Date: 13 March 2024
1) Preamble
In the following text we inform you about the acquisition of personal data when you visit our website. Personal data is all data which can refer to you personally, e.g. name, address, e-mail addresses, user behaviour.
2) Party responsible / DPO
|
Controller for data processing Data Protection Officer |
Data Protection Officer of the Controller |
|
Frankfurt School of Finance & Management gGmbH Adickesallee 32-34 60322 Frankfurt am Main Telefon: +49 (0)69 154008 -0 Represented by: Prof. Dr. Nils Stieglitz, Präsident |
Data Protection Intersoft consulting services AG Beim Strohhause 17 20097 Hamburg |
The hosting of the website is handled by root360 GmbH.
The maintenance of the website is handled by Frankfurt School of Business and Management gGmbH
3) Which data is processed
a) General data acquisition with call-up of our website
In case of use of the website for purely informative reasons, thus when you do not register, request brochures, register for seminars or webinars or send us information in any other way, we record only that personal data which your browser sends to our server. If you wish to investigate our website, we record the following data which is technically necessary for us in order to present our website to you and to guarantee stability and security (legal situation is the entitled interest in accordance with Art. 6 Sect. 1 p. 1 lit. f GDPR, insofar as access to information stored in the user’s terminal equipment is absolutely necessary, also § 25 (2) No. 2 TTDSG.
|
|
Purpose of the processing |
Storage duration |
|
Operating system used |
Assessment according to devices, to ensure optimised representation of the website |
The data is deleted when the respective session is ended. |
|
Information about the browser type and the version used |
Assessment of the browser used, to optimise our websites |
|
|
Internet service provider of the user |
Assessment of the Internet service provider |
|
|
IP address |
Presentation of the website on the respective device |
|
|
Date and time of the call-up |
Ensuring the proper operation of the website. |
|
|
If necessary, manufacturer and type designation of the smartphone, tablet or other terminal unit |
Assessment of the device manufacturer and types of mobile terminal units for statistical objectives |
|
|
Logfiles |
Ensuring the proper operation of the website |
It is imperative for the website operation to capture data and record it in logfiles. There is, therefore, no opportunity to raise objection.
b) Data acquisition with further use of other functions of this website
In addition, our website offers different possibilities to register, log on or to make contact with us over online forms, with specification of personal data.
Included in this personal data, among other things, are first name, last name, address, e-mail addresses, company, telephone and fax number, as well as different selection fields. Mandatory data details are marked with *. All possible data extending beyond this can be given voluntarily and for improved handling.
For an improved overview, the possibilities and the purposes of data processing are represented in tabular form.
Up to discontinuance of purpose
Function |
Purpose of data processing |
Storage duration |
|
Subscription to different newsletters |
Sending of information on the respective services and products of the selected newsletters |
Up to discontinuance of purpose or the withdrawal of consent, depending on whether what occurs first. |
|
Registration for webinars |
Sending of information on the webinar, sending of the access data for participation in the webinar, transfer of the log-in status as well as the review report, sending of information about similar webinars |
Up to discontinuance of purpose or the withdrawal of consent, depending on whether what occurs first. |
|
Contact form |
Answer to your inquiry |
Up to discontinuance of purpose |
4) Inquiries related to general contact addresses or the contact form
You have the possibility to contact us via our general e-mail addresses or the contact form. Provided that you contact us via such an address, the personal data sent in this manner is solely processed for the purpose intended.
5) Cookies
a) General information
Our website uses cookies. Cookies are text files which are stored in the Internet browser or the Internet browser on the computer system of the user. If a user calls up a website, then a cookie can be stored on the operating system of the user. This cookie includes a characteristic character string which enables an unambiguous identification of the browser when visiting the website again.
b) Type differentiation of the cookies
Technically necessary cookies
We use cookies in order to structure our website more user-friendly. Some elements of our Internet page require that the calling browser can be also identified after a site change.
Technically necessary cookies are not required as mandatory to display the website. However, some functions of the website, such as e.g. the online Campus and registration for seminars etc., cannot be used properly without these cookies. Consequently, no possibility of objection exists for the user, where a deactivation this cookies can be carried out by settings on the respective browser.
Cookies for range measurement
Cookies for range measurement collect information about the manner of use of our website, e.g. website call-ups or error messages. These cookies store no information items which would allow an identification of the user. The collated information is exclusively aggregated and thus evaluated anonymously.
Name of the cookie |
Purpose of the processing |
Legal basis for the processing |
Storage duration |
|
Google Analytics |
Generation and change of the cookie information; Optimisation of the representation of the website and adaptation of the contents |
Legitimate interest |
38 months |
|
Google GA Audiences |
Generation and change of the cookie information; Optimisation of the representation of the website and adaptation of the contents |
Legitimate interest |
38 months |
Cookies for marketing purposes
We use cookies for marketing objectives in order to address our users with advertising oriented to their interests. In addition, we use the cookies in order to limit the probability of the playout of an advertisement and to measure the effectiveness of our advertising activities. This information can also be communicated to third parties, such as e.g. Ad networks.
Name of the cookie |
Purpose of the processing |
Legal basis for the processing |
Storage duration |
|
Double Click |
Optimisation of the representation of advertisements and adaptation of the associated contents |
Legitimate interest |
38 months |
|
Google AdWords Conversion |
Optimisation of the representation of advertisements and adaptation of the associated contents |
Legitimate interest |
38 months |
|
Double Click Floodlight |
Optimisation of the representation of advertisements and adaptation of the associated contents |
Legitimate interest |
38 months |
|
Google Dynamics Remarketing |
Optimisation of the representation of advertisements and adaptation of the associated contents |
Legitimate interest |
38 months |
|
Google AdWords user List |
Optimisation of the representation of advertisements and adaptation of the associated contents |
Legitimate interest |
38 months |
|
Hotjar |
User behaviour on the website is measured, recorded and, if necessary, evaluated. |
Legitimate interest |
12 months |
|
Bing Universal Event Tracking (UET) |
Optimisation of the representation of advertisements and adaptation of the associated contents |
Legitimate interest |
38 months |
6) Integration of third-party services and content
In order to optimise our online services and to make your stay on our website as pleasant as possible, we incorporate content and services from third parties usually on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO). In order to be able to display this content to you, your IP address must be transmitted to this third party provider. Under certain circumstances, further data may be collected from the third party providers or pixel tags and/or cookies may be used.
In the following we would like to offer you further information.
Social-Plugins
This website uses social plugins of the following provider/s:
– Meta formerly Facebook (Operator: Meta Platforms, Inc., 1601 Willow Road, Menlo Park California 94025, USA. The entity responsible for handling data subject rights within the EU/EEA is Meta Platforms Ireland Ltd. 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland)
– X formerly Twitter (Operator: X Corp. 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The entity responsible for handling data subject rights within the EU/EEA is Twitter International Unlimited Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland).
– Youtube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland)
– Xing (Xing SE, Dammtorstraße 30, 20354 Hamburg, Deutschland)
– Linkedin (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Placa, Dublin 2)
– Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
These plugins usually collect data from you by default and transmit it to the servers of the provider. Legal basis for this is Art. 6 Para. 1 a GDPR, insofar as access to information stored in the user’s terminal equipment is absolutely necessary, also § 25 (2) No. 2 TTDSG. In the context of the integration of social plugins, there is a joint controllership.
The plugins also collect personal data such as your IP address and send it to the servers of the provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the website is accessed. In this way, the providers can also create profiles about your usage behaviour. This happens even if you are not a member of the social network of the provider. If you are a member of the social network of the respective provider and you are logged into the social network during your visit to this website, your data and information may be linked to your profile on the social network. We have no influence on the exact extent of the data collected from you by the respective provider. For more detailed information about the scope, type and purpose of data processing and about rights and setting options to protect your privacy, please refer to the data protection information of the respective provider of the social network. These are available at the following addresses:
Facebook: https://www.facebook.com/policy.php
Twitter: https://twitter.com/privacy/
Youtube: https://www.google.com/intl/de/privacy/
Xing: https://privacy.xing.com/de/datenschutzerklaerung
Linkedin: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=www.linkedin.com%7Cli-other
Instagram: https://help.instagram.com/519522125107875
Youtube is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European data protection law.
(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Twitter is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European data protection law.
(https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).
Facebook is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European data protection law.
(https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
Insofar as data is processed outside the EU/EEA, XXX has certified itself according to the Data Privacy Framework (DPF) program and is listed in the Data Privacy Framework list of the International Trade Administration (ITA). This means that XXX has publicly committed to complying with the DPF obligations and any data transfer to the USA is harmless due to the current adequacy decision of the European Commission of July 10, 2023.
A list of currently certified US companies can be found here: https://www.dataprivacyframework.gov/s/participant-search
Further information on the Data Privacy Framework Program can be found on the official website of the ITA: https://www.dataprivacyframework.gov/s/
YouTube Videos
We are interested in offering you a wide range of multimedia information. Therefore we include videos from YouTube (YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA). The legal basis for this is Art. 6 para. 1 lit. a DSGVO.
YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Youtube is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European data protection law.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
The following data is transferred to Google as the YouTube operator:
– the IP address,
– the specific address of the page called up,
– the transmitted identification of the browser
– System date and time of the call,
– Cookies that are already available and can be used to uniquely identify your browser.
Google as operator of YouTube is exclusively responsible for this data processing. Further information can be found here.
We want to point out that Google may receive further data about cookies that are already stored on your computer. We have no influence on the extent to which these cookies are used by Google.
You can find YouTube’s privacy policy here.
7) Linkedin
As part of our LinkedIn performance, we use various features of LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland) to promote our events or other services we provide. We have the opportunity to advertise via LinkedIn to target groups defined by us through the LinkedIn Marketing Solutions offering.
LinkedIn will provide the personal data required for this purpose. We do not have access to personal information beyond that published in your profile. The sending of advertising is carried out by LinkedIn.
If you are interested in individual events or services, you have the possibility to express your interest to us. In such a case your e-mail address as well as your first and last name will be transmitted to us. Your contact details will only be transmitted with your explicit consent.
Please use the following link to find out more information on data protection at LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
You can revoke your consent to the disclosure of your e-mail address as well as your first and last name at any time using the following link: Revoke
In case of your withdrawal, your data will be irretrievably deleted in all our systems.
8) Utilisation of
Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution with which the marketer can manage the website tags over an interface. Google Tag Manager itself (which implements the tags) is a cookie-free domain and does not record any personal data. The tool ensures the activation of other tags, which for their part may record data. Google Tag Manager does not access this data. If a deactivation was carried out on domain or cookie level, this continues to exist for all existing tracking tags which are implemented with Google Tag Manager.
Google Analytics web analysis service
This website uses Google Analytics. By order of the operator of this website, Google will evaluate your use of the website in order to compile reports about website activities and to provide further services connected with website use and Internet use, with respect to the website operator.
Since the co-ordination of the Hamburg representative for data protection and freedom of information with Google, on the basis of the decision of Duesseldorf District relating to the structuring of analysis processes for range measurement in case of Internet offers consistent with data protection, a use of Google Analytics consistent with data protection and complaint-free is possible under certain conditions. We respect these prerequisites of course. In particular, we point out that, on this website, Google Analytics was extended by the code “gat._(); in order to guarantee an anonymised recording of IP addresses (so-called IP-Masking). Your IP address is shortened by Google within Member States of the European Union or in other treaty states of the Agreement on the European Economic Region. In exceptional cases only, the full IP address is transferred to a Google server in the USA and shortened there. The IP address sent by Google Analytics within the framework of your browser is not combined with other data of Google. Please find further information on conditions of use and data protection at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.
Google Analytics uses so-called “cookies”, text files which are stored on your computer. The information about your use of this website generated by the cookie is generally transferred to a Google server in the USA and stored there. You can prevent the storage of cookies through a corresponding adjustment of your browser software; however, we point out that possibly you will be not be able to use all functions of this website fully in this case. In addition, you can prevent the recording of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, where you download and install the Browser-Add-on. If you click here, an Opt-Out cookie is set, which prevents the future recording of your data during any visit to this website: Deactivate Google Analytics.
In addition, we use Google Conversion Tracking in association with Google Analytics. This enables us to record the characteristics of our website visitors. For example, it is indicated to us how many PDF’s on our website are downloaded or how often the contact form was filled out. Like,wise it is indicated to us how many clicks on advertisements from external sources (AdWords, LinkedIn, Xing, Bing) were made on our website.
9) On which legal basis is the data processed
-
a) Meeting contractual and pre-contractual obligations
Using our website, there exists the possibility to acquire products and/or services or initially any other information possibly to be provided with an individual offer regarding them. In case of use of these functions, you are requested to specify further information. The legal basis for this data processing is the meeting of contractual or pre-contractual obligations, in accordance with Art. 6 Sect. 1 lit. b) GDPR.
-
b) Granting of consent
Different functions of this website are only usable if you have first given us your consent. Included in these functions are e.g. the ordering of our newsletters. At certain points you are correspondingly informed of the data processing, the purposes of data processing and your rights, in particular your right to withdraw your consent at any time. In case of consent being given, the legal grounds for the data processing is Art. 6 Sect. 1 lit. a) GDPR.
-
c) Legitimate interests
In addition, we process partly person-related data in our entitled interests in case of use of this website. Within the framework of the weighting of interests according to Art. 6 Sect. 1 lit. f GDPR, we have considered and weighted our interest in the appropriation and your interest in a processing of your personal data consistent with data protection. Since this data is sometimes required technically in order to enable the appropriation of our service and also to guarantee stability and security, in particular protection against misuse, we came to the conclusion – in case of the data protection, a guarantee based the state of the art of the technology- that this data can be processed, where your interest in a processing consistent with data protection is considered to an adequate extent.
10) Transfer of data
A forwarding of your personal data to third parties for any objectives other than those listed does not occur.
We pass on your personal data to third parties only if:
- you have given your explicit consent to this
- the transfer is required for the assertion, exercise or defence of legal claims and no basis exists for the assumption that you have a majority interest worthy of being protected in the non-transfer of your data,
- For the case where a legal obligation exists for the forwarding, as well as
- where this is legally admissible and required for the handling of contractual relationships with you.
In case of data communication outside of the European Union, the high European data-protection level basically does not exist. With any transfer, it can be that there currently exists no adequacy decision of the EU Commission, as specified by Art. 45 Sect. 1, 3 GDPR. This means that, to date, the EU Commission has not positively determined that the national data protection level corresponds to the data protection level of the European Union based on the GDPR, therefore we have obtained suitable guarantees as designated above.
Possible risks which cannot be completely excluded in connection with data communication are in particular:
- your personal data could possibly be processed over and above the actual purpose.
- in addition, there exists the possibility that you cannot exercise and enforce your data-protection rights sustainably, such as for example your right to information, to correction, deletion or data portability.
- there also possibly exists a high probability that an incorrect data processing can result and the protection of the personal data does not correspond quantitatively and qualitatively fully to the requirements of the GDPR.
For the continuous improvement of our website, for advertising purposes and in order to enable certain functions of this website to be offered to you, we are instructed with the employment of processors.
All processors are obliged here to process the data only for the service provision actually defined by us. All processors were selected by us carefully and sufficient technical and organisational measures were put in place in order to guarantee data protection.
11) Teaching data subject rights
Every person affected has the right of access according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Article 17 GDPR, the right to restriction of processing according to GDPR Art. 18, the right to object from Art. 21 GDPR, as well as the right to data portability from Art. 20 GDPR. In case of the right to of access and the right to erasure, restrictions apply pursuant to § 34 and 35 BDSG.
Advice on the possibility to lodge a complaint
Furthermore, you have the right to complain to the responsible data-protection supervisory authority about the processing of your personal data by us.
Advice on the withdrawal with consent
You can withdraw any consent to the processing of personal data at any time with respect to us. This also applies for the revocation of consent declarations which have been made before the validity of the basic data protection regulation (before 25th May 2018) with respect to us. Please note that the withdrawal effects the future. Any processing implemented prior to the withdrawal is not affected by this.
Right in case of a data processing for the purpose of direct advertising
In accordance with Art. 21 Sect. 2 GDPR, you have the right to make an objection at any time to the processing of personal data concerning you. In case of your objection to processing for purposes of direct advertising, we will not process your personal data for these objectives any longer. Please note that the objection comes into effect for the future only. Any processing implemented prior to the objection is not affected by this.
Note on right to objection in case of weighting of interests
As far as we base the processing of your personal data on a weighting of interests, you can make an objection to the processing. In case of the exercise of such an objection, we request that you explain the reasons why we should not process your personal data as described. In case of your reasonable objection, we check the state of affairs and will either cease or adapt the data processing, or explain to you our compelling reasons worth being protected.
Links to other websites
Our websites can include links to websites of other providers. We refer to the fact that this data protection declaration applies for the websites of www.frankfurt-school.de solely. We do not have any influence on this and do not check that other providers comply with the applicable data protection regulations.
12) Changes to the data protection declaration
We reserve the right to change or amend this data protection declaration at any time, taking account of applicable data protection regulations.