This Privacy Policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as „data“) within our online offering and its associated websites, functions, and content, as well as external online presences, such as our social media profiles. (hereinafter collectively referred to as „online offering“). Regarding the terminology used, such as „personal data“ or its „processing,“ we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Responsible person:
AW Campus LLC
Main Street 30
06729 Elsteraue
Phone: +49 (0) 211 54 55 79 0
E-Mail: info@aw-campus.de
Types of processed data: Inventory data, contact data, content data, usage data, meta/communication data
Processing of special categories of data (Art. 9(1) GDPR): Generally, no special categories of data are processed, unless they are provided by the users of the processing, e.g., entered in online forms.
Categories of data subjects: Customers, prospects, visitors, and users of the online offering
Hereinafter, the affected individuals will also be collectively referred to as „Users.“.
Purpose of processing: Provision of the online offering, its content and functions, responding to contact requests and communication with users, marketing, advertising and market research
Status: 06/07/2024
Legal Basis Pursuant to Art. 13 GDPR, we inform you of the legal basis for our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR; the legal basis for processing for the performance of our services and the execution of contractual measures, as well as for answering inquiries, is Art. 6(1)(b) GDPR; the legal basis for processing for the fulfillment of our legal obligations is Art. 6(1)(c) GDPR; and the legal basis for processing for the safeguarding of our legitimate interests is Art. 6(1)(f) GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.
Changes and Updates to the Privacy Policy We kindly ask you to regularly inform yourself about the content of our Privacy Policy. We will adapt the Privacy Policy as soon as changes in our data processing activities make this necessary. We will inform you as soon as the changes require an action on your part (e.g., consent) or any other individual notification.
Security Measures In accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. These measures include, in particular, ensuring the confidentiality, integrity, and availability of data through control of physical access to the data, as well as access to, input of, disclosure of, ensuring the availability of, and separation of the data. Furthermore, we have established procedures that ensure the exercise of data subject rights, deletion of data, and response to data compromise. We also consider the protection of personal data from the outset in the design and/or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default (Article 25 GDPR).
Security measures include, in particular, the encrypted transmission of data between your browser and our server.
Cooperation with data processors and third parties If we disclose or transfer data to other persons and companies (processors or third parties) as part of our processing, or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g., if a transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6 (1) lit. b GDPR), you have consented, a legal obligation provides for this, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called „order processing agreement,“ this is done on the basis of Article 28 GDPR.
Transfers to Third Countries If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this will only happen if it is necessary for the fulfillment of our (pre)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we only process or have data processed in a third country if the special conditions of Art. 44 et seq. GDPR are met. This means, for example, that processing is carried out on the basis of special guarantees, such as the officially recognized determination of a level of data protection equivalent to that of the EU (e.g., for the USA through the „Privacy Shield“) or compliance with officially recognized special contractual obligations (so-called „standard contractual clauses“).
Rights of the data subjects You have the right to request confirmation of whether personal data is being processed and to access that data, along with further information and a copy of the data, in accordance with Art. 15 GDPR.
You have the right, according to Art. 16 GDPR, to request the completion of your personal data or the correction of inaccurate personal data concerning you.
You have the right, pursuant to Article 17 GDPR, to demand that your personal data be erased without delay, or alternatively, pursuant to Article 18 GDPR, to demand a restriction on the processing of your data.
You have the right to request and receive your personal data that you have provided to us, in accordance with Article 20 of the GDPR, and to demand its transmission to other controllers.
Furthermore, according to Article 77 of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.
Right of Withdrawal You have the right to withdraw any consent given pursuant to Art. 7 para. 3 GDPR with effect for the future.
Right of objection You may object to the future processing of your personal data at any time in accordance with Art. 21 GDPR. The objection may, in particular, be made against processing for the purposes of direct advertising.
Data Deletion The data we process will be deleted or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless otherwise specified in this privacy statement, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and no statutory retention periods prevent deletion. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
According to legal regulations, storage is required for 6 years according to § 257 (1) HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, booking receipts, etc.) and for 10 years according to § 147 (1) AO (books, records, management reports, booking receipts, commercial and business letters, documents relevant for taxation, etc.).
When contacting us (via contact form or email), the user's details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) GDPR.
We delete requests as soon as they are no longer required. We review the necessity every two years; requests from customers with a customer account are stored permanently, and deletion is deferred to the details of the customer account. In the case of statutory archiving obligations, deletion occurs after their expiry (end of commercial (6 years) and tax (10 years) retention periods).
Provision of contractual services We process master data (e.g., names and addresses and contact details of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 (1) (b) GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.
Deletion occurs after statutory warranty and comparable obligations have expired. The necessity of data retention is reviewed every three years. In the case of statutory archiving obligations, deletion occurs after their expiry (end of commercial law (6 years) and tax law (10 years) retention periods); information in the customer account remains until the account is deleted.
Collection of access data and log files On the basis of our legitimate interests pursuant to Art. 6(1)(f) of the GDPR, we collect data about every access to the server on which this service is located (so-called server log files). Access data includes the name of the retrieved website, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
Log file information is stored for a maximum of seven days for security reasons (e.g., to investigate abuse or fraud) and is then deleted. Data whose further retention is required for evidentiary purposes are exempt from deletion until the respective incident is finally clarified.
Cookies & Reach Measurement Cookies are pieces of information that are transferred from our web server or third-party web servers to users' web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.
We use „session cookies,“ which are stored only for the duration of your current visit to our online presence (e.g., to enable the storage of your login status or the shopping cart function, and thus the use of our online services). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. The cookie also contains information about its origin and expiration date. These cookies cannot store any other data. Session cookies are deleted when you end your use of our online presence, for example, by logging out or closing your browser.
Users are informed about the use of cookies for the purpose of pseudonymous audience measurement in this privacy policy.
If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. The exclusion of cookies may lead to functional limitations of this online service.
You can opt-out of the use of cookies for reach measurement and advertising purposes via the Network Advertising Initiative opt-out page (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Google Analytics We use Google Analytics, a web analytics service provided by Google LLC („Google“), based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offer within the meaning of Art. 6(1)(f) GDPR). Google uses cookies. The information generated by the cookie about the users’ use of the online offer is usually transferred to a Google server in the USA and stored there.
Google is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate users' use of our online offerings, to compile reports on activities within these online offerings, and to provide us with further services related to the use of these online offerings and the internet. Pseudonymous user profiles can be created from the processed data.
We use Google Analytics with IP anonymization enabled. This means that user IP addresses will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
The IP address submitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software settings; furthermore, users can prevent the collection of data generated by the cookie and related to their use of the online service, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on Google's data usage, settings, and opt-out options, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners („Google's use of data when you use our partners“ sites or apps„), https://policies.google.com/technologies/ads (“Use of data for advertising purposes„), https://adssettings.google.com/authenticated (“Manage the information Google uses to show you ads").
Integration of third-party services and content. Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online services within the meaning of Art. 6(1)(f) GDPR), we use third-party content or service offerings within our online services to integrate their content and services, such as videos or fonts (hereinafter collectively referred to as „content“). This always requires that the third parties providing this content perceive the IP address of the users, as they would not be able to send the content to their browser without the IP address. The IP address is therefore necessary for the presentation of this content. We endeavor to use only such content whose respective providers use the IP address solely for the delivery of the content. Third-party providers may further use so-called pixel tags (invisible graphics, also known as „web beacons“) for statistical or marketing purposes. The „pixel tags“ allow information such as visitor traffic on the pages of this website to be analyzed. The pseudonymous information can also be stored in cookies on the user's device and contain technical information about the browser and operating system, referring websites, time of visit, and further information on the use of our online services, as well as be linked with such information from other sources.
The following overview presents third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in some cases, also mention opt-out options:
External fonts from Google, LLC., https://www.google.com/fonts („Google Fonts“). Google Fonts are integrated by making a server call to Google (usually in the USA). Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
Land maps from the service „Google Maps“ provided by the third-party Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
External JavaScript framework code „jQuery“, provided by the third-party provider jQuery Foundation, https://jquery.org.
Cookies: For the best possible user experience
Cookies & Reach Measurement Like most online services, our website uses cookies from us and third parties for a number of purposes. The third-party cookies used on our websites are primarily used to understand how the website performs, how you interact with our website, keep our services secure, and generally provide you with a better and more optimized user experience and help speed up your future interactions with our website.
What are cookies? Cookies are pieces of information that are transmitted from our web server or third-party web servers to users' web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.
Cookie Settings You can manage your cookie preferences by clicking the „Settings“ button within the cookie notice and enabling or disabling cookie categories in the popup according to your preferences. Should you decide to change your preferences later during your browsing session, you can click the following button:
Revoke cookie consent
This will withdraw your consent and the cookie notice will be displayed again, allowing you to change your preferences.
Browser Settings In addition, various browsers offer different methods for blocking and deleting cookies used by websites. You can change your browser settings to block/delete cookies. To learn more about how to manage and delete cookies, visit www.allaboutcookies.org. Excluding cookies may lead to functional limitations of this online service. You can object to the use of cookies for reach measurement and advertising purposes via the Network Advertising Initiative's opt-out page (http://optout.networkadvertising.org/), the US website (http://www.aboutads.info/choices), or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Cookies on this website The cookies used by this website are divided into the following categories:
Necessary
Necessary cookies are absolutely essential for the proper functioning of this website. This category only includes cookies that ensure the basic functionality and security of this website. These cookies do not store any personal data.
Optional
Optional cookies are those intended to improve the user experience on this site. This allows us to perform analyses of user behavior and provide third-party services. Disabling this category may lead to a malfunction of this website. These cookies may contain personal data.
The following table shows further details about the cookies used:
