Privacy Policy

At Burlington English GmbH., we are committed to respecting and protecting your personal data. We understand that you are aware of and care about data protection, and we take that seriously.

This Policy describes which personal data Burlington English GmbH., collects about you through the Burlington Platforms and Websites (jointly “Websites”); how we use and protect this information and the choices you can make about how we use this information.

This Policy may contain links to other sites which are not subject to this Privacy Policy. Burlington English GmbH. does not endorse and is not responsible for the privacy practices or content on these sites. We recommend that you read the privacy policy of any such sites that you visit.

1. Who are we?

Burlington English GmbH., is a company with its registered office at c/o Forvis Mazars Rechtsanwaltsgesellschaft mbH, Theodor-Stern-Kai 1, 60596 Frankfurt am Main. (hereinafter referred to as “Burlington English GmbH”).

Burlington English GmbH provides all Burlington products and services through the Websites (jointly the “Products”), namely:

(i) the administration and conduct of tests and the creation and supervision of a VTest Test centers network in the DACH region and provision of related services (“Services”), which enable (i) businesses – legal entities (“Customers”) to ask for the performance of tests (“Tests”) and (ii) individuals (“Candidates”) to take part in such Tests and the respective website. For further information on VTest platform, please refer to https://www.vtest.com/privacy-policy/;

(ii) any kind of processes offered and/or otherwise facilitated through the Burlington English platform. For further information on Burlington English platform, please refer to https://www.burlingtonenglish.com/privacy-policy/; and

In the context of the Websites and the Services, Burlington English GmbH may collect and/or process information about Visitors and Customers as described below.

2. What type of information is collected from you?

Burlington English GmbH processes the following personal data through Websites:

2.1. Name. We collect the given names (first name, family name) of Customers when they express interest in our services, or when they sign up for our newsletter.

2.2. Email address. We collect the email address of Customers when they express interest in our services, or when they sign up for our newsletter.

2.3. IT data. We collect anonymously, visitor ́s IP address, operating system or browser data during their visits to our Websites to provide them with our services.

We shall not be held liable for the personal data collected by other websites / portals you access based on the links accessed through our Websites.

3. Where do we obtain the information?

We collect your personal data when you use our Websites and/or Services as a Visitor, Customer and/or Candidate. We do not sell your personal data to others, and we only share them with third parties who facilitate the provision of our Services to you.

4. How do we use (process) the information?

We use your information for the provision of Service(s) through the Websites and provide you with the best service we can.

5.1. The processing of personal data under 2.1, 2.2 and 2.3 or whichever data you provide when contacting us through the contact form, is based on Art. 6 (1)(f) GDPR, our legitimate interest lies in in the appropriate response to contact requests. If your request relates to the performance of a contract to which you are a party or to the implementation of pre-contractual measures taken at your request, Art. 6 (1)(b) GDPR is the legal basis for processing.

5.2. The processing of personal data under 2.1 and 2.2, is based on Art. 6 (1)(a) GDPR, which relies on your consent when subscribing to the newsletter.

5.3. The processing of personal data under 2.3, which is collected in order to display and ensure the stability and security of the website, is based on the legitimate interest under Art. 6 (1)(f) GDPR.

6.  

We store your information in our internal systems for as long as necessary for your active connection to our Websites and for legitimate interest purposes (e.g. legal proceedings and for purposes related to dispute resolution). Then we delete it securely.

7. What safeguards have we taken to protect your information?

When you give us personal information, we take steps to ensure that it’s treated securely. To help protect the privacy of your information, we maintain physical, technical and administrative safeguards. We update and test our security technology on an ongoing basis. We restrict access to your information to those employees who need to know that information to provide benefits or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities.

Among other things, we have implemented the following measures and procedures designed to protect your information from loss, misuse, or alteration:

• Electronic Access Control to our systems
• Physical Access Control
• Data Transfer Control
• Internal Access Control (permissions for user rights of access to and amendment of data)
• Web Application Firewall
• Basic DDoS Protection
• Advanced Website Acceleration

We rely on third-party service providers (such as Data Processors under Art. 28 GDPR) to perform a variety of business operations on our behalf for the operation and the provision of the Websites. In so doing, we may need to share your information with them. We provide our service providers with only the personal information they need to perform the services we request, and we require that they protect this information and not use it for any other purpose. These third-party services are obligated to ensure GDPR-compliant data handling.

Personal data collected by Burlington English Germany can be accessed by our related companies, based on Art. 6 (1)(f) GDPR. Our legitimate interest lies in the coordination and cooperation within the related companies. The rights of data subjects under the GDPR are safeguarded.

9. Your Rights

Depending on the country in which you reside, and subject to applicable data protection laws, you may have the right to request access to your personal information that we process. You may also have the right to:

9.1. Rectify incorrect personal data or erase it in certain circumstances.

9.2. Restrict or object to the processing of your personal data.

You shall have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 (1) (f) GDPR. We shall then no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

9.3. Receive your data which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, under the conditions set out in Art. 20 GDPR.

9.4. Where we process data based on your consent, you also have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing before the date that you withdrew your consent.

 

Finally, you have the right to lodge a complaint with a competent supervisory authority.

10. Transferring of information outside the European Economic Area (E.E.A.)

In the context of provision of our Services through the Websites, information we collect from you may be transferred or processed outside the EEA, where data protection laws may differ from those in your country. Such transfers will only take place where:

• The European Commission has issued an adequacy decision confirming that the country provides an adequate level of data protection; or
• Appropriate safeguards are in place to ensure that your personal data is protected in accordance with the GDPR and applicable data protection laws. These safeguards may include standard contractual clauses, binding corporate rules, or other approved mechanisms.

We are committed to protecting your personal data regardless of where it is processed and will ensure that any international transfers comply with applicable data protection requirements.

11. Privacy and Data Protection Notice for children

For more information about the processing of children personal, please refer to dedicated Privacy and Data Protection Notice for Children at VTest.com and LiveSpeaking.com.

12. Cookies Policy

Cookies are small text files that are stored by a website on an internet browser while browsing and can thereinafter be recovered in order to identify when users next visit the webpage. For more information, please visit our Cookies Settings  https://www.burlingtonenglish.de/cookie-policy/.

13. How to contact us?

You can contact us with any questions you may have about the processing of your information by us or to exercise the above rights at privacy@BurlingtonEnglish.com.

14. Version information – Changes and Updates

This policy was last updated on September 2025.

We reserve the right to amend this Policy at any time, for any reason, without notice to you, other than the posting of the amended Privacy Policy at our website. For this reason, please visit our website frequently to see the current Privacy Policy that is in effect.