Privay Policy

Status: Mai 2023

Thank you for your interest in our company and our website.

The protec­tion and integrity of your personal data and the guarantee of your privacy are of parti­cular concern to us.

In this privacy notice you will find infor­ma­tion about data proces­sing in the context of visiting our website and social media presences.

In addition, we inform you about the data proces­sing in the context of a tenancy with us. We want to offer you the most comfor­table living experi­ence possible, tailored to your needs and charac­te­rised by a variety of social events and connec­tion oppor­tu­ni­ties, so that you feel as comfor­table as at home in your new city and always receive your offer tailored to your interests. Our privacy notice explains what personal data we collect from you, either directly or indirectly, for this purpose and how we use it.

This privacy notice also contains infor­ma­tion about data proces­sing when you contact us in general, in the appli­ca­tion process and in the context of business relati­onships.‍

The Controller pursuant to Art. 4 para. 7 EU General Data Protec­tion Regula­tion (GDPR) for data proces­sing by us is the

Inter­na­tional Campus GmbH
Blumen­strasse 28, 80331 Munich
Telephone: +49 89 212 6880 – 0
Fax: +49  89  212  6880 – 290
info@ic-campus.com 

To exercise your rights, report data protec­tion incidents, make sugges­tions and complaints regar­ding the proces­sing of your personal data and withdraw your consent, we recom­mend that you contact our Data Protec­tion Officer:

PROLIANCE GmbH
Leopoldstr. 21
80802 Munich

www.datenschutzexperte.de
datenschutzbeauftragter@datenschutzexperte.de‍

USE OF OUR WEBSITE

Provi­sion of the website

When you use our website for infor­ma­tion purposes only (without contac­ting us), we only collect the personal data that your browser trans­mits to our server. If you want to visit our website, we collect the data that is techni­cally neces­sary for us to display our website to you. This may involve acces­sing infor­ma­tion (e.g. IP address) or storing infor­ma­tion (e.g. cookies) in your terminal equip­ment.

In this context, the IP address, date and time of the request, time zone diffe­rence to Green­wich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data trans­ferred, website from which the request comes, browser, opera­ting system and its inter­face, language and version of the browser software are recorded. We process your data on the basis of Sect. 25 para. 1 p. 1, para. 2 no. 2 Telecom­mu­ni­ca­tions Digital Services Data Protec­tion Act (TDDDG), Art. 6 para. 1 p. 1 (f) GDPR and base the data proces­sing on our legiti­mate interest in the smooth provi­sion of our website and in ensuring the stabi­lity and security of our website.

We use the web hosting service provider RAIDBOXES GmbH, to whom data of our website visitors is passed on within the scope of hosting. We have concluded a data proces­sing agree­ment with the provider in accordance with the requi­re­ments of Art. 28 GDPR, in which we oblige the provider to protect our custo­mers’ data and not to pass it on to third parties.

For reasons of technical security, in parti­cular to defend against attempted attacks on our web server, this data is stored by us for a short time and deleted after XX days at the latest.

General infor­ma­tion on the use of cookies

Our website uses so-called “cookies”. Cookies are small text files that are stored either tempo­r­a­rily for the duration of a session (session cookies) or perma­nently (perma­nent cookies) on your terminal device. Session cookies are automa­ti­cally deleted at the end of your visit. Perma­nent cookies remain stored on your terminal device until you delete them yourself or until they are automa­ti­cally deleted by your web browser.

Cookies have various functions. Many cookies are techni­cally neces­sary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behaviour or to display adver­ti­sing.

The proces­sing of data through the use of absolutely neces­sary cookies takes place on the basis of Sect. 25 para. 2 no. 2 TDDDG. The proces­sing of the data collected in this way is based on a legiti­mate interest in accordance with Art. 6 para. 1 (f) GDPR in the techni­cally error-free provi­sion of our services. For details on the purposes of the proces­sing and legiti­mate interests, please refer to the explana­tions on the specific data proces­sing.

The proces­sing of personal data through the use of other cookies is based on consent pursuant to Sect. 25 para. 1 TDDDG. and the further proces­sing of the data thus collected is based on consent pursuant to Art. 6 para. 1 (a) GDPR. The consent can be revoked at any time for the future. Insofar as such cookies are used for analysis and optimiza­tion purposes, we will inform you separa­tely about this within the scope of this privacy notice and obtain your consent.

You can set your browser so that you

• are informed about the setting of cookies,
• allow cookies only in indivi­dual cases,
• exclude the accep­tance of cookies for certain cases or in general,
• activate the automatic deletion of cookies when closing the browser.

The cookie settings can be managed under the follo­wing links for the respec­tive browsers:

• Google Chrome

• Mozilla Firefox
• Edge (Micro­soft)

• Safari
• Opera

You can also manage the cookies of many compa­nies and functions used for adver­ti­sing indivi­du­ally. To do this, use the corre­spon­ding user tools, available at https://www.aboutads.info/choices/

or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called “do-not-track” function. When this function is activated, the respec­tive browser tells adver­ti­sing networks, websites and appli­ca­tions that you do not want to be “tracked” for the purpose of behavioural adver­ti­sing and the like.

For infor­ma­tion and instruc­tions on how to edit this function, depen­ding on your browser provider, see the links below:

• Google Chrome
• Mozilla Firefox
• Edge (Micro­soft)
• Safari
• Opera

In addition, you can prevent the loading of so-called scripts by default. “NoScript” allows the execu­tion of Java scripts, Java and other plug-ins only on trusted domains of your choice. Infor­ma­tion and instruc­tions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that if you disable cookies, the function­a­lity of our website may be limited.

Use of Google Analy­tics

Our website uses Google Analy­tics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analy­tics uses so-called “cookies”.

Google will use this infor­ma­tion on behalf of the operator of this website for the purpose of evalua­ting your use of the website, compi­ling reports on website activity and provi­ding other services relating to website activity. Google will also use this infor­ma­tion to provide the website operator with other services related to the use of the website and the internet. The IP address sent by your browser as part of Google Analy­tics will not be combined with any other data held by Google. The proces­sing is carried out in accordance with Art. 6 para. 1 (a) GDPR on the basis of your consent.

We only use Google Analy­tics with IP anony­mi­sa­tion activated. This means that your IP address is only processed by Google in abbre­viated form.

We have concluded a contract with the service provider in which we oblige them to protect the data of our website visitors and not to pass it on to third parties.

As a transfer of personal data to the USA may occur, further protec­tion mecha­nisms are required to ensure the level of data protec­tion of the GDPR. To ensure this, we have agreed standard data protec­tion clauses with the provider in accordance with Art. 46 para. 2 © GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protec­tion in Europe. In cases where this cannot be ensured even through this contrac­tual exten­sion, we endea­vour to obtain additional regula­tions and commit­ments from the recipient in the USA.

The Google Analy­tics terms of use and infor­ma­tion on data protec­tion can be accessed via the follo­wing links:

http://www.google.com/analytics/terms/de.html

https://www.google.de/intl/de/policies/

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Erasure of user-level and event-level data associated with cookies, user identi­fiers (e.g. User ID) and adver­ti­sing IDs (e.g. Double­Click cookies, Android adver­ti­sing ID, IDFA [Apple adver­tiser identi­fier]) will occur no later than 14 month after collec­tion .

Use of Google Ads

Our website uses the functions of Google Ads Remar­ke­ting. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you have given us your consent to do so, this function makes it possible to link the adver­ti­sing target groups created with Google Ads Remar­ke­ting with the cross-device functions of Google Ads and Google Marke­ting Platform. The legal basis is your consent pursuant to Art. 6 para. 1 p. 1 (a) GDPR, Sect. 25 para. 1 TDDDG. In this way, interest-related, perso­na­lised adver­ti­sing messages that have been adapted to you on one terminal device (e.g. mobile phone) depen­ding on your previous usage and surfing behaviour can also be displayed on another terminal device (e.g. tablet or computer).

If you have given your consent, Google will link your web and app browsing history to your Google Account for this purpose. In this way, the same perso­na­lised adver­ti­sing messages can be served on every terminal device on which you log in with your Google Account.

To support this feature, Google Analy­tics collects authen­ti­cated user IDs that are tempo­r­a­rily linked to our Google Analy­tics data to define and create audiences for cross-device ad targe­ting.

You can perma­nently opt out of cross-device remarketing/targeting by deacti­vating perso­na­lised adver­ti­sing in your Google Account by follo­wing this link: https://adssettings.google.com/.

We have concluded a data proces­sing agree­ment with the service provider in which we oblige them to protect the data of our website visitors and not to pass it on to third parties.

As a transfer of personal data to the USA may occur, further protec­tion mecha­nisms are required to ensure the level of data protec­tion of the GDPR. To ensure this, we have agreed standard data protec­tion clauses with the provider in accordance with Art. 46 para. 2 © GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protec­tion in Europe. In cases where this cannot be ensured even through this contrac­tual exten­sion, we endea­vour to obtain additional regula­tions and commit­ments from the recipient in the USA.

Further infor­ma­tion and the privacy notice can be found in Google’s privacy notice at: https://www.google.com/policies/technologies/ads/.

Use of Google Maps

Our homepage uses the online map service provider Google Maps via an inter­face. Provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to display inter­ac­tive maps directly on the website and makes it easy for you to use the map function. To use the function­a­li­ties of Google Maps it is neces­sary to save your IP address.

Google uses Cookies, to collect infor­ma­tion about user behaviour. The legal basis for the proces­sing of your personal data is your given consent accor­ding to Art. 6 para. 1 (a) GDPR, Sect. 25 para. 1 TDDDG.

We have concluded a data proces­sing agree­ment with the service provider in which we oblige them to protect the data of our website visitors and not to pass it on to third parties.

Since a transfer of personal data to the USA takes place, further appro­priate safeguards are required to ensure the level of data protec­tion under the GDPR. To guarantee this, Google uses standard contrac­tual clauses in accordance with Art. 46 para. 2 © GDPR. These oblige the recipient of the data in the USA. to process the data accor­ding to the level of protec­tion in Europe. In cases in which this cannot be guaran­teed even by this contrac­tual exten­sion, we endea­vour to obtain additional regula­tions and commit­ments from the recipient in the USA.

Further infor­ma­tion on the handling of user data can be found in Google’s privacy policy:

https://www.google.de/intl/de/policies/privacy/
Opt-out: https://www.google.com/settings/ads/

Use of Insta­gram

Our website uses so-called social plugins (“plugins”) from Insta­gram, which is operated by Insta­gram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Insta­gram”). The plugins are marked with your Insta­gram logo, for example in the form of your “Insta­gram camera”.

When you call up a page of our website that contains such a plugin, your browser estab­lishes a direct connec­tion with the servers of Insta­gram. The content of the plugin is trans­mitted by Insta­gram directly to your browser, which then integrates it into the page. Through this integra­tion, Insta­gram receives the infor­ma­tion that your browser has called up the corre­spon­ding page of our website, even if you do not have an Insta­gram profile or are not currently logged in to Insta­gram. This infor­ma­tion (inclu­ding your IP address) is trans­mitted by your browser directly to the Insta­gram server in the USA and stored there.‍

If you are logged in to Insta­gram, Insta­gram can directly assign your visit to our website to your Insta­gram account. If you interact with the plugins, for example by clicking the “Insta­gram” button, this infor­ma­tion is also trans­mitted directly to the Insta­gram server and stored there. The infor­ma­tion is also published on your Insta­gram account and displayed there to your contacts.‍

For the purpose and scope of the data collec­tion and the further proces­sing and use of the data by Insta­gram, as well as your rights in this regard and setting options for protec­ting your privacy, please refer to Insta­gram’s privacy notice: https://help.instagram.com/155833707900388/.

If you do not want Insta­gram to directly assign the data collected through our website to your Insta­gram account, you must log out of Insta­gram before visiting our website. You can also comple­tely prevent the loading of Insta­gram plugins with add-ons for your browser.

Use of Youtube

On our website we use compon­ents (videos) of the company YouTube LLC 901 Cherry Ave., 94066 San Bruno, CA, USA (“YouTube”), a company of Google LLC (“Google”), Amphi­theatre Parkway, Mountain View, CA 94043, USA.‍

[Here we use the ” – privacy-enhanced mode — ” option provided by YouTube].

When you call up a page that has an integrated video, your connec­tion to the YouTube servers is estab­lished and the content is displayed on the website by informing your browser.‍

[Accor­ding to YouTube’s infor­ma­tion, in ” — extended data protec­tion mode -” only data is trans­mitted to the YouTube server, in parti­cular which of our Internet pages you have visited when you watch the video].

If you are logged in to YouTube at the same time, this infor­ma­tion will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

Further infor­ma­tion on YouTube’s data protec­tion is provided by Google under the follo­wing link: https://www.google.de/intl/de/policies/privacy/.‍

Use of Hotjar

Our website uses the Hotjar web analy­tics service provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (“Hotjar”).

Using Hotjar’s techno­logy, we get a better under­stan­ding of our users’ experi­ences (e.g. how much time users spend on which pages, which links they click on, etc.). This helps us to tailor our offering to our users’ feedback. Hotjar uses cookies and other techno­lo­gies to collect infor­ma­tion about our users’ behaviour and their terminal devices, in parti­cular the IP address of the device (only collected and stored anony­mously while you are using the website), screen size, device type (unique device identi­fiers), infor­ma­tion about the browser used, location (country only), preferred language for viewing our website. Hotjar stores this infor­ma­tion on our behalf in a pseud­ony­mised user profile.

The use of Hotjar and the associated proces­sing of personal data takes place on the basis of your consent pursuant to Art. 6 para. 1 (a) GDPR, Sect. 25 para. 1 TDDDG.

We have concluded a data proces­sing agree­ment with the service provider in which we oblige him to protect the data of our website visitors and not to pass it on to third parties.

As a principle, Hotjar stores customer data in the European Union. However, there may be trans­fers of personal data to third count­ries outside the EU and the EEA. In these cases, the imple­men­ta­tion of further protec­tion mecha­nisms is neces­sary to ensure the level of data protec­tion in accordance with the requi­re­ments of the GDPR. To ensure this, we have agreed standard data protec­tion clauses with the provider in accordance with Art. 46 para. 2 © GDPR. These oblige the recipient in the third country to process the data in accordance with the level of protec­tion in the EU.

Hotjar offers every user the option to prevent the use of the Hotjar tool via a “Do-Not-Track header” so that no data is collected about the visit to the respec­tive website. This is a setting that is supported by all common browsers in the current versions. For this purpose, your browser sends a request to Hotjar with the infor­ma­tion to deacti­vate the tracking of the respec­tive user. If you use our websites with diffe­rent browsers/computers, you must set up the “Do-Not-Track header” separa­tely for each of these browsers/computers. You can prevent the use of Hotjar by clicking on the opt-out page https://www.hotjar.com/legal/compliance/opt-out  and click on “Deacti­vate Hotjar”.

For more infor­ma­tion about Hotjar Ltd. and the Hotjar tool, please visit: https://www.hotjar.com.

You can find the privacy notice of Hotjar Ltd. at: https://www.hotjar.com/privacy

Contac­ting us

If you contact us by e‑mail, the infor­ma­tion you provide in the e‑mail, inclu­ding the personal data you enter there, will be stored by us for the purpose of proces­sing the enquiry and in case of follow-up questions. The speci­fi­ca­tion of an e‑mail address is required for contac­ting us, the speci­fi­ca­tion of e.g. first and last name and telephone number is freely given. The legal basis for the proces­sing of the data is our legiti­mate interest in answe­ring your request in accordance with Art. 6 para. 1 (f) GDPR and, if appli­cable, Art. 6 para. 1 (b) GDPR if your request is aimed at conclu­ding a contract. Your data will be deleted once the enquiry has been processed, provided there are no legal obliga­tions to retain data. For email commu­ni­ca­tion, we use the email provider Outlook of Micro­soft Ireland Opera­tions Limited, One Micro­soft Place, South County Business Park, Leopard­stown, Dublin 18 D18 P521.

We have concluded a data proces­sing agree­ment with the service provider in which we oblige him to protect our custo­mers’ data and not to pass it on to third parties.

As a transfer of personal data to the USA may take place, further protec­tion mecha­nisms are required to ensure the data protec­tion level of the GDPR. To ensure this, we have agreed on standard data protec­tion clauses with the provider in accordance with Art. 46 para. 2 © of the GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protec­tion in Europe. In cases where this cannot be ensured even through this contrac­tual exten­sion, we endea­vour to obtain additional regula­tions and commit­ments from the recipient in the USA.‍

ENTERING INTO RENTAL AGREEMENTS WITH US/ MAKING USE OF THE RANGE OF SERVICES WE OFFER

Our business model consists of renting furnished student flats and, within the frame­work of this, provi­ding a compre­hen­sive media (e.g. internet use) and leisure offer, such as organi­sing social events in our houses. Within the frame­work of the initia­tion, fulfilment and proces­sing of the contrac­tual relati­onships existing with us, data will be collected from you that is neces­sary for the respec­tive contract proces­sing or data that arises during the use of our services (e.g. use of the internet).

We want to offer every resident a flat that is as adapted and comfor­table as possible, and diver­sity is important to us. There­fore, you can tell us your special wishes and needs at any time. You can tell us that your flat should be barrier-free or that you need special housing equip­ment because of your religious orien­ta­tion. Such data are often so-called special catego­ries of data within the meaning of Art. 9 GDPR (e.g. data concer­ning health, religious data). The use of our services is possible overall without such notifi­ca­tion. We process special personal data on the basis of your express consent. Under no circum­s­tances do we use this data for purposes that go beyond the perfor­mance of a contract and the needs-based design of your stay with us.

We also process your data on the consump­tion of heating and hot water for the purpose of billing opera­ting costs. Infor­ma­tion on rental behaviour and damage can be processed within the frame­work of our contrac­tual relati­onship or when commis­sio­ning tradesmen, as can the content of corre­spon­dence between us by e‑mail, telephone or post.

If there is video surveil­lance in or around the building, you can find infor­ma­tion on data proces­sing on the notice boards on site.

For the purposes mentioned above, we collect name, address, telephone number, e‑mail address, natio­na­lity, date of birth (optional:) study data, payment infor­ma­tion (bank details), IP address (when using the internet connec­tion operated by us), consump­tion data, possibly other infor­ma­tion from corre­spon­dence.

The proces­sing of your data is based on the fulfilment of the existing rental contract between us or in the context of contract initia­tion in accordance with Art. 6 para. 1 p. 1 (b) GDPR.  In the case of proces­sing special catego­ries of personal data, we base the proces­sing on your consent in accordance with Art. 9 para. 1 (a) GDPR. Data may also be processed within the scope of our legiti­mate interest pursuant to Art. 6 para. 1 (f) GDPR in ensuring smooth corre­spon­dence, handling claims, organi­zing events or enfor­cing legal claims.

Data is processed in intern­ally-used IT systems and passed on to the respec­tive system provi­ders in this context and, in the case of e‑mail commu­ni­ca­tion between us, to the respec­tive e‑mail provider. If you use the internet service as part of the rental agree­ment, your data required for this purpose will be processed by the respec­tive internet provider. As part of the proces­sing of the tenancy, service provi­ders may process data on the consump­tion of heating/hot water for metering purposes, banks may receive data from you as part of the payment proces­sing and, in the event of damage settle­ment, data may be passed on to tradesmen and insurance compa­nies. In addition, in the context of legal disputes, your data may be passed on to a lawyer appointed by us.

Your payment infor­ma­tion will only be stored by us insofar as you have concluded rental contracts or make use of other chargeable services. The personal data requested by us in this context will only be stored for as long as is neces­sary for the execu­tion of the contract and subse­quent contract-related corre­spon­dence or, in the case of documents relevant under commer­cial and/or tax law that contain personal data, for as long as the statu­tory reten­tion periods of the German Commer­cial Code (HGB) and the Fiscal Code of Germany (AO) provide for your reten­tion of these documents (up to 6 and 10 years respec­tively). Your traffic data, which is collected during the use of the Internet connec­tion offered and operated by us, is stored by us for 7 days for the purpose of abuse control and trouble­shoo­ting and then deleted, insofar as this is legally permis­sible. Special data freely given by you, such as data concer­ning health, will only be stored by us for as long as is neces­sary for the purpose in question or as long as we are legally obliged to store it. Other data will only be stored by us for as long as is neces­sary for the respec­tive purpose or until the expiry of any statu­tory reten­tion periods.

Social Media

General infor­ma­tion

We operate websites or “fan pages” on various social media platforms. For the proces­sing of your personal data in connec­tion with your visit to our website or our “fan page” on the Facebook and LinkedIn platforms, we are jointly respon­sible with the opera­tors of the respec­tive platform, insofar as they provide us with aggre­gated infor­ma­tion on visitors to our fan page or our website (“insights”).

The operator of the Facebook platform is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2. The operator of the LinkedIN platform is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

We have concluded an agree­ment with the opera­tors in accordance with Art. 26 GDPR on joint control­ler­ship for the proces­sing of your personal data (Controller Addendum). This agree­ment speci­fies the data proces­sing opera­tions for which we or the respec­tive operator are respon­sible when you visit our fan page or our presence on the platform of the respec­tive operator. You can view this agree­ment under the follo­wing link:

Facebook: https://www.facebook.com/legal/terms/page_controller_addendum

LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum

If you wish to exercise your rights (infor­ma­tion, correc­tion, deletion, restric­tion, data porta­bi­lity, complaint to the super­vi­sory autho­rity, objec­tion or withdrawal), you can contact Facebook or LinkedIn as well as us. You can adjust your adver­ti­sing settings yourself in your user account. To do so, click on the follo­wing link:

https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com.

For further details, please refer to Facebook’s privacy notice:  https://www.facebook.com/about/privacy/.

To contact Facebook’s Data Protec­tion Officer, you can use the online contact form provided by Facebook at the follo­wing link https://www.facebook.com/help/contact/540977946302970.

For more infor­ma­tion on data proces­sing by LinkedIn, please refer to Linke­dIn’s privacy notice: https://www.linkedin.com/legal/privacy-policy.

To contact the Data Protec­tion Officer of Insta­gram, you can use the contact form under the link https://www.linkedin.com/help/linkedin/ask/TSO-DPO.

The range of services we offer includes setting up so-called Facebook commu­ni­ties for the respec­tive locations. When you have concluded your tenancy agree­ment with us, you have the oppor­tu­nity to exchange infor­ma­tion with other residents of your location within the commu­ni­ties. Access to the respec­tive Facebook commu­ni­ties is only permitted to the tenants of your respec­tive location and our employees who manage the respec­tive commu­nity.

We and the platform operator are each independently respon­sible for the proces­sing of your personal data in connec­tion with your visit to our website on the Twitter and Insta­gram platforms. For the asser­tion of your data subject rights, we would like to point out that these can most effec­tively be asserted with the respec­tive provi­ders. Only they have access to the data collected from you.

The operator of the Twitter platform is Twitter Inter­na­tional Company, One Cumber­land Place, Fenian Street, Dublin 2, D02 AX07 Ireland. The operator of the Insta­gram platform is Insta­gram, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland.

If we pass on personal data to the provi­ders of social media platforms, the latter are the recipi­ents of the data. Since personal data may be trans­ferred to the USA when visiting and inter­ac­ting with the social media platforms used by us, further protec­tion mecha­nisms are required to ensure the level of data protec­tion of the GDPR. To ensure this, we have agreed standard data protec­tion clauses with the provi­ders of all social media platforms used by us in accordance with Art. 46 para. 2 © GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protec­tion in Europe. In cases where this cannot be ensured even through this contrac­tual exten­sion, we take additional safeguards to protect the personal data of visitors to our social media sites.

In cases where Control­lers process your personal data on their own respon­si­bi­lity, we have no influence on the proces­sing of this data by the Controller and its handling of this data (at least after trans­mis­sion of the data). For further infor­ma­tion, please refer to the privacy notices of the respec­tive provider. If appli­cable, you can use the opt-out/per­so­na­li­sa­tion options with regard to the data proces­sing by the provider:

• Twitter
  • Privacy notice: https://twitter.com/de/privacy
  • Opt-out: https://twitter.com/personalization
  • Accor­ding to its privacy notice, Twitter uses standard data protec­tion clauses to ensure an adequate level of data protec­tion in accordance with the requi­re­ments of the GDPR for data trans­fers to the USA or other third count­ries outside the EU: https://twitter.com/de/privacy
• Insta­gram
  • Privacy notice /Opt-out: http://instagram.com/about/legal/privacy/
  • Insta­gram (Facebook), accor­ding to its privacy notice, uses standard data protec­tion clauses to ensure an adequate level of data protec­tion in accordance with the requi­re­ments of the GDPR for data trans­fers to the US or other third count­ries outside the EU:

http://instagram.com/about/legal/privacy/

Cookies

When you visit our Facebook fan page or our other social media pages, one or more cookies are set on your terminal device by the platform provider. Cookies are small text files that are stored either tempo­r­a­rily for the duration of a session (session cookies) or perma­nently (perma­nent cookies) on your terminal device. Session cookies are automa­ti­cally deleted after the end of your visit. Perma­nent cookies remain stored on your terminal device until you delete them yourself or until they are automa­ti­cally deleted by your web browser.

Cookies have various functions. Many cookies are techni­cally neces­sary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behaviour or display adver­ti­sing.

By inter­ac­ting with our Facebook fan page or our other social media sites, infor­ma­tion (e.g. your IP address) may be accessed or stored (e.g. cookies) on your terminal equip­ment. This access or storage may involve further proces­sing of personal data within the meaning of the GDPR.

The activity or validity period of cookies can vary greatly, but you can delete them manually at any time using your web browser settings. If you have any technical questions, please contact the manufac­turer of your web browser. Further infor­ma­tion on the use of cookies and their legal basis can be found in the provi­der’s privacy notice (see above).

Market research and adver­ti­sing purposes

As a rule, personal data on the company website is processed for market research and adver­ti­sing purposes of the provider of the social media platform. For this purpose, a cookie is set in your browser, which enables the respec­tive provider to recog­nise you when you visit a website. In addition, an evalua­tion of your inter­ac­tions on the social media platform is carried out by the provider. By means of the collected data, usage profiles can be created. These are used to display adver­ti­se­ments within and outside the platform that presu­mably corre­spond to your interests. Further­more, data can also be stored in the usage profiles regard­less of the devices you use. This is regularly the case if you are a member of the respec­tive platforms and logged in to them. Further infor­ma­tion on this can be found in the privacy notice of the respec­tive provider.

When you visit or interact with our social media site, we may receive personal data from you, which we process on our own respon­si­bi­lity in addition to the provider. This may be infor­ma­tion that you actively provide (comments, likes and infor­ma­tion that you provide publicly, such as your profile picture or name).

Depen­ding on the provider and your settings on the provi­der’s platform, we may also be informed about who has accessed our website or page within the platform.

Our access to the afore­men­tioned data results from the opera­tion of our social media presence; no further proces­sing of this data by us takes place except in the cases mentioned in this privacy notice. We have a legiti­mate interest in the opera­tion of our social media presence and the associated proces­sing of personal data that you actively publish or make available to us pursuant to Art. 6 para. 1 p. 1 (f) GDPR. Our legiti­mate interest is to address you in an adver­ti­sing manner and to provide you with an effec­tive means of commu­ni­ca­tion and inter­ac­tion with our company. The data will be deleted as soon as it is no longer required for addres­sing and commu­ni­ca­ting with you.

Data proces­sing when contac­ting us

We ourselves collect personal data when you contact us, for example via a contact form or a messenger service of the respec­tive platform. Which data is collected depends on the infor­ma­tion you provide and the contact details you have given or released. This data is stored by us for the purpose of proces­sing the enquiry and in the event of follow-up questions. The legal basis for the proces­sing of the data is our legiti­mate interest in respon­ding to your enquiry in accordance with Art. 6 para. 1 (f) GDPR and, if appli­cable, Art. 6 para. 1 (b) GDPR if your enquiry is aimed at conclu­ding a contract. After the enquiry has been dealt with, your data will be deleted unless there is a legal obliga­tion to retain it. We assume that the proces­sing is completed when it can be inferred from the circum­s­tances that the matter concerned has been conclu­si­vely clari­fied.

Data proces­sing for the perfor­mance of the contract

If your contact via a social network is aimed at performing a contract with us, we process your data for the perfor­mance of a contract or for the imple­men­ta­tion of pre-contrac­tual measures or for the provi­sion of the requested services. In this case, the legal basis for the proces­sing of your data is Art. 6 para. 1 (b) GDPR. Your data will be deleted if it is no longer required for the perfor­mance of the contract or if it is deter­mined that the pre-contrac­tual measures do not lead to the conclu­sion of a contract in accordance with the purpose of the contact. It may also be neces­sary to store personal data of our contrac­tual partners after the conclu­sion of the contract in order to comply with contrac­tual or legal obliga­tions.

Data proces­sing on the basis of consent

If you are asked by the respec­tive platform provider for consent to proces­sing for a specific purpose, the legal basis of the proces­sing is Art. 6 para. 1 (a), Art. 7 GDPR. Consent given can be withdrawn at any time with effect for the future.

Insights function­a­lity

When you visit our social media site, personal data is processed by the platform operator and by us. Insofar as this data proces­sing takes place in connec­tion with the Insights function­a­lity of Facebook (Meta Platforms Ireland Ltd. or Meta Platforms Inc.), we are jointly respon­sible for it with Facebook (Art. 26 para. 1 GDPR). Insofar as this data proces­sing takes place in connec­tion with the Insights function­a­lity of LinkedIn (LinkedIn Ireland Unlimited Company. or LinkedIn Corpo­ra­tion.), we are jointly respon­sible for it with LinkedIn (Art. 26 para. 1 GDPR).

Page insights allow us to obtain aggre­gate data about visitor inter­ac­tion.

Site insights may be based on personal data collected in connec­tion with an indivi­dual’s visit to or inter­ac­tion with our site and in connec­tion with content provided. Your data may be processed for market research and promo­tional purposes. For example, user profiles can be created from the usage behaviour and resul­ting interests of the users. The user profiles can in turn be used, for example, to display adver­ti­se­ments within and outside the platforms that presu­mably corre­spond to the interests of the users. This data collec­tion takes place via cookies that are stored on your terminal device. Further­more, data that is indepen­dent of the devices used by the users may also be stored in the user profiles; in parti­cular, if the users are members of the respec­tive platforms and logged in to them.

We only receive summa­rised (aggre­gated) data from the platform operator, which does not allow any conclu­sions to be drawn about indivi­dual persons.

The proces­sing of your personal data may be used by us to increase the reach and aware­ness of our social media presences through target group-specific design of posts and to evaluate the success of marke­ting campaigns.

The legal basis for the proces­sing of your personal data in connec­tion with your visit to or inter­ac­tion with our Facebook fan page is Art. 6 para. 1 (f) GDPR. We have a legiti­mate interest in using aggre­gated infor­ma­tion about inter­ac­tions with our social media presence for promo­tional purposes.

Infor­ma­tion on the purposes pursued by the platform operator with the proces­sing of your personal data and the legal basis of this data proces­sing can be found in the privacy notice of the respec­tive platform operator.

Please note that we have no influence on the data collec­tion and further proces­sing under the respon­si­bi­lity of the platform operator. As a result, we cannot provide any infor­ma­tion about the scope, location and duration for which the data is stored by the platform operator.

Storage period

The personal data collected by us will be deleted if it is no longer required for the purposes speci­fied when it was collected or if you have exercised your right of withdrawal or objec­tion. Legal reten­tion periods remain unaffected. We have no influence on the storage period of your data, which is stored by the social media provi­ders for their own purposes.‍

APPLICATIONS

You can apply for one of our adver­tised positions via our online appli­ca­tion portal. We process your data insofar as this is neces­sary for the decision on the estab­lish­ment of an employ­ment relati­onship with us. The legal basis for this is Article 88 GDPR in conjunc­tion with Sect. 26 of the German Federal Data Protec­tion Act (BDSG).

Further­more, we may process your personal data if this is neces­sary for the fulfilment of legal obliga­tions (Art. 6 para. 1 © GDPR) or for the defence or asser­tion of legal claims. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legiti­mate interest is, for example, a duty of proof in procee­dings under the General Act on Equal Treat­ment (AGG).

If you give us express consent to process personal data for specific purposes, the lawful­ness of this proces­sing is based on your consent in accordance with Art. 6 para. 1 (a) GDPR, Sect. 26 para. 2 BDSG. You can withdraw your consent at any time with future effect. This applies in parti­cular to inclu­sion in our talent pool. If you give your consent, we will include your appli­ca­tion infor­ma­tion in our talent pool if no employ­ment relati­onship is estab­lished in order to contact you again in the event of subse­quent vacan­cies. In this case, we store your data for a period of 12 months and then delete the data, unless you give us your consent to keep the data longer.

If an employ­ment relati­onship arises between you and us, we may, in accordance with Art. 88 GDPR in conjunc­tion with Sect. 26 BDSG, further process the personal data already received from you for the purposes of the employ­ment relati­onship, insofar as this is neces­sary for the imple­men­ta­tion or termi­na­tion of the employ­ment relati­onship or for the exercise or fulfilment of the rights and obliga­tions of the employee repre­sen­ta­tive body resul­ting from a law or a collec­tive agree­ment, a company or service agree­ment (collec­tive agree­ment).

We only process data that is related to your appli­ca­tion. This can be general personal data (name, address, contact details, etc.), infor­ma­tion on your profes­sional quali­fi­ca­tions and school educa­tion, infor­ma­tion on further profes­sional training and, if appli­cable, other data that you provide to us in connec­tion with your appli­ca­tion. We collect your name and e‑mail address (manda­tory fields) via our contact form for the purposes mentioned above. In addition, you can tell us your title, mobile number, earliest starting date and period of notice, tell us how you became aware of us and attach comments and documents.

We may transfer your personal data to compa­nies affiliated with us, provided you have given your consent in accordance with Art. 88 GDPR in conjunc­tion with Sect. 26 para. 2 BDSG.

We use the HRworks GmbH personnel manage­ment system in which we manage and store appli­ca­tions. In this context, your data is passed on to the system provider. We have concluded a data proces­sing contract with the service provider in which we oblige them to protect our appli­cants’ data and not to pass it on to third parties.

Other­wise, data is only passed on to recipi­ents outside the company if this is permitted or required by law, the transfer is neces­sary to fulfil legal obliga­tions or we have your consent.

We store your personal data as long as this is neces­sary for the decision on your appli­ca­tion. Your personal data or appli­ca­tion documents will be deleted no later than six months after the end of the appli­ca­tion process (e.g. notifi­ca­tion of the rejec­tion decision), unless longer storage is legally required or permitted. We store your personal data beyond this only insofar as this is required by law or in the specific case for the asser­tion, exercise or defence of legal claims for the duration of a legal dispute.

In the event that you have agreed to a longer storage of your personal data, we will store it in accordance with your decla­ra­tion of consent.

If an employ­ment, training or intern­ship relati­onship is estab­lished follo­wing the appli­ca­tion process, your data will initi­ally continue to be stored to the extent neces­sary and permis­sible and then trans­ferred to the personnel file.

 

BUSINESS RELATIONS WITH THIRD PARTIES / DELIVERY AND PERFORMANCE TO US

We process and store the personal data provided by business partners (or poten­tial business partners) in the context of enqui­ries, the trans­mis­sion of offers, the trans­mis­sion of master data, orders/contracts or other business corre­spon­dence, and for the perfor­mance of pre-contrac­tual measures (business initia­tion) or the perfor­mance of a contract.

We only store personal data for as long as is neces­sary for the supply and service relati­onship or the adminis­tra­tion of the business relati­onship. The legal basis for this is Art. 6 para. 1 p. 1 (b) GDPR, insofar as the data proces­sing is carried out for the perfor­mance of a contract or the imple­men­ta­tion of pre-contrac­tual measures. We base the data proces­sing on our legiti­mate interest in accordance with Art. 6 para. 1 (f) GDPR in the smooth proces­sing of enqui­ries and business corre­spon­dence, insofar as the data proces­sing is neces­sary for these purposes.

For the above purposes, we collect name, business telephone number, business e‑mail address, business address, payment data of the company/business partner (bank details) and, if appli­cable, data provided by you within the scope of corre­spon­dence and contract proces­sing.

Data is processed in intern­ally used IT systems and passed on in this context to the respec­tive system provi­ders and, in the case of e‑mail commu­ni­ca­tion between us, to the respec­tive e‑mail provider. Banks may receive data from you in the course of payment proces­sing. In addition, in the context of legal disputes, your data may be passed on to a lawyer appointed by us.

The data will be deleted as soon as it is no longer required for contrac­tual purposes or business corre­spon­dence. In addition, we are required by appli­cable law to retain certain personal data for legally defined periods of time (such as in connec­tion with business transac­tions).

OTHER DATA TRANSFER

We will never offer your data for sale to third parties.

In addition to the disclo­sure of your data already mentioned in this privacy notice, we may share data with affiliated compa­nies if this is neces­sary for internal adminis­tra­tive purposes. We base this data sharing on our legiti­mate interest in the efficient and smooth internal adminis­tra­tion of the associa­tion in accordance with Article 6 para. 1 (f) of the GDPR.

In addition, we may be legally obliged to pass on data (Art. 6 para. 1 ©) GDPR). This is the case, for example, vis-à-vis the national regis­tra­tion autho­ri­ties (e.g. Sections 19, 30 of the Federal Regis­tra­tion Act (BMG)) or in the case of disclo­sure obliga­tions vis-à-vis law enforce­ment agencies and inves­ti­ga­ting autho­ri­ties.

If your data is also trans­ferred to non-European count­ries in this context, we ensure special protec­tion of your data by either only trans­fer­ring it to third count­ries for which the European Commis­sion has issued an adequacy decision or by using so-called standard contrac­tual clauses of the European Commis­sion.

Sale or merger

We may share your personal data in the event of a merger, acqui­si­tion or sale of all or part of our assets. We will of course notify you by email and/or your promi­nent notice on our website and inform you of your rights.‍

HOW WE ENSURE THE SECURITY OF THE DATA WE COLLECT

Protec­ting your personal data is very important to us. Although we take reasonable precau­tions to protect the personal data we collect, please note that your security system is infal­lible.

We use several appro­priate technical and organiza­tional measures and industry standards to protect your personal data from loss, theft, misuse, unaut­ho­rized access and unaut­ho­rized disclo­sure, altera­tion and destruc­tion. The personal data we store about you resides on computer systems with restricted access. In addition, we require third parties contracted by us to maintain appro­priate security measures for the infor­ma­tion we transmit. When you visit our website or send us infor­ma­tion via the website, your data is protected by encryp­tion techno­lo­gies, such as trans­port layer security (https encryp­tion).

YOUR RIGHTS

You have the follo­wing rights in relation to our use of your personal data:‍

Right to object accor­ding to Art. 21 GDPR

If your personal data is processed by us on the basis of legiti­mate interests pursuant to Article 6 para. 1 (f) GDPR, you have the right under Article 21 GDPR to object to the proces­sing of your personal data on grounds relating to your parti­cular situa­tion. If the objec­tion is directed against the proces­sing of personal data for the purpose of direct marke­ting, you have a general right of objec­tion without the requi­re­ment of specific grounds.

Right of access accor­ding to Art. 15 GDPR

You can ask us to provide you with infor­ma­tion about the proces­sing of your personal data and a copy of the personal data we hold about you.‍

Right to recti­fi­ca­tion or erasure pursuant to Art. 16, 17 GDPR

You can let us know if your personal data has changed or if you want us to change the personal data we collect about you.

In certain cases, you can ask us to delete the personal data we have collected about you.‍

Right to restric­tion of proces­sing Art. 18 GDPR

In certain cases you have the right to ask us to restrict the proces­sing of your data.

Right to withdraw consent given and objec­tion to proces­sing pursuant to Art. 7 para. 3 GDPR

If you have given your consent to the proces­sing of your data, you can withdraw this consent at any time with effect for the future. Such a withdrawal does not affect the lawful­ness of proces­sing of your personal data that has already taken place before the withdrawal.

Of course, you can object to the proces­sing of your personal data for purposes of adver­ti­sing and data analysis at any time. You can find more infor­ma­tion on this under Use of Cookies and other (Marketing-)Tools.

Right to lodge a complaint with a super­vi­sory autho­rity pursuant to Art. 77 GDPR

We will always endea­vour to find a solution with you if you experi­ence problems with our use of your data. However, if you feel that we have not been able to help you resolve the problem, you also have the right to complain to your data protec­tion super­vi­sory autho­rity about our proces­sing of your personal data.

We rely on you to ensure that your personal data is complete, accurate and up to date. Please notify us immedia­tely of any changes or inaccu­ra­cies in your personal data by sending your email to [datenschutz@ic-campus.com].‍