Source: https://application.hertie-school.org/privacy-policy.php?p_id=394
Timestamp: 2019-04-26 00:21:40+00:00

Document:
Hertie School of Governance is pleased that you are visiting our application portal and that you are interested in studying at our School. We take the protection of your personal data very seriously and adhere strictly to the provisions of current data privacy laws (e.g. General Data Protection Regulation (GDPR), German Data Protection Act (BDSG), Telemedia Act (TMG) and Unfair Competition Act (UWG)).
The following policy provides you with insight into how we guarantee this protection.
Personal data are only collected based on the current applicable regulations and only for the purposes of processing your application and to contact you during the application process in accordance with Art. 6 (1) Sentence 1 b) GDPR. In case of admission to one of our programs, we will keep the data you provide to us to meet legal obligations and to contact you during your studies in accordance with Art. 6 (1) Sentence 1 b) GDPR . All other applications will be deleted at the end of the admission process. Beyond this, your data are only used for the purposes of advertising and market research, also to tailor our electronic services to meet current needs, if you have provided us with your prior consent in accordance with Art. 6 (1) Sentence 1 a) GDPR.
We use the so-called double opt-in method on this page. The way this system functions is that upon registration, you initially provide your access data and a valid email address, also a password of your choice, in the logon portal. You then receive from us an email with a confirmation link. We do not release your account until you have confirmed this link.
Your personal data will be transmitted to any third party exclusively for the following purposes.
this is legally permissible and, pursuant to Art. 6 (1) Sentence 1 b) GDPR, necessary for the performance of a contract concluded with you.
This website uses a session cookie to keep you logged in as you move between pages on this website.
Tracking tools: The tracking measures used by us and listed below are taken on the basis of Art. 6 (1) Sentence 1 f) GDPR. The purpose of the tracking measures used is to ensure a need-based design and the continuous optimisation of our website. We use those tracking measures to statistically register the use of our website and to analyse that use for the purpose of optimising our offering for you. These interests are to be considered legitimate within the meaning of the abovementioned regulation.
The respective purposes of data processing and categories of data are provided in the respective tracking tools.
will be transmitted to a Google server located in the USA and stored there. The information is used to evaluate the use of the website, compile reports on the website activities and provide further services associated with website use and internet use for the purposes of market research and need-based design of these web pages. Such information may also be transmitted to third parties if this is required by law or a third party processes these data under a contract. In no case will your IP address be combined with other Google data. The IP addresses are made anonymous, so that they cannot be assigned (IP masking).
You can prevent the installation of cookies by making appropriate settings in your browser. However, please note that if you do this you may not be able to use the full functionality of this website.
In addition, you can prevent acquisition of the data generated by the cookie that relate to your use of the website (including your IP address) and the processing of these data by Google by downloading and installing a browser add-on (https://tools.google.com./dlpage/gaoptout?hl=de).
More information about data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
pursuant to Art. 15 GDPR, to request information about your personal data that we process. In particular, you can request information about the purposes of the processing, the categories of the personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged period of storage, the existence of the right to request rectification, erasure, restriction of processing or to object, the existence of the right to lodge a complaint, the sources of your data if they were not collected by us and the existence of automated decision-making, including profiling, and meaningful details about such decision-making.
pursuant to Art. 16 GDPR, to request that your personal data we have stored be rectified if they are inaccurate or be completed.
pursuant to Art. 17 GDPR, to request that your personal data we have stored be erased, unless their processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims.
pursuant to Art. 18 GDPR, to request restriction of the processing of your personal data if you contest the accuracy of the data, if their processing is unlawful but you oppose their erasure, if we no longer need the data but you require them for the establishment, exercise or defence of legal claims or if you have objected to processing in accordance with Art. 21 GDPR.
pursuant to Art. 20 GDPR, to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request transmission to another controller.
pursuant to Art. 7 (3) GDPR, to withdraw at any time any consent you have given us. The consequence of such withdrawal is that, in the future, we may not continue with the data processing for which the consent was given.
pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. You may usually address your complaint to the supervisory authority competent for your usual place of residence, your place of employment or our registered office.
Where your personal data are processed on the basis of a legitimate interest in accordance with Art. 6 (1) Sentence 1 f) GDPR, you have the right according to Art. 21 GDPR to object to the processing of your personal data if your objection is based on reasons relating to your particular situation or is raised against direct marketing. In the latter case, you have a general right to object which we will respect without you having to specify a particular situation.
To exercise your right of withdrawal or objection, it is sufficient to send an e-mail to dataprotection@hertie-school.org.
Hertie School takes suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or access by unauthorised third parties. Our security measures are continuously improved based on the progress of technology.
This Data Privacy Statement is presently valid and its version is May 2018.
The further development of our website and the services offered on it, or changes of legislation or official requirements, may make it necessary to amend this Data Privacy Statement. You can at any time access and print out the current version of this Data Privacy Statement.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20
 Art. 7
 Art. 77
 Art. 6
 Art. 21