1. General
When you use this website, various personal data are collected. Personal data is information that can identify you personally. In this privacy policy, we explain what data we collect, how we use it, and for what purpose.
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any information that can be used to uniquely identify you.
2. Person in charge and assistants
a. Responsible body
The entity responsible under the EU GDPR is:
Stiftung-Prof-Vollrath.com
Represented by:
Prof. Dr. Mont Kumpugdee Vollrath
Feldstr. 8 04910 Elsterwerda
Germany
make contact
Telephone: +4915758038380
Email: studyguide.germany@web.de
Contact form: Get in touch
Website: Stiftung-Prof-Vollrath.com
b. Website host as data processor
This website is hosted by an external service provider (host). The personal data collected in this context is stored on the host’s servers. This may include, in particular, IP addresses, metadata and communication data, contract and contact information, names, website access data, and other data generated when visiting the website.
Our hosting provider processes your data exclusively within the scope of its contractual obligations and according to our instructions.
If you have given us your consent, the processing of your data is based on Art. 6 para. 1 sentence 1 lit. a GDPR.
Otherwise, your data will be processed if it is necessary for the performance of a contract or for taking steps prior to entering into a contract, on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR.
Furthermore, the processing of your data may be necessary to comply with legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR).
In all other cases, data processing is permitted if there is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. The specific legitimate interests are explained below for each type of processing.
Stiftung-Prof-Vollrath.com is SSL/TLS encrypted.
Your data is transmitted to Stiftung-Prof-Vollrath.com using modern SSL/TLS 256-bit data encryption and is therefore protected. Websites equipped with SSL/TLS encryption allow their users to send data from the browser to the website server via a secure connection.
Data transmitted to the website server, for example via a registration form, is encrypted beforehand and therefore cannot be viewed by third parties.
You can recognize SSL/TLS encryption by the padlock symbol in your web browser, which is displayed next to the website URL.
3. Legal basis
If you have given us your consent, the processing of your data is based on Art. 6 para. 1 sentence 1 lit. a GDPR.
Otherwise, your data will be processed if it is necessary for the performance of a contract or for taking steps prior to entering into a contract, on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR.
Furthermore, the processing of your data may be necessary to comply with legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR).
In all other cases, data processing is permitted if there is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. The specific legitimate interests are explained below for each type of processing.
4. Details of data processing
a. Purposes of data collection
Some of your data is collected to ensure the website functions correctly. This includes technical measures to secure and stabilize the IT systems.
Further data may be used to analyze your user behavior, such as the duration of your visit or the pages you visited. This analysis is only carried out anonymously or based on your consent.
Some of your data is transmitted directly to us by you, for example by filling out a contact form. Other data is automatically collected by our IT systems when you visit the website, e.g., technical information such as browser type, operating system, or time of page access.
b. Data collection on this website
Cookies
Our website uses so-called „cookies“ and similar technologies such as pixels or web beacons. Cookies are small text files that do not harm your device.
They are stored either only during your session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted when you leave the website. Persistent cookies remain on your device until you delete them yourself or your browser removes them automatically.
Cookies serve different functions. Technically necessary cookies are essential for the basic functions of the website, e.g. for the shopping cart or the display of content.
Functional cookies enable enhanced features and personalization, such as saving your language preferences.
Analytics and marketing cookies help us understand how the website is used.
Cookies that are necessary for carrying out electronic communication or desired functions are stored on the basis of Art. 6 para. 1 sentence 1 lit. f and lit. b GDPR.
This storage is necessary to offer the website in a technically flawless and optimized manner.
We may request your consent for the use of analytics or marketing cookies. This processing is then carried out exclusively on the basis of Article 6(1)(a) GDPR and can be revoked at any time.
If third-party cookies or cookies for analytical purposes are used, we will inform you separately in this privacy policy and, if necessary, obtain your consent.
Server log files
The website provider automatically stores information in so-called server log files, which your browser automatically transmits. This includes:
Browser type and version,
operating system used
, referrer URL,
hostname of the accessing computer,
time of the server request,
IP address.
This data is not merged with other data sources.
The data is collected on the basis of Article 6 Paragraph 1 Sentence 1 Letter f GDPR. We have a legitimate interest in the error-free presentation and optimization of our website, which is why this data is collected.
Contact forms and inquiries via email or telephone
When you contact us via a contact form, email or telephone, we store your information, including your contact details, in order to process your request and answer any follow-up questions.
We will not share this data without your consent.
The processing is based on Art. 6 para. 1 sentence 1 lit. b GDPR if your request is related to a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, the processing is based on our legitimate interest in the efficient handling of your request (Art. 6 para. 1 sentence 1 lit. f GDPR) or on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), if such consent exists.
c. Data collection by third-party providers via plug-ins and analytics tools
When you visit our website, your browsing behavior may be statistically evaluated, especially through cookies or analytics programs.
We use, among other things, the following tools:
Google Ads Conversion Tracking
Our website uses Google Ads Conversion Tracking, an analytics service provided by Google Ireland Limited. This allows us to evaluate the effectiveness of our advertising campaigns and track whether users have reached our website via Google ads and what actions they have taken (e.g., purchases or registrations).
Scope of data processing
When you click on one of our ads, a conversion tracking cookie is placed on your device. This cookie does not personally identify you, but allows Google and us to recognize that you clicked on the ad.
Each Google Ads customer receives their own cookie, so tracking via the websites of other Ads customers is not possible.
The information collected by the cookie about your use of our website (including your IP address) is usually transmitted to and stored on a Google server in the USA.
Google uses this information to generate conversion statistics for us. We do not receive any personally identifiable information.
Purpose and legal basis
Tracking is used to measure and optimize our advertising efforts.
The legal basis is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TDDDG, which you have given via the cookie consent.
Conversion tracking will not take place without your consent.
Storage duration
The data will only be stored for as long as is necessary for the respective purpose.
If the processing is based on your consent, the data will be deleted after revocation, unless there are legal retention obligations.
Third country transfer
For the USA, there is an adequacy decision by the European Commission dated 10 July 2023.
Google LLC and Alphabet Inc. are certified under the EU-US Data Privacy Framework.
Further information and Google’s privacy policy can be found here:
Google.com/privacy
Right of withdrawal
You can withdraw your consent at any time for the future by changing the cookie settings or by sending us an email.
The lawfulness of the processing carried out until the revocation remains unaffected.
Meta Pixel
Our website uses the visitor action pixel from Meta to measure conversions.
The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
According to Meta, the collected data is also transferred to the USA and other third countries.
The Meta Pixel allows us to track how visitors behave on the website after arriving via a Facebook ad.
This allows for statistical evaluation of the effectiveness of Facebook advertising, market research, and optimization of future advertising measures.
The data we collect from you is anonymous to us, so we cannot identify who you are.
However, Meta stores and processes the data and can link it to your user profile to implement its own advertising purposes in accordance with the Meta data policy.
This allows Meta to place ads on and off Facebook. As website operators, we have no control over this processing.
We will request your consent before activating the Meta Pixel.
If the pixel is activated, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR.
You can withdraw your consent at any time.
You can also deactivate the „Custom Audiences“ remarketing feature in the ad settings at Facebook.com/ads/preferences/.
You need to be logged into Facebook for this.
If you do not have a Facebook account, you can disable Facebook’s interest-based advertising via the European Interactive Digital Advertising Alliance:
Youronlinechoices.com/
LinkedIn Insight Tag
This website uses the LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company,
Wilton Plaza, Wilton Place, Dublin 2, Ireland.
The LinkedIn Insight Tag allows us to obtain information about visitors to our website, in particular:
URL
Referrer URL
IP address (truncated)
Device and browser properties
Timestamp
This data is used for reach measurement, conversion measurement and the display of targeted LinkedIn ads.
This processing also only takes place after your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR via our cookie consent tool.
LinkedIn does not store any personal data of our website visitors, but only creates anonymized reports about target groups and ad performance.
Further information on data protection at LinkedIn can be found here:
Linkedin.com/legal/privacy-policy/
5. Your rights
You can contact us at any time to exercise your rights.
a. Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time.
Simply send us an informal email to do so. The lawfulness of the data processing carried out up to the point of revocation remains unaffected.
b. Right to object to processing
If your data is processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
If you object, we will no longer process the data in question unless the processing is necessary for the establishment, exercise or defense of legal claims or there are compelling legitimate grounds which override your interests, rights and freedoms.
If the processing is for direct marketing purposes, you can object to this processing at any time.
c. Right to restriction of processing
You can request that the processing of your personal data be restricted.
This right applies in the following cases:
If you dispute the accuracy of your personal data stored with us, we need time to verify this. During this verification process, you can request the restriction of processing.
If the processing of your data is unlawful, you can request the restriction of processing instead of erasure.
If we no longer need your data, but you require it for the establishment, exercise, or defense of legal claims, you can request the restriction of processing.
If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of interests between your interests and our interests will take place. As long as it is not yet clear whose interests prevail, you can request the restriction of processing.
After restriction has been implemented, your data may – apart from being stored – only be processed with your consent or for the establishment, exercise, or defense of legal claims, for the protection of the rights of another person, or for important public interest of the European Union or a Member State.
d. Information, deletion and correction
You have the right at any time to receive information free of charge about your stored personal data, its origin, recipients and the purpose of the processing.
You can also request the correction or deletion of this data.
For questions about this or other topics relating to your personal data, you can contact us at any time using the contact details provided in the legal notice.
e. Right to data portability
You have the right to have data that we process automatically based on your consent or for the performance of a contract transferred to yourself or to another controller in a commonly used, machine-readable format.
If you wish to have the data transferred directly to another controller, this will only be done to the extent that it is technically possible.
f. Right to lodge a complaint with the competent supervisory authority
If you believe that the GDPR has been violated, you have the right to lodge a complaint with the competent supervisory authority.
This applies in particular in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.
The right to appeal remains unaffected by other administrative or judicial remedies.
6. Data protection in applications and the application process
We collect and process your personal data in order to properly handle your application process.
The processing can also be done electronically, for example if you submit your application documents by email or via a web form on our website.
If we conclude an employment contract with you, we will store the transmitted data in compliance with legal requirements for the execution of the employment relationship.
Should we not conclude a contract with you, your application documents will be automatically deleted two months after notification of the rejection, unless we have other legitimate interests.
A legitimate interest could, for example, be the obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).
7. Legal or contractual requirements for providing your personal data; necessity for entering into a contract; obligation to provide the data; consequences of not providing the data
We inform you that the provision of personal data is partly required by law (e.g. due to tax regulations) or may arise from contractual provisions (e.g. information about the contracting party).
In order to conclude a contract, it may be necessary for you to provide us with certain personal data, which we will then need to process.
For example, you are obliged to provide us with this data if we wish to enter into a contract with you.
If you do not provide the required data, the contract may not be concluded.
Before providing us with personal data, you can contact us at info@stiftung-prof-vollrath.com.
We will then inform you on a case-by-case basis whether the provision is required by law or contract, whether it is necessary for the conclusion of the contract, whether there is an obligation to provide it, and what the consequences of not providing it would be.