The following data protection declaration applies to the use of the website www.steinbeis-ism.de (hereinafter referred to “website”, “ISM”, “we” or “us”).
ISM takes your privacy very seriously and treats your personal data confidentially. Your personal data is collected and processed in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to offer you the above-mentioned website. This statement describes how and for what purpose your data is collected and used and what options you have referring to your personal data options. As new technologies and the continuous development of this website may result in changes to this data protection declaration, we recommend that you may read the data protection policy regularly.
By using this website, you agree to the collection, use and transfer of your information in accordance with this data protection policy.
Responsible authority and contact
Responsible for the collecting, processing and using of your data is:
Steinbeis-Transferzentrum Institute for Science and Markets (ISM)
c/o DHBW Stuttgart
Paulinenstr. 50
70178 Stuttgart
Tel.: 0711-1849-745
info@steinbeis-ism.de
We recommend that you get in touch with us for the assertion of your rights, reporting of data protection incidents and for suggestions and complaints with regard to the processing of your personal data as well as for the revocation of your consent.
You can save and print out this data protection policy at any time.
General use of the website
What is personal data?
Art. 4 GDPR defines personal data as all personal or factual information through which a natural person can be identified directly or indirectly, e.g. by name, an identification number, a location, an online identification or by special features. This includes, for example, your name, your postal address, your e-mail address and telephone number as well as the IP address with which your computer/ mobile device can be identified.
Access data
Due to our legitimate interest (see art. 6 par. 1 Letter f. GDPR) we collect information about you when you use this website. We automatically collect information about your usage behavior and interaction with us and record data about your computer or mobile device. We collect, store and use data about every access to our online offer (so-called server log files). The access data includes name and URL of the accessed file, date and time of the retrieval, transferred data volume (bytes), notification of a successful retrieval (HTTP response code), browser type and browser version, operating system, referrer URL (i.e. the previously visited page), IP address and the requesting provider.
We use this log data without allocation to your person or other profiling for statistical evaluations for the purpose of operation, market research, security and optimisation of our online offer, but also for anonymous recording of the number of visitors to our website (traffic) and the extent and type of use of our website and services. We can also create user profiles based on the data. You can object to the creation of such profiles. Based on this information, we can analyze traffic, troubleshoot and correct errors, and improve our services. We reserve the right to check the log data subsequently if there is a justified suspicion of illegal use based on concrete evidence. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes. We also store IP addresses if we have a concrete suspicion of a criminal offence in connection with the use of our website.
We do not associate the mentioned data about the use of our pages with your person. The data transmitted for technical reasons will not be linked to any information that you provide personally when using our pages and will be stored separately. If user profiles are created, they are provided with a pseudonym and are not associated with other data about your person or with your entries on our pages.
Contacting via E-Mail
If you contact us (e.g. by e-mail or telephone), we will store your details for processing the request and in the event that follow-up questions arise. We only store and use further personal data if you give your consent or if this is legally permissible without special consent.
Range measurement and cookies
This website uses cookies for pseudonymised range measurement, which are transmitted to the user’s browser either from our server or the server of third parties. Cookies are small text files that are stored on your end device. These contain information about how you use our websites and the internet. Your browser accesses these files. Cookies allow us to identify you the next time you visit our website as a user who is interested in certain content, such as information about certain goods. With this information we can make the use of our pages more comfortable and secure for you and improve our internet offer. If you do not want cookies for range measurement to be stored on your computer/ mobile device, you can object to the use of these files here:
- Network Advertising Initiative cookie disabling page: http://optout.networkadvertising.org/?c=1#!/
- Cookie deactivation page of the US website: http://optout.aboutads.info/?c=2#!/
- Cookie deactivation page of the EU website: http://optout.networkadvertising.org/?c=1#!/
Common browsers offer the setting option of not allowing cookies to be stored on your end device. In this case, however, you may not be able to use our website to its full extent.
Collecting and processing of personal data
Usually, the use of our website does not require you to enter any personal data. ISM only collects, uses and passes on your personal data if you give your consent to the collection of data or if this is permitted by law. Personal information is any information that is used to identify you and which can be traced back to you, such as your name, e-mail address and telephone number. The personal data will not be passed on to third parties without your consent. We only pass the data on to the authorities if we are obliged to do so by law in an individual case.
You can also visit this website without providing any personal information. However, in order to improve our online offer, we store your access data to this website (without personal reference). This access data includes, for example, the file you requested or the name of your internet provider. By pseudonymizing the data, it is not possible to draw conclusions about your person (see also access data).
Legal basis and storage period
The legal basis for data processing in accordance with the above paragraphs is Art 6 Para. 1 Letter f GDPR. Our interests in data processing are in particular to ensure the operation and security of the website, to investigate the manner in which visitors use the website, and to simplify the use of the website.
Unless specifically stated, we only store personal data for as long as is necessary to fulfil the purposes pursued.
Your rights as a user
According to the applicable laws, you have various rights regarding your personal data. If you wish to assert these rights, please send your request by e-mail or by post, clearly identifying yourself, to the address of the operator of this website or to the address given in the imprint. If you believe that your data have been processed unlawfully, you can lodge a complaint with the competent supervisory authority (see “Right of appeal to a supervisory authority”).
Right to inform and confirm about data
You can request information from us at any time as to which personal data about you or a pseudonym used by you is processed by us. For example, what personal data is stored, where the data comes from and who receives it. You can also request information about the purpose of data processing. If this is the case, you have the right to obtain from us free of charge information about the personal data stored about you together with a copy of this data. Furthermore, there is a right to the following information:
- The processing purposes;
- The categories of personal data that are processed;
- The recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations;
- If possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
- the existence of a right to have your personal data concerning you rectified or deleted or to have the controller restrict or object to such processing;
- the existence of a right of appeal to a supervisory authority;
- if the personal data is not collected from you, all available information about the origin of the data;
- the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for you.
If personal data are transferred to a third country or an international organisation, you have the right to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transfer.
Right to correct data
You also have the right to request us to correct any inaccurate personal data without delay. Taking into account the purposes of this you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
Right to cancel data (“Right to be deleted”)
You have the right to request us to delete personal data concerning you immediately and we are obliged to delete personal data immediately if one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You withdraw your consent, on the basis of which the processing referred to in Article 6(1)(a) or Article 9(2)(a) GDPR was based, and there is no other legal basis for the processing.
- You oppose processing under Article 21(1) GDPR and there are no legitimate grounds for processing or you oppose processing under Article 21(2) GDPR.
- The personal data have been processed unlawfully.
- The deletion of personal data is necessary to fulfil a legal obligation under EU law or the law of the Member States to which we are subject.
- The personal data have been collected in relation to information society services provided in accordance with Article 8(1) GDPR.
If we disclosure personal data and we are obliged to delete them, we will take appropriate action, including technical ones (taking into account the available technology and the implementation costs) to inform those responsible for data processing who process the personal data that you have requested the deletion of all links to this personal data or of copies or replications of this personal data. Unless your request conflicts with a legal obligation to store data (e.g. data retention), you have a right to have your data deleted. Stored data will be deleted if it is no longer required for its intended use and there are no legal retention periods. If deletion is not possible because the data is required for legal purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes.
Right to limit the data processing
You have the right to request us to restrict processing if one of the following conditions is met:
- the accuracy of the personal data is disputed by you for a period that enables us to verify the accuracy of the personal data,
- the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
- we no longer need the personal data for the purposes of processing, but you do need the data to assert, exercise or defend legal claims, or
- you have lodged an objection to the processing pursuant to Article 21(1) GDPR, as long as it is not yet clear whether the legitimate reasons of our company outweigh yours.
Right to data transferring
You have the right to receive the personal data concerning you that we have received in a structured, current and machine-readable format, and you have the right to transmit this data to another person in charge without our interference, provided that
- processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
- processing is carried out using automated methods.
When exercising your right to data transferability in accordance with paragraph 1, you have the right to request that the personal data be transferred directly by us to another person responsible, insofar as this is technically feasible.
Right of objection
You have the right to revoke your consent to the processing of personal data at any time. Users of this website have the right to object at any time to the processing of personal data concerning them on the basis of Article 6(1)(e) or (f) of the GDPR for reasons arising from their particular situation; this also applies to profiling based on these provisions.
You have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR for reasons arising from your particular situation. Unless the processing is necessary to fulfil a task in the public interest.
We will then no longer process the personal data unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defending of legal claims.
Opposition to unsolicited advertising
We object to any use of our contact data by third parties for the purpose of sending us unsolicited advertising in any form. We reserve the right to take legal action against the sender in the event of non-compliance.
Automated decisions including profiling
You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner.
Right of appeal to a supervisory authority
You have the right of appeal to the competent supervisory authority if you believe that the processing of personal data concerning you is illegal. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Postfach 10 29 32
70025 Stuttgart
Tel.: 0711/615541-0
FAX: 0711/615541-15
poststelle@lfdi.bwl.de
Data security
We make every effort to ensure the security of your data in accordance with the applicable data protection laws and technical possibilities.
Your personal data will be transmitted encrypted. Every transmission of data via the Internet involves the risk of unauthorized third parties gaining access to your data or, for example, the content of emails. Even with all due care, complete protection is not possible. We use the SSL (Secure Socket Layer) coding system, but point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
To secure your data, we maintain technical and organisational security measures which we constantly adapt to the state of the art.
Furthermore, we cannot guarantee that our offer is available at all times; disruptions, interruptions or failures cannot be ruled out. The servers we use are regularly and carefully secured.
Automatic decision making
An automated decision making based on the collected personal data does not occur.
Disclosure of data to third parties, no data transfer to non-EU countries
In principle, we only use your personal data within our company. If and to the extent that we involve third parties in the performance of contracts (e.g. logistics service providers), these personal data are only received to the extent to which the transfer is necessary for the corresponding service.
In the event that we outsource certain parts of data processing (“order processing”), we contractually oblige contractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.
A data transmission to places or persons outside the EU outside the cases mentioned in this declaration under “Range measurement and cookies” does not take place and is not planned.