Privacy Policy

About the protection of your data

Privacy Policy

We are pleased that you are visiting our website and thank you for your interest in our company.

In this Privacy Policy, we inform you about which personal data we process during your visit to our website and which rights you have. With regard to the terminology used in this Privacy Policy, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, your address and communication data, or your email address.

Processing means any operation or set of operations performed, with or without the aid of automated procedures, in connection with personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Data subject means any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

Controller or “controller responsible for processing” means the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

1. Name and address of the controller

Alanus Hochschule gGmbH
Villestraße 3, 53347 Alfter
Germany

Phone: 02222 / 93210
Email: info@alanus.edu

2. Data Protection Officer

You can contact our Data Protection Officer by email at datenschutz@alanus.edu or by post at our postal address with the addition “The Data Protection Officer”.

3. Data processing in third countries

We process personal data or have personal data processed in third countries outside the European Union (EU) or the European Economic Area (EEA) only if either explicit consent has been given, an adequate level of data protection in that third country has been recognized (currently recognized as safe third countries: Andorra, Argentina, Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, Canada (restricted), New Zealand, Republic of Korea, Switzerland, Uruguay, United Kingdom), or if contractual obligations have been entered into through standard contractual clauses or corresponding certifications exist. This also applies if processing takes place in the context of the disclosure or transfer of data to other persons, bodies, or companies.

Among other things, we use services and tools from companies based in third countries that are not considered secure under data protection law. This may also include providers based in the USA that are not certified under the EU-US Data Privacy Framework (DPF for short – https://www.dataprivacyframework.gov/s/). If these services and tools are active, your personal data may be transferred there and processed there. Please note that in such cases, a level of data protection comparable to that of the EU cannot be guaranteed.

Within the framework of the DPF, the USA generally has a level of data protection comparable to that of the EU. A data transfer to recipients in the USA is therefore permissible if the relevant recipient is certified under the “EU-US Data Privacy Framework” (DPF) or if suitable additional safeguards are in place. Suitable safeguards may include standard data protection clauses pursuant to Art. 46 para. 2 lit. d) GDPR, but also binding internal data protection rules (so-called Binding Corporate Rules pursuant to Art. 46 para. 2 lit. b) in conjunction with Art. 47 GDPR).

The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. A company certified under the DPF has committed itself to act in accordance with this data protection standard.

4. General information on the processing of your personal data

For the processing operations described below, unless otherwise stated, you as an interested party, communication partner, or user of, for example, the website or online service, are the data subject within the meaning of the GDPR.

Your data is often collected because you provide it to us. This may, for example, be data that you enter into a contact form or otherwise make available to us.

Other data is collected automatically by our IT systems or after your consent when you visit the website. This primarily concerns technical data (e.g. internet browser, operating system, or time the page was accessed). This data is collected automatically as soon as you enter this website.

Unless further specific storage periods are stated in the following sections of this Privacy Policy, we delete your personal data when the purpose for processing this data has been fulfilled. If you assert a request for deletion or revoke consent to data processing, your data will be deleted unless there are other compelling legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods, assertion or defense of legal claims). If the latter is the case, deletion will take place as soon as these reasons no longer apply.

If you have given your consent, we process your personal data on the legal basis of Art. 6 para. 1 lit. a) GDPR. If you have consented to the storage of cookies or to access to information on your end device (e.g. via device fingerprinting), the data processing is additionally based on Section 25 para. 1 TDDDG (Telecommunications Digital Services Data Protection Act). You may revoke your consent at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the legal basis of Art. 6 para. 1 lit. b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The relevant legal bases in each individual case are addressed in the following sections of this Privacy Policy.

Data is only disclosed to third parties within the scope of the statutory provisions. We only disclose your data to third parties if this is necessary, for example, on the basis of Art. 6 para. 1 lit. b) GDPR for contractual purposes or on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR in the economic and effective operation of our business.

Within the framework of commissioned processing under data protection law pursuant to Art. 28 GDPR, we use service providers who may, as part of their tasks, gain knowledge of your personal data. We have therefore agreed appropriate legal, technical, and organizational measures with the service providers to ensure the protection of personal data in accordance with the applicable statutory provisions. Contracts required under data protection law ensure that your personal data is processed only in accordance with our instructions and in compliance with the GDPR.

5. Data security

We take technical, contractual, and organizational measures to ensure the security of data processing in accordance with the state of the art. In this way, we ensure that the provisions of data protection laws, in particular the GDPR, are observed and that the data processed by us is protected against destruction, loss, alteration, and unauthorized access.

These security measures also include the encrypted transmission of data between your browser and our servers.

For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address line begins with “https://” and by the lock symbol in your browser line.

Encryption protects data transmission against illegal access to data by third parties. If this option is not available, you can also decide not to send certain data over the internet.

6. Duration of storage

Unless specific storage periods are stated within this Privacy Policy, we process your personal data until the purpose of the data processing no longer applies. If you assert a justified request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods); in the latter case, deletion will take place as soon as these reasons no longer apply.

7. Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent.

You can revoke your consent at any time with the same ease by clicking the link “Cookie Settings” available on every page and changing your selection. Revoking consent is therefore just as easy as granting it (Section 25 para. 1 sentence 4 TDDDG in conjunction with Art. 7 para. 3 sentence 4 GDPR).

You may revoke any consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

8. Obligation to provide personal data

The provision of personal data is neither legally nor contractually required. You are not obliged to provide personal data. However, failure to provide certain data may mean that we cannot offer our services, or cannot offer them in full.

9. Automated decision-making including profiling

No decision based solely on automated processing – including profiling – that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR) takes place on our website.

However, we use services (e.g. Google Analytics, Facebook Pixel, LinkedIn Insights Tag, Microsoft Clarity) that analyze your usage behavior and may create user profiles for advertising purposes. These processing operations are carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a) GDPR) and are not intended to make decisions with legal or similarly significant effects concerning you.

10. Your rights

If we process personal data relating to you, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and you have the following rights with regard to your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to notification to recipients in the event of rectification, erasure, or restriction (Art. 19 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)

Special right to object in the case of direct marketing (Art. 21 para. 2 GDPR): If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

An overview of the German supervisory authorities can be found at https://www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html.

The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information
Heilbronner Str. 35
D-70191 Stuttgart

P.O. Box 10 29 33
D-70025 Stuttgart

Website with further contact details:
https://www.baden-wuerttemberg.datenschutz.de/

11. Visiting our website

11.1. Scope of data processing

When you visit our website, your browser transmits certain data to our web server for technical reasons. This concerns the following data (so-called server log files):

Name and URL of the retrieved file
Date and time of retrieval
Amount of data transferred
Message about successful retrieval (HTTP response code)
Browser type and browser version
Operating system
Referrer URL (i.e. the previously visited page)
Websites accessed by the user’s system via our website
User’s internet service provider
IP address and requesting provider

This data is not stored together with other personal data of the users.

11.2. Purpose of data processing

The temporary storage of the user’s IP address by our web server is technically necessary in order to display the website. For this purpose, the user’s IP address must necessarily remain stored for the duration of the session.

We use this log data without assigning it to your person or creating other profiles for statistical evaluations for the purpose of operating, securing, and optimizing our online offering, but also for the anonymous recording of the number of visitors to our website (traffic) as well as the extent and type of use of our website and services, and also for billing purposes in order to measure the number of clicks received from cooperation partners.

11.3. Legal basis for processing

We collect this data on the basis of our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR in order to be able to display and operate our website and ensure the security of our website.

11.4. Duration of storage

The data mentioned above will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of collecting data for the provision of the website, this is the case when the respective session has ended.

For security reasons (e.g. to investigate misuse or fraud), information in the log files is stored for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.

11.5. Right to object and removal option

The collection of data for the provision of the website and its storage in log files is absolutely necessary for the operation of our website for technical reasons. Consequently, the user has no option to object.

11.6. Further information on data processing

We host our website in Germany with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (Hetzner for short). When you visit our website, Hetzner collects various log files including your IP addresses. Details can be found in Hetzner’s Privacy Policy at https://www.hetzner.com/de/legal/privacy-policy. We have concluded a data processing agreement (DPA) with Hetzner pursuant to Art. 28 GDPR. The server location is Germany; no transfer to a third country takes place.

12. Email contact

12.1. Scope of data processing

You can contact us by email. Depending on your request, different email addresses are available on our website. If you write to us by email, we process the personal data transmitted with that email.

12.2. Purpose of data processing

We process this personal data in order to handle your request.

12.3. Legal basis for processing

The legal basis for processing the data transmitted in the course of contacting us by email is Art. 6 para. 1 lit. f) GDPR (our legitimate interests as controller in the effective and targeted handling of your request). If the email contact is aimed at concluding a contract, then Art. 6 para. 1 lit. b) GDPR is an additional legal basis for processing (performance of a contract).

12.4. Recipients of the data

Your personal data will be transmitted to the internal departments responsible for handling your request (e.g. Sales).

12.5. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose of its processing. For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified and no statutory retention periods apply.

12.6. Right to object

You have the option at any time to object to the processing of your personal data. In this case, the conversation cannot be continued. Please address an objection to the communication channels mentioned above. All personal data stored in the course of contacting us will be deleted in this case, provided that no statutory retention obligations prevent deletion.

13. Contact by telephone

13.1. Scope of data processing

If you contact us by telephone, we process the data you provide (your telephone number, your name, your company, where applicable your email address, and your request) in order to handle your contact request and answer your questions.

13.2. Purpose of data processing

We process your personal data in order to handle your contact request and your inquiry.

13.3. Legal basis for processing

The legal basis for processing the data transmitted during the telephone call is Art. 6 para. 1 lit. f) GDPR for general inquiries. Our legitimate interest lies in the effective and targeted handling of your request in order to maintain our business communication. In view of the contact initiated by you, there are no overriding interests on your part that oppose the processing.

If the telephone call is aimed at concluding a contract, the legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

13.4. Recipients of the data

Your personal data will be transmitted to the internal departments responsible for handling your request (e.g. Sales).

13.5. Duration of storage

We delete personal data when it is no longer required to achieve the purpose for which it was collected or restrict it if statutory retention obligations exist. For the personal data you have provided to us by telephone, this is the case when it can be inferred from the circumstances that the matter or inquiry in question has been conclusively clarified.

13.6. Right to object

14. Contact via contact or registration form

14.1. Scope of data processing

If you send us inquiries or registrations via a contact or registration form, the information you provide in the form, including the contact data you enter there, will be stored by us for the purpose of processing your request and in the event of follow-up questions. We do not pass this data on without your consent.

14.2. Purpose of data processing

We process your personal data in order to handle your contact request and your inquiry.

14.3. Legal basis for processing

The legal basis for processing the data transmitted in the course of contacting us is Art. 6 para. 1 lit. f) GDPR for general inquiries.

Our legitimate interest lies in the effective and targeted handling of your request in order to maintain our business communication. In view of the contact initiated by you, there are no overriding interests on your part that oppose the processing.

If the contact is aimed at concluding a contract, the legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

14.4. Recipients of the data

Your personal data will be transmitted to the internal departments responsible for handling your request (e.g. Sales or Administration).

14.5. Duration of storage

We delete personal data when it is no longer required to achieve the purpose for which it was collected or restrict it if statutory retention obligations exist. For the personal data you have provided to us via a form, this is the case when it can be inferred from the circumstances that the matter or inquiry in question has been conclusively clarified.

14.6. Right to object

You may object to the storage of your personal data at any time. In this case, our conversation can no longer be continued. Please direct such a revocation to the communication channels mentioned above. All personal data stored in the course of contacting us will be deleted in this case, provided that no statutory retention obligations prevent deletion.

15. Processing in the context of audio and video conferences

15.1. Scope of data processing

Among other things, we use online conference tools to communicate with you.

We primarily use Zoom. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA (hereinafter referred to as Zoom).

The conference tool collects all data that you provide/use to use the tools (e.g. email address and/or your telephone number, content data). In addition, the duration of the conference, the start and end (time) of participation in the conference, the number of participants, and other “context information” related to the communication process (metadata) are processed.

In addition, the provider of the tool processes all technical data necessary for handling the online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.

If content is exchanged, uploaded, or otherwise made available within the tool, this is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, audio files, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have full influence over the data processing operations of the tools used.

15.2. Purpose of data processing

The tool used supports us in effective and targeted communication with you.

15.3. Legal basis for processing

The service or tool is used in the context of contract performance or to clarify pre-contractual contexts in order to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b) GDPR).

Furthermore, our legitimate interest lies in the general simplification and acceleration of our communication with you (Art. 6 para. 1 lit. f) GDPR).

If consent has been requested (e.g. consent to the recording of calls or video conferences), the use of the tool or functionalities of the tool is based on this consent; consent may be revoked at any time with effect for the future (Art. 6 para. 1 lit. a) GDPR). If you communicate with us via video or audio conference over the internet, your personal data will be collected and processed by us and by the provider of the respective conference tool.

15.4. Duration of storage

The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

Stored cookies remain on your end device until you delete them yourself. We have no influence over the storage period of your data that is stored by the operator of the conference tool for its own purposes. For details, please contact the operators of the conference tool directly.

15.5. Right to object and removal option

You may object at any time, with effect for the future, to the processing of your personal data via the communication channels set out above. In this case, the service may not be able to be provided fully or conclusively, or may no longer be able to be provided.

15.6. Further information on data processing

Further information on terms of use and data protection at Zoom can be found at: https://zoom.us/de-de/privacy.html and https://zoom.us/docs/de-de/privacy-and-legal.html.

We have concluded a data processing agreement (DPA) with the provider pursuant to Art. 28 GDPR.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:

https://www.dataprivacyframework.gov/participant/5728

In addition, the standard contractual clauses of the European Commission are used. Further information: https://zoom.com/de/trust/gdpr/

16. Cookies

16.1. Scope of data processing

Our website uses cookies. Cookies are small text files that are stored on your computer when you access our website. Cookies do not cause any damage to your computer and do not contain malware such as viruses or Trojans.

Depending on their purpose, they are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device.

Cookies contain a characteristic string of characters that enables the browser or previously selected settings to be uniquely identified when the website is accessed again.

We use cookies that are technically absolutely necessary for the operation of our website, cookies that serve analysis and marketing purposes, and cookies that we use to make your visit to our website more convenient.

Some cookies are also placed by third-party companies that appear on our pages. This enables us or you to use certain services of the third-party company.

As part of informed consent when you first access our website, you can decide for yourself whether or not you wish to accept cookies or services that are not necessary for the technical functions of the website.

Specifically, we use the cookies listed below on our website:

Table:

Cookie	Domain	Type	Description	Duration
_fbp	.alanus.edu	Marketing	This cookie is set by Facebook to display advertising after you visit the website on Facebook or on a digital platform supported by Facebook advertising.	3 months
_ga	.alanus.edu	Analytics/Statistics	The _ga cookie, installed by Google Analytics, calculates visitor, session, and campaign data and also tracks website usage for the website analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.	2 years
_gat	.alanus.edu	Analytics/Statistics	This cookie is installed by Google Universal Analytics to limit the request rate and thus restrict data collection on heavily frequented websites.	1 minute
_gcl_au	.alanus.edu	Analytics/Statistics	Set by Google Tag Manager to test the advertising efficiency of websites using its services.	3 months
_gid	.alanus.edu	Analytics/Statistics	The _gid cookie installed by Google Analytics stores information about how visitors use a website and at the same time creates an analytics report on website performance. The data collected includes the number of visitors, their source, and the pages they visit anonymously.	1 day
AnalyticsSyncHistory	.linkedin.com	Marketing	No description	1 month
bcookie	.linkedin.com	Marketing	LinkedIn sets this cookie from LinkedIn Share Buttons and Ad Tags to recognize the browser ID.	2 years
bscookie	.www.linkedin.com	Marketing	LinkedIn sets this cookie to store actions performed on the website.	2 years
fr	.facebook.com	Marketing	Contains a unique browser and user ID used for targeted advertising.	1 year
CONSENT	.youtube-nocookie.com	Functional	YouTube sets this cookie via embedded YouTube videos and records anonymous statistical data.	2 years
IDE	.doubleclick.net	Marketing	Google DoubleClick IDE cookies are used to store information about how the user uses the website in order to present relevant advertising based on the user’s profile.	1 year 24 days
lang	.ads.linkedin.com	Marketing	LinkedIn sets this cookie to remember a user’s language setting.	Session
lang	.linkedin.com	Marketing	LinkedIn sets this cookie to remember a user’s language setting.	Session
li_gc	.linkedin.com	Marketing	No description	2 years
lidc	.linkedin.com	Marketing	LinkedIn sets the lidc cookie to facilitate data center selection.	1 day
test_cookie	.doubleclick.net	Marketing	The test_cookie is set by doubleclick.net and is used to determine whether the user’s browser supports cookies.	15 minutes
UserMatchHistory	.linkedin.com	Marketing	LinkedIn sets this cookie for synchronization of the LinkedIn Ads ID.	1 month
yt-remote-connected-devices	youtube-nocookie.com	Functional	YouTube sets this cookie to store the user’s video preferences for embedded YouTube videos.	No expiration date
yt-remote-device-id	youtube-nocookie.com	Functional	YouTube sets this cookie to store the user’s video preferences for embedded YouTube videos.	No expiration date

Third-country transfer

You can view and change your settings for cookies and other third-party services at any time via the following link “Cookie Settings”.

16.2. Purpose of data processing

On the one hand, we use cookies to make our website attractive and user-friendly, to improve it, and to speed up requests. These essential cookies are required for the smooth access to our website. Some cookies are also necessary to provide functions requested by you.

We use additional cookies for the statistical analysis of our website and, where applicable, also for marketing and personalization purposes. For example, we would like to find out how and when visitors use our website or to provide them with route planning functions and other services.

16.3. Legal bases

If you have consented to the use of cookies when visiting our website, the sole legal bases are Art. 6 para. 1 lit. a) GDPR (declared consent) and Section 25 para. 1 TDDDG.

The legal basis for the use of essential cookies necessary for the operation of the website is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the (economic and secure) operation, functionality, and improvement of our services.

16.4. Duration of storage

We use transient and persistent cookies.

Transient cookies include, in particular, so-called session cookies, which are automatically deleted when you close the browser.

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

16.5. Right to object, withdrawal, and removal option

By changing the settings in your internet browser, you can configure it so that cookies are not stored or are automatically deleted at the end of your internet session, thereby objecting to the processing. To do this, select “do not accept cookies” in your browser settings.

Please refer to your browser’s help function to find out how to delete or prevent cookies in the specific browser you are using.

Please note that if cookies are deactivated, you may not be able to use all functions of our website.

In addition, you can view and change your settings for cookies and other third-party services at any time via our “Cookie Settings” on this website and revoke any consent you may have given for the future. Revoking consent is as easy as the original granting of consent (Section 25 para. 1 TDDDG).

17. Google Analytics

17.1. Scope of data processing

We use “Google Analytics” on our website, a web analytics service provided by “Google” (responsible service provider in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

In Google Analytics, interactions of website visitors are recorded and systematically evaluated.

Google Analytics enables the website operator to analyze the behavior of website visitors.

In this process, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

Furthermore, we can use Google Analytics to record, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modeling approaches to supplement the recorded data sets and employs machine learning technologies in data analysis.

Technologies are used that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally also transmitted to a Google server in the USA and stored there.

Google Analytics 4 anonymizes IP addresses by default and automatically; a complete IP address is not stored by Google.

17.2. Purpose of data processing

The processing of the user’s personal data (website visitors) with the help of Google Analytics enables us to analyze the browsing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us improve our website and its user-friendliness.

17.3. Legal basis for data processing

The legal basis for processing personal data is Art. 6 para. 1 lit. a) GDPR (consent) and Section 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. fingerprinting) within the meaning of the TDDDG.

17.4. Duration of storage

The data stored within the framework of Google Analytics is automatically deleted in accordance with the retention period of 14 months set by us in Google Analytics. After this period has expired, the data is anonymized.

17.5. Recipients of the data

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as processor. For this purpose, we have concluded a data processing agreement with Google. Google LLC, based in California, USA, and, where applicable, US authorities may access the data stored by Google.

17.6. Right to object and removal option

You can prevent the storage of cookies by making the appropriate setting in your browser software (see the section “Right to object, withdrawal, and removal option” in the “Cookies” section).

You can also prevent Google Analytics from using your data on our website by means of a browser add-on for deactivating Google Analytics JavaScripts (ga.js, analytics.js, dc.js).

If you would like to deactivate Google Analytics, you can download and install the deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=de .

As an alternative to the browser add-on, or within browsers on mobile devices, please click the link provided below this paragraph to prevent Google Analytics from collecting data within this website in the future (the opt-out only works in that browser and only for this domain). An opt-out cookie will be stored on your device. If you delete your cookies in this browser, you must click this link again. Deactivate Google

17.7. Further information on data processing

Further information on terms of use and data protection at Google can be found at: https://www.google.com/analytics/terms/de.html, https://marketingplatform.google.com/intl/de/about/analytics/ and https://policies.google.com/?hl=de.

More information on how Google Analytics handles user data can be found in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

https://www.dataprivacyframework.gov/participant/5780

18. Google Ads

18.1. Scope of data processing

This website uses the online advertising program “Google Ads” of “Google” (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to place advertisements in the Google advertising network that are presented to users who are presumed to be interested in the ads. In addition, we determine the conversion of the advertisements. The conversion tracking cookie is set when a user clicks on an ad placed by Google and does not serve personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Ads customers.

The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. We learn the total number of users who clicked on our ad and which actions they performed. However, we do not receive any information that can be used to personally identify users.

18.2. Purpose of data processing

We use Google Ads to draw attention to our offers on external websites by means of advertising media. Our interest is to show you advertising that may be of interest to you, to make our website more interesting for you, and to achieve fair calculation of advertising costs.

18.3. Legal basis for data processing

The legal basis for processing personal data is Art. 6 para. 1 lit. a) GDPR (consent) and Section 25 para. 1 TDDDG, insofar as this also concerns the storage and/or reading of information on the end device.

18.4. Duration of storage

The Google Ads conversion cookie has a term of 90 days. The data collected within the framework of conversion tracking is deleted after the cookie’s term has expired, unless further statutory retention periods apply.

18.5. Right to object, withdrawal, and removal option

You can prevent the storage of cookies by making the appropriate setting in your browser software (see the section “Right to object, withdrawal, and removal option” in the “Cookies” section).

You can permanently deactivate cookies for ad preferences by preventing them through an appropriate setting in your browser software or by downloading and installing the browser plug-in available under the following link:

http://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

As a user of our website, you also have control over the use of cookies or services from third-party providers. Via the following link “Cookie Settings” you can view the settings, change them, and revoke any consent you may have given for the future.

18.6. Further information on data processing

Further information on terms of use and data protection at Google can be found at https://marketingplatform.google.com and http://www.google.de/policies/privacy/.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details can be found at: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

https://www.dataprivacyframework.gov/participant/5780

19. Google Tag Manager

19.1. Scope of data processing

We use Google Tag Manager on our website from the service provider Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

This solution is a tag management system (TMS) with the help of which we can integrate and manage tracking or statistics tools on our website. The tool itself, which implements the tags, does not store personal data. It triggers other tags, which in turn may collect data (e.g. Google Analytics). The Tag Manager itself does not access this data and does not create user profiles, store cookies, or perform any independent analyses. It serves solely to manage and deliver the tools integrated through it. However, Google Tag Manager does collect your IP address.

19.2. Purpose of data processing

We use Google Tag Manager to integrate and easily manage tracking or statistics tools.

19.3. Legal basis for data processing

The legal basis for this data processing is Art. 6 para. 1 lit. a) GDPR (consent) and Section 25 para. 1 TDDDG, insofar as this also concerns the storage and/or reading of information on the end device.

Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in the fast and uncomplicated integration and management of various tools on our website. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TDDDG insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

19.4. Duration of storage

Google Tag Manager itself does not permanently store personal data. The IP address is deleted after 14 days. The storage period for services integrated via Tag Manager depends on the information provided in the relevant sections of this Privacy Policy.

19.5. Recipients of data processing

The recipient of the data is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to the parent company in the USA.

19.6. Right to object, withdrawal, and removal option

You can prevent the storage of cookies by making the appropriate setting in your browser software (see the section “Right to object, withdrawal, and removal option” in the “Cookies” section).

http://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

19.7. Further information on data processing

Further information on terms of use and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

https://www.dataprivacyframework.gov/participant/5780

20. Google AdSense

We use Google AdSense on this website, a service for integrating advertisements. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

20.1. Scope of data processing

Google AdSense makes it possible to display advertisements on our website. In this context, Google may collect and process various data, in particular: IP address, browser type and version, operating system, referrer URL, location information (approximate), information about the websites accessed, and – if consent has been given – cookie-based user profiles for the purpose of displaying personalized advertising.

In principle, Google AdSense can display both personalized and non-personalized advertising. In the case of non-personalized advertising, no cookies are set for advertising purposes; however, technically necessary cookies may be used for frequency capping and to prevent misuse. Personalized advertisements require your express consent.

20.2. Purpose of data processing

The use of Google AdSense serves to finance our web offering by displaying advertisements. In the case of personalized advertisements, advertisements corresponding to your interests are displayed; in the case of non-personalized advertisements, the selection is based solely on the page content and your general location.

20.3. Legal basis for data processing

The legal basis for processing personal data in the case of personalized advertisements is Art. 6 para. 1 lit. a) GDPR (consent) and Section 25 para. 1 TDDDG insofar as this concerns the setting of cookies or access to information on your end device.

The legal basis for non-personalized advertisements is Art. 6 para. 1 lit. f) GDPR (legitimate interest in financing the web offering). Technically necessary cookies in the context of non-personalized advertisements do not require consent under Section 25 para. 2 no. 2 TDDDG insofar as they are used exclusively for frequency capping or preventing misuse.

20.4. Duration of storage

The storage period depends on the respective cookie term determined by Google. Google AdSense cookies generally have a term of up to 13 months. Further information can be found in Google’s Privacy Policy.

20.5. Recipients of the data

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processor). A data processing agreement (DPA) has been concluded with Google.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses (SCC). The company is also certified under the EU-US Data Privacy Framework (DPF). Further information is available from the provider at: https://www.dataprivacyframework.gov/participant/5780

20.6. Right to object, withdrawal, and removal option

You may revoke your consent to the use of personalized advertisements at any time with effect for the future. To do so, please use the “Cookie Settings” on our website.

In addition, you can use your Google account at https://adssettings.google.com/ to determine whether personalized advertising is displayed to you. You can permanently deactivate cookies for ad preferences at: http://www.google.com/settings/ads/plugin?hl=de

20.7. Further information on data processing

Further information on data processing by Google can be found at: https://policies.google.com/privacy?hl=de and specifically on Google AdSense at: https://support.google.com/adsense/answer/1348695?hl=de

21. Google Maps

21.1. Scope of data processing

We integrate the Google Maps service of the provider “Google” (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Google Maps is a web service for displaying interactive maps in order to visually present geographical information. In order to provide the map material, technically necessary data (e.g. your IP address) is processed by Google for this purpose. We have no influence over this data transfer.

In addition, when using Google Maps, it is possible that the fonts from Google Web Fonts are also loaded for uniform and correct display. When Google Maps is called up, your browser loads the required web fonts into its own browser cache. For this purpose, your browser connects to Google’s servers. As a result, Google becomes aware that our website has been accessed via the user’s IP address.

21.2. Purpose of data processing

Using this map service allows locations to be displayed to you and thus facilitates any directions.

21.3. Legal basis for data processing

Google Maps is only loaded after you have given your consent. The legal basis is Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TDDDG insofar as cookies are set or information is read from your end device. You may revoke your consent at any time with effect for the future via our “Cookie Settings”.

21.4. Recipients of data processing

When accessing the subpages of our website into which maps from Google Maps or Google Fonts are integrated, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers, which may also be located in the USA. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account.

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection.

21.5. Right of withdrawal, right to object, and removal option

If you do not want your data to be associated with your profile at Google, you must log out before activating the button.

Google stores your data (even for users who are not logged in) as usage profiles and evaluates it. Such evaluation is carried out in particular on the basis of Google’s legitimate interests in displaying personalized advertising, market research, and/or the needs-based design of its website. You have a right to object to the creation of these user profiles, although you must contact Google to exercise this right.

21.6. Duration of storage

The data processed in the context of using Google Maps is stored by Google in accordance with its own policies. We have no influence over the specific storage period. Further information can be found in Google’s Privacy Policy at https://policies.google.com/privacy?hl=de. Cookies set in connection with Google Maps remain on your end device until you delete them yourself or their term expires.

21.7. Further information on data processing

Google is responsible for the further data processing. Further information on how Google handles your data can be found at https://www.google.com/intl/de_US/help/terms_maps/, and at https://developers.google.com/fonts/faq and in Google’s Privacy Policy at https://policies.google.com/privacy?hl=de.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

https://www.dataprivacyframework.gov/participant/5780

22. OpenStreetMap

22.1. Scope of data processing

We integrate the “OpenStreetMap” map service of the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

OpenStreetMap is a web service for displaying interactive maps in order to visually present geographical information. In order to provide the map material, technically necessary data (e.g. your IP address) and other information relating to you are processed for this purpose. For this purpose, cookies may also be stored in the browser or similar recognition technologies may be used. We have no influence over the data transfer. In addition, it is possible that your location may be collected.

22.2. Purpose of data processing

Using this map service allows locations to be displayed to you and thus facilitates any directions.

22.3. Legal basis for data processing

This service is only loaded after you have given your consent. The legal basis for processing personal data is Art. 6 para. 1 lit. a) GDPR (consent) and Section 25 para. 1 TDDDG insofar as this also concerns the storage and/or reading of information on the end device.

22.4. Recipients of data processing

The recipient of the data is the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

The United Kingdom is the subject of an adequacy decision by the European Commission (Implementing Decision (EU) 2021/1772 of 28 June 2021). A level of data protection comparable to that of the EU is therefore ensured.

22.5. Right to object and withdrawal option

22.6. Duration of storage

The technical data processed in the context of using OpenStreetMap (in particular IP address) is stored by the provider in accordance with its own policies. We have no influence over the specific storage period. Further information can be found in the Privacy Policy of the OpenStreetMap Foundation at https://wiki.osmfoundation.org/wiki/Privacy_Policy.

22.7. Further information on data processing

Further information on how the provider handles your data can be found at https://wiki.osmfoundation.org/wiki/Privacy_Policy.

23. YouTube videos

23.1. Scope of data processing

This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to “Google” (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

The enhanced privacy mode is used here, which, according to the provider, only starts storing user information when the video(s) is/are played. Nevertheless, it cannot necessarily be ruled out that data may be passed on to YouTube partners. Thus, regardless of whether a video is played, YouTube establishes a connection to the Google DoubleClick network.

If you start a YouTube video on our website, a connection to YouTube’s servers is established. YouTube is informed which of our pages you have visited.

If you are logged into your YouTube account, your browsing behavior may be assigned to your personal profile. You can prevent this by logging out of your YouTube account.

After starting a video, YouTube may store cookies on your end device or use similar recognition technologies (e.g. device fingerprinting). In this way, YouTube may receive information about visitors to this website. YouTube may use this information, among other things, to compile video statistics, improve user-friendliness, and prevent fraud attempts.

Where applicable, further data processing operations may be triggered when a YouTube video is accessed, over which we have no influence.

23.2. Purpose of data processing

The use of YouTube serves the purpose of presenting our website attractively and conveying our offering to interested visitors.

23.3. Legal basis for data processing

YouTube videos are only embedded after you have given your consent. The legal basis is Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TDDDG insofar as cookies are set or information is read from your end device. You can revoke your consent at any time with effect for the future via our “Cookie Settings”.

23.4. Recipients of data processing

If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information provided by “YouTube”, these serve, among other things, to compile video statistics, improve user-friendliness, and prevent abusive behavior.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as processor. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (parent company), may access the data.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses (SCC). The company is certified under the EU-US Data Privacy Framework (DPF). Further information: https://www.dataprivacyframework.gov/participant/5780.

23.5. Right to object, withdrawal, and removal option

You can prevent the storage of cookies by making the appropriate setting in your browser software (see the section “Right to object, withdrawal, and removal option” in the “Cookies” section).

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

In addition, you can prevent Google from collecting the data generated by cookies about your use of the websites and from processing this data by Google by downloading and installing the browser plug-in available at https://support.google.com/adsense/answer/142293?hl=de.

23.6. Duration of storage

Cookies set in connection with video playback remain on your end device until you delete them yourself or their term expires. We have no influence over the storage period of data stored by YouTube/Google for its own purposes. Further information can be found in Google’s Privacy Policy at https://policies.google.com/privacy?hl=de.

23.7. Further information on data processing

Google is responsible for further data processing. Further information on how Google/YouTube handles your data can be found in Google’s Privacy Policy at https://policies.google.com/privacy?hl=de.

Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

24. Vimeo

24.1. Scope of data processing

This website uses the Vimeo embedding function to display and play videos from the provider Vimeo.com Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our pages equipped with Vimeo videos, a connection to Vimeo’s servers is established. In the process, the Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address.

However, we have configured Vimeo so that Vimeo does not track your user activities and no cookies are set.

24.2. Purpose of data processing

The use of Vimeo serves the purpose of presenting our website attractively and conveying our offering to interested visitors.

24.3. Legal basis for data processing

Vimeo videos are only embedded after you have given your consent via our consent management tool. The legal basis is Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TDDDG insofar as information on your end device is accessed. You may revoke your consent at any time with effect for the future via our “Cookie Settings”.

24.4. Recipients of data processing

If the playback of embedded Vimeo videos is started, the provider “Vimeo” may, where applicable, use cookies in order to provide the service. In addition, data about your browser or end device may also be processed.

24.5. Right to object, withdrawal, and removal option

You can prevent the storage of cookies by making the appropriate setting in your browser software (see the section “Right to object, withdrawal, and removal option” in the “Cookies” section).

24.6. Duration of storage

The data processed in the context of using Vimeo is stored by the provider in accordance with its own policies. We have no influence over the specific storage period. Further information can be found in Vimeo’s Privacy Policy at https://vimeo.com/privacy.

24.7. Further information on data processing

Vimeo is responsible for further data processing. Further information on how Vimeo handles your data can be found in its Privacy Policy at https://vimeo.com/privacy.

The transfer of data to the USA is based exclusively on the European Commission’s standard contractual clauses (SCC).

25. Facebook Custom Audiences – Facebook Pixel

This website uses the visitor action pixel from Facebook to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (Facebook for short).

According to Meta, however, the data collected is also transferred to the USA and other third countries.

25.1. Scope of data processing

Our website uses remarketing functions of Facebook Inc. (“Facebook”) in order to be able to address you again.

In this way, the behavior of website visitors can be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement.

As a result, users of the website can be shown interest-based advertisements during their visit to the social network Facebook or other websites that also use this procedure. The Facebook pixel also makes it possible to track the effectiveness of advertisements for statistical and market research purposes. It is possible to identify whether users were redirected to the corresponding website after clicking on a Facebook advertisement (so-called “conversion measurement”).

The data collected is anonymous for us as the operator of the website. We cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). This enables Facebook to place advertisements on Facebook pages as well as outside Facebook. As the website operator, we cannot influence this use of the data.

25.2. Purpose of data processing

Our interest is to be able to evaluate the effectiveness of advertising measures for statistical and market research purposes that may be of interest to you, in order to make our website more interesting for you in the future.

25.3. Legal basis for data processing

25.4. Recipients of data processing

Your browser establishes a direct connection with Facebook’s server as a result of the marketing tools used. We have no influence over the scope and further use of the data collected by Facebook through the use of this tool. The information is based on our current state of knowledge: by integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the relevant webpage of our website or clicked on one of our ads.

If you are registered with a Facebook service, Facebook can associate the visit with your account. Even if you are not registered with Facebook or are not logged in, there is a possibility that the provider will obtain and store your IP address and other identifying features.

25.5. Right to object, withdrawal, and removal option

Deactivation of the “Facebook Custom Audiences” function is possible for the future under our Cookie Settings. Users logged in to Facebook can also deactivate it at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

25.6. Duration of storage

The Facebook pixel cookie has a term of up to 180 days. The data collected within the framework of conversion measurement is stored by Meta according to its own policies. Further information can be found in Meta’s Privacy Policy at https://www.facebook.com/about/privacy/.

25.7. Further information on data processing

Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses.

Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). The essential contents of the agreement are publicly accessible at: https://www.facebook.com/legal/controller_addendum

The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of the Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

26. LinkedIn Insights Tag

This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn for short).

26.1. Scope of data processing

Through LinkedIn Insights Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can analyze, among other things, professional data such as career level, company size, country, location, industry, and job title of our website visitors and thus tailor our page better to the respective target groups. We can also use LinkedIn Insights Tag to measure whether visitors to our websites make a purchase or perform another action (conversion measurement). Conversion measurement can also take place across devices (e.g. from PC to tablet). LinkedIn Insights Tag also offers a retargeting function that enables us to display targeted advertising to visitors of our website outside the website. According to LinkedIn, the advertising addressee is not identified in the process.

26.2. Purpose of data processing

Our goal is to evaluate our marketing activities and measure their success.

26.3. Legal basis for data processing

The legal basis for this data processing is Art. 6 para. 1 lit. a) GDPR (consent) and Section 25 para. 1 TDDDG insofar as this also concerns the storage and/or reading of information on the end device. Your consent may be revoked at any time.

26.4. Recipients of data processing

LinkedIn itself collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). IP addresses are shortened or (if they are used to reach LinkedIn members across devices) pseudonymized.

26.5. Withdrawal and right to object

You can object to the analysis of your usage behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. In addition, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To avoid linking data collected on our website by LinkedIn with your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

26.6. Duration of storage

The data stored through tracking is deleted as soon as it is no longer needed for our recording purposes. This is the case after 30 days.

The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is deleted within 180 days.

26.7. Further information on data processing

Further information on data processing by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it as part of its own advertising measures. Details can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy#choices-oblig.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

We have concluded a data processing agreement (DPA) with the provider named above. This is a contract required by data protection law that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

https://www.dataprivacyframework.gov/participant/5448.

27. TikTok Pixel

We use the TikTok Pixel service on this website in order to measure conversions from TikTok advertisements. The provider of this service is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. The parent company is ByteDance Ltd., Beijing 100102, People’s Republic of China.

Warning – Transfer to a third country to the People’s Republic of China: With this service, data is transferred to the parent company ByteDance Ltd. in the People’s Republic of China. China does not provide a level of data protection comparable to that of the EU. Under Chinese law, Chinese authorities may demand access to data stored by Chinese companies. There is no adequacy decision by the EU Commission for the People’s Republic of China.

27.1. Scope of data processing

The TikTok Pixel is a JavaScript code snippet integrated into our website. It enables the tracking of certain actions by website visitors (so-called events) who have clicked on our TikTok advertisements. The following in particular is collected: IP address, device information (device type, operating system), browser type, visited URL, user actions (e.g. page views, clicks, form submissions), and – if available and if the user has consented – email address or telephone number in hashed form (advanced matching).

The service uses cookies and comparable tracking technologies on visitors’ end devices.

27.2. Purpose of data processing

The TikTok Pixel is used to measure the effectiveness of our advertisements on TikTok (conversion tracking), to place target-group-specific advertising (retargeting), and to create target groups for TikTok advertisements.

27.3. Legal basis for data processing

The legal basis for processing personal data on servers in the EU/EEA is Art. 6 para. 1 lit. a) GDPR (consent) and Section 25 para. 1 TDDDG, insofar as this concerns the setting of cookies or access to information on your end device.

The legal basis for the additional transfer of data to ByteDance Ltd. in the People’s Republic of China is Art. 49 para. 1 lit. a) GDPR (explicit consent after prior information about the existing risks of the transfer to a third country without an adequacy decision and without appropriate safeguards). By activating this service via our “Cookie Settings” you expressly consent to the possible transfer of your personal data to the People’s Republic of China and to the associated risks.

27.4. Recipients of the data

The recipients of the data are TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and the parent company ByteDance Ltd., Beijing 100102, People’s Republic of China.

For data transfers to third countries, the European Commission’s standard contractual clauses (SCC) are used. There is no adequacy decision for the transfer to ByteDance Ltd. in the People’s Republic of China; the transfer takes place exclusively on the basis of your explicit consent pursuant to Art. 49 para. 1 lit. a) GDPR. In China, there are extensive governmental rights of access to personal data. Legal protection for data subjects comparable to that in the EU is not guaranteed, and for EU citizens there are in practice no effective legal remedies against governmental data processing.

27.5. Right to object, withdrawal, and removal option

You may revoke your consent to the use of TikTok Pixel at any time with effect for the future. To do so, please use the “Cookie Settings” on our website. In addition, you can prevent the storage of cookies by making the appropriate settings in your browser.

27.6. Duration of storage

The data stored through tracking is deleted after no later than 13 months, unless statutory retention obligations prevent this.

27.7. Further information on data processing

Further information on data protection at TikTok can be found at: https://www.tiktok.com/legal/privacy-policy-eea?lang=de as well as in the controller-to-controller agreement: https://ads.tiktok.com/i18n/official/policy/controller-to-controller

28. Cloudflare

28.1. Scope of data processing

The Cloudflare service (provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA) is integrated on our website as a content delivery network (CDN) and web application firewall. All data traffic between your browser and our website is routed through the Cloudflare network. In the process, your IP address and other technical connection data are processed.

28.2. Purpose of data processing

The purpose of integrating Cloudflare is the security and acceleration of our website as well as protection against abusive access (DDoS protection, web application firewall).

28.3. Legal basis for data processing

The legal basis for processing is Art. 6 para. 1 lit. f) GDPR (legitimate interest in the secure and uninterrupted operation of our website).

28.4. Recipients of the data

The recipient of the data is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. Transfer to additional subcontractors is possible; Cloudflare uses appropriate safeguards for this purpose.

28.5. Right to object and removal option

Since Cloudflare is absolutely necessary for the technically secure operation of the website, it is not possible to object to this data processing.

28.6. Duration of storage

According to the provider, the data processed by Cloudflare in the context of CDN and security operations is stored for a maximum of 4 days. Security-related log data may be retained for longer. Further information can be found in Cloudflare’s Privacy Policy at https://www.cloudflare.com/de-de/privacypolicy/.

28.7. Further information on data processing

Further information on data processing by Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/. The transfer of data to the USA is based on the European Commission’s standard contractual clauses (SCC). We have concluded a data processing agreement (DPA) with Cloudflare pursuant to Art. 28 GDPR. Cloudflare Inc. is certified under the EU-US DPF. Details can be found at: https://www.cloudflare.com/de-de/privacypolicy/ and https://www.dataprivacyframework.gov/participant/5666

29. Microsoft Clarity

We use the Microsoft Clarity analytics service on this website. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA.

29.1. Scope of data processing

Microsoft Clarity records the behavior of visitors to our website. In particular, mouse movements, mouse clicks, scroll depth, and navigation behavior are recorded. Clarity uses this data to create so-called heatmaps that show which areas of our website are used particularly frequently. In addition, individual sessions (session recordings) may be stored, documenting a user’s behavior during a website visit.

The data processed includes in particular: IP address, browser type and version, operating system, referrer URL, time of access, and user interactions (clicks, mouse movements, scrolling behavior). Microsoft Clarity uses cookies and other technologies to recognize end devices.

29.2. Purpose of data processing

The use of Microsoft Clarity serves to analyze and optimize the user experience (UX) of our website. The insights gained help us understand how visitors interact with our website in order to continuously improve usability.

29.3. Legal basis for data processing

The legal basis for processing personal data is Art. 6 para. 1 lit. a) GDPR (consent) and Section 25 para. 1 TDDDG insofar as this concerns the setting of cookies or access to information on your end device. You may revoke your consent at any time via our “Cookie Settings”.

29.4. Recipients of the data

The recipient of the data is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. A data processing agreement (DPA) has been concluded with Microsoft.

29.5. Right to object, withdrawal, and removal option

You may revoke your consent to the use of Microsoft Clarity at any time with effect for the future. To do so, please use the “Cookie Settings” on our website. In addition, you can prevent the storage of cookies by making the appropriate settings in your browser.

29.6. Duration of storage

According to Microsoft, the data collected by Microsoft Clarity is stored for a period of up to 13 months. Session recordings are automatically deleted after 30 days.

29.7. Further information on data processing

Further information on data protection at Microsoft Clarity can be found in Microsoft’s Privacy Policy at: https://privacy.microsoft.com/de-de/privacystatement as well as on the Clarity-specific privacy page: https://clarity.microsoft.com/terms

Changes to the Privacy Policy

We reserve the right to amend the Privacy Policy in order to adapt it to changes in the legal situation or in the event of changes to the service and data processing. However, this only applies with regard to statements on data processing. If user consent is required or if parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will only be made with the consent of the users.

Please regularly inform yourself about the content of the Privacy Policy.

Our social media presences

This Privacy Policy applies to the following social media presences

https://www.facebook.com/alanushochschule
https://www.instagram.com/alanushochschule/
https://www.youtube.com/user/AlanusHochschule
https://www.linkedin.com/school/alanushochschule

Data processing by social networks

We maintain publicly accessible profiles on social networks. The individual social networks used by us can be found below.

Social networks such as Facebook, X, etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. Specifically: If you are logged in to your social media account and visit our social media presence, the operator of the social media portal may assign this visit to your user account. Under certain circumstances, however, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policies of the respective social media portals.

Legal basis

Our social media presences are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a) GDPR).

Controller and assertion of rights

If you visit one of our social media presences (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during that visit. In principle, you can assert your rights (access, rectification, erasure, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite the joint responsibility with the operators of the social media portals, we do not have full influence over the data processing operations of the social media portals. Our options depend largely on the corporate policy of the respective provider.

Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence over the storage period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their Privacy Policy, see below).

Your rights

You have the right at any time to obtain, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have a right to object, a right to data portability, and a right to lodge a complaint with the competent supervisory authority. Furthermore, you may request the rectification, blocking, deletion, and, under certain circumstances, restriction of the processing of your personal data.

Social networks in detail

Facebook

We maintain a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter Meta). According to Meta, the data collected is also transferred to the USA and other third countries.

We have concluded an agreement on joint processing (Controller Addendum) with Meta.

This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

You can adjust your advertising settings yourself in your user account. To do so, click the following link and log in:

https://www.facebook.com/settings?tab=ads.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses.

Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in Facebook’s Privacy Policy:

https://www.facebook.com/about/privacy/.

https://www.dataprivacyframework.gov/participant/4452

XING

We maintain a profile on XING. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Details on how they handle your personal data can be found in XING’s Privacy Policy:

https://privacy.xing.com/de/datenschutzerklaerung.

LinkedIn

We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you would like to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses.

Details can be found here:

https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Details on how they handle your personal data can be found in LinkedIn’s Privacy Policy:

https://www.linkedin.com/legal/privacy-policy.

YouTube

We maintain a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in YouTube’s Privacy Policy: https://policies.google.com/privacy?hl=de.

TikTok

We maintain a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Details on how they handle your personal data can be found in TikTok’s Privacy Policy:

https://www.tiktok.com/legal/privacy-policy?lang=de.

The transfer of data to non-secure third countries is based on the European Commission’s standard contractual clauses. Details can be found here: https://www.tiktok.com/legal/privacy-policy?lang=de.

Instagram

We maintain a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

The transfer of data to the USA is based on the European Commission’s standard contractual clauses.

Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details on how they handle your personal data can be found in Instagram’s Privacy Policy: https://privacycenter.instagram.com/policy/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance

with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further

information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452