Cookies play an important part in ensuring that a website works correctly. Several of these cookies are technically essential to guarantee certain functions of the website. In addition to this, we use several cookies to collect information regarding user behaviour on this website, which is then used to continually improve our website. Click on "I agree" to accept cookies. You can find further information on our data protection site.

Data Privacy

PRIVACY POLICY
As of: 18/11/2019

We place great value in the privacy and in protecting the data of our customers, partners, interested parties and users of our Web offering. Transparency regarding the processing of your personal information, and protecting this information, is therefore very important to us. In this Privacy Policy, we explain how your personal information is collected and processed when you use our website and what you can do to better protect your data.

Data controller

SRH Hochschule Heidelberg
Ludwig-Guttmann-Straße 6
69123 Heidelberg

Telefon: +49 6221 88-1000
Telefax: +49 6221 88-4122
E-Mail: info@hochschule-heidelberg.de
Internet: www.hochschule-heidelberg.de

Data protection officer of the company

SRH Hochschule Heidelberg
Ludwig-Guttmann-Straße 6
69123 Heidelberg
 
Mail: Datenschutz.hshd@srh.de
Tel: 06221 88-1003/-2829

What is personal information?

Personal information is any data associated with an identified or identifiable natural person. The determining factor is therefore whether the collected information can be associated with a person. This includes information such as your name, your address, your phone number, and your e-mail address. Information that cannot be directly associated with your true identity – such as bookmarked websites or number of users of a site – is not personal information.

How do we collect and process your personal information?

For reasons of system security, whenever you visit our website our webservers by default temporarily store the connection data of the requesting computer, the pages of our site that you visit, the date and duration of your visit, the identification data of the browser and operating system that you are using, and the website from which you are visiting us. Additional personal information, such as your name, address, phone number or e-mail address, is not collected, unless you provide this information willingly, e.g. as part of registration, a survey, a contest, to conclude a contract or to request information.

How do we use your personal information and how do we transmit it?

When the Internet offering includes the possibility of entering personal or business information (e-mail addresses, names, addresses), this information is provided by the user on an explicitly voluntary basis. E-mails are transmitted via a contact form. When you send us such a message, your personal information is only collected to the extent required for a reply. The e-mail is transmitted in unencrypted form. We use the personal information provided by you exclusively for purposes related to the technical administration of the website and to fulfill your wishes and requests, generally therefore for the execution of the contract concluded with you or to reply to your query. Only if you have granted prior consent or if – insofar as legally required – you have not objected will we also use this information for product-related surveys, marketing purposes and statistical evaluations. We do not transmit, sell or otherwise transfer your personal information to third parties, unless this is required to execute the contract or you have explicitly provided your consent. Consent can be revoked at any time, with the revocation having effect for the future.

How long do we store your data for?

In general, and unless a longer storage period is legally mandated, we store all information transmitted by you until the respective purpose, e.g. the contractual purpose, has been fulfilled – e.g. for queries, until they are satisfied, and for newsletters, until you unsubscribe. If you no longer wish for us to use your information, we will of course immediately comply (please inform us at the address provided under “Contact”).

When is your information deleted?

Your personal information stored with us is deleted when you revoke your consent to the storage, when the data are no longer needed to fulfill the purpose that justified their storage, or when this storage is not permissible for other legal reasons. Information for invoicing and accounting purposes is not affected by a request for deletion.

Use of cookies

Our website uses so-called cookies. These are small text files that are stored on your device . Cookies help us to determine how frequently our websites are used and by how many people and to design our offering as comfortably and efficiently for you as possible. We use so-called “session cookies”, which are exclusively stored for the time that you use of one of our websites. We also use “permanent cookies” to save information about users who visit our websites repeatedly. The purpose of these cookies is to provide you with an optimal user experience and to “recognize” you when you visit again and provide you with a varied Web page with new contents if possible. The content of a permanent cookie is limited to an identification number. Name, IP address etc. are not stored. Your behavior is not subject to individual user profile-building.

You can also use our offering without cookies. You can deactivate the placing of cookies in your browser, limit it to specific websites or configure your browser so that it informs you if a cookie is saved. However, please note that the page may not be displayed properly or may not have full user functionality if you deactivate cookies. Cookies required to execute the electronic communication procedure or to provide certain functions you desire (e.g. shopping cart function) are saved in accordance with Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in placing cookies to provide his services in a technically flawless and optimized manner. Insofar as other cookies are placed (e.g. cookies to analyze your surfing behavior), these are handled separately in this Privacy Policy.

What do we do to keep the processing secure?

Our company takes all necessary technical and organizational measures to protect your personal information from loss or misuse. Your information is stored in a safe operating environment that is not publically accessible. In certain cases, your personal information is encrypted using so-called Secure Socket Layer (SSL) technology when being transmitted. This means that the communication between your device and the servers of our company uses a recognized encryption procedure if your browser supports SSL. Or : SSL or TLS encryption

For safety reasons and to protect the transmission of confidential contents such as orders or queries that you send to us as the website operator, this page uses SSL or TLS encryption. You can recognize whether a connection is encrypted because the URL in the browser changes from “http://” to “https://” and a lock symbol appears next to the URL. When SSL or TLS encryption is active, the data you send to us cannot be read by third parties. If you wish to contact our company via e-mail, please note that the confidentiality of the transmitted information is not assured. The content of e-mails can be read by third parties. We therefore recommend that you only send us confidential information by mail.

Your data protection rights

Within the framework of the legal provisions, you have the right at any time to request without charge information about the personal information we have stored about you, its origins and possible recipients, and the purpose of the data processing (Art. 15 GDPR), and, if applicable, the right to the correction of incorrect data (Art. 16 GDPR) and to the deletion of the data (Art. 17 GDPR), the right to restrict processing of the data (Art. 18 GDPR) and to object to this processing (Art. 21 GDPR), and the right to data portability of the data provided by you (Art. 20 GDPR). The restrictions pursuant to Arts 34 and 35 BDSG (Bundesdatenschutzgesetz, German Federal Data Protection Act) apply for your right to information and to deletion.

You further have the right to lodge a complaint with the competent supervisory authority in the event of a violation of your data protection rights (Art. 77 GDPR in connection with Art. 19 BDSG). The competent supervisory for data protection issues is the State Data Protection Officer of the Federal State in which our company is headquartered. You can find a list of the data protection officers and their contact information at the following link: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Revoking consent to data processing

Many data processing processes are only possible with your explicit consent. You can revoke consent you have previously granted at any time. An informal message to us per e-mail is enough. This revocation does not affect the legality of the data processing that occurred prior to the revocation of consent.

Contacting us for questions, complaints, enforcement of your rights

For questions, complaints, or to enforce your data protection rights, you can contact us at the following e-mail address: datenschutz.hshd@srh.de.

Changes to the Privacy Policy

This Privacy Policy may be subject to change. Any changes will be published on this page in a timely manner.

Data protection for applications and during the application process

We collect and process the personal information of applicants for the purpose of implementing the application process. The processing may also occur electronically. This is in particular the case when an applicant sends us the application documents electronically, for example by e-mail. When we conclude an employment agreement with an applicant, the transmitted data are stored in accordance with legal provisions for the purpose of implementing the employment relation. If no employment contract is concluded with the applicant, the application documents are deleted automatically six months after notification of the decision not to hire, provided that this deletion does not conflict with any other legitimate interests of the data controller. Other legitimate interests in this regard include for example a burden of proof in legal proceedings pursuant to the German General Equality Act (Allgemeines Gleichbehandlungsgesetz, AGG).

Google Analytics

We use Google Analytics, a Web analysis service of Google Inc. (“Google”). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google uses cookies. The information generated by the cookie about users’ use of the online offering is generally transmitted to a server of Google in the USA and is stored there. Google will use this information on our account to evaluate the use of our online offering by the users, to create reports about the activities within this online offering, and to provide additional services associated with the use of this online offering and the Internet. The processed data can be used to create pseudonymised user profiles. We only use Google Analytics with activated IP anonymization. This means that users’ IP addresses are shortened by Google within member states of the European Union or within other states that are party to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and shortened there. Google will use this information on the account of the operator of this website to evaluate your use of the website, to generate reports about website activity and to provide further services associated with the use of the website and of the Internet. The IP address transmitted by the user’s browser is not combined with other data owned by Google.

Browser Plugin

You can prevent the placing of cookies by configuring your browser accordingly. However, please note that in this case you may not be able to use the full functionality of this website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) and their processing by Google by downloading and installing the browser plugin from the following link : https://tools.google.com/dlpage/gaoptout?hl=en. You can learn more about Google’s use of data for advertising purposes, about configuration and about objection possibilities on the websites of Google: https://www.google.com/intl/en/policies/privacy/partners/ (“How Google uses information from sites or apps that use our services “), http://www.google.com/policies/technologies/ads(“Use of data for advertising purposes”), http://www.google.com/settings/ads(“Manage the information that Google uses to show you ads”) and http://www.google.com/ads/preferences/(“Determine which ads Google should show you”).

Objecting to data collection

You can learn more about how Google Analytics uses user data from Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

 

 

Objecting to data Collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is placed that prevents your data from being collected when you next visit this website: deactivate Google Analytics.

Google AdWords and Google Conversion Tracking

This website uses the online advertising program “Google AdWords” and the associated “conversion tracking”. Google AdWords places a cookie on your device if you reached our website via a Google ad. These cookies expire after 30 days and are not used for personal identification. If the user visits specific pages on our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page.

Every Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across the websites of AdWords customers. The information gathered with the aid of the conversion cookie is used to generate conversions statistics for AdWords customers who have opted for conversion tracking. The customers can learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they receive no information with which they could personally identify the users. Users who do not wish to participate in the tracking can easily deactivate the Google conversion tracking cookie via the settings of their Internet browser. These users are not included in the conversion tracking statistics.

The use of conversion cookies is in accordance with Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both his Web offering and his advertising.

Learn more about Google’s privacy policy (http://www.google.de/intl/de/privacy.html)

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in combination with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function enables linking the advertising target groups generated with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalized ads that have been adapted to you based on your earlier use and surfing behavior on a device (e.g. cell phone) can also be shown to you on another of your devices (e.g. tablet or PC).

If you have granted the corresponding consent, Google links your Web and app browser history with your Google account for this purpose. This way the same personalized ads can be shown on every device on which you register with your Google account. To support this functionality, Google Analytics records Google-authenticated IDs of the users; these are temporarily linked with our Google Analytics data to define and create target groups for the cross-device advertising. You can permanently object to cross-device remarketing/targeting by deactivating personalized ads in your Google account; to do so, follow this link: www.google.com/settings/ads/onweb/.

The data collected in your Google account is only combined on the basis of the consent that you have granted to Google and that you can revoke (Art. 6 para. 1 lit. a GDPR). For data collection processes that are not combined in your Google account (e.g. because you do not have a Google account or have objected to this combining), the collection of the data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of the visitors to its website for advertising purposes. You can find more information, as well as Google’s privacy policy, at: www.google.com/policies/technologies/ads/.

Google Web Fonts

To ensure that fonts are displayed uniformly, this site uses so-called Web Fonts provided by Google. When you call up a page, your browser downloads the necessary Web Fonts to your browser cache in order to display text and fonts correctly. For this purpose, the browser you are using must connect to Google’s servers. This will enable Google to know that your IP address has been used to access our website. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support Web Fonts, a standard font will be used by your device. You can learn more about Google Web Fonts at developers.google.com/fonts/faq and in Google’s privacy policy: www.google.com/policies/privacy/.

Google Maps

Diese Seite nutzt über eine API den Kartendienst Google Maps. Anbieter ist die Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Zur Nutzung der Funktionen von Google Maps ist es notwendig, Ihre IP Adresse zu speichern. Diese Informationen werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Der Anbieter dieser Seite hat keinen Einfluss auf diese Datenübertragung. Die Nutzung von Google Maps erfolgt im Interesse einer ansprechenden Darstellung unserer Online-Angebote und an einer leichten Auffindbarkeit der von uns auf der Website angegebenen Orte. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DSGVO dar. Mehr Informationen zum Umgang mit Nutzerdaten finden Sie in der Datenschutzerklärung von Google: https://www.google.de/intl/de/policies/privacy/.

YouTube

We maintain an online presence on YouTube to present our company as well as our services and to communicate with customers/interested parties. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. In this respect, we would like to point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for the user in that, for example, later access to the user data may be more difficult. We also do not have access to this user data. YouTube has exclusive access to this data. Google LLC is certified under the Privacy Shield and has thereby undertaken to observe European data protection standards https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

You can find YouTube’s privacy policy at https://policies.google.com/privacy

Use of YouTube

YouTube components are integrated on this website. YouTube is an internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube permits the publication of all kinds of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be called up via the Internet portal. The company operating YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Each time you access a page on our site that includes a YouTube component (YouTube video), your Internet browser is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. You can read additional information about YouTube at https://www.youtube.com/intl/en/about. As part of this technical process, YouTube and Google obtain information about which specific subpage of our website you are visiting. If you are simultaneously logged into YouTube, YouTube recognizes which specific subpage of our website you are visiting when you call up a subpage containing a YouTube video. This information is collected by YouTube and Google and is assigned to your YouTube account. YouTube and Google receive information through the YouTube component that you have visited our website whenever you are logged into YouTube at the same time as you visit our website. This happens regardless of whether you click on a YouTube video or not. You can prevent this information from being transmitted to YouTube and Google in this way by logging out of your YouTube account before visiting our website. The privacy policy published by YouTube, viewable at https://policies.google.com/privacy, informs you about the collection, processing and use of personal data by YouTube and Google.

Facebook

To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Facebook platform. On this social media platform, we are the data controllers together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. Facebook’s data protection officer can be reached via a contact form: https://www.facebook.com/help/contact/540977946302970

We have regulated this joint responsibility in an agreement regarding our respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed via the following link: https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of personal data that takes place as a result and is described below is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the analysis, communication, sale and advertising of our products and services. The legal basis can also be the user’s consent to the platform operator pursuant to Art. 6 Para. 1 lit. a GDPR. The user can revoke this consent at any time for the future, in accordance with Art. 7 para. 3 GDPR, by notifying the platform operator. When calling up our online presence on the Facebook platform, Facebook Ireland Ltd., as the operator of the platform in the EU, processes the user data (e.g. personal information, IP address, etc.). These user data are used for statistical information about the use of our company’s presence on Facebook. Facebook Ireland Ltd. uses these data for market research and advertising purposes and to create profiles of the users. These profiles enable Facebook Ireland Ltd. for example to show advertising to the users on and off Facebook based on their interests. If the user is logged in to his Facebook account at the time of the call, Facebook Ireland Ltd. can also link the data to the respective user account. If the contact takes place via Facebook, the user’s personal data entered on this occasion will be used to process the request. We will delete the user’s data as soon as the user’s request has been conclusively answered and there are no legal safeguarding obligations, such as for subsequent contract processing. Facebook Ireland Ltd. may also set cookies for the processing of the data. If the user does not consent to this processing, he can prevent the installation of the cookies by configuring his browser accordingly. Already saved cookies can also be deleted at any time. The configuration depends on the respective browser. For Flash cookies, processing cannot be prevented through the browser configuration but rather through the configuration of the Flash Player. If the user prevents or restricts the installation of the cookies, this could result in Facebook’s functionalities not being fully available. You can learn more about the processing activities, their prevention and the deletion of the data processed by Facebook in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation

It cannot be excluded that the processing by Facebook Ireland Ltd. also occurs via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA. Facebook Inc. has agreed to be bound by the EU-US Privacy Shield and thereby declares that it observes the EU’s data protection provisions when processing data in the USA. https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Use of Facebook

Our website contains references (links) to the external social network Facebook. This Internet presence is exclusively operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). The links are identified on our website by the Facebook logo or the suffix “Like” (no Facebook plugins are used). When you visit our website, functions and data transmissions to Facebook do not automatically become active. Only when you click on the links are the Facebook plugins activated and your browser establishes a direct connection with Facebook servers. If you follow the links and are simultaneously logged into your Facebook account, the information that you have visited our website will be forwarded to Facebook. Facebook can associate your visit to the website with your account. This information is transmitted to Facebook and saved there. To prevent this, you must log out of your Facebook account before clicking on the link. You can learn more about the purpose and scope of data collection by Facebook and its further processing and use of your data, as well as your rights in this regard and configuration options to protect your privacy, in Facebook’s privacy policy (http://de-de.facebook.com/privacy/explanation.php).

Facebook Remarketing

Our website uses the remarketing function “Custom Audiences” of Facebook Inc. (“Facebook”). Visitors to our website are presented with interest-related advertisements (“Facebook ads”) when visiting Facebook pages. For this purpose, Facebook’s remarketing tag is implemented on our website. This is used to establish a direct connection to Facebook servers when you visit the website. The information that you have visited our website is transmitted to the Facebook servers; Facebook assigns this information to your personal Facebook account. You can learn more about the collection and use of your data by Facebook and about your rights in this regard and your options to protect your privacy in Facebook’s privacy policy at www.facebook.com/about/privacy/. Alternatively, you can deactivate the remarketing function “Custom Audiences” at www.facebook.com/settings/. To do so, you must be registered with Facebook.

Instagram

To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Instagram platform. On this social media platform, we are the data controllers together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. Instagram’s data protection officer can be reached via a contact form: https://www.facebook.com/help/contact/540977946302970

We have regulated this joint responsibility in an agreement regarding our respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed via the following link: https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of personal data that takes place as a result and is described below is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the analysis, communication, sale and advertising of our products and services. The legal basis can also be the user’s consent to the platform operator pursuant to Art. 6 Para. 1 lit. a GDPR. The user can revoke this consent at any time for the future, in accordance with Art. 7 para. 3 GDPR, by notifying the platform operator. When calling up our online presence on the Instagram platform, Facebook Ireland Ltd., as the operator of the platform in the EU, processes the user data (e.g. personal information, IP address, etc.). These user data are used for statistical information about the use of our company’s presence on Instagram. Facebook Ireland Ltd. uses these data for market research and advertising purposes and to create profiles of the users. These profiles enable Facebook Ireland Ltd. for example to show advertising to the users on and off Instagram based on their interests. If the user is logged in to his Instagram account at the time of the call, Facebook Ireland Ltd. can also link the data to the respective user account. If the contact takes place via Instagram, the user’s personal data entered on this occasion will be used to process the request. We will delete the user’s data as soon as the user’s request has been conclusively answered and there are no legal safeguarding obligations, such as for subsequent contract processing. Facebook Ireland Ltd. may also set cookies for the processing of the data. If the user does not consent to this processing, he can prevent the installation of the cookies by configuring his browser accordingly. Already saved cookies can also be deleted at any time. The configuration depends on the respective browser. For Flash cookies, processing cannot be prevented through the browser configuration but rather through the configuration of the Flash Player. If the user prevents or restricts the installation of the cookies, this could result in Facebook’s functionalities not being fully available.

You can learn more about the processing activities, their prevention and the deletion of the data processed by Facebook in Instagram’s privacy policy: https://help.instagram.com/519522125107875

It cannot be excluded that the processing by Facebook Ireland Ltd. also occurs via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Facebook Inc. has agreed to be bound by the EU-US Privacy Shield and thereby declares that it observes the EU’s data protection provisions when processing data in the USA. https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

LinkedIn

To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the LinkedIn platform. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. We therefore point out that it is possible that user data are processed outside the EU, particularly in the USA. This may result in increased risks for the user in that, for example, later access to the user data may be more difficult. We also do not have access to this user data. LinkedIn has exclusive access to this data.

The LinkedIn Corporation is certified under the Privacy Shield and has thereby undertaken to observe European data protection standards https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

You can find LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy

Twitter

To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Twitter platform. Twitter is a service of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. We therefore point out that it is possible that user data are processed outside the EU, particularly in the USA. This may result in increased risks for the user in that, for example, later access to the user data may be more difficult. We also do not have access to this user data. Twitter has exclusive access to this data.

Twitter Inc. is certified under the Privacy Shield and has thereby undertaken to observe European data protection standards https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

You can find Twitter’s privacy policy at https://twitter.com/de/privacy