The cornerstone of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). We have developed this document to provide you with information about the following matters:
- When and for which operations we process data;
- Which data we process and on what grounds;
- To whom data are transferred;
- Your rights regarding the processing of your data by us.
The transmission of information to or from this website is secured with SSL encryption.
1. Contact details
The data controller responsible for the processing of data within the scope of this website in accordance with the General Data Protection Regulation (GDPR) is:
German Testing Board e.V.
Koldestraße 8 b
Phone: +49 (0)9131 976106
Fax: +49 (0)9131 976108
Data Protection Officer: Dr. Thomas Lapp
2. General information on data processing
2.1 Scope of personal data being processed
The provision of this website requires processing of various types of information. In addition, the extent of data processing depends on your use of the functionalities of the website, for example if you contact us via the contact form or if you consent to the processing of your data.
You are under no obligation to provide us with your personal data. However, if the provision of these data is necessary for technical reasons in order to access our website, your refusal to process your data will prevent you from entering and using our website.
As a visitor to our website, you are not subject to an automated individual decision-making in the meaning of Article 22 GDPR.
2.2 Legal basis for the processing of personal data
The legal basis for the processing of personal data is presented below.
Contract performance or steps taken prior to entering into a contract – Article 6 (1b) GDPR
Data will be processed only to the extent necessary for the performance and fulfilment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data will be processed by us only to this extent.
Legitimate interest – Article 6 (1f) GDPR
Consent – Article 6 (1a) GDPR
Data will be processed if you have expressly consented to the type and scope of data processing. You may withdraw your consent at any time with effect for the future. However, this does not affect the processing of data that has taken place up to this date.
Legal obligation – Article 6 (1c) GDPR
Data will be processed as far as this is necessary in order to comply with German or European legal obligations.
2.3 Erasure of data and storage period
We will erase your personal data as soon as the legal basis for their processing no longer applies. In some cases, however, several legal bases may apply at a time, or with the elimination of one legal basis, a new one may start to apply, such as e.g. the obligation to store certain data in order to comply with the statutory obligation of storage.
3. Data processing for the provision of the website
To be able to display the content of this website, we need to process certain information. Information starts to be processed once you access our website. Furthermore, our website offers various functionalities that require further data processing.
3.1 Log Files
When you visit our website your browser sends various types of information to our server. We need these to establish and maintain the connection. These data include your IP address, which we treat as personal data. In addition, the following data are collected:
- Date and time of access
- The type of your browser
- Your operating system
- Source/referring page
- The country you are currently in
- Bounce rate
- Visitor ID
- Resolution of your terminal device
- Browser plug-ins
Your IP address will not be stored. We store those data in the so-called server log files. These data are not collated with any other data about you. The storage of log files serves the legitimate interest of providing and further developing our website as well as the purpose of statistical evaluation. Stored log files are deleted after 7 days at the latest, unless a longer storage period is necessary, for example to prevent or clarify an attack on our website.
3.2 Technical cookies
You may disable the storage of cookies by making appropriate settings in your browser; please note that in this case not all website features may be fully accessible to you.
The use of technical cookies and the related data processing are based on our legitimate interest in providing a website that is technically flawless and may be used in a comfortable manner. Technical cookies are automatically deleted when you close your browser (session cookies); in other cases cookies are deleted only after some time (persistent cookies). The storage period of persistent cookies is determined by the web provider and can be viewed by you e.g. in your browser.
Sie können die Speicherung der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website vollumfänglich werden nutzen können.
Der Einsatz technisch bedingter Cookies und die damit verbundene Datenverarbeitung erfolgt aufgrund unseres berechtigten Interesses an einer technisch einwandfreien und komfortablen Nutzungsmöglichkeit unserer Website. Technisch bedingte Cookies werden in der Regel beim Schließen Ihres Browsers automatisch gelöscht (Session-Cookies), in anderen Fällen erst nach einiger Zeit (Persistent-Cookies). Die Speicherdauer von Persistent-Cookies wird vom Anbieter bestimmt und kann von Ihnen beispielsweise in Ihrem Browser eingesehen werden.
3.3 PIWIK/ Matomo
The legal basis for data processing for analytical purposes is our legitimate interest in the statistical evaluation of user behaviour for us to be able to continuously optimise and better market our website and services.
You may object to the storage and evaluation of data concerning your use of our website by enabling a so called opt-out cookie in your browser by clicking the button below. Matomo will then no longer collect any data about you. This cookie must be enabled for any type of the browser used. If you clear the stored cookies in the future, the opt-out cookie will also be cleared.
The data will be processed to analyse how you use our website during your visit and only until you object to such processing in a legally effective manner.
3.4 Google Fonts
For displaying fonts we use the so called web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google is certified under the “Privacy Shield“ framework (https://www.privacyshield.gov/), which is intended to ensure compliance with the data protection level applicable in the EU.
When you access a page, your browser loads the required web fonts to your browser to display the text content and fonts correctly. For this purpose, your browser connects to Google, which tells Google that our web pages have been accessed via your IP address.
We use Google Fonts to ensure a uniform and appealing presentation of our web pages. If your browser does not support Google Fonts or web fonts, your device will use a default font.
The legal basis for the processing of personal data when using Google Fonts is Article 6 (1f) GDPR (legitimate interest).
4. Requests for proposal regarding training courses offered by our premium partners
You can use the contact form on our website at any time to send us a request for proposal regarding the training courses offered by our premium partners. The following information is requested for this purpose:
- First name
- Email address
These data are marked as mandatory fields. All other data that you transmit to us within the scope of your request or enquiry, also via the free text field, are voluntary.
We use those data exclusively for processing your request for proposal. For this purpose, we transmit your data to the respective premium partner who offers the training course your request for proposal refers to. The said partner contacts you in response to your request for proposal. We, thus, act as an intermediary between our premium partners and their (prospective) clients.
The purpose of data processing is to process the booking of the training course by you (contract performance, steps taken prior to entering into a contract).
We will erase your data as soon as we forward them to our premium partners, i.e. within 2 weeks at the latest.
5. Social networks
We maintain web pages on social networks, such as Twitter. The respective social network provider gives detailed information on the type of personal data being processed and the manner of processing.
6. Right to object and right to withdraw consent
Where data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. Your objection or withdrawal will only have an effect for the future. Where the used analytical cookies have their own option of disabling, such an option is each time indicated for the relevant cookie. You may exercise your right of objection or withdrawal at any time by contacting firstname.lastname@example.org. If you object to processing based on our legitimate interest, we are nevertheless entitled to continue the processing of your personal data if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
7. Rights of data subjects
If data relating to your person (‘personal data’) are processed, you are the data subject within the meaning of Article 4 (1) GDPR. As a data subject, you have the rights indicated below with regard to your personal data. To exercise these rights, please contact us using the contact details above.
Right of access pursuant to Article 15 GDPR
You have the right of access to your personal data that are being processed by us. This applies to the mandatory information set out in Article 15 GDPR.
Right to rectification pursuant to Article 16 GDPR
You have the right to have inaccurate personal data rectified without undue delay or completed if they are incomplete.
Right to erasure pursuant to Article 17 GDPR
You have the right to request the erasure of your personal data if one of the reasons set out in Article 17 GDPR applies, in particular, if a legal basis for the processing no longer exists.
Right to restriction of processing pursuant to Article 18 GDPR
You have the right to request the restriction of processing of your personal data if one of the reasons set out in Article 18 GDPR applies, in particular, if you want to request restriction of processing instead of data erasure.
Right to data portability pursuant to Article 20 GDPR
You have the right to request all personal data that we store about you be disclosed to you in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller, without hindrance from the controller to which the personal data have been provided.
Right to lodge a complaint with a supervisory authority, Article 77 GDPR
Pursuant to Article 77 GDPR you have the right to lodge a compliant with a competent supervisory authority.
8. Data recipient
Some activities regarding the processing of your personal data on this website are also carried out by data processors, in particular the hosting of the website. In such cases, personal data are processed exclusively on the basis of an agreement about processing data on behalf of the controller in accordance with Article 28 (3) GDPR.
In addition, we transmit personal data that you enter when making a request for proposal in order to fulfil our contractual obligations towards a respective premium partner.
9. Transfer of data to third countries
The personal data which we collect from you on this website will not be transferred to any third countries outside the European Economic Area.