The data protection instructions fulfill the information requirements according to the requirements of Item 12 ff. of the EU General Data Protection Regulation ("GDPR") and provide an overview of the processing of your personal data (on this website).
4. What data is collected for what purposes?
The purposes of the data processing may be the result of technical, contractual or legal requirements as well as consent.
We use the data mentioned in section 2 for the following purposes:
- Provision of the website and ensuring technical safety, in particular to remedy technical errors and to ensure that unauthorized persons do not gain access to the systems of the Website;
- Web analytics to make the website more efficient, interesting, and to conduct market research;
- To register and create a user account, e.g. for the purchase of goods or services;
- To operate Arvato Marketing activities, in particular banner advertising and targeted information such as personalized offers to our customers.
- To give Arvato a collection of information about customers' browsing and buying behavior, including insight into the success of special campaigns, tenders, etc.
- To carry out credit checks.
- To enable Arvato to fulfill its contractual obligations and, for to remit payment to a third party if a product has been purchased by a customer who has been redirected from the third party's website to the Arvato website.
For more information about these data processing purposes, see the following sections of this Privacy Notice.
4.1 Technical provision of the website
4.1.1 Description and scope of data processing
To ensure the functionality of the website, the execution of security analysis and the defense against attacks, records of the server log files are automatically stored, as part of the accruing access data according to item 2 for the computer system of the used computer upon entering and while using the website. Storage of the server log files together with other data does not take place. The Company uses the server log files for statistical analysis to analyze and correct technical incidents, to ward off attacks and fraud attempts, and to optimize the website's functionality.
4.1.2 Purposes and legal basis of data processing
The legal basis for the collection of the server log files is Item. 6 para. 1 lit. f DSGVO. The functionality of the website, the performance of security analysis and the prevention of attacks and fraud attempts are of legitimate interest to the Company.
4.1.3 Duration of storage or criteria for determining this duration
After accessing the web pages, the server log files are stored on the web server and the IP address contained therein is stored as long as necessary for the purpose. An evaluation during this storage period takes place exclusively in the case of an attack.
4.1.4 Opposition and removal option
You have the right to object to the processing of your data in the context of server log files, provided that there are reasons for this arising from your particular situation. If you would like to exercise your right of objection, please contact the contact address specified in section 1.
4.2 Use of the web shop
4.2.1 Description and scope of data processing
The website features a web shop where you can buy goods and/or services of the Company. For the settlement of the purchase as well as for the conclusion of the contract, it is necessary that you provide your personal data. Data required for the conclusion of the contract are marked separately, further data can be provided voluntarily. Your credentials will also be processed to verify the purchase and - if you have a user account - to identify you the next time you log in. As part of the contract, your data may be forwarded to authorized third parties such as payment institutions for the purpose of payment. Also, service providers can be used for the payment processing, as long as they exclusively comply with the data protection contracts under the authority of the Company. To prevent the disclosure and/or access to/by unauthorized third parties to your personal data - especially financial data - the ordering process is encrypted. In order to make the purchase, you will need to create a customer account so that you provide your details when registering for the first time, and the Company can save your details for later purchases.
4.2.2 Purposes and legal basis of data processing
Data processing in the context of using the web shop is required to process the purchase of goods and/or services. The legal basis is Item 6 para. 1 lit. b DSGVO.
4.2.3 Duration of storage or criteria for determining this duration
Due to commercial and tax regulations, the Company is obliged to store your data for a period of six to ten years. However, the Company limits the processing of data so that your data will only be processed to comply with legal obligations. You can deactivate your customer account at any time, however your data will be processed further for the aforementioned reasons.
4.2.4 Opposition and removal options
The processing of your data is required for the contract. Consequently, it is not possible to object to this processing.
4.3 Contact form, e-mail and telephone contact
4.3.1 Description and scope of data processing
The website provides the possibility to contact the Company via a contact form, an e-mail address or a telephone number. If you wish to use this feature, the data entered in the contact form, your e-mail address and/or your telephone number, as well as your concerns will be transmitted to the Company. Depending on the request (e.g. questions about the Company's products and services, assertion of your data subject rights, such as information), your contact details will be processed further (with the help of service providers). Your contact information may be shared with third parties (such as affiliates), to the extent necessary to process your request,
4.3.2 Purposes and legal basis of data processing
The legal basis for the processing of your contact data is based on Item 6 para. 1 lit. f DSGVO. Your legitimate interests lie in the processing of your request and further communication. If your contact is aimed at concluding a contract with the Company, the legal basis for the processing of your contact data is Item 6 para. 1 lit. b DSGVO.
4.3.3 Duration of storage or criteria for determining this duration
After processing your request and terminating further communication, the contact details will be deleted. However, if the intention behind your contacting the Company is to conclude a contract with the Company or if you wish to assert your data subject rights such as information inquiry. For this purpose, the data will be stored until the contractual and/or legal obligations have been fulfilled and statutory retention periods do not preclude deletion.
4.3.4 Opposition and removal options
You have the right to object to the processing of your contact details, provided there are reasons for this arising from your particular situation. If you would like to exercise your right of objection, please contact the contact address specified in section 1. If you object, communication cannot be continued. However, if the intention behind your contacting the Company, such as the initiation of a contract, fulfillment of a contract or assertion of your data subject rights, requires the processing of contact details, you cannot exercise your right to objection.
4.4.1 Description and scope of data processing
4.4.2 Purposes and legal basis of data processing
The processing of your data through the login form is required for the promotion of the Company's goods and/or services. The legal basis for processing the data when registering for the newsletter is the consent according to Item 6 para. 1 lit. a GDPR with reference to Section 7 Subsection 2 No. 3 of the Law against Unfair Competition (hereinafter referred to as "UWG").
4.4.3 Duration of storage or criteria for determining this duration
The data will be stored during the newsletter subscription. After inactivity of the newsletter, the data will no longer be used for the newsletter. The data will be stored until contractual and/or legal obligations have been met and statutory retention periods do not preclude deletion. The same applies if you have revoked your consent.
4.4.4 Opposition and removal options
You can revoke your consent to the newsletter at any time by clicking on the following link or notifying the Company of your revocation under firstname.lastname@example.org.
4.5 Web tracking
The website contains built-in services that optimize the user-friendliness and measure the reach of the website. Your access data (see section 2) will be recorded and the usage behavior will be evaluated by means of analysis cookies (see section 3). For web tracking, a personal identification is generally not required, so that when you enter your access data, the stored IP address is either not used or only shortened and pseudonymous usage profiles are created. These are not merged with other data and you have the possibility to opt out at any time. The creation of personal usage profiles is only carried out in exceptional cases and provided you have given your consent.
The web tracking services are usually provided by service providers who process the data only as directed by the person responsible and not for their own purposes as a so-called processor. This is ensured by contract processing contracts. If the service providers outside the European Union or the European Economic Area (hereinafter referred to as "EU or EEA") process their data, a so-called third-country transfer takes place. This is permissible, provided that you have given your consent, the Company has provided guarantees for a data protection level that is appropriate to the European standard or the EU Commission has classified the respective third country as a safe third country. The third-country transfer of the respective service is indicated below. Further information on the recipients of your data can be found in section 5.
The web tracking services of the website are described in more detail below.
4.5.1 Google Tag Manager
The website uses Google Tag Manager for its functionality. This service is provided by Google Inc., 1600 Amphitheater Park-way, Mountain View, CA 94043, USA (Google Inc.). Through the Google Tag Manager, the web tracking services (see Section 4.4) and other services included in this website can be managed by so-called "tags" (these are placeholders for a website code). Google Tag Manager implements these tags. No cookies are used and no personally identifiable information is collected by Google Tag Manager. The Google Tool Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data.
4.5.2 Google Analytics
The website uses the service Google Analytics. Provider of Google Analytics is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics creates a pseudonymous usage profile to optimize the user-friendliness of the website. The pseudonimity is ensured by the fact that before you submit your data to Google, the IP address is shortened and no conclusion on your person is possible. The pseudonymous usage profile is evaluated after delivery for the purpose of optimizing usability. A merge with other data from Google does not take place. Through a contract processing contract, the Company ensures that Google processes the data only at its own discretion.
4.5.3 Purposes and legal basis of data processing:
The legal basis for recording and evaluating pseudonymous usage profiles is Item 6 para. 1 lit. f DSGVO. In optimizing the user-friendliness of the website and the range measurement are the legitimate interests of the Company. Insofar as personal usage profiles are recorded and evaluated, the legal basis is your consent in accordance with Item 6 para. 1 lit. a GDPR.
4.5.4 Duration of storage or criteria for determining this duration:
The data collected and evaluated using the web tracking services is typically stored until you object to its use. If the data processing is based on your consent, your data will be stored until you revoke your consent.
4.5.5 Opposition and removal options:
You may opt-out of using the web tracking services at any time by modifying your browser settings or by using the following link(s) to download and install the available browser plug-ins: Google Analytics: https://support.google.com.
If the data processing is based on your consent, you can revoke your consent at any time by informing the Company of your revocation email@example.com, subject "revocation consent web tracking".
arrow_drop_upBack to Top
5. Who receives my data?
Within the Company, those entities gain access to your data that are required to fulfill the purposes described in section 4 above. Also, service providers employed by the Company may gain access to your data (so-called "processors", such as data centers, newsletters, sweepstakes, and customer service or debtor management). Order processing contracts ensure the adherence to instructions, data security and the confidential handling of your data by these service providers.
A data transfer to other recipients such as advertising partners, providers of social media services or credit institutions (so-called "third parties") will take place if required by law or if you have consented
Personal data will not be rented or sold to third parties.
The following third parties are included in the data transfer:
- Public sector bodies and institutions, such as law enforcement agencies, who gain access to your data for compliance with legal or regulatory obligations.
- Arvato reserves the right to transfer your personal information to the relevant publisher, such as Microsoft Inc. or Microsoft affiliates, e.g. to forward the respective training organization.
- Providers of Lab Hosting Websites
- Credit bureaus
Forwarding is also possible to the following persons:
Companies working on behalf of Arvato: we hire companies to provide certain services to us, such as but not limited to customer hotlines or the processing of payments. In this context, it may be necessary for these companies to process your personal information. We are acting on these companies to use the data only for the provision of these services. Businesses are not allowed to pass this information on to third parties, unless this is necessary to provide the services.
Company sales: Arvato reserves the right to disclose your personal data or parts thereof to third parties in the event of a sale of the Company or Company objects, provided that the services provided via the website are transferred to a third party. In case of a sale, Arvato will give you the opportunity to object to a redirect. This may result in the acquiring company no longer being able to provide the services provided by Arvato.
Your consent: In all other cases, Arvato will obtain your consent before disclosing your data. Arvato can e.g. organize a special offer or contest with third parties in connection with which you are asked to consent to the disclosure of data to that third party.
Further information on the transfer of data to the respective third party can be found in the individual purposes according to Section 4.
arrow_drop_upBack to Top
10. California Residents
If you are a California resident, the information below also applies to you.
California Consumer Privacy Act
California residents may request copies of the data collected about them in the past 12 months or request that we delete personal information about them. You may exercise your rights by contacting us via email at firstname.lastname@example.org or writing to us at:
c/o Courseware Marketplace,
29011 Commerce Center Dr.
Valencia, CA 91355.
California Privacy Rights
Shine the Light
California Civil Code Section 1798.83 gives California residents the right to request, from a business with whom the California resident has an established business relationship, certain information with respect to the types of personal information the business shares with third parties for direct marketing purposes by such third party, and the identities of the third parties with whom the business has shared such information during the immediately preceding year. To request further information pursuant to California Civil Code Section 1798.83, please contact us via email at email@example.com.
California Minor Content Removal
If you are a resident of California, under 18 and a registered user of our services, you may ask us to remove content or information that you have posted to these services by contacting us via email at firstname.lastname@example.org. Please note that your request does not ensure complete or comprehensive removal of the content or information, as, for example, some of your content may have been reposted by another user.
We do not knowingly collect personal information directly from children under the age of 13 without parental consent. Our websites are general audience sites and are not specifically targeted to or intended for use by children.
California Do Not Track Disclosure
Do Not Track is a privacy preference that users can set in their web browsers. When a user turns on the Do Not Track signal, the browser sends a message to websites requesting them not to track the user. At this time, we do not respond to Do Not Track browser settings or signals. For information about Do Not Track, please visit: www.allaboutdnt.org .
arrow_drop_upBack to Top