Privacy Policy

1. Scope

This privacy policy applies to this website and all forms and services offered by the Pamir Group through it.

2. What data we process

When you use our forms (contact, enrolment, application, repair, exam registration, placement test) we process the data you provide, in particular your name, phone number, email address and, depending on the form, further details.

For applications and the nursing programme you can additionally upload documents (e.g. CV, ID/passport or Tazkira, certificates, passport photo). Please only submit documents that are necessary for your request.

3. Purposes and legal bases

We process your data solely to handle your enquiry, enrolment or application and to communicate with you. The legal basis is Art. 6(1)(b) GDPR (pre-contractual and contractual measures) and Art. 6(1)(a) GDPR (your consent given when submitting the form). Where special categories of personal data are involved, processing is based on your explicit consent (Art. 9(2)(a) GDPR).

4. Forms and file uploads

The data submitted via the forms and any uploaded files are sent by email to our responsible office and processed there. No automated decision-making takes place.

Enrolments for the language school sent via the enrolment form are additionally transmitted to the learning platform of the Pamir German Language Center (pamirgermanlanguagecenter.online), together with the IP address from which the form was sent. The learning platform is operated by Pamir Group GmbH itself on its own server. There, the administration reviews the enrolment; an account is only created once a staff member approves it. The IP address is used to protect against misuse (limiting the number of enrolments per sender); the legal basis for this is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

In the Pamir Mobile repair assistant you can take or upload a photo of your device to have it recognised automatically. If you use this function, the photo is sent via our server to the service OpenRouter (OpenRouter, Inc., USA) and analysed there by an AI model; only the device type, brand and model are returned. This involves a transfer of data to the USA. Our server does not store the photo for this purpose. The legal basis is your consent given by using the function (Art. 6(1)(a) GDPR). The function is voluntary – you can also select your device manually. Please photograph only the device, not people or documents.

5. Retention period

We store your data only for as long as necessary for the respective purpose or as required by statutory retention periods. Afterwards the data is deleted.

6. Hosting and server log files

Our website is operated by a hosting provider. When the site is accessed, access data is automatically stored in server log files (e.g. IP address, date and time, page accessed, browser type). This data serves the technical provision and security of the site; the legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

7. Local storage in the browser

This website does not use tracking or advertising cookies. For features such as language selection and your placement-test result, we store information locally in your browser (local storage). This data remains on your device and is not transmitted to us. Prices in other currencies are converted using fixed exchange rates stored on the website; no external service is contacted for this.

8. Disclosure to third parties

Your data is only disclosed to third parties where this is necessary to handle your request or where we are legally obliged to do so. Our hosting provider processes data as a processor acting on our instructions.

If you use the device photo recognition in the repair assistant, the photo is sent to OpenRouter (see section 4). The learning platform of the Pamir German Language Center is operated by Pamir Group GmbH itself; enrolments sent there are not a disclosure to third parties.

9. Your rights and right to complain

You have the right to access, rectification, erasure, restriction of processing, data portability and the right to object to processing. You can withdraw any consent given at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. For Austria this is the Austrian Data Protection Authority (www.dsb.gv.at).

10. Data security

Data is transmitted in encrypted form via HTTPS/TLS. We take technical and organisational measures to protect your data against unauthorised access and loss.