Data protection information

Valid from 01.02.2020

This data protection notice is intended to provide an overview of what happens to your personal data (hereinafter also: “data”) in our company and to inform you about your data protection claims and rights within the meaning of the European General Data Protection Regulation (“GDPR”) and the Federal Data Protection Act (“BDSG”). We therefore ask you to read this privacy policy and, if necessary, print it out or save it.

Personal data is any data that can be used to personally identify you. Your personal data can be processed for various purposes. In essence, data processing processes can be divided by exccon AG (hereinafter also referred to as “exccon” or “we”) into the following areas of application:

In connection with the website www.exccon.com (hereinafter: “website”) or comparable external online presences, such as our social media profiles or browser-based services (website and external online presences hereinafter collectively: “online presence”), we process visitors' data that is exchanged between their internet-enabled devices and the server operated by us, as well as data that is provided to us when using the website. See Part B for details.
For the purpose of processing or initiating contracts, we process the necessary data of our customers and interested parties. You can find more information about this under Part C.
Data from our business partners or supplier data is used exclusively for direct order placement, processing and execution. You can find more information about this under Part C.

Please visit the individual sections if you would like to receive quick and contextual information on specific processing situations.

General information on data protection, data processing processes and data subject rights, which are valid for all data processing operations carried out for us, can be found in Part A below.

A. General information on data protection and data subject rights

I. Who is responsible for data processing and who can you contact if you have any questions?

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

exccon AG
Valley 11
80331 Munich

Telephone: +49 89 189 04 775-0
Fax: +49 89 189 04 775-99
email: info@exccon.com

The responsible contact person at exccon is Martin Vogl, ibid.

You can contact our data protection officer at:

Lawyer Richard Metz
Lohmanns Lankes & Partner PartGmbB
Attorneys and patent attorneys
Würmtalstr. 20a
81375 Munich
Phone: +49 89 552 75 500
email: r.metz@llp-law.de

II. What are your rights with regard to your personal data?

If your personal data is processed, you are a “data subject” within the meaning of the GDPR, which means that you may have the rights described below. If you assert rights against exccon as the responsible body, we recommend that you address them to these contact details:

exccon AG
Valley 11
80331 Munich

info@exccon.com

Right to information
In accordance with Article 15 GDPR, you can request confirmation from us as to whether we process personal data relating to you and to what extent we process your data.
Right to rectification
If personal data relating to you is incorrect or incomplete, you have the right to have it corrected and/or completed in accordance with Article 16 GDPR
Right to delete
If the legal requirements of Article 17 GDPR are met, you can request us to delete your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of legally regulated storage obligations.

Irrespective of the exercise of your right to erasure, we will delete your data immediately and completely after the processing purpose has ceased to apply, provided that there is no legal or statutory retention period to the contrary, in order to comply with our legal deletion obligations.
‍Right to restrict processing
In the cases specified in Article 18 GDPR, you can request us to restrict the processing of your data. If you have restricted the processing of your personal data, this data — apart from storage — may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
‍Right to data portability
According to Article 20 GDPR, you have the right to have data provided by you, which we process automatically on the basis of your consent or in fulfilment of a contract, handed over to yourself or to a third party in a common, machine-readable format. If you request the direct transfer of data to another person responsible, this will only be done if it is technically feasible. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the person responsible.
‍Right of objection
If we process your data on the basis of a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR, you can object to this data processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions (see Art. 21 GDPR). If you file an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will then no longer be used for direct marketing purposes. You can object to the processing of your data for direct marketing purposes at any time without giving reasons.
Right to revoke the declaration of consent under data protection law
Some data processing operations are only possible with your express consent within the meaning of Art. 6 para. 1 lit. a DSGVO. You can revoke any consent you have already given at any time with effect for the future. However, the legality of the data processing carried out up to the time of revocation remains unaffected by the revocation. Please note that even after consent has been withdrawn, it may still be possible to process the data concerned in whole or in part on the basis of other legal bases.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR (Article 77 GDPR in conjunction with Section 19 BDSG). A list of data protection officers and their contact details can be found at the following link: www.bfdi.bund.de/de/infothek/anschriften_links/anschriften_links-node.html.

If you believe that we are processing your data in violation of German or European data protection law, please contact us so that we can answer any questions you may have. Of course, you also have the right to contact the supervisory authority responsible for us after our company headquarters:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach

email: poststelle@lda.bayern.de

III. Which personal data is processed and from which sources does this data come?

Source of personal data
We primarily process the data that we receive directly from the persons concerned as part of a business process or in the course of the business relationship (see also Part C).

In individual cases, we also process data that we have legitimately received or acquired from other third parties such as credit agencies, creditor protection associations, or from public authorities, or which we have lawfully extracted, received or acquired from publicly available sources (e.g. telephone directories, company registers, press, Internet or other media).

Through our online presence, we process data that we receive as part of your visit to the respective website or that you actively provide to us when using the website, e.g. when using our contact form. Other data is automatically collected by our IT systems when you visit the online presence. In particular, this includes technical data (e.g. Internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our respective online presence. Details can be found under Part B.
Categories of personal data
The personal data that we regularly process includes personal name/contact details such as: first and last name, address, e-mail address, telephone number, fax, position in the company.

Depending on the order/service, we also process the following other personal data:

Information about the nature and content of our business relationship, such as contract data, order data, sales and document data, customer and supplier history, consulting documents
advertising and sales data,
Documentation data (e.g. consultation minutes, data from service meetings or support cases)
information from your electronic transactions with us (e.g. IP address, login data),
other data that we have received from you as part of our business relationship (e.g. in customer meetings),
the documentation of declarations of consent
Photos taken at public events

IV. For which purposes and on which legal basis is the data processed?

We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) in the current version, in particular on the following basis:

Fulfilment of (pre-) contractual obligations (Art. 6 para. 1lit.b DSGVO)
Personal data is processed on the basis of Art. 6 para. 1 lit. B GDPR to fulfill exccon's contractual obligations, in particular in connection with the sale and distribution of our goods and services, as well as all activities required for the operation or administration of exccon in the industry (e.g. customer administration). The data may also be processed on a pre-contractual level as part of a business transaction with exccon, or when carrying out other contractual relationships with exccon.

For example, Article 6 (1) (b) GDPR is the legal basis in the following cases:

Creating and managing a customer account or a supplier account
Maintaining customer/interested party files or our customer/prospective customer database
Sending information
Offering and selling software products
Offering and implementing our services (e.g. training, consulting and support services)
Planning and execution of events
Details of the purpose of this data processing can be found in the respective contract documents and terms and conditions.
Safeguarding legitimate interests (Art. 6 para. 1 lit. f GDPR)
On the basis of a balance of interests, data processing may take place beyond the actual fulfilment of a contract to protect the legitimate interests of exccon or third parties. This is permitted unless your interests or fundamental rights and freedoms that require the protection of personal data prevail. Data processing to protect legitimate interests takes place, for example, in the following cases:

Carrying out payment transactions via external service providers
Use of debt collection service providers and lawyers to collect and/or enforce claims in court
Assertion of other legal claims and defense in legal disputes
advertising or marketing
Video and audio recordings at public events (e.g. trade fairs, open houses, workshops, industry events)
measures to manage business and develop our services;
Maintaining databases of customers/prospects or service providers to improve our offer
Carrying out a risk assessment (due diligence) as part of any corporate restructuring or a company purchase or sale
Building and plant safety measures
Fulfilment of legal obligations (Art. 6 para. 1 lit. c GDPR)
Processing your data may be necessary in part for the purpose of meeting various legal obligations and requirements to which we are subject, e.g. from the Commercial Code or the Tax Code.
Consent (Art. 6 para. 1 lit. a GDPR)
If you have given us consent to process your data in individual cases, processing will take place in accordance with the purposes set out in the declaration of consent and to the extent agreed therein. Any consent given, e.g. to send a newsletter, can be withdrawn at any time with effect for the future. To do so, please use the contact details provided under A. Section I or Section II. Please note that processing that took place before the revocation is not affected by the revocation and that data processing may continue to be possible, at least in part, on the basis of another legal basis.

To do this, we use your data for the following purposes:

Quality assurance: In order to continuously improve our services, our products and our services for you, we conduct surveys on your satisfaction and your experience from your contractual relationship.
General and personalized advertising via e-mail (in particular our newsletter), fax or telephone.
If you have given us a corresponding SEPA direct debit mandate, we will use your bank details. Through the SEPA direct debit mandate, we collect outstanding amounts in accordance with the contractual agreements.

V. Who receives my data?

At exccon, those employees or organizational units who need it to fulfill our contractual and legal obligations or to process or pursue our legitimate interests receive your data.

In order to initiate or process a contractual relationship (e.g. provision of a service or sale of goods), your data will be transferred in accordance with Article 6 Paragraph 1 S. 1 lit. b GDPR or — depending on the type of specific contractual relationship — and on the basis of our legitimate interests in accordance with Art. 6 Paragraph 1 S.1 lit. f GDPR, in particular to companies that we regularly use in connection with providing our services or processing contracts. This applies to the following recipients or categories of recipients:

IT service providers (e.g. email service providers, web hosting companies)

4me Inc, 555 Bryant Street #156 Palo Alto, CA 94301 U.S.A. (support platform)
Webflow, Inc. 398 11th Street, 2nd FloorSan Francisco, CA 94103, United States
Mailchimp, Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA (newsletter service provider)
Microsoft (Office 365): Microsoft Germany GmbH, Walter-Gropius-Strasse 5, 80807 Munich, Germany
Salesforce (CRM): salesforce.com Germany GmbH, Erika-Mann-Strasse 31, 80636 Munich, GERMANY
Moco: hundredtzehn GmbH, Aeschstrasse 131F, 8123 Ebmatingen, Switzerland
DomainFactory GmbH Oskar-Messter-Strasse 33 85737 Ismaning, Germany
Personio SE & Co. KG, Seidlstr. 3, 80335 München, Deutschland

Exam and certification provider

PeopleCert International Limited, Cyprus company no. 160322, 40 Themistocles Dervi Str. 1066, Nicosia, Cyprus (Examination Institute)

Affiliated companies and partner companies Sales partners

4me, 555 Bryant Street #156 Palo Alto, CA 94301 USA (support platform)
BeyondTrust, Atlanta, 11695 Johns Creek Parkway, Suite 200 Johns Creek, Georgia 30097, United States
ServiceNow, 2225 Lawson Lane, Santa Clara, CA, 95054, United States
salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany
Oneio Cloud Oy, Huopalahdentie 24, FI-00350 Helsinki, Finland

advertising partner

insurances

banks

Communications provider (telephone provider, fax provider)

NFON AG, Machtlfinger Str. 7, 81379 Munich, Germany

Payment service provider

Shipping and logistics service providers in the education sector

Transimpex Exact Courier and Overnight Appointment Service Agency GmbH, Kistlerhofstr. 70/Building 79, D-81379 Munich
Deutsche Post/DHL

credit agencies

auditors

Tax and legal advisors

If we use a service provider for order processing in accordance with Article 28 GDPR, we still remain responsible for protecting your data. Insofar as required by law, processors are contractually obliged by means of an order processing agreement to keep your data confidential and to process it only as part of the provision of services. The contract processors commissioned by us will receive your data insofar as they need the data to perform their respective services.

Your data will only be transferred to government institutions and authorities or such data collected for this purpose within the framework of mandatory national legislation or if you instruct us to do so.

VI. How long will my data be stored?

Your personal data will only be used for the purpose for which you have provided it to us or for which you have given us your consent to process and stored until this specific purpose has been fulfilled. After the purpose has been fully processed, or as soon as you request us to delete your data, your data will only be stored for as long as is necessary due to statutory limitation periods or retention periods (in particular tax and commercial law). However, at the latest after expiry of all periods, the data will be deleted unless you have expressly consented to further or other use. You can also assert rights during storage periods, such as blocking your data. For this, see A. point II.

Your data will be deleted or blocked by us as soon as the purpose of storage no longer applies or you ask us to delete it.

We process, in particular, store your data at the latest only until the end of the business relationship or until the expiry of the applicable warranty, warranty and limitation periods. For example, the statute of limitations under Sections 195 et seq. of the Civil Code (BGB) is generally three years, but in certain cases it can also be up to thirty years. In addition, it may be necessary for data to be stored until any legal disputes in which the data is required as evidence have been brought to an end.

We are also subject to legal documentation and retention periods (for example from the Commercial Code (e.g. Section 257 HGB), the Money Laundering Act or the Tax Code (e.g. Section 147 AO)). The storage and documentation periods specified there are two to ten years. For example, even after the termination of a contract with you, we would need to store your data for a period of time until the tax audit of the last calendar year in which you were our customer was completed.

VII. Is personal data transferred to a third country?

As part of our processing processes, personal data may also take place in certain business transactions or areas of activity in so-called third countries outside the EU or the EEA, which have not yet been certified by the EU Commission to an adequate level of data protection, for example in the USA. If such a transfer of data should become necessary in individual cases, this will only be done on the basis of an adequacy decision by the European Commission, standard contractual clauses, appropriate guarantees for compliance with data protection or your express consent.

B. Using our online presence

In principle, you can visit our online presences and use them for informational purposes without having to provide any information about yourself (e.g. register or place orders or otherwise provide information about yourself). In this case, we only process the personal data of our users insofar as this is necessary to provide a functional website and our content and services, or if cookies used on the website provide us with personal information when you visit the website. Information about our own cookies we use can be found under B Section II. Other cookies may also enable our partner companies or third parties to recognize your browser on your next visit. For information on such third-party cookies, please see B Section III.

In addition, the processing of our users' personal data is regularly carried out only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.

I. Provision of the website and creation of log files

Description of data processing
Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer, which your Internet browser automatically transmits to us or our web host (so-called log files). These server log files contain IP addresses or other data that enable an assignment to a user. This could be the case, for example, if the link to the website from which the user accesses the website, or the link to the website to which the user switches, contains personal data. The following information is collected in this process:

Domain (website you are visiting)
Website from which you are visiting us (referrer URL)
Your Internet Protocol (IP) address
date and time of your visit
Browser type and version; operating system used
Bytes transferred

This data is not stored together with other personal data of the users.

Legal basis and purpose of data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

They are stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems.

Duration of storage/ Objection and removal option
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If data is collected to provide the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after 3 days at the latest, according to our web host. Storage beyond this is possible. In this case, the users' IP addresses are deleted or distorted so that it is no longer possible to assign the calling client. After 24 hours, anonymized data is available from our provider for 3 months.

The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.

II. Use of cookies

Description of data processing
Our website uses cookies or similar procedures and collects, processes and uses usage data (e.g. access times, websites accessed) or meta and communication data (IP address, device information). Cookies are text files with a characteristic string of characters that are stored in the Internet browser or by the Internet browser on the user's computer system and which enable the browser to be uniquely identified when the website is accessed again. If a user accesses a website, a cookie can be stored on the user's operating system. A cookie contains a characteristic string of characters. The use of these cookies serves to make web access more user-friendly, effective and secure. When you visit a website that contains a cookie, the data you enter is stored exclusively in the cookie on your computer. In this case, data is only transmitted to the servers of our website when a page is requested.

Some cookies are deleted after the end of the browser session when your browser is closed (so-called session cookies). These cookies are technically necessary, e.g. so that you can log in to the application and also remain logged in across pages while you visit our website.

Other cookies remain on your device for a specified period of time and enable us to recognize your browser the next time you visit (so-called persistent or log cookies). The purpose of using these cookies is to offer you optimal user guidance and to “recognize” you and to be able to present you with the most varied website and new content possible when used repeatedly.

Cookies from partner companies or third parties can be used, for example, to collect information for advertising, user-defined content or statistics (“third-party cookies”). Unless we identify cookies as coming from third parties, the cookies come from our offer (“first-party cookies”). We will inform you separately about third-party cookies or “tracking” technologies that we use in the following sections of our privacy policy.

Flash cookies are stored on your computer as data elements from websites when they are operated with Adobe Flash. Flash cookies have no time limit.

We use the following cookies to make our website more user-friendly and save or transmit the following data:

Name of cookie: _gcl_au

Usage: Used by Google AdSense to experiment with advertising efficiency on websites that use their services.
Storage period: 3 months
Type of cookie: HTTP
Domän: www.exccon.com

Name of cookie: _ir

Purpose: Collects information about visitor behavior on several websites. This information is used on the website to optimize the relevance of advertising.
Storage period: 1 day
Type of cookie: HTTP
Domän: www.pinterest.de

Name of cookie: ads/ga-audiences

Usage: Used by Google AdWords to re-engage visitors who are likely to become customers due to their online behavior on various websites.
Storage period: session
Type of cookie: pixel
Domän: www.google.com

Name of cookie: Consent

Usage: Used to determine whether the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for the website to comply with the GDPR.
Storage period: 2 years
Type of cookie: HTTP
Domän: www.youtube.com/google.com

Name of cookie: CookieConsent

Usage: Saves the user's consent status for cookies on the current domain.
Storage period: 1 year
Type of cookie: HTTP
Domän: exccon.com

Name of cookie: pagead/landing

Purpose: Collects data on visitor behavior on multiple websites in order to present more relevant advertising — This also allows the website to limit the number of times the same advertisement is displayed.
Storage period: session
Type of cookie: pixel
Domain: www.google.com/doubleklick.net

Name of cookie: PHPSESSID

Usage: Maintains the user's status for all page requests.
Storage period: session
Type of cookie: HTTP
Domän: www.exccon.com

Name of cookie: rc: :a

Purpose: This cookie is used to differentiate between humans and bots. This is beneficial for the website to generate valid reports on the use of its website.
Storage period: Persistent
Type of cookie: HTML
Domän: www.google.com

Name of cookie: rc: :c

Purpose: This cookie is used to differentiate between humans and bots.
Storage period: session
Type of cookie: HTML
Domän: www.google.com

Name of cookie: test_cookie

Usage: Used to check whether the user's browser supports cookies.
Storage period: 1 day
Type of cookie: HTTP
Domain name: www.doubleklick.net

Name of cookie: VISITOR_INFO1_LIVE

Usage: Attempts to estimate user bandwidth on pages with built-in YouTube videos.
Storage period: 179 days
Type of cookie: HTTP
Domän: youtube.com

Name of cookie: wc_cart_hash_#

Usage: This cookie is set by WooCommerce (shop system) to save the shopping cart during a session, i.e. to ensure that products that you have placed in the shopping cart are not deleted again while you search for other products that you would also like to add.
Storage period: Persistent
Type of cookie: HTML
Domän: www.exccon.com

Name of cookie: wc_fragments_#

Usage: This cookie is set by WooCommerce when using the online shop.
Storage period: session
Type of cookie: HTML
Domän: www.exccon.com

Name of cookie: wordpress_test_cookie

Usage: Used to check whether the user's browser supports cookies.
Storage period: session
Type of cookie: HTTP
Domän: exccon.com

Name of cookie: YSC

Usage: Registers a unique ID to keep statistics of YouTube videos that the user has seen.
Storage period: session
Type of cookie: HTTP
Domän: youtube.com

Name of cookie: yt-remote-cast-available

Usage: Saves the user setting when retrieving a YouTube video integrated on other websites
Storage period: session
Type of cookie: HTML
Domän: youtube.com

Name of cookie: yt-remote-cast-installed

Usage: Saves the user setting when retrieving a YouTube video integrated on other websites
Storage period: session
Type of cookie: HTML
Domän: youtube.com

Name of cookie: yt-remote-connected-devices

Usage: Saves the user setting when retrieving a YouTube video integrated on other websites
Storage period: Persistent
Type of cookie: HTML
Domän: youtube.com

Name of cookie: yt-remote-device-id

Usage: Saves the user setting when retrieving a YouTube video integrated on other websites
Storage period: Persistent
Type of cookie: HTML
Domän: youtube.com

Name of cookie: yt-remote-fast-check-period

Usage: Saves the user setting when retrieving a YouTube video integrated on other websites
Storage period: session
Type of cookie: HTML
Domän: youtube.com

Name of cookie: yt-remote-session-app

Usage: Saves the user setting when retrieving a YouTube video integrated on other websites
Storage period: session
Type of cookie: HTML
Domän: youtube.com

Name of cookie: yt-remote-session-name

Usage: Saves the user setting when retrieving a YouTube video integrated on other websites
Storage period: session
Type of cookie: HTML
Domän: youtube.com

Name of cookie: _ga

Usage: Registers a unique ID, which is used to generate statistical data on how the visitor uses the website, is used to differentiate between users.
Storage period: 2 years
Type of cookie: HTTP
Domän: exccon.com

Name of cookie: _gat

Usage: Used by Google Analytics to limit the request rate.
Storage time: 1 minute
Type of cookie: HTTP
Domän: exccon.com

Name of cookie: _gid

Usage: Registers a unique ID, which is used to generate statistical data on how the visitor uses the website, is used to differentiate between users.
Storage period: 1 day
Type of cookie: HTTP
Domän: exccon.com

Name of cookie: woocomerce_recently_viewed

Usage: Contains data about the last products that the visitor viewed. Used by the webmaster for internal statistics.
Storage period: session
Type of cookie: HTTP
Domän: exccon.com

Name of cookie: IDE

Usage: Used by Google DoubleClick to register and report the user's actions on the website after viewing or clicking on one of the provider's ads, with the purpose of measuring the effectiveness of an advertisement and showing targeted advertising to the user.
Storage period: 1 year
Type of cookie: HTTP
Domain name: doubleklick.com

Name of cookie: ytidb: :LAST_RESULT_ENTRY_KEY

Usage: Saves user settings when retrieving a YouTube video integrated on other websites
Storage period: Persistent
Type of cookie: HTML
Domän: youtube.com

Legal basis and purpose of data processing

The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality and security of the website and a customer-friendly and effective website visit, unless we ask you for consent in accordance with Art. 6 para. 1 lit. a GDPR.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

Duration of storage/ Objection and removal option

Cookies are stored on the user's computer and transmitted by the user to our site. As a user, you therefore also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

III. Statistical analysis of the website/increase in reach

Google Analytics
Description of data processing
Our website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland., ibid. (hereinafter: “Google”).

Google Analytics also uses so-called “cookies.” The information generated by Google's cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google is a participant in the EU-US Privacy Shield https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg) which prescribes minimum standards for the protection of personal data of Europeans whose data is stored or processed in the USA.

We would like to inform you that this website uses Google Analytics exclusively using the “anonymizeIp ()” extension. Your IP address will therefore not be stored in full and will be abbreviated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before transmission to the USA. The identification of the visitor to the website is excluded. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

For more information about Google's processing of data, please read Google's privacy policy: https://policies.google.com/privacy?hl=de

‍Legal basis and purpose of data processing
Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

The information generated by the cookies about your use of this homepage (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for its operators and to provide other services related to website and Internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Google has contractually guaranteed that in no case will your IP address be linked to other data from Google.

We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

‍Duration of storage/ Objection and removal option
‍Cookies are stored on the user's computer and transmitted by the user to our site. As a user, you therefore also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

By installing the browser add-on to deactivate Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de), you can object to its use. This tells Google Analytics that no information about your website visit should be transmitted to Google Analytics.

In addition, you can install an opt-out cookie on your device via this link https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable, in particular for browsers on mobile devices, so that Google Analytics will prevent the collection of data on our website in the future. Please note that if you delete cookies on your device, you must also reinstall the opt-out cookie.
Google Tag Manager

Description of data processing
Google Tag Manager is a solution from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”), which allows marketers to manage so-called website tags via an interface. The Google Tag Manager itself (which implements the tags) is a domain without cookies and does not collect any personal data. The Google Tag Manager triggers other tags, which in turn may collect data. Corresponding explanations of these respective third-party providers can be found in this privacy policy. Google Tag Manager does not access this data. If you have set or otherwise deactivated cookies, this will be observed for all tracking tags that were used with Google Tag Manager, meaning that the tool does not change your cookie settings.

For more information about Google Tag Manager, see: https://www.google.com/intl/de/tagmanager/use-policy.html.

‍Duration of storage/ Objection and removal option
‍We use Tag Manager for Google's Google Analytics and GA Audience services. If you have deactivated these services, Google Tag Manager will take this into account. See explanations about Google Analytics under B.III.1.

IV. Further information on the processes, plug-ins and tools used to design the website

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties.
‍youtube
Description of data processing
From time to time, we use content and service offerings from YouTube LLC, 901 Cherry Ave. San Bruno, California, CA 94066, United States (hereinafter: “YouTube”) to integrate video content on our website using a plugin. YouTube is a subsidiary of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, a subsidiary of Alphabet Inc., ibid. (hereinafter: “Google”). If you want to play the embedded videos using this plugin (by clicking the play button), your IP address will be sent to YouTube, as YouTube cannot send the video content to your browser without the IP address. The IP address is therefore required for display. The YouTube server also transmits which subpage of our website you have visited. If you are logged into your YouTube account as a You-Tube member, you also allow YouTube to assign your usage behavior directly to your personal profile when you play our videos. For more information on data processing by YouTube, please refer to the data processing applicable to YouTube: https://policies.google.com/privacy?hl=de&gl=de

‍Legal basis and purpose of data processing
Facebook Connect is used on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR to make video content available on our website.

‍Duration of storage/ Objection and removal option
To prevent this attribution, log out of your YouTube profile before playing our video content.

V. Online presence on social networks and platforms

Description of data processing
exccon maintains other online presences within social networks or industry networks (LinkedIn, Facebook, XING, Twitter and Instagram) (hereinafter also referred to as “SN”) and platforms (e.g. YouTube) and links to them from our website. By clicking on the respective buttons (recognizable by the respective logos of the social networks or platforms), you can access the respective online presence of SN. The purpose of these online presences is to communicate with the customers, interested parties and users active there and to inform them about our services there.

When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

Legal basis and purpose of data processing
Unless otherwise stated in our privacy policy, we process users' data on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO, effective information from users and communication only if they communicate with us within social networks and platforms (e.g. when users post on our online presence or send us messages).

In some cases, SN maintain servers in the USA, to which your data may be forwarded. These SN, such as Facebook Inc. and Twitter Inc., have joined the EU-US Privacy Shield, which prescribes minimum standards for the protection of personal data of Europeans whose data is stored or processed in the USA. Details are provided in the list below.

Duration of storage/ Objection and removal option
If you are a member of one of the SN on which we maintain online presences and do not want SN to collect data about you via our service and link it to your data with the SN, you must log out of your SN before visiting our service. For a detailed description of the respective processing operations, information on the duration of storage of data by the respective SN and the options for objection (opt-out), we refer to the information provided by the providers linked below.

Even in the case of requests for information and the assertion of user rights, we would like to point out that these can be asserted most effectively with the providers. Only providers have access to users' data and can directly take appropriate measures and provide information. Should you still need help, you can contact us.

facebook
For our Facebook company page (“fan page”) of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), we have concluded an agreement on joint processing of personal data with Facebook within the meaning of Art. 26 GDPR.

This agreement is necessary because Facebook Inc., Menlo Park, California, USA (hereinafter: Facebook Inc.) provides so-called page insights on our fan page. Page insights are the summary of data that both we and Facebook Inc. can gain information about how our users interact with our site. Page insights can be based on personal data collected in connection with our users' visit or their interactions on our site. However, by maintaining the Facebook company page, we share responsibility and have an obligation to report to Facebook if we receive data protection inquiries about page insights. Please note that we are forwarding requests for page insights to Facebook Ireland. In addition, please note the information on the rights of data subjects to which you are entitled under A.

The evaluation of the data collected via page insights is used to improve our websites and for advertising purposes. The collection of this data is in our legitimate interest and in the legitimate interest of Facebook Inc. in accordance with Art. 6 para. 1 lit. f DSGVO.

We would like to draw your attention to the fact that we cannot switch page insights technology on and off. We must therefore forward most of these requests to Facebook Ireland, unless we have collected data ourselves. If you do not want Facebook Inc. If you collect your data, please do not use our Facebook company page and/or set your browser to prevent cookies from being set and/or to log out of Facebook while you are using our site.

Privacy Policy: https://www.facebook.com/privacy/explanation https://www.facebook.com/legal/terms/information_about_page_insights_data,
Objection option: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

instagram
‍Instagram is a service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Privacy statement/right of objection: https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Privatsph%C3%A4re%20und%20Sicherheit

linkedin
‍LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy Policy https://www.linkedin.com/legal/privacy-policy
Objection option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

twitter
‍Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, United States

Privacy Policy: https://twitter.com/de/privacy
Objection option: https://twitter.com/personalization,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

XING
‍XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany (“XING”)

Privacy statement/right of objection: https://privacy.xing.com/de/datenschutzerklaerung

VI. Links to websites of other providers

Our website may contain links to other websites. Has no influence on the content and design of offers from other providers. The statements in this privacy policy therefore do not apply to external providers whose offers or content we simply link to.

If you are redirected from our pages to other sites via links, please find out how your data is handled there.

VII. Active use of our website

email contact
Description of data processing
You can contact us via the email address provided (see “Impressum” or “Contact”). In this case, the user's personal data transmitted by e-mail will be stored.

‍Legal basis and purpose of data processing
The legal basis for processing the data that is transmitted in the course of sending a contact form request or an e-mail is Art. 6 para. 1 lit. f DSGVO. If the contact form request or email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

We process the personal data from the input mask solely to process the contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process is used to prevent misuse and to ensure the security of our information technology systems.

‍Duration of storage/ Objection and removal option
‍The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified and no legal requirements require longer storage.

If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

In this case, all personal data that was stored in the course of contacting us will be deleted, unless legal requirements require longer storage.
Newsletters and newsletter service providers

Description of data processing
We would like to inform our customers and interested parties at regular intervals with promotional news about our products, services, innovations or news at exccon via e-mail or other electronic notifications (hereinafter referred to as “newsletter”). To do this, we need your email address. In the respective newsletter registration forms, further information is required, such as names, the title and the company in order to provide you with personalized content tailored to your interests. Alternatively, you are welcome to enter “private” in the company field.

You can subscribe to our newsletters by using the corresponding function of a registration form to subscribe to our newsletter, or during a registration process by ticking a check mark (so-called opt-in). For this purpose, we provide an option on our website to register for the newsletter. The details of the respective content of our newsletters are specifically described in the respective registration form. This description is decisive for your consent.

Following your registration, we will send you an e-mail asking you to confirm your newsletter subscription again (so-called double opt-in procedure). This confirmation is necessary to rule out that someone else has misused your e-mail address to subscribe to our newsletter at a different address. Your e-mail address will only be activated for sending the newsletter once the hyperlink sent in the e-mail has been activated.

For verification purposes, in addition to your email address and name, the IP address and the registration date (“timestamp”), are stored for sending the newsletter.

To send our newsletters and mailings, we work together with the shipping service provider MailChimp. MailChimp is a newsletter delivery platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

MailChimp can use recipients' data in pseudonymous form, i.e. without attribution to a user, to optimize or improve its own services, e.g. to technically optimize the delivery and display of newsletters or for statistical purposes. However, MailChimp is not entitled to use the data of our newsletter recipients to write to them themselves or to pass on the data to third parties. You can view the shipping service provider's privacy policy here: https://mailchimp.com/legal/privacy/.

The Rocket Science Group LLC, as provider of MailChimp, is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European level of data protection.

‍Legal basis and purpose of data processing/data recipient
The legal basis for sending newsletters is the consent given by you as the recipient in accordance with (Art. 6 para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with § 7 para. 2 no. 3 UWG), or if consent under § 7 para. 3 UWG is not required for existing customers, based on our legitimate interest in direct marketing measures in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG.

Logging in the registration process is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO in a secure and targeted newsletter system that meets both our business sales interests and the ideas and needs of the recipients, as well as the verifiability of the consents given.

MailChimp is used as a shipping service provider based on our legitimate interests in accordance with Article 6 Paragraph 1 lit. f GDPR and an order processing contract in accordance with Article 28 Paragraph 3 S. 1 GDPR.

‍Duration of storage/ Objection and removal option
‍You can object to the sending of the newsletter at any time, or withdraw your consent to receive the newsletter in whole or in part. You will find an unsubscribe link at the end of every newsletter. You can also contact us directly at: newsletter@exccon.com.

Unsubscribing from the newsletter does not affect business communication. We store your data for the purpose of contract processing, our support and services, software updates or registration for events. In addition, we reserve the right to store the necessary evidence of a legally compliant newsletter delivery until the statutory limitation periods have expired.
Registration for events, trade fairs, courses or seminars (“events”)
Description of data processing
On our website, you can find out about current events from and with EXCCON. The information about the respective events includes registration forms, which you can use to register if you are interested. If a user makes use of this option, the data entered in the respective input mask will be transmitted to us and stored.

In doing so, we process the information available from the respective input forms, such as title, name, company, e-mail, telephone (binding information is usually marked with the addition *) and comments or messages submitted.

We process and use the data collected in this way for the purpose of processing registrations and holding the respective event. Further details on the legal and organizational framework can be found in the respective underlying event descriptions or conditions of participation.

‍Legal basis and purpose of data processing
The legal basis for processing data sent in the course of sending an electronic application is Article 6 Paragraph 1 lit. b GDPR due to the intended conclusion of a contract, and otherwise Art. 6 Paragraph 1 lit. f GDPR.

We process the personal data from the input mask to process the respective registration and to plan and carry out the respective events.

‍Duration of storage/ Objection and removal option
‍The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the registration form, this is usually the case when the respective event has ended.

All personal data stored in the course of contacting us will be deleted at the latest if no legal requirements require longer storage.
‍Orders placed via our website (“web shop”)
Description of data processing
On our website, you can book offers from the “Education” sector (such as seminars or training courses) directly. The individual training offers can be added to the shopping cart of our shop system via a booking button. The processed data includes inventory data, communication data, contract data, payment data of our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services as part of the operation of an online shop, billing, delivery and customer services. For this purpose, we use session cookies on the website to store the contents of the shopping cart.

As part of the ordering process, we process the details shown in the respective input forms, such as title, name, company, department, address, e-mail. Binding information is usually: marked with the addition * and includes the information necessary to provide and invoice the ordered service, as well as contact information to be able to consult you, or to be able to inform you of important information about the order (such as rescheduling dates).

We process and use the data collected in this way to enable you to select and order our training offers and related services, as well as to pay for them. In addition, the data is processed to process the order you have placed and subsequently to carry out the seminar or training you have booked. Further details on the legal and organizational framework can be found in the respective underlying event descriptions or conditions of participation.

If you buy goods or use services from us, we would like to send you, as an existing customer, information emails (“newsletters”, for more information on shipping and service providers used for this purpose, see also Section VII. 2) for similar goods or services. These emails will only be sent after an order has been completed.

‍Legal basis and purpose of data processing
The legal basis for processing the data collected in the course of an order is Article 6 (1) (b) GDPR due to the intended conclusion of a contract, and otherwise Article 6 (1) (f) GDPR.

We process the personal data from the input mask to process the respective registration and to plan and carry out the respective events (Art. 6 para. 1 lit. b GDPR).

The legal basis for sending advertising information to existing customers by e-mail is our legitimate interest in direct marketing measures in accordance with Art. 6 para. 1 lit. f DSGVO in conjunction with § 7 para. 3 UWG.

‍Duration of storage/ Objection and removal option
‍The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the order process input mask, this is the case at the earliest after a training contract has been concluded when the respective training service has been provided in full. However, we generally store contract-related data until the expiry of the legal warranty obligations. In the event of a legal archiving obligation, the affected data will be deleted after the deadline has expired.

As an existing customer, you can request that you no longer receive information emails from us at any time. To do so, please email newsletter@exccon.com or use the contact details given in the legal notice. If the respective newsletter contains a corresponding unsubscribe link at the end of the email, you can also use this to exercise your objection. You will not incur any transmission costs other than the basic rates.

VIII. Using our support area

Description of data processing
We offer our customers the option of sending us support requests via a dedicated login area using a browser-based tool. We provide our customers with the URL at which the tool can be accessed and the necessary password as part of the business transaction. The login details required for login (email address and password) are stored by us when a corresponding customer account is created.

To provide our support services, we use the cloud application from the manufacturer 4me Inc. 555 Bryant Street #156 Palo Alto, CA 94301, USA on the basis of our legitimate interest (Art. 6 Para. 1 S. 1 lit f) GDPR in conjunction with Article 28 GDPR (contract processing agreement with our service provider). Your login details are also managed here. However, ticket processing is primarily carried out by our support staff.

4me is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European level of data protection.

As part of every registration process and when using the support area, the service provider we use stores your IP address and the time of the respective user action (timestamp), Internet service provider, web browser and operating system used or the respective version information, language settings and referrer URL. According to the service provider used, the IP addresses are anonymized or deleted immediately after the use of its services has ended.

If a solution to the fault or an answer to a question is only possible by the corresponding manufacturer, we will forward the information related to the request/fault to the manufacturer after consultation with you.

Legal basis and purpose of data processing
The legal basis for processing data sent in the course of sending an electronic application is Article 6 Paragraph 1 lit. b GDPR due to the intended conclusion of a contract, and otherwise Art. 6 Paragraph 1 lit. f GDPR.

The processing of personal data in connection with our support area serves the purpose and legitimate interest to provide an effective means of contact request and communication with our support team as well as to manage, process and resolve the support cases arising from this

Duration of storage/ Objection and removal options
‍The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected (completion of the support case) and storage is no longer necessary, even with regard to the services provided in this context (in particular warranty claims).

Insofar as we use data to fulfill our contractual obligation entered into with a customer, our interest in handling your data lies in enabling and maintaining an exchange with the customer, typically as part of a support contract and its fulfilment. If you act as a contact person — typically in your capacity as an employee at these companies — you generally have no overriding conflicting interest, insofar as this interaction with us is part of your area of responsibility, so that a right of objection is regularly ruled out. Furthermore, it would regularly be impossible for us to properly provide the contractually agreed support services.

C. Contractual relationships with customers and business partners

‍I. Am I required to provide data?

‍If you enter into contract negotiations with us with questions about our services, accept one of our offers or if there are other contractual agreements with us, we process the personal data you provide in this context. Which data is processed in detail depends largely on the relevant items of purchase or the services that you obtain from us or that you request. In this context, the processing of your data is usually absolutely necessary to prepare, conclude and execute the contract. If you do not provide us with this data, this may result in us having to refuse to conclude a contract or execute the order or being unable to carry out an existing contract.

Insofar as we use data to initiate or fulfill a contract with a customer, business or cooperation partner, our interest in handling your data lies in enabling and maintaining an exchange with the customer or the respective business or cooperation partner, typically as part of a contractual or other relationship. If you act as a contact person — typically in your capacity as an employee at these companies — you generally have no overriding conflicting interest, insofar as this interaction with us is part of your area of responsibility, so that a right of objection is regularly ruled out.

However, you are not obliged to give consent to data processing with regard to data that is not relevant or not required by law for the fulfilment of the contract.

II. Communication

In principle, we collect the necessary data from you yourself through personal contact. However, you can of course also contact us either by telephone, fax, post or alternatively via the e-mail address provided by us (see Impressum) or e-mail addresses of our employees provided to you. In the latter case, the personal data transmitted by e-mail will be stored. Please note that communication via e-mail is unencrypted for technical reasons.

Your data will be used to process the conversation and to post-process the respective request or meeting content. Your data is processed on the basis of Art. 6 para. 1 lit. b DSGVO, insofar as the communication is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures.

In all other cases, processing is based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in the effective processing of inquiries addressed to us.

In this context, there is no transfer of data to third parties unless it is necessary to pursue our claims or legitimate interests (Art. 6 para. 1 lit. f GDPR) or there is a legal obligation to do so (Art. 6 para. 1 lit. c GDPR).

III. Data processing in the context of sales

Personal data is processed on the basis of Art. 6 para. 1 lit. b GDPR to provide the service you entrust us with, in particular to carry out our contracts or pre-contractual measures, as well as all activities necessary to operate and manage exccon.

The resulting purposes of data processing depend primarily on the activities and individual services specifically agreed with you and may include consulting activities or activities related to the management of sales processes (e.g. compilation of documents, sending exccon product or event information, provision of exccon services) or accompanying sales negotiations and contract conclusion.

Further details on the scope, purpose of data processing and recipients of your data can be found in the respective contract documents and associated terms and conditions.

Insofar as necessary as part of our operational processes, we process your data in connection with our services beyond the actual fulfilment of the contract to protect our legitimate interests (Art. 6 para. 1 lit. f DSGVO).

We may be subject to special legal obligations, such as tax requirements, in connection with the offer or provision of our services. The purposes of processing your data may therefore include the fulfilment of tax control and reporting obligations, customs or export regulations, and the assessment and management of risks. The data processing required for this is based on Art. 6 para. 1 lit. c GDPR.

IV. Trade fairs, courses, seminars or other events (“events”)

Description of data processing
If you participate in courses, seminars or other events organized by us or visit us at our stands at trade fairs where we are represented, we ask you to contact us further and to fill out or confirm so-called “lead forms” if you are interested in our services and products. The scope of the data requested and provided by you is determined by the respective form. Business cards are regularly handed out to our employees with a request to be contacted. We will use the data from your lead forms or from business cards in accordance with the nature of your interests in our services and then contact you.

We would like to point out that, depending on the type of event, we take photos and film/sound recordings at the venue. If necessary, the recordings can be published on our website or other websites or in media. As a result, we process recordings, in particular through publication and use, for the purposes of advertising, marketing, press and public relations and reporting in connection with our events. This is not our purpose to identify uninvolved persons or to specifically identify objects that are suitable for indirect identification of persons. We do not publish any pictures that degrade, disparage, or embarrass the person depicted, interfere with the private sphere or violate his personal interests in any way.

If, in individual cases, photographs are taken of you as individuals that make you clearly recognizable and identifiable, you will be contacted by the photographer in advance or as soon as you enter the event in order to be able to give your consent. Please note that — especially when attending public events where photographs or film/sound recordings are usually taken — consent can also be given implied, for example if you pose for the photographer of your own accord. No separate permission is required to depict larger groups of people as part of events where photography does not focus on the individual person. If you do not want to be photographed or shot, please let the photographer know.

Legal basis and purpose of data processing
If you participate in courses, seminars or other events organized by us, the legal basis for processing the data that is processed in the course of specific requests for pre-contractual information is Art. 6 para. 1 lit. b GDPR, if you fill out a lead form, your consent in accordance with Art. 6 para. 1 lit. a GDPR, otherwise Art. 6 para. 1 lit. f GDPR.

Photos, film or sound recordings are made on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO for the purpose of documenting and promoting our events. If, in individual cases, recordings on which individuals are identified are identified are processed and used by us, we will obtain consent in accordance with Article 6 (1) (a) GDPR.

Duration of storage/ Objection and removal option
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the registration form, this is usually the case when the respective event has ended.

All personal data stored in the course of contacting us will be deleted at the latest if no legal requirements require longer storage.

V. Transfer of data

Depending on the scope of the service, your data or documents may be transferred to public bodies or private service providers or persons with whom we regularly work together, both during the enquiry or offer phase and during the contract implementation phase (see Section A Section V).

D. Miscellaneous

As a result of the development of our online presence or our offers, as well as due to changed legal or official requirements, it may be necessary to amend this privacy policy. You can access the current privacy policy at any time on our website and print it out if necessary.