§ 1 Information on the collection of personal data

(1) In the following, we provide information about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In doing so, we would like to inform you about our processing operations and at the same time comply with the legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

(2) The controller pursuant to Art. 4 (7) GDPR is Scheer School of Digital Sciences at Saarland University gGmbH, Saarland University, Innovation Center, Building A2.1, 66123 Saarbrücken, Germany (see our legal notice). You can contact our data protection officer at datenschutz@scheer-school.com or at our postal address with the addition “the data protection officer”.

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context, if the request is assigned to a contract, after the deadlines for the contract term, otherwise after the storage is no longer necessary, or restrict the processing if there are legal storage obligations.

(4) If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail below about the respective processes. In doing so, we will also state the specified criteria for the storage period.

§ 2 Your rights

(1) You have the following rights vis-à-vis the controller with regard to your personal data:

• Right to information
• Right to correction or deletion
• Right to restriction of processing
• Right to object to the processing
• Right to data portability

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us has the following contact details

Independent Data Protection Center Saarland
Fritz-Dobisch-Str. 12
66111 Saarbrücken

Tel.: 0681 94781-0
Fax: 0681 94781-29
poststelle@datenschutz.saarland.de

§ 3 Processing of personal data when visiting our website

When using the website for information purposes, i.e. simply viewing it without registering and without providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (page visited)
• Access status / HTTP status code
• Amount of data transferred in each case
• Previously visited page
• Browser
• Operating system
• Language and version of the browser software.

Information technology infrastructure and related services (e.g. storage space and/or computing capacity) are provided by:
netcup GmbH, Daimlerstraße 25, D-76185 Karlsruhe, Germany
Website: https://www.netcup.de/
Privacy Policy: https://www.netcup.de/kontakt/datenschutzerklaerung.php
Data processing agreement: https://helpcenter.netcup.com/de/wiki/general/avv/.

§ 4 Further functions and offers on our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested and use other common functions to analyze or market our offers, which are presented in more detail below. For this purpose, you must generally provide additional personal data or we process such additional data that we use to provide the respective services. The aforementioned data processing principles apply to all data processing purposes described here.

(2) In some cases, we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are regularly monitored.

(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. Depending on the service, your data may also be collected by the partners on their own responsibility. You will receive more detailed information when you provide your data or below in the description of the respective offers.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us. The permissibility of the processing of your data up to the time of your revocation remains unaffected.

(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we do. In the event of your objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. The best way to object to advertising is to contact us using the contact details given above.

§ 6 Processing of data from your end devices (“Cookie Policy”)

(1) In addition to the above-mentioned data, we use technical aids for various functions when you use our website, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. In the following, we first describe cookies from a technical point of view (2) before going into more detail about your individual choices by describing technically necessary cookies (3) and cookies that you can voluntarily select or deselect (4).

(2) Cookies are text files or information in a database that are stored on your hard disk and assigned to the browser you are using so that certain information can flow to the location that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer, but are primarily used to make the website faster and more user-friendly. This website uses the following types of cookies, whose function and legal basis are explained below:

• Transient cookies: Such cookies, especially session cookies, are automatically deleted when the browser is closed or by logging out. They contain a so-called session ID. This allows various requests from your browser to be assigned to the shared session and your computer can be recognized when you return to our website.
• Persistent cookies: These are automatically deleted after a specified period, which varies depending on the cookie. You can view the cookies set and the duration at any time in your browser settings and delete the cookies manually.
• Other technologies: These functions are not based on cookies, but on similar technical mechanisms, such as Flash cookies, HTML5 objects or an analysis of your browser settings. As a result, we may also use the technologies described below. Here, too, you can of course consent or object.

(3) Mandatory functions that are technically necessary to display the website: The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (completely correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) Optional cookies if you give your consent: We only set various cookies after you have given your consent, which you can select when you first visit our website via the so-called cookie consent tool. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use different browsers or end devices, to recognize you during a visit or to place advertising (possibly also to tailor advertising to your interests, measure the effectiveness of advertisements or show interest-based advertising). The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

The functions we use, which you can select and revoke individually via the Consent Manager, are described below.

We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consent.

§ 7 Use of Matomo

(1) On this website we use the web analysis service Matomo, a service of InnoCraft Limited, 7 Waterloo Quay, PO 625, 6140 Wellington New Zealand, to analyze and check the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. Data may be transferred to a third country, namely New Zealand. In these cases, the EU-New Zealand adequacy decision of the EU applies, according to which adequate data protection is provided in New Zealand from the point of view of the EU.

(2) We operate Matomo in a version that does not require cookies. This means that no Matomo cookies are stored on your computer for the purpose of web analysis. To analyze website usage, your IP address and information such as timestamps, websites visited and your language settings are recorded. We store the information collected in this way on our server.

This website uses Matomo with the extension “AnonymizeIP”. This means that IP addresses are further processed in abbreviated form and cannot be directly linked to individuals. The IP address transmitted by your browser using Matomo is not merged with other data collected by us. The legal basis for the use of Matomo is Art. 6 para. 1 sentence 1 lit. f GDPR.

(3) It is possible to prevent the use of Matomo by removing the following checkmark and thus activating the opt-out plug-in: [Matomo iFrame]. In this case, an opt-out cookie is stored in your browser that prevents Matomo from storing usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again.

(4) The Matomo program is an open source project. Information from the third-party provider on data protection can be found at matomo.org/privacy-policy/.

§ 8 Use of social media plug-ins

(1) We currently use the following social media plug-ins:

• LinkedIn: Social network, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
  Privacy policy: https://www.linkedin.com/legal/privacy-policy
  Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
• Instagram: Social network, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
  Privacy Policy: https://privacycenter.instagram.com/policy/
• Facebook pages: Profiles within the social network Facebook, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
  Privacy Policy: https://www.facebook.com/privacy/policy/

which are only loaded if you have previously activated the function with your consent. We offer you the opportunity to interact with social networks and other users via the plug-ins. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent.

(2) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.

(3) The information collected is stored on the provider’s servers in Europe.

(4) You can withdraw your consent at any time without this affecting the lawfulness of processing up to the point of withdrawal. The easiest way to withdraw your consent is via our Consent Manager or via the functions of the social media providers.

(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy. Addresses of the respective plug-in providers and URL of the respective privacy policies: de.linkedin.com/legal/privacy-policy.

§ 9 Integration of YouTube videos

(1) We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer. The legal basis for the display of the videos is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and time stamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) The information collected is stored on Google servers, including in the USA. For these cases, Google has, according to its own statements, imposed a standard that corresponds to the EU-US Data Privacy Framework and has promised to comply with applicable data protection laws when transferring data internationally. This means that the permissibility of data transfer currently falls within the scope of the EU adequacy decision of 10.07.2023.

(4) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: Privacy Policy – Privacy Policy & Terms of Use – Google

§ 10 Integration of Google Maps

(1) We use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of the maps is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. data processing only takes place with your consent.

(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and time stamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

(3) The information collected is stored on Google servers, including in the USA. For these cases, Google has, according to its own statements, imposed a standard that corresponds to the EU-US Data Privacy Framework and has promised to comply with applicable data protection laws when transferring data internationally. This means that the permissibility of data transfer currently falls within the scope of the EU adequacy decision of 10.07.2023.

(4) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: Privacy Policy – Privacy Policy & Terms of Use – Google

§ 11 Use of Brevo for newsletters and forms

(1) We use the Brevo platform, a service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send our newsletter and to provide and process registration forms (e.g. for participation in certificate programs or events). Brevo is used to manage email campaigns and to create and process forms. The personal data processed (in particular e-mail address, name and any other voluntary information) is stored on Brevo servers in Germany and processed exclusively on our behalf. The legal basis for the use of Brevo is Art. 6 para. 1 sentence 1 lit. a GDPR or, in the case of contractual relevance, Art. 6 para. 1 sentence 1 lit. b GDPR, i.e. data processing only takes place with your consent.

(2) When registering for our newsletter, we use the so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm that you are the owner of the email address provided and that you wish to receive the newsletter. If no confirmation is received within 24 hours, your information will be blocked and deleted after one month. In addition, we store the IP addresses used and the times of registration and confirmation in order to be able to document your registration in a legally secure manner.

(3) The newsletters sent with Brevo contain so-called web beacons or tracking pixels, which provide information on the opening of the emails and the click behavior of the recipients. These analyses help us to further optimize the content of our newsletters and better adapt them to the interests of the recipients. The legal basis for this is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can object to this analysis at any time, e.g. via the unsubscribe link in every email.

(4) For registration for our certificates, events and other offers, forms are integrated via Brevo. Certain details – such as your name and e-mail address – are mandatory in order to process your request. You can provide further information, such as your professional background, on a voluntary basis. All data entered will be processed exclusively for processing the respective offer and, if necessary, used to contact you in connection with your request.

(5) Brevo acts as our processor within the meaning of Art. 28 GDPR. We have concluded a corresponding contract with Sendinblue GmbH for order processing. Further information on data protection at Brevo can be found at: https://www.brevo.com/de/legal/privacypolicy/.

(6) You can withdraw your consent to the processing of your data (e.g. as part of the newsletter) at any time. You can declare your revocation, for example, via the unsubscribe link in every e-mail or by sending a message to the contact details given in the imprint. This does not affect the lawfulness of the processing carried out prior to the revocation.