Privacy Policy

I. Controller in terms of Art. 4 no. 7 GDPR

We
border concepts GmbH,
represented by the managing directors Sjaik Djorai, Karel Otte
Bahnhofstraße 40
48599 Gronau
Germany
Tel.: 0049 (0) 2562-99380
Fax: 0049 (0) 2562-993810
Email: mail@bo-co.eu

as controller in terms of the GDPR are responsible for the lawfulness of the processing of your personal data on this website.

II. Data protection officer of border concepts GmbH

If you have any questions regarding the processing of your personal data or this Privacy Policy, please do not hesitate to contact our data protection officer:

Philipp Diemon, Email: datenschutz@bo-co.eu

III. Processing of personal data on this website

We are going to inform you hereinafter how we process your personal data when you use our website. Personal data includes all data which refers to you personally, e.g. your name, address, email addresses, user behaviour.

We process your personal data in the context of the following functions and features of our website:

1. Data processing when you use the website for information purposes

When you use the website for mere information purposes, i.e. when you do not register or otherwise transmit information to us, we will only collect those personal data which your browser transfers to our server. If you want to view our website, we will collect the following data which is necessary for us in technical respect to display our website to you and ensure stability and security (the legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR):

• IP address
• Date and time of the request
• Time zone difference compared to Greenwich Meantime (GMT)
• Content of the request (specific page)
• State of access / http status code
• Transferred data volume
• Website from which the request is made
• Browser
• Operating system and its surface
• Language and version of the browser software

In addition to the aforesaid data, cookies will be stored on your computer when you use our website. Cookies are small text files which are allocated to the browser you use and stored on your hard drive and which cause certain information to be transferred to the body that sets the cookie (in this case this body is us). Cookies are unable to execute programs or infect your computer with viruses. They serve to render Internet presentations as a whole more user-friendly and more efficient. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. Some cookies store current settings and thus help render the purchase process easier (e.g. watch and maintain the content in our virtual shopping cart and a virtual watch list for any subsequent visit to our website). The legal basis for this is Art. 6 subs. 1 sentence 1 b) GDPR.

This website uses transient cookies and persistent cookies.

Transient cookies are deleted automatically when you close the browser. They include in particular session cookies. Session cookies store a so-called session ID by which different requests from your browser can be allocated to a specific session. This enables us to recognize your computer when you come back to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are deleted automatically after expiry of a pre-defined period of time which may vary, depending on the type of cookie used. You can delete the cookies in the security settings of your browser at any time.

You can set your browser as you think appropriate and, for instance, refuse acceptance of all cookies or of third-party cookies. Please be aware that, in this case, you might be prevented from using all functions and features of this website.

We use cookies to identify you in any subsequent visit to our website, provided you have an account with us. Otherwise, you must log in again every time you visit our website.

2. Online account and fair registration

If you want to visit any of our fairs, you can register for the fair online in advance to be able to plan the details of your fair visit. If you should decide on impulse to visit our fair, you may also register online via a terminal on site.

Online registration bears many advantages for you. If you register for a fair in Germany or Austria in advance, you will only pay a € 3.00 admission fee, at the pay desk on site you will have to pay a € 5.00 admission fee. Entrance to our fairs in other countries is free of charge. However, online registration is not only favourable in monetary respect. If you voluntarily provide us with data relating to your studies, we can optimize the planning for your fair visit and the students’ advisors of the exhibitors can render optimized advice to you on site. You may, for instance, register via your online account for counselling interviews and presentations already in the run-up to the fair. Moreover, you may indicate the fields and disciplines you are interested in. This allows the students’ advisors of the exhibitors to submit tailor-made proposals to you. Based on this information, we compile for you your personal fair magazine including an exhibition hall plan. This helps you use the day at the fair in the best possible way. Of course, you are not obliged to register online.

It is also possible to visit the fair without an online registration. However, in this case, you cannot – or only marginally – benefit from the advantages described above.

Please be aware that, for data protection reasons, you need to be at least 16 years old to independently register for the fair online. That is why we ask for your age before you can register. You are obliged to indicate your age correctly.

If you are not old enough to register online, we nonetheless look forward to your visit. If, on the day of the fair, you are under 16 years old, you will only have to pay the reduced admission fee of € 3.00 at the pay desk on site. Please bring along your student card and show it to the cashier.

All of you who are 16 years old and want to register online to benefit from the advantages of an online registration will be informed hereinafter how your data will be processed in the context of the online registration.

a) Registration/ log-in

If you want to register for the fair, you first have to register for our online account. For such purpose, you have to enter your first name and your email address and choose a password. This data is mandatory and absolutely necessary for the registration. The appropriate fields are specifically marked as required fields. You can use this personal access data every time you log in to your account. We process your email address to enable you to access your online account. The email address is sort of your “user name”. We process your first name to be able to address you personally. Moreover, you will receive a name tag on the day of the fair. You are not obliged to use the name tag if you do not want to.

Moreover, we use your email address to send you emails in which you will be addressed by your first name for the following purposes:

• Confirmation of your registration immediately after your registration
• Information why the visit to the fair is worthwhile
• Information why studies (Master and/or Bachelor) are worthwhile
• Information about online availability of the fair planning
• Travelling information/ directions
• Provision of exhibition halls plan and fair brochure
• Reminder of the fair before the fair commences
• Delivery of an invitation to participate in a survey on the fair after the fair or fairs for which you have registered
• Delivery of an invitation to participate in a survey after the fair period
• Delivery of an invitation for the fair in the year to come

You can fill in the field “How did you find out about the fair?” voluntarily which means that you may also register if you do not fill in this field. We would however appreciate if you answered this question. We will use this information in anonymous form for market research purposes.

In the context of your registration and log-in, we will store the following data in addition to your email address: date and time of your registration, date and time of your last log-in.

Please be aware that your online account continues to exist even after the end of the fair. So, you can register for several fairs without being compelled to separately register for each fair and enter your data time and again.

The legal basis for this is Art. 6 subs. 1 sentence 1 a) GDPR (grant of consent).

You are not obliged – neither by contract nor by law – to provide us with your data when you register for your online account. However, unfortunately, if you do not provide us with the mandatory information in the required fields, we will not be able to establish the online account for you. In this case, you cannot register for the fair online and you cannot benefit from the advantages of the online registration.

If you have not logged in to your online account over a period of two years, we will delete your online account and the data which we have stored in the context of your online account, unless statutory retention periods prevent us from deleting them. Data which is only intended for a specific fair will be deleted as soon as it is no longer necessary to achieve the intended purpose, provided there are no statutory retention periods preventing the deletion.

When you click the check box, you are deemed to consent to the data processing. You can withdraw your consent at any time by an appropriate declaration to us. Please be aware that the withdrawal of your consent will not affect the lawfulness of processing based on consent before the withdrawal.

If you withdraw your consent, we will delete your online account and the data we have stored in the context of your online account. You may declare your withdrawal of consent by sending an email to datenschutz@bo-co.eu or by sending a message to the contact data stated above in this Privacy Policy and in the legal information.

In the context of your registration you may click a check box to subscribe to our newsletter. The legal basis for the processing of your email address for the purpose of newsletter transmission is Art. 6 subs. 1 sentence 1 a) GDPR (grant of consent). We use the double opt-in procedure for obtaining your consent. For this, please take note of the additional information in the chapter “Newsletter” of this Privacy Policy.

b) Fields of Interest

In your online account, you can choose appropriate fields and faculties under the menu item “Field of Interest” to find interesting exhibitors and degree programs. Shortly before the fair, you will receive your fair magazine which provides an updated list of all exhibitors that have suitable offers for you. This will help you find your bearings at the fair and quickly identify appropriate offers.

The legal basis for data processing for the purpose of compiling a personalized fair magazine for you is Art. 6 subs. 1 sentence 1 a) GDPR (grant of consent). You are deemed to grant your consent by choosing and storing the appropriate fields and faculties. You can withdraw your consent at any time by an appropriate declaration to us. Please be aware that the withdrawal of your consent will not affect the lawfulness of processing based on consent before the withdrawal. You may declare your withdrawal of consent by sending an email to datenschutz@bo-co.eu or by sending a message to the contact data stated above in this Privacy Policy and in the legal information.

Only our employees in charge can access the fields of interest (focuses of interest) you have indicated. We will not transfer your data without your consent. Under the menu items “Easy Connect” and “Advisory Services”, you can give your consent to data transfer to exhibitors present at the fair to benefit even more from your fair visit. Further information is available in the chapters “Easy Connect” and “Advisory Services”.

You are not obliged – neither by law nor by contract – to provide us with your data. However, if you do not disclose to us your fields of interest, we cannot provide you with a tailor-made fair magazine which will optimize your experience during the fair visit.

We will store the fields of interest you have chosen as long as your online account exists. For this, please take a look at the chapter “Registration/Log-in”. There you will be informed how long we store your data in connection with your online account.

c) Easy Connect

On the day of the fair, you will get a name tag with your first name printed on it on site at the fair. We have already informed you about that in the chapter “Registration/Log-in”.

In addition to your name, a code is printed on the tag. You are free to voluntarily provide the exhibitors with this code when you visit their stands. The exhibitor will then enter this code in an online tool (our Lead Collection system). After the fair, the exhibitor can download your data from our Lead Collection system which contains your contact data and fields of interest (which you have indicated under the menu item “Fields of Interest”).

The code is sort of your “digital” business card. This approach is advantageous because the exhibitor’s students’ advisor at the fair stand need not take down your data by hand. Thus, you will have more time to concentrate on your choice of degree programs. Moreover, this approach excludes the risk that the students’ advisor might take down your contact data incorrectly in which case he would be unable to contact you after the fair. The same is true with respect to the fields of interest you have chosen.

The “digital” business card also renders the exchange of information between you and the exhibitor in the time after the fair easier. The exhibitors will be able to provide you with appropriate information and offers after the fair.

Under the menu item “Easy Connect”, you can see that your first name and email address are highlighted in grey already. We have adopted your first name and your email address from your registration.

As you have surely noted, you can also enter your address, telephone number and the intended starting date of your degree program in the form shown under the menu item “Easy Connect”. The exhibitors which you provide with your code can thus contact you also by post or phone. Disclosure of this data is voluntary, and you can also participate in our “Lead Collection system” if you do not disclose this data to us.

If you want to participate in our “Lead Collection system”, you have to give us your consent to enable us to transfer your contact data (first name, email address and any additional data you may enter) as well as the fields of interest you have chosen to the exhibitors to which you have disclosed your code. The legal basis for the data processing is Art. 6 subs. 1 sentence 1 a) GDPR (grant of consent).

Please be aware that you are yourself responsible for your contact data. If you do not provide the exhibitors on the fair with your code, we will not transfer your contact data and fields of interest either.

We would further like to inform you that we will not transfer your data to exhibitors in third countries (i.e. in countries outside the EU / EEA) for which the EU Commission has not confirmed an adequate level of protection by way of an adequacy decision. Exhibitors from those countries cannot participate in the Lead Collection system because those countries do not ensure an adequate level of data protection.

You are not obliged – neither by law nor by contract – to participate in the Lead Collection system. If you do not want us to transfer your first name, your email address and the fields and faculties you have chosen under the menu item “Fields of Interest” to the exhibitors to which you have voluntarily disclosed your code at the fair, you unfortunately cannot participate in our Lead Collection system and you cannot benefit from the advantages of the “digital” business card.

We will store the data that has been stored in the context of the Lead Collection system as long as your online account exists. For this, please take a look at the chapter “Registration/Log-in”. There you will be informed how long we store your data in connection with your online account.

When you click the check box, you are deemed to consent to the data processing described in this chapter. You can withdraw your consent at any time by an appropriate declaration to us. Please be aware that the withdrawal of your consent will not affect the lawfulness of processing based on consent before the withdrawal. You may declare your withdrawal of consent by sending an email to datenschutz@bo-co.eu or by sending a message to the contact data stated above in this Privacy Policy and in the legal information.

d) Presentations

Under the menu item “Presentations”, you can book your participation in presentations held at the fair. We have compiled for you a comprehensive range of presentations by exhibitors and experts regarding the choice of degree programs. To expediently structure your fair visit, it is purposeful to book in advance the presentations you want to attend. Shortly before the fair, you will receive your personal fair day agenda.

A special advantage of this approach is that you can have your contact data (first name, email address and, if made available by you, your address and telephone number) transferred directly to the exhibitors holding the presentations to enable them to provide you with additional information relating to the presentation after the fair. The legal basis for the transfer of your contact data is Art. 6 subs. 1 sentence 1 a) GDPR (grant of consent).

You can also book a presentation without consenting to the transfer of your contact data. In this case, we will not transfer your data to the party holding the presentation.

We would also like to inform you that we will not transfer your data to exhibitors in third countries (i.e. in countries outside the EU / EEA) for which the EU Commission has not confirmed an adequate level of protection by way of an adequacy decision. Exhibitors from those countries cannot participate in the presentation booking system because those countries do not ensure an adequate level of data protection.

When you click the check box, you are deemed to consent to the transfer of your data to the exhibitor holding the presentation, as is described in this chapter. You can withdraw your consent at any time by an appropriate declaration to us. Please be aware that the withdrawal of your consent will not affect the lawfulness of processing based on consent before the withdrawal. You may declare your withdrawal of consent by sending an email to datenschutz@bo-co.eu or by sending a message to the contact data indicated above in this Privacy Policy and in the legal information.

e) Advisory services

Under the menu item “Advisory Services”, you can book, and fix the date and time for, a personal counselling interview with the exhibitors at the fair stands.

Shortly before the fair, we will send you your personal time schedule. If you want to use the time scheduling option, we will transfer your contact data (first name, email address and – where made available by you – your address and telephone number) and the fields of interest you have chosen to the exhibitors with which you have booked a personal counselling interview. The legal basis for the data processing is Art. 6 subs. 1 sentence 1 a) GDPR (grant of consent).

You are not obliged – neither by law nor by contract – to consent to the transfer of your data. However, you will only be able to use our time scheduling option if you consent to the transfer of your data. If you do not want to consent to the transfer, the students’ advisors will nonetheless appreciate your spontaneous visit.

We would also like to inform you that we will not transfer your data to exhibitors in third countries (i.e. in countries outside the EU / EEA) for which the EU Commission has not confirmed an adequate level of protection by way of an adequacy decision. Exhibitors from those countries cannot participate in the time scheduling system because those countries do not ensure an adequate level of data protection.

When you click the check box, you are deemed to consent to the transfer of your data to the exhibitor with which you have booked a counselling interview. You can withdraw your consent at any time by an appropriate declaration to us. Please be aware that the withdrawal of your consent will not affect the lawfulness of processing based on consent before the withdrawal. You may declare your withdrawal of consent by sending an email to datenschutz@bo-co.eu or by sending a message to the contact data stated above in this Privacy Policy and in the legal information.

f) My fair

Under the menu item “My Fair”, you will find an overview of your data which have been stored in the context of your online account. There, you can retrieve your ticket and find exhibitors which are appropriate for your fields of interest. Moreover, you can access your scheduled dates and booked presentations.

Under the menu item “My Fair”, you can click a check box to subscribe to our newsletter. The legal basis for the processing of your email address for the purpose of newsletter transmission is Art. 6 subs. 1 sentence 1 a) GDPR (grant of consent). We use the double opt-in procedure for obtaining your consent. For this, please take note of the additional information in the chapter “Newsletter” of this Privacy Policy.

3. Publication of photos and videos from the fair

Please be aware that we shoot photos and videos at the fair. In this context, to present the character of the event, we also show persons which means that we might also shoot videos or photos of you as a visitor or exhibitor.

We use these photos and videos exclusively for the purpose of presenting and advertising the next fairs; for this purpose, we use the following media: social media, websites, printed matter.

The legal basis for the data processing is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest consists in using the videos and photos we have taken of you for advertising purposes. You are entitled under Art. 21 GDPR to object to the processing at any time (see below in this Privacy Policy).

For photos and videos where you are in the foreground or where you are shown prominently or as a central figure, we will obtain your consent before we shoot the video or photo of you; in any case we will point out to you the aforementioned purpose and your right to withdraw your consent at any time (see below in this Privacy Policy (Art. 6 subs. 1 sentence 1 a) GDPR)). In this context, we might ask for your age. If you are younger than 16 years, we will not shoot videos or photos of you or use such photos and videos without the consent of your parents or legal custodian.

If you do not want us to shoot videos or photos of you or use the photos and videos for the aforesaid advertising purposes, please contact any of our employees at the fair or send an email to: datenschutz@bo-co.eu. You are not obliged – neither by law nor by contract – to allow us to shoot videos or photos of you and/or to publish these videos or photos.

4. Contact form

When you contact us via our contact form, the data which you disclose to us will be stored to process and answer your request.

To enable us to answer your request, you have to provide us with those of your personal data which we require to respond to your request. This required data is specifically marked. Any additional disclosures are voluntary.

We process your personal data which we have collected from the contact form exclusively for the purpose of answering your request. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. We have a legitimate economic interest in potential students contacting us and in the use of the contact form. Our contact form is a service which we provide to you as a (potential) customer or applicant to enable quick and easy contact with us. We thereby want to offer you good customer service. The contact requests often help to initiate contractual relationships.

You are not obliged – neither by law nor by contract – to provide us with your data. We will however only be able to answer your request if you disclose to us the above-mentioned data marked as required fields.

5. Request for information and brochures

You can use the form “Request for information/ brochures” to request information material regarding the degree programs, fields and faculties or the universities you have chosen.

We will exclusively process the data you have disclosed to us in the form to process your request. To enable us to process your request for information material, you have to provide use with those of your personal data which we require to process your request. This required data is specifically marked. Any additional disclosures are voluntary.

Your information request is immediately transferred to the student advisory services department of the universities you have chosen. If you request information about a certain degree program or faculty, we will transfer your request to all universities which offer the desired degree program and which are listed on our website. We cannot influence data processing by the relevant universities and we are not responsible or liable for the lawfulness of such data processing. You can either retrieve the appropriate data protection information of the relevant university on its website or you can request such information directly from the relevant university.

We would also like to inform you that we will not transfer your data to universities in third countries (i.e. in countries outside the EU / EEA) for which the EU Commission has not confirmed an adequate level of protection by way of an adequacy decision. Those countries do not ensure an adequate level of data protection.

The legal basis for the data processing is Art. 6 subs. 1 sentence 1 f) GDPR. We have a legitimate economic interest in offering the universities (our customers) good customer service by transferring data to them to enable them to provide you with information material. The universities have a legitimate interest in providing you with information material to inform you about the programs they offer and advertise their institution. The provision of information material often helps to initiate contractual relationships.

You are not obliged – neither by law nor by contract – to provide us with your data by filling in the said form. However, if you do not disclose the required data, the university will not be able to provide you with the requested information.

6. Newsletter

You can give your consent and subscribe to our newsletter by which we inform you about our current interesting services. The advertised services are specified in the declaration of consent.

We use the so-called double opt-in procedure for your subscription to our newsletter. This means that, after you have subscribed to the newsletter, we will send you an email to the email address you have indicated by which we will ask you to confirm that you want us to send you our newsletter. If you do not confirm your subscription within 24 hours, the information you have provided will be blocked and deleted automatically after one month. In addition, we store the IP addresses you have used from time to time as well as the time of your subscription and the time of your confirmation. The purpose of this procedure is to enable us to evidence your subscription and, where required, investigate and solve any potential misuse of your personal data.

The only field which is required for the transmission of our newsletter is your email address. Disclosure of any additional data is voluntary and such additional data will be used to address you personally. After you have confirmed your subscription, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 subs. 1 sentence 1 a) GDPR.

You are not obliged – neither by law nor by contract – to provide us with your data. However, we will only be able to send you our newsletter if you enter the information in the required fields.

You may at any time withdraw your consent to the newsletter transmission and unsubscribe. You may withdraw your consent by clicking the link which is made available in every newsletter email or by sending an email to datenschutz@bo-co.eu or by sending a message to the contact data stated above in this Privacy Policy and in the legal information.

Please be aware that, when we send you our newsletter, we will analyse your user behaviour. For such purpose, the emails we send to you contain so-called web beacons or tracking pixels which are one-pixel image files which are stored on our website. For the purpose of analysing your user behaviour, we will combine the data mentioned under “Collection of personal data when you use the website for information purposes” and the web beacons with your email address and a unique ID. The data is collected exclusively in pseudonymized form which means that the IDs are not combined with your other personal data such that the data cannot be directly allocated to you personally. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest is our interest in providing customer-friendly and optimized design of our newsletter, tailored to our customers’ demands.

7. Prize competitions and prize draws

We process your data which you enter in our prize competitions or prize draws for no purpose other than the implementation of the prize competition or prize draw (among other things in order to decide whether you are entitled to participate in the prize competition or prize draw, to identify and inform the winners and to pay out the prize).

Required fields are specifically marked. The entry of additional data is voluntary. The legal basis for the data processing is Art. 6 subs. 1 sentence 1 b) GDPR. The processing of the data is necessary for the performance of the agreement for participation in the prize competition or prize draw.

We will delete your data immediately after the end of the prize competition or prize draw. This does not apply if and to the extent that the processing or storage of your personal data is from time to time necessary for the establishment, exercise or defence of legal claims (for the duration of the legal dispute or litigation) or we are prevented from deleting your data by statutory obligations to retain the data.

We do not disclose or transfer your data to third parties and do not transfer your data to third countries either.

You are not obliged, neither by contract nor by law, to provide us with your data for the purposes of the prize competition or prize draw. However, if you do not fill in the required fields, you cannot participate in the prize competition or prize draw.

8. Web analytics

a) Google Analytics

This website uses Google Analytics which is a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies” which are text files which are stored on your computer and enable us to analyse how you use the website. The information generated by the cookie about how you use this website is, as a rule, transferred to a Google server in the USA and stored there. However, if the IP anonymization feature is activated on this website, your IP address will be shortened by Google within the member states of the European Union or other countries party to the Agreement on the European Economic Area before it is transferred to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to analyse how you use the website, to compile reports on the website activities and to render further services relating to the use of the website and the use of the Internet to the website operator.

You can set your browser software to prevent the storage of cookies; please be aware that, in this case, you might be prevented from using all features and functions of this website without restrictions. You may also prevent the collection of the data generated by the cookie about how you use the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in which is available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the supplementary feature „_anonymizeIp()“. This makes sure that only shortened IP addresses are processed further which prevents IP addresses from being allocated to specific persons. Where the data collected from you refers to you personally, allocation of this data to you personally is prevented right from the beginning and the personal data is thus deleted immediately.

We use Google Analytics to analyse and continuously improve our website. The statistics we obtain help us to improve the services we offer and present them to you as the user in a more interesting design. As to the exceptional cases where personal data is transferred to the USA, Google has agreed to respect and comply with the EU-US Privacy Shield. The legal basis for the use of Google Analytics is Art. 6 subs. 1 sentence 1 f) GDPR.

Information provided by the third-party provider: Google Dublin, Google Ireland Ltd. (hereinafter referred to as “Google”), Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. The applicable terms of use and the privacy policy are available at the Google website (www.google.de).

This website uses Google Analytics also for the purpose of cross-device analysis of visitor streams (in which case the website is accessed from different terminals) which is implemented by means of a user ID. You can deactivate this analysis of your user behaviour in your customer account under “My data”, “personal data”.]

b) Fullstory

This website uses Fullstory. Fullstory records the behaviour of users on our website. The recording of visitor sessions enables us to analyse the sessions and subsequently improve the website experience for our visitors. Fullstory uses cookies to store and collect data in anonymized form. You can at any time deactivate the tracking (i.e. the collection of the data about the use of the website which is generated by the cookie). For such purpose, please follow the instructions under https://www.fullstory.com/optout.

We use Fullstory to analyse how our website is used and continuously improve it. The statistics we obtain help us to improve the services we offer and present them to you as the user in a more interesting design. The legal basis for the data processing in the context of Fullstory is Art. 6 subs. 1 sentence 1 f) GDPR.

Information provided by the third-party provider: Fullstory Inc. (referred to hereinafter as “Fullstory“), 818 Marietta Street, Atlanta, GA 30318, USA. Information on data protection is available on the Fullstory website (www.fullstory.com). Fullstory has agreed to respect and comply with the EU-US Privacy Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).

c) Hotjar

This website uses the website analysis service Hotjar. Hotjar records the behaviour of users on our website. The recording of visitor sessions enables us to analyse the sessions and subsequently improve the website experience for our visitors. Hotjar uses cookies to store and collect data in anonymized form. You can at any time deactivate the tracking (i.e. the collection of the data about the use of the website which is generated by the cookie). For such purpose, please follow the instructions under https://www.hotjar.com/opt-out.

We use Hotjar to analyse how our website is used and continuously improve it. The statistics we obtain help us to improve the services we offer and present them to you as the user in a more interesting design. The legal basis for the data processing in the context of Hotjar is Art. 6 subs. 1 sentence 1 f) GDPR.

Information provided by the third-party provider: Hotjar Ltd. (referred to hereinafter as “Hotjar“), Level 2 St Julians Business Centre 3, Elia Zammit Street, St Julians STJ 1000 Malta; information on data protection is available on the Hotjar website (www.hotjar.com).

9. Online advertising

a) Google Adwords Conversion

We use the Google Adwords services to draw the users’ attention to the attractive services we offer, using for such purpose advertising means (so-called Google Adwords) which are placed on external websites. We can measure the success of individual advertising measures by relation to the advertising campaign data. We thereby want to show you advertisements which are interesting for you, offer you a more interesting website and ensure fair calculation of advertising costs.

These advertising means are delivered by Google via so-called “Ad Servers”. For such purpose, we use Ad Server cookies which enable the measurement of certain parameters which help us measure the success, such as display of advertisements or user clicks. If you are referred to our website via a Google advertisement, Google Adwords stores a cookie on your PC. These cookies usually expire after 30 days and are not meant to identify you personally. Along with this cookie, usually the following analysis values are stored: unique cookie ID, number of ad impressions per placement (frequency), last impression (which is important for post-view conversions) as well as opt-out information (mark which means that the user does no longer want to be addressed).

The cookies enable Google to recognize your Internet browser. When a user visits certain pages of the website of an Adwords customer and the cookie which was stored on the customer’s computer has not expired yet, Google and the customer can see that the user clicked the advertisement and was referred to this page. Each Adwords customer is assigned a separate cookie. Thus, it is impossible to track cookies via the websites of Adwords customers. We ourselves do not collect and process any personal data in the context of the said advertising measures. Google only provides us with statistical analyses. We can see by these analyses which advertising measures are particularly efficient. We do not receive any other data which might emerge from the use of the advertising means, in particular we cannot identify the users by the information we receive.

The marketing tools we use cause your browser to automatically establish a direct connection to the Google server. We cannot influence the scope and further processing of the data which Google collects by means of this tool and we therefore inform you within the limits of our current state of knowledge: Google Adwords Conversion is embedded such that Google is informed that you have accessed the relevant part of our Internet presentation or clicked one of our advertisements. If you are registered with any of the services offered by Google, Google can allocate your visit to your account. Even if you are not registered with Google or are not logged in to Google, the provider might find out about your IP address and might store it.

There are several different options for you to prevent participation in this tracking procedure:

a) by appropriate setting of your browser software, in particular: the rejection of third-party cookies prevents the receipt of advertisements from third-party providers;

b) by deactivation of the cookies for conversion tracking: for such purpose, you have to set your browser to block cookies coming from the domain “www.googleadservices.com“, https://www.google.de/settings/ads, this setting is however cancelled when you delete your cookies.

c) by deactivation of interest-based advertisements of the providers which are part of the self-regulation campaign “About Ads”; for such purpose you have to use the link http://www.aboutads.info/choices, this setting is however cancelled when you delete your cookies.

d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. Please be aware that, in this case, you might be prevented from using all features and functions of our website without restrictions.

The legal basis for the processing of your data is Art. 6 subs. 1 sentence 1 f) GDPR. Further information on data protection is available on the Google website (www.google.de). Alternatively, you can go to the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org. Google has agreed to respect and comply with the EU-US Privacy Shield; further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).

b) Remarketing

We use the Google Remarketing application which is a method to readdress you. This application allows our advertisements to be shown to you after you have left our website but are still using the Internet. This is done by means of cookies which are stored in your browser and which enable Google to collect information about and analyse your user behaviour during your visits to different websites. This enables Google to determine that you have visited our website before. Pursuant to the statements of Google, Google does not combine the data which is collected in the context of the remarketing with your personal data which Google might have stored. In particular, pursuant to Google, the data is pseudonymized in the context of these remarketing measures.

If you want to prevent participation in the remarketing, you can use the opt-out options offered by Google or change your Google settings (www.google.com/ads/preferences).

The legal basis for the processing of your data is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest consists in drawing your attention to the services we offer to inform you about our portfolio and make it easier for you to retrieve our services during your next session. We thereby want to offer you good customer service. This often helps to initiate contractual relationships.

Further information on data protection is available on the Google website (www.google.de). Google has agreed to respect and comply with the EU-US Privacy Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).

c) DoubleClick by Google

This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to place advertisements which are interesting for the users, improve the reports on campaign efficiency or prevent advertisements from being shown to the same user several times. Google can determine by means of a cookie ID which advertisements are shown in which browser and can thus prevent them from being displayed several times. In addition, DoubleClick uses cookie IDs to identify so-called conversions which are related to requests made in response to an advertisement. This is for instance the case when a user sees a DoubleClick advertisement and subsequently accesses the advertiser’s website via the same browser and places a purchase order there. Pursuant to Google, DoubleClick cookies do not contain personal information.

The marketing tools we use cause your browser to automatically establish a direct connection to the Google server. We cannot influence the scope and further processing of the data which Google collects by means of this tool and we therefore inform you within the limits of our current state of knowledge: DoubleClick is embedded such that Google is informed that you have accessed the relevant part of our Internet presentation or clicked one of our advertisements. If you are registered with any of the services offered by Google, Google can allocate your visit to your account. Even if you are not registered with Google or are not logged in to Google, the provider might find out about your IP address and might store it.

There are several different options for you to prevent participation in this tracking procedure:

a) by appropriate setting of your browser software, in particular: the rejection of third-party cookies prevents the receipt of advertisements from third-party providers;

b) by deactivation of the cookies for conversion tracking: for such purpose, you have to set your browser to block cookies coming from the domain “www.googleadservices.com“, https://www.google.de/settings/ads, this setting is however cancelled when you delete your cookies.

c) by deactivation of interest-based advertisements of the providers which are part of the self-regulation campaign “About Ads”; for such purpose you have to use the link http://www.aboutads.info/choices, this setting is however cancelled when you delete your cookies;

d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. Please be aware that, in this case, you might be prevented from using all features and functions of our website without restrictions.

The legal basis for the processing of your data is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest consists in drawing your attention to the services we offer to inform you about our portfolio and make it easier for you to retrieve our services during your next session. We thereby want to offer you good customer service. This often helps to initiate contractual relationships.

Further information on DoubleClick by Google and data protection by Google is available on the Google website (www.google.de). Alternatively, you can go to the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org. Google has agreed to respect and comply with the EU-US Privacy Shield; further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).

d) Facebook Pixel

For the purposes of analysing, optimizing and efficiently operate our website, we use the so-called “Facebook pixel” of Facebook lnc., 1 Hacker Way, Menlo Park, CA 94025, USA. The Facebook pixel enables Facebook to identify you as visitor to our website as the target group for the presentation of advertisements – the so-called “Facebook Ads”. We only use the Facebook pixel to provide you with the Facebook Ads which we have placed. However, this will only be the case if you have not objected to the use of the Facebook pixel. If you want to prevent the use of the Facebook pixel, you can use the opt-out options which are made available on the website or prevent the use of the Facebook pixel in your advertising preferences with Facebook under: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

The legal basis for the processing of your data is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest consists in drawing your attention to the services we offer to inform you about our portfolio and make it easier for you to retrieve our services during your next session. We thereby want to offer you good customer service. This often helps to initiate contractual relationships.

e) Google Tag Manager

We use the Google Tag Manager. This service enables us to administer website tags via a web surface. The “Tag Manager” tool identifies interactions which take place on our websites and refers them to the embedded tools (e.g. Google Analytics and Google Adwords). The Tag Manager itself does not collect personal data but only triggers the embedded tools (such as Google Analytics and Google Adwords) which on their part may collect data. The Google Tag Manager does not access this data. Where a deactivation was initiated on the domain level or cookie level, it will continue in effect for all tracking tags if and to the extent they are implemented with the Google Tag Manager.

10. Social media

a) Social media plug-ins

We currently use the following social media plug-ins:

• Facebook
• Twitter
• YouTube
• Google+
• Instagram

In this context, we use the double-click solution. This means that, when you visit our website, as a rule, no personal data is transferred to the plug-in provider at first. You can recognize the plug-in provider by the mark in the box above the provider’s initial letter or by its logo. We offer you the possibility to communicate directly with the plug-in provider via the button. Only when you click the marked field and thus activate it, the plug-in provider is informed that you have accessed the relevant website of our online presentation. In addition, the data mentioned in this Privacy Policy under “Collection of personal data when you use the website for information purposes” is transferred, too. In the case of Facebook, pursuant to the information provided by the relevant providers in Germany, the IP address is anonymized immediately after collection. This means that, when you activate the plug-in, your personal data is transferred to the relevant plug-in provider and stored there (in the case of US-Americ an providers in the USA). Since the plug-in provider collects data especially by cookies, we recommend that you delete all cookies in the security settings of your browser before you click the greyed-out box.

We have no influence on the collected data or data processing activities nor are we aware of the scope of data collection, the purposes of the processing and the duration of data storage. We do not know about the deletion of the collected data by the plug-in provider either.

The plug-in provider stores the data collected from you in the form of user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to display customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to, and thus prevent, the preparation of user profiles; if you want to exercise this right, you have to address the relevant plug-in provider. We offer you the possibility, via the plug-ins, to interact with the social networks and other users which enables us to improve our presentation and services and offer you as the user a more interesting design. The legal basis for the use of the plug-ins is Art. 6 subs. 1 sentence 1 f) GDPR.

The data is transferred regardless of whether or not you have an account with the plug-in provider and whether or not you are logged in there. When you are logged in to the plug-in provider, the data we have collected from you is immediately allocated to your account with the plug-in provider. When you click the activated button and, for instance, set a link on the page, the plug-in provider will also store this information in your user account and publicly communicate it to your contacts. We recommend that you always log out when you have visited a social network, especially before you activate the button, to so prevent any allocation to your profile with the plug-in provider.

Further information on the purpose and scope of data collection and data processing by the plug-in provider is available in the privacy policies of these providers set out below. These also contain further information on the rights to which you are entitled in this context and the possible settings to protect your privacy.

Addresses of the relevant plug-in providers:

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; information on data protection by Facebook is available on the Facebook website (www.facebook.com). Facebook has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; information on data protection by Twitter is available on the Twitter website (www.twitter.com). Twitter has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; information on data protection by Google is available on the Google website (www.google.com). Google has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA; information on data protection by Instagram is available under (www.instagram.com).

b) Links to our social media sites

We maintain social media sites to enable communication with potential customers and other users and inform you about our services. If you use these sites, the privacy policy of the relevant social media provider applies:

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; information on data protection by Facebook is available on the Facebook website (www.facebook.com). Facebook has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; information on data protection by Twitter is available on the Twitter website (www.twitter.com). Twitter has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; information on data protection by Google is available on the Google website (www.google.com). Google has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA; information on data protection by Instagram is available under (www.instagram.com).
• XING SE, Dammtorstraße 30, 20354 Hamburg, Germany; information on data protection by Xing is available under (www.xing.com).
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Information on data protection by LinkedIn is available under (www.linkedin.com).
• Snap Group Limited, 7-11 Lexington Street, London W1F 9AF, Great Britain; information on data protection by the Snap Group is available under (www.snap.com).

Our website contains links to our social media sites. When you visit our website and click a link, you are referred directly to the relevant social media site.

Please be aware that, when you use our social media sites, personal data might be processed outside the EU and the EEA. In this case, it might be more difficult to enforce the rights to which you are entitled under the GDPR. Unless stated otherwise in this Privacy Policy, we will only process your data when you communicate with us in the context of the relevant social media site, e.g. if you comment a post on Facebook or send us a message. We will process this personal data exclusively in the context and for the purposes of this communication, e.g. to answer your request. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. We have a legitimate economic interest in communicating with (potential) customers and other interested persons. Details regarding the processing of your personal data are available in the privacy policies of the social media providers.

In many cases, the most efficient way to exercise your right to access/ information (Art. 15 GDPR) as well as the other rights of data subjects described below is to address the relevant social media provider directly because, in many cases, only the social media provider itself has direct access to the processed data and can thus provide appropriate information or take appropriate measures (such as deletion of data). Of course, you may also address your request directly to us. Our contact data is stated above in this Privacy Policy.

11. YouTube videos

We have embedded YouTube videos in our online presentation which are stored on www.youtube.com and can be started and played back directly from our website. All videos are embedded in an “enhanced data protection mode” which means that no data concerning you as the user is transferred to YouTube if you do not play back the videos. Only when you play back the videos, the data mentioned in the following paragraph will be transferred to YouTube. We cannot influence this data transfer.

When you visit our website, YouTube is informed that you have accessed the relevant page of our website. In addition, the data mentioned in this Privacy Policy under “Information on the collection of personal data” is transferred, too. This happens regardless of whether YouTube provides a user account via which you are logged in or a user account does not exist. When you are logged in to Google, your data is directly allocated to your account. If you do not want your data to be allocated to your YouTube profile, you have to log out before you activate the button. YouTube stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to display customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to, and thus prevent, the preparation of user profiles; if you want to exercise this right, you have to address your objection to YouTube.

We embed YouTube videos to make our website more interesting and inform you about the services we offer. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR.

Further information on the purpose and scope of data collection and data processing by YouTube is available in the privacy policy which you can read on the website of Google (www.google.de). The latter also contains further information on the rights to which you are entitled in this context and the possible settings to protect your privacy: Google processes your personal data also in the USA and Google has agreed to respect and comply with the EU-US Privacy Shield (www.privacyshield.gov).

12. Google Maps

We use the services of Google Maps on our website. This enables us to show you interactive maps directly on our website and thus enables you to comfortably use the maps feature.

When you access the website, Google is informed that you have accessed the relevant page of our website. In addition, the data mentioned in this Privacy Policy under “Collection of personal data when you use the website for information purposes” is transferred, too. This happens regardless of whether Google provides a user account via which you are logged in or a user account does not exist. When you are logged in to Google, your data is directly allocated to your account. If you do not want your data to be allocated to your Google profile, you have to log out before you activate the button. Google stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to provide customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object, and thus prevent, the preparation of these user profiles; if you want to exercise your right to object, you have to address your objection to Google.

Further information on the purpose and scope of data collection and data processing by the plug-in provider is available in the privacy policies of Google which also contain further information on your rights and the possible settings to protect your privacy. The appropriate privacy policy is available on the website of Google (www.google.de). Google processes your personal data also in the USA and Google has agreed to respect and comply with the EU-US Privacy Shield (www.privacyshield.gov).

13. Google reCAPTCHA

In the forms for information and brochure requests we use Google reCAPTCHA. This prevents bots from filling out the forms.

When you accept the use of Google reCAPTCHA, Google is informed that you have accessed the relevant page of our website. In addition, the data mentioned in this Privacy Policy under “Collection of personal data when you use the website for information purposes” is transferred, too. This happens regardless of whether Google provides a user account via which you are logged in or a user account does not exist. When you are logged in to Google, your data is directly allocated to your account. If you do not want your data to be allocated to your Google profile, you have to log out before you activate the button. Google stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to provide customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object, and thus prevent, the preparation of these user profiles; if you want to exercise your right to object, you have to address your objection to Google.

It is not necessary to accept Google reCAPTCHA, you can contact the university directly at any time.

IV. Transfer of personal data to third parties

We will only transfer your personal data to third parties if this is permitted by law or the transfer is permissible under an appropriate contract for data processing on behalf according to Art. 28 subs. 3 GDPR.

V. Transfer of personal data to third countries

We will only transfer your personal data to third countries if this is permitted by law. Moreover, we will only transfer your data to third countries if the special conditions under Art. 44 et seqq. GDPR are fulfilled.

VI. Duration of storage

We will delete the data we have stored in connection with our website when the storage is no longer necessary and you have not consented or do no longer consent to the data processing, or we will restrict the processing in the case that we are obliged by law (e.g. under commercial law or tax law) to retain the data.

VII. SSL / TLS encryption

Our website is encrypted by SSL/TLS technology for reasons of security and to protect your personal data. You can see by “https://” and the lock symbol in your browser line that the website is encrypted.

VIII. Rights of data subjects

You are entitled to assert against us the following rights regarding your personal data:

• Right to access/ information, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure / right “to be forgotten“, Art. 17 GDPR
• Right to restriction of processing, Art. 18 DGDPR
• Right to data portability, Art. 20 GDPR
• Right to lodge a complaint with a supervisory authority, Art. 77 GDPR

For more detailed information on your rights, please go to the articles of the GDPR mentioned above. You may also contact our data protection officer. The contact data of our data protection officer is stated above in this Privacy Policy.

RIGHT TO OBJECT TO THE PROCESSING ACCORDING TO ART. 21 GDPR

IF WE PROCESS YOUR DATA RELYING FOR SUCH PURPOSE ON OUR LEGITIMATE INTERESTS UNDER ART. 6 SUBS. 1 SENTENCE 1 F) GDPR, YOU MAY AT ANY TIME OBJECT TO THE PROCESSING WITH EFFECT FOR THE FUTURE. YOU CAN OBJECT TO THE PROCESSING BY CONTACTING US UNDER THE CONTACT DATA STATED ABOVE.

IN CASE YOU EXERCISE YOUR RIGHT TO OBJECT, WE KINDLY ASK YOU TO EXPLAIN TO US THE REASONS WHY YOU DO NOT WANT US TO PROCESS THE DATA IN THE WAY WE USUALLY DO. IF YOUR OBJECTION IS JUSTIFIED, WE WILL CHECK THE FACTS AND EITHER STOP OR ADJUST THE DATA PROCESSING OR EXPLAIN TO YOU ANY COMPELLING LEGITIMATE REASONS WHY WE HAVE TO CONTINUE THE PROCESSING.

WHERE WE PROCESS YOUR DATA FOR DIRECT MARKETING PURPOSES, YOU MAY AT ANY TIME OBJECT TO THE PROCESSING FOR SUCH PURPOSES WITH EFFECT FOR THE FUTURE. IF YOU OBJECT TO THE DATA PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL STOP THE PROCESSING OF YOUR PERSONAL DATA.

INFORMATION ON YOUR RIGHT TO OBJECT TO DATA PROCESSING FOR MARKETING PURPOSES IS AVAILABLE UNDER THE CONTACT DATA STATED ABOVE.

RIGHT TO WITHDRAW YOUR CONSENT TO THE PROCESSING OF YOUR DATA AT ANY TIME ACCORDING TO ART. 7 SUBS. 3 GDPR

IF YOU HAVE CONSENTED TO THE PROCESSING OF YOUR DATA, YOU MAY WITHDRAW YOUR CONSENT AT ANY TIME WITH EFFECT FOR THE FUTURE. YOU CAN ADDRESS YOUR WITHDRAWAL TO THE CONTACT DATA STATED ABOVE. THE WITHDRAWAL OF CONSENT WILL NOT AFFECT THE LAWFULNESS OF PROCESSING BASED ON CONSENT BEFORE ITS WITHDRAWAL.

INFORMATION ON YOUR RIGHT TO WITHDRAW YOUR CONSENT IS AVAILABLE UNDER THE CONTACT DATA STATED ABOVE.