1. Data Protection at a Glance

General Information The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

Data Collection on This Website Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Body” in this privacy policy.

How do we collect your data? On the one hand, your data is collected by you communicating it to us. This can be, for example, data that you enter into a contact form. Other data is collected automatically or after your consent by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for? Part of the data is collected to ensure the error-free provision of the website. Other data can be used to analyze your user behavior.

What rights do you have regarding your data? You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have a right of appeal to the competent supervisory authority. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time.

Analysis Tools and Third-Party Tools When visiting this website, your surfing behavior can be statistically evaluated. This happens primarily with so-called analysis programs. Detailed information on these analysis programs can be found in the following privacy policy.

2. Hosting

Strato We host our website at Strato. The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter “Strato”). When you visit our website, Strato collects various log files including your IP addresses. For further information, please refer to Strato’s privacy policy: https://www.strato.de/datenschutz/.

The use of Strato is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in the most reliable representation of our website. Insofar as a corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG (formerly TTDSG), insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent is revocable at any time.

Note on Server Log Files The server log files are anonymized data collected when you access our website. This information does not allow any conclusions to be drawn about you personally but is indispensable for technical reasons for the delivery and presentation of our content. Furthermore, they serve our statistics and the constant optimization of our content. Typical log files are the date and time of access, the amount of data, the browser used for access and its version, the operating system used, the domain name of the provider commissioned by you, the page from which you came to our offer (referrer URL), and your IP address. Log files also allow for a precise check in the event of suspected illegal use of our website.

Order Processing We have concluded a contract on order processing (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that they process the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data Protection The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy. When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens. We point out that data transmission on the internet (e.g., in communication by e-mail) can have security gaps. Complete protection of data from access by third parties is not possible.

Processing of Personal Data In the context of data avoidance and data economy, we collect personal data only to the extent and for as long as is necessary for the use of our website or as prescribed by the legislator. We take the protection of your personal data seriously and strictly adhere to the relevant statutory regulations and this privacy policy when collecting and processing personal data. If the purpose of data collection no longer applies or the end of the statutory storage period is reached, the collected data is blocked or deleted. Regularly, our website can be used without passing on personal data. When we collect personal data – such as your name, address, or e-mail address – this data collection is voluntary. Without express consent from your side, this data will not be disclosed to third parties. Please note that data on the internet is generally not always transmitted securely. Especially in e-mail traffic, protection during data exchange cannot be guaranteed.

Note on the Responsible Body The responsible body for data processing on this website is: Steinbeis Beratungszentrum Interkulturelle Kompetenzen Thannhauserstrasse 33 79114 Freiburg Phone: +49 (761) 514 60 802 E-mail: info@steinbeis-ic.com

The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data (e.g., names, e-mail addresses, etc.).

Storage Duration Unless a more specific storage duration has been mentioned within this privacy policy, your personal data remains with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion takes place after these reasons no longer apply.

General Information on the Legal Basis for Data Processing on This Website Insofar as you have consented to data processing, we process your personal data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, insofar as special categories of data according to Art. 9 Para. 1 GDPR are processed. In the event of express consent to the transfer of personal data to third countries, data processing also takes place on the basis of Art. 49 Para. 1 lit. a GDPR. Insofar as you have consented to the storage of cookies or access to information in your terminal device (e.g., via device fingerprinting), data processing additionally takes place on the basis of § 25 Para. 1 TDDDG (formerly TTDSG). Consent is revocable at any time. If your data is required for contract fulfillment or to carry out pre-contractual measures, we process your data on the basis of Art. 6 Para. 1 lit. b GDPR. Furthermore, we process your data insofar as it is required to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR. Data processing can also take place on the basis of our legitimate interest according to Art. 6 Para. 1 lit. f GDPR. Information about the legal basis applicable in each individual case is provided in the following paragraphs of this privacy policy.

Revocation of Your Consent to Data Processing Many data processing operations are only possible with your express consent. You can revoke consent already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR) IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR CONCERNED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR). IF YOUR PERSONAL DATA IS PROCESSED TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right of Appeal to the Competent Supervisory Authority In the event of violations of the GDPR, the data subjects have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right of appeal is without prejudice to other administrative or judicial remedies.

Right to Data Portability You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. Insofar as you request the direct transfer of the data to another responsible party, this will only take place insofar as it is technically feasible.

SSL or TLS Encryption This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, and Correction (Your Rights) You will receive information free of charge at any time about the personal data stored by us about your person, as well as about the origin, the recipient, and the purpose of data collection and data processing. You also have the right to request the correction, blocking, or deletion of your data. This excludes data that is stored due to statutory regulations or is required for proper business processing. So that a data block can be realized at any time, data is kept in a block file for control purposes. If data is not covered by a statutory archiving obligation, we will delete your data upon your request. If the archiving obligation applies, we will block your data. For all questions and concerns regarding the correction, blocking, or deletion of personal data, please contact our data protection officer at the contact details in this privacy policy or the address mentioned in the Impressum.

Right to Restriction of Processing You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to check this. For the duration of the check, you have the right to request the restriction of the processing of your personal data.

• If the processing of your personal data happened/happens unlawfully, you can request the restriction of data processing instead of deletion.

   

• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

   

• If you have filed an objection according to Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

   

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

Objection to Advertising E-Mails The use of contact data published within the scope of the Impressum obligation to send advertising and information materials not expressly requested is hereby rejected. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

4. Data Collection on This Website

Cookies Our internet pages use so-called “cookies.” Cookies are small text files and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or an automatic deletion is carried out by your web browser. In some cases, cookies from third-party companies can also be stored on your terminal device when you enter our site (third-party cookies). These allow us or you to use certain services of the third-party company (e.g., cookies for processing payment services). Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies serve to evaluate user behavior or display advertising. Cookies that are required to carry out the electronic communication process, to provide certain functions desired by you (e.g., for the shopping cart function), or to optimize the website (e.g., cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. Insofar as a consent to the storage of cookies and comparable recognition technologies was requested, processing takes place exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG); consent is revocable at any time. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. When disabling cookies, the functionality of this website may be limited. Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the scope of this privacy policy and, if necessary, request consent.

Contact Form If you send us inquiries via the contact form, your details from the inquiry form including the contact details you provided there will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent. The processing of this data takes place on the basis of Art. 6 Para. 1 lit. b GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) insofar as this was requested. The data you enter in the contact form remains with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after the processing of your inquiry has been completed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Inquiry by E-Mail, Phone, or Fax If you contact us by e-mail, phone, or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent. The processing of this data takes place on the basis of Art. 6 Para. 1 lit. b GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) insofar as this was requested; consent is revocable at any time. The data sent by you to us via contact inquiries remains with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after the processing of your request has been completed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

5. Our Activities in Social Networks

To enable us to communicate with you on social networks and provide information about our services, we are represented there with our own pages. We are not the original provider (responsible party) of these pages but merely use them within the scope of the possibilities offered to us by the respective providers. Therefore, as a precaution, we point out that your data may also be processed outside the European Union or the European Economic Area. Therefore, use may have data protection risks for you, as the safeguarding of your rights, e.g., to information, deletion, objection, etc., may be made more difficult and processing in social networks often takes place directly for advertising purposes or for analyzing user behavior by the providers, without this being influenced by us. If user profiles are created by the provider, cookies are often used or the user behavior is directly assigned to your own member profile of the social networks (if you are logged in here). The described processing operations of personal data take place according to Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to be able to communicate with you in a contemporary way or to inform you about our services. If you have to give consent to data processing as a user with the respective providers, the legal basis refers to Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. Since we have no access to the databases of the providers, we point out that you should best assert your rights (e.g., to information, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data in social networks and the possibility of exercising your right of objection or revocation (so-called opt-out) is listed below for the respective social network provider used by us:

5.1 GOOGLE / YOUTUBE Responsible party for data processing: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy Policy: HTTPS://POLICIES.GOOGLE.COM/PRIVACY Opt-out and advertising settings: HTTPS://ADSSETTINGS.GOOGLE.COM/AUTHENTICATED Data transfer to the USA takes place on the basis of the EU-U.S. Data Privacy Framework: https://www.dataprivacyframework.gov/s/

5.2 LINKEDIN Responsible party for data processing in Europe: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland. Privacy Policy: HTTPS://WWW.LINKEDIN.COM/LEGAL/PRIVACY-POLICY Opt-out and advertising settings: HTTPS://WWW.LINKEDIN.COM/PSETTINGS/GUEST-CONTROLS/RETARGETING-OPT-OUT Data transfer to the USA takes place on the basis of the EU-U.S. Data Privacy Framework: https://www.dataprivacyframework.gov/s/

We have integrated components of LinkedIn Corporation on this website. LinkedIn is an internet-based social network that allows users to connect with existing business contacts and establish new business contacts. The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For data protection matters outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible. With each individual access to our website that is equipped with a LinkedIn component (LinkedIn plug-in), this component causes the browser you use to download a corresponding representation of the LinkedIn component. Further information on the LinkedIn plug-ins can be accessed at HTTPS://DEVELOPER.LINKEDIN.COM/PLUGINS. Within the scope of this technical procedure, LinkedIn receives information about which specific subpage of our website you have visited. If you are logged in to LinkedIn at the same time, LinkedIn recognizes with each call to our website and during the entire duration of the respective stay on our website which specific subpage of our website you are visiting. This information is collected by the LinkedIn component and assigned by LinkedIn to your LinkedIn account. If you press a LinkedIn button integrated on our website, LinkedIn assigns this information to your personal LinkedIn user account and stores this personal data. LinkedIn receives information via the LinkedIn component that you have visited our website whenever you are logged in to LinkedIn at the same time as you access our website; this takes place regardless of whether you have clicked on the LinkedIn component or not. If such a transmission of this information to LinkedIn is not wanted by you, you can prevent the transmission by logging out of your LinkedIn account before accessing our website. LinkedIn offers under HTTPS://WWW.LINKEDIN.COM/PSETTINGS/GUEST-CONTROLS the possibility to unsubscribe from e-mail messages, SMS messages, and targeted ads as well as to manage ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, who can set cookies. Such cookies can be rejected under HTTPS://WWW.LINKEDIN.COM/LEGAL/COOKIE-POLICY. The applicable data protection regulations of LinkedIn are available at HTTPS://WWW.LINKEDIN.COM/LEGAL/PRIVACY-POLICY. LinkedIn’s cookie policy is available at HTTPS://WWW.LINKEDIN.COM/LEGAL/COOKIE-POLICY.

Source:

https://www.e-recht24.de