Data Protection

The following data protection declaration applies to the use of our online offering www.gesundheit-akademie.de (hereinafter “website”).

We attach great importance to data protection. Your personal data is collected and processed in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

1. Person responsible

Responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 GDPR is

Academy of Health Berlin/Brandenburg eV

Schwanebecker Chaussee 4 E-H, 13125 Berlin

If you wish to object to the collection, processing or use of your data by us in accordance with this data protection provision as a whole or for individual measures, you can address your objection to the person responsible.

2. General purposes of processing

We use personal data for the purpose of operating the website and for registrations for our study programs

3. What data do we use and why?

3.1 Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating the website.

We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of our website in accordance with Art. 6 Para. 1 Clause 1 f) GDPR in conjunction with Art. 28 GDPR.

3.2 Access data

We collect information about you when you use this website. We automatically collect information about your usage behavior and your interaction with us and register data about your computer or mobile device. We collect, store and use data about every access to our website (so-called server log files). The access data includes:

• Name and URL of the retrieved file

• Date and time of retrieval

• amount of data transferred

• Message about successful retrieval (HTTP response code)

• Browser type and browser version

• Operating system

• Referrer URL (ie the previously visited page)

• Websites accessed by the user’s system via our website

• User's Internet service provider

• IP address and the requesting provider

We use this log data without assigning it to you personally or creating any other profile for statistical evaluations for the purpose of operating, securing and optimizing our website, but also for anonymously recording the number of visitors to our website (traffic) and the extent and type of use of our website and services, as well as for billing purposes in order to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalized and location-based content and analyze data traffic, search for and correct errors and improve our services.

This is also our legitimate interest in accordance with Art. 6 (1) sentence 1 f) GDPR.

We reserve the right to subsequently check the log data if there is a reasonable suspicion of illegal use based on concrete evidence. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision or billing of a service, e.g. if you register for further training. After the registration process has been canceled or completed, we delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a specific suspicion of a criminal offense in connection with the use of our website. We also store the date of your last visit as part of your account (e.g. when registering, logging in, clicking on links, etc.).

3.3 Data to fulfill our contractual obligations

We process personal data that we need to fulfill our contractual obligations, such as name, address, email address, billing and payment details. The collection of this data is necessary for the conclusion of the contract.

The data will be deleted after the warranty period and statutory retention periods have expired. Data linked to a user account (see below) will always be retained for the duration of the account.

The legal basis for the processing of this data is Art. 6 Para. 1 S. 1 b) GDPR, because this data is required so that we can fulfill our contractual obligations towards you.

3.4 Email Contact

If you contact us (e.g. via contact form or email), we will process your information to process your request and in case any follow-up questions arise.

If the data processing is carried out to carry out pre-contractual measures at your request or, if you are already our customer, to carry out the contract, the legal basis for this data processing is Art. 6 Para. 1 Clause 1 b) GDPR.

We only process further personal data if you consent to this (Art. 6 Para. 1 Clause 1 a) GDPR) or if we have a legitimate interest in processing your data (Art. 6 Para. 1 Clause 1 f) GDPR). A legitimate interest is, for example, responding to your email.

4. Storage period

Unless specifically stated, we only store personal data for as long as it is necessary to fulfil the purposes pursued.

In some cases, the law requires the retention of personal data, for example in tax or commercial law. In these cases, we will only continue to store the data for these legal purposes, but will not process it in any other way and will delete it after the statutory retention period has expired.

5. Your rights as a data subject

Under applicable law, you have various rights with regard to your personal data. If you wish to exercise these rights, please send your request by email or post, clearly identifying yourself, to the address specified in section 1.

Below you will find an overview of your rights.

5.1 Right to confirmation and information

You have the right to clear information about the processing of your personal data.

You have the right at any time to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to request information from us free of charge about the personal data stored about you, together with a copy of this data. You also have the right to the following information:

• the purposes of processing;

• the categories of personal data being processed;

• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

• the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing;

• the existence of a right to lodge a complaint with a supervisory authority;

• if the personal data are not collected from you, all available information about their origin;

• the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, as well as the scope and intended effects of such processing for you.

If personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

5.2 Right to rectification

You have the right to request that we immediately correct any inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed - also by means of a supplementary statement.

5.3 Right to erasure (“right to be forgotten”)

In a number of cases, we are obliged to delete personal data concerning you.

According to Art. 17 Para. 1 GDPR, you have the right to request that we delete personal data concerning you immediately and we are obliged to delete personal data immediately if one of the following reasons applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

• You withdraw your consent on which the processing is based according to Art. 6 Para. 1 Clause 1 a) GDPR or Art. 9 Para. 2 a) GDPR, and there is no other legal basis for the processing.

• You object to the processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 Para. 2 GDPR.

• The personal data were processed unlawfully.

• The erasure of personal data is necessary to fulfill a legal obligation under Union or Member State law to which we are subject.

• The personal data were collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.

If we have made the personal data public and are obliged to delete it pursuant to Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform data controllers which process the personal data that you have requested them to delete all links to these personal data or copies or replications of these personal data.

5.4 Right to restriction of processing

You have the right to request that we restrict processing if one of the following conditions applies:

• the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,

• the processing is unlawful and you have opposed the erasure of the personal data and have requested the restriction of the use of the personal data instead;

• we no longer need the personal data for the purposes of processing, but you require the data to assert, exercise or defend legal claims, or

• You have objected to the processing pursuant to Art. 21 Para. 1 GDPR, as long as it has not yet been determined whether the legitimate reasons of our company outweigh yours.

5.5 Right to data portability

You have the right to receive, transmit or have transmitted personal data concerning you in a machine-readable format.

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transmit this data to another controller without hindrance from us, provided that

• the processing is based on consent in accordance with Art. 6 Para. 1 S. 1 a) GDPR or Art. 9 Para. 2 a) GDPR or on a contract in accordance with Art. 6 Para. 1 S. 1 b) GDPR and the processing is carried out using automated procedures.

• When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

5.6 Right of objection

You have the right to object to the lawful processing of your personal data by us if this is based on your particular situation and our interests in the processing do not outweigh them.

You have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) sentence 1 e) or f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

You have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless the processing is necessary to perform a task carried out in the public interest, for reasons related to your particular situation.

5.7 Automated decisions including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – that produces legal effects concerning you or similarly significantly affects you.

There is no automated decision-making based on the personal data collected.

5.8 Right to revoke consent to data protection

You have the right to withdraw your consent to the processing of personal data at any time.

5.9 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you is unlawful.

6. Data security

We make every effort to ensure the security of your data within the framework of applicable data protection laws and technical possibilities.

We transmit your personal data in encrypted form. This applies to your orders and also to the customer login. We use the SSL (Secure Socket Layer) coding system, but would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

To protect your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we continually adapt to the state of the art.

We also do not guarantee that our service will be available at specific times; disruptions, interruptions or failures cannot be ruled out. The servers we use are regularly and carefully backed up.

7. Transfer of data to third parties, no data transfer to non-EU countries

As a general rule, we only use your personal data within our company.

If and to the extent that we engage third parties to fulfill contracts, they will only receive personal data to the extent that the transmission is necessary for the corresponding service.

In the event that we outsource certain parts of the data processing (“contract processing”), we contractually oblige the contract processors to use personal data only in accordance with the requirements of the data protection laws and to ensure the protection of the rights of the data subject.

Data transfer to locations or persons outside the EU does not take place and is not planned.

8. Website optimization and advertising

8.1 Real Cookie Banner

We use the consent tool “Real Cookie Banner” to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. You can find details on how “Real Cookie Banner” works at https://devowl.io/de/rcb/datenverarbeitung.

The legal basis for the processing of personal data in this context is Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.

8.2 Cookies

• Affected: Visitors to the website

• Purpose: depends on the respective cookie. You can find more details below or from the manufacturer of the software that sets the cookie.

• Data processed: Depends on the cookie used. You can find more details below or from the manufacturer of the software that sets the cookie.

• Storage period: depends on the cookie, can vary from hours to years

• Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

We use so-called cookies on our website. If these cookies contain personal data, they are used on the basis of Art. 6 Paragraph 1 Letter f of the GDPR. Our interest in optimizing our website is to be regarded as legitimate within the meaning of the aforementioned provision.

Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific device used. However, this does not mean that we immediately know your identity.

You can restrict or prevent cookies from being set in your browser settings and have cookies automatically deleted when you close the browser window. Find out here how to delete cookies in your browser and/or change your cookie settings:

• Google Chrome: Website

• Microsoft Internet Explorer: Website

• Mozilla Firefox: Website

• Apple Safari: Website

Legal basis

The so-called "cookie guidelines" have been in place since 2009. They state that the storage of cookies requires your consent (Article 6 Paragraph 1 Letter a of GDPR). However, there are still very different reactions to these guidelines within the EU countries. In Austria, however, this guideline was implemented in Section 96 Paragraph 3 of the Telecommunications Act (TKG). In Germany, the cookie guidelines were not implemented as national law. Instead, this guideline was largely implemented in Section 15 Paragraph 3 of the Telemedia Act (TMG).

For absolutely necessary cookies, even if no consent has been given, there are legitimate interests (Article 6 Paragraph 1 Letter f of GDPR), which in most cases are of an economic nature. We want to give visitors to the website a pleasant user experience and for this, certain cookies are often absolutely necessary.

If cookies that are not absolutely necessary are used, this only happens with your consent. The legal basis in this respect is Art. 6 Para. 1 lit. a GDPR.

In the following sections you will be informed in more detail about the use of cookies, provided that the software used uses cookies.

8.2.1 Technically essential and functional cookies

The use of cookies serves, on the one hand, to make the use of our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website or that you have already logged into your customer account. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies for the purpose of user-friendliness, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already visited us and what entries and settings you have made so that you do not have to enter them again.

If you have a customer account with the Academy of Health or the Eberswalde University of Applied Sciences for Health Professions and its subsidiaries and are logged in or activate the “stay logged in” function, the information stored in cookies will be added to your customer account.

Completely deactivating cookies may mean that you cannot use all the functions of our website. The storage period of cookies depends on their purpose and is not the same for all (see below).

You can give your consent by continuing to use the website after a corresponding notice (cookie banner) is displayed and actively clicking on “Accept all” in the notice displayed or by giving your individual consent by selecting “Set privacy settings individually” and continuing “without consent”.

You can revoke your consent at any time. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

8.2.2 Marketing Cookies

Cookies for advertising or marketing purposes are used to show you advertising that is tailored to your interests. When you visit another website, your browser's cookie is recognized and selected advertising is shown to you based on the information stored in this cookie.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) (a) GDPR in the case of consent granted or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can revoke your consent at any time. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

8.2.3 Statistics Cookies

We also use cookies to statistically record the use of our website. This can affect the reach of our offer or the tracking of which website was visited before our website was accessed and how our website was used. We use this data to evaluate our marketing campaigns and to optimize our website. The processing takes place in accordance with Art. 6 Para. 1 Letter a of GDPR.

You can revoke your consent at any time. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

8.2.4 Overview of the cookies used

On our website we use the cookies listed in the table below, with the functions also specified there. The storage period of the respective cookies can also be found in the table.

Name of the cookie		Storage period

Essential: real Cookie Banner		1 year

Statistics: Google Analytics		1 Tag

_to	By default, analytics.js uses the cookie _ga to store the user ID. Basically, it is used to distinguish between website visitors.	2 years
_gid	The cookie is also used to distinguish website visitors	1 Tag
_gat_gtag_UA_	The cookie is also used to distinguish website visitors	1 Tag
_hole	Used to reduce the request rate. If Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_ .	1 Minute
_gac_*		90 Takes
_gat_gtag_*		1 Minute
AMP_TOKEN	The cookie has a token that can be used to retrieve a user ID from the AMP Client ID service. Other possible values indicate a logout, a request, or an error.	30 seconds to 1 year
__not	This cookie helps track your behavior on the website and measure performance. The cookie is updated each time information is sent to Google Analytics.	2 years
__utmt	The cookie is used like _gat_gtag_UA_ to throttle the request rate.	10 minutes
__utmb	This cookie is used to determine new sessions. It is updated each time new data or information is sent to Google Analytics.	30 minutes
__utmc	This cookie is used to establish new sessions for returning visitors. This is a session cookie and is only stored until you close the browser.	Session
__utmz	The cookie is used to identify the source of traffic on our website. This means that the cookie stores where you came to our website from. This could be another site or an advertisement.	6 Months
__utmv	The cookie is used to store custom user data. It is updated every time information is sent to Google Analytics.	2 years
_gid	The cookie is also used to distinguish website visitors	1 Tag
_gat_gtag_UA_	The cookie is also used to distinguish website visitors	1 Tag
_hole	Used to reduce the request rate. If Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_ .	1 Minute
_gac_*		90 Takes
_gat_gtag_*		1 Minute
AMP_TOKEN	The cookie has a token that can be used to retrieve a user ID from the AMP Client ID service. Other possible values indicate a logout, a request, or an error.	30 seconds to 1 year

8.3 Google Analytics

• Affected: Visitors to the website

• Purpose: Evaluation of visitor information to optimize the website.

• Data processed: Access statistics that contain data such as access locations, device data, access duration and time, navigation behavior, click behavior and IP addresses. You can find more details about this further down in this privacy policy.

• Storage period: depends on the properties used

• Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

• We use the functions of the web analysis service Google Analytics. Google Analytics, a web analysis service offered by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

• Google Analytics cookies are stored on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.

• Google Analytics uses cookies to analyze your access data when you visit our website. The access data is compiled by Google into pseudonymous usage profiles and can be transferred to a Google server in the USA or other third countries and stored there. The stored access data can be passed on by Google to Google's contractual partners.

• The information generated by the cookie about your use of this website is

• Browser-Typ/-Version,

• operating system used,

• Referrer URL (the previously visited page),

• Hostname of the accessing computer (IP address) and

• Time of the server request.

In the event that personal data is transferred to the USA, Google has integrated the EU standard contractual clauses into its terms of use and thus offers a guarantee that the European data protection principles and the local data protection level are also guaranteed in the context of data processing taking place in the USA.

Google will use the information obtained through the cookies on our behalf to evaluate the use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. We have therefore concluded a contract for data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. As part of the contract processing, Google is entitled to commission subcontractors (https://privacy.google.com/businesses/subprocessors/).

Your IP address is anonymized before being transferred to Google servers. We are therefore unable to determine which usage profiles belong to a specific user. Based on the data collected by Google, we can therefore neither identify you nor determine how you use our website. You can also find more information on this in the Google Analytics privacy policy.

The legal basis for the processing of personal data described here within the scope of the measurement procedure is your express consent in accordance with Art. 6 (1) (a) GDPR.

You can revoke your consent at any time. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation. You have several options for this: You can set your browser so that cookies from Google Analytics are blocked.

• You can adjust your advertising settings on Google.

• You can set a deactivation cookie by clicking here: Deactivate Google Analytics

• You can install the deactivation plug-in provided by Google in your Firefox, Internet Explorer or Chrome browsers using the following link (this variant does not work on mobile devices): Link Browser Plug-in

• For more information about Google Analytics, please see Google’s privacy policy:

• Google's privacy policy: https://www.google.de/policies/privacy/

• Information about the information processed: https://support.google.com/analytics/answer/6004245?hl=de

• Data processing conditions for Google advertising products: https://privacy.google.com/businesses/adsservices/

What is Google Analytics?

Google Analytics collects data about your actions on our website. For example, if you click on a link, this action is saved in a cookie and sent to Google Analytics. The reports we receive from Google Analytics help us better tailor our website and service to your needs. Below we will go into more detail about the tracking tool and, above all, inform you about which data is saved and how you can prevent this.

Google Analytics is a tracking tool used to analyse the traffic on our website. In order for Google Analytics to work, a tracking code is built into the code of our website. When you visit our website, this code records various actions that you perform on our website. As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data and we receive reports about your user behavior. These may include the following reports:

• Target group reports: Through target group reports we get to know our users better and know more precisely who is interested in our service.

• Ad reporting: Ad reporting helps us analyze and improve our online advertising.

• Acquisition reports: Acquisition reports give us useful information about how we can get more people excited about our service.

• Behavioral reports: This tells us how you interact with our website. We can see which path you take on our site and which links you click on.

• Conversion reports: A conversion is a process in which you perform a desired action based on a marketing message. For example, when you go from being a pure website visitor to becoming a buyer or newsletter subscriber. These reports help us learn more about how our marketing measures are received by you. This is how we want to increase our conversion rate.

• Real-time reports: Here we always know immediately what is happening on our website. For example, we can see how many users are currently reading this text.

Why do we use Google Analytics on our website?

Our goal with this website is clear: we want to offer you the best possible service. The statistics and data from Google Analytics help us achieve this goal.

The statistically evaluated data gives us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that interested people can find it more easily on Google. On the other hand, the data helps us to better understand you as a visitor. We therefore know exactly what we need to improve on our website in order to offer you the best possible service. The data also helps us to carry out our advertising and marketing measures in a more personalized and cost-effective manner. After all, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics?

Google Analytics uses a tracking code to create a random, unique ID that is linked to your browser cookie. This is how Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a "returning" user. All collected data is stored together with this user ID. This is what makes it possible to evaluate pseudonymous user profiles.

In order to be able to analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then saved in the corresponding property. The Google Analytics 4 property is the default for every newly created property. Alternatively, you can also create the Universal Analytics property. Depending on the property used, data is saved for different lengths of time.

Identifiers such as cookies and app instance IDs are used to measure your interactions on our website. Interactions are all types of actions you perform on our website. If you also use other Google systems (such as a Google account), data generated through Google Analytics can be linked to third-party cookies. Google does not share Google Analytics data unless we as the website operator approve this. Exceptions may apply if required by law.

The following cookies are used by Google Analytics: See cookie table.

Note: This list cannot claim to be complete, as Google continually changes its choice of cookies.

Here we show you an overview of the most important data collected with Google Analytics:

Heatmaps: Google creates so-called heatmaps. Heatmaps show exactly the areas you click on. This gives us information about where you are on our site.

Session duration: Google defines the session duration as the time you spend on our site without leaving the site. If you have been inactive for 20 minutes, the session ends automatically.

Bounce rate: A bounce occurs when you only view one page on our website and then leave our website again.

Account creation: When you create an account or place an order on our website, Google Analytics collects this data.

IP address: The IP address is only displayed in abbreviated form so that no clear assignment is possible.

Location: The IP address can be used to determine the country and your approximate location. This process is also known as IP location determination.

Technical information: Technical information includes, among other things, your browser type, your Internet service provider or your screen resolution.

Source: Google Analytics and we are of course also interested in which website or advertisement you came to our site from.

Other data includes contact details, any ratings, the playback of media (e.g. when you play a video on our site), sharing content via social media or adding it to your favorites. This list is not exhaustive and only serves as a general guide to data storage by Google Analytics.

How long and where is the data stored?

Google has its servers distributed all over the world. Most servers are located in America and therefore your data is mostly stored on American servers. You can find out exactly where the Google data centers are here: https://www.google.com/about/datacenters/locations/?hl=de

Your data is distributed across different physical storage devices. This has the advantage that the data can be accessed more quickly and is better protected against manipulation. Every Google data center has emergency programs for your data. If, for example, Google's hardware fails or natural disasters paralyze servers, the risk of a service interruption at Google remains low.

The retention period of the data depends on the properties used. When using the newer Google Analytics 4 properties, the retention period of your user data is set to 14 months. For other so-called event data, we have the option of choosing a retention period of 2 months or 14 months.

For Universal Analytics properties, Google Analytics sets a standard retention period of 26 months for your user data. Your user data will then be deleted. However, we have the option of choosing the retention period for user data ourselves. We have five options available for this:

• Deletion after 14 months

• Deletion after 26 months

• Deletion after 38 months

• Deletion after 50 months

• No automatic deletion

In addition, there is also the option that data will only be deleted if you no longer visit our website within the period we have chosen. In this case, the retention period will be reset each time you visit our website again within the specified period.

When the specified period has expired, the data is deleted once a month. This retention period applies to your data that is linked to cookies, user recognition and advertising IDs (e.g. cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data is a fusion of individual data into a larger unit.

How can I delete my data or prevent data storage?

Under European Union data protection law, you have the right to obtain information about your data, to update it, to delete it or to restrict it. You can use the browser add-on to deactivate Google Analytics JavaScript (ga.js, analytics.js, dc.js) to prevent Google Analytics from using your data. You can download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de. Please note that this add-on only deactivates data collection by Google Analytics.

If you generally want to deactivate, delete or manage cookies, you will find the relevant links to the instructions for the most popular browsers under the “Cookies” section.

Legal basis

The use of Google Analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 Paragraph 1 Letter a of GDPR (consent), this consent represents the legal basis for the processing of personal data, as may occur when collected by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus improving our offering technically and economically. With the help of Google Analytics, we can detect errors on the website, identify attacks and improve profitability. The legal basis for this is Art. 6 Para. 1 lit. f GDPR (legitimate interests). However, we only use Google Analytics if you have given your consent.

Google processes your data in the USA, among other places. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can involve various risks for the legality and security of data processing.

Google uses so-called standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR) as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there. Standard contractual clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

We hope we have been able to provide you with the most important information about data processing by Google Analytics. If you would like to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Agreement (AVV) Google Analytics

We have concluded a data processing agreement (DPA) with Google in accordance with Article 28 of the General Data Protection Regulation (GDPR). You can read what a DPA is exactly and, above all, what must be included in a DPA in our general section “Data processing agreement (DPA)”.

This contract is required by law because Google processes personal data on our behalf. It clarifies that Google may only process data it receives from us in accordance with our instructions and must comply with the GDPR. The link to the order data processing conditions can be found at https://business.safety.google/intl/de/adsprocessorterms/

8.4 Google Ads

Our website uses the service Google Ads, an online advertising service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

As part of Google AdWords, we use so-called conversion tracking, an online advertising service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

When you click on an ad placed by Google, a cookie is set for conversion tracking. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for us. This enables us to find out how many users clicked on our ad and were redirected to our site. However, we do not receive any information that can be used to personally identify users. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie in your Internet browser under user settings. You will then not be included in the conversion tracking statistics.

Conversion cookies are stored on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in analyzing user behavior in order to optimize both our website and our advertising.

You can find more information about Google AdWords and Google Conversion Tracking here:

Google's privacy policy: https://www.google.de/policies/privacy/

Information about the information processed: https://www.google.com/intl/de/policies/privacy/#infocollect

Data processing conditions for Google advertising products: https://privacy.google.com/businesses/adsservices/

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If you deactivate cookies, the functionality of this website may be restricted.

You can revoke your consent at any time. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

8.5 Google-Tag-Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via one interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data, as it is purely used to manage other services in our online offering. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Further information on data protection can be found on the following Google websites:

• Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de

• FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html

• Terms of Use Google Tag Manager: https://www.google.com/intl/de/tagmanager/use-policy.html

9th Data Protection Officer

If you have any questions or concerns about data protection, please contact our data protection officer:

Maria Kleinschmidt (Data Protection Officer)

ASN Arbeitssicherheit NORD GmbH