officer

heyData GmbH
Schützenstraße 5
10117 Berlin
Email: datenschutz@heydata.eu

If you have any questions about data protection, please feel free to contact our Data Protection Officer at any time:

2. General Information on Data Processing, Hosting, and Server Log Files

Legal Basis. We process personal data in accordance with the GDPR, the Federal Data Protection Act (BDSG), and the Telecommunications and Digital Services Data Protection Act (TDDDG). Personal data refers to any information relating to an identified or identifiable natural person. Depending on the purpose, we base the processing on your consent (Art. 6(1)(a) GDPR), on the performance of a contract or precontractual measures (lit. b), on a legal obligation (lit. c), or on our legitimate interest (lit. f). We specify the respective legal basis in the following sections.

SSL/TLS encryption. For security reasons, our website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” and the padlock icon in your browser's address bar.

3. Hosting Our website is hosted by GoDaddy. The servers are located in the European Union or the European Economic Area. In particular, the hosting process involves the processing of IP addresses, browser information, access times, and technical connection data. This processing is carried out to ensure the availability, security, and stability of the website (Art. 6(1)(f) GDPR). We have entered into a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.

Server Log Files When you visit our website, the web server automatically collects information:

  • page accessed
  • Date and time of access
  • Browser Type and Browser Version
  • Operating System
  • Referrer URL (the previously visited page)
  • IP address
  • Hostname of the connecting computer

This data is used for the technical operation of the website, error analysis, and system security. The legal basis is our legitimate interest in ensuring secure and error-free operation (Art. 6(1)(f) GDPR). The log files are deleted after [number] days, unless they are needed for a longer period to investigate a security incident.

3. Cookies and Consent Management (Borlabs Cookie)

Our website uses cookies. Cookies are small text files that are stored on your device. We use technically necessary cookies in accordance with Section 25(2)(2) of the TDDDG. We use all other cookies and similar technologies only with your consent (Section 25(1) of the TDDDG, Article 6(1)(a) of the GDPR).

To manage your consents we use the plugin Borlabs Cookie.On your first visit, you can use the cookie banner to choose which services you want to allow. The Borlabs cookie stores your selection in a separate cookie so that we can take it into account on future visits. This cookie does not contain any data that would allow us to identify you. The Borlabs cookie is hosted on our own server; no data is transmitted to the vendor.

The legal basis for the consent cookie is Section 25(2)(2) of the TDDDG and Article 6(1)(c) of the GDPR, as we are legally required to be able to demonstrate your consent (Article 7(1) of the GDPR).

You can change or revoke your consent at any time, effective for the future. To do so, access the cookie settings via [link or icon on the website]. You can also delete or block cookies in your browser; however, this may prevent you from using all features of the website.

4. Contact Form and Spam Protection

Contact form If you contact us via the contact form, we will process the data you provide:

  • First Name and Last Name
  • Email address (required field)
  • Telefonnummer (freiwillig)
  • Content of your message

We use this data exclusively to process your inquiry and to advise you on our courses, credit recognition, and funding opportunities. The legal basis is Article 6(1)(b) of the GDPR if your inquiry relates to a contract or the initiation of a contract, and otherwise our legitimate interest in responding to inquiries (Article 6(1)(f) of the GDPR). We will not disclose your data to third parties without your consent. We will delete your inquiry as soon as it has been fully processed, no later than [number] months after receipt, provided that no statutory retention requirements prevent us from doing so.

Cloudflare Turnstile To protect our forms from spam and automated access, we use Cloudflare Turnstile. The provider is Cloudflare Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Technical information such as IP address, browser information, and interactions with the site are processed to verify that the input is from a human. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). For information on data transfers to the U.S., see Section 6. Further information: Cloudflare Privacy Policy.

Google reCAPTCHA. Google reCAPTCHA may also be used on certain pages to prevent automated input. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To this end, reCAPTCHA analyzes, among other things, IP addresses, mouse movements, and time spent on the page; this data may be transmitted to Google LLC in the United States. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Further information: Google Privacy Policy.

If you do not consent to the use of spam protection, you can contact us at any time by email at info@nutrix-akademie.de erreichen.

5. Analytics Services, Tag Management, and Fonts

Google Tag Manager. We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use this tool to integrate additional services, such as Google Analytics, into our website and manage them centrally. Tag Manager itself does not create user profiles, but it does process your IP address when it loads. It is not loaded until you have given your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Google Analytics. With your consent, we use Google Analytics 4 from Google Ireland Limited to analyze the use of our website and improve our services. Google Analytics sets cookies and processes, among other things, the pages visited, time spent on the site, device and browser information, and approximate location. IP addresses are not stored in Google Analytics 4. The data may be transferred to Google LLC in the United States (see Section 6). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you may revoke at any time in the cookie settings. We have entered into a data processing agreement with Google. Further information: Google Privacy Policy.

Burst Statistics. In addition, we use Burst Statistics, a privacy-friendly analytics plugin. Usage data is stored exclusively on our own server and is not shared with third parties. Burst Statistics is used only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Google Fonts. Our website uses fonts from Google Fonts. The provider is Google Ireland Limited. When you visit a page, your browser loads the fonts from Google’s servers; in the process, your IP address is transmitted to Google. The fonts are loaded only if you have given your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); without your consent, a default font on your device will be displayed. Further information: Google Fonts FAQ.

6. Social Media, Recipients, Transfers to Third Countries, and Retention Periods

Links to social media sites. On our website, you’ll find links to our profiles on Facebook, Instagram, LinkedIn, TikTok, and YouTube. These are simple links, not embedded content: No data is transmitted to these networks when you visit our website. You only leave our website when you click on a link. The respective platform operator is responsible for data processing on that platform.

Recipient. We disclose personal data only if required by law, if necessary to fulfill a contract, if you have given your consent, or if there is a legitimate interest (Art. 6(1)(f) of the GDPR). Recipients include, in particular, our hosting provider and the service providers named in this statement, whom we have contractually obligated as data processors to comply with data protection regulations.

Transfer to third countries. Some of the services mentioned (Google, Cloudflare) may transfer data to the United States. For the United States, there is an adequacy decision by the European Commission (EU-U.S. Data Privacy Framework, Art. 45 GDPR) for companies certified under this framework. If no certification exists, we base the transfer on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Retention period. We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods (e.g., up to ten years under commercial and tax law). After that, the data is deleted. We delete data that we process based on your consent no later than when you revoke it.

7. Your Rights, Right to File a Complaint, and Accuracy

15. Your Rights You have the following rights with respect to your personal data at any time:

  • Right of Access (Art. 15 of the GDPR)
  • Rectification (Art. 16 of the GDPR)
  • Deletion (Art. 17 of the GDPR)
  • Restriction of Processing (Art. 18 GDPR)
  • Data Portability (Art. 20 of the GDPR)
  • Right to withdraw consent that has been given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, simply send an email to info@nutrix-akademie.de.

Right to Object (Art. 21 of the GDPR). If we process your data based on our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time for reasons arising from your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Right to complain. You have the right to file a complaint with a data protection supervisory authority.

The State Commissioner for Data Protection and Freedom of Information in Rhineland-Palatinate
www.datenschutz.rlp.de

No automated decision-making. We do not use automated decision-making, including profiling, as defined in Article 22 of the GDPR.

Current. We will update this Privacy Policy if our website, our services, or the legal landscape change. The version currently published here is the one that applies.

As of October 2026