Privacy Policy

3.1 Scope of the processing of personal data

As a matter of principle, we only process personal data of our users insofar as this is necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users is regularly only carried out after the consent of the user. An exception applies in those cases in which obtaining prior consent is not possible for actual reasons and the processing of the data is required due to legal regulations..

3.2 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

3.3 Data deletion and storage period

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. Storage may also take place if this required by the European or national legislators, Union regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

4.1 Right of information

You may request confirmation from the controller as to whether personal data concerning you are being processed by him.

If there is such processing, you can request information from the controller about the following:

• the purposes for which the personal data are processed;
• the categories of personal data which are processed;
• the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
• the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage duration;
• the existence of a right to rectify or erase personal data concerning you, a right to have processing restricted by the controller or a right to object to such processing;
• the existence of a right of appeal to a supervisory authority;
• any available information on the origin of the data if the personal data are not collected from the data subject;
• the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information on whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 of the GDPR in connection with the transfer.

4.2 Right of rectification

You have a right of rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

4.3 Right to restriction of processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

• if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and you refuse to erase the personal data and instead request the restriction of the use of the personal data;
• the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims, or
• if you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate grounds of the controller outweigh your grounds.

Where the processing of personal data relating to you has been restricted, those data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4.4 Right to deletion

a) Obligation to delete

You may request the controller to erase the personal data concerning you without delay and the controller is obliged to erase this data without delay if one of the following reasons applies:

• The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
• You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
• The personal data concerning you has been processed unlawfully.
• The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
• The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17 (1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to, or copies or replications of, that personal data.

c) Exceptions

The right to erasure does not exist insofar as the processing is necessary

• to exercise the right to freedom of expression and information.
• for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) of the GDPR, where the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
• for the assertion, exercise or defence of legal claims.

4.5 Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right against the controller to be informed about these recipients.

4.6 Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that

• the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
• the processing is carried out with the aid of automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons.

The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

4.7 Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

4.8 Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

4.9 Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

• is necessary for the conclusion or performance of a contract between you and the controller,
• is authorised by legislation of the Union or the Member States to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
• is done with your express consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (b) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in 1 and 3, the controller shall take reasonable steps to safeguard the rights and freedoms of, and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

4.10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

9.1 Description and scope of data processing

On our website you have the opportunity to register for a course of study. In doing so, we process all data that is entered and provided by you in the course of the registration or the fulfilment of a study contract. This includes the following data: master data (such as name, address and other contact details, date of birth, nationality), your photo, bank account details, curriculum vitae, information on your course of study and intended degree, details of your previous school education, details of any first degree, details of practical work experience or training, information on any further training you have completed, your current employer and their contact details, as well as proof of employment and any other information you have provided voluntarily.

9.2 Purpose of the data processing

We use the processing of personal data to check your registration, to fulfil the contractual agreement for students, to carry out and process examinations, to process fees and claims, for applications relevant to the study contract such as leave of absence or extension semesters and for activities in the Online Campus.

9.3 Legal basis for data processing

The processing is necessary for the fulfilment of a contract. The legal basis is therefore Art. 6 (1) (b) GDPR.

9.4 Duration of storage

Your personal data will be stored by us insofar as and as long as this is necessary for the processing purposes pursued by us within the framework of the fulfilment of the study contract. The data will be stored until the end of the contractual relationship. Insofar as legal or contractual retention periods exist beyond this point in time, which provide for further storage of your data, we will also store your data for these purposes beyond the termination of the contractual relationship. Data for which there is no legal or contractual obligation to retain data beyond the term of the study contract will be anonymised after expiry of the respective retention periods, unless you have expressly and specifically consented to the further use of your data.

In the event that your application is rejected, your personal data will not be anonymised until three months after the start of the degree programme for which you have registered, in order to enable you to move up.

We use the IP address and other information provided by the user (in particular postcode in the context of registration or ordering) for regional targeting (so-called "geotargeting").

Regional targeting is used, for example, to automatically show you regional offers or advertisements that are often more relevant to users. The legal basis for the use of the IP address and, if applicable, other information provided by the user (in particular postcode) is Art. 6 (1)(f) GDPR, based on our interest in ensuring more precise targeting and thus providing offers and advertising with higher relevance for users.

In this process, part of the IP address and the additional information provided by the user (in particular postcode) are merely read out and not stored separately. You can prevent geotargeting by, for example, using a VPN or proxy server that prevents precise localisation. In addition, depending on the browser used, you can also deactivate location localisation in the corresponding browser settings (insofar as this is supported by the respective browser).

We use geotargeting on our website for the following purposes: 

• Analytic purposes

We use plugins for various purposes. The plugins used are listed below:

Use of Facebook Pixel

1. Scope of the processing of personal data

We use the Facebook pixel of Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and its representative in the Union Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal H , D2 Dublin, Ireland (hereinafter referred to as: Facebook) on our online presence. With its help, we can track the actions of users after they have seen or clicked on a Facebook advertisement. This allows personal data to be stored and analysed, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system), data about the advertisements displayed (especially which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (especially pseudonymised user IDs). This enables us to record the effectiveness of the Facebook ads for statistical and market research purposes.

 In the process, data may be transmitted to Facebook servers in the USA.

The data collected in this way is anonymous for us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook. Facebook may link this data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook's data usage policy.

For more information on how Facebook processes data, please click here:

https://de-de.facebook.com/policy.php

2. Purpose of the data processing

 The use of the Facebook pixel serves to analyse and optimise advertising measures.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is, in principle, the user's consent pursuant to Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be retained for as long as is necessary to fulfil the purposes described in this Privacy Policy.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent the collection as well as the processing of your personal data by Facebook by preventing third-party cookies from being stored on your computer, by using the "Do Not Track" function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

 You can find more information on objection and removal options vis-à-vis Facebook at:

https://de-de.facebook.com/policy.php

Use of Google Ads and Doubleclick

1. scope of the processing of personal data

We use Google AdWords of Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). We use this service to place advertisements. Google sets a cookie on your computer. As a result, personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymised user IDs).

Further information on the processing of data by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of the data processing

We only gain knowledge of the total number of users who have responded to our ad. No information is shared that could identify you to us. The use does not serve the purpose of tracking.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is, in principle, the user's consent pursuant to Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by Google by preventing third-party cookies from being stored on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser 

or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the use of your personal data by Google using the following link:

https://adssettings.google.de

 You can find more information about objection and removal options vis-à-vis Google at:

https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Analytics [LM1] 

1. Scope of the processing of personal data

We use Google Analytics, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). Google Analytics examines, among other things, the origin of visitors, the length of time they spend on individual pages and the use of search engines, thus enabling better monitoring of the success of advertising campaigns. Google sets a cookie on your computer. This allows personal data to be stored and analysed, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system), data about the advertisements displayed (especially which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (especially pseudonymised user IDs). The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this online presence, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

 Further information on the processing of data by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of the data processing

The purpose of processing personal data is to specifically address a target group that has already expressed an initial interest by visiting the site.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is, in principle, the user's consent pursuant to Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be retained for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs will be anonymised by Google's own deletion of parts of the IP address and cookie information after 9 and 18 months respectively.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by Google by preventing third-party cookies from being stored on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser 

or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

 You can deactivate the use of your personal data by Google using the following link:

https://adssettings.google.de

 For more information on how to object and opt-out of Google, please visit:

https://policies.google.com/privacy?gl=DE&hl=de

Use of Google ReCaptcha

1. Scope of the processing of personal data

We use Google ReCaptcha from the provider Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. This tool is intended to check whether a data entry is compliant and has not been made by a bot. To this end, Google ReCaptcha analyses and authenticates the behaviour of a visitor to an online presence regarding a wide range of characteristics. As a result, personal data can be stored and evaluated, especially the user's activity (in particular mouse movements and which elements have been clicked on) and device and browser information (in particular time, IP address and operating system).

The data will not be associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

Further information on the processing of data by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of the data processing

The use of Google ReCaptcha serves to protect our online presence from misuse.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is, in principle, the user's consent pursuant to Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by Google by preventing third-party cookies from being stored on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the use of your personal data by Google using the following link:

https://adssettings.google.de

You can find more information about objection and removal options vis-à-vis Google at:

https://policies.google.com/privacy?gl=DE&hl=de

Use of Matomo

1. Scope of the processing of personal data

We use the open source tracking tool Matomo (https://matomo.org/) to analyse the surfing behaviour of our users. Matomo sets a cookie on your computer. This allows personal data to be stored and analysed, in particular the activity of the user (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and the operating system), data about the advertisements displayed (especially which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (especially pseudonymised user IDs). 

The software is programmed in such a way that the IP addresses are not stored in full, as 2 bytes of the IP address are masked for anonymisation (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer. The data is stored in our MySQL database, logs or report data are not sent to Matomo servers.

Further information on the processing of data by Matomo can be found here:

https://matomo.org/privacy-policy/

2. Purpose of the data processing

The processing of the users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information on the use of the individual components of our online presence. This helps us to continuously improve our online presence and its user-friendliness.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is generally the user's consent pursuant to Art. 6 (1) (f) GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by Matomo by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the processing of your personal data by Matomo using the following link:

https://matomo.org/privacy-policy/

 For more information on objection and removal options vis-à-vis Matomo, please visit:

https://matomo.org/privacy-policy/

Use of Outbrain

1. Scope of the processing of personal data

We use functions of Outbrain UK Limited, 5 New Bridge Street, London, EC4V 6JA, UK (hereinafter: Outbrain). On parts of our online presence, we use the technology of the provider Outbrain, with which our users are referred to further content within our online presence and to online presences of third parties that may also be of interest to them. The further reading recommendations integrated by Outbrain, e.g. below an article, are determined on the basis of the content previously read by the user. For the display of this interest-related further content, Outbrain uses cookies that are stored on the user's terminal device. This allows personal data to be stored and analysed, in particular the user's activity (especially which pages have been visited and which elements have been clicked on) and device and browser information (especially the IP address and the operating system). The content displayed in the Outbrain widget is automatically controlled and delivered by Outbrain in terms of content and technology. The display of reading recommendations by Outbrain by means of cookies takes place on a pseudonymised basis.

Further information on the processing of data by Outbrain can be found here:

https://www.outbrain.com/de/legal/privacy

2. Purpose of the data processing

The use of the Outbrain plug-in serves to improve the user-friendliness of our online presence and service. We use this plug-in to be able to offer article recommendations.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is, in principle, the user's consent pursuant to Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by Outbrain by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

With the following link you can deactivate the use of your personal data by Outbrain under point 2. (d): https://www.outbrain.com/de/legal/privacy

You can find more information about objection and removal options vis-à-vis Outbrain at:

https://www.outbrain.com/de/legal/privacy

Use of YouTube

1. scope of the processing of personal data

We use the plugin operated by Google from YouTube, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA and its representative in the Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google). We use the YouTube plugin to embed videos from YouTube on our online presence. When you visit our online presence, your browser establishes a connection with YouTube's servers. As a result, personal data can be stored and evaluated, especially the user's activity (in particular, which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular, the IP address and the operating system).

We have no influence on the content of the plug-in. If you are logged into your YouTube account during your visit, YouTube can assign your online presence visit to this account. By interacting with this plug-in, this corresponding information is transmitted directly to YouTube and stored there.

Further information on the processing of data by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of the data processing

The use of the YouTube plug-in serves to improve user-friendliness and an appealing presentation of our online presence.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is, in principle, the user's consent pursuant to Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by Google by preventing third-party cookies from being stored on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the use of your personal data by Google using the following link:

https://adssettings.google.de

 You can find more information about objection and removal options vis-à-vis Google at:

https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Tag Manager

1. Scope of the processing of personal data

We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). The Google Tag Manager can be used to manage tags from Google's services and those of third-party providers and to embed them in a bundled form on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting and to test and optimise online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager ensures that other tags are triggered, which in turn may collect data. Information on this can be found in the passages on the use of the corresponding services in this data protection declaration. Google Tag Manager does not access this data. 

Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html  and in Google's data protection declaration: https://policies.google.com/privacy?hl=de. 

2. Purpose of the data processing

The purpose of the processing of the personal data is the collected and clear management as well as an efficient integration of the services of third-party providers.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is, in principle, the user's consent pursuant to Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be retained for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs will be anonymised by Google's own deletion of parts of the IP address and cookie information after 9 and 18 months respectively.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by Google by preventing third-party cookies from being stored on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link:

https://adssettings.google.de

For more information on how to object and opt-out of Google, please visit:

https://policies.google.com/privacy?gl=DE&hl=de

Use of Twitter

1. Scope of the processing of personal data

We use the analysis tool Twitter Analytics of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (hereinafter referred to as: Twitter). Twitter Analytics allows us to measure interaction with Twitter users, learn the interests, locations and origins of our followers and track how our Twitter Cards achieve clicks, app installs and retweets. The following data is processed:

• IP address (anonymised)
• Browser type
• Referrer/Exit pages
• Operating system
• Time and date of access
• Clickstream data
• Views
• Clicks
• Twitter account details

For more information on the processing of data by Twitter Analytics, please click here:

https://twitter.com/de/privacy

2. Purpose of the data processing

The processing of users' personal data by Twitter Analytics enables us to analyse the performance of our advertising on Twitter and the interactions with Twitter users. By evaluating the data obtained, we are able to compile information on the use of the individual components of our offer. This helps us to constantly improve our advertising measures and, in this context, also to increase user-friendliness.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is, in principle, the user's consent pursuant to Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be retained for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by law.

5. Revocation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by Twitter by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the use of your personal data by Twitter using the following link:

https://twitter.com/personalization

For more information on objection and removal options vis-à-vis Twitter, please visit:

https://twitter.com/de/privacy