Privacy policy
We take privacy seriously
The protection of your privacy in the processing of your personal data is of great concern to us. Therefore, we want to provide you with the following information on privacy.
1. Data controller
BBZ Berufsbildungszentrum GmbH
Bayernwerk 33
92421 Schwandorf
Phone: +49 9431 5285-0
E-Mail: infobbz-sad.de
2. Data protection officer
Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Phone: +49 941 2986930
Fax: +49 941 29869316
E-Mail: anfragenprojekt29.de
Internet: www.projekt29.de
3. Personal data
Personal data is data about your person. This includes your name, your address and your e-mail address. You do not have to reveal any personal data to visit our website. In some cases we require your name and address as well as other information in order to provide you with requested services.
The same applies in case we supply you with requested information material or when we reply to your enquiry. In these cases we are always going to point this out to you. In addition, we only store data you transfered to us automatically or voluntarily.
When you use one of our services, we generally only gather data necessary to provide you our service. Potentially we will ask you for further information on a voluntary basis. Whenever we process personal data, we do so in order to provide you with our service or to pursue our commercial goals.
4. Contact form
Provided you send us data using a contact form, this data is stored on our servers in the course of data backup. Your data is used exclusively to process your request. Your data is handled strictly confidential. A transfer to thrid parties does not occur.
5. Automatically saved data
When you visit our website, our web server saves the IP address assigned to you by your internet service provider, the website you have visited us from, the pages you have visited on our site as well as the date and duration of you visit, by default. This information is mandatory for the technical transfer of the web pages and for a safe operation of the server. A personalised analysis of this data does not occur.
6. Server log files
The provider of the website collects information and automatically saves it in so-called server log files, which your browser transmits to us automatically. This includes
- Date and time of the request
- Name of the requested file
- Page, from which the file was requested
- Access status (file transfered, file not found, etc.)
- Browser and operating system used
- Complete IP address of the requesting computer
- Transfered data volume
This data is not merged with other data sources. The processing takes place in accordance with Art. 6 (1) f GDPR, based on our legitimate interest in the improvement of the stability and functionality of our website.
For reasons of technical security, especially to defend against attempts to hack into our web server, this data is stored by us for a short time. It is not possible for us to identify individual people on the basis of this data. After no more than seven days, the data is anonymised by shortening the IP address at a domain level so that it is no longer possible to establish a connection to an individual user. In an anonymised form, the data is also processed for statistical purposes; it is not compared with other data sets or passed on to third parties, even in part.
7. Use of our online services
7.1 Cookies
When you visit our website, we may store information on your computer in the form of cookies. Cookies are small files which are transferred from a web server to your browser and are stored on your computer. The legal basis for the use of Cookies is Art. 6 (1) f GPDR.
Only the IP address is stored here – no other personal information. This information that is stored in the cookies allows us to automatically recognise you on your next visit to our website, which makes it easier for you to use our website.
Of course, you can also visit our website without accepting cookies. If you do not want your computer to be recognised on your next visit, you can also reject the use of cookies by changing the settings in your browser so that cookies are not accepted. You can find out how to do this in the operating instructions for your browser. If you reject the use of cookies, this may restrict your use of some areas of our web pages.
7.2 Cookiebot
We use the service Cookiebot by Danish provider Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark ("Cybot") so that you have full control over your data on our website. Before you give your consent, we do not store cookies on your device. For the full functionality of the website some cookies are absolutely necessary (consent state on cookies, watchlist). Provided you consent, we store your settings for 12 months. You can change your cookie settings under item 7.3, Cookies in use and cookie settings on this privacy policy page at any time and thereby withdraw your consent fully or partially.
Cybot relies on the following subcontractors:
- Microsoft Ireland Operations Ltd, Dublin, Ireland (main contractor for the operation of the main infrastructure)
- E-conomic International A/S, Copenhagen, Denmark (accounting for Cybot A/S)
- Fujitsu A / S, Ballerup, Denmark (hosting of the accounting system of E-conomic International A/S)
No data is forwarded to other third parties.
You can find additional information on data privacy at Cybot here:https://www.cookiebot.com/en/privacy-policy/
7.3 Cookies in use and cookie settings
7.4 Google Tag Manager
This website uses Google Tag Manager. Tag Manager does not collect personal data. The tool resolves other tags which on their part may potentially collect data. Google Tag Manager does not access this data. If a deactivation has taken place on the domain or cookie level, it will remain for all tracking tags implemented with Google Tag Manager. You can find Google's use policy for this tool under: https://www.google.com/analytics/tag-manager/use-policy/
7.5 YouTube in the advanced data protection mode
We use the provider YouTube for the integration of videos. The videos have been embedded in the advanced data protection mode. Like most websites, YouTube uses cookies to collect information about the visitors to its website. YouTube uses these, amongst other things, to record video statistics, to prevent fraud and to improve user-friendliness. This also leads to connection with the Google DoubleClick network. When you start the video, this could trigger further data processing operations. We have no influence on this. You can find further information on data protection at YouTube in its data privacy statement:https://www.youtube.com/t/privacy_at_youtube
8. Security
We have taken technical and administrative security precautions to protect your personal data against loss, destruction, manipulation and unauthorised access. All our employees and the service providers who work for us are committed to the valid data protection laws.
Whenever we collect and process personal data, this is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a continuous improvement process and our privacy policies are constantly being revised. Please ensure that you have the latest version.
9. Data subject rights
At any time, you have a right of access and a right to rectification, to erasure or to restriction of the processing regarding your saved data, as well as a right to object to the processing, a right to data portability and a right to lodge a complaint, in accordance with the conditions of data protection law.
9.1 Right of access
You may demand information from us concerning whether and to what extent we are processing your data.
9.2 Right to rectification
If we are processing your data that is incomplete or incorrect, you may demand at any time that we rectify or complete it.
9.3 Right to erasure
You may demand that we delete your data if we are processing it unlawfully or if the processing interferes disproportionately with your legitimate protection interests. Please note that there may be reasons opposing an immediate erasure, e.g. in the event of statutory storage obligations.
Independently of you exercising your right to erasure, we will delete your data immediately and in full if there is no contractual or statutory storage obligation that contradicts this.
9.4 Right to restriction of processing
You may demand from us a restriction of the processing of your data if
- you are disputing the accuracy of the data, for a period which allows us to verify the accuracy of the data;
- the processing of the data is unlawful and you refuse a deletion, instead demanding a restriction of the use of the data;
- we no longer require the data for the intended purpose, but you still require this data for the assertion or defence of legal claims, or
- you have objected to the processing of the data.
9.5 Right to data portability
You may demand that we make your data, which you provided to us, available to you in a structured, commonly used and machine-readable format and that you can transmit this data to another controller without hindrance from us, provided that
- we process this data on the basis of revocable consent granted by you or for the performance of a contract between us, and
- this processing is carried out by automated means.
Where technically feasible, you may demand that your data be transmitted directly from us to another controller.
9.6 Right to object
If we are processing your data on the basis of a legitimate interest, you may object to this processing at any time; this would also apply to profiling based on these provisions. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims. You can object to the processing of your data for direct marketing at any time without providing reasons.
9.7 Right to lodge a complaint
If you believe that we are infringing German or European data protection law in the processing of your data, please get in touch with us to resolve matters. You also, of course, have the right to contact the competent supervisory authority, the relevant state office for data protection supervision.
If you want to assert one of the aforementioned rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.
10. Changes to this data privacy statement
We reserve the right to change our data privacy statements if this should be necessary due to new technologies. Please ensure that you have the latest version. If fundamental changes are made to this data privacy statement, we shall announce this on our website.