Data privacy

The following information provides you with an overview of the processing of your personal data by us and your rights under data protection law. You can find out which data is processed in detail and how it is used in the following explanations. Legally binding is the German version.

We process personal data that we have collected from you in your capacity as a contact person (client, course and congress participant, interested party, supplier). Personal data may include: Name, address, gender, business telephone number, business email address.

We process the aforementioned personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. For the fulfillment of contractual obligations or for the implementation of pre-contractual measures (Article 16 (l) (b) GDPR)
2. Insofar as this is necessary for compliance with a legal obligation (Article 6(1)(c) GDPR)
3. Based on your consent (Article 6(1)(a) GDPR) If you have given us your consent to process personal data for specific purposes (e.g. information about our services), the lawfulness of this processing is based on your consent. You can withdraw your consent at any time. Please note that the revocation only takes effect for the future and processing up to that point is not affected.

Within our company, those departments that need your data to fulfill our contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us may also receive data for these purposes if they comply with our written instructions under data protection law.

Data will only be transferred to bodies in countries outside the EU or the EEA (so-called third countries) if this is necessary for the execution of the client's orders or if you have given us your consent.

We process and store your personal data,

• as long as you are authorized to represent the respective legal entity vis-à-vis us,
• as long as the data is required for the fulfillment of contractual or legal obligations (depending on the conclusion or termination of the contract),
• if pre-contractual measures lead to contracts or orders, otherwise the data will be deleted 12 months after collection
• as long as you do not withdraw your consent to processing.

Personal data relevant to a contract, in particular data relevant under tax law, will be deleted after expiry of the statutory retention periods, at the latest 10 years after termination of the contract.

Every data subject has the right to information under Article 15 GDPR as to which of their personal data is stored; the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR and the right to data portability under Article 20 GDPR. You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR).

You can revoke your consent to the processing of personal data at any time.

Information about your right to object in accordance with Article 21 of the General Data Protection Regulation (GDPR):

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests). If you file an objection, we will no longer process your personal data.

The objection can be made by telephone, in writing or by email to Datenschutz@bzh-freiburg.de.
 

This website utilizes the open-source software Matomo for the statistical analysis of user access. The software is hosted locally on the controller's own servers, ensuring that no analytical data is transmitted to third-party providers.

The following information is processed during the analysis:

• Pages accessed

• Time and duration of access

• Technical specifications (browser type, operating system, device type)

• Referrer URL (the website previously visited)

• The IP address of the accessing system

The IP address is anonymized immediately after collection and prior to storage by truncating the last octets. It is technically impossible to identify an individual data subject based on the stored data.

The legal basis for this data processing is Art. 6 (1) (f) GDPR. The controller’s legitimate interest lies in the statistical analysis of website usage for the purpose of optimizing the online offering.

Data subjects may object to the data processing by Matomo at any time with effect for the future. To do so, please use the opt-out mechanism provided on this website.

For events organized by BZH GmbH, the service Microsoft Forms is utilized to conduct surveys and questionnaires. These are evaluated on an anonymous basis. Personal data is processed only to the extent necessary for the provision and technical execution of the surveys (e.g., processing the IP address to display the survey in the user’s browser or using a temporary cookie (session cookie) to allow the resumption of a survey) or provided that users have given their consent.

Information on Legal Bases:

• Art. 6 (1) (f) GDPR (Legitimate Interest): Our legitimate interest lies in the improvement of our services, processes, and offerings, as well as in conducting quality management and scientific research. Your interest in data protection is safeguarded by:

  • The anonymity of the survey

  • The voluntary nature of participation

  • Transparent information regarding data processing

• Art. 6 (1) (a) GDPR (Consent): In cases where we exceptionally collect personal data (e.g., email addresses for follow-up questions), this is done on the basis of your explicit consent.

Purpose of Processing: The purpose of processing the anonymous survey data is to evaluate the results in order to achieve the respective survey objective (e.g., quality management, opinion research, process optimization, scientific studies).

Storage Period: We store the anonymized survey results only for as long as is necessary for the complete evaluation and for achieving the purpose of the survey. Subsequently, the raw data is deleted or archived in a fully aggregated format.

Services and Service Providers Used:

• Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Microsoft Privacy Policy: Detailed information regarding data protection in Microsoft Forms can be found at:

• https://privacy.microsoft.com/en-us/privacystatement