Privacy Policy

We are pleased that you are visiting our website and thank you for your interest in our institution. The way we treat our customers and prospective students is a matter of trust. The trust placed in us is of very great importance to us and therefore carries the responsibility and obligation to handle your data carefully and to protect it against misuse.

So that you can feel safe and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously. We therefore act in accordance with the applicable legal provisions on the protection of personal data and on data security. With this privacy information we would like to inform you about when we store which data and how we use it – naturally in compliance with the applicable case law.

bbw Hochschule adheres in particular to the EU General Data Protection Regulation as well as to the current Federal Data Protection Act (BDSG). With regard to internet use, we follow the German Digital Services Act (DDG) of the Federal Republic of Germany in order to protect your personal data. In the following, we explain which information we collect during your visit to our websites and how it is used.

You can find the complete privacy policy of bbw Hochschule for download here: Privacy Policy

Name and address of the controller

The controller within the meaning of the GDPR and other national data protection laws of the member states as well as further data protection provisions is:

bbw Akademie für Betriebswirtschaftliche Weiterbildung GmbH
as the operator of bbw Hochschule Am Schillertheater 2
10625 Berlin

Tel.: +49 (0) 30 319909 50
Fax: +49 (0) 30 319909 555
Mail: info@bbw-hochschule.de

Name and address of the data protection officer

Mr Andreas Thurmann

DataSolution LUD GmbH
Isarstr. 13
D-14974 Ludwigsfelde

Tel.: +49 (0) 3378 202513
Mail: mail@ds-lud.de

General information on data processing

Scope of the processing of personal data
As a matter of principle, we collect and use our users' personal data only insofar as this is necessary to provide a functioning website as well as our content and services. The collection and use of our users' personal data regularly takes place only with the user's consent. An exception applies in cases in which obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal provisions.

Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis. In the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as processing of personal data is necessary to fulfil a legal obligation (statutory provisions) to which our institution is subject (e.g. federal registration laws), Art. 6(1)(c) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our institution or of a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

Data erasure and storage period
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may furthermore take place where this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased when a storage period prescribed by the aforementioned norms expires, unless there is a need for the continued storage of the data for the conclusion or performance of a contract.

Privacy Policy (eLearning)

Privacy information on the processing of personal data in the context of our eLearning offering – learning platform, webinars and web meetings, email contact, and the technical provision of the website.

General information on data processing

Scope of the processing of personal data
As a matter of principle, we collect and use our users' personal data only insofar as this is necessary to provide a functioning website as well as our content and services. The collection and use of our users' personal data regularly takes place only with the user's consent. An exception applies in cases in which obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal provisions.

Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis. In the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as processing of personal data is necessary to fulfil a legal obligation (statutory provisions) to which our institution is subject, Art. 6(1)(c) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our institution or of a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

Data erasure and storage period
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may furthermore take place where this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased when a storage period prescribed by the aforementioned norms expires, unless there is a need for the continued storage of the data for the conclusion or performance of a contract.

bbw Hochschule learning platform

Description and scope of the data processing
From the moment you begin registering as a user on the learning platform lernportal.bbw-hochschule.de, the data you enter or that arises automatically through your use is processed. Insofar as this refers to your person and not merely to a fictitious identity („guest“), it constitutes personal data. The relevant data protection regulations therefore also apply to the learning platform.

When setting up your account, we collect your surname, your first name, your email address and your place of residence. This data is stored in a database. After logging in, you can view this data at any time by clicking on your name (top right of the screen or at the bottom of the page). In your personal profile you can revise or supplement this data (e.g. your own photo, additional names, personal interests as well as optional entries such as address and contact details).

Your entries are visible to other participants in courses and, independently of this, to other trainers and administrators. Through the settings in your personal profile you can, for example, make your email address generally invisible to other users.

For login you will receive a user name and a password. On first login you will be prompted to change this password. In addition, you must confirm that you have taken note of this privacy policy.

In your personal profile you can choose how you receive emails from lernportal.bbw-hochschule.de (e.g. individual emails or daily summaries). You can adjust this setting at any time.

When using the messenger (messages), the texts you write to other users are visible to trainers and administrators. If you do not want this, please use your email system and write emails to send messages to other users.

Your usage data, including log data, remains stored on lernportal.bbw-hochschule.de. It is accessible to the administration of the learning portal and to the management of the respective course room, but not (apart from data in connection with forums) to other students. Contributions that you write, for example, within forums remain available at a later point in time, even when you are no longer active as a user. These contributions are comparable to letters to the editor of a newspaper – after publication, they can still be read years later.

The course rooms on lernportal.bbw-hochschule.de are not public. They are also not captured by search functions, e.g. those of Google. Your contact details are no longer visible to other users once you are no longer registered in the course room. Through the settings in your personal profile you can generally make your email address invisible to other users. This setting does not apply to the instructors of a course or to administrators.

Note: When courses that are not publicly accessible are created in a Moodle system, the course content and the users' contributions are of course not discoverable by search engines. The stored data is not passed on to any other persons or bodies, not even in anonymised form.

Legal basis for the data processing
The legal basis for the processing of the data is the performance of the study contract as well as our legitimate interest in the data processing in the context of providing the learning portal. If you upload an image of yourself, you thereby give your consent to the publication of the image. We point out that uploading the image is voluntary and has no influence on the use of the learning portal. The same applies to additional information that you add about your person.

Purpose of the data processing
The processing of the personal data serves to provide and carry out our eLearning offering within the scope of the study programme.

Duration of storage
The personal data collected by us for the purpose of carrying out the studies is stored until the expiry of the statutory retention period (6 years after the end of the calendar year in which the studies were completed) and is then deleted, unless we are obliged to store it for a longer period under Article 6(1) sentence 1(c) GDPR on the basis of tax-law and commercial-law retention and documentation obligations (arising from the HGB, StGB or AO), or you have consented to storage beyond this under Art. 6(1) sentence 1(a) GDPR. We are thus obliged to retain certificates for a period of 30 years.

Possibility of objection and removal
You have the option to object to the processing of your data at any time. For this purpose we have set up the email address widerspruch@bbw-hochschule.de. We point out that in the event of an objection, access to the learning portal is not possible.

Webinars/webcasts and web meetings

Instructors have the option of offering training and continuing education courses in the form of webinars/webcasts or web meetings with different thematic focuses when an in-person event is not possible. Participation in a webinar/webcast or web meeting requires registration. To conduct webinars/webcasts and web meetings we use the following product:

• WebEx from WebEx Communications Deutschland GmbH, c/o Cisco Systems GmbH, Hansaallee 249, 40549 Düsseldorf, Germany. WebEx is a product of Cisco Systems, Inc., 170 West Tasman Dr., San Jose, CA 95134, USA. Note: We use WebEx as an offering from Telekom; the services are processed on European servers.

For registration, the providers make a registration link available to us. As part of the registration process, the following data, among others, is processed:

• Email address

We need your email address in order to send the registration confirmation.

Legal basis for the data processing
The legal basis for the processing of the data is the performance of the study contract as well as our legitimate interest in the data processing in the context of providing the learning portal.

Purpose of the data processing
The processing of the personal data serves us solely to provide a platform for online communication, such as video conference rooms.

Duration of storage
No video recordings are stored. The data for registration or invitation is deleted as soon as it is no longer required for achieving the purpose (the end of the online course).

Possibility of objection and removal
You have the option at any time to leave the online course or to end the session.

Email contact

Description and scope of the data processing
We provide email addresses for getting in touch via the website. In the event of contact being made, the personal data transmitted with the email is stored.

Legal basis for the data processing
The legal basis for the processing of the data is our legitimate interest in the data processing in the context of contact being initiated by the enquirer.

Purpose of the data processing
The processing of the personal data serves us solely to handle the contact request.

Duration of storage
The data is deleted as soon as it is no longer required for achieving the purpose of its collection. For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified.

Possibility of objection and removal
You have the option at any time to object to the processing of your personal data. For this purpose we have set up the email address widerspruch@bbw-gruppe.de. However, you can also contact the recipient of the email directly.

Provision of the website and creation of log files

Description and scope of the data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected in this process:

• Information about the browser type and the version used
• The user's operating system
• The user's IP address
• Date and time of access
• Websites from which the user's system reaches our website
• Websites that are accessed by the user's system via our website

The data is likewise stored in the log files of our system. This data is not stored together with other personal data of the user. No personal user profiles can be created. The stored data is evaluated only for statistical purposes.

Legal basis for the data processing
The legal basis for the temporary storage of the data and the log files is the processing for the safeguarding of our legitimate interest, that is, of the bbw.

Purpose of the data processing
The temporary storage of the IP address by the system is necessary in order to enable the website to be delivered to the user's computer. For this, the user's IP address must remain stored for the duration of the session. Storage in log files takes place in order to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in the data processing also lies in these purposes.

Duration of storage
The data is deleted as soon as it is no longer required for achieving the purpose of its collection. In the case of the collection of data for providing the website, this is the case when the respective session has ended. In the case of the storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case the IP addresses of the users are deleted or altered so that an assignment to the accessing client is no longer possible.

Possibility of objection and removal
The collection of data for providing the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

Use of cookies

Description and scope of the data processing
Cookies are small files that enable us to store on your computer specific information relating to you, the user, while you visit one of our websites. Cookies help us to determine the frequency of use and the number of users of our websites, as well as to make our offerings as convenient and efficient as possible for you. We use so-called „session cookies“, which are temporarily stored exclusively for the duration of your use of our websites. The session cookies are stored on your data carrier in order to ensure certain settings and functionalities on our websites via your browser. The cookies we use are deleted again after the end of the browser session, that is, after you close your browser.

Legal basis for the data processing
The legal basis for the processing of personal data using technically necessary cookies is our legitimate interest in the data processing.

Purpose of the data processing
The purpose of using technically necessary cookies is to make the use of websites simpler for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles.

Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted from it to our site. Therefore you as a user also have full control over the use of cookies. By changing the settings in your internet browser you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Your rights that you can exercise

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

You have a right of access to the personal data stored about your person, to the purposes of the processing, to any transfers to other bodies and to the duration of storage.

Should data be inaccurate or no longer necessary for the purposes for which it was collected, you can demand the rectification, erasure or restriction of the processing. Insofar as provided for in the processing procedures, you can also view and, where applicable, correct your data yourself.

Should there be grounds arising from your particular personal situation that argue against the processing of your personal data, you can, insofar as the processing is based on a legitimate interest, object to it. The controller will no longer process the personal data concerning you, unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed in order to conduct direct marketing, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is connected with such direct marketing. If you object to the processing for purposes of direct marketing or profiling, the personal data concerning you will no longer be processed for these purposes.

You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

Right to lodge a complaint with a supervisory authority

As a data subject, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a data protection supervisory authority, in particular in the member state of your place of residence or the place of the alleged infringement, if you are of the opinion that the processing of the personal data concerning you infringes data protection law. The supervisory authority with which the complaint is lodged will inform you of the status and the outcome of your complaint, including the possibility of a judicial remedy.

You can find more information on the website of the Federal Commissioner for Data Protection and Freedom of Information. Follow the link for complaints to a data protection authority.

Security

We employ technical and organisational security measures in accordance with Art. 32 GDPR in order to protect the data managed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Access to this data is possible only for a small number of authorised persons who are bound to particular data protection and who are involved in the technical, administrative or editorial maintenance of data.