Data Protection - Pasani Academy

Legal Notice: The only legally binding language of the data protection is German, and even though there may be translations of this document in languages other than German, the German version shall be the definitive and binding version and German shall be the only language used in the interpretation of this document.

1. Person responsible for data processing

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

PASANI Academy GmbH
Managing Director: Patrick Nieveler
Inninger Street 21
82237 Wörthsee
E-mail: info@pasani-academy.de

Munich Local Court: HRB279315

2. Your rights as a data subject

You can exercise the following rights at any time using the contact details provided:

Information about your data stored by us and its processing (Art. 15 GDPR),
Correction of incorrect or incomplete personal data (Art. 16 GDPR),
Deletion of your data stored by us (Art. 17 GDPR),
Restriction of data processing if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it, and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims, or you have lodged an objection to the processing in accordance with Art. 21 GDPR (Art. 18 GDPR),
You are entitled to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller (Art. 20 GDPR).
You can revoke your consent given to us at any time in accordance with Art. 7 para. 3 GDPR. As a result, we may no longer continue the data processing that was based on this consent in the future.
In accordance with Art. 21 GDPR, you may object to the processing of your personal data if there are grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. You have the option to inform us informally of your objection by telephone, email, fax or to our postal address listed at the beginning of this privacy policy.
You can lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority in the federal state of your place of residence or with the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

3. General information on data processing

Scope of the processing of personal data:

We only process your personal data insofar as this is necessary to provide a functional website and our content and services. Your personal data is regularly processed only with your consent. If you give your consent to the processing of personal data for specific purposes, the lawfulness of the processing follows from Art. 6 para. 1 a GDPR. Consent can be withdrawn at any time with effect for the future. However, the withdrawal of consent does not affect the lawfulness of the data processed until the withdrawal or the further processing based on a different legal basis.

An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

Legal basis for the processing of personal data:

a) Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 a GDPR serves as the legal basis.

b) When processing personal data that is necessary for the fulfillment of a contract to which you are a party, Art. 6 para. 1 b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

c) Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 c GDPR serves as the legal basis.

d) In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 d GDPR serves as the legal basis.

e) If the processing is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not outweigh the former interest, Art. 6 para. 1 f GDPR serves as the legal basis for the processing.

Data erasure and storage duration:

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which our company is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

4. Collection of general information when visiting our website

Nature and purpose of the processing:

When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This

Information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar. This is exclusively information that does not allow any conclusions to be drawn about your person.

They are processed in particular for the following purposes:
Ensuring a smooth connection to the website,
Ensuring the smooth use of our website,
Evaluation of system security and stability and
for further administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.
Legal basis:

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.

5. Registration on our website

Nature and purpose of the processing:

When you register to use our personalized services, some personal data is collected, such as your name, address, contact and communication data (e.g. telephone number and email address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.

Legal basis:

The data entered during registration is processed on the basis of the user’s consent (Art. 6 para. 1 lit. a GDPR).

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration:

Data will only be processed in this context as long as the corresponding consent has been given. It will then be deleted, provided there are no statutory retention obligations to the contrary. To contact us in this context, please use the contact details provided at the end of this privacy policy.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

Possibility of objection and removal:

As a user, you have the option of cancelling your registration at any time. You can have the data stored about you amended at any time.

6. Cookies

We use cookies for the operation of our website. These are files that your browser stores on your end device when you visit our website. They are used to storing data about your visit and to recognize you, as well as to statistically record, improve and guarantee the operation of our website.

The legal basis for this is Section 6(1)(f) GDPR. Temporary cookies are deleted after you leave the website. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

7. Integration of third-party services and content

This website incorporates content from third-party providers. This may be YouTube videos or graphics from other websites, for example. In such a case, the third-party provider recognizes your IP address to enable the display of this content.

8. Use of Facebook, XING, Twitter, and LinkedIn social buttons

On our website, you will find social media buttons that you can click to access our Facebook, XING, and LinkedIn profiles. If you only visit our website without clicking on the social media buttons, no data is transferred to the third-party provider. Only when you click on the corresponding icon will you be redirected to the provider’s website.

9. Google Analytics

On our website, we use the website analysis service for websites from Google Analytics, a web analysis service from Google Inc(https://www.google.de/intl/de/about/)(1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). In this context, pseudonymized user profiles are created and cookies are used.

The information generated by the cookie about your use of this website, such as

Browser type/version,
operating system used,
Referrer URL (the previously visited page),
Host name of the accessing computer (IP address),
Time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to analyze the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned (IP masking). You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on(https://tools.google.com/dlpage/gaoptout?hl=de).

Further information on data protection in connection with Google Analytics can be found in the Google Analytics help center (https://support.google.com/analytics/answer/6004245?hl=de)

When using the Google AdWords Conversion Tracking service, a cookie is placed on your device if you have reached this page via a Google advert. This is used to analyze and statistically evaluate the use of the website. The cookie is valid for 30 days. The person is not identified, but it is used to monitor whether the user has reached the site via a Google advert.

You can prevent this use by rejecting the setting of corresponding cookies in your browser settings.

10 Google Ads

This website uses Google Ads to display online advertising. Cookies from both Google and third-party providers (e.g. double-click cookies) are used — possibly in combination. This enables the placement of optimized ads on Google and third-party websites based on the user’s previous visits to this website.

This website uses the following Google Ads functions:

Remarketing
Interest categories
Similar target groups
Conversion Tracking
Other types of interest-based advertising

The user information generated by the cookies (including the IP address) is transmitted to a Google server in the USA and stored there. Google truncates the last 3 digits of the IP address, which prevents the IP address from being assigned. Google has joined the “Safe Harbor” agreement and complies with its data protection provisions. Google only transfers data to third parties on the basis of legal regulations or as part of order data processing. Under no circumstances will Google combine user data with other data collected by Google.
This website also uses so-called “retargeting tags”. This is a JavaScript element placed in the source code of this website. When you visit a page on this website that contains a retargeting tag, a cookie is placed on the user’s computer by an online advertising provider (e.g. Google) and assigned to a retargeting target group list. The placement of the cookie enables the display of interest-based advertising on other websites visited by the user.

Users of this website can object to the collection and storage of data at any time, with effect for the future. Deactivating cookies is possible via the following links

Setting for Google advertising and double-click cookies

Setting for third-party cookies and double-click cookies

11. Conversion tracking from Google

This website uses conversion tracking as part of “Google Ads”. This is an analysis service of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

When clicking on an advert placed by Google, a cookie for conversion tracking is stored on the user’s computer. These cookies are valid for 30 days and do not contain any personal data. Personal identification is therefore not possible.

If you visit this website before the cookie expires, both Google, and we can recognize that the user has clicked on a specific ad and has been redirected to this page. Cookies cannot be tracked via the website of Google Ads customers, as each Google Ads customer receives a separate cookie.

The information can be used to create conversion statistics for Google Ads customers. This includes, for example, information about the total number of users who have clicked on the advert. It is not possible to personally identify users. Participation in tracking can be prevented by preventing the installation of cookies by setting your browser accordingly. You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set that prevents the

prevent the collection of your data on future visits to this website: Deactivate Google Analytics, further information and Google’s privacy policy can be found at: https://policies.google.com/technologies/ads?hl=de and https://policies.google.com/privacy?gl=de

12. Facebook pixel

The remarketing function “Custom Audiences” of Facebook Inc. (“Facebook”) is used on this website. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized. A direct connection to the Facebook servers is established via this tag when you visit the website. We ourselves cannot draw any conclusions about individual persons. However, we would like to point out that Facebook collects and processes data and that this may make it possible to draw conclusions about individuals. You can find more information on the collection and use of data by Facebook as well as your rights in this regard and options for protecting your privacy in Facebook’s data protection information at https://www.facebook.com/about/privacy/. Alternatively, you can deactivate the remarketing function “Custom Audiences” at https://www.facebook.com/settings/?tab=ads#_=_. To do this, you must be logged in to Facebook.

13. Provision of chargeable services

Nature and purpose of the processing:

For the provision of chargeable services, we request additional data, such as payment details, in order to be able to fulfil your order.

Legal basis:

The processing of data required for the conclusion or execution of the contract is based on Art. 6 para. 1 lit. b GDPR.

Recipient:

The recipients of the data are tax consultants and the tax authorities. In individual cases, the data may be obtained by an IT service company commissioned with maintenance, which is bound to confidentiality by a contractual agreement.

Storage duration:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

14. Newsletter

Nature and purpose of the processing:

Your data will only be used to send you the newsletter you have subscribed to by e-mail. Your name will be used to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).

We require a valid e-mail address for effective registration. We use the “double opt-in” procedure to check that a registration is actually made by the owner of an e-mail address. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the requested reply. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.

Legal basis:

On the basis of your express consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time, with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time, or inform us of your cancellation using the contact option provided at the end of this data protection notice.

Recipient:

Storage duration:

The data will only be processed in this context for as long as the corresponding consent is available. After that, it will be deleted.

Provision is mandatory or required: The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without your consent.

15. Contact form and e-mail contact

Nature and purpose of the processing:

The data you enter will be stored for the purpose of personalized communication with you. This requires you to provide a valid e-mail address and your name. This is used to allocate the inquiry and subsequently answer it. The provision of further data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipient:

Storage duration:

Data will be deleted after the inquiry has been fully processed, at the latest 6 months after the inquiry has been processed.

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for the inquiry.

Possibility of objection and removal:

You have the option to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

16. Use of script libraries (Google Web fonts)

Nature and purpose of the processing:

In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google Web fonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. f GDPR).

Recipient:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible — although it is currently unclear whether and for what purposes – that the operator collects Google data in this case.

Storage duration:

We do not collect any personal data through the integration of Google Web Fonts.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of personal data is neither legally nor contractually required. However, it is not possible to display the content of standard fonts correctly without it.

Objection to processing: The programming language JavaScript is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

17. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

you have given your express consent in accordance with Art. 6 para. 1 sentence 1 a) GDPR,
the disclosure pursuant to Art. 6 para. 1 sentence 1 f) GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 c) GDPR, and
this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 b) GDPR.

18. Data security

To ensure data security, the content of our website is transmitted in encrypted form using the SSL procedure in accordance with the state of the art. To secure the data, we and the contracted service providers with whom corresponding contractual agreements have been made use suitable state-of-the-art measures, in particular to restrict access to the data, to protect against changes and loss, and to ensure confidentiality in accordance with the state of the art.

19. Questions about data protection

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly:

Patrick Nieveler

info@pasani-academy.de