Data Protection Declaration and Cookie Guideline

Valid as of: 25 May 2018

pbm Academy ("PBM") is aware that the protection of your privacy when using our websites is an important issue and we take the protection of your personal data very seriously. Therefore we want you to know what data we store, when we store it and how we use it. With this Data Protection Declaration and Cookie Guideline ("Data Protection Declaration"), we wish to inform you of these data protection measures when you visit our website at pbm-academy.de ("Website"). Furthermore, this Data Protection Declaration describes what cookies are used on the website and how you can change cookie settings according to your personal wishes.

• What is personal data?
• Who is responsible for processing my data?
• What data is processed when I use the Website, and for what purpose?
• Are cookies and web analysis technologies used?
• How is my data protected?
• To whom is my data forwarded?
• Where is my data stored? Is my data also transferred to other EU countries and/or processed there?
• How long is my data stored?
• How can this Data Protection Declaration be amended?
• What rights do I have?

What is personal data?

"Personal Data" is all information relating to an identified or identifiable natural person, for example your name or contact details, but also other information with which you may be directly or indirectly identified, especially an identification number, location details, an online username or one or more special characteristics that express your physical, psychological, genetic, mental, commercial, cultural or social identity.

 

Who is responsible for processing my data?

The website is prepared for you by pbm-academy.de, which processes your data as a controller within the definition of the EU General Data Protection Regulation (GDPR).

You may approach us at any time via the contact details provided at the end of this Data Protection Declaration. There you will also find the contact details of our Data Protection Officer.

 

What data is processed when I use the Website, and for what purpose?

In principle you can use our website without providing your personal details.

But whenever you visit our website, we record certain details such as the name of your internet service provider, the websites from which you visit us, the sub-page of our website which you visit and, occasionally, your IP address. However, no evaluation of your data in personal-related form takes place. In particular, by means of technical and organisational measures, we have ensured that your IP address is permanently stored and evaluated only in abridged (anonymised) form.

We record the details obtained from you solely for security purposes and for the purpose of a statistical (anonymised) evaluation of the use of our website. For this we rely on your consent and the need to process your data in order to protect our legitimate interests (i.e. our interest in the analysis, improvement and efficient and cost-effective provision of services, and our interest in the secure and law-compliant presentation of our offer. i.e. to assert, defend and exercise legal claims). If any data is transferred to external service providers, we have ensured by means of technical and organisational measures that data protection regulations are observed.

We only collect personal data if you provide us with such data for example, when registering with us, filling in forms and sending emails, or when ordering products and services, sending enquiries or ordering materials.

In principle, we will only use the personal data collected from you to prepare the products and services you require. Your data will only be processed if this is necessary to fulfil a contract concluded with you or to implement any associated contractual measures resulting from your enquiry, and to protect our legitimate interests in the efficient and cost-effective preparation of our offer. Your data is processed for other purposes only if you have granted us your consent for this, unless such processing is necessary in order to fulfil our statutory obligations or protect our legitimate interests (to assert, defend and exercise legal claims).

 

Are cookies and web analysis technologies used?

We use so-called "cookies" on this website. Cookies are small text files that are stored on your device via your browser. Cookies store certain information (e.g. your preferred language or page settings), which your browser sends back to us when you revisit our website (depending on the validity of the cookies).

We use two types of cookies: (1) Technically essential cookies without which the functionality of our website would be restricted, and (2) optional cookies. You can see the cookies that we use and their possible settings in the following table.

Of course you can use our website entirely without cookies (including technically essential cookies). In your browser's settings, you can configure the use of cookies or deactivate them entirely. However this may restrict the functions and user-friendliness of our offering.

 

1. Technically essential cookies
    

   Cookie(s)	Validity	Purpose and content
   cookie-consent	30 days	Reminder choice of optional cookies: Used to indicate the use of cookies. If a user clicks on "Accept", this cookie remembers the decision for 30 days and the message is no longer displayed for this period.

2. Optional Cookies
   
   We use optional cookies only with your prior consent. When you visit our website for the first time, a banner appears in which we ask for your permission to use optional cookies. If you agree, we store a cookie on your computer and the banner will not reappear as long as the cookie remains valid. When the cookie expires or if you deliberately erase it sooner, the banner will reappear when you next visit our website, in order to obtain your permission again.
   
   You can revoke your permission to use optional cookies at any time, without this affecting the legality of the processing of your information until revocation, by using the appropriate settings shown in the following table.
    

   Cookie(s)	Validity	Purpose and content
   Google Tag Manager	6 months	These cookies allow us to analyse your use of this website, for which we give your device a unique, randomly generated ID with which we recognise your device the next time you visit. Provider: Google Inc. You will find further information in the following description (section 4.c)

Use of Google Analytics
On this website we use Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google“).

Provided you have given your advance consent, Google analyses your use of this website on our instruction. To do so, we use the cookies described in detail in the table above, together with other tools. The information collected by Google about your use of this website (e.g. the assigned URL, the pages you visit, your language setting, the operating system you use or your screen resolution) is transferred to a Google server in the United States and stored and analysed there. The result is provided to us in anonymised form. Your user data are not correlated with your full IP address. On this website we have activated the IP anonymization function offered by Google, so that the final octet (Type IPv4) or the last 80 bits (Type IPv6) of your IP address are erased in member states of the European Union or in other contracting member states of the European Economic Area. Only in exceptional cases is your full IP address transferred to a Google server in the United States and abridged there. In addition, Google is certified under the EU-U.S. Privacy Shield Framework, so that an appropriate level of data security is assured when Google processes data in the United States (see www.privacyshield.gov).

Google uses this information on instructions from PBM to evaluate your use of the website, produce reports on website activity for PBM, and provide PBM with other services associated with the use of websites and the Internet. Any necessary processing of your data occurs on the basis of your consent and in order to protect our legitimate interests (i.e. our interest in the analysis, and the improvement and efficient and cost-effective operation of our website). Google may also transfer information to third parties if this is required by law or if such third parties process this data on instructions from Google. Under no circumstances is the IP address collected by Google Analytics from your browser added to other Google data. 

You can prevent cookies from being stored by using the appropriate settings in your browser. But in doing so you may not be able to make full use of all the website's functions.

In addition, you may withdraw your consent at any time and prevent Google Analytics from collecting and storing your data, by managing your consent in the above data, which creates an opt-out cookie, or by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Please note that you must repeat the two options in the above process if you use a different device or browser. Please also note that if you erase all the cookies installed in your browser, the opt-out cookie will also be erased.

You will find further information on Google Analytics in the Google Analytics terms and conditions, the security and data protection regulations of Google Analytics, and in the Google Data Protection Declaration (see also https://support.google.com/analytics/answer/6004245?hl=de).

 

How is my data protected?

PMB has taken appropriate technical and organisational measures to protect your data against unlawful disclosure, unauthorised access, malicious manipulation, misuse, unintentional or unlawful destruction and alteration, and loss. If personal data is collected and processed, the information is transferred in encrypted form to prevent misuse of the data by third parties. Our protection measures are continuously revised in line with technological developments.

 

To whom is my data forwarded?

The database and your contents remain with our company and with our technical service provider in order to prepare our website. Unless expressly stated in our Data Protection Declaration, we or our authorised representatives shall not transfer your personal data to third parties in any form, unless you have given your consent for this transfer or it is required on the basis of an official order or statutory obligation.

Therefore we engage outside technical service providers to help us operate our website and/or prepare the functions and services offered to you. In particular, we use technical service providers to operate the services provided from a technical aspect and to store and manage your data (e.g. hosting service providers, internet agencies). These providers act solely on our instructions and are obliged to meet all the technical and organisational measures required to protect your personal data in accordance with data law. Our service providers are not permitted to transfer data to third parties or use them for other purposes.

If, in an individual case, your data needs to be disclosed and/or transferred to a third party, we shall provide you with further information on their intended use in connection with the collection, processing and/or use thereof, unless this is prohibited or not required under law.

 

Where is my data stored? Is my data also transferred to other EU countries and/or processed there?

We retain control over and assume responsibility for the use of the personal data which you give us. It is possible that our service providers, acting on our instructions, may store your data completely or partly in other countries (e.g. the United States). These countries may have different data protection laws than the county you live in. If our service providers process your data in a country outside the European Union or European Economic Area that guarantees no standards of data protection deemed adequate by the European Commission, we shall ensure by means of suitable measures that the enterprise commissioned with the data processing provides suitable guarantees that your personal data is protected as per requirements. For further information about the service providers we employ, the countries in which they operate and the measures envisaged by us, including the possibility of obtaining a copy of this information, please contact us using the contact details given at the end of this Data Protection Declaration.

 

How long is my data stored?

We store personal data for as long as it is necessary to prepare the functionalities or perform the services that you require or for which you have granted consent. At the end of this process, your data is erased, unless erasure is prevented by statutory data storage requirements (especially commercial or fiscal law provisions), or unless in a specific case a longer storage period is necessary in order to fulfil our statutory obligations or guard our legitimate interests (to assert, defend and exercise legal claims).

 

How can this Data Protection Declaration be amended?

We reserve the right to amend this Data Protection Declaration if our practices regarding the handling of your personal data on our website change. You may visit the latest version of this Data Protection Declaration on our website at any time, at pbm-academy.de.

Even if we do not plan to change our practices in future, we recommend that you view the latest version of this Data Protection Declaration when you visit our website, so that you can obtain comprehensive information on the collection, storage and processing of your personal data and on the way we use cookies.

 

What rights do I have?

• If your data is processed by PBM, you have the following statutory rights:
• The right to obtain information on your personal data processed by PBM and demand a copy of this data (right to information);
• The right to rectify incorrect data and, considering the purposes of the processing, the right to demand the rectification of incomplete data (right to rectification);
• Where there is a justified reason, the right to demand the erasure of your data (right of erasure);
• The right to have the processing of your personal data restricted provided that the statutory conditions exist (right to a restriction of processing);
• If the statutory conditions exist, the right to obtain your personal data in a structured, common and machine-readable form, if technically possible, and have them transferred by PBM to another processor (right to data portability); and
• The right not to be subjected to a decision based solely on an automated processing, insofar as the statutory requirements for this do not exist. At present, PBM does not employ automated decision-making. 

Furthermore, you have the right to object to the processing of your data by PBM to safeguard its legitimate interests, if, in compliance with statutory requirements, your individual situation provides reasons for non-processing (right to objection). If personal details are processed by PBM in order to engage in direct advertising, you have the right to object to this processing at any time without the need to provide any particular reason.

If you have given your consent for us to process your data, you can revoke it at any time, without this affecting the lawfulness of the processing of your information until revocation.

To exercise your rights (including the revocation of any consent), and if you have questions about the processing of your data, please contact PBM using the contact details given below. To revoke your consent to the use of cookies, please follow the processes described under clause 4.

Moreover, without prejudice to other legal resources, you have the right to file a complaint to a supervisory authority at any time.