Privacy policy

Information on data protection

With this data protection information, we inform you about our handling of your personal data and about your rights according to the European Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG). LINC GmbH (hereafter referred to as “we” or “us”) is responsible for data processing.

I General information

1. Contact
   If you have any questions or suggestions regarding this information, or if you would like to contact us about asserting your rights, please send your inquiry to
   
   LINC GmbH
   Grapengiesserstr. 16, 21335 Lüneburg, Germany
   Phone: 04131 227 070 0
   E-mail: info@linc.de
   
   
2. Legal basis
   The term “personal data” as used in data protection law refers to all information that relates to an identified or identifiable individual. We process personal data in compliance with the relevant data protection regulations, the DSGVO and the BDSG. Data processing by us only takes place based on a legal permission. We process personal data only with your consent (Section 15 (3) TMG or Art. 6 (1) lit. a DSGVO), for the performance of a contract to which you are a party, or at your request for the performance of pre-contractual measures (Art. 6 (1) lit. b DSGVO), for the performance of a legal obligation (Art. 6 (1) lit. c DSGVO) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data override (Art. 6 (1) lit. f DSGVO).
   
   

3. Duration of storage
   Unless otherwise stated in the following notes, we only store the data for as long as is necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such legal retention obligations may arise from commercial or tax law regulations.
   
   

4. Categories of recipients of the data
   

   We use order processors in the context of processing your data. Processing operations carried out by such processors include for example, hosting, maintenance and support of IT systems, customer and order management, order processing, accounting, and billing or marketing activities. A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes but carry out data processing exclusively for the controller and are contractually obligated to ensure appropriate technical and organizational measures for data protection. In addition, we may transfer your personal data to bodies such as postal and delivery services, the company’s bank, tax advisors/auditors or the tax authorities.  Further recipients may result from the following notes.

5. Data transfer to third countries
   

   Visiting our website may involve the transfer of certain personal data to third countries i.e., countries in which the GDPR is not applicable law. Such a transfer takes place in a permissible manner if the European Commission has determined that an adequate level of data protection is required in such a third country. If such an adequacy decision by the European Commission does not exist, a transfer of personal data to a third country will only take place if appropriate safeguards are in place in accordance with Article 46 of the GDPR or if one of the conditions of Article 49 of the GDPR is met. Unless otherwise stated below, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable safeguards: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32010D0087. If you consent to the transfer of personal data to third countries, the transfer is made on the legal basis of Art. 49 (1) lit. a DSGVO.

6. Processing when exercising your rights
   

   If you exercise your rights pursuant to Art. 15 to 22 DSGVO, we will process the transmitted personal data for the purpose of implementing these rights by us and to be able to provide evidence thereof. We will process data stored for the purpose of providing information and preparing it only for this purpose and for data protection control purposes and otherwise restrict processing pursuant to Art. 18 DSGVO. These processing operations are based on the legal basis of Art. 6 (1) lit. c DSGVO in conjunction with. Art. 15 to 22 DSGVO and section 34 (2) BDSG.

7. Your rights
   

   As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

   1. In accordance with Art. 15 DSGVO and section 34 BDSG, you have the right to request information about whether and, if so, to what extent we are processing personal data relating to you or not.
   2. You have the right to demand that we correct your data in accordance with Art. 16 DSGVO.
   3. You have the right, in accordance with Art. 17 DSGVO and section 35 BDSG, to demand that we delete your personal data.
   4. You have the right to have the processing of your personal data restricted in accordance with Art. 18 DSGVO.
   5. You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format and to transfer this data to another controller.
   6. If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Art. 7 (3) DSGVO. Such a revocation will not affect the lawfulness of the processing that was carried out based on the consent until the revocation.
   7. If you believe that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
      
      
8. Right of objection
   

   In accordance with Art. 21 (1) DSGVO, you have the right to object to processing based on the legal basis of Art. 6 (1) lit. e or lit. f DSGVO on grounds relating to your particular situation. If personal data about you is processed by us for the purpose of direct marketing, you may object to such processing pursuant to Art. 21 (2) and (3) DSGVO.

9. Data protection commissioner
   

   You can reach our data protection officer at the following contact details:

   E-mail: datenschutzbeauftragter@linc.de
   Herting Oberbeck Data Protection GmbH
   Hallerstr. 76, 20146 Hamburg
   https://www.datenschutzkanzlei.de

    

II Data processing on our website

When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. In data protection law, the IP address is also generally considered to be personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that data can be sent and received.

1. Processing of server log files
   

   During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e., not via registration). This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) lit. f DSGVO. This processing serves the technical administration and security of the website. The stored data is deleted after seven days unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject based on the stored information. Articles 15 to 22 of the GDPR therefore do not apply pursuant to Art. 11 (2) of the GDPR, unless you provide additional information that enables us to identify you to exercise your rights set out in these articles.

2. Cookies
   

   We use cookies and similar technologies (“cookies”) on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or for specific cases. Further information on this is provided by the Federal Office for Information Security: https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html. The use of cookies is in part technically necessary for the operation of our website and is therefore permitted without the consent of the user. In addition, we may use cookies to offer special features and content and for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third-party cookies). We only use such technically unnecessary cookies with your consent in accordance with section 15 (3) TMG or Art. 6 (1) lit. a DSGVO. Information on the purposes, providers, technologies used, data stored, and the storage period of individual cookies can be found in the settings of our Consent Management Tool: follow path Settings.

3. Consent Management Tool
   

   This website uses a Consent Management Banner to control cookies. The Consent banner allows users of our website to give consent to certain data processing procedures or to revoke a given consent. By confirming the “Accept All” button or by saving individual cookie settings, you consent to the use of the associated cookies. The legal basis under data protection law is your consent within the meaning of Art. 6 (1) lit. a DSGVO. In addition, the banner helps us to provide evidence of the declaration of consent. For this purpose, we process information about the declaration of consent and further log data about this declaration. Cookies are also used to collect this data. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 (1) lit. c in conjunction with Art. 7 lit. 1 DSGVO). Here you can revoke your consent for cookies: Here you can revoke your consent for cookies

4. Contact options and forms
   
   

   Contact form

   Our website contains contact forms through which you can send us messages. The transfer of your data is encrypted (recognizable by the “https” in the address line of the browser). All data fields marked as mandatory are required to process your request. Failure to provide this data will result in us not being able to process your request. The provision of further data is voluntary. Alternatively, you can send us a message via the contact e-mail. We process the data for the purpose of answering your inquiry. If your request is directed towards the conclusion or performance of a contract with us, Art. 6 (1) lit. b DSGVO is the legal basis for data processing. Otherwise, we process the data based on our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art. 6 (1) lit. f DSGVO.

   Registration for certification and information events:

   Via our website, you have the possibility to register for various certification and info events as well as for other events. The information required for this can be seen on the input mask of the registration forms. The transfer of your data is encrypted (recognizable by the “https” in the address line of the browser). The data provided will be processed for the purpose of providing the service or carrying out the services you have booked. The legal basis for the processing is Art. 6 (1) lit. b DSGVO for private clients and individual coaches and Art. 6 (1) lit. f DSGVO for contacts of corporate clients.

5. Registration
   

   In order to access our LPP portal, registration via the website is required. You will receive the access data as soon as you have certified yourself as a customer or coach and purchased our product. are provided to our customers and coaches by us and processed in the further course. The processing is carried out for the purpose of service provision based on the legal basis of Art. 6 (1) lit. b DSGVO or based on our legitimate interest according to Art. 6 (1) lit. f DSGVO.

6. Blog with comment function
   

   We offer a blog on our website where we publish articles on various topics. Our blog has a comment function, for the use of which the provision of personal information is required. If you submit a comment, it will be published with the username you provided assigned to the respective post. To use the comment function, it is mandatory to provide the username you have chosen and your e-mail address. All other information you provide is voluntary. The legal basis for data processing in this regard is Art. 6 (1) lit. f DSGVO. When you submit a comment, we store your IP address/email address in addition to the aforementioned data. The legal basis for storing your email address/IP address is Art. 6 (1) lit. f DSGVO. We only use your email if a third party reports a comment to us as unlawful and we may need to investigate the incident. We store your IP address for the purpose of defending ourselves against third-party claims if you publish illegal content. We store your e-mail address as long as your comment is publicly visible. We delete your IP address one week after you have published the comment. Submitted comments we generally do not check before publication. However, we expressly reserve the right to delete your comments if they are objected to by third parties as unlawful. You can object to this storage of the above data at any time. In this case, however, we would have to remove your comments from our website.

7. Newsletter
   On our website we offer the possibility to register for our newsletter. After registration we will inform you regularly about the latest news on our offers. A valid e-mail address is required to register for the newsletter. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter on our website, we process personal data such as your e-mail address based on the consent you have given us. The processing is based on the legal basis of Art. 6 (1) lit. a DSGVO. You can revoke the consent granted at any time with effect for the future, for example via the “unsubscribe” link in the newsletter or by contacting us via the channels mentioned above. The legality of the data processing operations already carried out remains unaffected by the revocation. When registering for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 (1) lit. c in conjunction with Art. 7 (1) DSGVO). We also analyze the reading behavior and opening rates of our newsletter. For this purpose, pseudonymized usage data is collected and processed by us, which we do not merge with your e-mail address or your IP address. The legal basis for the analysis of our newsletter is Art. 6 (1) lit. f DSGVO and the processing serves our legitimate interest in optimizing our newsletter. You can object to this at any time by contacting one of the above-mentioned contact channels. For the management of subscribers, the dispatch of the newsletter and the analysis, we use the MailChimp service of The Rocket Science Group LLC d/b/a MailChimp (USA). Your e-mail address is therefore transmitted by us to MailChimp. The processing is carried out on our behalf and is based on the legal basis of Art. 6 lit. f DSGVO and serves our legitimate interest in optimizing and economically sending our newsletter. If you do not want your data to be processed by MailChimp, you should not subscribe to or unsubscribe from the newsletter. The newsletter service offers statistical analysis options of usage data. This includes, among other things, information on whether an email reached the recipient or was rejected by the server. Please note the information in the section “Data transfer to third countries”. For more information on data protection at MailChimp, please refer to MailChimp’s privacy policy at https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts.
   
   
8. Online store
   

   If you order a product via our website, we process personal data exclusively for the purpose of processing the contract or to provide you with the ordered product and subsequently send you the invoice. In the booking or ordering process, we only process the data that you yourself provide in the input mask. To be able to deliver the ordered products to you, we transmit your data required for the delivery to one of our shipping service providers as specified in the order. The legal basis for the processing is in each case Art. 6 (1) lit. b DSGVO for private customers and Art. 6 para. 1 lit. f DSGVO for commercial customers. All data fields marked as mandatory are required for processing your booking or order. Failure to provide this data will result in us not being able to process your booking or order. If you choose the payment method Paypal, please note that the relevant payment information is collected and processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., based in Luxembourg. Paypal transmits to us your address data deposited with Paypal, which we process exclusively for the execution of the contract. The legal basis is Art. 6 para. 1 lit. b DSGVO. Further information on data protection at Paypal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#r5.

9. Google Analytics
   

   We use the Google Analytics service of the provider Google Ireland Limited (Google Ireland/EU) on our website. Google Analytics is a web analytics service that allows us to collect and analyze data about the behavior of visitors to our website. Google Analytics uses cookies for this purpose, which enable an analysis of the use of our website. Personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about interaction with our website are processed. In part, this data is information stored in the terminal device you are using. In addition, further information is also stored on your used end device via the cookies used. Such storage of information by Google Analytics or access to information already stored in your terminal device will only take place with your consent in accordance with Section 15 (3) of the German Telemedia Act (TMG). Google Ireland will process the data collected in this way on our behalf for the purpose of evaluating the use of our website by users, compiling reports on activity within our website and providing us with other services relating to the use of our website and internet usage. In doing so, pseudonymous usage profiles of the users can be created from the processed data. The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for the data processing in connection with the Google Analytics service is therefore Art. 6 (1) lit. a DSGVO. You can revoke this consent at any time with effect for the future. In the case of Google services, a transfer of data to Google Inc. in the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries”. Users can find further information on data protection at Google in Google’s data protection information: https://www.google.com/policies/privacy. We use Google Analytics only with IP anonymization enabled. This means that the IP address of the user is shortened by Google Ireland within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The IP address transmitted by the user’s browser is not merged with other data. We use the Google Universal Analytics variant. This allows us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to put individual user actions in context and analyze long-term relationships. The data on user actions is stored for a period of 14 months and then automatically deleted. Data whose storage period has expired is automatically deleted once a month.

10. Third party services and content
    
    

    YouTube

    We use the YouTube service of Google Ireland Limited (Ireland/EU) on our website to integrate videos. For such an integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google and Google may set its own cookies. We use YouTube in “extended data protection mode”, so that no cookies are set by YouTube to analyze user behavior. You can find further information about these processing activities, the technologies used, stored data and the storage period in the settings of our Consent Management Tool. YouTube is only used with your consent in accordance with Art. 6 (1) lit. a DSGVO. With YouTube, a transfer of data to Google Inc. and YouTube LLC in the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries”. Users can find further information on data protection at Google in Google’s privacy policy at https://www.google.com/policies/privacy.
    
    

    Google reCAPTCHA

    We use the reCAPTCHA service of Google Ireland Limited (Ireland/EU) when registering for certifications and information events.  For such integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google. In addition, Google collects further data e.g., about your browser and your click behavior. We use the service for security reasons to check whether form entries are made by a natural person. In this way, automated access attempts and attacks can be detected and warded off. We are required by law to take technically and commercially reasonable measures to ensure the security of the portal. The legal basis is Art. 6 lit. c DSGVO in conjunction with. Art. 32 DSGVO and section 13 para. 7 TMG. You can prevent this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is the Matrix-based firewall uMatrix for the browsers Firefox and Google Chrome. Please note that this may result in functional restrictions on the website or portal. With Google services, the transmission of data to Google Inc. in the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries”. Users can find further information on data protection at Google in Google’s data protection information: https://www.google.com/policies/privacy.

    Google Fonts

    We use Google Web Fonts from Google Ireland Limited (Ireland/EU) on our website to display fonts. For such integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google. This data processing is carried out to protect our legitimate interests in the optimization and economic operation of our website and is based on the legal basis of Art. 6 (1) lit. f DSGVO. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. For example, such extension is the Matrix-based firewall uMatrix for the browsers Firefox and Google Chrome. Please note that this may result in functional restrictions on the website. With Google services, a transmission of data to Google Inc. in the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries”. Users can find further information on data protection at Google in Google’s privacy policy: https://www.google.com/policies/privacy.

    Optimole

    We use Optimole from Vertigo Studio S.R.L. (Romania/EU) on our website to display content. For such integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Vertigo Studio S.R.L.. This data processing is carried out to protect our legitimate interests in the optimization and economic operation of our website and is based on the legal basis of Art. 6 (1) lit. f DSGVO. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is, for example, the Matrix-based firewall uMatrix for the browsers Firefox and Google Chrome. Please note that this may result in functional restrictions on the website.
    
    

III Data processing on our social media channels

We are represented on several social media platforms with a company page. Through this, we would like to offer further opportunities for information about our company and for exchange. Our company has company pages on the following social media platforms:

• Facebook
• Instagram
• LinkedIn
• Xing
• YouTube
  
  

When you visit or interact with a profile on a social media platform, personal data about you may be processed. Information associated with a social media profile used also regularly constitutes personal data. This also covers messages and statements made while using the profile. In addition, during your visit to a social media profile, certain information about it is often automatically collected, which may also constitute personal data.

1. Visit to a social media page
   
   Facebook and Instagram page
   
   When you visit our Facebook or Instagram page, through which we present our company or individual products from our range, certain information about you is processed. The sole controller of this processing of personal data is Facebook Ireland Ltd (Ireland/EU – “Facebook”). For more information about the processing of personal data by Facebook, please visit https://www.facebook.com/privacy/explanation. Facebook offers the option to object to certain data processing; related notices and opt-out options can be found at https://www.facebook.com/settings?tab=ads. Facebook provides us with statistics and insights for our Facebook and Instagram page in anonymized form, which we use to gain insights into the types of actions that people take on our page (so-called “page insights”). These page insights are created based on certain information about individuals who have visited our page. This processing of personal data is carried out by Facebook and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our site and improving our site based on these insights. The legal basis for this processing is Art. 6 (1) lit. f DSGVO. We cannot associate the information obtained via Page Insights with individual user profiles interacting with our Facebook and Instagram page. We have entered into a joint controller agreement with Facebook, which sets out the distribution of data protection obligations between us and Facebook. For details about the processing of personal data to create Page Insights and the agreement entered between us and Facebook, please visit https://www.facebook.com/legal/terms/information_about_page_insights_data. In relation to these data processing operations, you have the option of asserting your data subject rights (see “Your rights” in this regard) against Facebook as well. Further information on this can be found in Facebook’s privacy policy at https://www.facebook.com/privacy/explanation. Please note that, in accordance with Facebook’s privacy policy, user data is also processed in the USA or other third countries. Facebook only transfers user data to countries for which an adequacy decision has been issued by the European Commission in accordance with Article 45 of the GDPR or based on appropriate guarantees in accordance with Article 46 of the GDPR.
   
   LinkedIn Company Page
   
   LinkedIn Ireland Unlimited Company (Ireland/EU – “LinkedIn”) is generally the sole controller of personal data when you visit our LinkedIn page. For more information about LinkedIn’s processing of personal data, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy. When you visit, follow or engage with our LinkedIn company page, LinkedIn processes personal data to provide us with anonymized statistics and insights. This provides us with insights into the types of actions that people take on our site (so-called page insights). For this purpose, LinkedIn processes in particular such data that you have already provided to LinkedIn via the information in your profile, such as data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, such as whether you are a follower of our LinkedIn company page. With the page insights, LinkedIn does not provide us with any personal data about you. We only have access to the aggregated page insights. It is also not possible for us to draw conclusions about individual members via the information in the page insights. This processing of personal data in the context of the page insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest to evaluate the types of actions taken on our LinkedIn company page and to improve our company page based on these insights. The legal basis for this processing is Article 6 (1) lit. f DSGVO. We have entered into a joint controller agreement with LinkedIn, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum. Thereafter, the following applies: LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn to do so online via the following link (https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de) or reach LinkedIn via the contact details in the Privacy Policy. You can contact the Data Protection Officer at LinkedIn Ireland via the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO. You may also contact us at our provided contact details about exercising your rights in connection with the processing of personal data in the context of page insights. In such a case, we will forward your request to LinkedIn. LinkedIn and we have agreed that the Irish Data Protection Commission is the lead supervisory authority overseeing processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see dataprotection.ie) or any other supervisory authority. Please note that according to the LinkedIn Privacy Policy, personal data is also processed by LinkedIn in the US or other third countries. In this context, LinkedIn transfers personal data only to countries for which an adequacy decision has been issued by the European Commission pursuant to Article 45 of the GDPR or based on appropriate safeguards pursuant to Article 46 of the GDPR.
   
   Xing
   
   In principle, New Work SE (Germany/EU) is the sole responsible party for the processing of personal data when visiting our Xing profile. For more information about the processing of personal data by New Work SE, please visit https://privacy.xing.com/de/datenschutzerklaerung.
   
   YouTube
   
   Google Ireland Limited (Ireland/EU) is the sole controller for the processing of personal data when visiting our YouTube channel. Further information about the processing of personal data by YouTube and Google Ireland Limited can be found at https://policies.google.com/privacy.
   
   
2. Comments and direct messages
   We also process information that you have provided to us via our company page on the respective social media platform. Such information may be the username used, contact details or a message to us. These processing operations by us are carried out as the sole responsible party. We process this data based on our legitimate interest in contacting inquiring persons. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO. Further data processing may take place if you have consented (Art. 6 para. 1 lit. a DSGVO) or if this is necessary for the fulfillment of a legal obligation (Art. 6 para. 1 lit. c DSGVO).
   
   

IV Further data processing

1. 1. Contacting us by e-mail
      

      If you send us a message via the contact email provided, we will process the transmitted data for the purpose of responding to your inquiry. We process this data based on our legitimate interest to get in touch with inquiring persons. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO.

   2. Customer and interested party data
      If you contact our company as a customer or interested party, we process your data to the extent necessary to establish or implement the contractual relationship. This regularly includes the processing of personal master, contract and payment data provided to us, as well as contact and communication data of our private customers and contact persons at commercial customers and other business partners. The legal basis for this processing is Art. 6 (1) lit. b DSGVO for private customers and Art. 6 (1) lit. f DSGVO for our commercial customers. Further data processing may take place if you have consented (Art. 6 para. 1 lit. a DSGVO) or if this is necessary for the fulfillment of a legal obligation (Art. 6 para. 1 lit. c DSGVO).
      
      
   3. Use of e-mail address for marketing purposes
      We may use your e-mail address provided during registration or ordering to inform you about our own similar products and services. The legal basis is Art. 6 para. 1 lit. f DSGVO in conjunction with section 7 (3) UWG. You can object to this at any time without incurring any costs other than the transmission costs according to the prime rates. To do so, you can unsubscribe by clicking on the unsubscribe link contained in each mailing or by contacting us via the above-mentioned contact channels.
      
      
   4. Implementation of (online) events
      

      Our company organizes further training to obtain certifications and offers regular information events. If you have registered for an event, we process the data provided at registration for the internal organization and implementation of the event. The legal basis for the processing of your personal data is Art. 6 (1) lit. b DSGVO for private customers and individual coaches and Art. 6 (1) lit. f DSGVO if you participate in the events as a contact person for a corporate customer. If the events are fee-based, we also process your data for billing purposes and to meet our accounting retention obligations. This processing is based on our legal obligations under Art. 6 para. 1 lit. c DSGVO as well as for contract performance according to Art. 6 para. 1 lit. b DSGVO. For the execution of online events, we use Zoom, a service of Zoom Video Communications, Inc. (USA). In this process, personal data of the participants such as login name and communication content are processed on our behalf by Zoom Video Communications, Inc. and stored on their servers. The use of Zoom and the associated data processing is based on our legitimate interest in the smooth running of our events. The legal basis is Art. 6 para. 1 lit. f DSGVO. When using Zoom, a transfer of data to the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries”. Users can find further information on data protection at Zoom in the privacy notices: https://zoom.us/de-de/privacy.html.

   5. Surveys and questionnaires
      

      From time to time, we conduct customer surveys on the use of our service. For this purpose, we send out questionnaires and ask you to fill them out and return them to us. The necessary processing of your data (name, contact details) and information from the questionnaire is based on our legitimate interest to inquire about the current status and to optimize our offer. The legal basis is Art. 6 para. 1 lit. f DSGVO.

   6. Applications
      If you apply to our company, we process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and noted by the relevant contacts at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you have provided for up to six months after any rejection for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage. The legal basis for data processing is section 26 (1) sentence 1 BDSG. If we store your applicant data beyond a period of six months and you have expressly consented to this, we would like to point out that this consent can be freely revoked at any time in accordance with Article 7 (3) DSGVO. Such revocation shall not affect the lawfulness of the processing that was carried out based on the consent until the revocation.