Service
Kontakt
Zentrale
Telefon: +49 5151 9559-0 info@hsw-hameln.de
Suche
As of June 2024
Table of Contents
I. Name and Address of the Controller II. Contact Details of the Data Protection Officer III. General Information on Data Processing IV. Rights of the Data Subject V. Provision of the Website and Creation of Log Files VI. Use of Cookies VII. Newsletter VIII. Email Contact IX. Contact Form X. Application for Study Programs XI. Registration for Events XII. Company Profiles XIII. Use of Company Profiles in Career-Oriented Networks XIV. Hosting XV. Content Delivery Networks XVI. External Services Used XVII. Amendments to this Privacy Policy
I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
Trägerverein Hochschule Weserbergland e. V. Am Stockhof 2 31785 Hameln Deutschland +49 8967 5513 63 datenschutz@hsw-hameln.de www.hsw-hameln.de
II. Contact Details of the Data Protection Officer
The data protection officer of the controller is:
DataCo GmbH Nymphenburger Str. 86 80636 München Deutschland +49 89 7400 45840 www.dataguard.de
III. General Information on Data Processing
We generally process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users regularly takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is required by statutory provisions.
2. Legal Basis for the Processing of Personal Data
Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) sentence 1 lit. a GDPR serves as the legal basis.
For the processing of personal data required for the performance of a contract to which the data subject is party, Art. 6 (1) sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
Where the processing of personal data is necessary for compliance with a legal obligation to which our organisation is subject, Art. 6 (1) sentence 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or of another natural person require the processing of personal data, Art. 6 (1) sentence 1 lit. d GDPR serves as the legal basis.
If the processing is necessary for the purposes of a legitimate interest pursued by our organisation or by a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the aforementioned interest, Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis for the processing.
3. Data Erasure and Storage Duration
The personal data of the data subject are erased or blocked as soon as the purpose of storage ceases to apply. Storage may also occur if provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Blocking or erasure of the data also takes place when a storage period prescribed by the aforementioned regulations expires, unless further storage of the data is required for the conclusion or performance of a contract.
IV. Rights of the Data Subject
If your personal data are processed, you are a data subject within the meaning of the GDPR, and you have the following rights with respect to the controller:
You have the right to request confirmation from us as to whether personal data concerning you are being processed.
If this is the case, you have a right of access to these data and the following information:
2. Right to rectification (Art. 16 GDPR)
If your personal data are incorrect or incomplete, you have the right to request the immediate correction or completion of the personal data.
3. Right to restriction of processing (Art. 18 GDPR)
You have the right to request restriction of the processing of your personal data if one of the following conditions is met:
4. Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
You have the right to request the immediate erasure of your personal data if one of the following grounds applies:
Please note that the above-mentioned grounds do not apply insofar as processing is necessary:
5. Right to data portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request transmission to another controller.
6. Right to object to certain processing (Art. 21 GDPR)
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is carried out pursuant to Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.
Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling to the extent that it is related to direct marketing.
7. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR. The supervisory authority to which the complaint was submitted shall inform you of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. A list of the supervisory authorities responsible in Germany can be found at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
V. Provision of the Website and Creation of Log Files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data are collected:
2. Purpose of data processing
Temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.
3. Legal basis for data processing
The legal basis for the temporary storage of the data is Art. 6(1)(f) GDPR.
4. Duration of storage
The data are erased as soon as they are no longer required to achieve the purpose of their collection. In the case of data collected for the provision of the website, this occurs when the respective session ends.
5. Possibility of objection
The collection of data for the provision of the website and the storage of data in logfiles is absolutely necessary for the operation of the website. The user may object, but whether the objection is successful must be determined by balancing the interests involved.
VI. Use of Cookies
When you visit our website, we use technical tools for various functions, particularly cookies, which may be stored on your device. When accessing our website – and at any time thereafter – you may choose whether to allow the use of cookies in general or which individual additional functions you wish to activate. You may make changes in your browser settings or via our consent manager.
Cookies are text files or information stored in a database that are placed on your hard drive and associated with the browser you use, enabling the party placing the cookie to receive certain information. Below, we describe the types of cookies we use.
We use technically necessary cookies required for the technical operation of the website. Without these cookies, our website cannot be displayed correctly (or fully correctly), or support functions may not be possible.
We use cookies that are not technically necessary. These are text files that do not solely serve the functionality of the website but also collect other data.
Further information regarding cookies can be found in the cookie settings.
Technically necessary cookies ensure the functionality of our website. Some functions of our website cannot be offered without cookies, as they require the browser to be recognised after a page change.
Technically non-necessary cookies are used to improve the quality of our website, its content, our reach, and economic efficiency. These cookies tell us how the website is used, allowing us to continuously optimise our offering.
The provisions of the Telecommunications Telemedia Data Protection Act (TTDSG) apply to the storage of information in the end user’s device and/or access to information already stored there. Where the setting and reading of cookies is technically necessary, this occurs to ensure the functionality of our website. Storage and access take place on the basis of § 25(2)(2) TTDSG. The legal basis for processing personal data arising from technically necessary cookies is our legitimate interest pursuant to Art. 6(1)(f) GDPR.
For cookies that are not technically necessary, processing is based on your express consent, which you may grant via the cookie banner. The legal basis is § 25(1) TTDSG in conjunction with Art. 6(1)(a), Art. 7 GDPR. You may withdraw your consent at any time with future effect or give it again by adjusting your cookie settings accordingly. Alternatively, you may prevent the storage of cookies through your browser settings. Please note that browser settings only apply to the browser in which you configure them. Where personal data are processed following the storage or access to information on your device, the provisions of the GDPR apply. Relevant information can be found in the following sections of this privacy policy.
VII. Newsletter
On our website, it is possible to subscribe to a free newsletter. During registration, the data entered in the input form are transmitted to us:
No data are passed on to third parties in connection with the newsletter. The data are used exclusively to send the newsletter. For sending the newsletter, we use the provider rapidmail GmbH.
The collection of the user’s email address serves to deliver the newsletter.
The collection of other personal data during registration is intended to prevent misuse of the service or the email address used.
The legal basis for processing the data after registration for the newsletter is, if consent has been given by the user, Art. 6(1)(a) GDPR.
Data are deleted as soon as they are no longer necessary to achieve the purpose of collection. The email address is therefore stored as long as the newsletter subscription is active. Other personal data collected during the registration process are usually deleted after seven days.
5. Possibility of withdrawal
The newsletter subscription can be canceled by the data subject at any time. A corresponding link is included in every newsletter.
This also enables the withdrawal of consent for the storage of personal data collected during the registration process.
VIII. Email Contact
On our website, it is possible to contact us via the provided email address. In this case, the personal data transmitted with the email by the user are stored.
The data are used exclusively for processing the conversation.
In the event of contact via email, our legitimate interest in processing the data is also given.
The legal basis for processing the data transmitted by email is Art. 6(1)(f) GDPR. Our legitimate interest lies in being able to respond to your request sent via email in the best possible way.
If the email contact aims at concluding a contract, Art. 6(1)(b) GDPR constitutes an additional legal basis for processing.
The data are deleted as soon as they are no longer required to achieve the purpose of collection. For personal data transmitted by email, this is the case when the conversation with the user is concluded. A conversation is considered concluded when the circumstances indicate that the matter in question has been finally resolved.
Personal data additionally collected during sending are deleted at the latest after seven days.
If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of the contact will be deleted in this case.
IX. Contact Form
On our website, there is a contact form that can be used for electronic contact. If a user uses this option, the data entered in the input form are transmitted to us and stored. We use the WordPress plugin Contact Form 7 solely to forward the form data to our email address. No additional data are transmitted to external servers due to the local installation of the plugin.
At the time of sending the message, the following data are stored:
The processing of personal data from the contact form input or the provided email address is solely for handling the contact request.
Other personal data processed during sending are intended to prevent misuse of the contact form and to ensure the security of our information technology systems.
The legal basis for processing the data transmitted by email or via the contact form is Art. 6(1)(f) GDPR. Our legitimate interest lies in being able to respond to your request sent via the contact form in the best possible way. If the email contact aims at concluding a contract, Art. 6(1)(b) GDPR constitutes an additional legal basis for processing.
Data are deleted as soon as they are no longer required to achieve the purpose of collection. For personal data from the contact form and those transmitted by email, this is the case when the conversation with the user is concluded. A conversation is considered concluded when the circumstances indicate that the matter in question has been finally resolved.
If the user contacts us via the input form in the contact form, they can object to the storage of their personal data at any time.
The objection can be made via the link provided in each newsletter email, by email to [company email address], or by a message to the contact details provided in the imprint.
X. Application for Study Programs
On our website, it is possible to apply for a study program. For this purpose, we process the data necessary to verify whether the required qualifications are met, as well as the necessary data for a selection process and for the study contract.
Basically, these are the data from the application form:
The processing of personal data serves to review the application and registration for the study program, the selection process, and the fulfillment of the study contract. After successful application, the necessary data are processed for the study program.
The legal basis for processing the data transmitted during the application is Art. 6(1)(b) GDPR, as a pre-contractual measure and for the fulfillment of the study contract.
Your personal data are stored by us as long as and to the extent necessary for the processing purposes pursued within the framework of fulfilling the study contract. Storage takes place until the termination of the contractual relationship. If statutory or contractual retention periods exist beyond this point, which require further storage of your data, we store your data for these purposes even after the termination of the contractual relationship. Data for which there is no legal or contractual retention obligation beyond the term of the study contract are anonymized after the respective retention periods have expired, unless you have explicitly and specifically consented to further use of your data.
XI. Registration for Events
On our website, it is possible to register for various events, which either take place online (via Microsoft Teams) or on-site.
If a user uses this option, the data entered in the input form are transmitted to us and stored, and the user receives an email from us.
We use the WordPress plugin Contact Form 7 solely to forward the form data to our email address. No additional data are transmitted to external servers due to the local installation of the plugin.
The processing of personal data from the input form serves solely to process the registration and plan the respective events.
The legal basis for processing the data transmitted via the registration form is Art. 6(1)(f) GDPR. Our legitimate interest lies in being able to respond to your registration sent via the contact form in the best possible way.
The data are deleted as soon as they are no longer required to achieve the purpose of collection. For personal data from the input form and those transmitted by email, this is the case when the conversation with the user is concluded. A conversation is considered concluded when the circumstances indicate that the matter in question has been finally resolved.
If the user contacts us via the input form, they can object to the storage of their personal data at any time.
XII. Corporate Profiles
Use of corporate profiles on social networks
Instagram:
Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
On our corporate page, we provide information and offer Instagram users the possibility to communicate. If users perform an action on our Instagram corporate profile (e.g., comments, posts, likes), it may result in personal data (e.g., real name or profile picture) being made public. However, as we usually have little or no influence on the processing of your personal data by Instagram, which is jointly responsible for the HSW corporate profile, we cannot make binding statements about the purpose and scope of data processing.
We use our corporate profile on social networks for communication and information exchange with (potential) customers. In particular, we use the corporate profile for:
Promotion of events, study programs, and further education offerings
Publications on the corporate profile may include:
Users are free to disclose personal data through their activities.
Where we process your personal data to analyze your online behavior, offer competitions, or conduct lead campaigns, this is done based on your explicit consent, Art. 6(1)(a) and Art. 7 GDPR. The legal basis for processing personal data for communication with customers and interested parties is Art. 6(1)(f) GDPR. Our legitimate interest is to respond optimally to your inquiries or provide the requested information. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
Data generated through the corporate profile are not stored in our own systems.
For processing your personal data in third countries, we have provided appropriate safeguards in the form of standard contractual clauses pursuant to Art. 46(2)(c) GDPR. A copy of the standard contractual clauses can be requested from us.
You can object to the processing of your personal data collected through your use of our Instagram corporate profile at any time and exercise the data subject rights listed under IV of this privacy policy. To do so, send us an informal email at info@hsw-hameln.de. Further information on the processing of your personal data by Instagram and the respective objection options can be found here: Instagram: https://help.instagram.com/519522125107875
YouTube:
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States
On our corporate page, we provide information and offer YouTube users the possibility to communicate. If users perform an action on our YouTube corporate profile (e.g., comments, posts, likes), it may result in personal data (e.g., real name or profile picture) being made public. However, as we usually have little or no influence on the processing of your personal data by YouTube, which is jointly responsible for the HSW corporate profile, we cannot make binding statements about the purpose and scope of data processing.
You can object to the processing of your personal data collected through your use of our YouTube corporate profile at any time and exercise the data subject rights listed under IV of this privacy policy. To do so, send us an informal email at info@hsw-hameln.de. Further information on the processing of your personal data by YouTube and the respective objection options can be found here: YouTube: https://policies.google.com/privacy?gl=DE&hl=de
XIII. Use of Corporate Profiles on Career-Oriented Networks
We use corporate profiles on career-oriented networks. We maintain a corporate profile on the following career-oriented networks:
LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
XING: XING SE, Dammtorstraße 30, 20354 Hamburg, Germany
On our pages, we provide information and offer users the possibility to communicate.
The corporate profile is used for applications, information/PR, and active sourcing.
We have no information regarding the processing of your personal data by the companies jointly responsible for the corporate profile. Further information can be found in the privacy policies of:
LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
XING: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
If users perform an action on our corporate profile (e.g., comments, posts, likes), it may result in personal data (e.g., real name or profile picture) being made public.
2. Legal basis for data processing
The legal basis for processing personal data for the purpose of communication with customers and interested parties is Art. 6(1)(f) GDPR. Our legitimate interest is to respond optimally to your inquiries or provide the requested information. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
3. Purpose of data processing
Our corporate profile is used to inform users about our services. Users are free to disclose personal data through their activities.
We store activities and personal data published via our corporate profile until the consent is revoked. In addition, we observe statutory retention periods.
5. Right to object
You can object to the processing of your personal data collected through your use of our corporate profile at any time and exercise the data subject rights listed under IV of this privacy policy. To do so, send us an informal email to the email address provided in this privacy policy.
Further information on exercising your rights can be found here:
XING: https://privacy.xing.com/de/datenschutzerklaerung
XIV. Hosting
The website is hosted on servers provided by a service provider commissioned by us.
Our service provider is:
1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when visiting the website. The stored information includes:
No merging of this data with other data sources takes place. The collection of this data is based on Art. 6(1)(f) GDPR. Our legitimate interest in processing this data is to display our website correctly and optimize its functionality.
The server hosting the website is located geographically in Germany.
XV. Content Delivery Networks
CloudFlare
We use functions of the content delivery network (CDN) CloudFlare provided by CloudFlare Germany GmbH, Rosental 7, 80331 Munich, Germany (hereinafter: CloudFlare) on our website. A content delivery network is a network of regionally distributed servers connected via the Internet, which delivers content—especially large media files such as videos. CloudFlare offers web optimization and security services, which we use to improve website loading times and protect it from misuse. When you access our website, a connection is established to CloudFlare servers to retrieve content. Personal data may be stored and processed in server log files, particularly user activity (e.g., which pages were visited) and device and browser information (e.g., IP address and operating system). Further information about the collection and storage of data by CloudFlare is available here: https://www.cloudflare.com/de-de/privacypolicy/
The use of CloudFlare functions serves the delivery and acceleration of online applications and content.
The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in technically error-free display and optimization of the website; for this purpose, server log files must be recorded.
Your personal information is stored only as long as necessary to fulfill the purposes described in this privacy policy or as legally required.
Information on exercising your rights with CloudFlare can be found at: https://www.cloudflare.com/de-de/privacypolicy/
XVI. Use of External Services
We use external services for various purposes. The services used are listed below:
Use of Meta Pixel
On our online presence, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter: Facebook). This allows us to track user actions after they have seen or clicked on a Facebook advertisement. Personal data may be stored and processed, in particular user activity (e.g., which pages were visited and which elements were clicked), device and browser information (e.g., IP address and operating system), data about displayed advertisements (e.g., which ads were shown and whether the user clicked on them) and data from advertising partners (e.g., pseudonymized user IDs). This enables us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes. Data may be transmitted to Facebook servers in the USA. The collected data is anonymized for us, meaning we do not see the personal data of individual users. However, Facebook stores and processes this data and may link it to your Facebook account and use it for its own advertising purposes in accordance with Facebook’s data use policy. Further information on data processing by Facebook can be found here: https://de-de.facebook.com/policy.php
The use of the Meta Pixel serves to analyze and optimize advertising measures.
3. Legal basis for personal data processing
The legal basis for processing users’ personal data is generally the user’s consent under Art. 6(1)(a) GDPR.
Your personal information is stored only as long as necessary to fulfill the purposes described in this privacy policy or as legally required, for example, for tax and accounting purposes.
5. Exercising your rights
You have the right to withdraw your data protection consent at any time. The lawfulness of processing based on the consent up to the point of withdrawal is not affected. You can prevent the collection and processing of your personal data by Facebook by blocking third-party cookies on your computer, using the „Do Not Track“ function of a supported browser, disabling script execution in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com/). Further information on objection and removal options regarding Facebook can be found at: https://de-de.facebook.com/policy.php
Use of Google Analytics 4 (GA4)
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google).
Google Analytics examines, among other things, how visitors use our website. Google places cookies on your device. During your visit, user behavior is recorded in the form of „events.“ This may involve the collection and analysis of personal data, including:
We use the User-ID feature. With the User ID, we can assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyze user behavior across devices.
We use Google Signals, which collects additional information about users who have enabled personalized ads (interests and demographic data), allowing ads to be delivered in cross-device remarketing campaigns.
By default, GA4 anonymizes IP addresses. This means your IP address is shortened by Google within the European Union or other countries of the European Economic Area. In rare cases, the full IP address may be transmitted to a Google server in the USA and shortened there. Google states that the IP address transmitted by your browser is not merged with other Google data in Google Analytics.
Further information about Google’s data processing can be found here: https://policies.google.com/privacy
The use of GA4 allows us to evaluate the use of our online presence and generate reports on website activity. These reports serve to analyze the performance of our website and to target advertising to people who have already expressed an initial interest through their visit.
2. Legal basis for processing personal data
The legal basis for processing personal data is generally the user’s consent under Art. 6(1)(a) GDPR.
3. Duration of storage
Personal data is deleted after 2 months. Deletion occurs automatically once a month.
4. Revocation, objection, and removal options
You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out based on consent prior to withdrawal. Consent can be withdrawn via our Cookie Consent Tool. You can also prevent the collection and processing of your personal data by Google by blocking third-party cookies on your computer, using the „Do Not Track“ function of a supported browser, disabling script execution in your browser or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com).
Further information on objection and removal options regarding Google can be found at: https://policies.google.com/technologies/partner-sites
You can also prevent data collection related to cookies and your use of the website (including your IP address) by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=de
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
5. Note on data transfer to third countries
Your personal data is also transmitted to the USA. There is no adequacy decision under Art. 45(3) GDPR for the USA. Data transfer without an adequacy decision carries certain risks: U.S. intelligence services may use online identifiers (such as IP addresses or unique IDs) for individual surveillance. Providers of electronic communication services in the USA are subject to U.S. surveillance under 50 U.S. Code §1881a (“FISA 702”), which may require them to provide personal data to U.S. authorities, including encryption keys, without legal remedies for the data subject. This is not a purely theoretical risk, as demonstrated by the European Court of Justice ruling of 16 July 2020 (C-311/18, “Schrems II”). We have concluded guarantees with Google in the form of standard contractual clauses pursuant to Art. 46(2)(c) GDPR. A copy of these clauses can be requested from us.
Use of Google Maps
We use the online map service Google Maps from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”). We use the Google Maps plugin to visually display geographic data and embed it on our online presence. By using Google Maps on our online presence, information about the use of our online presence, your IP address, and addresses entered in the route planner function are transmitted to a Google server and stored there. More information on Google’s data processing can be found here: https://policies.google.com/privacy?gl=DE&hl=de
The use of the Google Maps plugin serves to improve user-friendliness and an appealing presentation of our online presence.
3. Legal basis for processing personal data
The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6(1) sentence 1(a) GDPR.
Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required.
5. Right of withdrawal and deletion options
You have the right to withdraw your privacy consent at any time. The legality of processing based on consent up to the time of withdrawal is not affected by the withdrawal. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supported browser, disabling script execution in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com). Using the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de More information about objection and deletion options for Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de
Use of Google Tag Manager
We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). Google Tag Manager allows tags from Google services and third parties to be managed and bundled on an online presence. Tags are small code elements on an online presence used, among other things, to measure visitor numbers and behavior, track the effects of online advertising and social channels, perform remarketing and targeting, and test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which may collect data themselves. For more information, see the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data. More information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy: https://policies.google.com/privacy?hl=de
The purpose of processing personal data lies in the collected and clear management as well as the efficient integration of third-party services.
Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required. Advertising data in server logs are anonymized, with Google deleting parts of IP addresses and cookie information after 9 or 18 months according to its own information.
You have the right to withdraw your privacy consent at any time. The legality of processing based on consent up to the time of withdrawal is not affected. You can prevent the collection and processing of your personal data by Google by blocking third-party cookies, using “Do Not Track,” disabling script execution, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com). Additionally, you can prevent the collection of data generated by cookies relating to your use of the online presence (including your IP address) and their processing by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de. Using the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de More information about objection and deletion options for Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de
Use of Google reCAPTCHA
We use Google reCAPTCHA from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This tool checks whether a data entry is compliant and not performed by a bot. Google reCAPTCHA analyzes and authenticates the behavior of a visitor with regard to various characteristics. Personal data may be stored and evaluated, particularly user activity (especially mouse movements and clicked elements) and device and browser information (especially time, IP address, and operating system). The data are not linked to data possibly collected or used in parallel with authenticated Google services such as Gmail. More information on Google’s data processing can be found here: https://policies.google.com/privacy?gl=DE&hl=de
The use of Google reCAPTCHA serves to protect our online presence from misuse.
Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required, e.g., for tax and accounting purposes.
5. Right of withdrawal, objection, and deletion options
You can withdraw your consent at any time by clicking the button in the lower-left corner of the website. You can prevent the collection and processing of your personal data by Google by blocking third-party cookies, using “Do Not Track,” disabling script execution, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).
Using the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de
More information about objection and deletion options for Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de
Use of Google Webfonts
We use Google Webfonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). The web fonts are transferred to the browser cache upon page load to enhance the visual display of various information. If the browser does not support Google Webfonts or blocks access, text is displayed in a standard font. When the page is loaded, no cookies are stored on the visitor. Data transmitted in connection with the page load are sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com. Personal data may be stored and evaluated, particularly user activity (which pages were visited and which elements were clicked) and device and browser information, especially IP address and operating system. The data are not linked to data possibly collected or used in parallel with authenticated Google services such as Gmail. More information on Google’s data processing can be found here: https://policies.google.com/privacy?gl=DE&hl=de
The use of Google Webfonts serves an appealing display of our texts. If the browser does not support this function, a standard font from the user’s computer is used.
You can prevent the collection and processing of your personal data by Google by blocking third-party cookies, using “Do Not Track,” disabling script execution, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).
Use of Borlabs Cookie
We use functionalities of the cookie consent solution Borlabs Cookie from Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany (hereinafter: Borlabs). Borlabs enables us to obtain, manage, and legally document user consent for data processing. Borlabs sets cookies on the user’s device. The following data are processed:
More information on Borlabs’ data processing can be found here: https://de.borlabs.io/datenschutz
Processing personal data serves to comply with legal obligations under the GDPR and BDSG.
The legal basis for processing users’ personal data is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest lies in the purposes mentioned above.
5. Objection and deletion options
You can prevent the collection and processing of your personal data by Borlabs by blocking third-party cookies, using “Do Not Track,” disabling script execution, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com). More information about objection and deletion options for Borlabs can be found at: https://de.borlabs.io/datenschutz
Use of YouTube videos
We use the plugin from YouTube operated by Google, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, and its representative in the Union, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). We use the YouTube plugin to embed videos on our online presence. When visiting our online presence, your browser connects to YouTube servers. Personal data may be stored and evaluated, particularly user activity (which pages were visited and which elements were clicked) and device and browser information (IP address, operating system). We have no influence on the content of the plugin. If you are logged into your YouTube account while visiting, YouTube can assign your visit to your account. Interaction with this plugin sends these data directly to YouTube and stores them there. More information on Google’s data processing can be found here: https://policies.google.com/privacy?gl=DE&hl=de
The use of the YouTube plugin serves to improve user-friendliness and an appealing presentation of our online presence.
You have the right to withdraw your privacy consent at any time. The legality of processing based on consent up to the time of withdrawal is not affected. You can prevent the collection and processing of your personal data by Google by blocking third-party cookies, using “Do Not Track,” disabling script execution, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).
Use of Superchat
We use Superchat, a communication platform for centralized management and execution of customer communication via various messaging services such as WhatsApp, Facebook Messenger, or Instagram. Provided by SuperX GmbH, Prenzlauer Allee 242-247, 10405 Berlin, Germany.
Processing personal data serves to provide an additional communication channel via WhatsApp, allowing prospective or current students to contact us easily, particularly regarding questions about studying. Contact occurs only at your initiative; no active outreach via WhatsApp API occurs. Superchat enables efficient handling of inquiries and optimizes our communication processes with students and prospective students. Superchat also allows WhatsApp Business integration as a privacy-compliant alternative to direct WhatsApp use.
Processing of personal data by Superchat is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, namely optimizing communication and centralized management of message requests.
Data collected by Superchat is stored only as long as necessary to handle the respective inquiry or as long as a legitimate interest exists. Once the purpose is fulfilled or the interest no longer exists, data are deleted or anonymized unless legal retention obligations apply.
You have the right to object to the processing of your personal data by Superchat at any time. You can contact us at any time to exercise your rights or view Superchat’s privacy policy: https://www.superchat.de/datenschutz
Use of WhatsApp
We use the functionalities of the messenger WhatsApp from WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (and its representative Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 X525, Ireland) (hereinafter: WhatsApp). On our website, we provide the service to contact us via WhatsApp. Personal data and cookies are sent to WhatsApp. The following personal data are processed by WhatsApp:
More information on WhatsApp’s data processing can be found here: https://www.whatsapp.com/legal/privacy-policy-eea, https://www.whatsapp.com/legal/cookies
Processing personal data serves to provide an additional communication channel via WhatsApp for prospective or current students to contact us easily, particularly regarding questions about studying. Contact occurs only at your initiative; no active outreach via WhatsApp API occurs.
Communication is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, namely optimizing communication and centralized management of message requests.
You have the right to withdraw your privacy consent at any time. The legality of processing based on consent up to the time of withdrawal is not affected. More information about withdrawal and deletion options for WhatsApp can be found at: https://www.whatsapp.com/legal/privacy-policy-eea
XVII. Amendments to this Privacy Policy
We reserve the right to make changes to this Privacy Policy at any time. The Privacy Policy is updated regularly, and all changes will be published automatically on our website.
This privacy policy was created with the support of DataGuard.
Sie müssen den Inhalt von reCAPTCHA laden, um das Formular abzuschicken. Bitte beachten Sie, dass dabei Daten mit Drittanbietern ausgetauscht werden.
Sie sehen gerade einen Platzhalterinhalt von Turnstile. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie auf die Schaltfläche unten. Bitte beachten Sie, dass dabei Daten an Drittanbieter weitergegeben werden.
Sie sehen gerade einen Platzhalterinhalt von Facebook. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie auf die Schaltfläche unten. Bitte beachten Sie, dass dabei Daten an Drittanbieter weitergegeben werden.