Source: https://www.munich-business-school.de/en/legal/privacy-policy.html
Timestamp: 2019-04-24 06:58:05+00:00

Document:
Welcome to our website! In the following, we want to detail which data we process when and to what purpose and on which legal basis. This is to explain how the services we offer work and how the protection of your personal data is guaranteed in doing so.
According to article 4(1) of the General Data Protection Regulation (GDPR), personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly. For more information see GDPR art. 4(1), among others.
To view, save and print this Data Privacy Statement at any time go to https://www.munich-business-school.de/en/legal/privacy-policy.html.
In each chapter, we will specifically refer to the right of objection again (e.g. by stating: “You have the right of objection”), provided there is such a right. There, you will also find additional information with regard to exercising your right of objection.
to object at any time to the processing of your personal data. When this happens, we will cease processing your personal data for the purpose of direct marketing or any profiling related to such direct marketing.
Neither will we process your personal data for any other purposes after your objection unless we can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims (see e.g. GDPR art. 21(1), the so-called “limited right of objection”). In this case you will have to state reasons for the objection on grounds relating to your particular situation.
Where personal data is processed for scientific or historical research purposes or statistical purposes pursuant to GDPR art. 89(1), you have the right to object to processing of your personal data on grounds relating to your particular situation unless such processing is necessary for the performance of a task carried out for reasons of public interest (see GDPR art. 21(6)).
In order to help clarify the following Data Privacy Statement, we will include various links to information and data protection notes on external websites (see also chapter titled “Social Networks & External Links” in this Data Privacy Statement). We aim to diligently update the links included in this Data Privacy Statement as necessary. Nevertheless, it is possible that links might not work properly due to periodic updating of the cited websites. If you encounter a dead or broken link, we ask that you inform us so we can replace it with an updated link.
We process this data in order to enable your device to access our website and enable the correct display of our website on your device and in your browser. In addition, the data serves to optimize our website and to ensure the security of our systems. Interpretation of these data is not used for the purpose of marketing.
The legal basis for our processing of this data is GDPR art. 6(1)(f). We have a legitimate interest in providing you a website, which is optimized for your browser, and in allowing communication between our server and your terminal device. For the latter, the processing of your IP address is necessary in particular.
The processed information will be stored only as long as this is necessary for the intended purpose or as is required by law.
The recipient of the data is our server host which operates on our behalf in the context of a commissioned data processing agreement.
You have the right of objection. You can send or inform us about your objection at any time (e.g. by emailing your objection to datenschutz(at)eso.de).
Providing us with personal data is neither required by law nor by contract nor is it necessary for the conclusion of a contract. You are not obliged to provide personal data. However, failure to provide such data could under certain conditions result in you being unable to use our website at all or to the full extent possible.
Cookies which contain a randomly generated specific identification number which will make you and/or your device identifiable during your visit to our website. These cookies will be deleted automatically at the end of your visit.
Cookies which contain a randomly generated specific identification number which will make you and/or your device identifiable on our website. These cookies track whether a user came through Google AdWords. This information is sent to the CRM forms. These cookies will be deleted automatically after 30 days.
Purpose of this data processing is to facilitate the use of our website for you, to allow you to save settings, and to improve the customization of educational offerings & products to the specific requirements of customers.
The legal basis for our processing of this data is GDPR art. 6(1)(f). We have a legitimate interest in providing you a website which remembers your personal settings and facilitates your visit.
You have the right of objection.
In your browser settings, you can restrict or completely disable the creation of cookies. You can also set that cookies are automatically deleted when you close your browser window.
Other services we use also employ cookies. We will indicate to you when any of these services is using cookies.
On our website, we use several services provided by Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In the following text of the Data Privacy Statement, you will find more information about each specific service provided by Google which we use on our website.
By integrating these Google Services, Google may under certain conditions collect and process information (this includes personal data). In doing so, it cannot be ruled out that Google may transfer this information to a server in a third country.
As described in Google’s Privacy Shield certification (see https://www.privacyshield.gov/list and enter the search term “Google“), Google complies with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework regarding the collection, use and retention of personal data from European Union member countries and Switzerland respectively. Google, including Google LLC and its wholly-owned US subsidiaries, has certified that it adheres to the Privacy Shield Principles. For more information please go to https://www.google.de/policies/privacy/frameworks/.
You can prevent this data from being added directly by logging out of your Google account or by changing the corresponding settings in your Google account. Furthermore, you can prevent the installation of cookies – as far as Google creates them – by changing the corresponding settings in your browser; however, it is important to note that if you do so, you may not be able to use all features of this website to their full extent.
On our website, we use Google Analytics, a web analytics tool provided by Google LLC (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”, text files which are stored on your device and permit an analysis of your use of the websites you visited. Google Analytics can also use so-called Web Beacons (invisible graphics). Web Beacons are used to analyze information such as traffic on websites. Information created by cookies and Web Beacons about the use of our website (including the users’ IP addresses) is transferred to and stored on a server operated by Google which may be located in the USA or other third countries. This information may be passed on by Google to their contract partners.
For information on Google’s present Privacy Shield Certification and other relevant details about data processing by Google when using Google Services, see chapter “6) Information on Google Services“ of this Data Privacy Statement.
For additional, more detailed information about the processed data, see “Information we collect as you use our services” at https://www.google.com/intl/de/policies/privacy/#infocollect as well as https://privacy.google.com/businesses/adsservices/.
We employ Google Analytics only with “anonymize IP” activated. In this setting, Google shortens your IP address in the member states of the European Union or other contractual states of the Treaty of the European Economic Area. Only in exceptional cases will Google send the complete IP address to one of their servers in the USA to shorten it there.
Furthermore, we concluded a contract with Google Analytics about the use of Google Analytics for the processing of data on our behalf (GDPR art. 28). Google processes the data on our behalf in order to analyze your use of our website, create reports about activities on our website, and render further services with regard to the use of our website and the Internet. Google may transfer this information to third parties if it is required by law or if such third parties process data on Google’s behalf.
We integrate Google Analytics for the purpose of analyzing user behavior on our website and allowing us to respond to this behavior. This enables us to constantly improve the services we offer.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). Our legitimate interest required to do so is justified by the great benefit that the features described above provide in terms of the scope of our services. The statistical evaluation of user behavior allows us in particular to respond in a way that takes into account the users’ interests and to optimize the scope of our services.
Furthermore, you can prevent the installation of cookies by changing the corresponding settings in your browser; however, it is important to note that if you do so, you may not be able to use all features of this website to their full extent.
The processed information is stored for 38 of months and will be deleted automatically after expiration of this retention period.
We use the Google Tag Manager on our website. The Google Tag Manager is a service provided by Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The Google Tag Manager helps us to integrate various codes and services on our website in a neat and simplified way. The Google Tag Manager implements the tags and “triggers” the integrated tags. When tags are triggered, Google may collect and process information (including personal data). In this regard, it cannot be ruled out that Google may transfer the information to a server in a third country.
https://www.google.de/tagmanager/use-policy.html and “Information we collect as you use our services” at https://www.google.com/intl/de/policies/privacy/index.html.
Furthermore, we concluded a contract with Google about the use of the Google Tag Manager for the processing of data on our behalf (GDPR art. 28). Google processes the data on our behalf in order to trigger the stored tags and display the services on our website. Google may transfer this information to third parties if it is required by law or if such third parties process data on Google’s behalf.
If you have disabled individual tracking services (e.g. by having an opt-out cookie created), every relevant tracking tag integrated through the Google Tag Manager remains disabled.
We implemented the Google Tag Manager for the purpose of integrating various services in a neat and simplified way. In addition, integrating the Google Tag Manager optimizes the loading times of the various services.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). Our legitimate interest required to do so is justified by the great benefit gained from integrating various services through the Google Tag Manager. Integrating the Google Tag Manager reduces the time and effort required for maintenance and loading the website as well as the server load and the traffic load. In addition, Google has a legitimate interest in the collected (personal) data to improve its own services.
You have the right of objection. You have the option to prevent the Google Tag Manager from sending any tags. In order to do so you only have to click on this opt-out link and create a Google Tag Manager disable cookie on your browser.
However, please note that such disabling could under certain conditions result in you being unable to use our website at all or to the full extent possible.
We use external fonts, so-called Google Fonts, on our website. Google Fonts is a service provided by Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Integrating the Web Fonts is done through an interface (“API”) to the Google services. By integrating Web Fonts, Google may collect and process information (including personal data). In this regard, it cannot be ruled out that Google may transfer the information to a server in a third country.
We ourselves do not collect any data as part of providing Google Fonts.
We integrated Google Fonts for the purpose of being able to display standardized fonts on your device.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). Our legitimate interest required to do so is justified by the great benefit gained from a standardized display of fonts. Being able to provide a standardized display, we minimize the time and effort spent on designing, which would be considerably higher if we had to create our own graphically adapted websites in order to respond to each and every font standard from the various operating systems or browsers. In addition, Google has a legitimate interest in the collected (personal) data to improve its own services, among other things.
Providing us with personal data is neither required by law nor by contract nor is it necessary for the conclusion of a contract. You are not obliged to provide personal data. However, the failure to provide such data could under certain conditions result in your being unable to use our website at all or to the full extent possible, and the display of the website may also differ.
We use videos from YouTube and YouTube plug-ins on our website. YouTube is a service provided by YouTube LLC (“YouTube“), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc. ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
YouTube is integrated by embedding the service on our website through so-called “iFrames”. When loading such an iFrame, YouTube or Google may collect and process information (including personal data). In this regard, it cannot be ruled out that YouTube or Google may also transfer the information to a server in a third country.
We ourselves do not collect any data when you watch a YouTube video on our website.
We integrate YouTube for the purpose of being able to present various videos on our website so that you can view these videos directly on our website.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). Our legitimate interest required to do so is justified by the great benefit gained from YouTube. The integration of external videos reduces the load on our servers and allows us to use the relevant resources for other purposes. This can increase the stability of our servers among other things. In addition, YouTube and Google have a legitimate interest in the collected (personal) data in order to improve their own services.
This website uses Google AdWords and, within the scope of Google AdWords, Conversion Tracking, an online marketing service by Google LLC (“Google“), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google AdWords and Google Conversion Tracking are analytic services provided by Google. When clicking on an advertisement placed by Google, a so-called “cookie”, a text file, is stored on your device permitting an analysis of your use of the websites you visit. Information created by the cookie about your use of this website (including your IP address) is transferred to and stored on a server operated by Google which may be located in the USA or other third countries. These cookies lose their validity after 30 days. When you visit some of our sites while the stored cookie has not expired, Google and ourselves can recognize that somebody clicked on the advertisement and was redirected to our website. Each AdWords customer gets a different cookie. In this way, cookies can be tracked across the websites of AdWords customers.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). The potential to evaluate the success of individual offers allows us to respond specifically to market behavior and place our offers in the best position for interested users. In addition, Google has a legitimate interest in the collected (personal) data to improve its own services, among other things.
You can disable the settings for personalized advertising at https://support.google.com/ads/answer/2662922?hl=de. Furthermore, you can prevent the installation of cookies by changing the corresponding settings in your browser; however, it is important to note that if you do so, you may not be able to use all features of this website to their full extent.
Providing us with personal data is neither required by law nor by contract nor is it necessary for the conclusion of a contract. You are not obliged to provide personal data. However, failure to provide such data could under certain conditions result in you being unable to use this feature of our website at all or to the full extent possible.?
We use the service Google Remarketing provided by Google LLC ("Google"), 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google Remarketing creates a cookie on your computer. This cookie allows Google to recognize you when you access other sites within the Google advertising network. This makes it possible to recognize your device on other websites of the Google advertising network and to show you personalized advertisements. In the context of this process, information (including personal data) is transferred to Google. This may also mean transferring data to states outside the EC, especially to the USA. In some circumstances, Google may share information with third parties.
The collected information is used by Google in particular to show you advertisements within the Google advertising network which are aimed at your interests. We will not receive any information which allows to draw conclusions about you as a person at any time.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). The potential to evaluate the success of individual offers allows us to respond specifically to market behavior and to place our offers in the best position for interested users. In addition, Google has a legitimate interest in the collected (personal) data in order to market personalized advertisements and to improve its own services.
You can disable the settings for personalized advertising at https://support.google.com/ads/answer/2662922?hl=de.
Further, you can prevent the installation of cookies by changing the corresponding settings in your browser; however, it is important to note that if you do so, you may not be able to use all features of this website to their full extent.
We use Google Maps on our website. Google Maps is a service provided by Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The Google Maps plug-in is integrated by embedding the service on our website through so-called “iFrames”. When loading such an iFrame, Google may collect and process information (including personal data). In this regard, it cannot be ruled out that Google may transfer the information to a server in a third country.
We ourselves do not collect any data when you use Google Maps on our website.
We integrate Google Maps for the purpose of showing you our address and providing additional information for your journey to us. In addition, the integration of Google Maps allows us to show you places without limiting you to single map sections and enables you to research distances and other information on your own.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). Our legitimate interest required to do so is justified by the great benefit gained from Google Maps. The integration makes it unnecessary to illustrate the routes to each location on individual directions sketches or similar graphics, while allowing every user to plan his or her journey independently. In addition, Google has a legitimate interest in the collected (personal) data to improve its own services.
On our website you will find a form which you can use to request information material about training, studies and / or further education. When you contact us using this form, we process the data you enter in the input fields.
The required details are necessary to enable us, within the bounds of our internal routing, to assign the inquirer to the right persons in charge, answer inquiries to the best of our knowledge, and to guarantee a direct customer service approach. We use a central CRM system which forwards the inquiries directly to the appropriate educational institution and the corresponding advisor based on the above compulsory details.
your confirmation that you are at least sixteen years old.
The purpose of processing your personal data is to deal with your request for information material, answer your inquiry or other queries, contact the inquirer, provide professional and consistent advice during the decision-making process, invite you to information sessions, for example to an Open House, study taster, or the like, or to prepare customized offers.
Legal basis for processing the personal data you have provided us with in the context of requesting information is our legitimate interest according to GDPR art. 6(1)(f). It is in our legitimate interest to enable you to request brochures and other information about training, studies, and/or further education in order to get a general idea about the training, studies, and/or further education we offer as well as to get sound advice and support when selecting a suitable educational opportunity.
Additional personal data processed when sending the form (IP address, date and time of sending) helps us to prevent misuse of our contact form and to document that – and whether – you have given your consent with regard to and/or have seen the Data Privacy Statement and that you are at least sixteen years old.
The legal basis for this is our legitimate interest according to GDPR art. 6(1)(f). We have a legitimate interest in preventing misuse of our form and/or to establish proof of such misuse. In addition, we have a legitimate interest in recording that you have given your consent with regard to and/or have seen the Data Privacy Statement as well as proof that you are at least sixteen years old.
If you have given your consent with regard to promotional activities, we will also process the data for this purpose. The legal basis for processing this data is our legitimate interest according to GDPR art. 6(1)(f). We have a legitimate interest in processing the data you entered as part of your request for brochures in order to send you information about our products and services.
The processed data will be stored only as long as this is necessary for the intended purpose or as is required by law.
The additional data collected when the form was sent will be deleted after a maximum of 14 days.
The recipient of the data is Euro IT Solutions Service und Vertriebs GmbH which provides the CRM and operates on our behalf in the context of commissioned order processing as well as the server host which operates on our behalf in the context of a commissioned data processing agreement.
Insofar as we draw on our legitimate interest as grounds for the lawfulness of processing your personal data, you have the right to object.
Providing us with personal data is neither required by law nor by contract nor is it necessary for the conclusion of a contract. You are not obliged to provide personal data. However, failure to provide such data could under certain conditions result in you being unable to use our contact form.
On our website you will find a contact form which you can use to contact us electronically. When you contact us using this form, we process the data you enter in the input fields.
Please note that the amount of personal data collected in the context of the contact form also depends on the details you provide in the message part of the contact form.
The required details are necessary to enable us, within the bounds of our internal routing, to assign the inquirer to the right persons in charge, answer inquiries to the best of our knowledge, and guarantee a direct customer service approach. We use a central CRM system which forwards the inquiries directly to the appropriate educational institution and the corresponding advisor based on the above compulsory details.
The purpose of processing your personal data, in terms of the required as well as the voluntary details, is to deal with contact inquiries and to enable us to contact the inquirer in order to answer his or her queries. All other personal data processed when the message is sent (IP address, date and time of sending) serves to prevent misuse of our contact form.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). Our legitimate interest is to enable you to contact us at any time so that we can answer your inquiries.
Additional personal data processed when sending the form (IP address, date and time of sending) helps us to prevent misuse of our contact form and to document that – and whether – you have given your consent to and/or have seen the Data Privacy Statement and that you are at least sixteen years old.
The legal basis for this is our legitimate interest according to GDPR art. 6(1)(f). We have a legitimate interest in preventing misuse of our form and/or to establish proof of such misuse. In addition, we have a legitimate interest in recording that you have given your consent to and/or have seen the Data Privacy Statement as well as in documenting the proof that you are at least sixteen years old.
If you have given your consent with regard to promotional activities, we will also process the data for this purpose. Legal basis for this data processing is our legitimate interest according to GDPR art. 6(1)(f). We have a legitimate interest in processing the data you entered as part of the contact form in order to send you information about our products and services.
On our website you will find a form which you can use to contact us electronically in order to make an appointment for a no-obligation consultation about our educational offers. When you contact us using this consultation form, we process the data you enter in the input fields.
Please note that the amount of personal data collected in the context of the consultation form also depends on the details you reveal in the message of the consultation form.
The required details are necessary to enable us, within the bounds of our internal routing, to assign the inquirer to the right persons in charge, answer inquiries to our best knowledge, and guarantee a direct customer service approach. We use a central CRM system which forwards the inquiries directly to the appropriate educational institution and the corresponding advisor based on the above compulsory details.?
your confirmation that you are at least sixteen years old or have the consent of a parent or legal guardian.
The purpose of processing your personal data in terms of the required as well as the voluntary details, is to deal with consultation inquiries and to enable us to contact the inquirer in order to answer his or her queries. All other personal data processed when the message is sent (IP address, date and time of sending) serves to prevent misuse of our contact form.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). Our legitimate interest is to enable you to contact us at any time in order to make an appointment for a consultation so that we can answer your queries.
The legal basis for this is our legitimate interest according to GDPR art. 6(1)(f). We have a legitimate interest in preventing misuse of our form and/or to establish proof of such misuse. In addition, we have a legitimate interest in recording that you have given your consent and/or have seen the Data Privacy Statement as well as in documenting the proof that you are at least sixteen years old.
If you have given your consent with regard to promotional activities, we will also process the data for this purpose. Legal basis for this data processing is our legitimate interest according to GDPR art. 6(1)(f). We have a legitimate interest in processing the data you entered as part of the consultation form in order to send you information about our products and services.
Insofar as we draw on our legitimate interest as grounds for the lawfulness of processing your personal data, you have the right to object.?
On our website you will find a form which you can use to contact us electronically in order to submit your application for the training, studies or further education offered.
When you contact us using this contact form, we will process the data you enter in the input fields.
The required details are necessary to enable us, within the bounds of our internal routing, to assign the inquirer to the right persons in charge, process the application in its entirety, and guarantee a direct customer service approach. We use a central CRM system which forwards the inquiries directly to the appropriate educational institution and the corresponding advisor based on the above compulsory details.
Please note that the amount of personal data collected in the context of the application form also depends on the details you reveal in the message included in the form or in the application documents.
The purpose of processing your personal data is to process the application and to enable us to contact the inquirer in order to answer his or her queries. The purpose of processing your personal data resulting from the application documents is to identify suitable applicants.
All other personal data processed when the message is sent (IP address, date and time of sending) serves to prevent misuse of our contact form.
The legal basis for our processing of your master data is GDPR art. 6(1)(f). Our legitimate interest is to enable you to contact us at any time so that we can answer your queries. The legal basis for our processing of your personal data resulting from the application is GDPR art. 6(1)(b) and art. 88(1) as well as §26(1) of the new Federal Data Protection Act.
Additional personal data processed at the time of sending the form (IP address, date and time of sending) helps us to prevent misuse of our contact form and to document that – and whether – you have given your consent with regard to and/or have seen the Data Privacy Statement and that you are at least sixteen years old.
The legal basis for this is our legitimate interest according to GDPR art. 6(1)(f). We have a legitimate interest in preventing misuse of our form and/or to establish proof of such misuse. In addition, we have a legitimate interest in recording that you have given your consent and/or have seen the Data Privacy Statement as well as to document the proof that you are at least sixteen years old.
If you have given your consent with regard to promotional activities, we will also process the data for this purpose. Legal basis for this processing of data is our legitimate interest according to GDPR art. 6(1)(f). We have a legitimate interest in processing the data you entered as part of the consultation form in order to send you information about our products and services.
Your personal data will be processed only as long as this is necessary for the purpose. The application email and the documents you send us will be retained until a decision is made as to whether to accept the applicant or not, and it will be deleted afterwards.
Insofar as we draw on our legitimate interest as grounds for the lawfulness of processing your data, you have the right to object.
Providing us with personal data is neither required by law nor by contract nor is it necessary for the conclusion of a contract. You are not obliged to provide personal data. However, the failure to provide such data could under certain conditions result in you being unable to use our contact form.
When you visit our locations or when we visit your company or when you meet us at exhibitions or any other event, you have the option to fill in a form (“Welcome to Munich Business School!”) which you can use to request information material about training, studies, further education and/or other educational opportunities or to ask for individual consultation. The location indicated on the form you filled in is the Controller with regard to the processing of personal data resulting from the utilization of the form (see Chapter 2) Controller). When you contact us using this “Welcome to Munich Business School!” form, the data you enter will be processed exclusively by the location you selected.
if applicable, any other data you entered in the form.
Legal basis for processing the personal data you have provided us with in the context of requesting information is our legitimate interest according to GDPR art. 6 (1) (f). It is in our legitimate interest to enable you to request brochures and other information about training, studies, and/or further education in order to get a general idea about the training, studies, and/or further education we offer as well as to get sound advice and support when selecting a suitable educational opportunity.
If you have given your consent with regard to promotional activities, we will also process the data for this purpose. Legal basis for this processing of data is our legitimate interest according to GDPR art. 6 (1) (f). We have a legitimate interest in processing the data you entered as part of this form in order to send you information about our products and services.
The completed form which you hand in at your selected location will be scanned by the location and is recorded in our CRM.
The processed data will be stored only as long as this is necessary for the intended purpose or is required by law.
The recipient of the data is Euro IT Solutions Service und Vertriebs GmbH which provides the CRM and operates on our behalf in the context of commissioned order processing.
You can send or inform us about your objection at any time (e.g. by emailing your objection to datenschutz(at)eso.de).
In co-operation with Controller Institut GmbH, Vorgartenstraße 204/6, 1020 Vienna, Austria, we implement “Executive Education” training programs. These training programs are part-time further education programs for professionals working in medium/higher management.
In this respect, our website provides a form which you may use to contact us electronically to apply for one of our further education programs.
Should you use the form to contract us, we will process any data which you enter in the different entry fields.
These mandatory entries are required in the context of our internal routing processes to be able to assign to the applicants the right person to contact, to be able to fully process any applications and to be able to guarantee that clients are addressed in an appropriate manner. We employ a centralized CRM (customer relationship management) system, whereby our system directly transfers applications to the educational facility in charge and the relevant consultants based on the above mandatory entries.
your confirmation of having reached the age of sixteen or having obtained a consent from your parent or legal guardian.
Please note that the extent of personal data collection in the context of the application process also depends on which data you provide on the form yourself.
The purpose of processing your personal data consists in processing incoming applications and in being able to contact you to react to your queries. Personal data included in the application documents which you provide to us is processed for the purpose of being able to determine the adequacy of candidates.
The legal basis of processing your master data is art. 6(1) point (f) of the GDPR. We have a legitimate interest in providing you with an opportunity to contact us at any time and in adequately reacting to your queries. The processing of personal data included in applications is made on the legal basis of the provisions under art. 6(1) point (b) of the GDPR, art. 88(1) of the GDPR and sec. 26 para. 1 of the German Federal Data Protection Act in its new version.
Within the framework of these processing activities, co-operation with Munich Business School is based on a contract on joint controllership in terms of art. 26 of the GDPR; we will be happy to provide you with a copy upon your request.
in this case, the legal basis is our legitimate interest pursuant to art. 6(1) point (f) of the GDPR. We have a legitimate interest in preventing our contact form from being misused and in being able to prove that it was misused. In addition to the above, we have a legitimate interest in recording the declaration of consent we receive from you, your agreement to the data protection notices and your confirmation of having reached the age of sixteen.
To the extent you consented to any advertising activities, we additionally process your data for this purpose. The legal basis of this type of personal data processing is your consent which you granted on the basis of art. 6(1) point (a) of the GDPR.
In this regard, your personal data will be processed only for as long as this is required for the purpose of providing this function. Applications and related documents delivered by e-mail will be stored until a decision is made for or against the relevant applicant and they will be deleted after this.
Any data which is additionally collected while sending the form will be deleted not later than after 14 days.
All this data is transferred to Euro IT Solutions Service und Vertriebs GmbH who provides the CRM system and works for us in the context of contract data processing, as well as the server host also working for us in the context of a commissioned data processing contract.
You have a right to object. You can inform us about your objection at any time by sending a letter or an e-mail to datenschutz(at)eso.de.
Providing your personal data is neither a statutory nor a contractual requirement and this is not necessary for the conclusion of a contract. You are not obligated to provide your personal data, either; however, failure to provide such data might have the effect of you not being able to use our contact form.
You have the choice to contact us by mail, phone, fax, or email.
If you contact us by mail we may process in particular your address details (e.g. name, first name, street, place of residence, zip code), the date and time of reception of your mail as well as information gathered from the content of your letter.
If you contact us by phone, we can process in particular your phone number as well as information requested during the conversation such as your name, your email address, the time of your call and details of your query.
If you contact us by fax, we can process in particular the fax number and/or the source identifier as well as other details contained in your fax.
If you contact us by email, we will process in particular your email address, the time of emailing as well as data contained in the email (including attachments if any).
The purpose of processing the above data is to deal with the contact inquiry and to enable us to contact the inquirer in order to answer his or her queries.
The legal basis for the processing of personal data as described herein is GDPR art. 6(1)(f). Our legitimate interest is to enable you to contact us at any time so that we can answer your queries.
The personal data will be deleted as soon as it is no longer required for the intended purpose for which it was collected.
Providing us with personal data is neither required by law nor by contract nor is it necessary for the conclusion of a contract. You are not obliged to provide personal data. However, failure to provide such data could under certain conditions result in you being unable to contact us or in us being unable to get in touch with you.
Apart from this website, we also maintain a presence in various social media which you can reach by clicking on the corresponding command buttons on our website. If you visit such a site, it may be possible that personal data is transferred to the provider of the social network. It is possible that, apart from storage of the data you specifically enter in this social medium, other information may be processed by the provider of the social network.
Moreover, the provider of the social network may process the most important data regarding the computer system from which you are accessing the social network – e.g. your IP address, the type of processor you use, and your browser version including plug-ins.
If you are logged into your personal user account in the respective network while visiting such a website, this network can associate your visit with your account.
Please note that our website contains further links to external websites and that we do not have any influence on the processing of data on these external websites.
We use technical and organizational means to secure our website and other systems against loss, damage, access, modification, or distribution of your data by unauthorized persons. Despite regular checks, however, complete protection against all dangers is not possible.
Amendments of laws or changes in our in-house processes can make adapting this Data Privacy Statement necessary.
In case of any modifications, we will inform you accordingly in a separate notice under the heading “Data Privacy Statement”.
You have the right to revoke any consent you have given at any time and this will apply from that moment on. The lawfulness of the processing done based on your consent up to your revocation remains unaffected by your revocation. Please send your revocation to datenschutz(at)eso.de.
Please send any inquiries concerning the above to datenschutz(at)eso.de. Please note that when we receive such inquiries, we have to make sure that they have actually been sent by the person concerned.
Without prejudice to other legal redress in terms of administrative law or judicial remedies, you have the right to file a complaint with a supervisory authority for data protection.
Our website does not include any automatized decision-making.

References: art. 4
 art. 21
 art. 89
 art. 21
 art. 6
 art. 6
 art. 28
 art. 6
 art. 28
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 88
 §26
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 88
 art. 26
 art. 6
 art. 6
 art. 6