Source: https://cbmi.htw-berlin.de/en/privacy
Timestamp: 2019-04-22 16:30:53+00:00

Document:
Contact details (e.g., e-mail, phone numbers).
content data (e.g., text input, photographs).
usage data (e.g., websites visited, interest in content, access times).
Meta / communication data (e.g., device information, IP addresses).
Visitors and users of the online offer (In the following, we also refer to the affected persons as "users").
Providing the online offer, its features and content.
Respond to contact requests and communicate with users.
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter the "data subject"); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
"Processing" means any process performed with or without the aid of automated procedures or any such process associated with personal data. The term extends far and includes virtually every handling of data.
"Responsible person" means the natural or legal person, public authority, agency or other body that decides, alone or together with others, on the purposes and means of processing personal data.
If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. DSGVO. That the processing is e.g. based on specific guarantees, such as the officially recognized level of data protection (for example, the US Privacy Shield) or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
In accordance with Art. 17 GDPR, you have the right to demand that the relevant data be deleted immediately or, alternatively, to require a restriction on the processing of the data in accordance with Art. 18 GDPR.
You have the right to demand that the data relating to you provided to us be obtained in accordance with Art. 20 GDPR and to be transmitted to other persons responsible.
You can object to the future processing of your data in accordance with Art. 21 GDPR at any time. The opposition may in particular be made against processing for direct marketing purposes.
We process data in the context of administrative tasks as well as organization of our operation and compliance with legal obligations, such as: archiving. We process the same data that we process in the course of rendering our contractual services. The processing principles are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. The processing affects customers, prospects, business partners and website visitors. The purpose and interest in processing lies in the administration, office organization, archiving of data, ie tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of the data in terms of contractual services and contractual communications is in line with the information provided in these processing activities.
We also store information about promoters and other business partners based on our business interests, e.g. for later contact. We generally store this majority of company-related data permanently.
When contacting us (for example, by e-mail, telephone), the information provided by the user to process the contact request and its processing is according to. Art. 6 para. 1 lit. b) DSGVO processed. User information can be stored in a Customer Relationship Management System ("CRM System") or similar request organization.
We will delete requests if they are no longer required. We check the necessity every two years; Furthermore, the legal archiving obligations apply.

References: Art. 44
 Art. 17
 Art. 18
 Art. 20
 Art. 21
 Art. 6
 Art. 6
 Art. 6