Privacy policy - Karlshochschule International University

1. introduction

With the following information, we would like to give you as a “data subject” an overview of the processing of your personal data by us and your rights under data protection laws. It is generally possible to use our website without entering personal data. However, if you wish to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.

The processing of personal data, such as your name, address or e-mail address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to “Karlshochschule International University”. By means of this privacy policy, we would like to inform you about the scope and purpose of the personal data we collect, use and process.

As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, for example by telephone or post.

You too can take simple and easy-to-implement measures to protect yourself against unauthorized access to your data by third parties. We would therefore like to take this opportunity to give you some tips on how to handle your data securely:

Protect your account (login, user or customer account) and your IT system (computer, laptop, tablet or mobile device) with secure passwords.
Only you should have access to the passwords.
Make sure that you only ever use your passwords for one account (login, user or customer account).
Do not use the same password for different websites, applications or online services.
Especially when using publicly accessible IT systems or IT systems shared with other people, you should always log out after logging in to a website, application or online service.

Passwords should consist of at least 12 characters and be chosen so that they cannot be easily guessed. Therefore, they should not contain common everyday words, your own name or the names of relatives, but should contain upper and lower case letters, numbers and special characters.

2. responsible person

The controller within the meaning of the GDPR is the:

Karlshochschule International University
Karlsstraße 36-38, 76133 Karlsruhe, Germany

E-mail: datenschutz@karlshochschule.org

Representative of the responsible person: Mrs. Angelika Habermann

3. data protection officer

You can reach the data protection officer as follows:

Thomas Gießler

E-mail: datenschutz@karlshochschule.org

You can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

4. definitions

The data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

We use the following terms, among others, in this privacy policy:

Personal data
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Person concerned
Data subject is any identified or identifiable natural person whose personal data is processed by the controller (our company).
Processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of restricting its future processing.
Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
Pseudonymization
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Processor
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Receiver
Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, authorities that may receive personal data in the context of a specific investigation mandate under Union law or the law of the Member States are not considered recipients.
Third
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Consent
Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

5. legal basis of the processing

Art. 6 para. 1 lit. a) GDPR (in conjunction with Section 25 (1) TTDSG) serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service or consideration, the processing is based on Article 6 (1) (f) GDPR. 1 lit. b) GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. c) GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and their name, age, health insurance details or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 para. 1 lit. d) DS-GVO are based.

Ultimately, processing operations could be based on Art. 6 para. 1 lit. f) DS-GVO are based. This legal basis is used for processing operations which are not covered by any of the aforementioned legal bases if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, he took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47 Sentence 2 GDPR).

6. technology

6.1 SSL/TLS encryption

To ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator, this site uses an SSL or SSL-encrypted connection. TLS encryption. You can recognize an encrypted connection by the “https://” instead of “http://” in the address line of the browser and by the lock symbol in your browser line.

We use this technology to protect your transmitted data.

6.2 Data collection when visiting the website

If you only use our website for information purposes, if you do not register or otherwise provide us with information or do not give your consent to processing that requires consent, we only collect the data that is technically necessary for the provision of the service. This is data that your browser regularly transmits to our server (“in so-called server log files”). Our website collects a range of general data and information each time you or an automated system accesses a page. This general data and information is stored in the server log files. can be recorded:

browser types and versions used,
the operating system used,
the website from which an accessing system reaches our website (so-called referrer),
the sub-websites which are accessed via an accessing system on our website,
the date and time of access to the website,
a shortened Internet Protocol address (anonymized IP address) and,
the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your person. Rather, this information is required in order to

to deliver the content of our website correctly,
optimize the content of our website and the advertising for it,
to ensure the permanent functionality of our IT systems and the technology of our website, and
to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack.

This collected data and information is therefore evaluated by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest follows from the data collection purposes listed above.

6.3 Amazon CloudFront (Content Delivery Network)

We use Amazon CloudFront, a web service from Amazon Web Services Inc, 410 Terry Avenue North, 98109, Seattle, Washington, USA.

Amazon CloudFront is a content delivery network (CDN). It directs the transfer of information between your browser and our website via the CloudFront network. This reduces the latency with which we can provide static and dynamic web content. It also improves the security of our website through data traffic encryption and access controls.

CloudFront also stores cookies on your computer to optimize the service. You can delete cookies in your browser, allow cookies only in individual cases and activate the automatic deletion of cookies when closing the browser.

Amazon Web Services receives and processes personal data as our processor in accordance with EU standard contractual clauses. CloudFront is used to collect statistical data about visits to our website. These include, among others:

IP address
Called website
Referrer URL and
Browser type
Operating system
Device type

If you have consented to the use of CloudFront, the legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR. In addition, it is in our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR to use CloudFront to optimize our website, make it more secure and not to operate a content delivery network ourselves. The personal data is stored by Amazon Web Services for as long as is necessary to achieve the described purpose.

The transfer of your personal data to the USA takes place on the basis of the standard contractual clauses. You can find more information at: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.

You can find more detailed information about CloudFront at: https://aws.amazon.com/de/cloudfront/.

6.4 Amazon Web Services (AWS) – Hosting of individual components

Components of Amazon Web Services (AWS) of Amazon.com Inc, Seattle, 410 Terry Ave N, United States, are integrated on our website. Amazon Web Services (AWS) is the world’s most comprehensive and most frequently used cloud.

The purpose of using AWS in the present case is, among other things, to host applications and services on AWS and to rent resources for computing-intensive tasks.

If you have consented to the use of the services hosted by AWS, the legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR. In addition, it is in our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR to use the hosting of individual components at AWS in order to operate our website in an appealing and secure manner.

The parent company Amazon Inc. is certified as a US company under the EU-US Data Privacy Framework. This is a resolution of appropriateness in accordance with the German Commercial Code. Art. 45 GDPR, so that a transfer of personal data may also take place without further guarantees or additional measures.

You can view AWS’s privacy policy at: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_German_2023-08-11.pdf.

6.5 Hosting by IONOS

We host our website with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter referred to as IONOS).

When you visit our website, your personal data (e.g. IP addresses in log files) are processed on the IONOS servers.

The use of IONOS is based on Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in ensuring that our website is displayed and provided as reliably as possible and that it is secure.

We have concluded a contract for order processing (AVV) in accordance with. Art. 28 GDPR concluded with IONOS. This is a contract prescribed by data protection law, which ensures that IONOS processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

You can find more information about IONOS’ data protection provisions at: https://www.ionos.de/terms-gtc/terms-privacy

7. cookies

7.1 General information on cookies

Cookies are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.

Information is stored in the cookie that results from the connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

The use of cookies serves to make the use of our website more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it will automatically recognize that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate our offer for you for the purpose of optimization. These cookies enable us to automatically recognize that you have already visited our website when you visit it again. The cookies set in this way are automatically deleted after a defined period of time. The respective storage duration of the cookies can be found in the settings of the consent tool used.

7.2 Legal basis for the use of cookies

The data processed by the cookies, which are required for the proper functioning of the website, are thus necessary for the protection of our legitimate interests and those of third parties in accordance with Art. 6 para. 1 lit. a GDPR. 1 lit. f) GDPR required.

For all other cookies, you must give your consent to this via our opt-in cookie banner within the meaning of Art. 6 para. 1 lit. a) DS-GVO have given.

7.3 Borlabs Cookie (Consent Management Tool)

We use the WordPress cookie plugin “Borlabs Cookie” from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. This service enables us to obtain and manage the consent of website users for data processing.

Borlabs Cookie uses cookies to collect data generated by end users who use our website. When an end user gives consent, the following data, among others, is automatically logged:

Cookie duration,
Cookie version,
Domain and path of the WordPress page,
Selection in the cookie banner,
UID (a randomly generated ID),

The consent status is also stored in the end-user’s browser so that the website can automatically read and follow the end-user’s consent on all subsequent page requests and future end-user sessions for up to 12 months. The consent data (consent and withdrawal of consent) will be stored for three years. The retention period corresponds to the regular limitation period pursuant to § 195 BGB. The data will then be deleted immediately.

The functionality of the website is not guaranteed without the described processing. The user has no right to object as long as there is a legal obligation to obtain the user’s consent to certain data processing operations, Art. 7 para. 1, 6 para. 1 p. 1 lit. c) GDPR.

The data collected will not be forwarded to Borlabs GmbH, nor will Borlabs GmbH have access to it.

You can find more information at: https://de.borlabs.io/borlabs-cookie/.

7.4 Usercentrics (Consent Management Tool)

We use the consent management tool “Usercentrics” from Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This service enables us to obtain and manage the consent of website users for data processing.

Usercentrics collects data generated by end users who use our website. When an end user gives consent, Usercentrics automatically logs the following data:

Browser information.
Date and time of access.
Device information.
The URL of the page visited.
Geographical location.
Page path of the website.
The consent status of the end user, which serves as proof of consent.

Usercentrics is the recipient of your personal data and acts as a processor for us.

Detailed information on the use of Usercentrics can be found at: https://usercentrics.com/privacy-policy/.

8. contents of our website

8.1 Registering as a user

You have the option of registering on our website by providing personal data.

Which personal data is transmitted to us is determined by the respective input mask used for registration. The personal data you enter is collected and stored exclusively for internal use by us and for our own purposes. We may arrange for the data to be passed on to one or more processors, for example a parcel service provider, who will also use the personal data exclusively for internal purposes attributable to us.

When you register on our website, the IP address assigned by your Internet service provider (ISP), the date and the time of registration are also stored. This data is stored against the background that this is the only way to prevent the misuse of our services and, if necessary, to enable the investigation of criminal offenses committed. In this respect, the storage of this data is necessary for our security. This data will not be passed on to third parties. This does not apply if we are legally obliged to disclose the data or if the disclosure serves the purpose of criminal prosecution.

Your registration, with the voluntary provision of personal data, also enables us to offer you content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from our database.

We will provide you with information about the personal data stored about you at any time upon request. Furthermore, we will correct or delete personal data at your request, insofar as this does not conflict with any statutory retention obligations. A data protection officer named in this privacy policy and all other employees are available to the data subject as contact persons in this context.

Your data is processed in the interest of a comfortable and easy use of our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

8.2 Data processing when opening a customer account and for contract processing

Pursuant to Art. 6 para. 1 lit. b) GDPR, personal data is collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time, for example by sending a message to the above-mentioned address of the controller. We store and use the data provided by you to process the contract. After completion of the contract or deletion of your customer account, your data will be blocked, taking into account tax and commercial law retention periods, and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of your data as permitted by law, about which we will inform you accordingly below.

8.3 Data processing for order processing

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we provide explicit information about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b) GDPR.

8.4 Contact / contact form

Personal data is collected when you contact us (e.g. via contact form or e-mail). Which data is collected when a contact form is used can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f) GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. Your data will be deleted after final processing of your request; this is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and the deletion does not conflict with any statutory retention obligations.

8.5 Comment function blog

We offer users the opportunity to leave individual comments on individual blog posts on a blog located on our website. A blog is a portal on a website, usually open to the public, in which one or more people, called bloggers or web bloggers, can post articles or write down thoughts in so-called blog posts. The blog posts can usually be commented on by third parties.

If you leave a comment in the blog published on this website, information about the time you entered the comment and the user name you selected will be saved and published in addition to the comments you leave. The IP address assigned by your Internet service provider (ISP) is also logged. The IP address is stored for security reasons and in the event that you have violated the rights of third parties or posted illegal content by posting a comment. The storage of this personal data is therefore in our own interest so that we can exculpate ourselves in the event of an infringement. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. This collected personal data will not be passed on to third parties unless such a transfer is required by law or serves our legal defense.

9. newsletter dispatch

9.1 Advertising newsletter

On our website, you are given the opportunity to subscribe to our company’s newsletter. Which personal data is transmitted to us when you order the newsletter can be seen from the input mask used for this purpose.

We inform our customers and business partners about our offers at regular intervals by means of a newsletter. In principle, you can only receive our company’s newsletter if

you have a valid e-mail address and
you have registered to receive the newsletter.

For legal reasons, a confirmation e-mail will be sent to the e-mail address you entered for the first time for the newsletter mailing using the double opt-in procedure. This confirmation e-mail is used to check whether you, as the owner of the e-mail address, have authorized the receipt of the newsletter.

When you register for the newsletter, we also store the IP address assigned by your internet service provider (ISP) of the IT system you are using at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of your e-mail address at a later date and therefore serves our legal protection.

The personal data collected when registering for the newsletter is used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes to the technical circumstances. The personal data collected as part of the newsletter service will not be passed on to third parties. You can cancel your subscription to our newsletter at any time. The consent to the storage of personal data that you have given us for the newsletter dispatch can be revoked at any time. There is a corresponding link in every newsletter for the purpose of revoking consent. It is also possible to unsubscribe from the newsletter at any time directly on our website or to inform us of this in another way.

The legal basis for data processing for the purpose of sending the newsletter is Art. 6 para. 1 lit. a) GDPR.

9.2 CleverReach

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co KG, (CRASH Building), Schafjückenweg 2, 26180 Rastede. CleverReach is a service that can be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter (e.g. your e-mail address) will be stored on CleverReach’s servers in Germany or Ireland.

Our newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. Among other things, it is possible to analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked on. Conversion tracking can also be used to analyze whether a predefined action (e.g. the purchase of a product on our website) has taken place after clicking on the link in the newsletter. Further information on data analysis by CleverReach newsletters can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

Data processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

If you do not wish to be analyzed by CleverReach, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

You can revoke your consent at any time. You can also prevent processing at any time by unsubscribing from the newsletter. You can also prevent the storage of cookies by setting your web browser accordingly. You can also prevent the storage and transmission of personal data by deactivating Java Script in your web browser or installing a Java Script blocker (e.g. https://noscript.net or https://www.ghoster y.com). We would like to point out that these measures may mean that not all functions of our website are available.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the CleverReach servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

You can view CleverReach’s privacy policy at: https://www.cleverreach.com/de/datenschutz/.

10 Our activities in social networks

We have our own pages on social networks so that we can communicate with you and inform you about our services. If you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered by this, within the meaning of Art. 26 GDPR.

We are not the original provider of these pages, but only use them within the scope of the possibilities offered to us by the respective providers.
As a precautionary measure, we would therefore like to point out that your data may also be processed outside the European Union or the European Economic Area. Use may therefore be associated with data protection risks for you, as it may be more difficult for you to protect your rights, e.g. to information, deletion, objection, etc., and processing in social networks is often carried out directly for advertising purposes or for the analysis of user behavior by the providers, without us being able to influence this. If user profiles are created by the provider, cookies are often used or the usage behavior is assigned to your own social network member profile.

The described processing operations of personal data are carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to communicate with you in a timely manner or to inform you about our services. If you have to give your consent to data processing as a user with the respective providers, the legal basis refers to Art. 6 para. 1 lit. a) GDPR in conjunction with. Art. 7 GDPR.

As we do not have access to the providers’ databases, we would like to point out that it is best to assert your rights (e.g. to information, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data in social networks is provided below by the respective social network provider we use:

10.1 Facebook

(Joint) controller for data processing in Europe:
Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

10.2 Instagram

(Joint) controller for data processing in Germany:
Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

10.3 LinkedIn

(Joint) controller for data processing in Europe:
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

10.4 X (Twitter)

(Joint) controller for data processing in Europe:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Information about your data:
https://twitter.com/settings/your_twitter_data

10.5 YouTube

(Joint) controller for data processing in Europe:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

10.6 XING (New Work SE)

(Joint) controller for data processing in Germany:
New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Information requests for XING members:
https://www.xing.com/settings/privacy/data/disclosure

11. social media plugins

11.1 Facebook plugin

We have integrated components of the company Facebook on this website. Facebook is a social network.

A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Among other things, Facebook allows users of the social network to create private profiles, upload photos and network via friend requests.

The operating company of Facebook is Meta Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time you access one of the individual pages of this website, which is operated by us and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on your IT system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook receives information about which specific subpage of our website you visit.

If you are logged in to Facebook at the same time, Facebook recognizes which specific subpage of our website you are visiting each time you access our website and for the entire duration of your visit to our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account. If you click on one of the Facebook buttons integrated on our website, for example the “Like” button, or if you leave a comment, Facebook assigns this information to your personal Facebook user account and stores this personal data.

Facebook always receives information via the Facebook component that you have visited our website if you are logged in to Facebook at the same time as accessing our website; this occurs regardless of whether you have clicked on the Facebook component or not. If you do not want this information to be transmitted to Facebook, you can prevent it from being transmitted by logging out of your Facebook account before accessing our website.

This US company is certified under the EU-US Data Privacy Framework. This is a resolution of appropriateness in accordance with the German Commercial Code. Art. 45 GDPR, so that a transfer of personal data may also take place without further guarantees or additional measures.

Personal data will only be processed using the social media buttons with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains what settings options Facebook offers to protect privacy. Various applications are also available that make it possible to suppress data transmission to Facebook. You can use such applications to suppress the transmission of data to Facebook.

11.2 Instagram plugin

We have integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also redistribute such data on other social networks.

The operating company of the Instagram services is Meta Inc, 1 Hacker Way, Menlo Park, CA 94025, USA.

Each time you access one of the individual pages of this website, which is operated by us and on which an Instagram component (Instagram button) has been integrated, the Internet browser on your IT system is automatically prompted by the respective Instagram component to download a representation of the corresponding Instagram component. As part of this technical process, Instagram receives information about which specific subpage of our website you are visiting.

If you are logged in to Instagram at the same time, Instagram recognizes which specific subpage you are visiting each time you access our website and for the entire duration of your visit to our website. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you click on one of the Instagram buttons integrated on our website, the data and information transmitted with it will be assigned to your personal Instagram user account and stored and processed by Instagram.

Instagram always receives information via the Instagram component that you have visited our website if you are logged in to Instagram at the same time as accessing our website; this occurs regardless of whether you have clicked on the Instagram component or not. If you do not want this information to be transmitted to Instagram, you can prevent it from being transmitted by logging out of your Instagram account before accessing our website.

Personal data will only be processed using the social media buttons with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

11.3 YouTube plugin

We have integrated YouTube components on this website. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Each time you access one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube plug-in) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google receive information about which specific subpage of our website you visit.

If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting when you access a subpage that contains a YouTube plugin. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google always receive information via the YouTube component that you have visited our website if you are logged in to YouTube at the same time as accessing our website; this takes place regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent it from being transmitted by logging out of your YouTube account before accessing our website.

The use of YouTube is in the interest of a comfortable and easy use of our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

Personal data will only be processed using the social media buttons with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

12. web analysis

12.1 Meta Pixel (formerly Facebook Pixel)

This website uses the “Facebook pixel” of Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (“Meta”). If explicit consent is given, this allows the behavior of users to be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimize future advertising measures.

The data collected is anonymous to us and therefore does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). This enables Meta and its partners to place advertisements on and off Facebook. A cookie may also be stored on your computer for these purposes.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

12.2 Google Analytics 4 (GA4)

On our websites we use Google Analytics 4 (GA4), a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

In this context, pseudonymized user profiles are created and cookies (see “Cookies”) are used. The information generated by the cookie about your use of this website may include, but is not limited to

a short-term recording of the IP address without permanent storage
Location data
Browser type/version
Operating system used
Referrer URL (previously visited page)
Time of the server request

The pseudonymized data may be transmitted by Google to a server in the USA and stored there.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

The default data storage period set by Google is 14 months. Otherwise, the personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This is a resolution of appropriateness in accordance with the German Commercial Code. Art. 45 GDPR, so that a transfer of personal data may also take place without further guarantees or additional measures.

Further information on data protection when using GA4 can be found at: https://support.google.com/analytics/answer/12017362?hl=de.

12.3 Google Analytics 4 (GA4) – Additional information on Consent Mode, simple implementation

Under the Digital Markets Act, Google is obliged to obtain user consent before processing user data for personalized advertising. Google meets this requirement with the “Consent Mode”. Users are obliged to implement this and thus prove that they have obtained the consent of website visitors.

Google offers two implementation modes, the simple and the advanced implementation.

We use the simple implementation method of Google Consent Mode. Only if you give your consent to the use of Google Analytics (see above) will a connection to Google be established, a Google code executed and the processing described above carried out. If they refuse consent, Google will only receive information that consent has not been given. The Google code is not executed and no Google Analytics cookies are set.

12.4 Google Analytics Universal

On our websites we use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.de/intl/de/about/), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). In this context, pseudonymized user profiles are created and cookies (see “Cookies”) are used. The information generated by the cookie about your use of this website such as

the browser type/version,
the operating system used,
the referrer URL (the previously visited page),
the host name of the accessing computer (IP address) and
time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

You can view the data protection provisions of Google Analytics at: https://support.google.com/analytics/answer/6004245?hl=de.

12.5 Google Analytics Remarketing

We have integrated Google Remarketing services on this website. The operating company of the Google Remarketing services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Remarketing is a function of Google AdWords that enables a company to display advertising to Internet users who have previously visited the company’s website. The integration of Google Remarketing therefore allows a company to create user-related advertising and consequently to display advertisements relevant to the interests of the Internet user.

The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or on other websites that are tailored to the individual needs and interests of Internet users.

Google Remarketing places a cookie on the data subject’s IT system. By setting the cookie, Google is able to recognize the visitor to our website when he or she subsequently visits websites that are also members of the Google advertising network. Each time you access a website on which the Google Remarketing service has been integrated, your Internet browser automatically identifies itself to Google. As part of this technical process, Google obtains knowledge of personal data, such as your IP address or surfing behavior, which Google uses, among other things, to display interest-relevant advertising.

Cookies are used to store personal information, such as the websites you have visited. Every time you visit our website, personal data, including your IP address, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

You can view the data protection provisions of Google analytics Remarketing at: https://www.google.de/intl/de/policies/privacy/.

12.6 Hotjar

This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.

Hotjar is a tool for analyzing your user behavior on this website. With Hotjar, we can record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you have been hovering over a certain position with the mouse pointer. Hotjar uses this information to create so-called heat maps, which can be used to determine which areas of the website are viewed most frequently by website visitors.

We can also determine how long you stayed on a page and when you left it. We can also determine at which point you have aborted your entries in a contact form (so-called conversion funnels). Hotjar can also be used to obtain direct feedback from website visitors. This function serves to improve the website operator’s web offerings.

Hotjar uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our website more user-friendly, effective and secure. In particular, these cookies can be used to determine whether this website has been visited with a specific end device or whether the Hotjar functions have been deactivated for the browser in question. Hotjar cookies remain on your end device until you delete them.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

You can find more information about Hotjar at: https://help.hotjar.com/hc/en-us/categories/115001323967-About-Hotjar.

12.7 LinkedIn Analytics

On this website, we use the retargeting tool and conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn).

For this purpose, the LinkedIn Insight Tag is integrated on our website, which enables LinkedIn to collect statistical data about your visit and use of our website and to provide us with corresponding aggregated statistics on this basis. The service is also used to show you relevant offers and recommendations that are specific to your interests after you have looked up certain services, information and offers on the website. The relevant information is stored in a cookie.

As a rule, the following data is collected and processed:

IP address
Device information
Browser information
Referrer URL and
Timestamp

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR. Your data will be stored until you withdraw your consent.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted. The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

As part of processing via LinkedIn, data may be transferred to the USA and Singapore. The security of the transfer is regularly ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, consent pursuant to Art. 49 para. 1 lit. a) DS-GVO obtained from you.

You can find more information about LinkedIn’s privacy policy at: https://de.linkedin.com/legal/privacy-policy.

12.8 Matomo

We have integrated the Matomo component of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, on this website. Matomo is a software tool for web analysis, i.e. for the collection, compilation and evaluation of data on the behavior of visitors to websites. Among other things, data is collected about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This is used to optimize the website and for the cost-benefit analysis of Internet advertising.

The software is operated on the server of the controller, and the log files, which are sensitive under data protection law, are stored exclusively on this server.

Matomo places a cookie on your IT system. By setting the cookie, we are able to analyze the use of our website. Each time you access one of the individual pages of this website, the Internet browser on your IT system is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis. As part of this technical process, we obtain knowledge of personal data, such as the IP address of the data subject, which we use, among other things, to trace the origin of visitors and clicks.

Cookies are used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website. Each time you visit our website, this personal data, including the IP address of the Internet connection you are using, is transmitted to our server. This personal data is stored by us. We do not pass this personal data on to third parties.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

You can view Matomo’s privacy policy at: https://matomo.org/privacy/.

12.9 Microsoft Application Insights

We use Application Insights for our application. Application Insights is a service of the Azure cloud platform of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). This service collects telemetry data application. This data is anonymous statistical data. It is not possible to establish a personal reference based on this data, as your IP address is shortened and thus anonymized.

The information generated about your use is usually transferred to a Microsoft server within the EU and stored there. In exceptional situations, Microsoft may also transfer the data to servers outside the EU in order to maintain the service.

Application Insights enables us to monitor and optimize the execution of our application. We can use Application Insights to access evaluations that tell us, for example, at what times of day user interest is particularly high, how well the application responds and how well it is supplied by external services on which it may be dependent. In the event of faults, errors or performance problems, we can search the telemetry data in detail to determine the cause of the fault. This enables us to offer our services with high availability and quality.

For our web APIs, the collection of data is mandatory for the provision of services. Consequently, there is no possibility for the user to object. The legal basis for the processing of users’ personal data is Art. 6 para. 1 lit. f) GDPR.

Raw telemetry data is deleted after 90 days. Since the IP address used by you during the generation of telemetry data is anonymized, it is not possible for us to delete your data specifically.

On the following page, Microsoft describes in detail what Application Insights can do, what data is processed and how long it is stored: https://docs.microsoft.com/de-de/azure/application-insights/app-insights-data-retention-privacy.

Further information from Microsoft on the subject of data protection and Azure can be found at: http://azure.microsoft.com/de-de/support/trust-center/privacy/.

12.10 TikTok Pixel

This website uses the web attribution solution “TikTok Pixel” which is operated by TikTok Technology Limited, 10 Earlsfort Terrace, D02 T380, Co. Dublin, Dublin, D02t380, Ireland, and TikTok Information Technologies UK Limited, 1 London Wall, London, EC2Y 5EB, UK.

The use of the TikTok pixel enables TikTok to track the behavior of visitors to our website and to collect data about their activities. This data can be used to carry out targeted advertising campaigns on TikTok. We also collect information about conversions. As a result, we receive data from TikTok about how many visitors actually visit our website as a result of our TikTok advertisements.

With explicit consent, the pixel sets cookies and transmits hashed information to TikTok. The pixel collects information such as

Information on displays/events,
Timestamp,
IP address,
User agent
Cookies

In the case of conversions, we do not regularly process any personal data, as it is not possible for us to assign the hashed version of your TikTok ID to you as a person; only TikTok can do this. We also do not receive any information about you, such as your name, age, etc.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a GDPR.

You can find more information about TikTok’s privacy policy at: https://www.tiktok.com/legal/privacy-policy?lang=de.

13. advertising

13.1 Google Ads (AdWords) remarketing/retargeting

We have integrated Google Ads on this website. The operating company of the Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

We use this to advertise this website in Google search results and on third-party websites. For this purpose, Google places a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit.

Any further data processing will only take place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to create target groups.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

You can view Google Ads’ privacy policy and further information at: https://www.google.com/policies/technologies/ads/

13.2 Google Ads with conversion tracking

We have integrated Google Ads on this website. The operating company of the Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an internet advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. Google Ads enables an advertiser to define certain keywords in advance, by means of which an ad is only displayed in Google’s search engine results if the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed to relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The purpose of Google Ads is to promote our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.

If you reach our website via a Google ad, a so-called conversion cookie is stored on your IT system by Google. A conversion cookie loses its validity after thirty days and is not used to identify you. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart from an online store system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a user who has reached our website via an AdWords ad has generated sales, i.e. completed or canceled a purchase.

The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via Ads ads, i.e. to determine the success or failure of the respective Ads ad and to optimize our Ads ads for the future. Neither our company nor other Google Ads advertisers receive information from Google that could be used to identify you.

The conversion cookie is used to store personal information, such as the web pages you have visited. Every time you visit our website, personal data, including the IP address of the Internet connection you are using, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

You can view Google AdSense’s privacy policy and further information at: https://www.google.de/intl/de/policies/privacy/.

13.3 Google Ads – Additional information on Consent Mode, simple implementation

Google offers two implementation modes, the simple and the advanced implementation.

We use the simple implementation method of Google Consent Mode. Only if you give your consent to the use of Google Ads (see above) will a connection to Google be established, a Google code executed and the processing described above carried out. If they refuse consent, Google will only receive information that consent has not been given. The Google code is not executed and no Google Ads cookies are set.

13.4 LinkedIn Ads

We have integrated LinkedIn Ads on this website. The operating company of the service is LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

This is how we advertise our company on the Linkedin social network. For this purpose, LinkedIn places a cookie in the browser of your end device, which automatically enables interest-based advertising based on the pages you visit.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a GDPR. Your data will be deleted as soon as it is no longer required for the purpose for which it was collected or you withdraw your consent.

You can find more information about LinkedIn’s privacy policy at: https://de.linkedin.com/legal/privacy-policy.

14. plugins and other services

14.1 audatis MANAGER (whistleblower system)

We use the audatis MANAGER whistleblower system of audatis Services GmbH, Luisenstraße 1, 32052 Herford.

The whistleblower system enables the submission, receipt and investigation of reports in order to prevent, detect and/or follow up on violations of applicable law or company policies.

The following data, among others, may be recorded, unless an anonymous report is made:

Information for personal identification of the whistleblower, such as first and last name, address, telephone number and e-mail address;
Employment characteristics;
Information about the data subject named in the notification, such as first and last name, gender, address, telephone number and e-mail address;
Information about violations that may allow conclusions to be drawn about a natural person. data processing is carried out in the case of information for the personal identification of the whistleblower on the basis of the legal obligation of the Whistleblower Protection Act (HinSchG) in accordance with the German Data Protection Act. Art. 6 para. 1 lit. c) GDPR.

If further information on employee status, information on the data subject and other information that allows conclusions to be drawn about natural persons is processed, this is done either to fulfill legal obligations under the Whistleblower Protection Act (HinSchG) pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 6 para. b) GDPR. Art. 6 para. 1 lit. c) GDPR or in the case of voluntary provision of a whistleblower system on the basis of the legitimate interest pursuant to Art. Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the processing of reports in order to be able to carry out follow-up measures.

You can find more information on the audatis MANAGER data protection provisions at: https://www.audatis-manager.de/datenschutz/

14.2 Google Maps

We use Google Maps (API) on our website. The operating company of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (land) maps in order to visualize geographical information. By using this service, for example, our location can be shown to you and a possible journey can be made easier.

Information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there as soon as you access those sub-pages in which the Google Maps map is integrated, provided that you have given your consent within the meaning of Art. 6 para. 1 lit. a GDPR. 1 lit. a) DS-GVO have given. In addition, Google Maps loads the Google web fonts and Google Photos as well as Google stats. The provider of the services is also Google Ireland Limited. When you call up a page that integrates Google Maps, your browser loads the web fonts and photos required to display Google Maps into your browser cache. The browser you are using also establishes a connection to Google’s servers for this purpose. This gives Google knowledge that our website has been accessed via your IP address. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot be used in this case.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

You can view Google’s terms of use at https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.

You can view the data protection provisions of Google Maps at (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.

14.3 Google reCAPTCHA

We use the reCAPTCHA function on this website. The operating company of Google reCAPTCHA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The reCAPTCHA function is primarily used to differentiate whether an entry is made by a natural person or whether it is misused by machine and automated processing. The service also includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information about Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

14.4 Google Tag Manager

We use the Google Tag Manager service on this website. The operating company of Google Tag Manager is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This tool can be used to implement “web page tags” (i.e. keywords that are integrated into HTML elements) and manage them via an interface. By using Google Tag Manager, we can automatically track which button, link or personalized image you have actively clicked on and can then record which content on our website is of particular interest to you.

The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have made a deactivation at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

These processing operations are only carried out if express consent has been granted in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information on Google Tag Manager and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

15 Your rights as a data subject

15.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

15.2 Right to information Art. 15 GDPR

You have the right to receive free information from us at any time about the personal data stored about you and a copy of this data in accordance with the statutory provisions.

15.3 Right to rectification Art. 16 GDPR

You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

15.4 Erasure Art. 17 GDPR

You have the right to demand that we delete the personal data concerning you immediately, provided that one of the reasons provided by law applies and insofar as the processing or storage is not necessary.

15.5 Restriction of processing Art. 18 GDPR

You have the right to demand that we restrict processing if one of the legal requirements is met.

15.6 Data portability Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6 (1) GDPR. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Art. 20 para. 1 GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.

15.7 Objection Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. (e) (data processing in the public interest) or (f) (data processing on the basis of a balancing of interests) of the GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defense of legal claims.

In individual cases, we process personal data for direct marketing purposes. You can object to the processing of your personal data for the purpose of such advertising at any time. This also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

You also have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR. 1 GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.

You are free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

15.8 Revocation of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

15.9 Complaint to a supervisory authority

You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.

16 Routine storage, deletion and blocking of personal data

We process and store your personal data only for the period of time required to achieve the purpose of storage or if this is provided for by the legal regulations to which our company is subject.

If the storage purpose no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

17. duration of the storage of personal data

The criterion for the duration of the storage of personal data is the respective statutory retention period. After this period has expired, the corresponding data is routinely deleted, provided it is no longer required for the fulfillment or initiation of the contract.

18. updating and amending the privacy policy

This privacy policy is currently valid and has the status: April 2024.

It may become necessary to amend this privacy policy as a result of the further development of our website and services or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at “https://karlshochschule.de/de/datenschutz/”.

This privacy policy was created with the support of the data protection software: audatis MANAGER.