Privacy and Technical Tools

Name and Address of the Responsible Party

The responsible party in the sense of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Dietmar Bendheimer

WiSo Executive Academy (WFA)
An institute of the Friedrich-Alexander University Erlangen-Nuremberg

Marienbergstraße 92

90411 Nuremberg

​Phone: +49 911 98 16 94 93

Email: bendheimer@wfa-akademie.de

General Data Processing Information

​Scope of the Processing of Personal Data

We only process personal data of our users insofar as this is necessary to provide a functioning website as well as our content and services. The processing of personal data of our users is regularly only carried out with the user’s consent. An exception applies in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by statutory regulations.

Legal Basis for the Processing of Personal Data

Insofar as we obtain the consent of the data subject for processing operations of personal data, Article 6(1)(a) EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures. Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Article 6(1)(f) GDPR serves as the legal basis for processing.

Data Erasure and Storage Duration

The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned norms expires unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

Use of Cookies

Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consent.

Borlabs Cookie does not process any personal data.

The borlabs cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again.

Your cookie settings

​Beschreibung und Umfang der Datenverarbeitung

Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is revisited. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

• Language Settings
• Log-In-Information

The user data collected in this way is pseudonymized by technical precautions. Therefore, assigning the data to the calling user is no longer possible. The data is not stored together with other personal data of users. When our website is accessed, users are informed by an information banner about the use of cookies for analytical purposes and referred to this privacy policy. In this context, there is also an indication of how the storage of cookies in the browser settings can be prevented.

Legal Basis for Data Processing

The use of analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offer. In these purposes lies our legitimate interest in processing personal data according to Article 6(1)(f) GDPR.

Purpose of Data Processing

The use of analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offer. In these purposes lies our legitimate interest in processing personal data according to Article 6(1)(f) GDPR.

Duration of Storage, Objection, and Removal Option

Cookies are stored on the user’s computer and transmitted by it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Newsletter

Description and Scope of Data Processing

You can subscribe to a newsletter on our website. We need your email address for this. In addition, we must ensure, in compliance with the relevant legal requirements, that you are indeed the owner of the specified email address and wish to receive the newsletter. Therefore, we collect information that allows such verification. The data collected in this context is used for sending and receiving the newsletter. They serve no other purpose and will not be passed on to third parties. Apart from the information necessary for sending the newsletter, no other data is collected on our part. Since the dispatch and receipt of the newsletter depend on your consent, you can revoke this consent to the collection and storage of your data at any time without giving reasons. Use the “unsubscribe” link provided in the newsletter for this purpose.

Legal Basis for Data Processing

The legal basis for processing the data after the user subscribes to the newsletter, if the user has given consent, is Article 6(1)(a) GDPR.

Purpose of Data Processing

The collection of the user’s email address serves to deliver the newsletter.

Duration of Storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. Accordingly, the user’s email address will be stored as long as the subscription to the newsletter is active.

Objection and Removal Option

The subscription to the newsletter can be canceled by the affected user at any time. There is a corresponding link in each newsletter for this purpose.

Contact Form and Email Contact

Description and Scope of Data Processing

There are contact forms available on our website, which can be used for electronic contact. The same applies to published email addresses. If a user takes this opportunity, the data entered in the input mask/email will be transmitted to us and stored. The specific data sets are listed in the respective contact forms. If there are deviations or additions from the basics and purpose and duration of storage listed here, these will be indicated in the respective contact forms. The forms on our homepage are provided by our service provider wix.com. For the purpose of transmission and processing, the data is forwarded to the servers of wix.com. There is an agreement for order data processing with the service provider.

Legal Basis for Data Processing

The legal basis for processing the data, if the user’s consent has been obtained, is Article 6(1)(a) GDPR. The legal basis for processing the data transmitted in the course of sending an email is Article 6(1)(f) GDPR.

Purpose of Data Processing

The processing of the personal data from the input masks of the form for requesting information about study programs and a consultation appointment serves us solely to process the respective requests. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.

Duration of Storage

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. For the personal data from the input masks of the forms and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is considered to have ended when it can be inferred from the circumstances that the relevant issue has been conclusively resolved.

Objection and Removal Option

The user has the option at any time to revoke their consent to the processing of personal data. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot continue. All personal data stored in the course of contact will be deleted in this case.

Google Analytics

Description and Scope of Data Processing

This website integrates Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on users’ computers and allow an analysis of their use of the website. The information generated by the cookie about the use of this website by the users is usually transmitted to a Google server in the USA and stored there. IP anonymization has been activated on this website, so the IP address of users by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area will be shortened beforehand. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website by users, to compile reports on website activities, and to provide other services related to website use and internet use to the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data.

Objection and Removal Option

You can prevent the storage of cookies by setting your browser software accordingly; however, this offer points out to users that in this case, you may not be able to use all the functions of this website to their full extent. Users can also prevent the collection of data generated by the cookie and related to their use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link.

SSL Encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. An encrypted connection is indicated by the browser’s address line switching from “http://” to “https://” and the lock symbol in your browser line. When SSL encryption is activated, the data you transfer to us cannot be read by third parties.

Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the responsible party:

​

Right to Information

You can request confirmation from the responsible person about whether personal data concerning you is being processed by us. If such processing is available, you can request information from the responsible person about the following:

1. the purposes for which the personal data are processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been disclosed or are still being disclosed;
4. the planned duration of storage of your personal data or, if specific information on this is not possible, criteria for determining the storage duration;
5. the existence of a right to correction or deletion of personal data concerning you, a right to restriction of processing by the responsible person or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. all available information about the origin of the data if the personal data are not collected from the data subject;
8. the existence of automated decision-making including profiling according to Article 22(1) and (4) GDPR

and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject. You have the right to request information about whether your personal data is transferred to a third country or an international organization. In this context, you can request the appropriate guarantees according to. Art. 46 GDPR to be informed in connection with the transmission. This right of access may be limited insofar as it is likely to make the realization of the research or statistical purposes impossible or seriously impair it and the limitation is necessary for the fulfillment of the research or statistical purposes.

Right to Rectification

You have a right to rectification and/or completion against the responsible person if the processed personal data concerning you are incorrect or incomplete. The responsible person must make the correction immediately. Your right to correction may be limited insofar as it is likely to make the realization of the research or statistical purposes impossible or seriously impair it and the limitation is necessary for the fulfillment of the research or statistical purposes.

Right to Restriction of Processing

Under the following conditions, you may request the restriction of processing of your personal data:

1. if you contest the accuracy of your personal data for a period enabling the responsible person to verify the accuracy of the personal data;
2. the processing is unlawful and you refuse the deletion of personal data and instead request the restriction of the use of personal data;
3. the responsible person no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
4. if you have filed an objection to processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the responsible person outweigh your reasons.

If the processing of your personal data has been restricted, these data may only be used – apart from their storage – with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or a member state. If the restriction of processing has been restricted according to the above conditions, you will be informed by the responsible person before the restriction is lifted. Your right to restriction of processing may be limited insofar as it is likely to make the realization of the research or statistical purposes impossible or seriously impair it and the limitation is necessary for the fulfillment of the research or statistical purposes.

Right to Deletion

Deletion Obligation

You may request the responsible person to delete your personal data immediately, and the responsible person is obliged to delete this data immediately if one of the following reasons applies: The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed. You revoke your consent, on which the processing was based according to. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing. According to. Art. 21 para. 1 GDPR, you object to the processing and there are no prior justifiable reasons for the processing, or you lodge an objection against the processing pursuant to Art. 21 para. 2 GDPR. Your personal data was processed unlawfully. The deletion of personal data concerning you is required to fulfill a legal obligation under Union or Member State law to which the responsible person is subject. The personal data concerning you were collected in relation to offered services of the information society according to. Art. 8 para. 1 GDPR.

Information to Third Parties

If the responsible person has made the personal data concerning you public and is obliged to delete it according to Art. 17 para. 1 GDPR, he shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

​Exceptions

The right to deletion does not exist insofar as the processing is necessary

1. to exercise the right to freedom of expression and information;
2. to fulfill a legal obligation required for processing under the law of the Union or of the Member States to which the responsible person is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the responsible person;
3. for reasons of public interest in the area of public health according to Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;
4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 para. 1 GDPR, insofar as the law referred to under section “Deletion obligation” is likely to make the realization of the objectives of this processing impossible or seriously impair it, or
5. for the establishment, exercise, or defense of legal claims.

Right to Information

If you have asserted the right to rectification, deletion or restriction of processing against the responsible person, he/she is obliged to notify all recipients to whom the personal data concerning you was disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right against the responsible person to be informed about these recipients.

Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the responsible person, in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another responsible person without hindrance by the responsible person to whom the personal data was provided, insofar as

1. the processing is based on consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract according to Art. 6 para. 1 lit. b GDPR
2. and the processing is carried out using automated methods.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one responsible person to another responsible person, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected by this. The right to data portability does not apply to processing personal data necessary for the performance of a task in the public interest or in the exercise of official authority vested in the responsible person.

Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. The responsible person will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility, in the context of the use of services of the information society – notwithstanding Directive 2002/58/EC – to exercise your right of objection by automated means using technical specifications. You also have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you, which is carried out for scientific or historical research purposes or for statistical purposes according to Art. 89 para. 1 GDPR. Your right to object may be limited insofar as it is likely to make the realization of the research or statistical purposes impossible or seriously impair it and the limitation is necessary for the fulfillment of the research or statistical purposes.

Right to Revoke the Data Protection Consent Declaration

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Automated Decision in Individual Cases Including Profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. is necessary for entering into, or performance of, a contract between you and a data controller,
2. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable
3. occurs with your explicit consent.

However, these decisions must not be based on special categories of personal data according to Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and adequate measures have been taken to protect the rights and freedoms as well as your legitimate interests. In respect of the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express one’s own point of view, and to contest the decision.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcomes of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.