We process data of our contractual and business partners, e.g. customers and prospective customers (collectively referred to as “contractual partners”) within the scope of contractual and comparable legal relationships as well as associated measures and within the scope of communication with the contractual partners (or pre-contractual), e.g. in order to answer inquiries.
We process these data for the fulfilment of our contractual obligations, for the safeguarding of our rights and for the purposes of the administrative tasks associated with these data as well as for the business organisation. Within the framework of the applicable law, we only pass on the data of the contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or to fulfil legal obligations or with the consent of the contractual partners (e.g. to participating telecommunication, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about other forms of processing, e.g. for marketing purposes, within the scope of this data protection declaration.
Which data is required for the above-mentioned purposes, we will inform the contractual partners before or within the scope of data collection, e.g. in online forms, by special marking (e.g. colours) or symbols (e.g. asterisks or similar), or personally.
We delete the data after expiry of legal warranty and comparable obligations, i.e., in principle after 4 years, unless the data is stored in a customer account, e.g., as long as it must be kept for legal archiving reasons (e.g., for tax purposes usually 10 years). We will delete data that has been disclosed to us by the contractual partner within the scope of an order in accordance with the specifications of the order, in principle after the end of the order.
If we use third party providers or platforms to provide our services, the terms and conditions and data protection information of the respective third party providers or platforms apply in the relationship between the users and the providers.
Customer account: Contract partners can create an account within our online offer (e.g. customer or user account, in short “customer account”). If the registration of a customer account is required, contractual partners are informed of this as well as of the information required for registration. The customer accounts are not public and cannot be indexed by search engines. Within the scope of the registration as well as subsequent logins and uses of the customer account, we store the IP addresses of the customers together with the access times in order to be able to prove the registration and prevent possible misuse of the customer account.
If customers have cancelled their customer account, the data concerning the customer account will be deleted, subject to the retention of which is required for legal reasons. It is the responsibility of customers to back up their data when they have cancelled their customer account.
Economic analyses and market research: For business management reasons and in order to be able to identify market trends, wishes of contractual partners and users, we analyse the data available to us on business transactions, contracts, enquiries, etc., whereby contractual partners, interested parties, customers, visitors and users of our online offer may fall into the group of persons concerned.
The analyses are carried out for the purpose of business evaluations, marketing and market research (e.g. to determine customer groups with different characteristics). If available, we can take into account the profiles of registered users including their details, e.g. on services used. The analyses serve solely to serve us and are not disclosed externally, unless they are anonymous analyses with summarised, i.e. anonymised, values. Furthermore, we respect the privacy of the users and process the data for analysis purposes as pseudonymously as possible and, if feasible, anonymously (e.g. as summarized data).
Shop and e-commerce: We process the data of our customers in order to enable them to select, purchase or order the selected products, goods and related services, as well as their payment and delivery or execution.
The required information is marked as such within the scope of the order or comparable acquisition process and includes the information required for delivery, provision and invoicing as well as contact information in order to be able to consult with you if necessary.
Education and training services: We process the data of the participants in our education and training offers (uniformly referred to as “trainees”) in order to provide them with our training services. The data processed, the type, scope, purpose and necessity of their processing are determined by the underlying contractual and training relationship. The forms of processing also include the performance assessment and evaluation of our services and those of the instructors.
Within the scope of our activities, we may also process special categories of data, in particular data concerning the health of persons undergoing training and further training, as well as data revealing ethnic origin, political opinions, religious or ideological beliefs. To this end, we obtain the express consent of the persons to be trained, if necessary, and otherwise process the special categories of data only if it is necessary for the provision of training services, for the purposes of health care, social protection or the protection of the vital interests of the persons to be trained.
If it is necessary for the fulfilment of our contract, for the protection of vital interests or legally required, or if the consent of the person to be trained has been obtained, we will disclose or transfer the data of the person to be trained to third parties or agents, such as authorities or in the field of IT, office or comparable services, in compliance with the requirements of professional law.
Events and activities: We process the data of the participants of the events, activities and similar activities offered or organized by us (hereinafter uniformly referred to as “participants” and “events”) in order to enable them to participate in the events and to make use of the services or actions associated with participation.
If we process health-related, religious, political or other special categories of data in this context, then this is done in the context of publicity (e.g. at thematically oriented events or serves health care, security or is done with the consent of the persons concerned).
The required information is marked as such within the scope of the order, contract or comparable contract conclusion and includes the information required for the provision of services and invoicing as well as contact information in order to be able to make any necessary arrangements. Insofar as we have access to information from end customers, employees or other persons, we process this information in accordance with the legal and contractual requirements.
Additional information on commercial services: We process the data of our customers and principals (hereinafter referred to uniformly as “customers”) in order to enable them to select, purchase or commission the selected services or works and associated activities, as well as to pay for them and deliver them or execute or provide them.
The required information is marked as such within the scope of the order, contract or comparable contract conclusion and includes the information required for the provision of services and invoicing as well as contact information in order to be able to make any necessary arrangements.
- Processed data types: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. object of contract, duration, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
- Affected persons: Interested parties, business and contractual partners, customers
- Purposes of the processing: Contractual services and service, contact requests and communication, office and organisational procedures, management and answering of requests, security measures, visit evaluation, interest based and behaviour based marketing, profiling (creation of user profiles).
- Legal bases: Fulfilment of contract and pre-contractual enquiries (Art. 6 Paragraph 1 S. 1 lit. b. DSGVO), Legal obligation (Art. 6 Paragraph 1 S. 1 lit. c. DSGVO), Legitimate interests (Art. 6 Paragraph 1 S. 1 lit. f. DSGVO).