Privacy Policy

1.) General notice and mandatory information

The following privacy policy is based on the terms of the DSGVO and is valid from 25.05.2018. The statement can be changed at any time by means of publication on our homepage. The privacy statement is valid for the website www.alpha-heidelberg.de including all applications, service and tools. The privacy statement is valid regardless of the type of access, and also includes mobile devices.

Designation of the responsible entity

The responsible body for data processing on this website and the data protection officer can be contacted at the following address:

Alpha Aktiv - Private Educational Institute
Beata Drogi
Hans-Böckler-Strasse 2
69115 Heidelberg

Phone: +49 (0) 6221 5880269

Email: info@alpha-heidelberg.de

The controller alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, contact details or similar).

Unless otherwise described, in the following text the personal pronouns "we", "us" refer to Alpha Aktiv and the pronouns "you", "your" refer to the customers who either visit the website www.alpha-heidelberg.de or use services of the website or the private educational institute Alpha Aktiv.

2.) Personal data

Personal data, which are automatically collected when using our website:

Hosting

Our website is hosted by Netlify. When you call up one of our web pages, your browser therefore establishes a connection to a server of Netlify, Inc., 610 22nd Street, Suite 315, San Francisco, CA 94107, USA. This server stores some information about the connection in a so-called log file. We do not have access to these log files. More information about how Netlify processes your data can be found in Netlify's privacy policy. Netlify collects the following personal data, which is technically necessary to enable you to view the website and to ensure stability and security: IP address, date and time of request, amount of data transferred, access status (HTTP status) and websites from which the user's system accesses our website (referrer URL). This data is stored by Netlify for 30 days. Further details can be found here.

The storage of this data in log files serves to ensure the functionality and optimization of the website and to ensure the security of the information technology systems. In the above purposes lies our legitimate interest in data processing. The legal basis for the collection and temporary storage of the aforementioned data and the log files is Art. 6 para. 1 p. 1 lit. f) DSGVO.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your terminal device. Cookies help us to make our offer more user-friendly, effective and secure.

Some cookies are "session cookies." Such cookies are deleted by themselves after the end of your browser session. In contrast, other cookies remain on your terminal device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured to automatically delete cookies when you close the program. Disabling cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you (e.g. shopping cart), is based on Art. 6 (1) lit. f DSGVO. As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these are treated separately in this data protection declaration.

Personal data sent to us by entering it in the contact form:

Data transmitted via contact form, including your contact details, are stored in order to process your request or to be available for follow-up questions. This data will not be passed on to third parties without your consent.

The processing of the data entered in the contact form is based exclusively on your voluntary consent (Art. 6 para. 1 p.1 lit. a DSGVO). A revocation of your already given consent is possible at any time. For the revocation, an informal communication by e-mail to office@alpha-heidelberg.de is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to store it or there is no longer any need to store it. Mandatory legal provisions - in particular retention periods - remain unaffected.

With which services personal data are stored:

- if you contact us by means of our contact form

- if you send us an inquiry by e-mail

- if you contact us in any other way
In the course of registration and order execution, we store data that can identify you personally. The provision of all personal data is voluntary. However, a contract conclusion cannot be guaranteed without the provision of necessary personal data.

What personal data is stored:

- Name, postal address, telephone number, e-mail address, IP address, dates of birth, nationality.

-Payment information

-Data that, according to the law, must be collected by us or that we are entitled to collect according to applicable law, for example, for the authentication of customers.

Why personal data is collected:

- to check data for accuracy

- to contact customers by e-mail, letter, telephone

- to detect, prevent and investigate illegal activities

- To offer special promotions to customers, solicit their opinions, or provide information about services in accordance with applicable law

- To monitor and improve the information security of our services

Where personal data is stored and processed:

-Personal data is stored and processed within our operations. Only authorized personnel have access to this data. This includes management, accounting and administration.

-Personal data is transmitted to legally authorized third parties in the context of investigations, criminal prosecution, ongoing legal proceedings, as well as for the assertion, exercise or defense of legal claims (Art. 6 para. 1 sentence 1 lit. f) DSGVO). Here, only information relevant to the investigation is transmitted.

-If you have given us express consent, then your data may be passed on to third parties in accordance with Art. 6 para.1 p.1 lit. a) DSGVO.

Transfer of data to third countries:
Only in connection with the involvement of service providers for the provision of web analytics services may information be transferred to recipients in so-called "third countries".

"Third countries" are countries outside the European Union or the Agreement on the European Economic Area, in which a level of data protection that is comparable to that in the European Union cannot be assumed without further ado.

If the information transferred also includes personal data, we ensure before the transfer that the recipient in the third country can guarantee the required level of data protection. This may result in particular from a so-called "adequacy decision" of the European Commission, which establishes an adequate level of data protection for a specific third country as a whole. Otherwise, we can rely on compliance with the "EU Standard Contractual Clauses" or the "EU-US Privacy Shield".

How long personal data is stored by us:

Personal data will be stored until your interest in not continuing the storage is more important than our legitimate interest in storing it. Due to retention obligations under commercial and tax law, data may also be stored without a legitimate interest. Personal data will be deleted as soon as storage is no longer necessary, i.e. the retention obligations have been fulfilled, and further storage is not legally permissible. Personal data that is stored due to the retention obligation is blocked. It can only be accessed if it is necessary with regard to the purpose of the retention obligation.

How your personal data is protected with us:

In order to prevent misuse and unauthorized access to personal data, Alpha Aktiv takes all necessary technical and organizational security measures in accordance with Art. 32 DSGVO, taking into account implementation costs, probabilities of occurrence and the state of the art.

Access to the data is controlled. In accordance with Art. 25 DSGVO, data is optimally protected through targeted software and hardware purchases.

3.) Legal basis for the collection of personal data (According to Art. 13 DSGVO)

We collect personal data

- after obtaining consent (Art. 6 para. 1 lit. a) DSGVO and Art. 7 DSGVO).

- for the fulfillment of our services, for the conclusion of a contract, for the use of our services and for answering inquiries. Art. 6 para. 1 lit. b) DSGVO permits the processing of data for the performance of a contract or pre-contractual measures.

- for data processing to fulfill our legal obligations (Art. 6 para. 1 lit. c) DSGVO).

- To protect your vital interests (Art. 6 para. 1 lit. d) DSGVO).

- To pursue our legitimate interests, provided that the interests, fundamental rights and freedoms of customers do not prevail (Art. 6 para. 1 lit. f) DSGVO)

4.) Customer rights

Revocation of your consent to data processing

Only with your explicit consent are some data processing operations possible. A revocation of your already given consent is possible at any time (Art 7 (3) DSGVO and Art. 21 DSGVO). For the revocation, an informal communication by e-mail to office@alpha-heidelberg.de is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation. If you do not wish to receive advertising from us, you can contact us using the above e-mail address

Right to complain to the competent supervisory authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law (Art. 77 DSGVO). The competent supervisory authority with regard to data protection issues is the state data protection commissioner of the federal state in which our company's registered office is located. The following link provides a list of data protection officers and their contact details: www.bfdi.bund.de.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible (Art. 20 DSGVO).

Right to information, correction, blocking, deletion.

-You have the right to free information about your stored personal data at any time within the framework of the applicable legal provisions (Art. 15 DSGVO).

-You have the right to be informed about the origin of the data, the planned storage period, its recipients and the purpose of the data processing.

-You have a right to immediate correction, completion (Art. 16 DSGVO), blocking, restriction or deletion of this data (Art. 17 and 18 DSGVO). For this purpose, an objection to the processing must be lodged in accordance with Art. 21 DSGVO.

- In this regard and also for further questions on the subject of personal data, you can contact us at any time via the contact options listed in the imprint.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analytics service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser stores on your terminal device and enable an analysis of website usage. Information generated by means of cookies about your use of our website is transmitted to a Google server and stored there. The server is usually located in the USA.

The setting of Google Analytics cookies is based on Art. 6 (1) lit. f DSGVO. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.

IP anonymization

We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google truncates your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. There is no merging of the IP address transmitted by Google Analytics with other data from Google.

Browser Plugin

The setting of cookies by your web browser can be prevented. However, some functions of our website could be restricted as a result. Likewise, you can prevent the collection of data relating to your website usage, including your IP address, together with subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: Link.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to our website: Disable Google Analytics.

Details on how Google Analytics handles user data can be found in Google's privacy policy.

Order processing

In order to fully comply with the legal data protection requirements, we have concluded an order processing agreement with Google.

Demographic characteristics with Google Analytics

Our website uses the "demographic characteristics" function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the item "Objection to data collection".

Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising program. As part of the online advertising program, we work with conversion tracking. After a click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your terminal device. Google AdWords cookies lose their validity after 30 days and are not used to personally identify users. From the cookie, Google and we can recognize that you clicked on an ad and were redirected to our website.

Each Google AdWords customer receives a different cookie. The cookies are not traceable through websites of AdWords customers. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with conversion tracking tag. However, AdWords customers do not receive any information that allows personal identification of users. If you do not want to participate in tracking, you can object to its use. In this case, the conversion cookie must be deactivated in the user settings of the browser. In this way, there will also be no inclusion in the conversion tracking statistics.

The storage of "conversion cookies" is based on Art. 6 (1) lit. f DSGVO. As the website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.

Details on Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/ .

With a modern web browser, you can monitor, restrict or disable the setting of cookies. Disabling cookies may result in limited functionality of our website.

YouTube

Our website uses YouTube plugins for the integration and display of video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When a page with an integrated YouTube plugin is called up, a connection to the YouTube servers is established. This tells YouTube which of our pages you have accessed.

YouTube can assign your surfing behaviour directly to your personal profile if you are logged into your YouTube account. You have the option of preventing this by logging out first.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.

Details on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Source: Privacy configurator from
mein-datenschutzbeauftragter.de (modified)