Information about the Collection of Personal Data

In the following, we inform you about the collection of personal data when using our website. Personal data are all data which are obtainable from you, for example; name, address, email addresses, user behaviour.

The body responsible (controller) according to Art. 4 (7) of the EU-General Data Protection Regulation (GDPR) is the

Cologne Business School GmbH

Hardefuststr. 1

50677 Cologne

Telephone: +49 (0) 221-93 18 09-0

Telefax: +49 (0) 221-93 18 09-20

Email: study@cbs.de

https://cbs.de

See also our legal notice Imprint

You can contact our data protection officer at dataprotectionofficer@cbs.de or at our postal address with the addition of “Data Protection Officer”

When you contact us using email or using a contact-form, the personal data which you give us (your email address, possibly your name and telephone number) are stored by us to respond to your request. Data collected in this connection will be deleted when storage is no longer necessary, or usage of such data will be curtailed if a legal obligation to retain this data exists.

If for individual features of our service there is a need to employ external providers or we wish to use your data for promotional purposes, we will inform you in detail about the respective procedures below.

For security reasons and to safeguard the transmission of confidential information, for example, applications or inquiries that you send to us as the website operator, this site uses SSL- or respectively TLS-encryption. You can identify an encrypted connection in that the address bar of your web browser changes from “http://” to “https://” and a padlock icon is visible in the status bar of your browser.

General Information on Data Handling

We process our user`s personal data strictly only as far as this is necessary to provide a functioning website or is required for our contents and services. Processing our user`s personal data only occurs on a regular basis after they have given their consent. An exception applies in such cases, where for practical reasons, prior consent could not be obtained and processing this data is permitted by the legal data protection regulations.

Insofar as we obtain permission from the data subject for processing operations, Art. 6 (1) lit. a of the EU-General Data Protection Regulation (GDPR), serves as the legal basis.

When processing personal data that are necessary for the fulfilment of a contract, to which the data subject is party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies for processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

In the event that it is necessary to process data in the vital interests of the data subject or any other individual, Art. 6 (1) lit. d GDPR serves as the legal basis.

Should processing be necessary to protect the legitimate interests of our company or a third party, and where these first-mentioned interests are not overridden by the interests, fundamental rights and freedoms of the data subject, Art 6 (1) lit. f GDPR serves as the legal basis for processing.

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage of data may also take place when the European or national legislators have provided for this within European regulations, legislation or other regulations to which the responsible party is subject. Blocking or deletion of the data also takes place if the storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data to complete or fulfil a contract.

We only transfer data to third parties when this is necessary in the context of contract execution. A further transmission of the data does not take place, or only if you have expressly consented to the transmission. A transmission of the data to third parties without your expressed consent, for example, for advertising purposes, does not take place.  The basis for the data processing is Art. 6. (1) lit. b GDPR, which allows the processing of data to fulfil a contract or precontractual measures.

Provision of the website and creating logfiles

Every time our website is accessed our system automatically collects data and information from the computer system of the inquirer.

The following data are thereby collected:

  1. Information about the browser type and which version is being used
  2. The operating system of the user
  3. The IP address of the user
  4. Date and time of access
  5. Websites that are accessed by the user`s system through our website

The data are also stored in the log files of our system. This data is not stored together with other personal data of the user.

The legal basis for the temporary storage of these data and log files is Art. 6. (1) lit. f DSGVO.

Temporary storage of the IP address by the system is necessary to make it possible to deliver the website to the user`s computer. For this, the user`s IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. Additionally, the data help us to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Our legitimate interest in the processing of data according to Art. 6 (1) lit. f GDPR lies in this purpose.

The data will be deleted as soon as they are no longer necessary to fulfil the purpose for which they were collected. In the case of collecting data for delivery of the website, this is the case when the respective session is ended.

The standard configuration of our web-server is such that log files are regularly deleted automatically. However, we reserve the right to temporarily extend the storage duration of log files (manually) or individual IP addresses (manually or automatically), should legitimate security interests make this necessary.

The collection of data for the delivery of the website and the storage of these data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of the right to object on the part of the user.

Use of cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the computer system of the user. When a user opens a webpage, a cookie may be stored on the user`s operating system. This cookie contains a characteristic string which makes it possible to unequivocally identify the browser when the user visits the website again.

We use cookies to make our website more user friendly. Some elements of our web page require that the browser used may also be recognized after changing pages.

The following data are stored and transmitted in the cookies:

  1. Session ID and User ID of our live chat provider Userlike

Furthermore, we also use cookies on our website that make it possible to analyse the user`s surf behaviour.

In this way, the following data can be transmitted:

  1. Your consent to the use of cookies
  2. User-identification for Google Analytics
  3. Referer
  4. Google Click ID

 

The user data collected in this way is pseudonymised by technical means. It is therefore no longer possible to assign the data to the calling user. The data are not stored together with other personal data of the user.

When calling up our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this data privacy statement. In this context, there is also an indication as to how the storage of cookies in the browser settings can be prevented.

The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f GDPR.

The purpose of using technically essential cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is also recognized after a page change.

We need cookies for the following applications:

  1. Userlike live chat

The user data collected by technically necessary cookies are not used to create user profiles.

The use of analysis cookies is for the purpose of improving the quality of our website and its content. The analysis cookies tell us how the website is used and enable us to constantly optimise our services.

You can find out more about the analysis services used under Section XII.

Our legitimate interest in the processing of personal data according to Art. 6 (1) lit. f GDPR also lies in this purpose.

Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can still be used to their full extent.

This website uses the following types of cookies, the scope and function of which are explained below:

  1. transient cookies (see a)
  2. persistent cookies (see b).

a) Transient cookies are automatically deleted when you close your browser. These include in particular the session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.

b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.

 

c) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you will have to log in again for each visit.

Newsletter

If you send enquiries via our website, register for information events, order information material or apply for a place at university, for example, and enter your e-mail address, we may use this information to send you a newsletter. In such a case, the newsletter will only send direct advertising for our own similar goods or services.

The newsletter is sent via the provider MailChimp (see section V.6 below). The data will not be passed on to third parties.

The legal basis for the sending of the newsletter as a result of the sale of goods or services is § 7 (3) UWG.

The collection of the user’s e-mail address serves to deliver the newsletter.

The data will be deleted as soon as they are no longer necessary to accomplish the purpose for which they were collected. The user’s e-mail address will therefore be stored as long as the newsletter subscription is active.

The subscription of the newsletter can be cancelled by the respective user at any time. For this purpose, there is a corresponding link in every newsletter.

We use Zapier, a service of Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA, to subscribe to the newsletter. In this way, the following data collected in connection with the sending of the newsletter will be transmitted to Zapier:

  1. Title
  2. First name
  3. Surname
  4. Email-Address
  5. Preferred study programme
  6. Preferred starting date

Further information on data protection by Zapier can be found under https://zapier.com/privacy

This website uses the services of MailChimp for sending its newsletters.  The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service, with which amongst other things, the sending of newsletters can be organized and analysed. When you enter data for the purpose of receiving the newsletter, (for example, email address), these will be stored on MailChimp`s servers in the USA

MailChimp is certified according to the “EU-US-Privacy-Shield”. The “Privacy-Shield” is an agreement between the European Union (EU) and the USA, to ensure compliance with European data privacy standards in the USA.

With the help of MailChimp, we can analyse our newsletter campaigns. When you open an email that has been sent with MailChimp, a data set contained within the email (a so-called web-beacon) connects with MailChimp`s servers in the USA. It this way it is possible to determine if a newsletter text has been opened and which links were clicked on. Furthermore, technical information is recorded, (for example, time of retrieval, IP-address, type of browser and operating system). This information cannot be matched to a particular newsletter recipient. Its sole purpose is for the statistical analysis of newsletter campaigns. The results of these analyses can be used in future to better adapt the newsletter to the interests of the recipients.

If you do not wish to be analysed by MailChimp, you must unsubscribe from the newsletter. To enable you to do so, we provide the necessary link in every newsletter.

Data processing only takes place on the basis of your consent (Art. 6 (1) lit. a GDPR). You can revoke this content at any time by unsubscribing from the newsletter. The legality of data processing operations already completed remains unaffected by revocation.

The data deposited with us for the purpose of obtaining the newsletter will be stored by us until you unsubscribe from the newsletter. Thereafter the data will be deleted from both our servers and those of MailChimp. Data which are stored with us for other purposes, (for example, email addresses for the member`s area, remain unaffected.

For further information, see the privacy policy of MailChimp: https://mailchimp.com/legal/terms/

Contact form and Email contact

There are various contact forms available on our website which can be used for electronic contact. If a user uses this possibility, the data that are entered into the input screen are transmitted to us and stored. These data are:

FormMandatory InformationOptional Information
Alumni QuestionnaireTitle

First name

Email Address

Surname

Photo upload

Degree from CBS

What did you like best about studying at CBS?

Final academic degree

Present employer

Job title

Department

Career start following the last academic qualification (also internships/training programme)

Branch

What does your typical working day look like? (Scope of duties)

How did your studies at CBS prepare you for your present position?

What advice would you give to prospective students?

Telephone number
Other categories
Previous company
How did you hear about us?
Registration for the Alumni-NetworkTitle
First name
Surname
Email
Telephone
Maiden name
Job title
Company
How did you hear about us?
Registration for a consultation meetingTitle
First name
Surname
Email
Country
Planned starting date of your studies
Type of study
Do you have specific questions concerning your personal admission requirements?
Have you already submitted the following documents?
Curriculum vitae
Certificates respectively Transcript of Records
Date requested
Telephone number
Information concerning foreign countries noted.
Study Programme
Time slot
Telephone
How did you hear about us?
Information request

Fraud manager

Title
First name
Surname
Email
Country
Street and house number
Post code
Town/city
Please sent me information material by post

How did you hear about us?

Information request for the EMBA ProgrammeTitle
First name
Surname
Email
Starting date required
Telephone
Previous degree
How did you hear about us?
Inquiry for student residenceTitle
First Name (as given in yourpassport)
Surname (as given in yourpassport)
Email
Nationality
Country
Street
Post Code
City
Sex
Date of Birth
Place of Birth
Name of Home University
Study Programme
How long would you like to stay in the dormitory?
Date you wish to move in
Preferred room category(multiple choices possible)
Telephone number
Other categories
How did you hear about us?
Feedback: Information eventPreferred study Programme
Were you satisfied with theorganization of theinformation event?
How would you rate thecatering?
Did we meet yourexpectations?
What did you particularly like?
Was there anything that youdidn`t like?Did you think anything wasmissing?
Do you have any furthercomments?
What was your overall

impression?
Can you imagine studying at

CBS?

 

Feedback Exhibition teamStudy Programme
Number of exhibitions
Number of Information Days/Evenings
How you do find theorganization in general?
How do you find the programme team?
What do you think of the tasksin the exhibition team?Suggestions
Duration of membership in theexhibition teamOpinion on a permanentposition
Other assistance
Choice of foreign languageEmail
Type of study
Title
First name
Surname
Study Programme
Chosen language
Previous knowledge
Graphic design orderWhat exactly is needed?
Deadline
Point of contact
Email
For what reason?
For which/target group?
File upload
Project leader
Telephone
Cost centre
Short description
Request for homepage

amendments

First name
Surname
Email
Relevant URL
Confirmation
Translation
Message
Data upload
Text upload
Desired deadline for completion
Registration for information

evening

Title
First name
Surname
Email
Country
Preferred starting date
How many people will be attending?
Street and house number
Postcode
Town/City
Type of study
How did you hear about us?
Registration for information

day

Title
First name
Surname
Email
Country
Preferred starting date
How many people will be attending?
Street and house number
Postcode
Town/City
Type of study
How did you hear about us?
Contact compilation at information eventsTitle
First name
Surname
Postcode
Email
Preferred starting date
Study Programme
Preferred place to study
Event
Street and house number
Town/City
Telephone
Comment
General contact formTitle
First nameSurname
Email
Country
Type of study
Preferred starting date
Telephone number
Street
Postcode
Town/City
Type of inquiry
Company
Telephone
Relevant position
Your message for us
I would like a call back
Date
Time period
Subject of the telephone call
Please send me informationMaterial
Pease send me informationmaterial by email
How did you hear about us?
Examination of the application documents (Pre-Check)Title
First name
Surname
Email
Country
Preferred starting date
Study Programme
Document upload
Date of birth
Document upload
How did you hear about us?
Information request for

Doctorate Programme

Title
First name
Surname
Email
Country
Consent to data transfer
Your message to us
How did you hear about us?
Registration for trial studies   dayTitle
First name
Surname
Email
Telephone
Study Programme
Preferred starting date
When would you like to do

the trial studies?
Desired date
How did you hear about us?

School Challenge RegistrationTitle
First name
Surname
Street and house number
Postcode
Town/City
Email
Mobile phone
Team name
School name
Class/Year/Course
Teacher supervising the class
Confirmation of acceptance ofthe conditions of participation
How did you hear about us?
SEPA- direct debit PDF-UploadTitle
First name
Surname
Email
Study Programme
SEPA-Mandate (Data file)
Slider Information day or

evening

Name
Email
Date of information day or

evening

Weeks of study orientationTitle
First name
Surname
Email
Date
Time frame
Date
Study Programme
Telephone
Study consultation meeting
Trial studies
Comments
How did you hear about us?

 

At the time the message is sent, the following data will be stored:

 

  1. Date and time of transmission

Consent for processing your data will be obtained as part of the return procedure and you are

referred to this data privacy statement.

 

Alternatively, it is possible to make contact using the email address provided. In this case, the user`s personal data that are transmitted in the email will be stored.

 

In this context, there is no transfer of the data to third parties. The data are used solely for

processing the conversation.

The legal basis for processing data, when the subject`s consent has been given, is Art. 6 (1) lit. a GDPR

 

The legal basis for processing data that are transferred by sending an email is Art 6 (1) lit. f GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

The processing of the personal data from the input mask serves us solely for establishing contact. If you contact us by email, this is also the necessary legitimate interest required to allow us to process the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data will be deleted as soon as they are no longer necessary to accomplish the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively ascertained.

The additional personal data collected during the sending process are regularly deleted from our server.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us, he can object to the storage of his personal data at any point in time.

For this purpose, an informal notification by email or by post/fax under the contact data mentioned at the beginning (Section I.) is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

 

In the event of revocation of the storage, the conversation cannot be continued.

In this case, all personal data stored in the process of establishing contact will be deleted.

Online Application for a Study Programme

On our website you have the possibility to apply for a study programme. If a user makes use of this option, the data entered into the input mask will be transmitted to us and stored. A transfer of data to third parties does not take place. These data are:

 

FormMandatory InformationOptional Information
Exchange semesterTitle
First name
Surname
Street
House number
Postcode
Town/City
Nationality(ies)
Email
Country
International Area Code
Telephone
Country
City/Network Prefix
Mobile phone number
Date of birth
Place of birth
Home university
Faculty
Main subject
Semester at CBS
Status
Gender Study Buddy
Study Programme
University entrancequalification
Date of graduation
Country of graduation
Emergency contact name
Relationship to applicant
Email
Country
Area code
Telephone
Country
Type of study
Passport photo (data file)
Proof of English language skills (data file)
Application form (data file)
Transcript of records (data file)
Copy of passport (data file)
Bachelor`s study ProgrammesTitle
First name
Surname
Street
House number
Postcode
Town/City
Country
Nationality(ies)
Email
Country
Area code
Telephone
Date of birth
Place of birth
Study Programme
Start of study
Assessment Day
Skype
School
Country
State
(envisaged) degree
Have you already studied atanother university?
Duration of studies
Date of graduation
Country
University
Study Programme
Preferred degree
Have you done a universityaptitude test?
Name of the aptitude test?
When did you take the test?
Did you attend a preparatorycollege in Germany?
Name of the preparatorycollege
Specialisation
Did you take an assessmenttest?
Did you pass the assessmenttest?
Curriculum vitae
Most recent transcripts
Application photo
Proof of English language skills
Room for comments
EMBA-ProgrammeTitle
First name
Surname
Street
House number
Postcode
Town/City
Country
Nationality(ies)
Email
Country
Area code
Telephone
Start of studies
Date of birth
Place of birth
Study Programme
Company
Position
Telephone
Email
Street
House number
Postcode
Town/City
Country
Description of company
Size of company
Number of employees
First name Superior
Surname Superior
Position Superior
Educational institution
Course/QualificationDate of qualification
Educational institution
Course/Qualification
Date of qualification
Total length of employment
Duration of work experience as a manager
Company
Position
Length of employment
Company
Position
Length of employment
Comments
Master`s study ProgrammesTitle
First name
Surname
Street
House number
Postcode
Town/City
Country
Nationality(ies)
Email
Country
Area code
Telephone
Date of birth
Place of birth
Study Programme
Start of studies
Date
University
Country
State
Preferred degree
Letter of motivation
Curriculum vitae
Most recent transcripts
Application photo
Proof of English language skills
References
Comments
MBA ProgrammeTitle
First name
Surname
Street
House
Postcode
Town/City
Nationality(ies)
Email
Country
Area code
Telephone
Date of birth
Place of birth
Programme
Country
Start of studies
University
Country
State
(envisaged) degree
Company
Position
Length of employment
Letter of motivation
Curriculum vitae
Most recent transcript
Application photo
Proof of English language skills
References
Comments
Prep4UniversityTitle
First name
Surname
Street
House number
Postcode
Town/City
Nationality(ies)
Email
Country
Area code
Telephone
Date of birth
Place of birth
Preferred language of study
Native language
German
English
Country
Passport number
Start of studies
Preferred study programme
School
Country
State
Preferred degree
Have you already studied at another university?
Length of the studies started?
Date of completion
Country
University
Study Programme
Preferred degree
Have you done a universityaptitude test?
Name of the aptitude test?
When did you take the test?
Did you go to a preparatorycollege in Germany?
Name of the preparatorycollege
Specialisation
Did you take an assessmenttest?
Did you pass the assessmenttest?
Curriculum vitae
Copy of passport
School reportSchool leaving certificate
Transcript of records
University graduationcertificate
Language certificates
Letter of motivation
Comments
Summer ProgrammeTitle
First name
Surname
Street
House number
Postcode
Town/City
Country
Nationality(ies)
Gender
Email
Country
Network prefix
Mobile telephone number
Date of birth
Place of birth
Name of the home university
City of the home university
Country
Faculty
Study Programme/Mainsubject
Year of matriculation
Progress of studies
University entrancequalification
Year qualification was gained
Country in which thequalification was gained
Curriculum vitae
Transcript of records
Copy of passport
Name of emergency contactperson
Relationship to applicant
Email
Country
Area code
Telephone
Country
Area code
Telephone
Certificate ProgrammesTitle
First name
Surname
Street
House number
Postcode
Town/City
Country
Nationality(ies)
Email
Country
Area code
Telephone
Date of birth
Place of birth

 

At the time the message is sent, the following data will also be stored:

  1. Date and time of registration

Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data privacy statement.

The data will not be passed on to third parties in this context. The data will be used solely for the processing of the conversation.

The processing of personal data from the input mask is used to process your application for a study place.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

The additional personal data collected during the sending process are regularly deleted from our server.

This is the case during the registration process to fulfil a contract or to implement pre-contractual measures if the data are no longer necessary for the implementation of the contract. However, even after conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.

If the user has given their consent, the legal basis for the processing of the data is Art. 6 (1) lit. a and b GDPR.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us, he can object to the storage of his personal data at any point in time. For this purpose, an informal notification by email or by post/fax under the contact data mentioned at the beginning (Section I.) is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

In the event of revocation of storage, the study programme cannot be continued.

In this case, all personal data stored in the process of registration will be deleted unless this is prevented by overriding  retention periods to the contrary. This is the case if the data is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, which is why early deletion of the data is only possible if there are no contractual or legal obligations to the contrary.

Application for a scholarship

On our website you have the possibility to apply for a scholarship. If a user makes use of this function, the data entered in the input mask will be transmitted to us and stored. The data will not be passed on to third parties.

These data are:

 

FormMandatory InformationOptional Information
Application for a scholarshipTitle
First name
Surname
Email
Country
Type of study
Starting date of study
Certificates/Transcript ofRecords
Letter of motivation
Proof of social or sportingengagement
Confirmation of successfulA-Day participation
How did you hear about us?

 

At the time the message is sent, the following data will also be stored:

  1. Date and time of registration

Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data privacy statement.

The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the conversation.

If the user has given their consent, the legal basis for processing the data is Art. 6 (1) lit. a and b GDPR.

The processing of personal data from the input mask is used to enable us to process your application for a scholarship.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data will be deleted as soon as they are no longer necessary to accomplish the purpose for which they were collected.

 

The additional personal data collected during the sending process are regularly deleted from our web server.

 

This is the case during the registration process to fulfil a contract or to implement pre-contractual measures if the data are no longer necessary for the implementation of the contract. However, even after the contract has been concluded, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us, he can object to the storage of his personal data at any point in time. For this purpose, an informal notification by email or by post/fax under the contact data mentioned at the beginning (Section I.) is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

In the event of revocation of storage, the study programme cannot be continued.

In this case, all personal data stored in the course of registration will be deleted unless there are overriding grounds for retention periods to the contrary. This is the case if the data are necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, which is why premature deletion of the data is only possible if there are no contractual or legal obligations to the contrary.

Webinar

We use Zapier, a service of Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA, to register for webinars. The following data collected in connection with the execution of the webinars will thus be transmitted to Zapier:

 

First name

Surname

Email address

 

Further information on data protection at Zapier can be found at https://zapier.com/privacy

We use the webinar tool Livestorm, from the company LIVESTORM SAS, a French registered company situated at 24 rue Rodier 75009 Paris FRANCE. The following data collected in connection with the execution of the webinars will thus be transmitted to Zapier:

 

First name

Surname

Email address

Further information on data protection at Livestorm can be found at https://livestorm.co/gdpr/

Job offers/application procedures

On our website you have the possibility to apply for a vacant position via a contact form. If a user makes use of this possibility, the data entered in the input mask will be transmitted to us and stored. These data are:

 

FormMandatory informationOptional information
 Application CBS as employerTitle
First name
Surname
Street
House number
Postcode
Town/City
Nationality(ies)
Email
Country
Area code
Telephone
Date of birth
Place of birth
Earliest possible start
Salary expectations
Title
Country
Company
Position
Length of employment
Covering letter
Curriculum vitae
Certificates/References
Comments

 

At the time the message is sent, the following data will also be stored:

 

  1. Date and time of registration

 

Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data protection privacy statement. Alternatively, you can send us your application data by email. These will be sent directly to the personnel department and will of course be treated confidentially. Appropriate technical and organisational measures ensure that your personal data is treated in accordance with the statutory provisions – confidentiality and security are of the utmost importance. Please note that the data are transmitted unencrypted by email and that under certain circumstances the data may be read or falsified by unauthorised persons. If you prefer, you can send us your documents by post instead.

 

The data will not be passed on to third parties in this context. The data will only be used within the context of the application procedure.

If the user has given his consent, the legal basis for processing the data is Art. 6 (1) lit. a GDPR.

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) lit. f GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.

The processing of personal data from the input mask serves us solely to process your application. If you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Your personal data will be automatically deleted after completion of the application procedure, at the latest however after 6 months, unless you expressly consent to storage over a longer period of time.

The additional personal data collected during the sending process are regularly deleted from our web server.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us, he can object to the storage of his personal data at any point in time. For this purpose, an informal notification by email or by post/fax under the contact data mentioned at the beginning (Section I.) is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

In the event of revocation of storage, the user can no longer participate in the application process.

All personal data stored in the course of the application process will be deleted in this case, unless there are grounds for overriding retention periods to the contrary.

Rights of the data subject

If your personal data is processed, you are the data subject within the definition of the GDPR and you are entitled to the following rights with regard to the responsible body:

 You can request confirmation from the body responsible as to whether personal data relating to you will be processed by us.

In the event of such processing, you may request the following information from the data controller:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data processed;
  3. the recipients or categories of recipients to whom the personal data relating to you have been or will be disclosed;
  4. the planned duration of the retention of the personal data concerning you or, if it is not possible to provide specific information in this regard, criteria for determining the retention period;
  5. the existence of a right to rectify or erase personal data concerning you, a right to limit the processing by the controller or a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. all available information on the origin of the data, if the personal data are not collected from the data subject;
  1. the existence of automated decision-making including profiling in accordance with Art. 22 (1) and

(4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.

You have the right to have your personal data rectified and/or completed by the data controller if the personal data processed concerning you is inaccurate or incomplete. The data controller must carry out the rectification immediately.

Under the following conditions, you may request that the processing of your personal data be restricted:

  1. if you contest the accuracy of the personal data concerning you for a period of time which enables the person responsible (controller) to verify the accuracy of the personal data;
  2. if the processing is unlawful and you oppose the deletion of the personal data and request the restriction of their use instead;
  3. if the controller no longer needs the personal data for the purposes of processing, but you as the data subject, require them for the establishment, exercise or defence of legal claims;
  4. if you have objected to data processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override yours as the data subject.

 

Where the processing of personal data concerning you has been restricted, such data may not be processed, with the exception of their storage, without your consent or only for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or of a Member State. If the processing restriction has been limited in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

  1. a) Obligation to delete

 

You may request the data controller to delete the personal data concerning you without due delay and the data controller is obliged to delete such data without due delay where one of the following grounds apply:

  1. the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. you revoke your consent on which the processing was based pursuant to Art. 6 (1) lit. a or Art. 9 para. 2 lit. a GDPR and where there is no other legal ground for the processing.
  3. you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding

legitimate reasons for the data processing or you object to the processing pursuant to Art. 21 (2) GDPR.

  1. the personal data concerning you have been processed unlawfully.
  2. the deletion of your personal data is necessary to fulfil a legal obligation under European Union law or the law of the Member States to which the data controller is subject.
  3. the personal data relating to you have been collected in relation to services offered by the Information Society pursuant to Art. 8 (1) GDPR.

 

  1. b) Information to third parties

 

If the person responsible has made personal data concerning you public and is obliged to delete them in accordance with Art. 17 (1) GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the persons responsible for data processing who process the personal data that you, as the person concerned, have requested them to delete all links to this personal data or copies or replications of this personal data.

 

  1. c) Exceptions

 

The right to deletion does not exist if the processing is necessary:

  1. to exercise the right to freedom of expression and information;
  2. to fulfil a legal obligation which processing is subject to under the law of the European Union or of the Member States to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official  authority vested in the controller;
  3. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
  4. for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the law referred to in Section a) is likely to make it impossible or seriously impair the attainment of the objectives of such processing, or
  5. to enforce, exercise or defend legal claims.

If you have exercised your right to rectify, cancel or limit the processing of your personal data by notifying the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of the rectification, cancellation or limitation of the processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of such recipients by the data controller.

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, conventional and machine-readable format. In addition, you have the right to communicate these data to another data controller without hinderance from the controller to whom the personal data was made available, provided that the processing is based on a consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract in accordance with Art. 6 (1) lit. b GDPR and processing is carried out using automated procedures.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons shall not be adversely affected by this.

The right to data transfer does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Art. 6 (1) lit. e or f GDPR; this also applies to profiling based on these provisions.

The person responsible will no longer process the personal data unless he can demonstrate compelling legitimate grounds for processing which outweigh your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling to the extent that it is connected with such direct marketing. If you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. In connection with the use of Information Society services, and  notwithstanding Directive 2002/58/EC, you have the possibility to exercise your right of objection by automated  procedures using technical specifications.

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until you revoke it.

You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or similarly significantly affects you. This does not apply if the decision

  1. is necessary for the entering into or performance of a contract between you and the controller,
  2. is authorised by legislation of the European Union or of the Member States to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
  3. is based on your explicit consent.

However, these decisions may not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g GDPR applies and suitable measures have been taken to protect your rights and freedoms as well as your legitimate interests. With regard to the cases referred to in (1) and (3), the data controller shall implement suitable measures in order to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the data controller, to express his or her own point of view and to contest the decision.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Helga Block, Kavalleriestraße 2-4, 40213 Düsseldorf, Telephone: 02 11/384 24-0, Telefax: 02 11/384 24-10, Email: poststelle@ldi.nrw.de

Analysis tools and advertising

This website uses functions of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre  Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will typically be transmitted to and stored by Google on servers in the United States.

Google Analytics cookies are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP Anonymisation

We have activated the IP anonymization function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in some exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

Browser Plugin

You may block the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your information from being collected on future visits to this website: Disable Google Analytics.

For more information on how Google Analytics uses user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

We have concluded a cooperation agreement with Google for contract data processing and fully implement the strict requirements of the German and European data protection authorities when using Google Analytics.

Demographic characteristics of Google Analytics

This website uses the function “demographic features” of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and visitor data from third parties. This information cannot be associated with any specific individual. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit Google Analytics from collecting your data as described under “Objection to data collection”.

This website uses Google AdWords. AdWords is an online-advertising programme from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

Within the framework of Google AdWords, we use so-called conversion tracking. If you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser places on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not expired, Google and we can detect that the user clicked on the ad and was directed to that page.

Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through AdWords customer websites. The information collected from the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers will be notified of the total number of users who clicked on their ad and were directed to a page with a conversion tracking tag. However, they will not receive information that personally identifies users. If you do not wish to participate in tracking, you can easily opt out of this by turning off the Google conversion tracking cookie in your Internet browser under User Preferences. You will then not be included in the conversion tracking statistics.

Conversion cookies are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

More information about Google AdWords and Google Conversion Tracking can be found in Google’s privacy policy: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and you then only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Our website uses the visitor action pixel of Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) to measure conversion.

This allows us to track the behaviour of site visitors after they are redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and to optimise future advertising efforts.

The data we collect is anonymous to us as the operator of this website and we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines. This may allow Facebook to place advertisements on Facebook pages and outside Facebook. This use of data cannot be influenced by us as the site operator.

See Facebook’s Privacy Notice for more information about protecting your privacy: https://www.facebook.com/about/privacy/.

You can also disable the custom audiences remarketing feature in the advertisement settings section of https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can disable Facebook’s usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Alternatively, deactivate the Facebook pixel on this page by clicking on the following link: Disable Facebook Pixel.

This website uses software from HubSpot. HubSpot is an American software company with a subsidiary in Ireland.  HubSpot European Office, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland, Telephone: +353 1 5187500.
It provides an integrated software solution for various areas of our online marketing, including, amongst others:

 

  • Content Management (Website and Blog)
  • Email Marketing (Newsletter as well as automated mailings, e.g. to provide downloads)
  • Social Media Publishing & Reporting
  • Reporting (e.g. traffic sources, accesses, etc. …)
  • Contact management (e.g. user segmentation & CRM)
  • Landing pages and contact forms

 

For this purpose, so-called “web beacons” are used and “cookies” are set, which are stored on your computer and enable an analysis of your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of visit and pages called up) on our behalf in order to enable reports on the visit and which CBS pages were visited.

We also use HubSpot’s live chat service “Messages” (round chat icon at the bottom right of the screen) to improve the user experience when sending and receiving messages on some sub-pages. If this function is authorized and used, the following data will be transmitted to HubSpot’s servers:

 

  • Content of all chat messages sent and received
  • Context information (e.g. page on which the chat was used)
  • Optional: User’s email address (if provided by user via chat function)

 

This information and the contents of our website are stored on HubSpot servers. They can be used by us to contact visitors to our website and to determine which of our company’s services are of interest to them.

This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. All information collected by us is subject to this data protection statement.

In accordance with Art. 28 GDPR, we have signed an order processing contract with HubSpot and comply with the resulting requirements.

HubSpot is certified under the terms of the EU – U.S. Privacy Shield Framework and is subject to the TRUSTe ‘s Privacy Seal and the Swiss-U.S. Privacy Shield Framework.

You can find out more about HubSpot’s privacy policy here.

More information from HubSpot regarding the EU data protection regulations can be found here.

More information on the cookies used by HubSpot can be found here & here.

If you generally do not wish HubSpot to record your data, you can prevent the storage of cookies at any time by changing your browser settings or use the following opt-out link: Hubspot Opt-Out Link.

On our website we use the analysis software Hotjar, a product of Hotjar Ltd. (http://www.hotjar.com), which is located at 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe, to measure and evaluate the usage patterns of our visitors. Data collected includes, among other things, clicks on links and graphics files, mouse movements and scroll heights. Hotjar uses the tracking code and website visit cookies to collect information that is transferred and stored on the Hotjar server in Ireland.

Information that can be recorded during a visit to a website are:

  • an anonymous format of the IP address of the client device
  • the email address and the first and last name of the visitor, if the information was entered via the website
  • Screen size of the client device
  • Device type and browser information
  • Country of access
  • Preferred language for website viewing
  • Log data

In addition, further data is automatically generated by the servers of the Cologne Business School during Hotjar use:

  • Related domain
  • Pages visited
  • Country of access
  • Preferred language for website viewing
  • Date and time of access

This information forms the basis for the Hotjar software, which evaluates the website visit, generates usage reports and analyses other services relating to website use and internet evaluation of services on the website.

Hotjar also uses third-party services, such as Google Analytics, for its data analysis. Information such as cookies and IP requests may be stored by third parties during a visit to the website. For more information about Google Analytics’ data storage and use, see:

www.policies.google.com/privacy

The storage period of cookies used by Hotjar can vary from the period of the website visit to up to one year.

If you do not consent to data collection by Hotjar, you can prevent this using the following link: https://www.hotjar.com/opt-out

Social media

Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are incorporated on our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our page. You can find an overview of the Facebook plugins here:

https://developers.facebook.com/docs/plugins/.

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we do not receive any knowledge of the content of the data transmitted or its use by Facebook. Further information can be found in Facebook’s privacy policy at: https://de-de.facebook.com/policy.php. If you do not want Facebook to be able to assign visits to our pages to your Facebook user account, please log out of your Facebook user account.

Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter. We would like to point out that, as the provider of the pages, we do not have any knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in Twitter’s data protection statement at:

https://twitter.com/privacy.

 

You can change your data protection settings on Twitter in the account settings at

https://twitter.com/account/settings

Our pages use Google+ functions. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

 

Collection and dissemination of information:

You can use the Google+ button to publish information worldwide. The Google+ button gives you and other users personalized content from Google and our partners. Google stores both information that you gave +1 for an item and information about the page you viewed when you clicked +1. Your +1 may appear as references along with your profile name and photo in Google services, such as search results or your Google profile, or elsewhere on websites and ads on the internet.

Google records information about your +1 activity to improve Google services for you and others. To use the Google+ button, you need a globally visible, public Google profile that includes at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.

Use of the information collected:

In addition to the uses described above, the information you provide will be used in accordance with applicable Google privacy policies. Google may publish or share aggregated statistics about users’ +1 activity with users and partners, such as publishers, advertisers, or affiliates.

Our website uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time you visit one of our pages that contains LinkedIn features, a connection is established to LinkedIn servers. LinkedIn will be notified that you have visited our web pages with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn will be able to associate your visit to our site with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the  transmitted data or its use by LinkedIn.

Further information on this can be found in LinkedIn’s data protection declaration at:

https://www.linkedin.com/legal/privacy-policy.

Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Each time you access one of our pages that contains XING functions, a connection is established to XING servers. To the best of our knowledge, personal data is not stored. In particular, no IP addresses are stored, and the usage behaviour is not evaluated.

Further information on data protection and the XING Share button can be found in the XING Privacy Policy at: https://www.xing.com/app/share?op=data_protection

 

Status of the data privacy statement: 18.05.2018

Stand der Datenschutzerklärung: 18.05.2018

Contact

Data Protection Coordinator

Sandro Selmi

+49 (0) 221 93 18 09-44

CBS Cologne Business School GmbH is a part of the Stuttgart based Klett Group.
The Klett Group is one of Europe’s leading education-dedicated enterprises, with 67 companies at 33 sites in 15 countries.
Cologne Business School © 1993-2018 | Imprint | Data Protection