This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the related websites, features and content, as well as external online presence, e.g. our social media profiles on. (collectively referred to as "online offer"). With regard to the terminology used, e.g. "Processing" or "Responsible" we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Responsible
University of Applied Sciences Berlin
CBMI
Technology and Business Center Spreeknie, Building 9,
Ostendstraße 25, 12459 Berlin

• Inventory data (e.g., names, addresses).
• Contact details (e.g., e-mail, phone numbers).
• content data (e.g., text input, photographs).
• usage data (e.g., websites visited, interest in content, access times).
• Meta / communication data (e.g., device information, IP addresses).

Affected Person Categories
Visitors and users of the online offer (In the following, we also refer to the affected persons as "users").

Purpose of processing

• Providing the online offer, its features and content.
• Respond to contact requests and communicate with users.
• security measures.
• audience measurement / marketing.

Terms used
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter the "data subject"); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

"Processing" means any process performed with or without the aid of automated procedures or any such process associated with personal data. The term extends far and includes virtually every handling of data.

"Responsible person" means the natural or legal person, public authority, agency or other body that decides, alone or together with others, on the purposes and means of processing personal data.

Relevant Legal Terms
In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless the legal basis in the data protection declaration is mentioned, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 DSGVO, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b DSGVO, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c DSGVO, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f DSGVO. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO as legal basis.

Submissions to Third Countries
If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. DSGVO. That the processing is e.g. based on specific guarantees, such as the officially recognized level of data protection (for example, the US Privacy Shield) or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

Rights of data subjects
You have the right to ask for confirmation as to whether the data in question is being processed and for information about this data as well as for further information and a copy of the data in accordance with Art. 15 GDPR.

You have accordingly. Art. 16 DSGVO the right to demand the completion of the data concerning you or the correction of the incorrect data concerning you.

In accordance with Art. 17 GDPR, you have the right to demand that the relevant data be deleted immediately or, alternatively, to require a restriction on the processing of the data in accordance with Art. 18 GDPR.

You have the right to demand that the data relating to you provided to us be obtained in accordance with Art. 20 GDPR and to be transmitted to other persons responsible.

You have gem. Art. 77 DSGVO the right to file a complaint with the competent supervisory authority.

Withdrawal
You have the right to grant consent in accordance with. Revoke Article 7 (3) GDPR with effect for the future

Right to
You can object to the future processing of your data in accordance with Art. 21 GDPR at any time. The opposition may in particular be made against processing for direct marketing purposes.

Deletion of data
The data processed by us will be deleted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements.

Administration, Office Organization, Contact Management
We process data in the context of administrative tasks as well as organization of our operation and compliance with legal obligations, such as: archiving. We process the same data that we process in the course of rendering our contractual services. The processing principles are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. The processing affects customers, prospects, business partners and website visitors. The purpose and interest in processing lies in the administration, office organization, archiving of data, ie tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of the data in terms of contractual services and contractual communications is in line with the information provided in these processing activities.

We also store information about promoters and other business partners based on our business interests, e.g. for later contact. We generally store this majority of company-related data permanently.

Contact
When contacting us (for example, by e-mail, telephone), the information provided by the user to process the contact request and its processing is according to. Art. 6 para. 1 lit. b) DSGVO processed. User information can be stored in a Customer Relationship Management System ("CRM System") or similar request organization.

We will delete requests if they are no longer required. We check the necessity every two years; Furthermore, the legal archiving obligations apply.