Data Protection Policy

Short Version

In general, our website can be used anonymously. The provision of personal data is purely voluntary and you will always be informed if and for what purpose we want to save your data. Personal data is the data that allows us to identify you and/or to contact you. This includes your name, your postal address or email address. 

In Google Analytics, visitor (user) interactions on websites are primarily recorded with the help of cookies. Users can disable analytics cookies or deactivate them individually. More information here. 

Google Analytics also supports an optional browser add-on. If users install and activate it, their data is prevented from being collected by Google Analytics when they visit websites. However, the add-on only disables the collection of data by Google Analytics. Here you can decide whether you allow us to statistically evaluate your visit to our website so that we can improve our offer for you: 

Browser-Ad-On for Deactivation of Google Anaytics 

Information For Cookies

Essential Cookies

Cookies in this category are necessary for the basic functions of the website. They are used for safe and proper use and therefore cannot be deactivated. 

Marketing

Cookies in this category are used by third-party providers and publishers to display personalized ads and content that suit your needs. They do this by tracking visitors across websites. 

Cookie Overview: 

  • Google Analytics 
  • Google Ads 
  • Hubspot 
  • LinkedIn Cookie/ Pixel 
  • Facebook Cookie/Pixel 

Statistics 

 

Cookies in this category are used for anonymous web analysis and thus to optimize our website for users. We use the Matomo web analysis service for this purpose. At no point in time is it possible for us to draw conclusions about individual persons. 

Cookie Overview: 

  • Google Analytics 
  • Hubspot 
  • Google Conversion-Tracking / Google Tag Manager 

 

In Detail 

1. Who we are and how you can reach us

2. Which data we do (not) process, for what purpose, how long, and on what legal basis

2.1. Anonymous use of our website 

2.2. Logging and evaluation in case of attacks 

2.3. Usage statistics with Google Analytics  

2.4. Google AdWords and Google Conversion-Tracking 

2.5. Data processing in connection with general contact 

2.6. Data processing in connection with subscribing to the newsletter 

2.7. Data processing in connection with events, education programs, and requests for information and offers 

2.8. Data processing when using third party content 

2.9. Social Media and video streaming platforms  

2.10 Social Media Advertisment  

3. Voluntary provision of your data 

  1. Recipients of your data
  2. Automated decision-making, profiling
  3. Your rights
  4. Your right to object to data processing
  5. Payment Processing

In Detail

1.Who we are and how you can reach us

2. Which data we do (not) process, for what purpose, how long, and on what legal basis

2.1. Anonymous use of our website

2.2. Logging and evaluation in case of attacks

2.3.Usage statistics with Google Analytics

2.4. Google AdWords and Google Conversion-Tracking

2.5. Data processing in connection with general contact

2.6. Data processing in connection with subscribing to the newsletter

2.7. Data processing in connection with events, education programs, and requests for information and offers

2.8. Data processing when using third party content

2.9. Social Media and video streaming platforms

2.10 Social Media Advertisment

  1.  Voluntary provision of your data
  2. Recipients of your data
  3. Automated decision-making, profiling
  4. Your rights
  5. Your right to object to data processing
  6. Payment Processing

1. Who we are and how you can reach us

The Hasso Plattner Institute for Digital Engineering gGmbH, Prof.-Dr.-Helmert-Str. 2-3, 14482 Potsdam, phone: +49 (0)331 5509-503, e-mail: info@hpi-academy.de, is responsible for the processing of personal data within the framework of this website. You can reach our data protection officer at the address: Hasso Plattner Institute for Digital Engineering gGmbH, Data Protection Officer, Prof.-Dr.-Helmert-Str. 2-3, datenschutz(at)hpi.de

The following privacy policy applies to this website, as well as our entire online presence (e.g. social media profiles). 

 

2. Which data we do (not) process, for what purpose, how long, and on what legal basis

 

2.1. Anonymous use of our website 

 

You can use our website anonymously. When you visit our website, your web browser will tell our web server your IP address to make communication possible.  It may be possible to identify you via your IP address. 

Each time you access the Internet offer of the Hasso Plattner Institute Academy, the following data is stored in the server log files: 

  • Name of the retrieved file 
  • Date,time and duration of retrieval 
  • Volume of data transferred 
  • Notification of whether the retrieval was successful 
  • IP address (in abbreviated form so that you are not identifiable) 
  • The web address from which the file was accessed (referrer URL) 
  • Information about the operating system and browser (user agent string) 
  • Location data (country) 

You remain completely anonymous to us when you visit our website. This anonymous data is evaluated for statistical purposes only. 

 

2.2. Logging and evaluation in case of attacks 

Error messages—which as a rule are the result of attempted attacks—are recorded and evaluated with a complete IP address for security reasons. If no longer needed (for example, as evidence), this data will be deleted after seven days. 

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interests in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR are to ensure the functionality and security of our website and to ward off attacks and other abuses. 

2.3. Usage statistics with Google Analytics  

This website uses the web analytics service Google Analytics; a product of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). 
We have agreed standard data protection clauses with Google.  

The following data is collected by us: 
– Usage data (e.g. duration, page views, time of access).
– Meta and communication data (e.g. anonymized IP address) 

The aim of the processing is to improve our website and our offers and to make them more user-friendly. By evaluating visitor behavior, range measurement and tracking, we can derive adjustments for our website and online offers. This data is not passed on to third parties. You can prevent the storage of cookies by selecting the appropriate option in the cookie banner. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. 

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. 

2.4. Google Ads and Google Conversion-Tracking 

We use Google Ads for the placement of advertisements in the Google advertising network. Within the framework of Google Ads, we use the so-called conversion tracking.  

When you click on an ad placed by Google, a cookie is set for conversion tracking. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this site and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to the defined page. 

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in tracking, you can opt-out of this use by disabling the Google Conversion Tracking cookie on your web browser under User Preferences. You will then not be included in the conversion tracking statistics. 

The storage of “conversion cookies” is covered by the General Data Protection Regulation (DSGVO), Article 6, Paragraph 1, Subparagraph 1, Letter A. 

In addition, you can set your browser to inform you when cookies are set and to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, and to activate the automatic deletion of cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited. 

More information about Google AdWords and Google conversion tracking can be found in the Google privacy policy: www.google.de/policies/privacy/ 

 

 

2.5. Data processing in connection with general contact 

If you call us or send us a message, for example via the contact form or by email, we need your email address, your postal address or your telephone number to provide you an answer. Instead of your name, you may use a pseudonym. We will only use this information, as well as date and time of your contact, to process your request. Your data will not be passed on to third parties by us, but only used internally by the department that is responsible for your concern. We will delete your data as soon as it is no longer needed for this purpose. As a rule, this is three months after your last contact with us. If you should have any questions, please notify us again within this three-month period. The legal basis for the processing of data  is Art. 6 para. 1 subpara. 1 letters b and f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR is to fulfill your request. 

Exceptions: We are required to store business and commercial letters and other tax-relevant documents in order to fulfill the commercial and tax law archiving obligations. We will delete these documents by the 31st of March of the seventh  calendar year following their creation and, in the case of accounting receipts, the eleventh  calendar year following their creation. Our accounting department has access to these data. The legal basis for the tax law retention is Art. 6 para. 1 subpara. 1 letter c GDPR in connection with §§ 147 AO, 257 HGB. 

If your request is for a specific purpose (e.g., registration, request for a quotation, subscribing to the newsletter), only the explanations in the relevant section for that particular purpose apply to the processing of data. 

We offer a contact form from Hubspot Forms, a product of HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA (Hubspot). 
The submission of the contact form is done through the so-called double opt-in process. You will first receive an email with a confirmation button that you must click to confirm that you wish to submit a request(“Double-Opt-In”). This is how we prevent someone from making the request on your behalf and to assure that it is a valid and active email address. 

If you do not confirm the double opt-in, your request will be deleted from the system within 24 hours. 
For more information on data processing, please see Hubspot’s privacy policy: https://legal.hubspot.com/de/privacy-policy 

 

2.6. Data processing in connection with subscribing to the newsletter 

If you register for our newsletter, we need your email address in order to send you the newsletter. All other data is optional. Your data will not be passed on to third parties, and we will use it solely for our newsletter and for customer service to contact you individually (as far as this is legally permissible), if applicable, after the research of further data, to make you offers and to clarify your need for our services. You will first receive an email with a link that you must click to confirm that you wish to receive the newsletter (“double opt-in”). In this way we prevent unauthorized persons from subscribing to the newsletter in your name. Additionally, we store your registration for the  newsletter and your confirmation to prove that you have registered. Evaluations on the use of our newsletter are always carried out anonymously. For the purpose of sending you the newsletter, we will store your data until your consent is revoked or until the  newsletter is finally discontinued. In the interest of customer service, we will delete your data in the event of your objection, or by 31 March of the fifth  calendar year following your last login, request for quotation, or expression of interest; this is for the purpose of proof of consent by 31 March of the fourth calendar year following the last newsletter dispatch. If you do not confirm your newsletter registration, we will delete your data after 24 hours. Therefore, please confirm your registration (“double-op-in”) within 24 hours otherwise you will be required to register again. Our communications department and our customer service have access to your data, and our legal department, if required. 

Newsletter2Go and Hubspot is used as newsletter software. Your data will be transmitted to Newsletter2Go GmbH or Hubspot, Inc. Newsletter2Go and Hubspot is forbidden to sell your data and to use it purposes other than the dispatch of newsletters.  

Further information can be found here:  

https://legal.hubspot.com/de/privacy-policy 

https://newsletter2go.de/informationen-newsletter-empfaenger 

The legal basis of processing for the purpose of sending the newsletter is Art. 6 para. 1 subpara. 1 letter a GDPR. The legal basis of processing for the purpose of proof of consent is Art. 6 para. 1 subpara. 1 letter c in conjunction with Art. 5 para. 2 GDPR, Art. 7 para. 1 GDPR and Art. 24 para. 1 GDPR and Art. 6 para. 1 subpara. 1 letter f GDPR. For processing for the purpose of customer service is the legal basis Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interest in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR is  the promotion of the sale of our products and services, appropriate advertising as well as proof of your consent, i.e., the defense against legal claims. 

Newsletter tracking
Our newsletters contain tracking pixels. This is a miniature graphic that is embedded in emails. This allows us to track, for example, whether and when an email was opened by you and which links in the email were called up by you. This enables us to statistically evaluate the success or failure of online marketing campaigns. The personal data collected by the tracking pixels are stored and evaluated by us in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to your interests. Such evaluation is based on our legitimate interests (Art. 6 para. 1 UAbs). 

 

2.7. Data processing in connection with events, education programs, and requests for information and offers 

When you register for an event, sign up or  apply for a training program, or request information or an offer, we need specific information from you, depending on the nature of the service. The registration, application and / or offer form indicates which information is required and which is voluntary. If you contact us informally and the necessary information is missing, we will contact you or request the information from you. Your data will not be shared with third parties. Any exceptions (for example, at co-operative events) are clearly stated at the time of registration. 

We use your data solely for the processing of your request, and the handling of the application, registration, event, training and complaints process, for customer service, and in particular (as far as this is legally permissible), if applicable, after the research of further data—to contact you about  present offers and clarify your need for our services, to send you advertisements on similar trainings, events and services (including via e-mail) and to prove that we may send you this advertising. 

In connection with events and training programs you also have the possibility to provide us with information regarding any special needs (e.g., food intolerances and allergies) if applicable. In this case, we ask for your explicit consent regarding data processing. The data will be processed solely in connection with the event or training program. In certain cases, it may be necessary to pass on this information to third parties who carry out the respective service (e.g., to the caterer, the hotel,  etc.). Your consent and provision of information are voluntary. However, in the case that you do not give consent or supply information about your needs, we will be unable to take them into account. The legal basis of processing is Art. 9 para. 2 letter a GDPR. The data will be deleted by us no later than three months after the end of the event. 

Contingent upon your consent, we will use the participant information at events and training programs also for networking between participants and to document the events for attendees, for example, by providing or circulating participant lists. The legal basis of processing is Art. 6 para.1 subpara. 1 letter a of the GDPR. The lists will be  shared by us no later than three months after the end of the event. 

When explicitly stated, we use the participant information at events and training programs to also document the event in photo and film recordings. This material can also be used for advertising and for public relations purposes by the Hasso Plattner Academy or the Hasso Plattner Institute for Digital Engineering gGmbH or for networking between participants and coaches, as well as to document the event or participant training. In doing so, the Hasso Plattner Institute Academy ensures that either those parts where the participant has given consent to be photographed or filmed explicitly or at least implicitly are sufficiently large and that those parts where there is no express or at least implied consent to being photographed or filmed are clearly recognizable, or that the participant can indicate his or her objection by a visually recognizable sign, such as a  name tag or a bracelet in a certain color, which the Hasso Plattner Institute Academy will observe independent of the applicable legal requirements under Art. 21 GDPR. The legal basis of processing is Art. 6 para 1 subpara. 1 letter f of the GDPR. Legitimate interests are the documentation and promotion of the work of the Hasso Plattner Institute Academy and the Hasso Plattner Institute for Digital Engineering gGmbH, as well as the public relations work and advertising for the Hasso Plattner Institute Academy and the Hasso Plattner Institute for Digital Engineering gGmbH and its events and training programs, as well as the networking between the participants and the documentation of the events or training for the participants. We assume that there is no infringement upon your interests, rights and freedoms because of the possibility to opt out of the recordings without significant limitations. The processing is generally carried out for an unlimited period. However, the event or training program will be reexamined at the latest by 31 December of the following year to determine whether the photo or film recordings are still needed, and, if so, whether a limitation can be placed on the processing. If the review reveals that due to the significance of the event or the training program or the recording, it is not possible to limit the processing of the data at the present time, a further reexamination will be made by 31 December of the tenth year following the respective last review. These images can potentially be made accessible to everyone. 

Due to tax and commercial reasons, we are compelled to save your registration and, if applicable, any associated communication as well as invoice and payment data. We will delete your data as soon as it is no longer needed for this purpose. We are required to retain business and commercial letters and other tax-relevant documents to fulfill our commercial and tax law archiving obligations. We will delete this data by 31 March of the seventh  calendar year following their creation, and in the case of accounting documents by the eleventh  calendar year after their creation. In the interest of handling applications, registrations, events, trainings and claims, your data will be deleted three months after the end of the event or training. For customer service (including the processing of your enquiry) your data will be deleted in the event of your objection or by 31 March of the fifth  calendar year after your last application, registration, event or training participation, request for information or an offer or expression of interest. For the purpose of promotional mailings your data will be deleted in the event of your objection or if we  definitively cease promotional mailings. For the purpose of proof of your registration and in a similar sense for the advertised events, trainings and services or for proof of consent your data will be deleted by 31 March of the fourth  calendar year that follows the last promotional mailing. Our communications department, our customer service and our accounting department have access to your data and, if necessary, the legal department 

The legal basis of data processing is Art. 6 para. 1 subpara. 1 letter a (as far as consent is granted), letter b (for the processing and handling of your request, application or registration including the implementation of the contract) and f GDPR. The legal basis of processing for providing proof of your request, application or registration, or consent are Art. 6 para. 1 subpara. 1 letter c in conjunction with Art. 5 para. 2 GDPR and Art. 24 para. 1 GDPR, as well as Art. 6 para. 1 subpara. 1 letter f GDPR. The legal basis for the tax retention is Art. 6 para. 1 subpara. 1 letter c GDPR in conjunction with §§ 147 AO, 257 HGB. Legitimate interest in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR are the fulfillment of your request, the promotion of the sale of our services, appropriate advertising, the assertion or exercise of legal rights or the defense against legal claims.   

 

2.8. Data processing when using third party content and web fonts 

Our website uses offers from third parties. We host our videos by Youtube. Normally your web browser would automatically exchange information with these providers, such as your IP address. To prevent this, we use so-called two-click solutions. To use the offers of third-party providers, it is necessary to first enable the data transfer to these third-party providers. Before this is done, none of your data will be sent to the third-party provider, and you remain unknown to it. If you activate this button then information will be transmitted directly from your web browser to the respective provider. We then no longer have any influence on the processing of your data by third-party providers—just as when you follow a link to another website. The legal basis is Art. 6 para. 1 subpara. 1 letter f GDPR; the legitimate interest is your wish to activate and use the third-party content.   

Data that is thereby transferred include, for example, from which page you clicked on the button and your IP address. If you are logged in at the provider or if the provider can otherwise identify you (for example, via the cookies stored at your machine) the provider can link the information that you visited our website with other information about you, such as your user account at the provider. If you do not want the provider to associate this information with your other information, you should log out beforehand and, ideally, delete the cookies in your web browser. 

When you submit data to third-party providers, this data is subject to the privacy policies of those providers. We can assume no liability for this action. Please note that depending on the origin country of the third-party provider, the data privacy regulations may be less stringent than ours. Information about the data regulation of third-party providers is available here: 

https://www.google.de/intl/de/policies/privacy 

In addition, we use webfonts from: Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA (“Monotype”). If your browser is configured accordingly, your browser will connect directly to Monotype so that it will technically know your IP address and other information about your browser―which it sends automatically. In keeping with Monotype’s data privacy policy, this information is stored for 30 days in order to count the number of page views (upon which our remuneration is based) and to prevent the unauthorized use of webfonts. You can usually disable the loading of webfonts in your browser, in which case your browser will not connect to Monotype. The legal basis of processing is Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interest is our, and your, interest in the visually appealing presentation of our website. The legal basis for the transfer to the USA is Art. 49 para. 1 subpara. 1 letter c GDPR (performance of a contract entered into in the interest of the data subject). For more information about Monotype’s processing of personal data see:   

www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/datenschutzrichtlinie-zum-tracking-von-webschriften 

Voluntary provision of your data 

You are not required to provide personal information to us. However, by not providing us with certain information (for example, how to contact you if you would like an answer from us), it is possible that we will be unable to complete your request. In the context of special procedures (for example, when you register for an event or our newsletter), you may again be required to provide us with certain information. Without this data we may not, for example, be able to process your registration or send you our newsletter. You will be expressly informed if this should be the case. 

2.9. Social Media and video streaming platforms 

On our social media channels, we communicate about our services, offers, post events and offer content in the form of images, PDFs and text. 
Since we do not have access to the databases of the respective providers, you must assert your rights directly with the respective provider. We would like to point out at this point that your data may be processed outside the European Union or the European Economic Area. This may result in risks such as more difficult enforcement of user rights. 

Your data from the social media profile you have created is often processed by the providers for advertising purposes or to analyze user behavior, without us being able to influence this. Based on your profile behavior and profile information, you will be assigned to user profiles that are used to place advertisements. 

We are represented on the following social media channels. 

  • LinkedIn from provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland // Link to privacy policy: https://www.linkedin.com/legal/privacy-policy 
  • Facebook from the provider Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hack // Link to privacy policy: https://www.facebook.com/about/privacy 
  • Instagram from provider Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA (Facebook) // Link to privacy policy: http://instagram.com/legal/privacy/ 
  • Twitter from provider: Twitter International Company, One Cumberland Place
    Fenian Street, Dublin 2, D02 AX07, Ireland // Link to privacy policy: https://twitter.com/de/privacy 

We offer videos on the following platforms: 

  • Youtube from provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). // Link to privacy policy: https://policies.google.com/privacy 
  • Vimeo from provider Vimeo Inc, 555 West 18th Street New York, 10011, USA (Vimeo). // Link to privacy policy: https://vimeo.com/privacy 

 

2.10. Social Media  Advertisement  

2.10.1 Facebook Pixel and Facebook Custom Audience  

Provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA (Facebook).
To evaluate the effectiveness of our advertising measures, we use the Facebook pixel. The pixel is always triggered by a defined action (so-called event) and subsequently records this (e.g., click on a button).
We use the Facebook pixel in the standard version. Only the usage behavior of the respective web addressee is evaluated and processed.
Within the scope of Facebook Custom Audiences, we can create target groups of specific users in order to carry out target group-oriented marketing measures based on this. This information is based on the data that Facebook collects from you and your profile as part of the user profiles. 
For more information on data processing, please refer to Facebook’s privacy policy.
You have the option to revoke your consent to Facebook’s data processing at any time here.  

 2.10.2 LinkedIn Ads and LinkedIn Custom Audience  

Provider: LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043; LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, (LinkedIn).
To evaluate the effectiveness of our advertising measures, we use the LinkedIn pixel. The pixel is always triggered by a defined action (so-called event) and subsequently records this (e.g. click on a button).
We use the LinkedIn pixel in the standard version. This only evaluates and processes the usage behavior of the respective web addressee.
Within the scope of LinkedIn Custom Audiences, we can create target groups of specific users in order to carry out target group-oriented marketing measures.
Further information on data processing can be found in LinkedIn’s privacy policy.
Further information on cookies as well as an opt-out option from LinkedIn can be found here.
Unsubscribing  from and managing email messages, SMS messages as well as targeted ads can be set here. 

 

 2.11 Matomo

We use the software Matomo for the analysis and statistical evaluation of website usage. These interests are justified in the context of Art. 6 para. 1 lit f. GDPR. The generated information about website usage is transferred to our servers and summarized in pseudonymous usage profiles. The information is used to evaluate website usage and enable a customized design of our website. No information is disclosed to third parties. Under no circumstances is the IP address associated with other user-related data. The IP addresses are anonymized, making identification impossible (IP masking).