Privacy Policy

The person responsible in terms of the DS-GVO is:

RWTH Aachen Business School gGmbH
Campus-Boulevard 30
52074 Aachen
Phone: +49 (0) 241 – 8020010
e-mail: info@business-school.rwth-aachen.de

We have a data protection officer whom you can contact as follows:

Bernd Ritscher
23-1 Service GmbH
Moselstr. 9
47051 Duisburg
datenschutz@23-1.de
www.23-1.de

You can exercise your right to information as well as correction, deletion or restriction or blocking of the processing of your data – as far as this is permissible due to other existing legal obligations – at any time in relation to us.

Please contact us if you have further questions or comments. If we are unable to help you, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with the competent supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the alleged infringement, if you believe that the processing of personal data relating to you is in breach of data protection law.

Personal data is requested from you for the purpose of processing and implementing your inquiries and your order and is processed in our systems for service provision, documentation and invoicing.

In order to implement your order as a future or current student or participant in one of our courses, we process the necessary information from your CV and the further development of your performance in our study/training courses and, if necessary, forward this information to the respective trainer/teacher/coach.

As a user of our further offers – such as rentals or individual support – we process your personal data in order to be able to provide our services and transmit them to authorities, institutions in your home countries, clients, etc. if this is contractually necessary.

We only ask you for information that is necessary for our contractual relationship with you or due to legal requirements. We delete your data as soon as the legally prescribed periods have expired or they are no longer required for other reasons.

If we need to engage further service providers within the scope of our service provision for you – such as subcontractors – we will pass on your data to the required extent. These service providers may also process your data outside the EU. In this case, we have concluded binding agreements in accordance with Art. 28 DS-GVO, which stipulate the corresponding level of data protection for the service providers.

If there are legal obligations to forward your data, e.g. to authorities, we will comply with these obligations.

In addition, we have service providers who look after our computer and telephone systems and help us to provide services but may only process your data on our instructions.

The transmission of information via e-mail carries risks with regard to confidentiality. However, if you contact us via e-mail, we understand that we should also contact you in this way and you have given your consent.

It is possible that we will contact you by e-mail to send you information about our concerns and offers (§7 UWG). You can also object to this at any time.

We will publish pictures of events as part of our social media activities. We will only publish individual pictures if you have given us your consent

RWTH Aachen Business School gGmbH, Campus-Boulevard 30, 52074 Aachen, is interested in taking pictures and videos of and with the respective participants (single and group shots) in its organized courses and events. Photo and video recordings are used exclusively for the following purposes:

• To make them available to participants of an event for private purposes (souvenir photos and video recordings) based on the declaration of consent (Art. 6 (1) lit. a GDPR, Art, 7, 8 and 9 GDPR (General Data Protection Regulations))
• Provision to the employees responsible for the planning, organization, implementation, and evaluation of an event/course, for the purpose of organizing and optimizing future events/courses as well as for the follow-up of the event/course in terms of quality management (Art. 6 (1) lit. a GDPR, Art. 7, 8 and 9 GDPR, Art. 6 (1) lit. b GDPR – Performance of the contract, Art. 6 (1) lit. c GDPR- Performance of a legal obligation)
• Publication/Presentation on the websites, in printed products, and on social media accounts (e.g. Facebook, Instagram, and Twitter) of the RWTH Aachen Business School gGmbH and its partners acc. the legitimate interest of an appealing illustration of the named channels for interested parties (Art. 6 (1) lit. f GDPR – Legitimate interest)

In addition to the unique identification of your person, the following personal data will be stored and processed in connection with the preparation and use of photo and/or video recordings:

• Copyright information of the photographer in the photos or metadata (if applicable first and last name of the photographer, date and time of the making of the photo, reason of production, etc.) for the purpose of proof of authorship (Art. 6 (1) lit. b and c GDPR)
• The filename on that the respective photo will be stored in the database, for the purposes stated above and on the basis of the aforementioned legislation
• Your declaration of consent with the personal data contained therein as proof of the lawfulness of the processing (Art. 6 (1) lit. a GDPR, Art. 7, 8, and 9 GDPR)
• For the participants of an event/course who wish to make the photo and/or video recordings available: personal e-mail address and/or personal contact data as well as the content of the correspondence for the purpose of making it available exclusively to authorized persons (Art. 6 (1) lit. b GDPR – Performance of the contract, Art. 6 (1) lit. c GDPR – Fulfilment of a legal obligation)

The use of the website is generally possible without the provision of personal data. A separate and explicitly recognizable consent is always required for the collection and processing of such data.

We use your data to respond to your inquiries, for further communication, to process your registration and the associated business activities for program execution as well as for all purposes to optimize and secure your online experience. Any other data not explicitly required by us to carry out the purposes stated by us is always provided on a voluntary basis.

We use your personal data exclusively for the purposes and to the extent specified in this privacy policy.

We take the protection of your personal data very seriously. Your data will be treated confidentially and in accordance with the legal data protection regulations.

The use of the website is generally possible without the provision of personal data. For a collection and processing of these, a separate and explicitly recognizable consent from your side is always required.

We use your personal data to answer your inquiries, to communicate with you further, to process your registration and its associated business activities for the program implementation and for any purposes to optimize and secure your online experience. An indication of further data that is not explicitly required by us is always provided voluntary.

We use your personal data exclusively for the purposes stated in this privacy policy and the resulting scopes.

We always strive to recommend you suitable training options and to inform you about news from our education programs. To receive newsletters or other informational materials, we apply the double opt-in procedure. Only when you state your e-mail address and notify our confirmation mail sent to this given mail, you are able to receive information materials from us.

Thus, we ensure that the registration is done exclusively by you as the user of the specified e-mail address. Your registration and confirmation will be logged. The legal basis is Article 6 (1) lit. a GDPR acc. your consent for processing.

If you do not confirm your registration within 24 hours, your information will be blocked automatically and deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The only requirement for sending the newsletter is your e-mail address. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter.

We point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent include so-called web beacons or tracking pixels that represent one-pixel image files stored on our website. The data is collected exclusively pseudonymized. During the evaluation, we record whether a newsletter has been viewed and which links have been clicked, whereby there is no link to your data. The legal basis is Article 6 (1) lit. f GDPR. Our legitimate interest lies in the optimization of our newsletters and informational materials. The information will be stored as long as you have subscribed to the newsletter. Furthermore, the tracking of the viewed newsletters and the clicked links is not possible if you have disabled the display of images in your e-mail program by default. In this case the newsletter will not be displayed completely and you may not be able to use all the features. If you display the images manually, the above tracking is applied.

We process the personal data you provide us for the processing of your either job specific or initiative sent job application. Your data will be transmitted to the HRM-Department and to those responsible and will solely be used for the purpose of staffing. When the application process is over, your data will be blocked for further processing or will be deleted after the expiration of any record retention periods. The legal basis is Art. 88 GDPR in combination with § 26 BDSG (neu) in the specific case of online applications.

The website contains external links in some places (links of websites to third parties). We have no influence on their content and cannot assume any liability for data protection measures practiced there. Only the respective website operators are responsible for the information displayed there and their accuracy.

Through the use of appropriate technical and organizational measures, the International Academy guarantees the protection of your personal data against both accidental and intentional losses due to manipulation, destruction or unauthorized access.

Our employees are all committed to confidentiality (formerly data secrecy).

Please note that the transmission of your data by e-mail is unencrypted. We cannot guarantee that your data may not be viewed or falsified by unauthorized ones.

Your data will be stored for the required duration of each purpose, but at least until the completion of your chosen educational program. If the purpose of the storage is omitted, your personal data will be deleted or blocked.

Further storage may also be applied if required by international or national lawmakers.

Any further deletion may also take place if a storage period specified by the international or national legislature expires and if there is no necessity of further storage for the fulfilment of a contract or pre-contractual measures according to Art. 6 (1) lit. f GDPR.

The transfer of your personal data to third parties only takes place if:

• You provide us your explicit consent (Article 6 (1) lit. a)
• It is required to fulfill a contract or precontractual measures (Article 6 (1) lit. b)
• there is a legal obligation (Article 6 (1) lit. c)

With the consent to the use of your personal data, you are entitled to various rights free of charge and at any time.

On request, we will gladly provide you with information about which of your personal data were processed and stored by us, when and for what purpose (Right of access by the data subject – Art. 15 GDPR). If the data you provide is incorrect or incomplete, we will correct these (Right to rectification – Art. 16 GDPR). If you wish the provision of your personal data, we will make these available to you in machine-readable format (Right to data portability – Art. 20 GDPR).

If the purpose of the processing of your data is omitted, you can require to block and delete these. You can also exercise your right of withdrawal (Right to erasure – Art. 17 GDPR; Right to object – Art. 21 GDPR). Insofar as statutory, contractual or tax- or commercial-legal retention requirements contradict a deletion, instead of a deletion exclusively a blocking can take place.

Please contact us via e-mail address privacyguard@academy.rwth-aachen.de anytime, if you have questions about your personal data or your legal rights.

If you believe that the processing purposes mentioned in this Privacy Policy are in violation of applicable law, you may, without prejudice to other remedies, file a complaint with the appropriate regulatory authority within your domicile, workplace or location.

On our website, cookies are applied. Cookies are small text files that are stored on the hard disk of your device and stored by your browser. These serve to make the web offer more user-friendly and effective for you.

Most of the cookies used on the website are so-called session cookies, which are automatically deleted after the end of your visit and closing the website.

Other cookies that serve to recognize your browser the next time you visit this website are automatically saved by and on your browser until you delete them manually. The storage of these cookies can be prevented in advance by pre-setting within your browser software. Functional restrictions of the website may result from the deactivation.

When you visit this website, your consent to the use of cookies is requested, whereby the legal basis is Article 6 (1) lit. a GDPR.

To protect your personal data, which you provide us e.g. by contacting us, we use SSL encryption on this website. You can recognize SSL encryption in the displayed address line of your browser (“https://” and a lock symbol at the beginning of the address bar). A reading of your data by third parties is thus not possible.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• IP address
• Browser type and browser version
• used operating system
• Referrer URL
• Host name of the accessing computer
• Time of the server request

A combination of these data with other data sources is not performed, the data is statistically evaluated with the locally installed software, AWstats / ReportMagic ‘. The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

The basis for data processing is Article 6 (1) lit. f GDPR. Our legitimate interest lies in securing and optimizing your visit on our website.

Via the contact forms integrated on the website as well as other forms of contact (eg by e-mail, post, telephone) you can send us messages and inquiries as well as book your participation in the educational event you are looking for. Your data given there (e.g. name, address, e-mail address) are stored for the purpose of processing and possible follow-up questions until you ask us to delete, revoke your consent for storage or the purpose for the data storage is omitted. The processing of the data provided by you in the contact form is therefore based on your consent (Article 6 (1) lit. a GDPR) or on the performance of a contract or pre-contractual measures (Article 6 (1) lit. b GDPR).

With the contact forms you also have the opportunity to give additional information about yourself which go beyond the purpose of the contacting and that we use for statistical and quality assurance measures. The specification of this data is done exclusively on a voluntary basis. The legal basis is Article 6 (1) lit. f GDPR; our legitimate interest lies in the named purposes.

On our website, we use social media plugins of the social networks Facebook (Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA), Twitter (Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 , Ireland), Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) and LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland).

These plugins are not activated in advance, but must be manually activated in order to protect your data. This allows us to guarantee that no automatic connection with the servers of the plugin providers occurs when visiting our website. Only by activating a plugin, a direct connection to the server of the plugin provider is established. A consent to the data transmission takes place automatically.

Regardless of whether you have a user profile at the plugin provider or are logged in there, the plugin provider will receive your IP address and the information that your browser has accessed our website.

If you are simultaneously logged in to the website of the respective plugin provider when you visit our website and invoke the plugins, the information on the visit to our website can be assigned to your user profile. In order tso prevent a direct assignment of the plug-in provider to your user profile and surfing behaviour, please log out of the website of the respective plug-in provider before activating the plugin.

To learn more about the purpose, use and privacy of the plugin providers, as well as your options and rights to ensure your privacy, you can use the links below to access the privacy policies of Facebook, Twitter, Instagram and Linkedin.

The use of social media is in the interest of an attractive presentation of our online presence. This constitutes a legitimate interest within the meaning of Article 6 (1) lit. f GDPR.

We use the social media platform Facebook (Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA) for information and marketing purposes. If you have a user profile of Facebook and you call up one of our training events via your logged-in user profile, we will be informed about your call via the function “visitor action pixel” by Facebook. This helps us to capture and analyse the effectiveness of Facebook ads for statistical and market research purposes.

The data transmitted to us are anonymous; we have no way to track them back to your person. However, these data are stored by Facebook, assigned to your user profile and possibly used for advertising purposes.

You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To control what types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions for usage-based advertising settings: https://www.facebook.com/settings?tab=ads.
The settings are platform-independent, meaning that they are applied to all devices, such as desktop computers or mobile devices.

Further information on the handling of your data can be found in the following link to the privacy policy of Facebook.

You can disable the remarketing feature “Custom Audiences” in the ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in with your user profile. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/preferentialmanagement/

The use of Facebook Pixel is in the optimization of our social media presence. This constitutes a legitimate interest within the meaning of Article 6 (1) lit. f GDPR.

At various points on our website, you can view videos of the Google Inc. powered YouTube page (YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA).

As with the use of social media plugins, protecting your privacy requires manual activation of the plugin to connect to the server from YouTube. The information about visiting our website and your IP address are automatically communicated to YouTube when the plugin is activated, regardless of whether or not you have a YouTube user profile.

If you have a YouTube user profile and are logged in to it while visiting our website and call up the YouTube plugin, you allow YouTube to associate this information directly with your user profile. A direct assignment can be avoided by a previous logit of the user profile.

For more information on the handling of your data, please refer to the following link to the privacy policy of Google.

The basis for data processing is Article 6 (1) lit. f GDPR. Our legitimate interest lies in the optimized presentation of our website.

For the anonymous analysis of your visit at our website, through which no personal data are obtained or processed, we use Google Analytics of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA). In doing so, Google Analytics uses cookies (to learn more about the function and use of cookies, please return to the section “Use of cookies” above).

The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event of activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be sent to a Google server in the US and shortened there.

On behalf of the Business School, Google will use this information to evaluate your use of the website, to compile reports about the website activity, and to provide us with other services related to the website activity and internet usage to the website operator. The IP address provided by Google Analytics will not be merged with other Google data.

In addition to the option of deactivating cookies, which may influence the full use of this website, you may prevent Google from processing your data generated by the cookie (including your IP address) by downloading and installing the browser plugin.

For further information on the handling of your data, please refer to the following link to the privacy policy of Google.

We have a legitimate interest in the anonymous analysis of the use of our website. The legal basis is Article 6 (1) lit. f GDPR.

We use the Google Ads online advertising program and conversion tracking of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

If you click on a Google-served ad, a conversion tracking cookie will be placed on your data processor (to learn more about the function and use of cookies, please return to the section “Use of oookies” above). These cookies lose their validity after 30 days, contain no personal data and are thus not used for personal identification.

If you visit certain web pages on our website and the cookie has not expired, Google and we may recognize that you clicked on the ad and were redirected to this page. The legal basis is Art. 6 para. 1 lit. f DSGVO. Each Google Ads customer receives a different cookie. Thus, there is no way that cookies can be tracked through the websites of advertisers.

The information gathered using the conversion cookie are used to generate conversion statistics for Google Ads advertisers who have opted for conversion tracking. It informs customers about the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information through that users can be personally identified.

If you do not wish to participate in tracking, you may opt-out of this use by preventing the installation of cookies through an appropriate setting in your browser software (deactivation option). You will then not be included in the conversion tracking statistics. Further information on the handling of your data can be viewed via the following link to the Google Privacy Policy.

We use the online advertising program “Google Ads” and within Google Ads the conversion tracking. The provider is Google Inc (1600 AmphithThis website uses the remarketing function of Google (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).  This feature is used to show interest-based ads to visitors to the site as part of the Google advertising network. Cookies are used to recognize individual visitors when they visit websites that are part of Google’s advertising network. These pages may then display advertisements to the visitor that relate to content previously viewed by the visitor on websites that use Google’s remarketing feature. According to its own information, Google does not collect any personal data during this process. The legal basis for the processing of your data is a weighing of interests according to which the processing of your personal data described above does not conflict with any overriding contrary interests on your part (Art. 6 para. 1 sentence 1 lit. f DSGVO).

However, if you do not wish Google’s remarketing function to be used, you can deactivate it by making the appropriate settings at https://adssettings.google.com/. Alternatively, you can deactivate the use of cookies for interest-related advertising via the advertising network initiative by following the instructions at http://optout.networkadvertising.org. For more information about Google Remarketing and Google’s privacy policy, please visit https://policies.google.com/technologies/ads?hl=en.

This website uses the analytics and conversion tracking technology of the LinkedIn platform. LinkedIn’s LinkedIn technology can show you more relevant, interest-based advertising. LinkedIn also provides RWTH Business School gGmbH with aggregated and anonymous reports of advertising activity and information about how you interact with the BrandTrust website.

You may object to the analysis of your usage behavior by LinkedIn and the display of interest-based recommendations (“opt-out”). Follow this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Our website uses the Crazy Egg web analytics service provided by Crazy Egg Inc. (16220 East Ridgeview Lane, La Mirada, CA 90638, USA). Using Crazy Egg Inc. technology, visitor information is collected and transmitted to the servers of Crazy Egg Inc.

The technology enables us to collect, analyze and visualize your user activity while visiting our website. For example, we can use a “heat map” to identify which areas of our website are visited and clicked most frequently. Cookies are also used for this purpose (to learn more about the function and use of cookies, please return to the section “Use of oookies” above).

You may at any time object to the collection, processing and recording of data generated by CrazyEgg.com by following the instructions at https://www.crazyegg.com/opt-out.

The purpose and scope of the data collection and the further processing and use of the data by Crazy Egg as well as your related rights and setting options to protect your privacy can be found in the privacy policy of Crazy Inc.

We have a legitimate interest in the anonymous analysis of the use of our website. The legal basis is Article 6 (1) lit. f GDPR.

This website uses so-called web fonts provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA) for consistent font representation. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

To do this, your used browser must connect to servers of Google. Thereby, Google gets informed that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Article 6 (1) lit. f GDPR.

If your browser does not support web fonts, a default font will be used by your computer.

For further information about Google Web Fonts and the privacy policy of Google, see the links provided.

This website uses Javascript libraries provided by Google for parts of the functionality. When you view a page, your browser loads the libraries you need into your browser cache to display interactive elements of the page.

To do this, your used browser must connect to servers of Google. Thereby, Google gets informed that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Article 6 (1) lit. f GDPR

For further information on the handling of your data, please refer to the following link to the privacy policy of Google.

We operate a Facebook page (https://www.facebook.com/RWTHBSchool/?ref=bookmarks) and will also comply with the legal provisions on data protection here.

According to the decision of the European Court of Justice (Az: C-210/16 of 05.06.2018) regarding the so-called fan page pages, we are “jointly responsible” with Facebook with regard to the processing of your data.

The following information applies to Facebook as the responsible party within the meaning of the DSGVO. Name and address:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

You can use the following form to contact Facebook:
https://www.facebook.com/help/contact/2061665240770586.

You can contact the Facebook data protection officer using the following form:
https://www.facebook.com/help/contact/540977946302970.

The complete Facebook privacy policy can be found here:
https://www.facebook.com/privacy/explanation.

There is an agreement between Facebook and us as jointly responsible parties pursuant to Art. 26 DSGVO. You can reach this agreement here: https://www.facebook.com/legal/terms/page_controller_addendum.

This agreement stipulates that Facebook is fully responsible for the data protection obligations in connection with the Page-Insights. Page-Insights is aggregated data that allows us, as operators of a Facebook page, to understand how users interact with our site. This includes in particular the obligations from Art. 12, 13, 15 – 22 and 32 – 34 DSGVO.

Please contact Facebook directly. Via this link: https://www.facebook.com/help/contact/2061665240770586

Alternatively you can of course contact us and we will forward your request to Facebook.