Privacy policy

 

The responsibility within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

 

IMGP Institute e.V.

Rohrkamp 15

48308 Senden

Germany

Register Court: District Court Coesfeld

Register of associations: VR 7209

CEO: Frank A. Reusch

E-Mail: info@expido.net

 

Data protection officer:

E-Mail: privacy@expido.net

Your data subject rights

You can exercise the following rights at any time by contacting our data protection officer:

  • Information about your data stored by us and its processing (Art. 15 GDPR),
  • Correcting incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing, provided that we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • opposition to the processing of your data by us (Art. 21 GDPR) and
  • Data transferability, provided you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You may at any time submit a complaint to a supervisory authority, e.g. to the competent supervisory authority of the federal state of your residence or to the authority responsible for us as the responsible body.

A list of the regulatory authorities in Germany (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

 

Collection of general information when visiting our website

The nature and purpose of the processing:

When you access our website, i.e. when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

They are processed in particular for the following purposes:

  • Ensuring that the website can be connected without problems,
  • Ensuring a smooth use of our website,
  • evaluation of system safety and stability, and
  • for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated by us, if necessary, in order to optimise our Internet presence and the technology behind it.

 

Legal basis:

Processing is carried out in accordance with Art. 6 Para. 1 letter f GDPR on the basis of our justified interest in improving the stability and functionality of our website.

 

Receiver:

Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.

 

Storage duration:

The data will be deleted as soon as they are no longer required for the purpose of the collection. This is generally the case for the data used to provide the website, when the respective session has ended.

 

Provision is mandatory or necessary:

The provision of the aforementioned personal data is not required by law or contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason an objection is excluded.

Cookies

The nature and purpose of the processing:

Like many other websites, we also use so-called „cookies“. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

This provides us with certain data such as IP address, browser used and operating system.

Cookies cannot be used to start programs or transfer viruses to a computer. We can use the information contained in cookies to make navigation easier for you and to enable our web pages to be displayed correctly.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can always view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via the settings of your browser. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

 

Storage duration and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

If you leave a comment on our website, you can choose to save your name, e-mail address and website in cookies. These are for your convenience so that you do not have to re-enter your details if you leave another comment. These cookies have a lifetime of one year.

If you have an account and log on to this website, we set a temporary cookie to determine whether your browser accepts cookies. This cookie does not contain any personal data and is discarded when you close your browser.

When you log in, we also set several cookies to store your login information and screen display options. Login cookies are valid for two days and screen option cookies are valid for one year. If you select „Keep me logged in“, your login will remain for a fortnight. When you log out of your account, the login cookies are removed.

When you edit or publish an article, an additional cookie
is stored in your browser. This cookie does not contain any personal data and only indicates the article ID of the article you are currently editing. It expires after 1 day.

Insofar as these cookies can (also) affect personal data, we will inform you about this in the following sections.

You can delete individual cookies or the entire cookie inventory via your browser settings. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Registration on our website

The nature and purpose of the processing:

When registering to use our personalised services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time if necessary. Of course, we will also provide you with information about the personal data we have stored about you at any time.

 Legal basis:

The data entered during registration is processed on the basis of the user’s consent (Art. 6 para. 1 letter a GDPR).

If the registration serves the performance of a contract to which the data subject is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 letter b GDPR.

 Receiver:

Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.

 Storage duration:

Data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards they will be deleted, as far as there are no legal obligations to retain data. To contact us in this context, please use the contact details given at the end of this data protection declaration.

 Provision is mandatory or necessary:

The provision of your personal data is voluntary, solely based on your consent. Without the provision of your personal data, we cannot grant you access to our offered contents and services.

 

 

Comment function

The nature and purpose of the processing:

If users leave comments on our website, in addition to this information, the time of their creation and the user name previously selected by the website visitor are also stored. This is for our security, as we can be prosecuted for illegal content on our website, even if it was created by users.

 Legal basis:

The data entered as comments are processed on the basis of a legitimate interest (Art. 6 para. 1 letter f GDPR).

By providing the commentary function, we would like to enable you to interact in an uncomplicated way. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

 Receiver:

Recipients of the data may be contract processors.

 Storage duration:

The data will be deleted as soon as they are no longer required for the purpose of the collection. This is generally the case when communication with the user is complete and the company can conclude from the circumstances that the matter in question has been conclusively clarified.

 Provision is mandatory or necessary:

The provision of your personal data is voluntary. Without the provision of your personal data we cannot grant you access to our comment function.

Newsletter

The nature and purpose of the processing:

Your data will only be used to send you the subscribed newsletter by e-mail. Your name is entered in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to enter your e-mail address. If you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical conditions).

For an effective registration we need a valid e-mail address. In order to check that a registration is actually made by the owner of an e-mail address, we use the „double opt-in“ procedure. For this purpose, we log the ordering of the newsletter, the sending of a confirmation e-mail and the receipt of the answer requested herewith. No further data is collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.

 Legal basis:

On the basis of your expressly granted consent (Art. 6 para. 1 lit. a GDPR), we will send you our newsletter or comparable information regularly by e-mail to the e-mail address you have provided.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option at the end of this data protection notice.

 Receiver:

Recipients of the data may be contract processors.

 Storage duration:

Data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards they will be deleted.

 Provision is mandatory or necessary:

The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we cannot send you our newsletter without existing consent.

Contact form

The nature and purpose of the processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to enter a valid e-mail address and your name. This is used to assign the enquiry and to subsequently answer it. The specification of further data is optional.

 Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 letter f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

If you contact us in order to request an offer, the data entered in the contact form will be processed for the purpose of implementing pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

 Receiver:

Recipients of the data may be contract processors.

 Storage duration:

Data will be deleted at the latest 6 months after processing the request.

If a contractual relationship is established, we are subject to the legal retention periods according to HGB and delete your data after these periods have expired.

 Provision is mandatory or necessary:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your e-mail address and the reason for the request.

Use of Google Analytics

The nature and purpose of the processing:

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: „Google“). Google Analytics uses „cookies“, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

The purposes of the data processing are to evaluate the use of the website and to compile reports on activities on the website. On the basis of the use of the website and the Internet, further related services are then to be provided.

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 para. 1 letter a GDPR).

Receiver:

The recipient of the data is Google as the processor of the order. We have concluded the corresponding contract with Google for this purpose.

 Storage duration:

The data will be deleted as soon as they are no longer required for our recording purposes.

 Transfer to third countries:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

 Provision is mandatory or necessary:

The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

 Revocation of consent:

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This will install an opt-out cookie on your device. This will prevent Google Analytics from tracking this website and this browser in the future as long as the cookie remains installed in your browser.

 

Profiling:

With the help of the tracking tool Google Analytics, the behaviour of visitors to the website can be evaluated and their interests analysed. For this purpose we create a pseudonymous user profile.

Embedded YouTube videos

The nature and purpose of the processing:

On some of our websites we embed YouTube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter „YouTube“). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This will tell YouTube which pages you visit. If you are logged in to your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by first logging out of your YouTube account.

If a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s data protection declarations, where you will also find further information on your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

 Legal basis:

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

 Receiver:

The call to YouTube automatically triggers a connection to Google.

 Storage period and revocation of consent:

If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

Further information on data protection at „YouTube“ can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/

 

Transfer to third countries:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision is mandatory or necessary:

The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Social plugins

The nature and purpose of the processing:

We offer you the possibility of using so-called „social media buttons“ on our website. To protect your data, we rely on the „Shariff“ solution for implementation. This means that these buttons are integrated on the website merely as graphics, which contain a link to the corresponding website of the button provider. By clicking on the graphic, you will be forwarded to the services of the respective provider. Only then will your data be sent to the respective provider. If you do not click on the graphic, there will be no exchange between you and the social media button providers. Information on the collection and use of your data in the social networks can be found in the respective terms of use of the respective providers. You can find more information about the Shariff solution here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

We have integrated the social media buttons of the following companies on our website:

Google AdWords

The nature and purpose of the processing:

Our website uses Google Conversion Tracking. The operating company of Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement placed by Google, Google Adwords will place a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages of our website and the cookie has not expired, we and Google can recognise that the user has clicked on the ad and been redirected to that page. Each Google AdWords customer receives a different cookie. As a result, cookies cannot be tracked across the websites of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for advertisers who have opted in to conversion tracking. The customers will know the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

 Legal basis:

The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

 Receiver:

Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.

Our company does not contain any information from Google that could be used to identify the person concerned.

 Storage duration:

These cookies expire after 30 days and are not used for personal identification.

 Transfer to third countries:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

 Revocation of consent:

If you do not wish to participate in tracking, you can refuse the necessary setting of a cookie – for example, by changing your browser settings to generally disable the automatic setting of cookies or to set your browser to block cookies from the domain „googleleadservices.com“.

Please note that you may not delete the opt-out cookies as long as you do not wish to record measurement data. If you have deleted all your cookies in your browser, you will have to set the respective opt-out cookie again.

 

Provision is mandatory or necessary:

The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Changes to our privacy policy

We reserve the right to adapt this data protection declaration so that it always meets the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration then applies to your renewed visit.

Questions to the Data Protection Officer

If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organisation directly: privacy@expido.net