Privacy Policy

1. Information on the collection of personal data 

(1) Below, we provide information on the collection of personal data when you use our website. Personal data refers to any data that can be linked to you personally, e.g. name, address, email address, user behaviour. 

The data controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is HSD Hochschule Döpfer GmbH, Hermannswerder 8b, 14473 Potsdam (see also our legal notice).

You can contact our Data Protection Officer at datenschutzbeauftragter@doepfer-schulen.de, by telephone on 0911 2742888-0, or at our postal address, adding ‘the Data Protection Officer’ to your correspondence.

(2) When you contact us by email, we will store the data you provide (your email address, and, where applicable, your name and telephone number) in order to answer your enquiries. Insofar as your enquiry relates to an existing contractual relationship between you and us, or if you are interested in entering into a contract, the data processing referred to above is carried out on the legal basis of Article 6(1), first sentence, point (b) of the GDPR. Otherwise, processing takes place in accordance with Article 6(1), first sentence, point (f) of the GDPR on the basis of our legitimate interest in being able to respond to your enquiry with the information relevant to you. We will delete the data collected in this context once storage is no longer necessary, or restrict processing where statutory retention obligations apply.

(3) If we use contracted service providers for specific functions of our service or wish to use your data for marketing purposes, we will provide you with detailed information on the respective processes below. In doing so, we will also specify the criteria for the retention period.

2. Rights

(1) You have the following rights in relation to us regarding your personal data:

• Right of access,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability.

(2) You also have the right to lodge a complaint with your competent data protection supervisory authority regarding our processing of your personal data.

The State Commissioner for Data Protection and the Right of Access
to Files Stahnsdorfer Damm 77
14532 Kleinmachnow

Telephone: 033203/356-0
Fax: 033203/356-49
Email: Poststelle@LDA.Brandenburg.de

3. Collection of personal data when visiting our website

(1) When you visit our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each instance
• Website from which the request originates
• Browser
• Operating system and its user interface
• Language and version of the browser software.

The legal basis for the processing of this data is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the website is technically error-free and user-friendly, as well as in maintaining the stability and security of our systems. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your identity. The data mentioned above will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the purpose of providing the website, the data will be deleted at the end of the respective session. For the purpose of analysing log files (e.g. to investigate misuse or fraudulent activity), the data will be deleted after 7 days at the latest. Storage beyond this period for evidential purposes is possible.

(2) In addition to the data mentioned above, cookies or similar storage technologies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and associated with the browser you are using, and through which certain information is transmitted to the party setting the cookie (in this case, us). Cookies cannot run programmes or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.

(3) Use of cookies: 

a) This website uses transient (see b) and persistent cookies (see c), the scope and functioning of which are explained below:

b) Transient cookies are stored temporarily for the duration of a session (session cookies) and are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are stored on your device for a longer period. The storage period for persistent cookies may vary depending on the cookie.

d) The cookies originate either from us or from third-party providers (so-called ‘third-party cookies’). Further information on which specific cookies or similar technologies we use can be found in the Cookie Consent Manager (under the cookie settings), where they are described in more detail.

e) Cookies that are not strictly necessary to provide the services on our website will only be set once you have given your consent in accordance with Section 25(1) of the TDDDG in conjunction with Article 6(1), first sentence, point (a) of the GDPR. You may withdraw your consent at any time. Furthermore, you may adjust your cookie settings (link to cookie settings) at any time in accordance with your preferences (e.g. to accept third-party cookies or to refuse all cookies) or disable cookies generally in your browser. Please note that doing so may mean you are unable to use all the features of this website.

4. Objection to or withdrawal of consent for the processing of your data

(1) If you have given your consent to the processing of your data, you may withdraw this consent at any time. Such a withdrawal will affect the lawfulness of the processing of your personal data from the moment you notify us of it.

(2) Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case, in particular, where the processing is not necessary for the performance of a contract with you, as we will explain in each instance in the following description of the functions. If you exercise such a right to object, we ask that you explain the reasons why we should not process your personal data in the manner we have been doing. In the event of a justified objection, we will examine the circumstances and either cease or adjust the data processing, or explain to you our compelling legitimate grounds on the basis of which we will continue the processing.

5. Google Tag Manager

(1) We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’), to centrally manage and implement various analytics and marketing tools on our website. Google Tag Manager and the tags it controls are only activated if you give your consent.

(2) Google Tag Manager does not itself process any personal data. Google Tag Manager merely triggers other tags, which may in turn collect data. We will inform you about these processing operations later in this privacy policy in relation to the respective service.

(3) Google also processes your personal data in the USA and, in this instance, has submitted to the EU-US Data Privacy Framework to ensure the protection of your data in accordance with the European Union’s data protection regulations.

(4) Further information on Google Tag Manager can be found at: https://marketingplatform.google.com/about/tag-manager

(5) The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the GDPR, which we obtain via our Cookie Consent Manager. You may withdraw your consent at any time via the cookie settings, without this affecting the lawfulness of the processing carried out prior to the withdrawal.

6. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offering and make it more interesting for you as a user.

(2) Google Analytics uses cookies, device/browser data, IP addresses and website or app activity to enable the analysis of your use of the website. As part of Google Analytics, we also use the ‘Google Signals’ feature. This enables cross-device analysis of user interactions, provided you have enabled personalised advertising in your Google Account. In particular, this allows information on various devices and user interactions to be combined and analysed in aggregated form. Google Analytics also records your anonymised IP address to ensure the security of the service and to provide information about the region of the respective user. As IP anonymisation is enabled by default, your IP address is truncated within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area before the data is further processed.

(3) The information regarding your use of this website and the anonymised IP addresses is generally transmitted to a Google server in the USA and processed there. In such cases, Google has submitted to the EU–US Privacy Framework, www.dataprivacyframework.gov.

(4) On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. We have entered into a corresponding data processing agreement with Google.

(5) The legal basis for the use of Google Analytics is the consent you have given, in accordance with Article 6(1)(a) of the GDPR, which we obtain via our Cookie Consent Manager. You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out prior to withdrawal. The easiest way to withdraw your consent is via our cookie settings.

(6) You can prevent the collection and processing of your data by Google Analytics by adjusting the settings in your browser software accordingly. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: tools.google.com/dlpage/gaoptout.

(7) Further information on Google Analytics can be found in the Terms of Service at www.marketingplatform.google.com/about/analytics/terms/de.html; information on data processing when using Google Analytics can be found at: support.google.com/analytics/answer/6004245. General information on data processing can be found in Google’s Privacy Policy at: www.google.de/intl/de/policies/privacy.

7. Links to YouTube videos

(1) We have included links to YouTube videos in our online content, which are stored on www.YouTube.com and can be played there. These are all embedded in ‘enhanced privacy mode’, meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos is the data referred to in paragraph (2) transmitted. We have no control over this data transmission. The legal basis for displaying the videos is your consent, in accordance with Article 6(1)(a) of the GDPR.

(2) When you visit the website, YouTube receives the information that you have accessed the relevant subpage of our website. In addition, the data specified in point 3 of this statement is transmitted. This occurs regardless of whether you are logged in via a YouTube user account or do not have a user account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your YouTube profile, you must log out before clicking the button. YouTube processes your data (even for users who are not logged in) to create user profiles and uses it for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such analysis is carried out in particular to provide personalised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube directly.

(3) Google also processes your personal data in the USA and, in such cases, has submitted to the EU-US Data Privacy Framework, www.dataprivacyframework.gov.

(4) Further information on the purpose and scope of data collection and its processing by YouTube can be found in their privacy policy. There you will also find further information on your rights and the settings available to protect your privacy: www.google.de/intl/de/policies/privacy.

8. The University of Applied Sciences Döpfer’s social media channels

8.1 Facebook

(1) We maintain a social media presence on the Facebook platform. To this end, we utilise the technical platform and services provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter ‘Meta’).

(2) Data processed by Facebook When you visit our Facebook page, Meta automatically records your IP address. According to Meta, your IP address is anonymised. Meta also stores information about its users’ devices (e.g. as part of the ‘login notification’ feature). This may enable Meta to associate IP addresses with individual users. In addition, Meta uses so-called cookies, which are stored on your device when you visit our fan page, even if you do not have your own Facebook profile or are not logged into it whilst visiting our fan page. These cookies enable Meta to create user profiles based on your preferences and interests and to display content or advertising tailored to you (both on and off Facebook). Cookies remain on your device until you delete the cookies stored on your device, close your browser and restart it. Further details can be found in Facebook’s general privacy policy at: https://www.facebook.com/about/privacy

(3) Facebook Insights 

Meta provides us, as the operator of our Facebook page, with anonymised information about the use of our Facebook page, which enables us to gain insights into the types of actions carried out by people on our page (so-called ‘Page Insights’). These include, for example, the total number of page views, ‘Likes’, page activity, post interactions, video views, post reach, comments, shared content, the proportion of men and women, and the origin of visitors by country and city, as well as language. As page owners, we do not have access to personal data, but only to the aggregated, anonymised Page Insights. Meta and we are joint controllers for the processing of Insights data. The legal basis for data processing is Article 6(1)(f) of the GDPR (‘legitimate interest’), as we use the Insights data to improve the user experience when visiting our Facebook page. Our aim is to make the page more attractive to our visitors. We have entered into an agreement with Meta regarding processing as joint controllers in accordance with Article 26 of the GDPR, which sets out the allocation of data protection obligations between us and Meta. Details of the agreement concluded between Meta and us can be found at: www.facebook.com/legal/terms/page_controller_addendum The data collected about you in this context is processed by Meta Platforms Ireland Ltd. and may be transferred to countries outside the European Union. The transfer of data to Meta Platforms Inc., the US parent company of Meta Platforms Ireland Ltd., takes place on the basis of the EU-US Data Privacy Framework. With regard to this data processing, you may exercise your data subject rights under the GDPR either with Meta or with us. In accordance with the Page Insights Addendum, Meta has undertaken to fulfil all obligations under the GDPR with regard to the processing of Insights data. In particular, Meta Platforms Ireland makes the Page Insights Supplement available to data subjects (available at www.facebook.com/legal/terms/page_controller_addendum). We forward enquiries from users regarding data processing when visiting our Facebook page to Meta in accordance with the Page Insights Addendum. Further information on your rights as a data subject can be found in section 2 of this privacy policy and at www.facebook.com/policy.php

(4) Contacting us If you contact us via our Facebook page, we will process the personal data that you have provided to us via our social media presence. We act as the sole data controller for this processing. This may include your account name, your contact details or other messages. The legal basis for data processing following user interaction with the content on our Facebook page is Article 6(1)(f) of the GDPR.

8.2 Instagram

(1) We maintain a social media presence on the Instagram platform. To this end, we use the technical platform and services provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter ‘Meta’). 

(2) Data processed by Instagram

When you visit our Instagram page, Meta automatically records your IP address. According to Meta, your IP address is anonymised. Meta also stores information about its users’ devices (e.g. as part of the ‘login notification’ feature). This may enable Meta to associate IP addresses with individual users. In addition, Meta uses so-called cookies, which are stored on your device when you visit our profile, even if you do not have your own Instagram profile or are not logged into it whilst visiting our profile. These cookies enable Meta to create user profiles based on your preferences and interests and to display content or adverts tailored to you (both on and off Instagram). Cookies remain on your device until you delete the cookies stored on your device, close your browser and restart it. Further details can be found in Instagram’s Privacy Policy at: https://help.instagram.com/155833707900388

(3) Instagram Insights

Meta provides us, as the operator of our Instagram page, with anonymised information about the use of our Instagram page, which enables us to gain insights into the types of actions carried out by users on our page (so-called ‘Page Insights’). These include, for example, the total number of page views, ‘Likes’, page activity, post interactions, video views, post reach, comments, shared content, the proportion of men and women, location by country and city, and language. As page owners, we do not have access to personal data, but only to the aggregated, anonymised Page Insights. Meta and we are joint controllers for the processing of Insights data. The legal basis for data processing is Article 6(1)(f) of the GDPR (‘legitimate interest’), as we use the Insights data to improve the user experience when visiting our fan page. Our aim is to make the page more attractive to our visitors. We have entered into an agreement with Meta regarding processing as joint controllers in accordance with Article 26 of the GDPR, which sets out the allocation of data protection obligations between us and Meta. Details of the agreement concluded between Meta and us can be found at: www.facebook.com/legal/terms/page_controller_addendum The data collected about you in this context is processed by Meta Platforms Ireland Ltd. and may be transferred to countries outside the European Union. The transfer of data to Meta Platforms Inc., the US parent company of Meta Platforms Ireland Ltd., takes place on the basis of the EU-US Data Privacy Framework. With regard to this data processing, you may exercise your data subject rights under the GDPR either with Meta or with us. In accordance with the Page Insights Addendum, Meta has undertaken to fulfil all obligations under the GDPR with regard to the processing of Insights data. In particular, Meta Platforms Ireland makes the Page Insights Supplement available to data subjects (available at www.facebook.com/legal/terms/page_controller_addendum). We forward enquiries from users regarding data processing when visiting our Instagram page to Meta in accordance with the Page Insights Supplement. Further information on your rights as a data subject can be found in section 2 of this privacy policy and at https://help.instagram.com/155833707900388

(4) Contacting us

If you contact us via our Instagram page, we will process the personal data that you have provided to us via our social media presence. We act as the sole data controller for this processing. This may include your account name, your contact details or other messages. The legal basis for data processing following user interaction with the content on our Instagram page is Article 6(1)(f) of the GDPR. 

8.3 LinkedIn

(1) We maintain a social media presence at www.linkedIn.de. To this end, we use the technical platform and services provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn).

(2) When you visit our LinkedIn page, follow our page or otherwise engage with our page, LinkedIn processes personal data in order to provide us, in anonymised form, with statistics and insights that enable us to gain an understanding of the types of actions undertaken by individuals on our page (so-called ‘Page Insights’). To this end, LinkedIn processes, in particular, data that you have already provided to LinkedIn via the information in your profile, such as job title, country, sector, years of service, company size and employment status. In addition, LinkedIn processes information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. As the page owners, we do not have access to the personal data, but only to the aggregated, anonymised Page Insights. This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest. Analysing the types of actions taken on our LinkedIn company page serves to improve our company page based on these insights. The legal basis for this processing is Article 6(1)(f) of the GDPR. We have entered into an agreement with LinkedIn regarding processing as joint controllers in accordance with Article 26 of the GDPR, which sets out the allocation of data protection obligations between LinkedIn and us. Details of the agreement concluded between LinkedIn and us can be found at legal.linkedin.com/pages-joint-controller-addendum. LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn using the contact details provided in its privacy policy. You may also exercise your rights in relation to the processing of personal data within the context of Page Insights directly with us. We will forward any enquiries from users regarding data processing when visiting our LinkedIn profile to LinkedIn. LinkedIn also processes personal data in the USA or other third countries. According to its own statements, LinkedIn only transfers personal data to countries for which an adequacy decision has been issued by the European Commission pursuant to Article 45 of the GDPR, or on the basis of appropriate safeguards pursuant to Article 46 of the GDPR. Further information on your rights can be found in section 2 of this privacy policy.

9. Integration of Google Maps

(1) We use Google Maps on this website. This enables us to display interactive maps directly on the website and allows you to use the map function conveniently. The legal basis for the use of Google Maps is Article 6(1)(a) of the GDPR; in other words, the integration takes place only with your consent.

(2) When you visit the website, Google receives information that you have accessed the relevant page of our website. In addition, the data specified in point 3 above of this policy is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before clicking the button. Google processes your data (even for users who are not logged in) to create user profiles and uses this data for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such analysis is carried out in particular to provide personalised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

(3) Google also processes your personal data in the USA and has submitted to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/list.

(4) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and the settings available to protect your privacy: www.google.de/intl/de/policies/privacy.

10. Meta Pixel

(1) Furthermore, the website uses the Meta Pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (‘Meta’). By integrating this into our website, we are able to display our advertising campaigns (“Meta Ads”) to users of our website and the social networks operated by Meta (Facebook and Instagram), and to measure and evaluate their effectiveness (“Conversion Tracking”). This connection between Meta and our website is technically established via the ‘Meta Pixel’. The Meta Pixel enables the collection of data relating to visits to our website, including the web pages visited, click behaviour, and device and browser information. The legal basis for the processing of your data is Article 6(1)(a) of the GDPR; in other words, integration takes place only with your consent.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection to Meta’s server. Meta thereby receives the information that you have accessed the relevant page on our website or clicked on one of our adverts. If you are registered with a Meta service, Meta may associate your visit with your account. Even if you are not registered with Meta or have not logged in, it is possible that Meta may collect information about your visit to our website and use it to create a profile.

(3) The information collected is stored on Meta’s servers, including those in the USA. In such cases, the provider has submitted to the EU-US Data Privacy Framework and has undertaken to comply with the European Union’s data protection regulations when transferring data internationally.

(4) You may withdraw your consent at any time via the cookie settings, without this affecting the lawfulness of the processing carried out prior to withdrawal. In addition, logged-in users may object via the provider’s function within the relevant social network.

(5) Furthermore, we use the ‘Custom Audiences’ remarketing feature, which also utilises the Meta Pixel. This enables interest-based advertisements (‘Facebook Ads’) to be displayed to users of the website whilst they are visiting the social network Facebook or other websites that also use this feature. Our aim in doing so is to show you adverts that are of interest to you, in order to make our website more appealing to you and to market our services.

(6) Further information on data processing by Meta is available at www.facebook.com/about/privacy.

11. Google Marketing Platform

(1) We use the Google Marketing Platform, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The Google Marketing Platform comprises various marketing tools that help us to plan, run and manage advertising campaigns and evaluate their success.

(2) Google also processes your personal data in the USA and, in such cases, has submitted to the EU-US Data Privacy Framework to ensure the protection of your data in accordance with the data protection regulations of the European Union.

(3) Further information can be found at: policies.google.com/privacy (4) The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the GDPR, which we obtain via our Cookie Consent Manager. You may withdraw your consent at any time via the cookie settings, without this affecting the lawfulness of the processing carried out prior to withdrawal.

12. Use of Google Ads and remarketing

(1) We use the Google Ads service to draw attention to our offers through advertisements. If you access our website via a Google advert, Google Ads will set a cookie on your device. The data collected in this way is processed on the basis of Article 6(1)(a) of the GDPR, i.e. the service is only used with your consent.

(2) The adverts are delivered via Google’s so-called ad servers. Ad server cookies are used for this purpose, which enable certain metrics to be recorded for measuring success, such as how often adverts are displayed or clicked on by users. The Google Ads cookies set via our website enable us to obtain statistical information about the success of our advertising campaigns. These cookies are not intended to identify you personally. As a rule, analytical data such as a unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for so-called post-view conversions) and information about a possible opt-out are stored.

(3) The cookies set allow Google to recognise your browser. If you visit certain pages on a Google Ads client’s website and the cookie stored on your device is still valid, Google and the relevant client can track that you clicked on an advert and were redirected to the corresponding page. Each Ads customer is assigned an individual cookie, so tracking does not take place across the websites of different customers. Through the integration of Google Ads, Google receives the information that you have visited a specific section of our website or clicked on one of our adverts. If you are registered with a Google service, Google can associate the visit with your user account. Even if you are not registered with or logged in to Google, the provider may be able to identify and store your IP address.

(4) The use of these marketing tools automatically establishes a direct connection between your browser and Google’s servers. We ourselves do not collect any personal data as part of the aforementioned advertising measures, but merely enable Google to collect data. We receive only statistical reports from Google showing which adverts were clicked on, how often, and at what prices. We do not receive any further information about individual users; in particular, we are unable to identify individuals on the basis of this information.

(5) You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of data processing carried out prior to the withdrawal. The easiest way to adjust or withdraw your consent is via our cookie settings or by making the relevant adjustment in your browser.

(6) We use Google Ads in conjunction with the additional Google Remarketing feature. This is a method we use to target you again. Through this feature, our adverts may be displayed to you whilst you continue to browse the internet after visiting our website. This is achieved using cookies stored in your browser, which Google uses to record and analyse your browsing behaviour when visiting various websites. This enables Google to identify your previous visit to our website.

(7) According to Google’s own statements, the data collected as part of remarketing is not combined with your personal data, which may be stored by Google. In particular, Google states that pseudonymisation is used for remarketing.

(8) The legal basis for the processing of your data is your consent, Article 6(1)(a) of the GDPR. You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out prior to the withdrawal. You can withdraw your consent via our cookie settings or by adjusting the relevant settings in your browser.

(9) Further information on data processing by Google can be found in the data protection overview: www.google.com/intl/de/analytics/learn/privacy.html, and in the privacy policy: www.google.de/intl/de/policies/privacy.

13. Ordering information material online and registering for information events
On our website, you can order information material about our services free of charge or register to attend an information event. When placing an order, the following personal data from the input form is transmitted to us (legal basis, where the user has given consent: Article 6(1)(a) of the GDPR):

• Title
• First name and surname
• Postal address (if you wish to receive the information material by post)
• Email address
• Telephone number (if applicable)

The following data is also collected during registration: the IP address of the computer used to access the site, and the date and time of registration.

You also have the option to consent to us sending you information about events, research surveys and educational programmes by post, telephone or email.

(2) Your consent to the processing of your data is obtained as part of the registration process, and reference is made to this privacy policy. The provision of this information is subject to your express consent in accordance with Article 6(1)(a) of the GDPR. You may object to receiving further information at any time by contacting our Data Protection Officer.

(3) No data will be disclosed to third parties in connection with the data processing required for sending out information material or for our information events. The data will be used exclusively for sending out information material or for participation in an information event. The collection of the user’s first name, surname, postal address and email address serves the purpose of delivering the information material. The collection of other personal data as part of the registration process serves to prevent misuse of the services or of the email address provided.

(4) The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected, unless you have consented to its continued use for the purpose of sending you information about our educational programmes. The user’s first name and surname, postal address and email address will therefore be stored until the information material or the email containing the access link to the event has been sent. Any other personal data collected as part of the ordering process is generally deleted after a period of seven days.

14. Applying via the online form

(1) On our website, you can submit an application for a degree programme using the online application form. When you apply, the following data from the input form is transmitted to us (legal basis, where the user has given their consent: Article 6(1)(a) and (b) of the GDPR):

• Title
• First name and surname
• Postal address
• Email address
• Telephone number
• Nationality
• Date and place of birth
• Chosen degree programme
• Start date of studies
• Preferred university location
• Type of university entrance qualification
• School education
• Vocational training
• Previous higher education history
• Professional career
• Further details from your CV (including photo)
• Grades from previous school, vocational and higher education
• Any comments entered regarding the application
• Information on the source of information used to choose a higher education institution 

In addition, the following data is collected upon registration: the IP address of the computer used to access the site, and the date and time of registration.

(2) Data processing is carried out for the purpose of conducting the application process and preparing for enrolment at the University of Applied Sciences in accordance with Article 6(1)(b) of the GDPR. For the processing of data provided voluntarily, your consent is sought as part of the registration process and reference is made to this privacy policy.

(3) Data is processed by third parties in connection with the online application. The data is processed by Trainings-Online Gesellschaft für E-Portale mbH, Gartenstr. 11, 33604 Bielefeld, on behalf of HSD Hochschule Döpfer under a data processing agreement, and made available in the University of Applied Sciences’ Trainex software for further processing. The collection of all data serves the purpose of processing the submitted application and preparing for enrolment at the University of Applied Sciences. The University of Applied Sciences is also legally obliged to collect this data and to transmit it to the relevant ministries of the State of Brandenburg within the framework of the law.

(4) The data will only be retained and stored for as long as it is required for university administration or as long as a statutory retention obligation applies. The relevant data sets may be amended or completely deleted at any time, provided that no statutory retention obligation prevents this. Furthermore, we will provide you with information about the data held upon request. To this end, you may contact our Data Protection Officer at any time. Please refer to section 1 of this privacy policy.

15. LiveChat powered by text

(1) We use the LiveChat software on our website to enable you to communicate with us in real time. The service is provided by Text, Inc., 101 Arch Street, 8th Floor, Boston MA 02110, USA.

(2) When you use our online chat, the data you enter (e.g. name, email address, telephone number and the content of your message) will be processed. In addition, technical data such as your IP address, the date and time of your enquiry, and information about the browser or device you are using may be collected. This data is processed for the purpose of handling your enquiry and for the provision and improvement of our customer service.

(3) Processing is carried out exclusively on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect, for example via our cookie settings or by adjusting the relevant settings in your browser.

(4) LiveChat also processes your data in the USA, amongst other places. In this case, LiveChat has committed to complying with the EU–US Privacy Framework.

(5) Further information can be found in LiveChat’s privacy policy at: www.livechat.com/legal/privacy-policy/

16. Microsoft Advertising Remarketing

(1) We use the remarketing function of the Microsoft Advertising service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft Advertising enables us to place adverts on search engines such as Bing and within the Microsoft advertising network.

(2) In this context, we use Microsoft Advertising’s ‘conversion tracking’ on our website. This involves embedding a tracking code, known as the Universal Event Tracking (UET) tag, on our website. If you arrive at our website via a Microsoft Advertising advert, this technology enables us to track how users interact with our website. For example, it can record which advert or search term brought you to our website, which pages you visit, or what actions you carry out on our website. This information helps us to analyse the effectiveness of our advertising campaigns and to optimise our content and marketing activities.

(3) For this purpose, cookies are stored on your device when you visit our website, provided you have given your consent via our Cookie Consent Manager. These cookies enable your browser to be recognised when you subsequently visit websites within the Microsoft Audience Network and allow information about your usage behaviour to be collected. This may include, for example, details of pages visited, interactions with our website, or technical information about your browser and device. We receive only statistical analyses from Microsoft, which do not allow any direct identification of you as an individual. If you arrive at our website via an advert from Microsoft Advertising, a cookie is also set which is used to recognise users across various Microsoft services. If you have a Microsoft account and are logged in, Microsoft may associate your visit with your user account. Even if you are not logged in, it is possible that Microsoft may recognise and store your IP address.

(4) Processing takes place exclusively on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect, for example via our cookie settings or by adjusting the relevant settings in your browser.

(5) Microsoft also processes your data in the USA, amongst other places. In this case, Microsoft has committed to the EU-US Privacy Framework and also uses standard contractual clauses approved by the European Commission in accordance with Article 46 of the GDPR to ensure an adequate level of data protection when transferring personal data to third countries.

(6) Further information can be found in Microsoft’s privacy policy at www.microsoft.com/de-de/privacy/privacystatement

17. Use of ActiveCampaign

We use the ActiveCampaign service to manage emails relating to customers and prospective customers, and to send registration confirmations for events, information material, promotional emails and other data relating to transactions with customers and prospective customers (hereinafter referred to as ‘customer and transaction data’). The provider of this service is ActiveCampaign LLC, 1 N Dearborn St STE 500, Chicago, IL 60602, USA (hereinafter “ActiveCampaign”). When managing customer and transaction data, personal data is transferred to ActiveCampaign’s servers in the USA. This includes your name, address and contact details, as well as your email address. To ensure that the data we transfer to ActiveCampaign is handled in accordance with the law, ActiveCampaign has adhered to the EU-US Data Privacy Framework. In addition, we have concluded a data processing agreement with ActiveCampaign in accordance with Article 28 of the GDPR, including the EU Standard Contractual Clauses for data transfers to third countries. The legal basis for the use of ActiveCampaign is your consent, Article 6(1)(a) of the GDPR. You may withdraw your consent at any time via the cookie settings, without this affecting the lawfulness of the processing carried out prior to withdrawal. Further information on ActiveCampaign’s handling of personal data can be found at: www.activecampaign.com/legal/privacy-policy.

18. Use of Zapier

For process automation and for forwarding customer and transaction data from ActiveCampaign to Google Sheets, the spreadsheet programme we use, we employ the automation plug-in ‘Zapier’ provided by Zapier Inc., 548 Market St. #62411, San Francisco, CA 94104-5401, USA (hereinafter “Zapier”). Zapier collects the information required to transfer customer and transaction data so that the spreadsheet programme we use can access this data. In doing so, data is transferred to Zapier’s servers in the USA. In this regard, Zapier has committed to the EU-US Privacy Shield Framework and has undertaken to comply with the European Union’s data protection regulations when transferring data internationally. To safeguard data transfers to Zapier, we have also entered into a data processing agreement in accordance with Article 28 of the GDPR, including the EU Standard Contractual Clauses for data transfers to third countries. The legal basis for using Zapier is Article 6(1), first sentence, point (f) of the GDPR, as we have a legitimate interest in using third-party services for the efficient operation and optimisation of our services. Further information on Zapier’s handling of personal data can be found at zapier.com/privacy.

19. Use of Calendly

We use the Calendly service provided by Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA (hereinafter ‘Calendly’) to book advisory appointments at HSD Hochschule Döpfer. When you book an appointment, Calendly collects your first name and surname, your telephone number and email address, as well as the subjects you are interested in. To this end, Calendly may also store cookies on your device. In doing so, data is transferred to Calendly’s servers in the USA. In this regard, Calendly has committed to the EU-US Data Privacy Framework and has undertaken to comply with the European Union’s data protection regulations when transferring data internationally. To safeguard data transfers to Calendly, we have also entered into a data processing agreement in accordance with Article 28 of the GDPR, including the EU Standard Contractual Clauses for data transfers to third countries. The legal basis for Calendly setting cookies is Article 6(1)(a) of the GDPR, provided you have given your consent via the Cookie Consent Manager. You may withdraw your consent at any time via the cookie settings, without this affecting the lawfulness of the processing carried out prior to withdrawal. Furthermore, the legal basis for the use of Calendly is Article 6(1), first sentence, point (f) of the GDPR, as we have a legitimate interest in using third-party services for the efficient operation and optimisation of our services. Further information on Calendly’s handling of personal data can be found at calendly.com/privacy.

20. Use of Typeform

We use Typeform, provided by TYPEFORM SL, C/Bac de Roda, 163 (Local), 08018 Barcelona, Spain (hereinafter ‘Typeform’), for our contact forms. This enables us to provide you with a simple way to get in touch. To this end, we pass on the following personal data to Typeform:

• Email address
• First name
• Surname
• Telephone number

Mandatory fields are marked with an *. Further details are optional.

Typeform is the recipient of your personal data and acts as a data processor on our behalf. The processing of the data specified in this section is not required by law or contract. Without your consent and the provision of your personal data, we cannot provide you with a contact form. However, you can contact us at the email address given above. The data is stored solely for the purpose of transmitting enquiries and responding to them. The mandatory fields are used to identify and respond to your enquiry.

In addition, Typeform collects the following personal data using cookies: information about your device (IP address, device information, operating system, browser settings). Furthermore, usage data is collected, such as the date and time when you used the contact form. Typeform requires this data to ensure the correct display and functionality of the contact form. This is in accordance with Typeform’s legitimate interest (pursuant to Article 6(1)(f) of the GDPR) and serves the purpose of contract performance (pursuant to Article 6(1)(b) of the GDPR). 

Further information can be found at:

Further information on your rights to object to and request the erasure of your data by Typeform can be found at: Typeform enquiry

The legal basis for this processing is your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent to the processing of your personal data at any time. You may withdraw your consent using the contact details provided. Your data will be processed for as long as the relevant consent remains in place. Withdrawing your consent does not affect the lawfulness of any processing carried out prior to such withdrawal.

21. Specialist presentations via Microsoft Teams

(1) We use the video conferencing and collaboration platform ‘Microsoft Teams’, which is part of Microsoft Office 365, to hold events in the form of specialist presentations (‘webinars’) with students, staff, external partners and other third parties. In addition, the recording and transcription functions of Microsoft Teams may be used during webinars.

(2) When participating in a webinar via Microsoft Teams, we process the following personal data of the participants:

• IP addresses
• User details (e.g. your email address, username, profile picture where applicable)
• Meeting metadata (e.g. date, time, meeting ID, telephone numbers, location)
• Communication data (text input, audio and video signals from your device) 

If the recording or transcription function of Microsoft Teams is used, the following personal data is also processed:

• Audio and voice data (where the microphone function is used)
• Video data (where the camera function is used)
• Content from presentations, screen shares or other content shared during the webinar
• Transcription data (automatically generated text transcripts)

The scope also depends on what personal data you provide before or during a meeting. If you use the chat function during a webinar, the text you enter will be processed so that it can be displayed in the webinar. To enable the display of video and the playback of audio, data from your device’s microphone and, where applicable, its video camera will be processed for the duration of the webinar. You can switch off or mute the camera or microphone yourself at any time via the ‘Microsoft Teams’ applications. Where recordings or transcripts are created, the processing of individual audio, video and transcription data may continue beyond the duration of the webinar.

(3) The processing is carried out for the purpose of planning and conducting online events (specialist presentations), communicating with participants during the webinar, and providing the technical infrastructure for the webinar. Where recordings or transcripts are produced, processing also takes place for the purposes of documenting the event, as well as for follow-up work and making the content available to participants.

(4) The legal basis for processing when conducting webinars via Microsoft Teams is Article 6(1)(b) of the GDPR, insofar as the webinars are conducted within the framework of a contractual relationship. In other respects, Article 6(1)(f) of the GDPR forms the legal basis where we process the data to pursue a legitimate interest. Our legitimate interest lies in conducting efficient and secure webinars to inform participants about specialist topics. Where recordings and/or transcripts are produced in connection with webinars, the processing of personal data is based on the consent you have given in accordance with Article 6(1)(a) of the GDPR. The provision of consent is voluntary. You may withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent up to the point of withdrawal.

(5) Microsoft processes the data on our behalf in accordance with Article 28 of the GDPR. To this end, we have entered into a data processing agreement with Microsoft. Microsoft reserves the right to process customer data for its own legitimate business purposes. We have no influence over such data processing by Microsoft. To the extent that Microsoft Teams processes personal data in connection with its legitimate business purposes, Microsoft is an independent controller for these data processing activities and, as such, is responsible for compliance with all applicable data protection regulations.

(6) Data processing by Microsoft generally takes place on servers in data centres within the European Union, specifically in Ireland, the Netherlands and the Federal Republic of Germany. However, as Microsoft’s parent company is based in the USA, data processing outside the European Union cannot be ruled out. An adequacy decision is in place for the USA, and Microsoft is certified under the EU-US Data Privacy Framework.

(7) The data processed in connection with the webinars will only be stored for as long as is necessary for the purposes of the respective event, provided that there are no statutory retention obligations to the contrary. Recordings and transcripts of webinars are stored for a period of 12 months and subsequently deleted, provided that no statutory retention obligations prevent this. These audio, video or text recordings of the webinars are only stored if this is necessary for organisational or documentary purposes and you have been expressly informed in advance and asked for your consent.

(8) Further information on processing by Microsoft can be found in Microsoft’s relevant privacy statement at www.microsoft.com/de-de/privacy/privacystatement.