Data Protection Policy

Data protection declaration

Responsible person in terms of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:

Andreas Christ, Managing Director

Your data subject rights

You can exercise the following rights at any time using the contact details provided for our data protection officer:

Information about your data stored by us and its processing (Art. 15 DSGVO),
Correction of incorrect personal data (Art. 16 DSGVO),
deletion of your data stored by us (Art. 17 DSGVO),
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
objection to the processing of your data by us (Art. 21 DSGVO) and
Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).
If you have given us consent, you can revoke this at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the controller.

A list of the supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Type and purpose of processing:

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

This provides us with certain data such as IP address, browser used and operating system.

Cookies cannot be used to launch programs or transmit viruses to a computer. The information contained in cookies enables us to facilitate your navigation and to display our web pages correctly.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Storage period and cookies used:

Insofar as you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

1 year

Insofar as these cookies may (also) affect personal data, we will inform you about this in the following sections.

You can delete individual cookies or the entire cookie stock via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
Newsletter

Nature and purpose of processing:

Your data will only be used to send you the subscribed newsletter by e-mail. Your name is provided in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).

For an effective registration, we require a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the “double-opt-in” procedure. For this purpose, we log the order for the newsletter, the sending of a confirmation email and the receipt of the response requested herewith. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.

Legal basis:

On the basis of your expressly given consent (Art. 6 para. 1 lit. a DSGVO), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a link to this effect in every newsletter. In addition, you can also unsubscribe directly on this website at any time or inform us of your revocation via the contact option provided at the end of this data protection notice.

Recipients:

Recipients of the data are, if applicable, order processors.

Storage period:

In this context, the data will only be processed as long as the corresponding consent exists. After that, they will be deleted.

Provision mandatory or required:

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Contact form

Type and purpose of processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This serves the purpose of assigning the enquiry and subsequently answering it. The provision of further data is optional.

Legal basis:

The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).

Recipients:

Recipients of the data are, if applicable, order processors.

Storage period:

Data will be deleted no later than 6 months after processing the request.

If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision mandatory or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

Use of Google Analytics.

Nature and purpose of processing:

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The purpose of the data processing is to evaluate the use of the website and to compile reports on activities on the website. Other related services are then to be provided based on the use of the website and the internet.

Legal basis:

The processing of the data is based on the consent of the user (Art. 6 para. 1 lit. a DSGVO).

Recipient:

The recipient of the data is Google as an order processor. For this purpose, we have concluded the corresponding order processing agreement with Google.

Storage period:

The data is deleted as soon as it is no longer required for our recording purposes.

Third-country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision mandatory or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of consent:

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: Browser Add On to deactivate Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

Profiling:

The Google Analytics tracking tool can be used to assess the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.

Use of script libraries (Google Web Fonts).

Type and purpose of processing:

In order to display our content correctly and in a graphically appealing manner across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) on this website to display fonts.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipients:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – but currently also unclear whether and, if so, for what purposes – that the operator collects Google data in this case.

Storage period:

We do not collect any personal data through the integration of Google Web Fonts.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision mandated or required:

The provision of personal data is neither legally nor contractually required. However, the correct display of content may not be possible due to standard fonts.

Revocation of consent:

The programming language JavaScript is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

Use of Google Maps

Nature and purpose of processing:

On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google in the Google data protection information. There you can also change your personal data protection settings in the data protection centre.

Detailed instructions on managing your own data in connection with Google products can be found here.

Legal basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipients:

By visiting the website, Google receives information that you have called up the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not want your data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or tailoring its website to your needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, and you must contact Google to exercise this right.

Storage period:

We do not collect any personal data, through the integration of Google Maps.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website or will only be able to use it to a limited extent.

Provision mandatory or required:

The provision of your personal data is voluntary, based solely on your consent. If you disable access, this may result in functional restrictions on the website.

Embedded YouTube videos

Type and purpose of processing:

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account first.

If a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider’s data protection declarations, where you will also find further information on your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis:

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Calling up YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:

Anyone who has deactivated the storage of cookies for the Google ad programme will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at “YouTube” can be found in the provider’s data protection statement at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision mandatory or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Google AdWords

Type and purpose of processing:

Our website uses Google conversion tracking. The company operating the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have accessed our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users.

Legal basis:

The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipients:

Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical procedure to third parties.

Our company does not receive any information from Google by means of which the data subject could be identified.

Storage period:

These cookies lose their validity after 30 days and are not used for personal identification.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this purpose – for example, by using a browser setting that generally deactivates the automatic setting of cookies or by setting your browser to block cookies from the domain “googleleadservices.com”.

Please note that you may not delete the opt-out cookies as long as you do not want any measurement data to be recorded. Once you have deleted all your cookies from the browser, you will need to set the relevant opt-out cookie again.

Provision mandatory or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Use of Google Remarketing

Type and purpose of processing:

This website uses the remarketing function of Google Inc. The operator of the Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he/she calls up websites that belong to the Google advertising network. On these pages, the visitor may be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google’s remarketing function.

Legal basis:

The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipients:

Our company does not contain any information from Google by means of which the data subject could be identified.

Withdrawal of consent:

According to its own information, Google does not collect any personal data during this process. However, if you do not wish to use Google’s remarketing function, you can deactivate it in principle by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Provision Mandatory or Required:

The provision of your personal data is voluntary, based solely on your consent. If you disable access, this may result in functional limitations on the website.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Processors used

The following organisations, companies or persons have been commissioned by the operator of this website to process data:

IONOS GmbH, Newsletter2Go GmbH

Changes to our data protection policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

Questions to the data protection officer

If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organisation directly:

edu:impact UG

Andreas Christ, Managing Director

Main Street 14

56290 Buch

Tel: 06762-9592991

office@edu-impact.de

The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2019-04-10).

Data protection notice for online meetings, telephone conferences and web events via “Zoom”.

We would like to inform you below about the processing of personal data in connection with the use of “Zoom”.

Purpose of processing

We use the tool “Zoom” to conduct telephone conferences, online meetings, video conferences and/or web events (hereinafter: “Online Meetings”). “Zoom” is a service provided by Zoom Video Communications, Inc. which is based in the USA.

Person responsible

The person responsible for data processing directly related to the conduct of “Online Meetings” is edu:impact UG.

Note: Insofar as you call up the website of “Zoom”, the provider of “Zoom” is responsible for data processing. However, calling up the website is only necessary for using “Zoom” in order to download the software for using “Zoom”.

You can also use “Zoom” if you enter the respective meeting ID and, if applicable, further access data for the meeting directly in the “Zoom” app.

If you do not want to or cannot use the “Zoom” app, the basic functions can also be used via a browser version, which you can also find on the “Zoom” website.

What data is processed?

Various types of data are processed when using “Zoom”. The scope of the data also depends on the data you provide before or during participation in an “online meeting”.

The following personal data are subject to processing:

User details: first name, last name, telephone (optional), e-mail address, password (if “single sign-on” is not used), profile picture (optional),

Department (optional)

Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information.

For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.

For dial-in with the telephone: information on the incoming and outgoing call number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be stored.

Text, audio and video data: You may have the opportunity to use the chat, question or survey functions in an “online meeting”. In this respect, the text entries you make are processed in order to display them in the “online meeting” and, if necessary, to record them. In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device are processed accordingly during the meeting. You can switch off or mute the camera or microphone yourself at any time via the “Zoom” applications.

To participate in an “online meeting” or to enter the “meeting room”, you must at least provide information about your name.

Scope of processing

We use “Zoom” to conduct “online meetings”. If we want to record “online meetings”, we will transparently inform you in advance and – where necessary – ask for consent. The fact of the recording will also be displayed to you in the “Zoom” app.

If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will not usually be the case.

In the case of web events, we may also process questions asked by web event participants for the purposes of recording and following up on web events.

If you are registered as a user with Zoom, reports of online meetings (meeting metadata, telephone dial-in data, questions and answers in web events, survey function in web events) may be stored by Zoom for up to one month.

Automated decision-making within the meaning of Art. 22 DSGVO is not used.

Legal basis for data processing

Insofar as personal data is processed by employees of edu:impact UG, § 26 BDSG is the legal basis for data processing. If, in connection with the use of “Zoom”, personal data is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component of the use of “Zoom”, Article 6 (1) (f) DSGVO is the legal basis for data processing. In these cases, our interest lies in the effective implementation of “online meetings”.

Otherwise, the legal basis for data processing when conducting “online meetings” is Art. 6 para. 1 lit. b) DSGVO, insofar as the meetings are conducted within the framework of contractual relationships.

If there is no contractual relationship, the legal basis is Art. 6 para. 1 lit. f) DSGVO. Here, too, our interest is in the effective conduct of “online meetings”.

Recipients / passing on of data

Personal data processed in connection with participation in “Online Meetings” will not be passed on to third parties as a matter of principle, unless they are specifically intended to be passed on. Please note that the content of “online meetings”, as well as personal meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.

Other recipients: The provider of “Zoom” necessarily receives knowledge of the above-mentioned data insofar as this is provided for in the context of our order processing agreement with “Zoom”.

Data processing outside the European Union

“Zoom” is a service provided by a provider from the USA. A processing of personal data therefore also takes place in a third country. We have concluded an order processing agreement with the provider of “Zoom” which complies with the requirements of Art. 28 DSGVO.

An appropriate level of data protection is guaranteed on the one hand by the “Privacy Shield” certification of Zoom Video Communications, Inc. and on the other hand by the conclusion of the so-called EU standard contractual clauses.

Data protection officer

We have appointed a data protection officer.

You can reach him as follows: edu:impact UG, Andreas Christ, Hauptstraße 14, 56290 Buch, e-mail: office@edu-impact.de.

Your rights as a data subject

You have the right to obtain information about the personal data concerning you. You can contact us for information at any time.

In the case of a request for information that is not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.

Finally, you have a right to object to processing within the scope of the law.

You also have a right to data portability within the framework of data protection law.

Deletion of data

We delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfil contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.

Right of complaint to a supervisory authority

You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.

Changes to this privacy policy

We revise this data protection notice in the event of changes in data processing or other occasions that make this necessary. You will always find the current version on this website.

Status: 10.04.2020