In the following text we inform you about the acquisition of personal data when you visit our website. Personal data is all data which can refer to you personally, e.g. name, address, e-mail addresses, user behaviour.
2. Party responsible / DPO
Party responsible for data processing:
Frankfurt School of Finance & Management gGmbH
60322 Frankfurt am Main
Telephone: +49 (0) 69 154008-0
Fax: +49 (0) 69 154008-650
Prof. Dr. Nils Stieglitz, President
Data Protection Officer of the party responsible:
intersoft consulting services AG
Beim Strohhause 17
The hosting of the website is handled by GoDaddy Operating Company, LLC.
3) Which data is processed
General data acquisition with call-up of our website
In case of use of the website for purely informative reasons, thus when you do not register, log in or send us information in any other way, we record only that personal data which your browser sends to our server. If you wish to investigate our website, we record the following data which is technically necessary for us in order to present our website to you and to guarantee stability and security (legal situation is the entitled interest in accordance with Art. 6 Sect. 1 p. 1 lit. f GDPR)
|Data||Purpose of the processing||Storage duration|
|Operating system used||Assessment according to devices, to ensure optimised representation of the website||The data is deleted after 24 hours.|
|Information about the browser type and the version used||Assessment of the browser used, to optimise our websites|
|Internet service provider of the user||Assessment of the Internet service provider|
|IP address||Presentation of the website on the respective device|
|Date and time of the call-up||Ensuring the proper operation of the website.|
|If necessary, manufacturer and type designation of the smartphone, tablet or other terminal unit||Assessment of the device manufacturer and types of mobile terminal units for statistical objectives|
|Logfiles||Ensuring the proper operation of the website|
It is imperative for the website operation to capture data and record it in logfiles. There is, therefore, no opportunity to raise objection.
4) Inquiries related to general contact addresses or the contact form
You have the possibility to contact us via our general e-mail address. Provided that you contact us via such an address, the personal data sent in this manner is solely processed for the purpose intended.
a) General information
b) Type differentiation of the cookies
Technically necessary cookies
Technically necessary cookies are not required as mandatory to display the website. However, some functions of the website cannot be used properly without these cookies. Consequently no possibility of objection exists for the user, where a deactivation this cookies can be carried out by settings on the respective browser.
6) Integration of third-party services and content
In order to optimise our online services and to make your stay on our website as pleasant as possible, we incorporate content and services from third parties usually on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO). In order to be able to display this content to you, your IP address must be transmitted to this third party provider. Under certain circumstances, further data may be collected from the third party providers or pixel tags and/or cookies may be used.
In the following we would like to offer you further information.
We are interested in offering you a wide range of multimedia information. Therefore we include videos from YouTube (YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA). The legal basis for this is Art. 6 para. 1 lit. f DSGVO.
YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Youtube is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European data protection law.
The following data is transferred to Google as the YouTube operator:
– the IP address,
– the specific address of the page called up,
– the transmitted identification of the browser
– System date and time of the call,
– Cookies that are already available and can be used to uniquely identify your browser.
Google as operator of YouTube is exclusively responsible for this data processing. Further information can be found here.
We want to point out that Google may receive further data about cookies that are already stored on your computer. We have no influence on the extent to which these cookies are used by Google.
7) Social Media
We operate channels on various social platforms to communicate directly with you and inform you about interesting news.
In doing so, we process the data of visitors to our channels, in particular information about user interactions (e.g. likes, comments,etc.), demographic and statistical data, as well as the data transmitted to us in the context of news and comments.
We would like to point out that when using these social networks, the respective providers will also have access to your data. This data can be used for market research and advertising purposes. We have no further knowledge of data processing by the providers of the social platforms concerned. We wish to state that the references to the respective platforms included on our site are pure links. Data processing by the platforms is only carried out when you visit them.
The processing of the personal data of visitors to our online presences is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest is to ensure communication with our clients and to inform them about news.
We would like to point out that the data processed when using social platforms and networks may be processed outside the European Economic Area. The operators of the networks on which we operate a channel are certified according to the EU/US Privacy Shield. A constantly updated overview of such certifications can be found at https://www.privacyshield.gov/
For a comprehensive presentation of the respective data processing and opt-out possibilities we refer to the following pages of the providers:
- YouTube / Google(Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)
- LinkedIn(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)
8) On which legal basis is the data processed
a) Meeting contractual and pre-contractual obligations
Using our website, there exists the possibility to acquire products and/or services or initially any other information possibly to be provided with an individual offer regarding them. In case of use of these functions, you are requested to specify further information. The legal basis for this data processing is the meeting of contractual or pre-contractual obligations, in accordance with Art. 6 Sect. 1 lit. b) GDPR.
b) Legitimate interests
In addition, we process partly person-related data in our entitled interests in case of use of this website. Within the framework of the weighting of interests according to Art. 6 Sect. 1 lit. f GDPR, we have considered and weighted our interest in the appropriation and your interest in a processing of your personal data consistent with data protection. Since this data is sometimes required technically in order to enable the appropriation of our service and also to guarantee stability and security, in particular protection against misuse, we came to the conclusion – in case of the data protection, a guarantee based the state of the art of the technology- that this data can be processed, where your interest in a processing consistent with data protection is considered to an adequate extent.
9) Transfer of data
A forwarding of your personal data to third parties for any objectives other than those listed does not occur.
We pass on your personal data to third parties only if:
- you have given your explicit consent to this
- the transfer is required for the assertion, exercise or defence of legal claims and no basis exists for the assumption that you have a majority interest worthy of being protected in the non-transfer of your data,
- For the case where a legal obligation exists for the forwarding, as well as
- where this is legally admissible and required for the handling of contractual relationships with you.
In case of data communication outside of the European Union, the high European data-protection level basically does not exist. With any transfer, it can be that there currently exists no adequacy decision of the EU Commission, as specified by Art. 45 Sect. 1, 3 GDPR. This means that, to date, the EU Commission has not positively determined that the national data protection level corresponds to the data protection level of the European Union based on the GDPR, therefore we have obtained suitable guarantees as designated above.
Possible risks which cannot be completely excluded in connection with data communication are in particular:
- your personal data could possibly be processed over and above the actual purpose.
- in addition, there exists the possibility that you cannot exercise and enforce your data-protection rights sustainably, such as for example your right to information, to correction, deletion or data portability.
- there also possibly exists a high probability that an incorrect data processing can result and the protection of the personal data does not correspond quantitatively and qualitatively fully to the requirements of the GDPR.
For the continuous improvement of our website, for advertising purposes and in order to enable certain functions of this website to be offered to you, we are instructed with the employment of processors.
All processors are obliged here to process the data only for the service provision actually defined by us. All processors were selected by us carefully and sufficient technical and organisational measures were put in place in order to guarantee data protection.
10) Teaching data subject rights
Every person affected has the right of access according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Article 17 GDPR, the right to restriction of processing according to GDPR Art. 18, the right to object from Art. 21 GDPR, as well as the right to data portability from Art. 20 GDPR. In case of the right to of access and the right to erasure, restrictions apply pursuant to § 34 and 35 BDSG.
Advice on the possibility to lodge a complaint
Furthermore, you have the right to complain to the responsible data-protection supervisory authority about the processing of your personal data by us.
Advice on the withdrawal with consent
You can withdraw any consent to the processing of personal data at any time with respect to us. This also applies for the revocation of consent declarations which have been made before the validity of the basic data protection regulation (before 25th May 2018) with respect to us. Please note that the withdrawal effects the future. Any processing implemented prior to the withdrawal is not affected by this.
Right in case of a data processing for the purpose of direct advertising
In accordance with Art. 21 Sect. 2 GDPR, you have the right to make an objection at any time to the processing of personal data concerning you. In case of your objection to processing for purposes of direct advertising, we will not process your personal data for these objectives any longer. Please note that the objection comes into effect for the future only. Any processing implemented prior to the objection is not affected by this.
Note on right to objection in case of weighting of interests
As far as we base the processing of your personal data on a weighting of interests, you can make an objection to the processing. In case of the exercise of such an objection, we request that you explain the reasons why we should not process your personal data as described. In case of your reasonable objection, we check the state of affairs and will either cease or adapt the data processing, or explain to you our compelling reasons worth being protected.
Links to other websites
Our websites can include links to websites of other providers. We refer to the fact that this data protection declaration applies for the websites of www.restorationfacility.org solely. We do not have any influence on this and do not check that other providers comply with the applicable data protection regulations.
11) Changes to the data protection declaration
We reserve the right to change or amend this data protection declaration at any time, taking account of applicable data protection regulations.