1. Data protection

Priority is placed on data protection and security for customers and partners of the University of Economics for Management, as well as for interested parties and users of our website. Therefore, transparency regarding processing your data and data security are of utmost importance to us. Following is an overview of how your personal information is collected and processed when you use our website, as well as what you can do to protect your information better.

2. Party responsible for data processing

Hochschule der Wirtschaft für Management gGmbH
Oskar-Meixner-Str. 4-6
68163 Mannheim
Telefon: 0621 490 890-00
E-Mail: info@hdwm.org

3. Data protection officer of the IB Group

Valentin-Senger-Strasse 5
60389 Frankfurt am Main
E-Mail: datenschutz@ib.de

4. Data protection information

Personal data is any information that can be directly associated with you (e.g., name, address or e-mail addresses, IP addresses, user behaviour). In the following, we describe the information we collect and how it is used during your visit to our website.

Our data protection practices adhere to the Federal Data Protection Act (BDSG), the European General Data Protection Regulation (GDPR), and the Telecommunications-Telemedia Data Protection Act (TTDSG). We will only collect, process, and store your personal information to the extent required to fulfil the intended purpose (e.g., to provide the website, to process inquiries, etc.). Your data will only be used for additional purposes defined in the consent, such as providing information about offers via newsletter, etc., if you have separately consented.

We would like to point out that Internet-based data transmission (e.g., when communicating via e-mail) can have security vulnerabilities. Therefore, it is impossible to protect the data against unauthorized access completely.

5. Cookies

Our website uses some so-called cookies. Cookies do not damage your computer and do not contain any viruses. Cookies help make our internet presence more user-friendly, effective and secure. Cookies are small text files which are stored on your computer and which your browser saves.

Most of the cookies we use are so-called “Session-Cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies make it possible for use to recognise your browser on your next visit.

Our cookies are also used in the context of services provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, referred to below as “Google“) in the field of re-marketing. This process sends you advertisements based on interests defined by your user activity on the site of Google Partner networks. You can deactivate the use of cookies by Google for these purposes by calling up the page https://www.google.de/settings/ads. Alternatively, you can de-activate the use of third-party cookies by call up the de-activation page of the network advertising initiative. We remind you that Google has its own data protection guidelines which are independent of ours. Please inform yourself about Google’s data protection provisions before you use our website.

You can set your browser so that you are notified when cookies are set and only allow cookies in specific cases, prevent the acceptance of cookies for specific cases or generally block them. You can also set your browser to automatically delete cookies when you close it. If you deactivate cookies, the functionality of this website may be impaired.

Cookie declaration last updated  by CCM19:

6. Processing of personal data during visits to our website

Technically, the delivery and presentation of content through our website necessitates collecting specific data. Therefore, we, the web space provider, record these so-called server log files when you visit our website. Relevant information includes the domain name, the content of the request (visited page), the date and time of the request, the amount of data, the web browser and its version, the operating system used, the domain name, the HTTP status code, the referrer URL as the page from which you arrived at our website, and the IP address of your end device.

We use this information to display and deliver content, as well as for statistical analysis. The data may be processed in pseudonymous or anonymous form for website optimization and improvement, site administration, and market research. Pseudonymous data will not be combined with the data of the pseudonym holder, preventing any conclusions about your identity from being drawn. There will be no creation of user profiles. The data facilitates the delivery and continuous enhancement of our offer. We also reserve the right to conduct follow-up checks on the data provided if we suspect illegal use of our service. The legal basis for this processing is Art. 6 Paragraph 1 lit. f) of the GDPR (protection of our legitimate interests). Our legitimate interests lie in achieving the objectives above.

We would also like to point out that we reserve the right to access personal data and other information we have collected and to pass it on to (investigative) authorities and public bodies if this becomes necessary within the framework of legal or official requirements (Art. 6 Paragraph 1 lit. c) GDPR) to enable us to investigate suspected fraud, harassment, or other violations of laws and legal provisions (including infringements of third-party rights) or to investigate alleged violations of our Terms and Conditions (Art. 6 Para. 1 lit. f) GDPR). Insofar as the data above processing is based on Article 6 Paragraph 1 Letter f) of the GDPR, the relevant data processing is required to protect our legitimate interests in carrying out the purposes mentioned above.

7. Contents and services from third-party providers

The offer on our website may also contain content, services, and performances from third-party providers. Videos on YouTube, our newsroom on MyNewsdesk, and graphical representations of third parties are examples of such offers. The transmission of your IP address is a standard requirement for calling these third-party services. This makes it possible for these providers to recognize and store your IP address. Depending on the service, providers may also process your data on their initiative. Additional information can be found in the service descriptions listed below.

If the service providers are located in a country outside the European Economic Area (EEA), the repercussions of this will be detailed in the service description.

8. Voluntary provision of further data (contact form)

When you visit our websites, our web servers temporarily store the connection data of the requesting computer, the websites you visit on our site, the date and duration of your visit, the browser and operating system identification data, and the website from which you visit us (see Section 6 for details). Additional personal information such as your name, address, telephone number, and e-mail address will not be collected unless you voluntarily provide it, for instance, as part of a request for information or newsletter registration.

You can use our website's contact forms to send us general inquiries, schedule a consultation, or register for an information event. If you use our contact form and provide personal information (such as your e-mail address, name, telephone number, and message), disclosing such information is expressly voluntary. The provision of this information is neither mandated by law nor by contract. Without these details, we may not be able to process your request correctly. If you send us a message via the contact form, we will only process your data to the extent necessary to respond.

We only use the personal information you provide for the website's technical administration and to fulfil your request, i.e., to carry out the contract we have with you or to respond to your inquiry. If you have agreed with us, Article 6 Paragraph 1 Letter b) GDPR (performance of a contract) serves as the legal basis; otherwise, Article 6 Paragraph 1 Letter f) GDPR serves as the legal basis (legitimate interests). Our legitimate interest lies in accurately processing your request.

If you have previously consented, we will only use this information for product-related surveys, marketing (such as sending our newsletter, see Section 17), and statistical purposes. Consequently, the applicable legal basis is Article 6 (1)(a) of the GDPR. A consent granted may be revoked with future effect at any time. Your personal information will not be shared with third parties unless required to fulfil the purposes mentioned earlier or with your consent. Consequently, the applicable legal basis is Article 6 (1)(a) of the GDPR. A consent granted may be revoked with future effect at any time. Your data will not be sold.

Generally, we store all information you send us until the respective processing purpose has been met, such as until completion of inquiries, in the case of newsletters, until you unsubscribe, etc., or until you withdraw your consent. The data will then be deleted immediately unless there are compelling reasons following applicable legal provisions to retain the data (see Section 19 for details).

9. Campus Portal

Students, employees, and (external) teachers/teachers are provided with a user account on our campus portal. The campus portal is a centralized administration tool that allows users to manage their personal information, view university news and service hours, university documents (including lecture notes, information material, regulations, applications, and forms), certificates, examination results, performance overviews, course schedules, and exchange messages.

After enrollment or beginning work as an employee or external lecturer with us, an e-mail containing initial access data (username and password) will be sent to the e-mail address provided by each student or employee. The username is derived from either the student's matriculation number or the first and last names of employees/teachers. Initial passwords are generated randomly and can (and should) be changed by students, staff, or external lecturers. If students forget their password, for example, in the future, the password can be changed or reassigned by designated IT and administration personnel.

Personal information (including title, name, address, place of birth, nationality, contact details, certificate of enrollment, and, if applicable, de-registration certificate, forms, and certificates) is stored in the Campus Portal user account, along with group membership (cohort), profile picture (optional, but required for issuing a student ID card), news, exam results and performance overviews, and course schedules. In addition to the individual student, only a limited number of employees from the study office, examination office, and IT administration have access to the user account. In addition, instructors can enter and view exam results for their respective departments and communicate with students.

Additional information is optionally provided in a profile. This includes specific contact information, interests, languages, and information about your academic or professional background. Students can specify who can see their profile information in their account settings (e.g., fellow students from the same cohort, lecturers, or all students). By default, the profile is typically hidden from other students and instructors.

Simovative GmbH, Landsberger Straße 110, 80327 Munich, Germany ("Simovative") is our service provider for the Campus Portal. The Simovative stores the data on German servers. The Simovative can access our campus portal and/or user accounts as part of technical maintenance and troubleshooting. We have entered into a contract for order processing with Simovative, so any data transfer to Simovative is based on Article 28 GDPR. The Simovative processes the personal information of our students, employees, and external lecturers solely on our behalf and per our instructions.

The above data processing is used for organizing and administering the respective course and student communication. Therefore, the Campus Portal is provided to fulfil our contract with the individual student (Article 6 Paragraph 1 letter b GDPR) or employee (26 Paragraph 1 Section 1 BDSG).

10. Google Analytics (including Google Tag Manager)

Subject to your consent, this website employs Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland ("Google"). Using Google Analytics, we intend to analyze your interactions with our website to improve our services and make them more engaging for you, the user. Google Tag Manager is used to facilitate the implementation and administration of Google Analytics (see section 14).

Google Analytics employs cookies (see "Cookies"), which are stored on your computer and permit an analysis of your use of the website (see "Cookies"). The cookies are stored on your device for no longer than two years. Google will transmit and store the information generated by the cookie about your website use (including your IP address) on servers in the United States. To protect your privacy, Google shortens IP addresses within the EU/EEA by the last octet. In rare instances, the full IP address is transferred to a Google server in the United States and shortened there. Google will use this information to evaluate how you use the site, compile website activity reports for website operators, and provide other services related to website activity and internet usage (such as assessing the various ways visitors arrive at our website).

Google processes the above data collected by Google Analytics for its purposes, as outlined in its privacy policy. For example, Google may store the information in user profiles for product improvement, product development, measuring the effectiveness of advertising and market research, and personalizing content and advertisements. If you are logged into Google, your information will be assigned directly to your user account. If you do not want your data to be associated with your Google account, you must log out of your Google account before activating Google Analytics. We have no control over Google's continued data processing. Please refer to Google's privacy policies at https://policies.google.com/privacy for more information. Google Analytics data processing terms are available at https://google.com/analytics/terms/de.html and https://support.google.com/analytics/answer/6004245?hl=de/.

Please be aware that additional risks may be associated with data transfer to the Google Group's servers in the United States. For instance, it may be more difficult to enforce your rights to this data, and certain US authorities may gain access to it. Furthermore, please be aware that by permitting us to use Google Analytics, you consent to this data transfer to the United States. Therefore, the data transfer to the United States is based on your consent per Art. 49 (1) a) DSGVO. In addition, we have agreed with Google on the standard data protection clauses of the EU Commission according to Article 46, paragraph 2, lit. c) of the DSGVO. These standard data protection clauses are intended to ensure that Google maintains an adequate level of data protection in the third country (USA).

Therefore, we will only enable Google Analytics if you agree to the service's processing of your data. Art. 6 para. 1 lit. a) DSGVO provides the legal basis for data processing with the integration of Google Analytics on our website. You can withdraw your consent without affecting the processing's legality until withdrawal. In the cookie declaration above, you may withdraw your consent.

In addition, you can prevent Google Analytics from storing cookies by configuring your browser software accordingly; however, we would like to point out that, in this case, you may not be able to access all website features. You can prevent Google from collecting and processing the data generated by the cookie and related to your use of the website by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Optionally, you can download a Google browser extension from this page. An opt-out cookie will prevent future data collection when you visit this website. If you wish to completely control the setting of cookies or their use for the above purposes, you must adhere to the instructions provided.

11. Use of Google Ads incl. Remarketing (and Google Tag Manager)

We utilize Google Ads to display advertisements in search engines and on Google and Google's partners' websites ("Google advertising network"). Google Advertisements are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). In addition, we use Google Tag Manager to facilitate the implementation and management of Google Ads (see Section 14).

Google chooses independently, within the scope of this advertising service, which advertisements are displayed to which user within the Google advertising network. We cannot provide instructions or exert more direct influence over this selection. Few pre-setting options provided by Google allow us to place only general restrictions on where advertisements may potentially be displayed when placing an order for ads. We do not influence Google's data processing in this regard. Google provides statistical evaluations detailing which ads have been clicked on, how frequently, and at what prices. We receive no additional data due to the use of advertising media; in particular, we cannot identify users based on this information.

We utilize Google Ads, including the remarketing feature. This procedure enables the creation of personalized advertisements based on existing information about you and their retargeting as you continue to use the Internet. Google achieves this by storing cookies on your computer to enable an analysis of your website use. Google can recognize your browser, thanks to the cookies it sets. By integrating Google Ads, Google is informed that you have visited the relevant portion of our website or clicked on one of our advertisements. The cookies are stored on your device for no longer than two years. Google will transmit and store the information generated by the cookie about your use of this website (including your IP address) on servers in the United States. Google then abbreviates the IP address by the last three digits, so a clear assignment is no longer possible (anonymize IP plugins).

Visit the Google advertising deactivation page (https://www.google.com/settings/ads) to disable the use of cookies by Google.

According to its privacy policies, Google processes the aforementioned collected data for its purposes. Google may store the data in user profiles, upon which Google or third-party providers may display personalized advertising, for example, on third-party websites. In addition, Google may process the data for product improvement, product development, advertising effectiveness measurement, and market research. If you are logged into Google, your information will be assigned directly to your user account. If you do not want your Google account to be associated with Google Ads, you must log out before activating Google Ads. We have no control over Google's continued data processing. Google's privacy policies provide additional information: https://policies.google.com/privacy

This privacy policy's Section 10 contains additional information regarding data transfer to third parties, including the United States.

Only if you consent to process your data by the Google Ads service will we activate Google Ads. Art. 6 para. 1 lit. a) DSGVO provides the legal basis for data processing with the integration of Google Ads on our website. Your consent may be withdrawn without affecting the processing's legality until withdrawal. For example, you may start your support in the cookie declaration above. Further information on the processing of your data by Google in the context of Google Ads, contact details for asserting your related rights as a data subject against Google, and Google's applicable data protection provisions are available at https://policies.google.com/privacy?hl=de&gl=de in addition to https://policies.google.com/technologies/ads.

12. Google Fonts

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

For more information on Google Fonts, please follow this link: developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: policies.google.com/privacy.

13. YouTube

Our website utilizes YouTube plugins operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you visit one of our pages that contains a YouTube plugin and activate it, a connection is made to YouTube's servers. This informs the YouTube server of the pages that have been visited. If you log into your YouTube account, you authorize YouTube to associate your browsing activity with your profile. You can prevent this from happening by logging out of YouTube.

When you access the videos on our website, YouTube plugins are integrated in a manner that does not typically set cookies (the so-called extended data protection mode).

Furthermore, YouTube videos are only loaded and played after you enable YouTube video playback on our pages. If you then play a YouTube video, YouTube may receive your IP address and data regarding the video and your use of the playback controls.

As outlined in its privacy statement, Google may also use the information collected via YouTube for its purposes. For example, Google may store the data in user profiles and process it, for instance, to improve products, develop new products, measure the efficacy of certain advertising and market research, and personalize content and advertisements. We have no control over Google's continued data processing. Please refer to Google's privacy policies at https://policies.google.com/privacy for more information.

Google may also transmit the information mentioned above to servers in the US This may introduce additional risks, such as the difficulty of enforcing your rights to these data and the possibility that certain US authorities will gain access to these data. Please be aware that by permitting us to use YouTube, you consent to this data transfer to the United States. Therefore, the data transfer to the United States is based on your consent per Art. 49 (1) a) DSGVO. According to our knowledge, Google has also secured the data transfer to the United States with standard data protection clauses approved by the EU Commission pursuant to Article 46 (2) (c) DSGVO. More information is available at: https://policies.google.com/privacy/frameworks

We use YouTube content to enhance the user experience for website visitors. Art. 6 para. 1 lit. a) DSGVO is the legal basis for integrating YouTube content and the associated transfer of your data to Google. You may withdraw your consent for the future by selecting the appropriate checkbox in the cookie declaration above (support to the "statistics" category).

14. Google Tag Manager

We use "Google Tag Manager," a Google-provided service, to easily implement and manage our website's Google Analytics and Google Ads. Google Tag Manager enables interface-based management of website tags. The Google Tag Manager implements the tags and is a cookie-free domain that does not collect personally identifiable information. Google Tag Manager is responsible for activating additional tags that may collect data. Google Tag Manager has no access to this information. This is also transferred to the Google Tag Manager if the integrated service has been deactivated. This means that Google Tag Manager won't be activated until you've been permitted to use Google Analytics and/or Google Ads.

Further information on data protection can be found on the following Google web pages:

Only if you consent to process your data by Google Analytics or Google Ads will we activate Google Tag Manager (featuring Google Tag Manager). Art. 6 para. 1 lit. a) DSGVO provides the legal basis for data processing with the integration of Google Tag Manager on our website. Your consent may be withdrawn without affecting the processing's legality until withdrawal. In the cookie declaration above, you may withdraw your consent.

15. MyNewsdesk

In the context of our press and public relations work, we have integrated a newsroom by Mynewsdesk AB, Rosenlundsgatan 40, 11853 Stockholm, Sweden ("MyNewsdesk"). ("MyNewsdesk") to provide up-to-date news and information to our users and to evaluate the success of our public relations activities based on statistical reports. We also use MyNewsdesk on our Facebook presence (see section 16).

When you access the newsroom, your browser automatically sends MyNewsdesk the technically required server log file data (including the IP address of your end device, the time and date of the request, and information about your web browser operating system; see section 6 for more details). The data is processed to supply the newsroom and generate statistical reports that allow us to determine the frequency with which a specific news item has been clicked. This enables us to determine which topics were most attractive to our users and how we can improve our public relations. Unfortunately, MyNewsdesk provides only No user profiles that have been created.

We have entered into a contract with MyNewsdesk for order processing following Article 28 DSGVO (see https://www.mynewsdesk.com/about/terms-and-conditions/data_protection_terms). Please note that MyNewsdesk may also process data per its privacy policies to provide and enhance the service. Therefore, we cannot rule out the possibility that MyNewsdesk will transfer data to non-EEA countries, such as the United States, that does not offer an equivalent level of data protection. Visit : https://www.mynewsdesk.com/about/terms-and-conditions/privacy_policy for more information regarding MyNewsdesk's data processing practices, including any data transfers to third countries.

Art. 6 para. 1 lit. f) DSGVO is the legal basis for the above processing (safeguarding our legitimate interests). In each instance, our legitimate interests include pursuing the objectives mentioned above.

16. Our presence in social networks

We are present (the so-called "fan pages") on the following social networks and providers:

To operate the respective fan page, we utilize the technical platform and services provided by the providers. Please note that you are solely responsible for using our social network fan pages and their functions. This is especially true when using interactive features (e.g., commenting, sharing, rating). When you visit our fan pages, the social network providers collect specific technical data (including the IP address of your end device) and additional information stored as cookies on your end device. This information provides us, as page administrators, with interaction statistics.

We have no control or precise knowledge over how the providers use the information collected during visits to our fan page and interactions with our posts for their purposes, how long this information is stored, or whether it is shared with third parties. Data processing may differ depending on whether you are registered and logged in to the social network or are visiting the site as an unregistered and/or unlogged-in user. When you access a fan page or a post, your IP address is sent to the respective social network provider. If you are currently logged in, a cookie on your end device can be used to track your movements on the social network. By embedding buttons on websites, platforms can track your visits and associate them with your profile. This data can be used to provide personalized content and advertising. To prevent this, you must log out or disable the "stay logged in" feature, delete all cookies from your device, and restart your web browser. Please be aware that the respective social network provider may transfer and process the data collected about you in countries outside the European Economic Area (EEA), including the United States.

For additional information on data processing by social network providers, including any data transfer to third countries, please refer to the above-linked privacy policies of each provider. There you will also find information regarding contact options and advertisement settings.

We maintain a fan page on the respective social network to communicate with active users and distribute timely information. Therefore, we process the interaction-required data resulting from your use of the fan page, which you provide to us. For instance, we will process your data to respond appropriately if you ask us a question via a fan page. In addition, when you visit our Facebook and LinkedIn fan pages, the respective social network providers also process personal data to provide us with statistics and insights (the "insights") regarding the use of our fan pages.

The statistics allow us to adapt our fan pages to the users' needs and continually optimize them for market research and advertising. In this context, we only receive statistical reports from which we cannot identify or draw conclusions about individual social network users. Data processing for statistical purposes is performed jointly by the social network's providers and us following Article 26 DSGVO. In each case, the conditions and obligations as joint controllers have been spelt out in a separate agreement, which can be found at https://de-de.facebook.com/legal/terms/page_controller_addendum controller addendum (Facebook) and https://legal.linkedin.com/pages-joint-controller-addendum (LinkedIn).

The data mentioned above processing by us serves to protect our legitimate interests in the operation of a fan page on the respective social network, the communication, and interaction with users of this social network, and the evaluation of user interactions with the fan page to improve the fan page. Thus, the legal basis for each instance of data processing is Art. 6 para. 1 lit. f) of the DSGVO.

If you wish to assert your data protection rights, contact the social network provider or us in question. If a party is not responsible for responding or must obtain the information from the other party, the service provider or we will forward your inquiry to the appropriate partner. For questions regarding the profiling and processing of your data during the fan page use, please get in touch with the respective social network provider directly. For inquiries regarding handling your interactions with us on our fan page, please get in touch with us using the information listed above.

17. Newsletter

We appreciate your interest in receiving our newsletter. After receiving your permission, we will send you information about the latest University of Applied Management Studies news, trial lectures, and (online) events. You can find more information about the newsletter's content in the consent form or the declaration of consent.

You can sign up for the newsletter by clicking on the declaration of consent that appears beneath our registration form for informational events. Upon opening the document, technical data from your end device (such as the requested page's name and URL, date and time of retrieval, information on your operating system and web browser, referrer URL, and HTTP status code) are automatically collected and temporarily stored in a so-called log file. This data processing is technically required to provide you with the form and maintain the system's integrity. This is in our legitimate interest. Therefore, the legal basis for the data processing is Art. 6 p. 1 lit. f) DSGVO.

To send the newsletter, we utilize the services of rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg ("rapidmail"). Your information will be transmitted to the rapidmail. We have entered into a contract for order processing with rapidmail, so this data transfer and subsequent processing by the rapidmail are covered by Article 28 DSGVO.

We use the information you provide to distribute our newsletter. We also evaluate the newsletter's opening rate and critical statistics and use these metrics to optimize the newsletter. This includes the rate of unsubscribes, bounces, and abuses, the five most clicked links, clicks in the first 24 hours, and the history of newsletter openings. For this evaluation, the distributed newsletter e-mails contain so-called tracking pixels, which allow us to recognize when recipients open a newsletter e-mail, and so-called tracking links, which would enable us to remember when recipients click on a newsletter-contained link. This information is used to create an opening and click-through rate, allowing us to statistically evaluate the percentage of recipients who have opened our newsletter. We can also determine which recipients have and have not opened our newsletter. By analyzing this data, we can draw inferences regarding the general interest of our newsletter's recipients in its content and develop the newsletter accordingly. We do not collect additional information regarding the recipient's use of the newsletter, such as the time or date of an opening.

The distribution of the newsletter and the associated data processing described above are based solely on your consent under Article 6 Paragraph, lit. 1 a DSGVO. Your support is optional. You can withdraw your consent at any time with future effects, such as via the unsubscribe link in the newsletter or by sending an e-mail to our contact information listed above.

We store your data for as long as is required to fulfil the intended purpose or for legitimate reasons, according to Article 17(3) DSGVO. After unsubscribing from our newsletter or withdrawing consent, your data will be deleted immediately unless it is still required for the defence of claims to demonstrate that the newsletter was distributed lawfully.

18. CRM system for managing applications, inquiries, and newsletter consent

We use a CRM system for the quick and accurate processing and documentation of inquiries and applications for our study places, as well as for managing newsletter subscriptions. In addition, CRM is a central administration tool that stores data on individuals interested in a degree program and/or applying for a spot at the university (collectively "prospective students").

Typically, the CRM system stores prospective students' addresses, first and last names, e-mail addresses, and information about the future degree program (e.g., degree program, place, and time). In addition, additional information transmitted to us, such as telephone numbers, might be stored depending on the nature of the inquiry or application. In the case of applications, the postal address, information on school education, nationality, place, and date of birth, application documents (e.g., CV, applications, certificates), and any additional information that may arise during the application process (e.g., interview transcripts) are typically stored. In addition, each data record includes specific metadata (such as the time of recording or processing) and information regarding whether the respective person has consented to receive the newsletter.

Access to the CRM system is typically restricted to a subset of sales-related university administration employees. In addition, access is limited to the extent required for each area of activity. Our CRM data is stored on servers within the European Economic Area and managed by a German-based service provider.

The above data is performed for processing, documenting, and managing requests and applications within customer communication and care context. The processing of data from applications is based on Art. 6 para. 1 lit. b) DSGVO (for contract initiation), and otherwise on Art. 6 para. 1 lit. f) DSGVO (to protect our legitimate interests). In addition to the objectives mentioned above, we are interested in providing appropriate responses to inquiries.

19. No automated decision-making

We do not use automated decision-making following Article 22 (1) and (4) of the GDPR, which means that we do not use web-based systems to create user profiles. As a result, we do not make automated decisions with legal effect or similar detriment on your behalf.

20. No obligation to provide data

You are neither contractually nor legally required to provide personal information on our website. Nonetheless, the website and its functions are inaccessible without giving the required information. For instance, the website cannot be accessed without collecting server log files, a request cannot be responded to without contact information, and an e-mail newsletter cannot be sent without the recipient's e-mail address.

21. Storage duration

We only retain your personal information for as long as necessary to fulfil the intended purpose of processing. As soon as the processing purpose is no longer valid, we will promptly delete your data unless there are justified reasons within the meaning of the applicable legal regulations (such as Art. 17 (3) DSGVO), including, in particular, legally prescribed retention periods, that prevent the deletion. In such a case, the data will be deleted as soon as the justifiable reason no longer applies, i.e., after the retention period has expired.

In general, data we process based on your consent will be deleted immediately upon withdrawal unless legal restrictions prevent deletion (see above.)

22. Your data subject rights

As a person affected by data processing, you are entitled to the following rights, subject to and to the extent permitted by law. You are allowed to:

  • obtain information about the processing of your data (Art. 15 GDPR);
  • demand immediate rectification of inaccurate personal data and/or completion of incomplete personal data (Art. 16 GDPR);
  • demand the immediate removal of your data (Art. 17 GDPR);
  • request the restriction of the processing of your data (Art. 18 GDPR);
  • obtain the data that you have provided in a structured and machine-readable format and to transfer this data to another controller (Art. 20 DSGVO);
  • object at any time, on grounds relating to your particular situation, to the processing of your data, insofar as the processing is based on legitimate interests or (Art. 21(1) DSGVO). If your data is used for direct marketing, you may object to the processing of your data at any time without giving any reason (Art. 21 para. 2 DSGVO);
  • withdraw your consent to data processing at any time without affecting the lawfulness of the data processing based on the consent until the withdrawal (Art. 7 (3) DSGVO);
  • complain to a supervisory authority about processing your data (Art. 77 DSGVO).

23. Questions and comments

If you have any questions, suggestions, or comments regarding data protection, please e-mail : datenschutz@ib.de to the International Federation's data protection officer.

24. Changes to the data protection information

The constant evolution of the Internet necessitates periodic updates to our data protection policies. Therefore, we reserve the right to modify this data protection information at any time, and we will always comply with applicable data protection laws. We, therefore, advise you to review the relevant data protection information regularly. In addition, we will notify you in advance of any additional data processing.

25. Facebook Pixel

This website measures conversions using the Facebook visitor action pixel. Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, is the provider of this service. Facebook claims that the acquired data is also transferred to the United States and third countries.

Thus, it is possible to track website visitors' behaviour after they have been redirected to the provider's website by clicking on a Facebook advertisement. Therefore, the efficacy of Facebook advertisements can be assessed for statistical and market research purposes, and future advertising campaigns can be optimized.

As the website's operator, we cannot determine the user's identity based on the collected information. However, Facebook stores and processes the data to make a connection to the respective user's profile possible. In addition, Facebook may use the data for its advertising per its data usage policy. This allows Facebook to display advertisements outside of and on Facebook pages. But, again, as the site operator, we cannot influence this helpful information.

Your consent is required to use this service following Art. 6 para. 1 lit. a DSGVO and 25 para. 1 TTDSG. The support is revocable at any time.

The data transfer to the United States is governed by the EU Commission's standard contractual clauses. Details are available here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Suppose personal information is collected via this tool and transmitted to Facebook. In that case, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited to collecting and transmitting the data to Facebook. The processing by Facebook that occurs after the transmission is not included in the shared responsibility. Following the terms of a joint processing agreement, our obligations are shared. The agreement's actual text can be found at: https://www.facebook.com/legal/controller_addendum. According to the terms of this agreement, we are responsible for providing data protection information when utilizing the Facebook tool and for implementing the means on our website following applicable data protection laws. Facebook is responsible for the security of its product data. You can assert your data subject rights (such as requests for information) directly with Facebook concerning Facebook's processing of your data. We must forward your request to Facebook if you assert your data subject rights with us.

You can find further information on protecting your privacy in Facebook's data protection information: https://de-de.facebook.com/about/privacy/.

You can also deactivate the "Custom Audiences" remarketing function in the advertising settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you are required to be logged in to Facebook. .

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.