Dear Website Visitors,
Storing of IP Addresses
Protecting your privacy is very important to us. We use information that we receive and store during your visit to our website exclusively for internal purposes and to improve the design of the website, including sub-pages. If necessary for the purpose of defending against attacks that impair the functionality of our website (hacker attacks, malware, denial of service attacks, spam), we may access your computer’s IP address for this purpose alone, which is stored by our telecommunications provider as a security measure for a period of seven days. After this period has elapsed, we will either delete or anonymize the IP address. The legal basis for this processing is Art. 6(1)(f) of the GDPR.
When you visit our website, we temporarily store usage information on our web server for statistical purposes in the form of a log in order to improve the quality of our website. This data record consists of:
• The page from which the file was requested
• The name of the file
• The date and time the file was accessed
• The quantity of data transferred
• The status of access (file transfered, file not found)
• A description of the type of web browser used to access the file
• The IP address of the computer accessing the file, shortened by the last three digits
We use this information to enable access to our website, to control and administer our systems, and to improve the design of our website. The data stored is stored in anonymized form. This means it is not possible to create personal user profiles based on this information. Data about individuals or their individual behavior is not collected.
Data Transfers to Third Parties
We do not transfer your personal data to third parties without your express consent.
We use both session cookies and permanent cookies on our website. This processing is carried out on the basis of Art. 6(1)(F) of the GDPR and in the interest of optimizing or enabling the use of and adapting the appearance of our website.
The information generated by the cookie pertaining to your use of this website is usually transmitted to and saved on a server operated by Google located within the United States. However, since we have activated IP anonymization on this website, your IP address will first be shortened by Google before the data is transferred outside of the European Union. Only in exceptional cases is the full IP address transferred to a Google server in the USA and first shortened there (whereby an appropriate level of data protection exists pursuant to Art. 45(1) of the GDPR through Google’s participation in the Privacy Shield program). In addition, we have entered into a data processing agreement with Google Inc. (USA) in accordance with Art. 28 of the GDPR. As a result, Google may only use this information strictly for the purpose of analyzing the use of our website for us and compiling reports regarding this website activity.
You can object to this processing at any time. To do so, please use one of the following options:
1) You can prevent cookies from being saved to your device using the respective setting in your browser software; we would like to explicitly state, however, that you may not be able to completely use all of this website’s features if you deactivate cookies.
2) Besides taking this step, you can prevent the data generated by the cookie related to your use of this website (including your IP address) from being sent to and processed by Google by downloading and installing the browser plug-in available here: (http://tools.google.com/dlpage/gaoptout)
3) You can also prevent Google Analytics from collecting this data by clicking on the following link. Doing so will store an “opt-out cookie” on your device, which will prevent the collection of your data for this and all future visits: Click here to opt-out of your data being collected and processed by Google Analytics.
Google Tag Manager, DoubleClick
Furthermore, we use Google Tag Manager on our website for personalized, interest-based, and location-based online advertising. Google Tag Manager allows us to target visitors to our website as part of marketing campaigns on our partners’ websites. When you visit our website, we access identifiers that allow us to recognize your browser or device, analyze your IP address, and/or store a unique identifier as a small text file (known as a third party cookie) on your device. Your usage behavior is tracked when you visit various websites. The identifying attributes are pseudonymized. If you are logged in with your Google account, these attributes can be linked directly to your profile. Google may link and store your visits to our website with your personal attributes in order to display targeted advertising to you on other websites. This also allows Google to determine if you have previously visited our website. Your device and browser are recognized by Google, for example, when you visit a website that displays ads through Google’s advertising network. Such processing is carried out on the basis of your consent pursuant to Art. 6(1)(A) of the GDPR. You can withdraw your consent to retargeting on our website, which you have given via our cookie banner, at any time. Users can deactivate DoubleClick remarketing pixels by calling up the deactivation page for DoubleClick (https://www.google.de/settings/ads/onweb#display_optout) or on this deactivation page (http://www.networkadvertising.org/managing/opt_out.asp).
We process your personal data in accordance with the applicable data protection regulations on the basis of Article 26 of the German Data Protection Act (“Bundesdatenschutzgesetz”). We process the data that you disclose to us as part of your online application exclusively for the purpose of selecting applicants. We do not process this data for any other purposes. You yourself determine the scope of the data that you would like to submit to us as part of your online application. Online applications are transmitted electronically to our Human Resources department where they are processed as quickly as possible. Your data is transmitted via an encrypted connection. In most cases, applications are forwarded to the head of the relevant specialist department at our company. Beyond that, your data will not be transferred. We will treat all of the information you provide us as strictly confidential. If we are unable to accept your application, your documents will be deleted after 6 months.
In the event that you would like us to consider your application for other or future job openings, please include a note to this effect on your application. With regard to job applications, your data is processed on the basis of Art. 6(1)(a) of the GDPR.
You have the ability to get in touch with us via a number of different forms on our website. To use these forms, we need your name and email address. You have the option to provide further information, but this is not required. Your data will only be processed to respond to your inquiry and will be deleted after a period of 14 days. We will not share any information with third parties. The legal basis for this processing is Art. 6(1)(f) of the GDPR.
Prospective Student List
On our website, we offer you the ability to be included in our Prospective Student List and receive corresponding newsletters. In this cases, your data is processed on the basis of Art. 6(1)(a) of the GDPR.
If you no longer wish to be included on our Prospective Student List, you can inform us of this at any time, for example by sending an email to: firstname.lastname@example.org. We will then immediately delete your email address from our mailing list.
Your Rights as a Website User
When it comes to processing your personal data, the GDPR grants you certain rights as a website user:
1. Right of Access (Art. 15 of the GDPR):
You have the right to request confirmation as to whether personal data concerning you is being processed; where this is the case, you have a right of access to this personal data and to the information specified in Article 15 of the GDPR.
2. Right to Rectification and Right to Erasure (Art. 16 and 17 of the GDPR):
You have the right to immediately request the rectification of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
You also have the right to request that personal data concerning you be erased immediately if one of the reasons listed in Art. 17 of the GDPR applies in detail, e.g. if the data is no longer required for the purposes for which it was collected.
3. Right to Restriction of Processing (Art. 18 of the GDPR):
You have the right to request a restriction of processing for the duration of a review if any of the conditions specified in Art. 18 of the GDPR have been met, e.g. if you have lodged an objection to the processing.
4. Right to Data Portability (Art. 20 of the GDPR):
In certain cases (which are outlined in detail in Article 20 of the GDPR), you have the right to obtain from us your personal data in a structured, standard, machine-readable format or to request the transfer of such data to a third party.
5. Right to Object (Art. 21 of the GDPR):
If data is collected on the basis of Art. 6(1)(f) of the GDPR (data processing on the grounds of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. If you make such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
6. Right to Lodge a Complaint with a Supervisory AuthorityIn accordance with Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. This right to lodge a complaint may particularly be exercised before a supervisory authority in the EU member state where you reside, work, or where you suspect that your rights have been infringed.
Data Protection OfficerOur data protection officer will be happy to provide you with information or suggestions on the topic of data protection:
Dr. Uwe Schläger
datenschutz nord GmbH