Privacy & Cookie Statement
Confidentiality and the protection of the privacy of our interested parties and customers are of particular importance to us. In the following, we would like to inform you about the information we collect when you visit our website and how personal data is used. Personal data is all data that can be related to you personally, e.g. name, IP address, e-mail address, account data, family relationships, ownership and user behavior.
If you have any further questions or comments about any of the following details, please feel free to contact us at privacy@residencegermany.com.
Status October 2023
I Name and address of the data controller
II Contact details of the data protection officer
III General information on data processing
IV Rights of the data subject
V Provision of the website and creation of log files
VI Use of cookies
VII Registration
VIII Newsletter
IX E-mail contact
X Application by e-mail
XI Company appearances
XII Use of company presences in job-oriented networks
XIII Hosting
XIV Selection of suitable job advertisements
XV Use of Google Analytics
XVI Google Ad Manager (Google Ad Services)
XVII Third party services used
XVIII Change of privacy policy
The responsible party within the meaning of the General Data Protection Regulation (DSGVO) and other data protection regulations is:
KHD KostenHilfe und Vernetzung UG (haftungsbeschränkt).
"KostenHilfe.de"
Bernhard Street 4
01069 Dresden
Germany
info@residencegermany.com
The data protection officer of the responsible person is:
Steve Böhm
Bernhard Street 4
01069 Dresden
Germany
privacy@residencegermany.com
Scope of the processing of personal data
As a matter of principle, we process personal data of our users only insofar as this is necessary for the provision of a functional website, as well as our contents and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is required by legal regulations.
Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) p. 1 lit. a DSGVO serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) p. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) p. 1 lit. c DSGVO serves as the legal basis.
If the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) sentence 1 lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) p. 1 lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) p. 1 lit. f DSGVO serves as the legal basis for the processing.
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
If this is the case, you have a right of access to this data and to the following information:
+ Purposes of processing
+ Categories of personal data
+ Recipients or categories of recipients
+ Planned storage period or the criteria for determining this period
+ The existence of the rights of rectification, erasure or restriction or opposition
+ Right of appeal to the competent supervisory authority
+ If applicable, origin of the data (if collected from a third party)
+ If applicable, existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the effects to be expected
+ If applicable, transfer of personal data to a third country or international organization
Right to rectification (Art. 16 DSGVO)
+ If your personal data is inaccurate or incomplete, you have the right to request that the personal data be corrected or completed without delay.
If one of the following conditions is met, you have the right to request restriction of the processing of your personal data:
+ You dispute the accuracy of your personal data, for a period of time that allows us to verify the accuracy of the personal data.
+ In the context of unlawful processing, you object to the erasure of the personal data and instead request the restriction of the use of the personal data.
+ We no longer need your personal data for the purposes of processing, but you need your personal data for the assertion, exercise or defense of your legal claims or
after you have objected to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.
If one of the following grounds applies, you have the right to request immediate erasure of your personal data:
Your data is no longer necessary for the processing purposes for which it was originally collected.
you withdraw your consent and there is no other legal basis for the processing.
You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) DSGVO.
Your personal data is processed unlawfully.
Erasure is necessary for compliance with a legal obligation under Union law or the law of the member state to which we are subject.
The personal data was collected in relation to information society services offered in accordance with Article 8(1) DSGVO.
Please note that the above reasons do not apply insofar as the processing is necessary:
For the exercise of the right to freedom of expression and information;
For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
For reasons of public interest in the area of public health.
For archival, scientific or historical research purposes in the public interest or for statistical purposes.
For the assertion, exercise or defense of legal claims.
You have the right to receive your personal data in a structured, common and machine-readable format or to request the transfer to another controller.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you that is carried out on the basis of Article 6 (1) sentence 1 lit. e or f DSGVO. This also applies to profiling based on these provisions.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR. A list of the supervisory authorities with local jurisdiction in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Description and scope of data processing
Each time our website is called up, our system automatically collects data and information from the computer system of the calling device.
The following data is collected in this context:
+ Information about the browser type and the version used.
+ The operating system of the user
+ The user's Internet service provider
+ The IP address of the user
+ Date and time of access
+ Websites from which the user's system accesses our website
+ Web pages that are accessed by the user's system via our website
This data is stored in the log files of our system. This data is not stored together with other personal data of the user.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f DSGVO.
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f DSGVO.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after 10 days. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful is to be determined in the context of a balancing of interests.
Description and scope of data processing
When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your terminal device. When you call up our website and at any time later, you have the choice of whether you generally permit the setting of cookies or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the entity that sets the cookie. Below we describe the type of cookies we use:
We use technically necessary cookies, which are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible.
The following data is stored and transmitted by the technically necessary cookies:
+ Log-in information
+ Use of website functions
We use cookies on our website that are not technically necessary. Text files that do not solely serve the functionality of the website but also collect other data are considered technically unnecessary cookies.
By setting technically unnecessary cookies, the following data is processed:
+ Location of the Internet user
+ Date and time of the call of the web page
+ Tracking of the surfing behavior
The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
We require the technically necessary cookies for the following applications:
+ Functionality of the website
The use of technically unnecessary cookies is for the purpose of improving the quality of our website, its content and thus our reach and profitability. By setting these cookies, we learn how the website is used and can thus constantly optimize our offer. In particular, these cookies serve us for the following purposes:
+ Objective measurement of user numbers
+ Analysis of user data
+ Personalization of the display
The provisions of the Telecommunications Telemedia Data Protection Act (TTDSG) are relevant for the storage of information in the end user's terminal equipment and/or access to information already stored in the end user's terminal equipment. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your terminal equipment is carried out on the basis of Section 25 (2) No. 2 TTDSG. This storage of and access to the information in your terminal equipment serves to facilitate your use of our website and to be able to offer you our services as you have requested. Some functions of our website also do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the session ends (e.g. logging out or closing the browser) or after the expiry of a specified duration. Information about different storage periods for cookies can be found in the following sections of this privacy policy.
Insofar as cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. The basis for the storage and access to information in this case is § 25 para. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a), Art. 7 DSGVO. You can revoke your consent at any time with effect for the future or subsequently grant it again by configuring your settings for cookies accordingly. Alternatively, you can prevent the storage of cookies by making appropriate settings in your browser software. Please note that the browser settings you make only affect the browser you are using. If personal data is processed following the storage of and access to the information on your terminal equipment, the provisions of the DSGVO are relevant. Information on this can be found in the following sections of this privacy policy.
Description and scope of data processing
On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:
+ E-mail address
+ Name
+ Salutation
+ Date and time of registration
+ Other registration data:
+ Status (expatriate/ student/ academic...)
+ Field of study
+ University
+ Start of study
+ Type of school
+ Postal code of place of residence
+ Grade level
As part of the registration process, consent is obtained from the user to process this data.
User registration is required for providing certain content and services on our website:
+ Making the history visible
+ Creation of a list of favorites
+ Personalization of the display
+ Sending newsletters upon consent
The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. a DSGVO if the user has given his consent.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
This is the case for the data collected during the registration process when the registration on our website is cancelled or modified.
Possibility of revocation in case of consent
As a user, you have the option to cancel your registration at any time. You can have the data stored about you changed at any time.
The account can be edited or deleted on the settings page under "Profile-> Edit profile".
Description and scope of data processing
On our website there is the possibility to receive a free newsletter. In doing so, the data from the input mask is transmitted to us when you register for the newsletter.
+ E-mail address
+ First name
+ Date and time of registration
+ Registration data (e.g. school, university, semester, etc.)
There is in connection with the data processing for the dispatch of newsletters a transfer of data to the:
Currently no forwarding active
The data will be used exclusively for sending the newsletter.
The collection of the user's e-mail address and registration data serves to deliver the newsletter in an individualized manner.
The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.
The legal basis for the processing of data after registration for the newsletter by the user is, if the user has given his consent, Art. 6 para. 1 p. 1 lit. a DSGVO.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
The other personal data collected during the registration process is usually deleted after a period of 10 days.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in each newsletter as well as an option in the user profile.
Description and scope of data processing
On our website, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
The data is used exclusively for processing the conversation.
In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DSGVO. Our legitimate interest is to optimally answer your inquiry that you send by e-mail.
If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
Scope of the processing of personal data
You can send us your application by e-mail. In doing so, we collect your e-mail address and the data you provide in the e-mail.
In addition, we offer an applicant/talent pool.
Purpose of data processing
The processing of personal data from your application e-mail serves us solely to process your application.
Legal basis for data processing
The legal basis for the processing of your data is the initiation of a contract which takes place at the request of the data subject, Art. 6 para. 1 p. 1 lit. b Alt. 1 DSGVO and § 26 para. 1 p. 1 BDSG.
After completion of the application process, the data will be stored for up to six months. Your data will be deleted after the six months at the latest. In the event of a legal obligation, the data will be stored within the framework of the applicable provisions.
The applicant has the possibility to object to the processing of his/her personal data at any time by sending an e-mail to jobs@residencegermany.com. In such a case, the application can no longer be considered.
All personal data stored in the course of electronic applications will be deleted in this case.
Use of corporate presences in social networks
Instagram:
Instagram, Part of Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland.
On our company page, we provide information and offer Instagram - users the opportunity to communicate. If you carry out an action on our Instagram company page (e.g. comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by Instagram, the company jointly responsible for the residencegermany corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our corporate presence in social networks for communication and information exchange with (potential) customers. In particular, we use the corporate presence for:
+ The provision of educational videos
+ The publication of lifestyle-related articles
In this context, publications via the corporate presence may include the following content:
Information about services
+ Advertising
+ Customer contact
In this context, every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behavior, offer you sweepstakes or conduct lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 para. 1 p. 1 lit. a, Art. 7 DSGVO. The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 p. 1 lit. f DSGVO. Thereby, our legitimate interest is to answer your request optimally or to be able to provide the requested information. If the purpose of contacting you is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.
The data generated by the company website is not stored in our own systems.
For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses pursuant to Art. 46 (2) lit. c DSGVO. A copy of the standard data protection clauses can be requested from us.
You can object at any time to the processing of your personal data that we collect in the course of your use of our Instagram corporate presence and assert your data subject rights listed under IV. of this privacy policy. To do so, send us an informal email to info@residencegermany.com. For the processing of your personal data by Instagram and the corresponding objection options, you can find more information here:
Instagram: https://help.instagram.com/519522125107875
YouTube:
YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, United States.
On our company page, we provide information and offer YouTube - users the possibility of communication. If you carry out an action on our YouTube corporate site (e.g. comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by the YouTube companies jointly responsible for the residencegermany corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our corporate presence in social networks for communication and information exchange with (potential) customers. In particular, we use the corporate presence for:
+ The provision of learning videos.
In this context, publications via the corporate presence may contain the following content:
+ Information about services
+ Advertising
+ Customer contact
In this context, each user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behavior, offer you sweepstakes or conduct lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 para. 1 p. 1 lit. a, Art. 7 DSGVO. The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 p. 1 lit. f DSGVO. Thereby, our legitimate interest is to answer your request optimally or to be able to provide the requested information. If the aim of contacting you is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
The data generated by the corporate presence is not stored in our own systems.
For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses pursuant to Art. 46 (2) lit. c DSGVO. A copy of the standard data protection clauses can be requested from us.
You can object at any time to the processing of your personal data that we collect in the course of your use of our YouTube - company presence and assert your data subject rights mentioned under IV. of this privacy policy. To do so, send us an informal e-mail to info@residencegermany.com. You can find more information about the processing of your personal data by YouTube and the corresponding objection options here:
YouTube: https://policies.google.com/privacy?gl=DE&hl=de
TikTok:
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
On our company page or company account, we provide information in auditory, visual or textual form and offer TikTok users the opportunity to communicate, in particular to learn about the company and our educational offerings and to engage with us, for user:inside contact and feedback. If you carry out an action on our company website (e.g. comments, sharing posts, likes, etc.), you may thereby make personal data (e.g. clear name, user name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by the companies co-responsible for the resigencegermany corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our corporate presence on TikTok for communication and information exchange with (potential) customers. In particular, we use the corporate presence for:
+ The provision of learning videos
+ The publication of lifestyle articles
In this context, the publications via the corporate presence may contain the following content:
+ Information about services
+ Advertising
+ Customer contact
Every user is free to publish personal data through activities.
The legal basis for data processing is Art. 6 para.1 Uabs.1 lit. a DSGVO.
The data generated by the corporate presence is not stored in our own systems.
You can object at any time to the processing of your personal data that we collect in the course of your use of our company appearances and assert your data subject rights as stated under IV. of this data protection declaration. To do so, send us an informal e-mail to (info@residencegermany.com).
For more information on the processing of your personal data by TikTok and the corresponding objection options, please visit:
TikTok: https://www.tiktok.com/legal/privacy-policy-eea?lang=de
Scope of data processing
We use the possibility of company appearances in profession-oriented networks. We maintain a company presence on the following profession-oriented networks:
LinkedIn:
LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
On our site we provide information and offer users the opportunity to communicate.
The company presence is used for job applications, information/PR and active sourcing.
We do not have any information on the processing of your personal data by the companies jointly responsible for the corporate presence. For more information, please refer to the privacy policy of:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy?trk=hbftpriv
If you carry out an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public.
Legal basis for data processing
The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 p.1 lit. f DSGVO. In this context, our legitimate interest is to optimally answer your inquiry or to be able to provide the requested information. If the purpose of contacting you is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
Purpose of the data processing
Our company website serves to inform users about our services. In doing so, every user is free to publish personal data through activities.
Duration of storage
We store your activities and personal data published via our corporate presence until you revoke your consent. In addition, we comply with the statutory retention periods.
Possibility of objection
You can object at any time to the processing of your personal data that we collect in the course of your use of our corporate presence and assert your data subject rights mentioned under IV. of this data protection declaration. To do so, send us an informal e-mail to the e-mail address stated in this data protection declaration.
Further information on exercising your rights can be found here:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy?trk=hbftpriv
The website is hosted on servers by a service provider contracted by us.
Our service provider is:
STRATO AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany.
The servers are located in data centers in Berlin and Karlsruhe, Germany.
Further details and updates can be found on the provider's website:
https://www.strato.de/datenschutz/
The collected data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. Our legitimate interest for processing this data is to present our website without errors and to optimize its functions.
When you visit our job portal, we suggest job advertisements with a regional reference in particular. For this purpose, we determine your approximate location via a self-hosted geo-location database. The location is only stored temporarily for the duration of your visit. There is no data transmission to third parties. The legal basis for the data processing mentioned here is Art. 6 (1) lit. f DSGVO based on our interest in ensuring more precise targeting and thus providing offers with greater relevance for users.
Scope of the processing of personal data
We use Google Analytics (Google Analytics 4, Universal Analytics), a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: "Google").
Google Analytics examines, among other things, the origin of visitors, their length of stay on individual pages and the use of search engines and thus allows better monitoring of the success of advertising campaigns. Google sets a cookie on your computer. This allows personal data to be stored and analyzed, including the following:
+ User activity (in particular, which pages have been visited and which elements have been clicked on),
+ Device and browser information (in particular, the IP address and operating system),
+ data about the advertisements displayed (in particular, which advertisements were displayed and whether the user clicked on them), and
+ Data from the registration form (with the exception of personal data such as name or e-mail).
The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this online presence, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the operator of the website. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our online presence.
Further information on the processing of data by Google can be found here:
https://policies.google.com/privacy?gl=DE&hl=de.
For the consideration of your privacy preferences, we use the "Consent Mode" in the extended implementation. You can find more details here:
https://support.google.com/analytics/answer/9976101?hl=de
The purpose of using Google Analytics is to evaluate the use of our online presence and to identify problems and errors on the site at an early stage.
The legal basis for the processing of users' personal data is generally the user's consent pursuant to Art. 6 (1) p. 1 lit. a DS-GVO.
The legal basis for the transfer of your personal data to the United States of America is Art. 49 (1) p. 1 lit. a DS-GVO.
If you consent to the use of Google Analytics, it cannot be guaranteed that your personal data will remain within the EU or the EEA. In this respect, your personal data may be processed on servers in the United States of America, whose level of data protection has been classified by the European Union as a non-adequate level of data protection. In order to ensure appropriate safeguards for the protection of the transfer and processing of your personal data, which may be processed on servers in the United States of America and may thereby be subject to requests by US security authorities, the transfer of data to Google is based on appropriate safeguards pursuant to Art. 46 et seq. DS-GVO, in particular by concluding so-called standard data protection clauses according to Art. 46 para. 2 lit. c DS-GVO. A copy of the appropriate safeguards can be requested by sending an informal request to the contact information above.
Through the transmission and processing of your personal data in the USA, there is the possibility that American authorities, secret services or the government gain complete access to the transmitted data. The scope, purpose and duration of this processing by the aforementioned agencies are then beyond your control. It is very likely that your rights under the GDPR will no longer be protected or that you will not be able to assert them.
Your personal information will be stored as necessary to fulfill the purposes described in this Privacy Policy or as required by law. Advertising data in server logs will be anonymized by Google's own account deleting parts of the IP address and cookie information after 9 and 18 months, respectively.
Revocation and elimination options
You have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
For more information on objection and removal options vis-à-vis Google, please visit:
https://policies.google.com/privacy?gl=DE&hl=de
Your personal data will also be transferred to the USA. There is no adequacy decision for the USA according to Art. 45 (3) DS-GVO. Furthermore, there are no appropriate safeguards according to Art. 46 DS-GVO. We would like to point out that a data transfer without an adequacy decision and without appropriate safeguards entails certain risks, which we would like to inform you about below:
Intelligence services of the USA take certain online identifiers (such as the IP address or unique identification numbers) as a starting point for monitoring individuals. In particular, it cannot be ruled out that these intelligence services have already collected information about you, with the help of which the data transmitted here can be traced back to you.
Providers of electronic communications services headquartered in the United States are subject to surveillance by U.S. intelligence agencies pursuant to 50 U.S. Code § 1881a ("FISA 702"). Accordingly, providers of electronic communications services headquartered in the U.S. have an obligation to make personal data available to U.S. authorities pursuant to 50 U.S. Code § 1881a. Even encryption of data at the electronic communications service provider's data centers may not provide adequate protection because, with respect to imported data in its possession or custody or under its control, an electronic communications service provider has a direct obligation to provide access to or surrender such data. This obligation may expressly extend to the cryptographic keys without which the data cannot be read.
The fact that this is not merely a "theoretical risk" is demonstrated by the ECJ's judgment of July 16, 2020, C-311/18.
Description and scope of data processing
We use Google Ad Manager, a product of Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: "Google") to display advertising content of our customers on the website. The selection of advertisements is primarily based on the sub-page on which the user is located.
For registered users, some of the data from the registration form is also included. In detail:
+ Education level (pupil, student)
+ Course of study
+ Start of studies/school
+ Educational institution
+ Postal code of place of residence
The processing of data taking into account your selected preferences is carried out according to the standard of the IAB Transparency and Consent Framework (TCF). More information:
https://iabeurope.eu/tcf-standardisation-principles/
More information about the processing of data by Google Ad Manager:
https://policies.google.com/privacy?gl=DE&hl=de
We use the Ad Manager to manage our customers' content and campaigns and control booked advertising quotas over the booked time periods. The data used is used to target advertising precisely.
Legal basis for the processing of personal data
The legal basis for processing the data of non-registered users is our legitimate interest according to Art. 6 (1) p. 1 lit. f DS-GVO. To protect the interests and fundamental rights of our users, we pay close attention to the selection of our web ads and reject, among others, those with adult content.
In the case of registered users, we also process data on the basis of the user's consent pursuant to Art. 6 (1) p. 1 lit. a DS-GVO.
The data is used exclusively for the selection of suitable advertisements and then stored exclusively anonymously. Thus, there is no storage of personal data beyond the period of the advertising playout.
Possibility of revocation in case of consent
You have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
The "Privacy settings" tab at the bottom of the website is available for this purpose.
We use plugins for various purposes. The plugins used are listed below:
Service provider Third country transfer (country) Purpose of data processing Legal basis of data processing Information on data protection and appropriate guarantees in the case of third country transfer.
- actually no content -
Duration of storage
Your personal information will be retained for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.
Transfer to third countries
When using the plugins marked with third country transfer or USA, personal data may be transferred to servers of third countries outside the EU, such as the USA. The legal basis for this transfer is consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. The United States of America does not provide an adequate level of data protection based on a decision of the European Union. The essential risk of the transfer lies in the obligation of the plug-in providers to make user data accessible to American authorities under certain circumstances. An order processing agreement with standard contractual clauses is currently in place with all providers in order to make the third-country transfer as data-protection-friendly and secure as possible. Adjustments to the ECJ ruling of 16.07.2020 (Schrems II, ref. C-311/18) including additional security measures are currently being sought by us. A copy of the standard data protection clauses can be requested by sending us an informal email.
Possibility of revocation
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can prevent the collection as well as the processing of your personal data by the respective providers by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
We reserve the right to change the data protection declaration in order to adapt it to a possible change in the legal situation or in the event of changes to the service as well as data processing.