We are very pleased about your interest in our company. Data protection is of particular importance to Education4Industry GmbH. Informational use of the Education4Industry GmbH’s website (hereinafter referred to as “controller or data controller”, “we”, or “us”) is generally possible without providing any personal data. However, if a user of the website (II.) (hereinafter referred to as “data subject”) would like to use special services of our company via our website, processing of personal data may be required. If it is necessary to process personal data and there is no legal basis for such processing, we will obtain the consent of the data subject.
Starting from 25.05.2018, the processing of personal data, such as the name, address, email address, or telephone number of a data subject, will always take place in accordance with the General Data Protection Regulation and at any time in accordance with the country-specific data protection provisions that apply to the controller (currently the Federal Data Protection Act (hereinafter referred to as “BDSG”).
Personal data, such as the name, address, email address, or telephone number of a data subject, will be processed in accordance with the country-specific data protection provisions that apply to the controller (currently the Federal Data Protection Act (hereinafter referred to as “BDSG”); and starting from 25.05.2018 in accordance with the General Data Protection Regulation.
The controller has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed via the website. However, any Internet-based data transfers may be subject to security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, each data subject is free to transmit personal data to us in alternative ways, such as by telephone.
I. General Rules
The data protection declaration of the controller is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation and which are also to a large extent reflected in the country-specific data protection regulations. The data protection declaration should be easy to read and understand, both for the public and for our customers and business partners. In order to ensure this, we would like to explain the terms used in advance.
1.1 Personal data
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identification, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1.2 Data subject
Data subject means any identified or identifiable natural person whose personal data are processed by the controller.
1.3 Processing of personal data
Processing is any operation or set of operations, performed with or without the aid of automated means, which is performed upon personal data, such as collection, recording, organization, sorting, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
1.4 Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of restricting future processing.
Profiling is any type of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or relocation of that natural person.
Pseudonymization is the processing of personal data in such a way that personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separate and is subject to technical and organizational measures.
1.7 Controller or data controller
The controller or data controller is the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or national law, provision may be made for the controller or for the specific criteria for his or her designation in accordance with Union or national law.
A processor is a natural or legal person, authority, body or other body that processes personal data on behalf of the controller.
The recipient is any natural or legal person, public authority, agency or other body to whom personal data are disclosed, including third parties. However, authorities which may receive personal data in the context of a specific investigation mandate under Union or national law shall not be considered as recipients.
1.10 Third party
A third party is a natural or legal person, public authority, agency or other body, but not the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data.
Consent shall mean any freely given and informed unequivocal expression of the data subject’s wishes in the specific case, in the form of a statement or any other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.
2. Name and address of the controller
The person responsible for the BDSG and the General Data Protection Regulation as well as other data protection laws applicable in the member states of the European Union and other regulations of a data protection nature is:
Phone: +49 89 5506 2750
II. Provisions for the Website
1. Collection of general data and informational website use
1.1 Type, scope, and purpose of data processing
1.1.1 The controller’s website collects a number of general data and information each time the website is accessed by a user of the website or an automated system. These general data and information are stored in the server’s log files. The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (referrers), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of accessing the Internet site, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information which serve to avert danger in the event of attacks on our information technology systems.
1.1.2 The data are required to (1) deliver the contents of our website correctly, (2) to optimize the contents of our website for data subjects and (3) to ensure the long-term functionality of our IT systems and website. In the case of anonymization, the IP addresses are changed in such a way that the individual information about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person, or can only be assigned to a specific or identifiable natural person with a disproportionate amount of time, cost, and labor. The data and information collected would then be evaluated by the data controller both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for personal data processed by us. The general data of the server log files are stored separately from all personal data provided by a data subject.
1.2 Legal basis and storage time
1.2.1 From 25 May, 2018, the legal basis for the processing a data subject’s personal data in connection with the use of an informational website is Article 6 (1) (b) of the European General Data Protection Regulation (EU) 2016/679.
2. Possibility of contact via the website
2.1 Type, scope, and purpose of data processing
Due to legal regulations, the website of the controller contains information that enables a quick electronic contact to our company and direct communication with us, which also includes a general address for electronic mail (email address). If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted by a data subject to the controller on a voluntary basis are stored for the purposes of processing or for contacting the data subject. Such personal data shall not be disclosed to third parties.
2.2 Legal basis and storage period
2.2.1 From 25 May, 2018, the legal basis for processing a data subject’s personal data in connection with a communication is Article 6(1)(b) of the European Data Protection Regulation (EU) 2016/679.
2.2.2 We delete the data collected during communication, which may allow the identification of the data subject, immediately after being processed, unless the data is necessary for the purposes of the communication.
3. Using the download function
3.1 We offer users a download function on our website to provide them with relevant information.
3.2 In the case of a download, the data provided to us (email address, name, job title if applicable, and company) will be stored by us in order to respond to questions. We delete the data collected in this context after storage is no longer necessary or restrict processing if there are legal storage obligations.
4. Data protection for applications and in the application process
4.1 Who is responsible for data processing?
The person responsible within the context of data protection law is:
Applicants can find further information about our company, details of the persons authorized to represent the company, and further contact details in our Impressum: https://www.about.university4industry.com/pages/impressum
4.2 Which data do we process and for what purposes?
We process the data sent to us in connection with applications in order to check the suitability for the position (or other open positions in our company) and to carry out the application process.
4.3 What is the legal basis for this?
The legal basis for the processing of your personal data in this application procedure is primarily Section 26 of the German Data Code (BDSG), amended as of 25.05.2018. This allows the processing of data required in connection with the decision on the establishment of an employment relationship.
Should the data be required for legal proceedings after the completion of the application procedure, data processing may take place on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 (1) lit. f) GDPR. Our interest then consists in the assertion or defense of claims.
4.4 How long is the data stored?
Applicant data will be deleted after 6 months in case of a cancellation. In the event that an applicant has agreed to further storage of your personal data, we will transfer the data to our applicant pool. There, the data will be deleted after 2 years. If you have been awarded a job during the application process, we will transfer your data to our storage systems intended for personnel data.
4.5 To which recipients will the data be forwarded?
Applicant data is screened by HR and management upon receipt. Accepted applications are then forwarded internally to the respective team leaders for the respective open position. The further procedure is then coordinated. In principle, only those persons in the company have access to applicant data who require this for the proper course of our application procedure.
4.6 Where is the data processed?
The data is processed exclusively in data centers in the Federal Republic of Germany.
4.7 Rights as data subjects
Applicants have the right to be informed about the personal data we process about them. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require applicants to provide evidence that they are the person they claim to be. Furthermore, applicants have the right to correction or deletion or to restriction of processing, insofar as applicants are legally entitled to this. Furthermore, applicants have the right to object to processing within the scope of the statutory provisions. The same applies to a right to data transferability.
4.8 Our Data Protection Officer
We have appointed a data protection officer in our company, who can be contacted at the following contact details:
– Data Protection Officer –
4.9 Right of appeal
Applicants have the right to complain about the processing of personal data by us to a data protection supervisory authority.
5. Comment function
5.1 Type, scope, and purposes of data processing
5.1.1 For the comment function on our website, in addition to the comment, information about the time of creation of the comment, the email address and, if not posted anonymously, the username of the data subject, are stored, until a user requests the deletion of his/her account.
5.1.2 Storage of IP address: Our comment function stores the IP addresses of the users who post comments. Since we do not check comments on our website before they are published, we need this data in order to be able to take action against the author in the event of legal violations, such as insults or propaganda.
5.2 Legal basis and storage period
5.2.1 As of 25 May, 2018, the legal basis for the processing a data subject’s personal data in connection with the comments function is Article 6(1)(a) of the European Data Protection Regulation (EU) 2016/679.
5.2.2 The data will be stored by us for as long as is necessary to provide the comment function or to fulfil the purpose for which the personal data were collected.
6.1 Type, scope, and purpose of data processing
6.1.1 Depending on the settings of the data subject’s browser, the data controller collects information about the use of the website using cookies. Cookies are small text files that are stored on the data subject’s data carrier and store certain settings and data for exchange with the controller’s system via the browser. Most cookies are deleted from the data subject’s hard drive after the browser session ends (session cookies). Session cookies are required, for example, to provide login information across multiple pages. Other cookies remain on the data subject’s computer and make it possible to recognize the computer the next time the website is visited (permanent cookies).
6.1.3 By means of a cookie, the information and offers on our website can be optimized in the interest of the user.
6.1.4 The data subject can, at any time, prevent the setting of cookies by our website by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs (e.g., Firefox: Extras > Settings > Privacy > Display Cookies > Remove Cookies/Remove All Cookies; Internet Explorer: Extras > Internet Options > Delete General Browsing History/ Cookies). This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully functional.
6.2 Legal basis and storage period
6.2.1 From 25 May, 2018, the legal basis for processing a data subject’s personal data in connection with cookies will be Article 6(1) sentence 1(a) and (b) of the European Data Protection Regulation (EU) 2016/679.
6.2.2 The data collected via the cookies will be stored by us for as long as necessary to provide the relevant services or to fulfil the purpose for which the personal data were collected or until the cookies are deactivated.
7.1 Type, scope, and purposes of data processing
7.1.1 Data protection regulations for the use and application of Google Analytics (with anonymization function)
220.127.116.11 The data controller has integrated the Google Analytics component (with anonymization function) on the website https://www.about.university4industry.com/. Google Analytics is a web analytics service. Web analysis is the collection, storage, and analysis of data on the behavior of visitors to websites. A web analysis service collects, among other things, data about which website a data subject has come from (referrers), which subpages of the website were accessed, or how often and for how long a subpage has been viewed. Web analysis is used to optimize a website and to analyze the cost-benefit of Internet advertising.
18.104.22.168 The operating company of the Google Analytics component is Google Inc. (hereinafter “Google”), 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
22.214.171.124 The controller uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, the IP address of the data subject’s Internet connection is shortened by Google and anonymized if access to our Internet pages is from a member state of the European Union or from another state in the Agreement on the European Economic Area (EAA).
126.96.36.199 Google Analytics sets a cookie on the information technology system of the data subject. By setting the cookie, Google will be able to analyze the use of our website. Each time one of the individual pages of our website, which is operated by the data controller and on which a Google Analytics component has been integrated, is accessed, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. Within the scope of this technical procedure, Google receives knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.
188.8.131.52 The cookie is used to store personal information, such as the time of access, the place from which access originated, and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer this personal data collected via the technical procedure to third parties.
184.108.40.206 The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
220.127.116.11 The data controller has integrated Google AdWords on https://www.about.university4industry.com. Google AdWords is an Internet advertising service that allows advertisers to display ads in Google’s search engine results and the Google advertising network. Google AdWords allows an advertiser to specify pre-defined keywords that will display an ad in Google’s search engine results only when the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed to topic-relevant web pages by means of an automatic algorithm and in accordance with the previously defined keywords.
18.104.22.168 The operating company of the Google AdWords service is Google
22.214.171.124 The purpose of Google AdWords is to advertise our website by displaying advertisements relevant to our interests on the websites of third party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
126.96.36.199 If a data subject reaches our website via a Google ad, a conversion cookie is stored by Google on the data subject’s information technology system. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to determine whether certain subpages on our website have been accessed. The conversion cookie allows us and Google to understand whether a data subject who has reached our website via an AdWords ad has generated sales, i.e., whether he or she has completed or cancelled a purchase of goods.
188.8.131.52 The data and information collected using the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are used by us to determine the total number of users who were referred to us via AdWords ads, i.e., to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the data subject.
184.108.40.206 The conversion cookie is used to store personal information, such as the websites visited by the data subject. Accordingly, each time our website is visited, personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer this personal data collected via the technical process to third parties.
220.127.116.11 The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the data subject’s information technology system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
18.104.22.168 Furthermore, the data subject can object to the interest-based advertising by Google. To do so, the data subject must access the link www.google.de/settings/ads from each of the Internet browsers he or she uses and adjust the desired settings there.
7.2 Legal basis and storage period
7.2.1 From 25 May, 2018, the legal basis for the processing of the data subject’s personal data in connection with web analytics services is Article 6 (1) sentence 1, letters a, b and f of the European Data Protection Regulation (EU) 2016/679. If we process your personal data on the basis of Article 6 (1) sentence 1, letter f, this is based on the legitimate interest in designing our website in a user-oriented manner and in placing user-related advertising.
7.2.2 The data collected via cookies will be stored by us for as long as necessary to provide the respective services or to fulfil the purpose for which the personal data was collected, or until the cookies are deactivated.
8. Newsletter data
If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided, and that you agree to receive the newsletter. Further data will be not be collected. We use these data exclusively for the sending of the requested information and do not pass them on to third parties.
You can revoke your consent to the storage of the data, the email address, and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.
9. Social plugins
9.1 Type, scope, and purposes of data collection, processing, and use
Data protection for the social plugins used: The website contains buttons from various social media networks using the “2-click solution”. In order to leave it up to the data subject to decide whether data is transmitted to these networks, only a reference to the respective function is shown instead of the actual social plugin. Only by clicking on the link is the respective social plugin is activated, which leads to the data transfers described below.
9.2 Data protection regulations for the use and application of Facebook
9.2.1 The data controller has integrated components of the company Facebook on this website.
9.2.2 The operating company of Facebook is Facebook Inc. (hereinafter referred to as “Facebook”), 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the United States or Canada, the party responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
9.2.3 After activating the social plugin, each time the data subject accesses one of the individual pages of https://www.about.university4industry.com/, which is operated by the data controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plugins is available at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook is informed which specific subpage of our website is visited by the data subject.
9.2.4 If the data subject is logged on to Facebook at the same time, Facebook will recognize which specific page of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, for example the “Like” button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.
9.2.5 If the data subject does not want this information to be transferred to Facebook in this way, he or she can prevent such transmission by logging out of his or her Facebook account before accessing our website.
9.2.6 The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing, and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook, such as the Facebook blocker from the provider Webgraph, which can be found at http://webgraph.com/resources/facebookblocker/. Such applications can be used by the data subject to suppress data transfer to Facebook.
9.3 Data protection regulations for the use and application of LinkedIn
9.3.1 The data controller has integrated components of LinkedIn Corporation on the website https://www.about.university4industry.com. LinkedIn is an Internet-based social network that allows users to connect with existing business contacts and establish new business contacts.
9.3.3 After activating the plugin, the LinkedIn component will cause the data subject’s browser to download an appropriate representation of the LinkedIn component each time he or she visits our website. Further information about LinkedIn plugins can be found at https://developer.linkedin.com/plugins. This technical process allows LinkedIn to know which specific page of our website is visited by the data subject.
9.3.4 If the data subject is logged on to LinkedIn at the same time, LinkedIn will know which specific page of our website the data subject is visiting each time the data subject accesses our website and throughout the time the data subject is on our website. This information is collected by the LinkedIn component and is assigned by LinkedIn to the LinkedIn account of the data subject. If the data subject clicks on a LinkedIn button integrated on our website, LinkedIn will associate this information with the personal LinkedIn user account of the data subject and store this personal data.
9.3.5 If the data subject does not wish to receive such information from LinkedIn, the data subject may prevent such transmission by logging out of his or her LinkedIn account before accessing our website.
10. Browser plugin
10.1 Objection to data collection
You can prevent Google Analytics from collecting your data by clicking. An opt-out cookie will be set to prevent the collection of your information on future visits to this site. Please use this link for this purpose.
10.2 Order data processing
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics in Google Analytics
This website uses the “demographic features” function of Google Analytics. This allows us to generate reports that contain information about the age, gender, and interests of the site visitors. This data is derived from interest-based advertising by Google as well as from visitor data from third parties. This data cannot be assigned to a specific person. You can disable this feature at any time in the ad settings in your Google Account or prohibit Google Analytics from collecting your information as described in the “Opting out of data collection” section.
Our website uses plugins from the YouTube site operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our sites equipped with a YouTube plugin, a connection is established to the YouTube servers, which informs the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
12. Registration on this website
You can register on our website to use additional features on the site. We will only use the data entered for this purpose for the purpose of using the respective offer or service for which you have registered.
For important changes, such as the scope of the offer or in the case of technically necessary changes, we use the email address provided at the time of registration in order to inform you in this way.
13. Data transfer upon conclusion of contract for services and digital content
We only transmit personal data to third parties if this is necessary in the context of the contract processing, for example to the credit institution commissioned with payment processing.
Further transmission of the data does not take place unless you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising.
14. Encrypted payment transactions on this website
Payment transactions via the usual means of payment (Visa/Mastercard, direct debit) are made exclusively via an encrypted SSL connection. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser line.
In the case of encrypted communication, your payment data that you transmit to us cannot be read by third parties.
15. Objection to advertising emails
We object to the use of contact data published within the scope of the Impressum for transmission of unsolicited advertising and information materials. The operators of the website expressly reserve the right to take legal action in the event of unsolicited transmission of advertising information, such as spam emails.
III. Rights of the Data Subject
1. Right to information
1.1 Any person affected by the processing of personal data has the right to receive free information and a copy of the personal data stored about him or her at any time from the data controller. In addition, the European legislator has granted the data subject access the following information:
1.1.1 the purposes or processing;
1.1.2 the categories of personal data processed;
1.1.3 the recipients or categories of recipients to whom the personal data have been or will be disclosed, especially in the case of recipients in third countries or international organizations;
1.1.4 where possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration;
1.1.5 the existence of a right of rectification or erasure of personal data relating to them or of a right to limit processing by the controller or a right to object to such processing;
1.1.6 the existence of a right of appeal with a supervisory authority;
1.1.7 if the personal data are not collected from the data subject: all available information on the origin of the data;
1.1.8 the existence of automated decision-making, including profiling – from 25 May, 2018, onwards, in accordance with Article 22(1) and (4) of the European General Data Protection Regulation (EU) 2016/679 – and, where automated decision-making takes place, meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.
1.2 The data subject shall also have the right to obtain information as to whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject shall also have the right to obtain information on the appropriate safeguards relating to the transfer.
2. Right to rectification
Any data subject affected by the processing of personal data has the right to request the immediate rectification of inaccurate personal data concerning him or her. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
3. Right to erasure (right to be forgotten)
3.1 Every data subject shall have the right to obtain from the controller the immediate erasure of personal data relating to him or her where one of the following reasons applies and where the processing is not necessary:
3.1.1 The personal data have been collected for such purposes or otherwise processed for which they are no longer necessary.
3.1.2 The data subject withdraws the consent on which the processing was based – from 25 May, 2018, onwards, pursuant to Article 6(1)(a) or Article 9(2)(a) of the European Data Protection Basic Regulation (EU) 2016/679 – and there is no other legal basis for the processing.
3.1.3 The data subject objects to the processing – as from 25 May, 2018, in accordance with Article 21(1) of the European Data Protection Basic Regulation (EU) 2016/679 – and there are no legitimate reasons for the processing or the data subject objects to the processing – as from 25 May, 2018, in accordance with Article 21(2) of the European Data Protection Basic Regulation (EU) 2016/679.
3.1.4 The personal data have been processed unlawfully.
3.1.5 The erasure of personal data is necessary to fulfil a legal obligation under European Union law or the law of the member states to which the controller is subject.
3.1.6 The personal data have been collected in relation to information society services offered from 25.05.2018 in accordance with Article 8(1) of the European General Data Protection Regulation (EU) 2016/679.
3.2 If the personal data has been made public by the data controller and our company as the data controller is responsible for the data – from 25 May, 2018, in accordance with Article 17(1) of the European Data Protection Basic Regulation (EU) 2016/679, the controller shall take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested from these other data controllers the deletion of all links to these personal data or copies or replications of these personal data, unless the processing is necessary.
4. Right to restrict processing
Any data subject affected by the processing of personal data has the right to require the controller to restrict the processing if one of the following conditions is met:
4.1. The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
4.2 The processing is unlawful; the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted.
4.3 The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them in order to assert, exercise, or defend legal claims.
4.4 The data subject has lodged an objection to the processing – as of 25 May, 2018, pursuant to Article 21(1) of the European Data Protection Basic Regulation (EU) 2016/679 – and it is not yet clear whether the data controller’s legitimate reasons outweigh those of the data subject.
5. Right to data portability
5.1 From 25.05.2018, every data subject concerned by the processing of personal data has the right to obtain, in a structured, common, and machine-readable format, the personal data concerning him or her which have been made available to a controller by the data subject. He or she also has the right to obtain the communication of these data to another controller without interference from the controller to whom the personal data have been made available, provided that the processing is based on the consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the European Data Protection Regulation (EU) 2016/679 or on a contract pursuant to Article 6(1)(a) or Article 9(2)(a) of the European Data Protection Regulation (EU) 2016/679 or on a contract pursuant to Article 9(2)(a) of the European Data Protection Supervisor’s Regulation (EC) 2016/679. 6(1)(b) of the European Data Protection Basic Regulation (EU) 2016/679 and the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
5.2 Furthermore, from 25 May, 2018, when exercising their right to data transfer pursuant to Article 20(1) of the European Data Protection Basic Regulation (EU) 2016/679, the data subject has the right to obtain that personal data is transferred directly from one controller to another controller, insofar as this is technically feasible and provided that it does not adversely affect the rights and freedoms of other persons.
6. Right to object
6.1 Every data subject concerned by the processing of personal data has the right to object, at any time, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her that takes place from 25 May, 2018, on the basis of Article 6(1)(e) or (f) of the European Data Protection Regulation (EU) 2016/679. This also applies to profiling based on these provisions.
6.2 In the event of an objection, the controller shall no longer process the personal data unless we can demonstrate compelling legitimate reasons for processing which outweigh the interests, rights, and freedoms of the data subject, or the processing is for the purpose of asserting, exercising, or defending legal claims.
7. Automated decision-making
As a responsible company, we avoid automated decision-making or profiling.
8. Right to withdraw consent of data protection
8.1 Any data subject affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
8.2 If the data subject wishes to exercise the right to withdraw consent, he or she may, at any time, contact our Data Protection Officer or another employee of the data controller.
9. Enforcement of rights
9.1 All listed rights can be asserted informally by letter or email to the addresses mentioned in paragraph I 2 above.
10. TLS encryption
10.1 For reasons of security and to protect the transmission of confidential content, such as enquiries that the data subject sends to us as site operator, this website uses TLS 1.0 encryption. An encrypted connection can be identified by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser line.
10.2 If TLS encryption is enabled, the data transmitted by the data subject to us cannot be read by third parties.
11. Validity of the data protection declaration
It can be accessed and printed out at any time on our website: https://about.university4industry.com/en/privacy-policy.