This data protection declaration serves to fulfill the duty to inform required by Article 13 of the European Data Protection Regulation (EU GDPR) when personal data is collected from data subjects at the time of collection.
The term "personal data" means all data that can be related to you personally. This includes, for example, name, address, e-mail addresses, user behavior. With regard to the other terms, in particular the terms "processing" and "consent", we refer to the legal data protection definitions.
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by national or European regulations to which we are subject. In this case, the data will be blocked or deleted when the storage period prescribed by the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfillment of a contract.
We, Goethe Business School gGmbH (Goethe Business School), are a subsidiary affiliated with Johann Wolfgang Goethe University Frankfurt (Goethe University), which, in accordance with its articles of association, performs tasks for Goethe University, the sole shareholder of Goethe Business School, and its Department 02 of Economics.
If you have any inquiries or complaints regarding data protection, you can contact the Goethe Business School's data protection officer, Carmen Miller, by mail (Goethe Business School House of Finance Johann Wolfgang Goethe University Frankfurt am Main 60629 Frankfurt) or also by email (miller[at]gbs.uni-frankfurt.de).
In order to fulfill our duty to inform you in an appropriate manner, we have summarized below the important information required by the EU GDPR regarding our handling of your data and your rights:
Rights and complaint options
You have the following rights in particular vis-à-vis Goethe Business School with regard to your stored personal data:
- Right to information,
- Right to correction or deletion,
- Right to restriction of processing,
- Right to revoke your consent,
- Right to object to processing,
- Right to data portability, in a common, structured and machine-readable form (as of May 25, 2018).
You also have the right to lodge a complaint about our processing of your personal data with the above-mentioned data protection officer. Personal data will only be collected, used and disclosed by us, as described at the beginning, if this is permitted by law or the users have consented to the data collection.
Regarding our data collection in detail
The use of personal data of students for the purpose of studying is largely based on the applicable Hessian Higher Education Act in conjunction with the applicable enrollment regulation of the State of Hesse and thus refers to EU GDPR Article 6 paragraph 1 c).
We also process the personal data of our customers in principle only to the extent necessary to provide the content and services we offer. Personal data is regularly only processed if you have given us your consent or if the processing is permitted by legal regulations.
The data of Goethe Business School employees and agents are collected and processed by us for the purposes of personnel administration and teaching and examination activities on the basis of the Hessian Higher Education Act and personnel law regulations.
Access data/server log files
When accessing the pages of this web server, the following data is generally stored in the server log files:
- IP address
- Date and time
- Type of client browser
- URL of the accessed page
- If applicable, the error message for the error that occurred
- If applicable, the requesting provider
This data is used solely for the purpose of checking functionality, security and troubleshooting. This use is based on EU GDPR article 6 paragraph 1 f). All log files are automatically deleted or anonymized after 7 days at the latest.
When contacting members of Goethe Business School (for example, via contact form or e-mail), your information will be stored for the purpose of processing your request and in the event that follow-up questions arise. After processing your request or after fulfillment of the legal obligation or the service used, the data will be deleted, unless the storage of the data is necessary for the implementation of legitimate interests of Goethe Business School or due to a legal requirement (e.g. law, legal regulation, statutes of Goethe Business School, etc.).
In principle, you can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser, you can also prevent the collection of the aforementioned information by Google services (for the use of these services see below integration of third-party services under Google services) by setting an opt-out cookie on one of the websites linked below:
Options to prevent data use by cookies also via downloading and installing the web browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. In addition, you can also prevent the execution of Java Script code altogether by installing a Java Script blocker (e.g. noscript.net or https://www.ghostery.com).
Note for social media platforms
We provide up-to-date information on our social media presences. When using these sites, data may be automatically collected for market research and advertising purposes, stored and, using pseudonyms, so-called user profiles may be created for the purpose of user-based advertising. Cookies may be used on your terminal device for this purpose, which store visitor behavior and user interests. This serves the interest of an optimized presentation of offers and communication with interested parties (Art. 6 para. 1 lit. f. GDPR ).
Detailed information on data processing and use by the social media platforms as well as contact and setting options for protecting your privacy - in particular opt-out options, can be found in the privacy notices of the providers linked below.
- Facebook: https://www.facebook.com/about/privacy/
- Google/ YouTube: https://policies.google.com/privacy
- Twitter: twitter.com/de/privacy
- Instagram: instagram.com/about/legal/privacy/
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
- XING: https://privacy.xing.com/de/datenschutzerklaerung
Options for objection (Opt-Out):
- Facebook: https://www.facebook.com/settings?tab=ads
- Google/ YouTube: https://adssettings.google.com/authenticated
- Twitter: twitter.com/personalization
- Instagram: instagram.com/about/legal/privacy/
- LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
- XING: https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/widerspruchsrecht
Access-protected websites and user-based services
In addition to the above-mentioned data, the user name or an identifier is also collected for authorization control of data access. This data is deleted or anonymized after 7 days at the latest, unless the retention of the data is necessary to implement legitimate interests of Goethe Business School or a legal requirement (e.g. law, legal ordinance, statutes of Goethe Business School, etc.).
Integration of third party services
Within some pages of our website, third-party content from other websites may be integrated. The use of these offers always requires that the providers of this content (hereinafter referred to as "third-party providers") perceive your IP address. This is because without the IP address, the third-party providers could not send the content to your browser. The IP address is thus necessary for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. However, we have no influence on any further use of your data (e.g. if the third-party providers store the IP address for statistical purposes).
For example, we offer various services, including third-party services, which you can use if you are interested. For this purpose, it is usually necessary to provide or collect further personal data. We need this data to provide the respective service. The above data processing principles apply.
In some cases, we use external service providers who have been carefully selected and commissioned by us to process this data. These service providers are bound by our instructions and are regularly monitored by us. Insofar as personal data is passed on to third parties in the course of services that we offer together with partners, you can find more detailed information in the following descriptions of the individual services. If these third parties are based in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.
If you contact us by e-mail, the personal data you send us with your e-mail will be stored. In addition, we keep an email address/contact form on our website with which you can contact us. In doing so, the data you enter in the input mask will be transmitted to us and stored.
- Prefix/first name/last name/email address and address/telephone
In addition, we record your IP address and the time of sending. This data will not be passed on to third parties. The data will only be used to answer your questions. The processing of the above personal data is solely for the purpose of processing your inquiries. The processing of further personal data, which is generated by the use of the contact form provided on our website, serves to prevent misuse and to ensure the security of our information technology systems. The data will be deleted as soon as we have finally processed your requests. The additional personal data collected when using the contact form will be deleted after a period of seven days at the latest.
You can revoke the consent given to us to process your personal data at any time. When contacting us by e-mail, you can object to the storage of your personal data at any time. We would like to point out that in this case your request cannot be processed any further. You can declare the revocation or the objection by sending an e-mail to our e-mail address given in the imprint.
On our website you can subscribe to a free newsletter, with which we inform you about current offers and interesting topics. For this purpose, the data you entered in the input mask when subscribing to the newsletter will be transmitted to us. In order to register for the newsletter, you must provide the mandatory data requested by us:
- E-mail address and address/first name/name.
If you provide additional personal data when registering, the information is voluntary.
For the registration to our newsletter we use the so-called double opt-in procedure. After your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you would like us to send you the newsletter in the future. In addition, we store in each case your IP address and the time of registration for the newsletter as well as the time of confirmation. In connection with the processing of the data for sending the newsletter, the data will not be passed on to third parties. This data is used exclusively for sending the newsletter.
The data you enter in the input mask during registration will be processed for the purpose of addressing you personally. After your confirmation, we store your e-mail address in order to be able to send you the newsletter. We store the respective IP address and the times of registration and confirmation in order to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The above data will be deleted as soon as they are no longer required to achieve the above purposes. We therefore store your above-mentioned data as long as you have subscribed to the newsletter. After unsubscribing from the newsletter, we store the aforementioned data purely statistically and anonymously.
You can revoke your consent to the sending of the newsletter at any time by unsubscribing. You can unsubscribe by clicking on the link contained in every newsletter e-mail sent to you by us.
We would like to point out that we evaluate your user behavior when sending the newsletter. The newsletter e-mails we send contain a so-called web beacon or a so-called tracking pixel. This is a single-pixel image file that is stored on our website. This data is collected exclusively pseudonymously. This processing of the data serves the purpose of tailoring the newsletter to your individual interests.
For the de-installation of cookies, see already above our note under Cookies.
Services of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For further information on data protection from the third-party provider, please refer to the following website: https://www.google.com/intl/de/policies/Dienstleister:
Google has submitted to the Privacy Shield Agreement concluded between the European Union and the USA and has certified itself. This means that Google undertakes to comply with the standards and regulations of European data protection law. You can find more information in the entry linked below: www.privacyshield.gov/participant
- Google (Invisible) reCAPTCHA
Stores and processes information about your user behavior on our website. The use of this service also serves to check whether the input is made by a human or abusive by automated, machine processing. The IP address transmitted as part of Google (Invisible) reCAPTCHA is not merged with other data from Google, unless you are logged into your Google account at the time of using Google (Invisible) reCAPTCHA. If you want to prevent this transmission and storage of data about you and your behavior on our website by Google, you must log out of Google before you visit our site or use Google (Invisible) reCAPTCHA.
- Google AdWords
Enables us to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). This allows us to determine how successful individual advertising measures are. These advertising media are delivered by Google via so-called "Ad Servers". For this purpose, we use so-called ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognize your web browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of Google AdWords. To the best of our knowledge, Google receives the information that you have called up the relevant part of our website or clicked on an advertisement from us. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that the Google learns your IP address and stores it.
- Google Analytics
We use Google Analytics only with the previously described activated IP anonymization. This means that your IP address is only processed by Google in abbreviated form. A personal reference can thus be excluded.
In order to oblige Google to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing agreement with Google. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the aforementioned Privacy Shield agreement and has certified itself.
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent the collection by Google Analytics within this website in the future (the opt-out only works in this browser and only for this domain). This will place an opt-out cookie on your device. If you delete your cookies in this browser, you must click this link again.
- Google Dynamic Remarketing
Enables us to display our advertisements to you during your further internet use after visiting our website. This is done by means of cookies stored in your browser, via which your usage behavior when visiting various websites is recorded and evaluated by Google. In this way, Google can determine your previous visit to our website. According to Google, the data collected in the course of remarketing is not merged with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.
- Google Maps
This allows us to display interactive maps directly on the website and enables you to comfortably use the map function. Through your visit to our website, Google receives the information that you have accessed the corresponding subpage of our website. In the process, your IP address is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to have your data associated with your Google profile, you must log out in advance.