Privacy policy

Disclaimer: This translation into English is provided for convenience purposes only. The German wording is the only legally binding version.

Status 27.07.2020

1 Preamble

The following text is about the acquisition of personal data when you visit our website. Personal data is any data which can refer to you as an individual, e.g. name, address, email address, user behaviour.

2 Party responsible/ DPO
Party responsible for data processing: Data Protection Officer of the party responsible:
efiport GmbH

Adickesallee 32-34
60322 Frankfurt am Main
Germany
+49 (0) 69 154008 – 600
info@efiport.de

Represented by:
Prof Dr Nils Stieglitz, President

Privacy policy

intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg
datenschutzbeauftragter@fs.de

 

 

 

The website is hosted by AWS Lightsail.
Website maintenance is handled by efiport GmbH.

3 Contact details of the data protection officer

You can reach our data protection officer at datenschutzbeauftragter@fs.de or by sending a letter to

Data Protection Officer
Adickesallee 32-34
60322 Frankfurt am Main
Germany

4 General data acquisition when accessing our website

If you use the website for purely informative reasons, i.e. when you do not register, request brochures, register for seminars or webinars or send us information in any other way, we record only that personal data which your browser sends to our server. If you visit our website, we record the data in the table below, which is technically necessary for our website to function and to guarantee stability and security (legal grounds are the legitimate interest in accordance with Art. 6 Sect. 1 p. 1 lit. f GDPR) 1 lit. f GDPR):

 

Data Purpose of processing Storage duration
Operating system used Device identification to ensure optimised display of the website 14 months
Information about browser type and version used Identification of browser used to optimise our website
User’s internet service provider Identification of internet service provider
IP address Presentation of the website on the respective device
Date and time of access Ensuring the proper operation of the website
If necessary, manufacturer and device type Identification of manufacturer and device type for statistical purposes
Logfiles Ensuring the proper operation of the website

 

This data must be captured and recorded in the log files for the website to operate. Therefore, no objection may be raised.

5 Contact by email or contact form

When you contact us by email or via a contact form, the data you provide (your e-mail address, name and telephone number if applicable) will be stored by us in order to answer your questions or process an order for a learning programme. We have marked any information we request via our contact form which is not necessary for contacting you as optional. This information helps us to specify your inquiry and to improve the processing of your request. Any communication of this information is on a voluntary basis and with your consent, Art. 6 para.1 a DSGVO. Should you provide information on communication channels (e.g. e-mail address, telephone number), you agree that we may contact you via this communication channel in order to respond to your request. You can, of course, revoke this consent at any time in the future.

We will delete the data collected in this context after storage is no longer required, or restrict processing if there are legal storage obligations.

6 Cookies - General information

Our website uses cookies. A cookie is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. If a user accesses a website, then a cookie can be stored on the user’s operating system. This cookie includes a characteristic character string, which enables unambiguous identification of the browser when visiting the website again.

6.1 Technically necessary cookies

We use cookies in order to make our website more user-friendly. Some elements of our website require that the accessing browser can be also identified after a site change.

Technically necessary cookies are not required to display the website. However, some functions of the website, such as the online Campus and registration for seminars, cannot be used properly without these cookies. Consequently, the user does not have the right to object. These cookies can be disabled by changing your browser settings.

The legal basis is Art. 6 para. 1 b DSGVO.

 

Name of the cookie Purpose of processing Legal basis for processing Storage duration
CFID Storage of the session for the shopping cart or online booking feature The processing is necessary for the performance of a contract to which the data subject is a party (e.g. a sales contract in a web shop) or for carrying out pre-contractual measures (e.g. filling the virtual shopping cart prior to the conclusion of the contract) (insofar as the pre-contractual measures are carried out at the request of the data subjects). The data is deleted when the respective session is ended.
CFTOKEN
JSESSIONID
SERVERID
CLMAUTHID
Borlabs Cookie Withdrawal of cookie consent Legitimate interest 365 days
6.2 Cookies for analytics

Cookies for analytics collect information about the manner in which our website is used, e.g. website access or error messages. These cookies do not store information which would allow identification of the user. The collected information is aggregated and thus evaluated anonymously.

 

Name of the cookie Purpose of processing Legal basis for processing Storage duration
Google Analytics Generation and change of cookie information; Optimisation of website display and adaptation of contents Legitimate interest 14 months

6.3 Cookies for marketing purposes

We use cookies for marketing purposes in order to address our users with advertising oriented to their interests. In addition, we use cookies in order to display advertisements relevant to you and to measure the effectiveness of our advertising activities. This information can also be communicated to third parties, such as Ad networks.

 

Name of the cookie Purpose of processing Legal basis for processing Storage duration
Double Click Optimisation of display of advertisements and adaptation of associated contents Legitimate interest 14 months
Hotjar Generation and change of cookie information; Optimisation of website display and adaptation of contents Legitimate interest 365 days

6.4 Prevention of cookies

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that, depending on the settings you choose, the full functionality of the website may no longer be available.

Consent history

DateVersionConsent

Overview of Cookies & Cookie Groups

Necessary

These cookies are necessary to run the core functionalities of this website. These can only be disabled by changing your browser preferences.

CF Token Cookie

NameCF Token Cookie
ProviderOwner of this website
PurposeStorage of the session for the shopping cart or online booking feature
Purposehttp://www.efiport.de/datenschutz/en/privacy-policy/
Host(s)campus.efiport.de
Cookie nameSession
Cookie durationSitzung

Server ID Cookie

NameServer ID Cookie
ProviderOwner of this website
PurposeStorage of the session for the shopping cart or online booking feature
Purposehttp://www.efiport.de/datenschutz/en/privacy-policy/
Host(s)campus.efiport.de
Cookie nameSERVERID
Cookie durationSession

JSession ID Cookie

NameJSession ID Cookie
ProviderOwner of this website
PurposeStorage of the session for the shopping cart or online booking feature
Purposehttp://www.efiport.de/datenschutz/en/privacy-policy/
Host(s)campus.efiport.de
Cookie nameJSESSIONID
Cookie durationSession

CLM Auth ID Cookie

NameCLM Auth ID Cookie
ProviderOwner of this website
PurposeStorage of the session for the shopping cart or online booking feature
Purposehttp://www.efiport.de/datenschutz/en/privacy-policy/
Host(s)campus.efiport.de
Cookie nameCLMAUTHID
Cookie durationSession

CFID Cookie

NameCFID Cookie
ProviderOwner of this website
PurposeStorage of the session for the shopping cart or online booking feature
Purposehttp://www.efiport.de/datenschutz/en/privacy-policy/
Host(s)campus.efiport.de
Cookie nameCFID
Cookie durationSession

WPML

NameWPML
ProviderOwner of this website
PurposeSaves the current language.
Purposehttps://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/
Cookie name_icl_*, wpml_*, wp-wpml_*, wp-wpml_current_language*
Cookie duration1 Tag

Analytics

In order to continuously improve our website, we track data for statistical and analytical purposes.

Google Analytics

NameGoogle Analytics
ProviderGoogle LLC
PurposeCookie from Google for website analysis. Generates statistical data about how visitors use the website.
Purposehttps://policies.google.com/privacy?hl=en-US
Cookie name_ga,_gat,_gid
Cookie duration14 months

Marketing

We use marketing cookies to help us provide you with the information most relevant for you.

Hotjar

NameHotjar
ProviderHotjar Ltd.
PurposeHotjar is a user behavior analysis tool from Hotjar Ltd. We use Hotjar to understand how users interact with our website.
Purposehttps://www.hotjar.com/legal/policies/privacy/
Host(s)*.hotjar.com
Cookie name_hjClosedSurveyInvites, _hjDonePolls, _hjMinimizedPolls, _hjDoneTestersWidgets, _hjIncludedInSample, _hjShownFeedbackMessage, _hjid, _hjRecordingLastActivity, hjTLDTest, _hjUserAttributesHash, _hjCachedUserAttributes, _hjLocalStorageTest, _hjptid
Cookie durationSession / 1 year

Integration of third party services and content

Content from video platforms and social media platforms is blocked by default. If cookies from external media are accepted, access to this content no longer requires manual consent.

Google Maps

NameGoogle Maps
ProviderGoogle
PurposeUsed to unlock Google Maps content.
Purposehttps://policies.google.com/privacy?hl=en-US
Host(s).google.com
Cookie nameNID
Cookie duration6 months

YouTube

NameYouTube
ProviderYouTube
PurposeIs used to unlock YouTube content.
Purposehttps://policies.google.com/privacy?hl=en-US
Host(s)google.com
Cookie nameNID
Cookie duration6 months
7 Integration of third party services and content

To optimise our online offer and to improve your experience, we generally include content and services from third parties on the basis of our legitimate interest (Art. 6 Para. 1 lit. f DSGVO). In order to be able to display this content to you, your IP address must be transmitted to this third-party provider. Under certain circumstances, additional data may be collected by the third-party providers or pixel tags and/or cookies may be used. To what extent this is the case can be seen in the following sections on the respective integrated content.

7.1 Integration of YouTube videos

We are interested in offering you a wide range of multimedia information. We integrate videos from YouTube (YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA). The legal basis for this is Art. 6 para. 1 lit. f DSGVO.

YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Youtube is certified under the Privacy Shield Agreement, which guarantees compliance with European data protection law. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

To integrate videos, we use the extended data protection mode or the no cookie solution. This means that Youtube only sets cookies and pixel tags to personalize advertising and search results once you have started the video.

The following data is transmitted to Google as the operator of YouTube:
• the IP address,
• the specific address of the page accessed on our website,
• the transmitted identification of the browser and
• system date and time of access,
• pre-existing cookies, by which your browser can be clearly identified.

Google, as the operator of YouTube, is solely responsible for this data processing. You can find further information here: https://policies.google.com/privacy?hl=en-US. You can find further information here: https://policies.google.com/privacy?hl=en-US.

Please note that Google may receive additional information about cookies already stored on your computer. To what extent these are used by Google is beyond our control.
The YouTube privacy policy can be found here: https://policies.google.com/privacy?hl=en-US.

7.2 Integration of Google invisible ReCaptcha

To protect your inquiries via the internet, we use Google Inc.’s (Google) invisible reCAPTCHA service. With invisible reCAPTCHA, a JavaScript element is integrated into the source code.

The tool runs in the background and analyses your user behaviour. From these user actions, the software calculates a captcha score. The analysis distinguishes whether the input is human through automated, machine processing. The analysis includes transmission of the IP address and possibly other data to Google, as required by Google for the invisible reCAPTCHA service. For this purpose, your input will be transmitted to Google and used there.

Within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area, your IP address will be shortened by Google before being transmitted. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCaptcha is not combined with other data from Google. For these data, Google’s data protection regulations apply. Further information on Google’s privacy policy can be found at: https://policies.google.com/privacy?hl=de

8 Use of analysis services
8.1 Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution with which the marketer can manage the website tags over an interface. Google Tag Manager itself (which implements the tags) is a cookie-free domain and does not record any personal data. The tool ensures the activation of other tags, which for their part may record data. Google Tag Manager does not access this data. . If a deactivation was carried out on domain or cookie level, this continues to exist for all existing tracking tags which are implemented with Google Tag Manager.

8.2 Google Analytics web analysis service

This website uses Google Analytics. By order of the operator of this website, Google will evaluate your use of the website to compile reports about website activities and to provide further services connected with website use and Internet use.

Since the Hamburg Commissioner for Data Protection and Freedom of Information agreed with Google on the basis of the Düsseldorf Circle’s decision to design analysis methods for measuring the reach of Internet offerings in accordance with data protection regulations, it has been possible to use Google Analytics in compliance with data protection regulations and without any objections under certain conditions. We naturally adhere to these prerequisites. In particular, we would like to point out that on this website Google Analytics has been extended by the code “gat. _anonymizeIp ();” in order to guarantee an anonymous capture of IP addresses (IP masking). Your IP address will be shortened by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. For further information on terms of use and data protection, please visit https://www.google.com/analytics/terms/gb.html or https://www.google.de/intl/en/policies/.

Google Analytics uses “cookies”, text files which are stored on your computer. The information about your use of this website generated by the cookie is generally transferred to a Google server in the USA and stored there. You can prevent the storage of cookies by adjusting your browser software; however, we point out that, depending on the settings you choose, the full functionality of the website may no longer be available. In addition, you can prevent the recording of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the Browser-Add-on. If you click here, an Opt-Out cookie is set, which prevents the future recording of your data during any visit to this website:

 

In addition, we use Google Conversion Tracking in association with Google Analytics. This enables us to record the characteristics of our website visitors. For example, we are informed of the number of PDF’s downloaded on our website or how often the contact form was filled out. . Likewise, we are informed how many clicks on advertisements from external sources (AdWords, LinkedIn, Xing, Bing) were made on our website.

8.3 Double Click

We use DoubleClick, a service of Google Inc. DoubleClick uses cookies in order to switch user-based advertisements. The cookies identify which displays are already switched in your browser and whether you have called up a website over a switched display. The cookies do not record any personal information in this case and cannot be brought in contact with such information.

If you do not want to be provided with any user-based advertising, you can deactivate the switching of advertisements with the aid of the Display Setting of Google.

Further information on how Google uses cookies can be found in Google’sData Protection Declaration.

8.4 Web analysis service Hotjar

We use the web analysis service Hotjar to analyse the use of our website. Hotjar Ltd (St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta) complies with the provisions of the Data Protection Act, Chapter 440 of the Laws of Malta (“Applicable Law”), which implements all relevant European Union directives on data protection.

The user behaviour (mouse movements, clicks, scroll height etc.) on our website is measured, recorded and evaluated by means of Hotjar. In addition, information is collected about previously visited websites, your home country, the devices, operating systems and browsers used. The IP address of the terminal device is only collected and stored in an anonymous manner by setting the last octet of IPv4 addresses, to 0, to ensure that the complete IP address is never written to the hard disk. The collected data is transferred via an encrypted connection to servers located in Ireland (EU) and stored.

The purpose of the data processing is to improve our offer, the functionality of the Hotjar-based website and thus the user experience. For this purpose, Hotjar also sets cookies on your end devices, among other things. You can find more information on the cookies used at: https://www.hotjar.com/legal/policies/cookie-information. Hotjar itself offers the option of setting an opt-out cookie by clicking on “Deactivate Hotjar” at https://www.hotjar.com/legal/compliance/opt-out. Tracking is reactivated by deleting your cookies, operating in anonymous mode/private mode or using another browser. Hotjar also pays attention to a do-not-track setting of your browser (https://help.hotjar.com/hc/en-us/articles/360002735873-How-to-Stop-Hotjar-From-Collecting-your-Data).

For more information on Hotjar’s compliance with data protection, please visit www.hotjar.com/privacy.

9 Booking a learning program

When you book one of our online learning programs, we collect additional data from you. We use this data to provide you with the learning programme and to invoice you for the booked learning programme (in each case with the purpose and legal basis of the processing and storage period):

 

Data Purpose of processing Legal basis for processing Storage duration
E-mail address, gender, first name, surname, address Processing of the purchase order The processing is necessary for the performance of a contract to which the data subject is a party (e.g. a sales contract in a web shop) or for carrying out pre-contractual measures (e.g. filling the virtual shopping cart prior to the conclusion of the contract) (insofar as the pre-contractual measures are carried out at the request of the data subjects). Until the discontinuation of the purpose
Billing data Processing of the purchase order The processing is necessary for the performance of a contract to which the data subject is a party (e.g. a sales contract in a webshop) or for carrying out pre-contractual measures (e.g. filling the virtual shopping cart before the conclusion of the contract) (insofar as the pre-contractual measures are carried out at the request of the data subjects). Until the discontinuation of the purpose

10 Transfer of data

As a matter of principle, your data will not be transferred to third parties unless we are legally obliged to do so, the transfer of data is necessary for the execution of the contractual relationship, or you have previously given your explicit consent to the transfer of your data.

External service providers and partner companies such as online payment providers will only receive your data to the extent necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the required minimum. As far as our service providers come into contact with your personal data, we ensure within the scope of order processing in accordance with Art. 28 DSGVO that they comply with the provisions of the data protection laws in the same way. Please also note the respective data protection notices of the service providers. The respective service provider is responsible for the contents of external services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.

We attach importance to processing your data within the EU / EEA.

For the continuous improvement of our website, for advertising purposes and to be able to offer you certain functions of this website, we are dependent on the use of contract processors.

All contract processors are obliged to process the data only for the specific service provision defined by us. All processors have been carefully selected by us and have implemented sufficient technical and organisational measures to ensure data security.

11 Data security

We have taken extensive technical and operational precautions to protect your data from accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress.

12 Your rights
12.1 General rights

Every person affected has the right of access according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Article 17 GDPR, the right to restriction of processing according to GDPR Art. 18, the right to object from Art. 21 GDPR, as well as the right to data portability from Art. 20 GDPR. In the cases of the right to access and the right to erasure, restrictions apply pursuant to § 34 and 35 BDSG.

12.2 Advice on the right to lodge a complaint

Furthermore, you have the right to lodge a complaint with the responsible data-protection supervisory authority about the processing of your personal data by us.

12.3 Advice on the withdrawal of consent

You can withdraw any consent to the processing of personal data at any time with respect to efiport GmbH. This also applies for the revocation of consent declarations which have been made before the validity of the basic data protection regulation (before 25th May 2018) with respect to efiport GmbH. Please note that the withdrawal comes into effect for the future only. Any processing implemented prior to the withdrawal is not affected by this.

12.4 Rights in the case of data processing for the purpose of direct advertising

In accordance with Art. 21 Sect. 2 GDPR, you have the right to object at any time to the processing of personal data concerning you. Should you object to processing for purposes of direct advertising, we will no longer process your personal data for these purposes. Please note that the objection comes into effect for the future only. Any processing implemented prior to the objection is not affected by this.

12.4 Rights in the case of data processing for the purpose of direct advertising

In accordance with Art. 21 Sect. 2 GDPR, you have the right to object at any time to the processing of personal data concerning you. Should you object to processing for purposes of direct advertising, we will no longer process your personal data for these purposes. Please note that the objection comes into effect for the future only. Any processing implemented prior to the objection is not affected by this.

12.5 Note on the right to object in case of weighing of interests

As far as we base the processing of your personal data on a weighting of interests, you can make an objection to the processing. Should you object, we request that you explain the reasons why we should not process your personal data as described. In the case of your reasonable objection, we check the circumstances and will either cease or adapt the data processing, or explain to you our compelling reasons for further processing of your data.

12.6 Links to other websites

Our websites can include links to other providers’ websites. This data protection declaration applies solely for the websites www.efiport.de and https://campus.efiport.de. We do not have any influence on this and do not check that other providers comply with the applicable data protection regulations.

13 On what legal basis is the data processed
13.1 Meeting contractual and pre-contractual obligations

Using our website, you have the possibility to acquire products and/or services or any other information which may be provided with an individual offer regarding said products and/or services. Should you use these functions, you are requested to provide further information. The legal basis for this data processing is the meeting of contractual or pre-contractual obligations, in accordance with Art. 6 Sect. 1 lit. b) GDPR.

13.2 Granting of consent

Different functions of this website are only available if you have given your prior consent. At certain points, you are informed of the relevant data processing, the purposes of data processing and your rights, in particular, your right to withdraw your consent at any time. Should consent be given, the legal grounds for the data processing is Art. 6 Sect. 1 lit. a) GDPR.

13.3 Legitimate interests

In some cases, we also process person-related data on the basis of our legitimate interest when you use this website. Within the framework of the weighting of interests according to Art. 6 Sect. 1 lit. f GDPR, we have considered and weighed our interest in the delivery of our services and your interest in the processing of your personal data consistent with data protection. This data is in some cases technically necessary to enable the delivery of our service and also to guarantee stability and security, in particular regarding protection against misuse. As such, we came to the conclusion – with a guarantee of data security orientated on currently available technology – that this data can be processed, where your interest in processing consistent with data protection has been considered to an adequate extent.

14 Changes to the data protection declaration

We reserve the right to change or amend this data protection declaration at any time, taking applicable data protection regulations into account.