Student Experience - Fürstenwalder Aus- und Weiterbildungszentrum gGmbH

In the following, we inform you about the processing of personal data by us as the data controller, in particular when using our website. The processing of personal data (e.g. name, address, e-mail address or telephone number of a data subject) is carried out in accordance with the statutory provisions, in particular the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

This privacy policy uses terms based on the wording of the GDPR. The definitions for some of these terms can be found at the end of this policy.

Name and address of the data controller

The controller in accordance with Art. 4 para. 7 GDPR is:

Fürstenwalder Aus- und Weiterbildungszentrum gGmbH

Julius-Pintsch-Ring 25

15517 Fürstenwalde/Spree

Managing Director: Ms. Kirsten Schmitt

Managing Director: Mr. Thomas Enkelmann

Telephone: 03361 358400

Fax: 03361 358402

E-mail:

Data protection officer

You can reach our data protection officer as follows:

Fürstenwalder Aus- und Weiterbildungszentrum gGmbH

Data protection officer

Julius-Pintsch-Ring 25

15517 Fürstenwalde/Spree

and under

Telephone: 03361 358407

Fax: 03361 358402

E-mail:

Processing of personal data when you visit our website

3.1. When using the website for information purposes only, we only process the personal data that your browser transmits to the server we use. If you wish to view our website, we process the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Art. 6 para. 1 sentence 1 (f) GDPR):

IP address

Date and time of the request

Time zone difference to Greenwich Mean Time (GMT)

Content of the request (specific page)

Access status/HTTP status code

Amount of data transferred in each case

Website that the request comes from

Browser

Operating system and its interface

Language and version of the browser software.

3.2. This data is deleted again at the latest after 14 days, provided that no further storage is required for evidence purposes. In this case, this data is excluded from deletion in whole or in part until the incident has been finally clarified.

Processing of personal data when ordering school clothing

4.1 If you wish to order school clothing from us, in order to conclude the contract it is necessary that you provide your personal data, which we need to process your order. The legal basis for this is Art. 6 para. 1 sentence 1 (b) GDPR.

4.2 We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, after three years we restrict the processing, i.e. your data is then only used to comply with legal obligations.

Processing of personal data for personal contact

If you contact us by e-mail, by post, via a contact form or in any other way, the data you provide (e.g. your e-mail address, your name and your telephone number, if applicable) is processed by us in order to process or respond to your request (legal basis: Art. 6 para. 1 sentence 1 (a), (f) GDPR). We delete the data collected in this context as soon as storage is no longer necessary, or we restrict the processing if there are legal obligations to retain the data.

Processing of personal data in the application procedure

6.1. If you provide us with personal data in the course of the application process, the data you provide is processed exclusively for the purpose of carrying out the application process so as to be able to assess the success of your application (legal basis: Art. 6 para. 1 sentence 1 (a), (f) GDPR).

6.2. If a contractual relationship is established between you and us, the data transmitted is processed for the purpose of concluding and implementing the employment relationship in compliance with the statutory provisions. Otherwise, the application documents are automatically deleted six months after completion of the application procedure, provided that deletion does not conflict with any other legitimate interests on our part (e.g. Proceedings under the General Equal Treatment Act).

Newsletter

7.1. With your consent, you can subscribe to our newsletter, which we use to inform you about current developments and new articles.

7.2. For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration we send you an email at the email address you provided. In this we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within one month, your information is deleted at the end of the month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. The legal basis Art. 6 para. 1 sentence 1 (f) GDPR.

7.3. The only mandatory information for the sending of the newsletter is your e-mail address. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 (a) GDPR.

You can revoke your consent to the sending of the newsletter at any time without giving reasons with effect for the future and thereby unsubscribe from the newsletter.

7.4. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to or by sending a message to the contact details given in the imprint. Also after unsubscribing, we store your e-mail address and the registration data for a period of three years, limited to the purpose of being able to ensure proof of the consent given (legal basis: Art. 6 para. 1 sentence 1 (f) GDPR).

Recipients of personal data

Personal data is only transferred to third parties in the cases specified in this policy or if we expressly inform you of this elsewhere. In addition, we partly use external order processors (Art. 28 GDPR) to provide our services (e.g. host providers, email providers). However, they process personal data exclusively within the European Union.

Your rights

9.1. You have the following rights vis-à-vis us with regard to your personal data:

– The right to information (Art. 15 GDPR),

– Right of rectification and erasure (Art. 16, 17 GDPR),

– The right to restriction of processing (Art. 18 GDPR),

– The right to object to processing (Art. 21 GDPR),

– The right of revocation if you have consented to the processing,

– The right to data portability (Art. 19 GDPR).

9.2. If you believe we are not respecting your rights to the required extent, you have the right to complain to a data protection supervisory authority about our processing of your personal data. Before you do this, however, we would appreciate it if you would inform us of your criticism first so that we can rectify the cause of the complaint ourselves.

Deletion of data by the data controller

10.1. We process and store your personal data only for the period required to achieve the purpose of storage or – if we are legally obliged – beyond that until the end of the statutory retention period.

10.2. If the purpose of storage no longer applies or if a storage period prescribed by law expires, the personal data is blocked or deleted by us in accordance with the statutory provisions. No action on your part is required here.

Cookies

11.1. In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and assigned to the browser you are using. Among other things, this makes it possible to determine the frequency of use and number of users of the pages and to analyse the behaviour patterns of page use. We also use cookies to make our website more user-friendly. Some cookies remain stored even after you have visited a website. If you visit our website again, we can reactivate cookies that are still stored. You can delete the cookies in the settings of your Internet browser.

11.2. The legal basis for the processing of the users’ personal data is Art. 6 para. 1 (f) GDPR.

11.3. You can configure your browser settings according to your preferences and, e.g., refuse to accept third-party cookies or all cookies. Please note that if you reject cookies, you may not be able to use all the functions of this website.

Analysis tools

12.1. This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, text files which are stored on your computer and make it possible to analyse your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address is truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and truncated there in exceptional cases. However, we have no influence on this. Google uses this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website activity and Internet usage.

12.2. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.

12.3. You can prevent the storage of cookies by setting your browser software accordingly; however, we wish to point out that in this case you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

12.4. This website uses Google Analytics with the extension “_anonymizeIp()”. In this way, IP addresses are only processed in an abbreviated form, which means they cannot be linked to a specific person. If the data collected about you has a personal reference, this is immediately excluded and the personal data is thus deleted straight away.

12.5. We use Google Analytics so as to be able to analyse the use of our website and improve it on a regular basis. Using the statistics obtained, we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 (f) GDPR.

12.6. Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Conditions of use: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

Integration of Google Maps

13.1. We use Google Maps on our website to show our location. Google Maps is also operated by Google Ltd (see above). When you access our contact page, in which Google Maps is integrated, Google places a cookie on your device in order to process user settings and data for the display on Google Maps when showing the page and the associated functions of Google Maps.

13.2. Furthermore, by using Google Maps, information about the use of this website, including your IP address and the (start) address entered in the context of the route planning function, may be transmitted to Google in the USA. When you access our contact page, which contains Google Maps, your browser establishes a direct connection with Google’s servers. The map content is transmitted by Google directly to your browser, which then integrates it into the website. To our knowledge, the following data is collected by Google in this context:

– Date and time of the visit to the website concerned,

– Internet address or URL of the website accessed,

– IP address, (start) address entered in the context of route planning.

13.3. We use Google Maps to show our location. These purposes also represent our legitimate interest in processing the data. The legal basis for the processing of the users’ personal data is Art. 6 para. 1 (f) GDPR.

13.4. Cookies are stored on the user’s device and transmitted to our site from there. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

13.5. If you do not want Google to collect, process or use data about you through Google Maps via our website, you can deactivate JavaScript in your browser settings. In this case, however, you cannot use the map display.

13.6. For details of the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your related rights and setting options for protecting your privacy, please refer to Google’s data protection information https://policies.google.com/privacy?hl=de

Google Fonts

14.1. We integrate the fonts (“Google Fonts”) of the above-mentioned provider Google. When you use our website, information about the use of this website, including your IP address, may be transmitted to Google in the USA.

14.2. According to Google, the users’ data is used solely for the purpose of displaying the fonts in the users’ browsers. The integration is carried out on the basis of our legitimate interests in a technically secure, maintenance-free and efficient use of fonts as well as in a uniform presentation. The legal basis for the processing of the users’ personal data is Art. 6 para. 1 (f) GDPR.

14.3. For details of the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your related rights and setting options for protecting your privacy, please refer to Google’s data protection information: https://policies.google.com/privacy?hl=de.

Profiling, data transfer to third countries

15.1. We do not carry out any automatic decision-making, including profiling, within the meaning of the GDPR. Personal data is only transferred to third countries in the cases expressly stated in this policy or elsewhere, or with the corresponding consent.

Definitions of the GDPR:

For the purposes of the regulation, this privacy policy and our website, the term:

“personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

“restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future;

“consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

“pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

“third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;

‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;