Privacy Policy
Last updated: 24 June 2026
Last updated: June 2026
Thank you for your interest in our booking portal. The protection of your personal data is important to us. Below we inform you, in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR), about the processing of personal data when using this portal.
1. Controller
The controller within the meaning of the GDPR is:
The American Dream – US Visa Service GmbH Danckelmannstr. 9 14059 Berlin Germany Phone: +49 (0)30 398 20 40-00 Email: kontakt@usvisaservice.de
2. Data protection officer
You can reach our data protection officer at:
sdw consulting – Olaf Nestler Senior Consultant / Data Protection Officer (TÜV Nord) Sankt-Nikolaus-Siedlung 14 42781 Haan, Germany Phone: +49 (0)160 95166923
3. General information on data processing
(1) We generally process the personal data of our users only insofar as this is necessary to provide a functional portal as well as our content and services. Processing regularly takes place only with the user's consent or where processing is permitted by statutory provisions.
(2) Legal bases are in particular: Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR (contract/pre-contractual measures), Art. 6 (1) (c) GDPR (legal obligation) and Art. 6 (1) (f) GDPR (legitimate interest).
(3) Personal data is deleted or blocked as soon as the purpose of storage no longer applies and no statutory retention periods prevent this.
4. Provision of the portal and server log files
(1) Each time our portal is accessed, our system automatically collects data and information from the accessing device. This includes: browser type and version, operating system used, referrer URL, host name of the accessing computer, date and time of access, and the IP address.
(2) This data is stored in log files. This data is not merged with other personal data. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the technical provision, stability and security of the portal.
(3) The log files are deleted as soon as they are no longer required to achieve the purpose for which they were collected.
5. Hosting and order processing
(1) The portal and the associated database are hosted by specialised service providers who process data on our behalf. Where required, we have concluded data processing agreements with these service providers in accordance with Art. 28 GDPR.
(2) Processing primarily takes place on servers within the European Union. Insofar as a transfer to a third country (e.g. the USA) takes place in individual cases, this is safeguarded by appropriate guarantees, in particular EU standard contractual clauses pursuant to Art. 46 GDPR.
6. Cookies
(1) Our portal uses cookies. Cookies are small text files that are stored on your device. We use technically necessary cookies that are required for the operation of the portal (e.g. for session management, storing the shopping cart and securing access). The legal basis is Sec. 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR.
(2) We only use cookies that are not strictly necessary, or comparable technologies, on the basis of your consent pursuant to Sec. 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future.
(3) You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases or to exclude them generally. If cookies are deactivated, the functionality of the portal may be limited.
7. Customer account and registration
(1) You have the option of creating or activating a customer account. In doing so, we process the mandatory data you provide (e.g. name, email address, access data) to provide the account and to manage your orders and cases.
(2) The legal basis is Art. 6 (1) (b) GDPR, as the processing serves to fulfil the user agreement. Your data is deleted as soon as you terminate your account, unless statutory retention obligations prevent this.
8. Contact, forms and consultation
(1) If you contact us via a contact or consultation form, by email or by telephone, we process the data you provide (e.g. name, contact details, content of the enquiry) in order to process your enquiry.
(2) The legal basis is Art. 6 (1) (b) GDPR insofar as the enquiry is aimed at concluding or performing a contract, otherwise Art. 6 (1) (f) GDPR (interest in answering enquiries). The data is deleted as soon as it is no longer required to achieve the purpose and no retention obligations prevent this.
9. Order processing
(1) To carry out the services you have booked, we process the data collected during the ordering process (in particular inventory, contract, application and payment data). Insofar as necessary for performance, we pass on data to the respective competent bodies and to integrated service providers.
(2) The legal basis is Art. 6 (1) (b) GDPR. For commercial and tax law reasons, we are obliged to retain address, payment and order data for the legally prescribed periods (generally six or ten years) (Art. 6 (1) (c) GDPR).
10. Payment processing
(1) For the processing of payments, we use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. Depending on the payment method selected, the data required for processing (e.g. payment amount, payment method, transaction data) is transmitted to the payment service provider.
(2) Processing is based on Art. 6 (1) (b) GDPR for the performance of the contract. The data protection notices of the respective payment service provider apply in addition. We do not store complete payment data (e.g. credit card numbers).
11. Sending emails (order and service messages)
To confirm orders, send receipts and for service messages, we send emails via a technical dispatch service. The legal basis is Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR (interest in reliable communication).
12. Your rights as a data subject
Under the GDPR, you have the following rights:
- Access (Art. 15 GDPR) to the data stored about you;
- Rectification (Art. 16 GDPR) of incorrect or incomplete data;
- Erasure (Art. 17 GDPR), unless retention obligations prevent this;
- Restriction of processing (Art. 18 GDPR);
- Data portability (Art. 20 GDPR);
- Objection to processing (Art. 21 GDPR), insofar as it is based on Art. 6 (1) (f) GDPR;
- Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR).
To exercise your rights, an informal message to the contact details above is sufficient.
13. Right to lodge a complaint with a supervisory authority
Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.
14. Data security and updates
(1) We use SSL/TLS encryption to protect the transmission of your data. You can recognise an encrypted connection by "https://" in the address bar of your browser.
(2) This privacy policy is adapted as required to reflect changes in the legal situation or processing operations. The current version published here applies in each case.