Information about data protection
CBS University of Applied Sciences takes the protection of your personal data very seriously. We process personal data that is collected when you visit our websites in compliance with the applicable data protection regulations. We neither publish your data nor pass it on to third parties without authorization.
Information about the collection of personal data
personal data
In the following, we provide information about the collection of personal data when using our website. Personal data is any data that relates to you personally, such as name, address, email addresses, user behavior.
Responsible person within the meaning of the GDPR
The controller in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR) is CBS International Business School
CBS Cologne Business School GmbH
Bahnstraße 6
50996 Köln
Telephone: +49 (0) 221-93 18 09-0
Fax: +49 (0) 221-93 18 09-20
email: study@cbs.de
https://cbs.de
See also our imprint
You can contact our data protection officer at datenschutzbeauftragte@cbs.de or our postal address with the addition “data protection officer”.
Note on data transfer to the USA
Among other things, we use tools from companies based in third countries that are not secure under data protection law and US tools whose providers are not certified according to the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to and processed in these countries. We would like to point out that in third countries that are uncertain about data protection law, no level of data protection comparable with the EU can be guaranteed.
We would like to point out that, as a safe third country, the USA generally has a level of data protection comparable to the EU. Data transfer to the USA is permitted if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or has appropriate additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.
How to contact us
When you contact us by email or via a contact form, the data you provide (your email address, possibly your name and telephone number) will be stored by us to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are legal storage obligations.
External service providers
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we also state the defined criteria for the storage period.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from “http://” to “https://” and by the lock icon in your browser line.
General information about data processing
Scope of processing of personal data
In principle, we only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users is regularly carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
Legal basis for processing personal data
Insofar as we obtain consent from the data subject for processing personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) (f) GDPR serves as the legal basis for processing.
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted when a storage period prescribed by the above standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
Data transfer when concluding a contract for services and digital content
We only transfer personal data to third parties if this is necessary as part of contract processing.
We only transfer personal data to third parties if this is necessary as part of contract processing. In the case of dual study programs in particular, CBS helps you find a suitable partner company where you can spend your practical phases. To this end, we forward your personal data (including curriculum vitae) to potential companies during their application process.
Further transmission of data will not take place or will only take place if you have expressly agreed to the transfer. Your data will not be passed on to third parties without express consent, for example for advertising purposes. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.
Note on data transfer to the USA
Among other things, we use tools from companies based in third countries that are not secure under data protection law and US tools whose providers are not certified according to the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to and processed in these countries. We would like to point out that in third countries that are uncertain about data protection law, no level of data protection comparable with the EU can be guaranteed.
We would like to point out that, as a safe third country, the USA generally has a level of data protection comparable to the EU. Data transfer to the USA is permitted if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or has appropriate additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.
Joint Responsibility Agreement with Ernst Klett AG
There are joint responsibility agreements between CBS Cologne Business School GmbH (CBS) and Ernst Klett AG in accordance with Article 26 GDPR, which cover the following areas:
Ernst Klett AG provides uniform legal advice and uniform administration of all insurance data for the purpose of working together within the Klett Education Group.
The legal basis for this is Article 6 (1) (f) GDPR. In the agreements, we have defined with Ernst Klett AG who fulfills which data protection obligations. We will provide you with the main content of these agreements upon request.
Provision of the website and creation of log files
Description and scope of data processing
Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected here:
- Information about the browser type and version used
- The user's operating system
- The user's IP address
- date and time of access
- Websites that are accessed by the user's system via our website
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session.
They are stored in log files to ensure the functionality of the website. We also use the data to optimize the website and ensure the security of our information technology systems. There is no evaluation of the data for marketing purposes in this context.
These purposes also include our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR.
Storage period
The data will be deleted as soon as it is no longer required to achieve the purpose for which you collected it. If the data is collected to provide the website, this is the case when the respective session has ended.
By default, our web server is configured so that log files are automatically deleted on a regular basis. However, we reserve the right to temporarily extend the storage time of log files (manually) or individual IP addresses (manually or automatically) if this is necessary for legitimate security reasons.
Objection and removal option
The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. There is therefore no option for the user to object.
External hosting
This website is hosted externally. The personal data collected on this website is stored on the hoster/host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
Data transmission to the USA and other third countries is based on the standard contractual clauses of the EU Commission or comparable guarantees in accordance with Article 46 GDPR.
External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
Our host (e) will or will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
We use the following host (s):
HubSpot, Inc.
Address: 25 First Street, Cambridge, MA 02141 USA
email: hubspotgermany@hubspot.com
Telephone: +1 888 HUBSPOT. (+1 888 482 7768)
Privacy details can be found in HubSpot's privacy policy: https://legal.hubspot.com/de/privacy-policy
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TN8pAAG&status=Active
Order processing
We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. Details can be found here: https://legal.hubspot.com/de/dpa
Using CookieBot
CookieBot
Our website uses Cookiebot's consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).
When you enter our website, a connection is made to Cookiebot's servers to obtain your consent and other explanations about cookie usage. The following data is transferred to Cookiebot:
- IP address (anonymized)
- Date and time of
- Consent
- Site URL
- technical browsing data
- encrypted, anonymous key
- List of all allowed cookies
Cookiebot then stores a cookie in your browser in order to be able to assign the consents given or their revocation to you. The data collected in this way is stored until you ask us to delete it, delete the Cookiebot cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.
Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.
We have concluded an order processing contract (AVV) with Cookiebot. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Cookie statement
Using cookies
Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The following is a list of the stored data. Examples may include:
- language settings
- Log-in information
We also use cookies on our website, which make it possible to analyze the surfing behavior of users. The following data can be transmitted in this way:
- Search terms entered
- Frequency of page views
- Use of website features
When visiting our website, the user is informed about the use of cookies for analysis purposes and consent is obtained to process the personal data used in this context. In this context, reference is also made to this privacy policy.
Legal basis for data processing
The legal basis for processing personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO.
The legal basis for processing personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR, if the user has given his consent to this effect.
Purpose of data processing
The purpose of using technically necessary cookies is to make it easier for users to use websites. Some functions of our website cannot be offered without the use of cookies. For this, it is necessary that the browser is recognized even after a page change.
We need cookies for the following applications:
Userlike live chat
The user data collected through technically necessary cookies is not used to create user profiles.
Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is being used and can thus constantly optimize our offering.
Duration of storage, objection and removal options
Cookies are stored on the user's computer and transmitted from it to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies
- persistent cookies
a) Transient cookies are automatically deleted when you close the browser. In particular, this includes session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the joint session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
b) persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete cookies at any time in your browser's security settings.
We use cookies to be able to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for every visit.
newsletters
Description and scope of data processing
If you send inquiries via our website, e.g. sign up for information events, order information material or apply for a place to study and provide your e-mail address, we can then use it to send you a newsletter. In such a case, the newsletter will only send direct advertising for our own similar goods or services.
The newsletter is sent by the provider Mailchimp. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
Mailchimp is a service that, among other things, can be used to organize and analyze the sending of newsletters. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), it will be stored on Mailchimp's servers in the USA.
With the help of Mailchimp, we can analyze our newsletter campaigns. When you open an email sent with Mailchimp, a file contained in the email (so-called web beacon) connects to Mailchimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked on, if any. Technical information is also collected (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. They are used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of recipients.
If you do not want analysis from Mailchimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data that we have stored for other purposes remains unaffected by this.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses
We have concluded an order processing contract (AVV) with the mail chip. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored in a blacklist by us or the newsletter service provider, if this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6 (1) (f) GDPR). Storage in the blacklist is not limited in time. You can object to storage if your interests outweigh our legitimate interest.
For more information, see Mailchimp's privacy policy at: https://mailchimp.com/legal/terms/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TXVKAA4&status=Active
Legal basis of data processing
The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG. From a GDPR perspective, data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation
Purpose of data processing
The purpose of collecting the user's email address is to deliver the newsletter.
Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored as long as the subscription to the newsletter is active.
Objection and removal option
The subscription to the newsletter can be cancelled by the affected user at any time. For this purpose, there is a corresponding link in every newsletter.
Use of third parties
To register for the newsletter, we use the Hubspot Newsletter, a service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA. As a result, the following data collected in connection with sending the newsletter is transmitted to Hubspot:
- salutation
- First name
- surname
- email address
- Desired type of study
- Desired start of studies
You can find more information about data protection at Hubspot at https://legal.hubspot.com/de/privacy-policy
This website uses Hubspot's services to send newsletters. The provider is HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA
Hubspot is a service that, among other things, can be used to organize and analyze the sending of newsletters. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), it will be stored on HubSpot's servers in the USA.
With the help of Hubspot, we can analyze our newsletter campaigns. When you open an email sent with HubSpot, a file contained in the email (so-called web beacon) connects to HubSpot's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked on, if any. Technical information is also collected (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. They are used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of recipients.
If you do not want analysis by Hubspot, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
Data processing is based on your consent (Article 6 (1) (a) GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted both from our servers and from Hubspot's servers after you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
For more information, see Hubspot's privacy policy at: https://legal.hubspot.com/de/privacy-policy
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TN8pAAG&status=Active
Contact form and email contact
Description and scope of data processing
There are several contact forms on our website, which can be used to contact us electronically or order information material. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. This data is:
At the time the message is sent, the following data is also stored:
- Date and time of sending
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy. Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively to process the conversation.
Legal basis for data processing
If the user has given consent, the legal basis for processing the data is Art. 6 para. 1 lit. a GDPR.
The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f DSGVO. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.
Purpose of data processing
The processing of personal data from the input form is for us solely to process the contact. If you contact us by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has finally been clarified.
The additional personal data collected during the sending process is regularly deleted from our web server.
Objection and removal option
The user has the option to withdraw his consent to the processing of personal data at any time. If users contact us, they can object to the storage of their personal data at any time. For this purpose, an informal message by e-mail or by mail/fax using the contact details provided at the beginning (Section I.) is sufficient. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.
If you cancel the storage, the conversation cannot be continued.
In this case, all personal data that was stored in the course of contacting us will be deleted.
Online application for a degree program
Description and scope of data processing
You can apply for a degree program on our website. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties. This data is:
At the time the message is sent, the following data is also stored:
- Date and time of registration
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy. In this context, the data will not be passed on to third parties. The data is used exclusively to process the conversation.
Legal basis for data processing
If the user has given consent, the legal basis for processing the data is Art. 6 para. 1 lit. a GDPR.
The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f DSGVO. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.
Purpose of data processing
The processing of personal data from the input form is for us solely to process the contact. If you contact us by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has finally been clarified.
The additional personal data collected during the sending process is regularly deleted from our web server.
Objection and removal option
The user has the option to withdraw his consent to the processing of personal data at any time. If users contact us, they can object to the storage of their personal data at any time. For this purpose, an informal message by e-mail or by mail/fax using the contact details provided at the beginning (Section I.) is sufficient. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.
If you cancel the storage, the conversation cannot be continued.
In this case, all personal data that was stored in the course of contacting us will be deleted.
Applying for a scholarship
Description and scope of data processing
You can apply for a scholarship on our website. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties. This data is:
At the time the message is sent, the following data is also stored:
- Date and time of registration
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy. In this context, the data will not be passed on to third parties. The data is used exclusively to process the conversation.
Legal basis of data processing
If the user has given consent, the legal basis for processing the data is Art. 6 para. 1 lit. a GDPR.
The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f DSGVO. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.
Purpose of data processing
The processing of personal data from the input form is used to process your application for a scholarship.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
The additional personal data collected during the sending process is regularly deleted from our web server.
This is the case during the registration process to fulfill a contract or to carry out pre-contractual measures when the data is no longer required to execute the contract. Even after the contract has been concluded, it may be necessary to store the contractual partner's personal data in order to comply with contractual or legal obligations.
Objection and removal option
The user has the option to withdraw his consent to the processing of personal data at any time. If users contact us, they can object to the storage of their personal data at any time.
For this purpose, an informal message by e-mail or by mail/fax using the contact details provided at the beginning (Section I.) is sufficient. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.
If storage is revoked, the course cannot be continued.
In this case, all personal data stored in the course of registration will be deleted, unless there are any overriding retention periods to the contrary. This is the case if the data is required to fulfill a contract or to carry out pre-contractual measures, which is why early deletion of the data is only possible unless contractual or legal obligations prevent deletion.
webinars
webinars
To register for webinars, we use Zapier, a service provided by Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA. As a result, the following data collected in connection with the implementation of the webinars is transmitted to Zapier:
- First name
- surname
- email address
You can find more information about Zapier's privacy policy at https://zapier.com/privacy
We also use the webinar tool Livestorm, from LIVESTORM SAS., a French registered company situated 24 rue Rodier 75009 Paris FRANCE. As a result, the following data collected in connection with the implementation of the webinars is transmitted to Zapier:
- First name
- surname
- email address
Further information about data protection at Livestorm can be found at https://livestorm.co/gdpr/
Purpose and legal basis
The webinar tools are used to communicate with prospective or existing contract partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and speed up communication with us or our company (legitimate interest within the meaning of Article 6 (1) (f) GDPR). If consent has been requested, the relevant tools are used on the basis of this consent; consent can be withdrawn at any time with effect for the future.
We have a contract for Order processing (AVV) Closed with the provider named above. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Job offers/application process
Scope with applicant data
On our website, you can use a contact form to apply to us for a vacant position. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. This data is:
At the time the message is sent, the following data is also stored:
- Date and time of registration
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy. Alternatively, you can send us your application data by e-mail. These are sent directly to the HR department and, of course, kept confidential. Appropriate technical and organizational measures ensure that your personal data is treated in accordance with legal requirements — confidentiality and security are paramount. Please note that the data is transmitted unencrypted by e-mail and that the data could be read or falsified by unauthorised persons under certain circumstances. You are welcome to send us your documents by post instead. In this context, the data will not be passed on to third parties. The data is used exclusively as part of the application process.
Scope and purpose of data collection
When you send us an application, we process your associated personal data insofar as this is necessary to decide whether to establish an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and — if you have given consent — Art. 6 para. 1 lit. a GDPR. The consent can be withdrawn at any time. Within our company, your personal data will only be shared with people who are involved in processing your application.
If the application is successful, the data you submit will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b DSGVO for the purpose of carrying out the employment relationship.
Data storage period
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have provided with us for up to 6 months from the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Article 6 (1) (f) GDPR). The data is then deleted and the physical application documents are destroyed. In particular, storage serves as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has elapsed (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.
Longer storage may also take place if you have given appropriate consent (Art. 6 para. 1 lit. a GDPR) or if legal storage obligations preclude deletion.
Rights of data subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:
Right to information
You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us.
If there is such processing, you can request the following information from the person responsible:
- the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data concerning you has been or is still being disclosed;
- the planned duration of storage of personal data relating to you or, if specific information is not possible, criteria for determining the storage period;
- the existence of a right to correct or delete personal data concerning you, a right to restrict processing by the person responsible or a right to object to this processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- all available information about the origin of the data if the personal data is not collected from the data subject;
- the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is being transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transfer.
Right to rectification
You have the right to correct and/or complete the data controller if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.
Right to restrict processing
You can request that the processing of personal data concerning you be restricted under the following conditions:
- if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to verify the accuracy of the personal data;
- the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
- the person responsible no longer needs the personal data for processing purposes, but you need them to assert, exercise or defend legal claims, or
- if you have filed an objection to processing in accordance with Article 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data — apart from storage — may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.
Right to delete
a) Obligation to delete
You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:
- The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing was based in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
- You object to processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for processing, or you object to processing in accordance with Article 21 (2) GDPR.
- The personal data concerning you was processed unlawfully.
- The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
- The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
b) Information to third parties
If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 (1) GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data controllers who process the personal data that you, as a data subject, have deleted all links to this personal data or copies or replications of this personal data from them have requested personal data.
c) Exemptions
The right to deletion does not exist insofar as processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation which requires processing under Union or Member State law to which the controller is subject, or to perform a task which is in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, insofar as the right referred to in section a) is likely to make impossible or seriously impair the achievement of the objectives of this processing, or
- to assert, exercise or defend legal claims.
Right to be informed
If you have asserted the right to correct, delete or restrict processing against the person responsible, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right vis-à-vis the person responsible to be informed about these recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the person responsible, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that
- the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR, and
- processing is carried out using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected as a result.
The right to data portability does not apply to processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible.
Right to object
For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller will no longer process your personal data unless he can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Notwithstanding Directive 2002/58/EC, you have the option to exercise your right of objection in connection with the use of information society services by means of automated procedures using technical specifications.
Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your data protection consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
Automated decision on a case-by-case basis, including profiling
The webinar tools are used to communicate with prospective or existing contract partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and speed up communication with us or our company (legitimate interest within the meaning of Article 6 (1) (f) GDPR). If consent has been requested, the relevant tools are used on the basis of this consent; consent can be withdrawn at any time with effect for the future.
We have a contract for Order processing (AVV) Closed with the provider named above. This is
You have the right not to be subject to a decision based exclusively on automated processing — including profiling — which has legal effect on you or significantly affects you in a similar way. This does not apply if the decision
- is necessary for the conclusion or performance of a contract between you and the person responsible,
- is permitted by Union or Member State legislation to which the person responsible is subject and that legislation contains appropriate measures to protect your rights and freedoms and your legitimate interests, or
- is done with your express consent.
However, these decisions must not be based on special categories of personal data under Article 9 (1) GDPR, unless Article 9 (2) lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to protect the rights and freedoms and your legitimate interests, including at least the right to obtain the action of a person from the controller, to express his own position and to challenge the decision.
about a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Right to lodge a complaint with a supervisory authority
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Helga Block, Kavalleriestrasse 2-4, 40213 Düsseldorf, phone: 02 11/384 24-0, fax: 02 11/384 24-10, e-mail: poststelle@ldi.nrw.de
Customer relationship management, analysis tools and advertising
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any independent analyses. It is only used to manage and play out the tools integrated via it. However, Google Tag Manager collects your IP address, which can also be transferred to Google's parent company in the United States.
The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Google Analytics
This website uses features of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. Here, the website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data is assigned to the user's respective device. There is no assignment to a user ID.
We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modelling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymization
We have activated the IP anonymization feature on this website. As a result, your IP address is abbreviated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Demographics in Google Analytics
This website uses the “demographic characteristics” feature of Google Analytics. As a result, reports can be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third parties. This data cannot be attributed to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the “Objection to data collection” section.
IP anonymization
We have activated the IP anonymization feature on this website. As a result, your IP address is abbreviated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Demographics in Google Analytics
This website uses the “demographic characteristics” feature of Google Analytics. As a result, reports can be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third parties. This data cannot be attributed to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the “Objection to data collection” section.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
More information about how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). In addition, targeted advertisements can be displayed based on user data available on Google (e.g. location data and interests) (target group targeting). As a website operator, we can quantitatively evaluate this data, for example by analyzing which search terms led to the display of our advertisements and how many ads led to corresponding clicks.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Google Ads Remarketing
This website uses the features of Google Ads Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to then display interest-based advertising to them in the Google advertising network (remarketing or retargeting).
In addition, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).
If you have a Google account, you can object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Further information and the privacy policy can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Google conversion tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google conversion tracking, Google and we can recognize whether the user has carried out certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to generate conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
You can find more information about Google conversion tracking in Google's privacy policy: https://policies.google.com/privacy?hl=de.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Google DoubleClick
This website uses features from Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).
DoubleClick is used to show you interest-based ads across the Google advertising network. With the help of DoubleClick, the advertisements can be tailored to the interests of the respective viewer. For example, our advertising may be displayed in Google search results or in advertising banners associated with DoubleClick.
In order to be able to display interest-based advertising to users, DoubleClick must recognize the respective viewer and be able to associate the websites they have visited, clicks and other information about user behavior. DoubleClick uses cookies or comparable recognition technologies (e.g. device fingerprinting) for this purpose. The information collected is combined into a pseudonymous user profile in order to display interest-based advertising to the user concerned.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
For more information on options to object to advertisements displayed by Google, please see the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Facebook Pixel
This website uses Facebook visitor action pixels to measure conversion. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries.
In this way, the behavior of site visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. As a result, the effectiveness of Facebook ads can be evaluated for statistical and market research purposes and future advertising measures can be optimized.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. This allows Facebook to place advertisements on Facebook pages and outside of Facebook. As the site operator, we cannot influence this use of data.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for implementing the tool on our website in a manner that is secure under data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) with regard to the data processed by Facebook directly. If you assert the rights of data subjects with us, we are obliged to forward them to Facebook.
In Facebook's privacy policy, you can find further information on how to protect your privacy: https://de-de.facebook.com/about/privacy/.
You can also use the “Custom Audiences” remarketing feature in the Ads Settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate. To do this, you must be logged in to Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active
Hubspot
This website uses HubSpot software. HubSpot is a software company from the USA with a branch in Ireland. HubSpot European Office, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland, telephone: +353 1 5187500
It is an integrated software solution for various areas of our online marketing, including:
• Content management (website and blog)
• Email marketing (newsletters and automated mailings, e.g. to provide downloads)
• Social media publishing & reporting
• Reporting (e.g. traffic sources, accesses, etc....)
• Contact management (e.g. user segmentation & CRM)
• Landing pages and contact forms
For this purpose, so-called “web beacons” are used and “cookies” are set, which are stored on your computer and enable an analysis of your use of the website. Hubspot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of visit and pages viewed) on behalf of us to provide reports on the visit and pages visited by CBS.
We also use HubSpot's live chat service “Messages” (round chat icon at the bottom right of the screen) to improve the user experience for sending and receiving messages on some sub-pages. If you agree to and use this function, the following data is transmitted to HubSpot's servers:
- Content of all chat messages sent and received
- Contextual information (e.g. page on which the chat was used)
- Optional: User's email address (if provided by the user via chat function)
This information and the content of our website are stored on HubSpot servers. They can be used by us to get in touch with visitors to our website and to determine which services from our company are of interest to them.
This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. All information we collect is subject to this privacy policy. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
Order processing contract
In accordance with Art. 28 GDPR, we have concluded an order processing contract with HubSpot and comply with the resulting requirements.
You can find out more about HubSpot's privacy policy here.
More information from HubSpot regarding EU data protection regulations is available here.
You can find more information about the cookies used by HubSpot here & here.
If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time through your browser settings or use the following opt-out link: Hubspot Opt-Out Link.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active
LinkedIn Insight Day
This website uses LinkedIn's Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Data processing through LinkedIn Insight Tag
With the help of the LinkedIn Insight Tag, we obtain information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyse the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our websites are making a purchase or other action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting feature, which allows us to display targeted advertising to visitors to our website outside the website, although, according to LinkedIn, there is no identification of the advertising addressee.
LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are truncated or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). LinkedIn members' direct IDs are deleted from LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.
As a website operator, we cannot assign the data collected by LinkedIn to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it as part of its own advertising measures. For details, see LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.
legal basis
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Insofar as consent has been obtained, the above service is used exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be withdrawn at any time. Insofar as consent has not been obtained, this service is used on the basis of Art. 6 para. 1 lit. f DSGVO; the website operator has a legitimate interest in effective advertising measures, including social media.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Objection to the use of LinkedIn Insight Tag
Opt out of LinkedIn's analysis of usage behavior and targeted advertising under the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
LinkedIn members can also control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before you visit our website.
Hotjar
This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, Europe (website: https://www.hotjar.com).
Hotjar is a tool for analyzing your user behavior on this website. With Hotjar, we can record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you have remained with the mouse pointer on a specific location. Hotjar uses this information to create so-called heat maps, which can be used to determine which areas of the website are preferred by website visitors.
We can also determine how long you stayed on a page and when you left it. We can also determine at which point you canceled your entries in a contact form (so-called conversion funnels).
In addition, direct feedback from website visitors can be obtained with Hotjar. This function is used to improve the website operator's web offerings.
Hotjar uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or the use of device fingerprinting).
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Disable Hotjar
If you would like to deactivate data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/policies/do-not-track/
Please note that Hotjar must be deactivated separately for each browser or device.
For more information about Hotjar and the data collected, please see Hotjar's privacy policy at the following link: https://www.hotjar.com/privacy
Bing Universal Event Tracking (UET)
On our website, data is collected and stored using Bing Ads technologies, from which user profiles are created using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service allows us to track the activity of users on our website when they have arrived at our website via Bing Ads ads. If you reach our website via such an ad, a cookie is set on your computer. A Bing UET tag is integrated into our website. This is a code that, in conjunction with the cookie, stores some non-personal data about the use of the website. This includes the time spent on the website, which areas of the website were accessed and which ad brought users to the website. Information about your identity is not collected.
The information collected is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days in principle.
You can prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by deactivating the setting of cookies. This may restrict the functionality of the website. In addition, Microsoft may be able to track your usage behavior across several of your electronic devices through so-called cross-device tracking and may therefore be able to display personalized advertising on or in Microsoft websites and apps. You can disable this behavior at choice.microsoft.com/en-us/opt-out. You can find more information about Bing's analytics services on the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). For more information about data protection at Microsoft and Bing, please see Microsoft's privacy policy (https://privacy.microsoft.com/de-de/privacystatement).
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000KzNaAAK&status=Active
Microsoft Advertising Remarketing
This website uses Microsoft Advertising Remarketing features. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Microsoft Advertising Remarketing enables the website operator to target you with interest-based advertising (in the form of placing ads on websites on the Internet). The tools also help us to better coordinate our online marketing measures.
Here, the website operator receives various usage data, such as browser language, IP address, page URL. This data is assigned to the user's respective device. The data is deleted as soon as it is no longer required for processing purposes. The information collected is transferred to Microsoft servers in the USA and stored there for a maximum of 1 year and 25 days
The display of advertising material during retargeting is based on a cookie-based analysis of user behavior. You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Click here to read the data processor's privacy policy https://privacy.microsoft.com/en-us/PrivacyStatement
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000KzNaAAK&status=Active
Other tools
Cloudflare (CDN)
We use the “Cloudflare” service. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”).
Cloudflare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed via the Cloudflare network. This enables Cloudflare to analyze traffic between your browser and our website and serve as a filter between our servers and potentially malicious traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users, but these are used solely for the purpose described here.
The use of Cloudflare is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 lit. f GDPR).
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.cloudflare.com/privacypolicy/.
You can find more information about security and privacy at Cloudflare here: https://www.cloudflare.com/privacypolicy/.
Order processing
We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnZKAA0&status=Active
Clearout
We use Clearout on this website. The provider is Kintegra, Inc., 2035 Sunset Lake RoadSuite B-2, 19702, Newark, Delaware, USA.
Clearout is used to ensure our email verification and validation. Clearout processes email addresses for this purpose. This information is stored at Clearout Data Location Centers in Frankfurt, Germany.
Clearout is used on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in ensuring email verification and validation (e.g. effective communication, spam protection, security, cost reduction).
We have concluded an order processing contract (AVV) for the use of the above service. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
If this is an exceptional case, data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://clearout.io/clearout-data-processing-agreement/
For more information about Clearout, please see the privacy policy and terms of use at the following links: https://clearout.io/privacy-policy/
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether the data on this website (e.g. in a contact form) is entered by a person or by an automated program. To this end, reCAPTCHA analyses the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g. IP address, time the website visitor spent on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
Data is stored and analysed on the basis of Article 6 (1) (F) GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (A) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
For more information about Google reCAPTCHA, please see the Google Privacy Policy and Google Terms of Use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Facebook plugins
Elements of the Facebook social network are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries. An overview of Facebook's social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
You can recognize the Facebook plug-ins by the Facebook logo or the “Like” button on our site. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/
When you visit our pages, the plugin creates a direct connection between your browser and the Facebook server. Facebook thus receives the information that you have visited our site with your IP address. If you click on the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please see Facebook's privacy policy at: https://de-de.facebook.com/policy.php.
Insofar as consent has been obtained, the above service is used on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be withdrawn at any time. Unless consent has been obtained, the service is used on the basis of our legitimate interest in being as visible as possible on social media. Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active
X-Plug-ins
Functions of Service X are integrated into this website. These features are offered by X Corp., Suite 900, 1355 Market Street, San Francisco, California, 94103, USA.
By using X and the “Retweet” function, the websites you visit are linked to your X account and made known to other users. Data is also transferred to X in the process. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data and its use by X. For more information, please see X's privacy policy at: https://twitter.com/privacy.
Insofar as consent has been obtained, the above service is used on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be withdrawn at any time. Unless consent has been obtained, the service is used on the basis of our legitimate interest in being as visible as possible on social media.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html. Your privacy settings for X can be found in account settings under https://twitter.com/account/settings change.
Google+ plugin
This website uses features from Google+. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Collection and sharing of information: With the Google+ button, you can publish information worldwide. The Google+ button gives you and other users personalized content from Google and our partners. Google stores both the information that you +1 for content and information about the page you viewed when you clicked +1. Your +1 can be displayed as clues together with your profile name and photo in Google services, such as in search results or in your Google profile, or elsewhere on websites and ads on the Internet.
Google records information about your +1 activities to improve Google services for you and others. In order to use the Google+ button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name is used across all Google services. In some cases, this name can also replace another name you've used when sharing content using your Google Account.
The identity of your Google profile can be shown to users who know your email address or have other identifying information about you. Use of collected information: In addition to the uses explained above, the information you provide will be used in accordance with the applicable Google privacy policy. Google may publish summarized statistics about users' +1 activities or share them with users and partners, such as publishers, advertisers, or affiliated websites.
The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
LinkedIn plugin
This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Each time you access a page on this website that contains LinkedIn elements, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website using your IP address. If you click on LinkedIn's “Recommend” button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to this website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data and its use by LinkedIn.
Insofar as consent has been obtained, the above service is used on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be withdrawn at any time. Unless consent has been obtained, the service is used on the basis of our legitimate interest in being as visible as possible on social media.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de
For more information, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.
Xing plugin
This website uses elements of the XING network. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Each time you access one of our pages that contains XING elements, a connection to XING servers is established. To the best of our knowledge, personal data is not stored. In particular, no IP addresses are stored or usage behavior is evaluated.
Insofar as consent has been obtained, the above service is used on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be withdrawn at any time. Unless consent has been obtained, the service is used on the basis of our legitimate interest in being as visible as possible on social media.
Further information on data protection and the XING share button can be found in XING's privacy policy at: https://www.xing.com/app/share?op=data_protection.
WhatsApp messaging service
You can also send us messages via the WhatsApp messaging service we use. In order to be able to communicate with you via this messaging service, we use the service provider MessengerPeople GmbH.
To do this, you must first install the WhatsApp messaging service. By doing so, you accept the service provider's terms of use and privacy policy, including, where applicable, a transfer of your data or communication to the USA. We have no influence on this, nor does the service provider we use for this purpose.
For the purpose and scope of data processing by the WhatsApp messaging service and the further processing of your data there, as well as your related rights and settings options to protect your privacy, please refer to their privacy policy:
WhatsApp, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The privacy policy is available at whatsapp.com/legal/business-policy/
The privacy policy of our service provider MessengerPeople GmbH, Herzog-Heinrich-Straße 9, 80336 Munich, is available at www.messengerpeople.com/en/privacy policy
After installing the messaging service, you must also first consent to communication via WhatsApp and sign up with our service provider so that we can answer your questions and provide you with further information about our range of courses.
MessengerPeople collects personal data in the process. This may include the following data: your user name with the messaging service, which may contain your first and last name, your telephone number, your device, all messages sent to the service, information about messages read and clicked on, and, if applicable, other information, if you have provided this in the respective chat.
This data is only processed by our service provider MessengerPeople so that we can communicate with you via the messaging service offered. Data processing by MessengerPeople is carried out on our behalf and in accordance with applicable data protection regulations. Accordingly, an order processing agreement has been concluded with MessengerPeople in accordance with Art. 28 GDPR.
This data is not passed on to third parties or only to the extent necessary to provide the service. Your data, in particular your mobile phone number, is not visible to other users. You can't send or receive messages from other users using the messaging service.
The data is stored until the purpose for storage ceases to apply or you request deletion. There is usually no longer a purpose for storing data when you log off from the messaging service.
You can object to communication via the messaging service at any time by sending a message to our service provider. To do this, you can simply send a message with “STOP”. After that, you will no longer receive any more messages via the messenger service. You can register at any time afterwards.
To delete all data you have saved immediately, please send a message with “DELETE ALL DATA” to our service provider.
In this case, the legal basis for using a messaging service is Art. 6 (1) (a) GDPR, as by registering with our service provider, you give your consent to data processing.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active
Snapchat Pixel
This website uses Snapchat's visitor action pixel to measure conversion. The provider of this service is Snap Inc. 2772 Donald Douglas Loop N, Santa Monica, CA 90405, USA. The collected data can therefore also be transferred to the USA and other third countries.
With Snapchat Pixel, the behavior of site visitors can be tracked after they have been redirected to the provider's website by clicking on a snap ad. As a result, the effectiveness of Snap ads can be evaluated for statistical and market research purposes and future advertising measures can be optimized.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
You can find more information about protecting your privacy in Snap's privacy policy: https://www.snap.com/de-DE/privacy/privacy-policy
TikTok Pixel
We have integrated the TikTok pixel on this website. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (hereinafter TikTok).
With the help of TikTok Pixel, we can display interest-based advertising on TikTok to website visitors who have viewed our offers (TikTok Ads). At the same time, we can use the TikTok Pixel to determine how effective our advertising is on TikTok by determining whether users were redirected to our website via a TikTok advertisement and what other actions (so-called conversions) they have taken on our website. As a result, the effectiveness of TikTok ads can be evaluated for statistical and market research purposes and optimized for future advertising measures.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transmission to third countries is based on the standard contractual clauses of the EU Commission. Details can be found here https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE or https://ads.tiktok.com/i18n/official/policy/controller-to-controller
Branch
This website uses metrics features from Branch. The provider of this service is Branch Metrics, Inc. 195 Page Mill Road, Suite 101 Palo Alto, CA 94306. The collected data can therefore also be transferred to the USA and other third countries.
Branch Metrics, Inc. offers a connectivity and analytics platform that enables application developers to improve end user experiences across applications and gain additional insights.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission: https://branch.io/policies/privacy-policy/#privacy-international-data-transfers
You can find more information about protecting your privacy in Branch's privacy policy: https://branch.io/policies/privacy-policy/#privacy-international-data-transfers
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000KzTJAA0&status=Active
Heap Analytics
This website uses the Heap Analytics visitor action pixel to measure conversion. The provider of this service is Heap Inc. 225 Bush Street 200, San Francisco, CA 94104, USA. The collected data can therefore also be transferred to the USA and other third countries.
To generate reports, Heap collects and analyzes user interactions on websites or apps. In this way, the behavior of site visitors can be tracked after they have been redirected to the provider's website by clicking on a heap ad. As a result, the effectiveness of heap ads can be evaluated for statistical and market research purposes and future advertising measures can be optimized.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission: https://assets.ctfassets.net/jicu8fwm4fvs/6AWQISW2unz8gv0mqnhGXj/2f230d661cb669f14c71e747c049d566/DPA-contracts_heapanalytics.com.pdf In Heap's privacy policy, you can find more information about protecting your privacy: https://www.heap.io/privacy
New Relic
This website uses features from New Relic. The provider of this service is New Relic Inc. 88 Spear St, San Francisco, CA 94105, USA. The collected data can therefore also be transferred to the USA and other third countries.
New Relic stores both necessary (consent-free) and cookies that require consent. Necessary cookies based on Art. 6 para. 1 lit. f DSGVO are stored to save the entries made by the website visitor during a session.
On the other hand, New Relic allows the website operator to track the behavior of site visitors after they have been redirected to the provider's website by clicking on a New Relic ad. As a result, the effectiveness of New Relic advertisements can be evaluated for statistical and market research purposes and future advertising measures can be optimized.
For a full list of what New Relic cookies are used for, please see the Cookie Statement section here in this privacy statement.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission: https://assets.ctfassets.net/jicu8fwm4fvs/6AWQISW2unz8gv0mqnhGXj/2f230d661cb669f14c71e747c049d566/DPA-contracts_heapanalytics.com.pdf
In Heap's privacy policy, you can find more information about protecting your privacy: https://newrelic.com/termsandconditions/privacy
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TNPiAAO&status=Active
Poptin
We use “Poptin” on this website. The provider is Poptin Ltd., Israel.
On the one hand, the service is used to ensure the security of the website. For this purpose, cookies are stored in the website visitor's browser on the basis of legitimate interest (Art. 6 para. 1 lit. f DSGVO). The website operator has a legitimate interest in protecting its web offers from misuse.
The service also stores various statistical and marketing cookies. For example, Poptin can determine whether the user has subscribed to newsletters on the website. This allows the website operator not to show the user any subscription forms that have already been filled out. These cookies are stored on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR. The consent can be withdrawn at any time.
For more information about Poptin, please see the PO Privacy Policy and the Poptin Terms of Use at the following links: https://www.poptin.com/terms-of-service and https://www.poptin.com/privacy-policy/ https://www.poptin.com/gdpr/
Eventbrite
This website uses Eventbrite features. The provider of this service is Eventbrite, Inc., 535 Mission Street, 8th Floor, San Francisco, California, 94105, USA. The collected data can therefore also be transferred to the USA and other third countries.
On the one hand, the service is used to ensure the security of the website. For this purpose, cookies are stored in the website visitor's browser on the basis of legitimate interest (Art. 6 para. 1 lit. f DSGVO). The website operator has a legitimate interest in protecting its web offers from misuse.
Eventbrite also stores statistical and marketing cookies, which enable the analysis of website visitors. For example, Eventbrite can measure whether the visitor has taken certain actions on the site (e.g. downloading content, etc.). These cookies are stored on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR. The consent can be withdrawn at any time.
For a full list of what Eventbrite cookies are used for, see the Cookie Statement section here in this privacy statement.
For more information about Eventbrite, please see the Eventbrite Privacy Policy and Eventbrite Terms of Use at the following links: https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinie-von-eventbrite?lg=de
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TNl5AAG&status=Active
hexagon
We have included the hexagon pixel on this website. The provider is the (hereinafter Hexagon Pixel). The provider is Hexagon AB (Publ), Lilla Bantorget 15 SE-111 23 Stockholm, Sweden.
With the help of the Hexagon Pixel, we can display interest-based advertising on Hexagon Pixel to website visitors who have viewed our offers. As a result, the effectiveness of Hexagon Pixel ads can be evaluated for statistical and market research purposes and future advertising measures can be optimized.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
For more information about Hexagon, please see the Hexagon Privacy Policy: https://hexagon.com/de/legal/privacy-notice
Flywire
This website uses Flywire features. The provider of this service is Flywire Inc., 1100 North Eutaw Street Suite 611 Baltimore, USA. The collected data can therefore also be transferred to the USA and other third countries.
Flywire is intended to check whether data is entered on this website (e.g. in a contact form) by a person or by an automated program (e.g. bots). Flywire also registers which server cluster serves the visitor. This is used in the context of load balancing to optimize the user experience.
Data is stored and analysed on the basis of Article 6 (1) (F) GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (A) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
For more information about Flywire, please see the Flywire Privacy Policy and Flywire Terms of Use at the following links: https://www.flywire.com/legal/privacy-policy
Clearout
We use Clearout on this website. The provider is Kintegra, Inc., 2035 Sunset Lake RoadSuite B-2, 19702, Newark, Delaware, USA.
Clearout is used to ensure our email verification and validation. Clearout processes email addresses for this purpose. This information is stored at Clearout Data Location Centers in Frankfurt, Germany.
Clearout is used on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in ensuring email verification and validation (e.g. effective communication, spam protection, security, cost reduction).
We have concluded an order processing contract (AVV) for the use of the above service. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
If this is an exceptional case, data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://clearout.io/clearout-data-processing-agreement/
For more information about Clearout, please see the privacy policy and terms of use at the following links: https://clearout.io/privacy-policy/
JobTeaser
Joint processing with JobTeaser
We cooperate with JobTeaser (https://www.jobteaser.com/de) to provide our customers with access to their services.
If you register for JobTeaser via our systems, CBS Business School Cologne and JobTeaser are joint controllers within the meaning of Art. 26 GDPR. Joint processing is carried out on the basis of Article 6 (1) (f) GDPR in conjunction with recital 48 GDPR. CBS Cologne Business School has a legitimate interest in providing its customers with the broadest possible range of professional development opportunities. Students' legitimate interests do not conflict with this, as students must proactively register with JobTeaser and are informed in advance about the joint processing.
Data protection responsibilities are regulated in a contract in accordance with Article 26 GDPR between the companies involved. JobTeaser is responsible for protecting personal data at JobTeaser. Requests from data subjects are processed by JobTeaser and, if necessary, coordinated with CBS.
Further details are set out in the agreement between CBS and JobTeaser. The main provisions of the joint responsibility agreement may be provided to data subjects by JobTeaser or the partner institution upon their request. If you have any questions, you can contact JobTeaser's data protection officer at the following address: dataprotection@jobteaser.com.
Our social media sites
Data processing through social networks
We maintain publicly available profiles on social networks. The individual social networks we use can be found below.
Social networks such as Facebook, X, etc. can usually comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (such as like buttons or advertising banners). Visiting our social media sites triggers numerous data protection-relevant processing processes. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can associate this visit with your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. In this way, interest-based advertising can be shown to you within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are logged in or were logged in.
Please also note that we cannot track all processing processes on social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.
legal basis
Our social media presence should ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The analysis processes initiated by social networks may be based on different legal bases, which must be provided by the operators of the social networks (e.g. consent within the meaning of Article 6 (1) (a) GDPR).
Responsible person and enforcement of rights
If you visit one of our social media sites (e.g. Facebook), we, together with the operator of the social media platform, are responsible for the data processing processes triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).
Please note that, despite joint responsibility with the social media portal operators, we do not have full influence on the data processing processes of the social media portals. Our options are largely based on the corporate policy of the respective provider.
Storage period
The data collected directly by us via the social media presence is deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Saved cookies remain on your device until you delete them. Mandatory legal provisions — in particular retention periods — remain unaffected.
We have no influence on the storage period of your data, which is stored by social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).
Social networks in detail
We have a Facebook profile. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta, the collected data is also transferred to the USA and other third countries.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381
For details, see Facebook's privacy policy: https://www.facebook.com/about/privacy/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active
We have an Instagram profile. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
Details on how they handle your personal data can be found in Instagram's privacy policy: https://help.instagram.com/519522125107875.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Details on how they handle your personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
youtube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Details on how they handle your personal data can be found in YouTube's privacy policy: https://policies.google.com/privacy?hl=de.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Rights of data subjects
Right to information
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:
You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us.
If there is such processing, you can request the following information from the person responsible:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data that are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you has been or is still being disclosed;
(4) the planned duration of storage of personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
(5) the existence of a right to correct or delete personal data concerning you, a right to restrict processing by the person responsible or a right to object to this processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) all available information about the origin of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is being transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transfer.
Right to disposal
Our social media presence should ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The analysis processes initiated by social networks may be based. You may have the right to correct and/or complete them vis-à-vis the person responsible if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately, on different legal bases, which must be provided by the operators of the social networks (e.g. consent within the meaning of Article 6 (1) (a) GDPR).
Right to restrict processing
Under the following conditions, you can request that the processing of personal data concerning you be restricted:
(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead demand that the use of the personal data be restricted;
(3) the person responsible no longer needs the personal data for processing purposes, but you need them to assert, exercise or defend legal claims, or
(4) if you have filed an objection to processing in accordance with Article 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data — apart from storage — may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.
Right to delete
Obligation to delete
You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:
(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent on which the processing was based in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
(3) You object to processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for processing, or you object to processing in accordance with Article 21 (2) GDPR.
(4) The personal data concerning you was processed unlawfully.
(5) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
(6) The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
Information to third parties
If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 (1) GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data controllers who process the personal data that you, as the data subject, have deleted all links to this personal data or copies or replications of this personal data from them requested personal data.
exemptions
The right to deletion does not exist insofar as processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation which requires processing under Union or Member State law to which the controller is subject, or to perform a task which is in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, insofar as the right referred to in section a) is likely to make impossible or seriously impair the achievement of the objectives of this processing, or
(5) to assert, exercise or defend legal claims.
Right to be informed
If you have asserted the right to correct, delete or restrict processing against the person responsible, the person responsible is obliged to provide all recipients
To whom the personal data concerning you has been disclosed, to notify them of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right vis-à-vis the person responsible to be informed about these recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the person responsible, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that
(1) processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR, and
(2) processing is carried out using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected as a result.
The right to data portability does not apply to processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible.
Right to object
For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
The person responsible will no longer process the personal data concerning you, unless he can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
In connection with the use of information society services — notwithstanding Directive 2002/58/EC — you have the option to exercise your right of objection by means of automated procedures that use technical specifications.
Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your data protection consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
Automated decision on a case-by-case basis, including profiling
You have the right not to be subject to a decision based exclusively on automated processing — including profiling — which has legal effect on you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the person responsible,
(2) is permitted by Union or Member State legislation to which the person responsible is subject and that legislation contains appropriate measures to protect your rights and freedoms and your legitimate interests, or
(3) is done with your express consent.
However, these decisions must not be based on special categories of personal data under Article 9 (1) GDPR, unless Article 9 (2) lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller takes appropriate measures to protect the rights and freedoms and your legitimate interests, which include at least the right to obtain the action of a person from the controller, to express his own point of view and to challenge the decision.
Right to lodge a complaint with a supervisory authority
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Helga Block, Kavalleriestrasse 2-4, 40213 Düsseldorf, phone: 02 11/384 24-0, fax: 02 11/384 24-10, e-mail: poststelle@ldi.nrw.de