Source: https://www.ebs.edu/en/privacy
Timestamp: 2019-04-23 04:29:06+00:00

Document:
Compliance with German and European data protection regulations is given highest priority at the EBS Universität. EBS Universität not only adheres to data protection measures but also strives to continually improve them, in order to protect you and your privacy.
Personal data is any information that relates to an identified or identifiable natural person. What is essential here therefore is whether a personal reference can be made using the collected data. This includes information such as your name, your address, your telephone number or your email address. Information that is not directly linked to your real identity - such as actual web pages or the number of users of a page - is not included in personal data.
How do we collect and process your personal data?
When you visit our website, data are collected automatically and saved temporary by our web servers. These data are primarily technical data such as the identification data of the browser used and the operating system type, date and time of the page view, the websites you visit on our site and the website from which you are visiting us. Personal data such as your name, your address, your telephone number or email addresses will not be collected, unless you provide this data voluntarily, e.g. in the context of a registration, a survey, the execution of a contract or an information request.
If the online service includes the option to enter personal or commercial data (email addresses, names, addresses, etc.), the input of these data takes place voluntarily (according to Art. 6 Abs. 1 lit. a GDPR). Emails are transmitted via a contact form. When you send such a message, your personal data is collected only to the extent necessary to reply. The email is sent in an unencrypted manner.
Concerning contact forms on our website, there are four forms with different objectives. With the general contact form your personal data will be stored and used for the answer of the inquiry. The data will be deleted after your request has been processed. With the application form and registration forms for recruiting events (e.g. Open Day, “Discover” events) your personal data will be stored and used to inform and advise you in the future about the advantages of the study programmes and to inform you about current developments at EBS Universität, also by contacting us by email or telephone. For event forms, your personal data will be stored and used to inform you about the desired event, also by contacting us by email or telephone. The data will be deleted after the event has taken place.
If you have provided us with any personal data, we shall only use this data for the technical administration of the web pages and to respond to your wishes and requests, which as a rule means to process any contract concluded with you or to reply to any queries you may have.
We will not pass on, sell or otherwise transfer your personal data to third parties, unless this is required for the purpose of processing the contract or unless you have given your express consent. It is only if you have given us your consent beforehand, or if you – subject to it being provided for under statutory regulations – have not raised an objection, that we will also use this data for product-related surveys, marketing and statistical purposes.
In principle, we store all information that you transmit to us until the respective purpose, e.g. the contractual purpose has been fulfilled. For inquiries until they are processed, for newsletters until you unsubscribe from the newsletter. If a longer storage is provided by law, the storage takes place within this framework.
If you no longer wish us to use your data, we will of course comply with this request immediately. Please contact the address indicated under Contact.
The stored personal data will be deleted if you revoke your consent to its storage, if knowledge of the data is no longer required for the fulfillment of the purpose for which it was stored or if the storage is inadmissible for other legal reasons. Data for invoicing and accounting purposes are not affected by a request for deletion.
Within the scope of our web pages we partly use so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not harm your computer and do not contain any viruses. Rather, they serve to communicate the usefulness and number of users of our websites, as well as to make our offers more convenient, effective and secure.
The cookies we use are firstly so-called “session cookies”. These are only stored temporarily for the duration of your use of one of our websites and are automatically deleted after your visit. Secondly, we also use “permanent cookies” that are stored on your device’s memory until you delete them. The purpose of the use of these cookies is to be able to record information about visitors who repeatedly access our website and to offer you optimal user guidance. Permanent cookies only contain an identification number. Name, IP address etc. are not stored. An individual profile regarding your usage behaviour is not formed.
You can also use our offers without cookies. In this respect, it is possible to deactivate the storage of cookies in your browser or to limit them to certain websites. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
If you wish to contact our company by email, we would like to point out that the confidentiality of the information provided is not guaranteed. The content of emails may be viewed by third parties. We therefore recommend that you only allow us to receive confidential information by post.
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and possible recipients and the purpose of data processing (Art. 15 GDPR) and, if applicable, a right to correction of incorrect data (Art. 16 GDPR), deletion of these data (Art. 17 GDPR), the right to restriction of processing according to Art. 18 GDPR, to objection (Art. 21 GDPR) and the right to data transferability of data provided by you according to Art. 20 GDPR). The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right of cancellation.
In addition, you also have a right of appeal to the responsible supervisory authority in the event of data protection violations (Art. 77 GDPR in conjunction with §19 BDSG). The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found here.
Many data processing processes are only possible with your express consent. You can revoke your consent at any time. This can be done by informal communication e.g. by e-mail to marketing@ebs.edu, by telephone (+49 611 7102 1594) or by post (to EBS Universität für Wirtschaft und Recht gGmbH, Gustav-Stresemann-Ring 3, 65189 Wiesbaden). The legality of the data processing up to the revocation remains unaffected by the revocation.
If you have any questions, complaints or assertion of your data protection rights, you can contact us via the contact form.
We collect and process personal data of applicants for the purpose of handling the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant sends us corresponding application documents by electronic means, e.g. via email.
When concluding an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship under consideration of legal regulations. If no employment contract is signed with the applicant, the application documents will be automatically deleted after six months when the rejection decision has been conveyed, provided that no other justified interests prevent the controller responsible for processing from deleting these. In this context, other legitimate reasons could for example be the need for evidence in proceedings in accordance with the General Law on Equality of Treatment.
Changes may be made to these privacy notices, which will be published on this page in a timely manner.
If you have explicitly agreed, we will use your email address and voluntary personal data to send you our newsletter on a regular basis. All you need to do is to enter an email address in order to receive the newsletter. Additional personal details you have provided on a voluntary basis are merely used to personalise the newsletter.
The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the email address as well as their use for sending the newsletter at any time via the link at the end of the newsletter in order to unsubscribe from the newsletter. You can also unsubscribe from the newsletter at any time by sending an e-mail to marketing@ebs.edu. The legality of the data processing processes already carried out remains unaffected by the revocation.
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and Internet use. Pseudonymous user profiles can be created from the processed data.
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (including your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin.
We have concluded an agreement with Google on contract data processing and implement in full the strict provisions of the German data protection authorities for the use of Google Analytics.
To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion. You can permanently opt out of cross-device remarketing and targeting by turning off personalized advertising in your Google Account.
The aggregation of the data collected in your Google Account data is based solely on your consent, which you may give or withdraw from Google (Art. 6 (1)(a) GDPR). For data collection operations not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes.
When you click on an ad served by Google, a conversion tracking cookie is set. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, we and Google are able to recognize that you have clicked on the advert and have been forwarded to this page. Every Google AdWords customer receives a different cookie.
Cookies therefore cannot be traced via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords customers who have opted for conversion tracking. Customers are informed about the total number of users who have clicked on their advert and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
With this tool the marketer can administer website tags via a user interface. Google Tag Manager itself (which implements the tags) is a cookie-free domain which does not record personal data. With the help of this tool other tags are released which can, potentially, record data.
Google Tag Manager does not access this data. If the user has deactivated this on domain or cookie level, this is valid for all tracking tags which were implemented using the Google Tag Manager.
To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the United States, where it will be stored. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing representation of our online offers and to make it easy to find one of the locations specified on our website. This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Our website contains links to the external social networks Facebook, Instagram, Twitter, LinkedIn, XING, YouTube and Google+.
The links within the framework of our website are identifiable by the logos on our website (no plugins are used). When visiting our website, functionalities and data transmission to the named providers are not enabled automatically. Only by clicking on the links the plugins are activated, your browser establishes a direct connection to the respective servers. If you follow the links and are simultaneously logged into the appropriate Social Network with your user account, the information that you have visited our website will be forwarded to the appropriate provider. The relevant provider is able to assign the visit to the website to your account. This information is transmitted to the relevant provider and stored there. To prevent this, you must log out of your Social Network account before clicking on the link.
Visitors to our website are then presented with interest-related advertising (“Facebook Ads”) when visiting Facebook’s website. For this purpose, the Facebook remarketing tag is implemented on our website. This establishes a direct connection to Facebook servers when you visit the website. Information is then transferred to the Facebook servers confirming that you have visited our website and Facebook assigns this information to your personal Facebook user account.

References: Art. 6
 Art. 18
 Art. 20
 §19
 Art. 6
 Art. 6