Privacy Statement of the International School Campus - WABE Education Network gGmbH

Privacy Statement of the International School Campus - WABE Education Network gGmbH

The requirements of the European Union apply EU General Data Protection Regulation (hereinafter DSGVO). We want to inform you about how we process personal data in accordance with this regulation (see Articles 13 and 14 GDPR). If you have any questions or comments about this privacy policy, you can inquire at any time as indicated under I.2 and I.3 using the appropriate email address.

 

Contents:

I. Overview

1.Scope

2. Responsible Person

3. Data Protection Officer

4. Data security

II. Data processing in detail

1. General to the data processing

2. Use or visit to our website / application(s)

3. Application

4. Registrations

5. Contact by e-mail

6. Tracking

III. Affected Rights

1. Right to object

2. Right to information

3. Right of rectification

4. Right to cancellation ("right to be forgotten")

5. Right to restriction of processing

6. Right to Data Portability

7. Withdrawal with consent

8. Right of appeal

IV. Glossary

 

 

 

I. Overview

In this section of the privacy policy you will find information on the scope, the person responsible for the data processing, its data protection officer, and for data security.

 

1. Scope

The data processing by the International School campus - WABE Education Network gGmbH can be subdivided essentially into two categories:

 

-          For the purpose of contracting, all data processing will be required to carry out a contract with International School Campus - WABE Education Network gGmbH. If external service providers are also involved in the execution of the contract, your data will only be passed on the extent required.

 

-          By visiting the website of the International School Campus - WABE Education Network gGmbH, various information will be exchanged between your device and our server. This can also be personal data. The information collected this way is used, among other things, to optimize our website or to display advertising in the browser of your device.

 

This Privacy Policy applies to the following offers:

-          Our online offer is available at www.isceducation.de

-          This policy is always applicable for related (eg websites, subdomains, mobile applications, web services or integrations in third party), regardless of the way you access or use it. All these offers are collectively referred to as "Services".

 

2. Responsible Person

The Responsible Person for data processing– i.e. one who decides on the purposes and means of processing personal data – in connection with the services is:

 

International School Campus - WABE Education Network gGmbH

Eggerstedter Weg 19

25421 Pinneberg

Telephone: 04101/80 50 300

E-mail: datenschutz@isceducation.de

 

3. Data Protection Officer

You can contact our data protection officer as follows:

 

https://www.dsextern.de/anfragen

DS EXTERNAL GmbH

Dipl.-Kfm. Marc Althaus

Bredkamp 53a

D-22589 Hamburg

 

4. Data security

In order to develop the measures required by Art. 32 DSGVO and thus achieve a level of protection commensurate with the risk, we proceed in our company according to the information security standard VdS 3473. The guidelines of the VdS 3473 - Cyber-Security for small and medium-sized enterprises (SMEs) of the VdS Schadenverhütung GmbH contain specifications and assistance for the implementation of an Information security management system as well as concrete measures for the organizational as well as technical protection of IT infrastructures. They are designed with the objective of ensuring an adequate level of protection.

II. Data processing in detail

In this section of the privacy policy we inform you in detail about the processing of personal data in the context of our services. For better clarity, we divide this information into certain functionalities of our services. In normal use the services can carry different functionalities and thus also different processing successively or simultaneously come.

 

1. General information about data processing

The following applies for all processing operations described below, unless otherwise stated:

 

  1. a.      No obligation to provide

There is no contractual or legal obligation to provide personal data. You are not required to provide data.

 

  1. b.      Consequences of non-provision

In the case of required data (data marked as compulsory when entering data), the failure to provide this required data means that the service cannot be provided. may result in the inability for us to provide the service related to the collection of this data. Otherwise, the non-provision may have the consequence that our services are not provided in the same form and quality.

 

  1. c.      Consent

In some cases, you may also give us your consent to further processing in connection with the processing described below (possibly for some of the data). In this case, we will separately inform you in connection with the submission of the respective declaration of consent of all modalities and the scope of the consent and the purposes that we pursue with these processing operations.

 

  1. d.      Transfer of personal data to third countries

If we provide data to third countries, i.e. countries outside the European Union, the transmission will be strictly in compliance of the legal admissibility requirements. The admissibility requirements are regulated by Art. 44-49 GDPR.

 

  1. e.      Hosting with external service providers

Our data processing takes place to a large extent with the involvement of so-called hosting service providers who provide us with storage space and processing capacities in their data centers and, according to our instructions, also process personal data on our behalf. These Service providers process data either exclusively in the EU or we use the EU standard data protection clauses to guarantee a fair privacy level.

 

  1. f.        Transmission to state authorities

We transfer personal data to governmental authorities (including law enforcement agencies) when required to fulfill a legal obligation to which we are subject (Legal Basis: Art. 6 (1) (c) GDPR) or to assert, exercise or defend legal claims (Legal basis Art. 6 para. 1 f) GDPR).

 

  1. g.      Storage time

We do not store your data longer than we need for the respective processing purposes. Are the data for the fulfillment contractual or statutory obligations are no longer required, they are regularly deleted, unless their temporary storage is still necessary. Reasons for this can be, for example:

  1. The fulfillment of commercial and tax-related retention requirements
  2. The receipt of evidence for legal disputes within the framework of the statutory limitation regulations

 

Likewise it is possible for us to store your data further with us if you have expressly given your consent.

 

  1. h.      Categories of recipients

In addition to the recipient categories explicitly listed below, personal data will also be sent to the following categories of recipients transmitted: shipping service providers, telephone and fax providers.

 

  1. i.        Data Categories
    1. Personal data: title, salutation / gender, first name, last name, date of birth
    2. Address data: Street, house number, if necessary addresses, postal code, city, country
    3. Contact details: telephone number (s), fax number(s), e-mail address(es)
    4. Access data: date and time of visiting our service; the page from which the accessing system came to our site; in the use of accessed pages; session identification data; also following information of the accessing computer system: used Internet Protocol address (IP address), browser type and version, device type, operating system and the like technical information.
    5. Application data: curriculum vitae, certificates, evidence, work samples, certificates, pictures
    6. Data according to Art. 9 GDPR: data showing racial and ethnic origin, political opinions, religious or ideological convictions or union affiliation, as well as genetic data, biometric data for clear identification of a natural person, health data or data on the sexual life or sexual orientation of a natural person.
    7. School and care dates: desired hours of care, information on attended schools / school types / grade levels.

 

2. Use or visit to our website / application(s)

Here is how we process your personal information when you visit our services. Especially we point out that the Transmission of access data to external content providers (see b.) Due to the technical functioning of the information transfer in the Internet is essential.

 

  1. a.      Information about processing

Data category

 

Intention

Legal Basis

Potential legal interest

Storage period

 

access data

connection, presentation of the contents of the service, discovery of attacks on our site on the basis of unusual

activities, fault diagnosis

Art. 6 para. 1 f) GDPR

 

proper function

the services, security of

data and

business processes,

prevention of

abuse, prevention of

damage caused by interference in information systems

7 days

 

b. Recipient of personal data

 

Recipient category

 

Affected data

 

Legal basis of the transmission 

Legitimate interest

 

external content providers, the content (eg pictures, videos, embedded

postings from social networks, banner ads, fonts, provide update information), to display the service

access data are required.

access data

 

Order processing (Art. 28

DSGVO)

 

proper function of

services, (accelerated) presentation of the content

 

Hosting service

 

access data

 

Order processing (Art. 28

DSGVO)

 

 

 

3. Application

In an ongoing application process, we process your personal data in the following ways:

 

a. Information about processing

 

Data category

 

Intention

 

Legal basis

 

Possible legitimate

interest

 

storage time

 

Address data, contact data

 

identification,

contact,

communication to contract negotiations

 

Art. 6 (1) (b) DSGVO

 

 

6 months

 

People Master Data

 

identification,

contact,

age verification

 

Art. 6 (1) (b) DSGVO

 

 

6 months

 

application data

 

candidate selection

 

Art. 6 (1) (b) DSGVO

 

 

6 months

 

 

b. Recipient of personal data

 

Recipient category

 

Affected data

 

Legal basis of the transfer

 

Possible legitimate interest

 

Email service

 

all under a. mentioned data

 

Order processing (Art. 28 GDPR)

 

 

Google Forms

all under a. mentioned data

 

Order processing (Art. 28 GDPR)

 

 

 

 

4. Registration

In an ongoing registration process, we process your personal data in the following ways:

a. Information about processing

 

data category

 

Intention

 

Legal basis

 

Possibly. legitimate

interest

 

storage time

 

Address data, contact data

 

Identification,

Contact,

Communication to

contract negotiations

 

Art. 6 para. 1 b), f) DS-GVO

 

6 months

 

People Master Data

 

Identification,

contact

 

Art. 6 para. 1 b), f) DS-GVO

 

6 months

 

School and care data

 

Recording time, duration,

evaluations

 

Art. 6 para. 1 b), f) DS-GVO

 

6 months

 

 

 

b. Recipient of personal data

 

Recipient category

 

Affected data

 

Legal basis of the transfer

 

Possible legitimate interest

 

Google Forms

 

all under a. mentioned data

 

Order processing (Art. 28 GDPR)

 

 

 

 

 

5. Contact by email

How we process your personal information when you contact us by e-mail:

a. Information about processing

 

Data category

 

Intention

 

Legal basis

 

Possible legitimate interest

Storage period

 

Address data, contact data

identification, contact,

communication to contract negotiations

 

Art. 6 para. 1 b), f) DS-GVO

 

 

6 months

 

People Master Data,

 

identification,

contact

 

Art. 6 para. 1 b), f) DS-GVO

 

 

6 months

 

 

b. Recipient of personal data

 

recipient category

 

Affected data

 

Legal basis of the transmission 

legitimate interest

 

Email service

 

all under a. mentioned data

 

 

Order processing (Art. 28

DSGVO)

 

 

 

6. Tracking

Below we describe how your personal information uses tracking technologies to analyze and optimize our services as well as for advertising purposes:

 

The description of the tracking methods also includes information on how you can prevent or contradict the data processing. Please note that the so-called "opt-out", i.e. the rejection of processing, is usually stored via cookies. If you use our services via a new device or in another browser, or if you have deleted the cookies set by your browser, you must explain the refusal again.

 

The tracking methods described process personal data only in pseudonymous form. A connection with a concrete, identified natural person, i.e. a combination of data with information about the carrier of the pseudonym, does not take place.

 

Tracking to analyze and optimize our services and their use, as well as to measure the success of advertising campaigns and optimizing the display of advertising.

 

Purposes of processing

 

The analysis of user behavior by means of tracking helps us to check the effectiveness of our services, to optimize them and to adapt them to the needs of the users and to correct errors. It also serves to statistically determine parameters for the use of our services (range, intensity of use, user surfing behavior) on the basis of uniform standard procedures and thus to obtain comparable values across the market.

 

Tracking to measure the success of advertising campaigns is designed to help us optimize our ads for the future, and to help marketers and advertisers optimize their ads accordingly. The aim of tracking to optimize the display of advertisements is to show users advertising tailored to their interests, to increase the success of the advertising and thereby also the advertising revenues.

 

Legal basis of processing

 

For services that make the behavior of affected persons on the Internet comprehensible and in the creation of user profiles, it is an informed consent i. P. D. DSGVO required.

 

 

 

 

 

 

 

 

The tracking methods used in detail

Designation

of the service

 

Functionality

 

Possibility to stop the

Processing (opt-out)

 

data transmission

to third country?

 

Possible

adequacy decision

(Art. 45 GDPR)

 

Possible suitable

Guarantees, (Art.

46 GDPR)

 

Google

Analytics

 

web analytics

 

tools.google.com/dlpage/gaoptout?hl=en ) 

 

no

 

 

 

 

 

 

III. Affected Rights

 

1. Right to object

 

If we process your personal data in order to operate direct mail, you have the right to object at any time, with future effect, to the processing of personal data concerning you for the purpose of such advertising.

 

You also have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you at any time with regard to the future in accordance with Article 6 (1) (e) or (f) GDPR appeal.

 

The right to object can be exercised free of charge.

 

You can reach us via the contact details listed under I.2.

 

2. Right to information

 

You have the right to know whether personal data concerning you are processed, which personal data this may be, and further information in accordance with Art. 15 GDPR.

 

3. Right of rectification

 

You have the right to demand that we correct your incorrect personal data without delay (Art. 16 GDPR). Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

 

4. Right to cancellation ("right to be forgotten")

 

You have the right to demand that personal data relating to you be deleted immediately if one of the reasons stated in Art. 17 (1) GDPR is applicable and the processing is not for one of the purposes set out in Art. 17 (3) GDPR is required.

 

5. Right to restriction of processing

 

You are entitled to demand a restriction on the processing of your personal data if one of the conditions laid down in Art. 18 (1) (a) to (d) GDPR is met.

 

6. Right to Data Portability

 

You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. Furthermore, you have the right to transmit this data to another person responsible without hindrance or to obtain that a direct transmission takes place by us, if this is technically possible. This should always apply if the basis of the data processing is the consent or a contract and the data is processed automatically. Accordingly, this does not apply to data held in paper form only.

 

7. Withdrawal with consent

 

If the processing is based on your consent, you have the right to revoke your consent at any time. The legality of the processing on the basis of the consent until the revocation is not affected.

 

8. Right of appeal

 

You have the right of appeal to a supervisory authority.

 

 

 

IV. Glossary

 

Contractor: a natural or legal person, public authority, or body that processes personal data on behalf of the controller.

 

Browser: computer program for displaying web pages (eg Chrome, Firefox, Safari)

 

Cookies: The term "cookie" actually comes from the English vocabulary and can be translated in its original meaning with "biscuit" in the German language. In contrast, in the context of the World Wide Web, a cookie describes a small text file that is stored locally on the computer of the user when visiting a website. This file stores data about the behavior of the user. When the browser is called up and the corresponding website is visited repeatedly, the cookie is used and uses the stored data to provide the web server with information about the surfing behavior of the user.

 

In this context, cookies are not cookies, but information that a website stores locally on a visitor's computer in a small text file. This can be settings already made by the user on a page, but also information that the website has gathered completely independently from the user. Later, these locally stored text files can then be read out again by the same web server from which they were created. Most browsers accept cookies automatically. You can manage cookies using the browser features (usually under "Options" or "Preferences"). This may disable the storage of cookies, be made dependent on your approval in individual cases or otherwise restricted. You can also delete cookies at any time.

 

Third countries: Country which is not bound by the legal requirements of the EU Data Protection Directive (non-EEA)

 

Personal information: Any information relating to an identified or identifiable natural person. A natural person is considered as identifiable, which can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical , physiological, genetic, mental, economic, cultural or social identity of this natural person.

 

Pixel: Pixels are also called counting pixels, tracking pixels, web beacons or web bugs. These are small, invisible graphics in HTML emails or on web pages. When a document is opened, this small image is downloaded from a server on the Internet, where the download is registered there. This allows the operator of the server to see if and when an e-mail has been opened or a website has been visited. This function is usually realized by calling a small program (Javascript). This will allow certain types of information to be detected and shared on your computer system, such as the content of cookies, the time and date of the page view, and a description of the page on which the pixel is located.

 

Profiling: Any type of automated processing of personal data that involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences to analyze or predict interests, reliability, behavior, whereabouts or location of this natural person

 

Services: Our offers subject to this Privacy Policy (see Scope).

 

Tracking: The collection of data and their evaluation regarding the behavior of visitors to our services.

 

Tracking technologies: Tracking can be done via the log files stored on our web servers as well as by collecting data from your device via pixels, cookies and similar tracking technologies.

 

Processing: Any process or series of operations related to personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading out, querying, using, with or without the help of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.

 

 

Version: May 2018

Mit der Nutzung dieser Website stimmen sie der Verwendung von Cookies zu. Mehr Informationen zu Cookies finden sie in unserer  Datenschutzerklärung
Einverstanden