Accessibility Settings
It is important to us that you have a smooth navigation experience on our website. To ensure this, you can set global settings for your view of the website here.
Animations
We use some animations on this website. If you find these annoying, you can switch them off here at any time.
In general, our website can be used anonymously. The provision of personal data is purely voluntary and you will always be informed if and for what purpose we want to save your data. Personal data is the data that allows us to identify you and/or to contact you. This includes your name, your postal address or email address.
Here you can decide whether to allow us to statistically evaluate your visit at our website in order for us to improve our offer:
The responsible party for the processing of personal data on this website is:
Hasso-Plattner-Institut für Digital Engineering gGmbH (hereinafter “the HPI”)
Campus Griebnitzsee
Prof.-Dr.-Helmert-Str. 2-3
14482 Potsdam
Phone: +49 (0)331 5509-0
Telefax: +49 (0)331 5509-129
You may contact our data protection officer at:
TÜV SÜD Akademie GmbH
Westendstr. 199
80686 München
Germany
You can use our website anonymously. When you visit our website, your web browser will tell our web server your IP address to make communication possible. It may be possible to identify you via your IP address.
Each time you access the Internet offer of the Hasso Plattner Institute for Digital Engineering gGmbH, the following data is stored in the server log files:
You remain completely anonymous to us when you visit our website. This anonymous data is evaluated for statistical puposes only.
Error messages—which as a rule are the result of attempted attacks—are recorded and evaluated with a complete IP address for security reasons. If no longer needed (for example, as evidence), this data will be deleted after seven days.
The HPI works with specialized IT security companies to ensure the availability of their services. Of course, these service providers are contractually obliged to comply with EU data protection regulations / GDPR.
The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interests in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR are to ensure the functionality and security of our website and to ward off attacks and other abuses.
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that enables us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used and the user's origin. This data is combined in a user ID and assigned to the respective end device of the website visitor.
Furthermore, we can use Google Analytics to record your mouse and scroll movements and clicks, among other things. Furthermore, Google Analytics uses various modeling approaches to supplement the collected data sets and uses machine learning technologies for data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
This service is used on the basis of your consent in accordance with Art. 6 (1) a GDPR and Section 25 (1) TDDDG. Consent can be revoked at any time. Data transmission to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here: The company is certified according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards for data processing in the United States. Each DPF-certified company is committed to complying with these data protection standards. Further information can be obtained from the provider at the following link: www.dataprivacyframework.gov/participant/5780
IP anonymization
Google Analytics IP anonymization is activated. This means that your IP address will be truncated by Google within the area of member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
For more information about how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
We use Google Ads for the placement of advertisements in the Google advertising network. Within the framework of Google Ads, we use the so-called conversion tracking.
When you click on an ad placed by Google, a cookie is set for conversion tracking. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this site and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to the defined page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in tracking, you can opt-out of this use by disabling the Google Conversion Tracking cookie on your web browser under User Preferences. You will then not be included in the conversion tracking statistics.
The storage of “conversion cookies” is covered by the General Data Protection Regulation (DSGVO), Article 6, Paragraph 1, Subparagraph 1, Letter A.
In addition, you can set your browser to inform you when cookies are set and to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, and to activate the automatic deletion of cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited.
More information about Google AdWords and Google conversion tracking can be found in the Google privacy policy: www.google.de/policies/privacy/
This website uses Clarity. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA
98052-6399 (USA), docs.microsoft.com/en-us/clarity/ (hereinafter “Clarity”).
Clarity is a tool for analyzing user behavior on this website. In particular, Clarity records mouse movements and creates a graphical representation of which part of the website users scroll to particularly frequently (heat maps). Clarity can also record sessions so that we can view page usage in the form of videos. We also receive information about general user behavior within our website.
Clarity uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or the use of device fingerprinting). Your
personal data is stored on Microsoft servers (Microsoft Azure Cloud Service) in the USA.
If consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TDDDG. Consent can be revoked at any time.
Further details on Clarity's data protection can be found here: https://docs.microsoft.com/en-us/clarity/faq
Order processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Facebook Pixel/Meta-Pixel and Facebook Custom Audience
Provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
To evaluate the effectiveness of our advertising measures, we use the Facebook pixel. The pixel is always triggered by a defined action (so-called event) and subsequently records this (e.g., click on a button).
We use the Facebook pixel in the standard version. Only the usage behavior of the respective web addressee is evaluated and processed.
Within the scope of Facebook Custom Audiences, we can create target groups of specific users in order to carry out target group-oriented marketing measures based on this. This information is based on the data that Facebook collects from you and your profile as part of the user profiles.
For more information on data processing, please refer to Facebook’s privacy policy.
You have the option to revoke your consent to Facebook’s data processing at any time here.
LinkedIn Ads and LinkedIn Custom Audience
Provider: LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, (LinkedIn).
To evaluate the effectiveness of our advertising measures, we use the LinkedIn pixel. The pixel is always triggered by a defined action (so-called event) and subsequently records this (e.g. click on a button).
We use the LinkedIn pixel in the standard version. This only evaluates and processes the usage behavior of the respective web addressee.
Within the scope of LinkedIn Custom Audiences, we can create target groups of specific users in order to carry out target group-oriented marketing measures.
Further information on data processing can be found in LinkedIn’s privacy policy.
Further information on cookies as well as an opt-out option from LinkedIn can be found here.
Unsubscribing from and managing email messages, SMS messages as well as targeted ads can be set here.
If you call us or send us a message, for example via the contact form or by email, we need your email address, your postal address or your telephone number to provide you an answer. Instead of your name, you may use a pseudonym. We will only use this information, as well as date and time of your contact, to process your request. Your data will not be passed on to third parties by us, but only used internally by the department that is responsible for your concern. We will delete your data as soon as it is no longer needed for this purpose. If you should have any questions, please notify us again within this three month period. The legal basis for the processing of data are Art. 6 para. 1 subpara. 1 letters b and f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR is to fulfill your request.
Exceptions: We are required to store business and commercial letters and other tax-relevant documents in order to fulfill the commercial and tax law archiving obligations. We will delete these documents by the 31st of March of the seventh calender year following their creation and, in the case of accounting receipts, the eleventh calender year following their creation. Our accounting department has access to these data. The legal basis for the tax law retention is Art. 6 para. 1 subpara. 1 letter c GDPR in connection with §§ 147 AO, 257 HGB.
If your request is for a specific purpose (e.g., registration, request for a quotation, subscribing to the newsletter), only the explanations in the relevant section for that particular purpose apply to the processing of data.
If you register for our newsletter, we need your email address in order to send you the newsletter. All other data is optional. Your data will not be passed on to third parties, and we use it solely for our newsletter and for customer service to contact you individually (as far as this is legally permissible), if applicable, after the research of further data, to make you offers and to clarify your need for our services. You will first receive an email with a link that you must click to confirm that you wish to receive the newsletter (“double opt-in”). In this way we prevent unauthorized persons from subscribing to the newsletter in your name. Additionally, we store your registration for the newspletter and your confirmation to prove that you have registered. Evaluations on the use of our newsletter are always carried out anonymously. For the purpose of sending you the newsletter, we will store your data until your consent is revoked or until the newletter is finally discontinued. In the interest of customer service we will delete your data in the event of your objection. If you do not confirm your newsletter registration, we will delete your data after 24 hours. Therefore please confirm your registration (“double-op-in”) within 24 hours otherwise you will be required to register again. Our communications department and our customer service have access to your data, and our legal department if required
We also use commercially available technologies in our newsletters to measure your interactions with the newsletters (eg, email opening, clicked links, unsubscribes, approximate location by IP address). We use this data in pseudonymous form for general statistical evaluations as well as for the optimization and further development of our content and our communication with you. This is done with the help of small graphics that are embedded in the newsletter (so-called pixels). The data are collected exclusively pseudonymized and also not linked with your other personal data. Legal basis for this is our aforementioned legitimate interest acc. Art. 6 para. 1 sentence 1 lit. f DSGVO. Through our newsletter, we want to share the most relevant content for you and better understand what readers are actually interested in. If you do not want to analyze the usage behavior, you can unsubscribe from the newsletter or deactivate graphics in your e-mail program by default. The data for the interaction with our newsletters are stored pseudonym for 30 days and then completely anonymized.
The legal basis of processing for the purpose of sending the newsletter is Art. 6 para. 1 subpara. 1 letter a GDPR. The legal basis of processing for the purpose of proof of consent is Art. 6 para. 1 subpara. 1 letter c in conjunction with Art. 5 para. 2 GDPR, Art. 7 para. 1 GDPR and Art. 24 para. 1 GDPR and Art. 6 para. 1 subpara. 1 letter f GDPR. For processing for the purpose of customer service is the legal basis Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interest in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR are the promotion of the sale of our products and services, appropriate advertising as well as proof of your consent, i.e., the defense against legal claims.
When you register for an event, sign up or apply, we need specific information from you, depending on the nature of the service. The registration, application and / or offer form indicates which information is required and which is voluntary. If you contact us informally and the necessary information is missing, we will contact you or request the information from you. Your data will not be shared with third parties. Any exceptions (for example, at co-operative events) are clearly stated at the time of registration.
We use your data solely for the processing of your request, and the handling of the application, registration, event, training and complaints process, for customer service, and in particular (as far as this is legally permissible), if applicable, after the research of further data—to contact you to present offers and clarify your need for our services, to send you advertisements on similar trainings, events and services (including via e-mail) and to prove that we may send you this advertising.
In connection with events and training programs you also have the possibility to provide us with information regarding any special needs (e.g., food intolerances and allergies) if applicable. In this case, we ask for your explicit consent regarding data processing. The data will be processed solely in connection with the event or training program. In certain cases it may be necessary to pass on this information to third parties who carry out the respective service (e.g., to the caterer, the hotel, etc). Again, we will ask for your consent. Your consent and provision of information are voluntary. However, in the case that you do not give consent or supply information about your needs, we will be unable to take them into account. The legal basis of processing is Art. 9 para. 2 letter a GDPR. The data will be deleted by us no later than three months after the end of the event.
Contingent upon your consent, we will use the participant information at events and training programs also for networking between participants and to document the events for attendees, for example, by providing or circulating participant lists. The legal basis of processing is Art. 6 para.1 subpara. 1 letter a of the GDPR. The data will be deleted by us no later than three months after the end of the event.
When explicitly stated, we use the participant information at events and training programs to also document the event in photo and film recordings. This material can also be used for advertising and for public relations purposes by the Hasso Plattner Institute for Digital Engineering gGmbh or for networking between participants, as well as to document the event or participant training. In doing so, the Hasso Plattner Institute for Digital Engineering gGmbh ensures that either those parts where the participant has given consent to be photographed or filmed explicitly or at least implicitly are sufficiently large and that those parts where there is no express or at least implied consent to being photographed or filmed are clearly recognizable, or that the participant can indicate his or her objection by a visually recognizable sign, such as a name tag or a bracelet in a certain color, which the Hasso Plattner Institute for Digital Engineering gGmbh will observe independent of the applicable legal requirements under Art. 21 GDPR. The legal basis of processing is Art. 6 para 1 subpara. 1 letter f of the GDPR. Legitimate interests are the documentation and promotion of the work of the Hasso Plattner Institute for Digital Engineering gGmbh, as well as the public relations work and advertising for the Hasso Plattner Institute for Digital Engineering gGmbH and its events and training programs, as well as the networking between the participants and the documentation of the events or training for the participants. We assume that there is no infringement upon your interests, rights and freedoms because of the possibility to opt out of the recordings without significant limitations. The processing is generally carried out for an unlimited period. However, the event or training program will be reexamined at the latest by 31 December of the following year to determine whether the photo or film recordings are still needed, and, if so, whether a limitation can be placed on the processing. If the review reveals that due to the significance of the event or the training program or the recording, it is not possible to limit the processing of the data at the present time, a further reexamination will be made by 31 December of the tenth year following the respective last review. These images can potentially be made accessible to everyone.
Due to tax and commercial reasons, we are compelled to save your registration and, if applicable, any associated communication as well as invoice and payment data. We will delete your data as soon as it is no longer needed for this purpose. We are required to retain business and commercial letters and other tax-relevant documents to fulfill our commercial and tax law archiving obligations. We will delete this data by 31 March of the seventh calender year following their creation, and in the case of accounting documents by the eleventh calender year after their creation. In the interest of handling applications, registrations, events, trainings and claims, your data will be deleted three months after the end of the event or training. For customer service (including the processing of your enquiry) your data will be deleted in the event of your objection or by 31 March of the fifth calender year after your last application, registration, event or training participation, request for information or an offer or expression of interest. For the purpose of promotional mailings your data will be deleted in the event of your objection or we if definitively cease promotional mailings. For the purpose of proof of your registration and in a similar sense for the advertised events, trainings and services or for proof of consent your data will be deleted by 31 March of the fourth calender year that follows the last promotional mailing. Our communications department, our customer service and our accounting department have access to your data and, if necessary, the legal department
The legal basis of data processing is Art. 6 para. 1 subpara. 1 letter a (as far as consent is granted), letter b (for the processing and handling of your request, application or registration including the implementation of the contract) and f GDPR. The legal basis of processing for providing proof of your request, application or registration, or consent are Art. 6 para. 1 subpara. 1 letter c in conjunction with Art. 5 para. 2 GDPR and Art. 24 para. 1 GDPR, as well as Art. 6 para. 1 subpara. 1 letter f GDPR. The legal basis for the tax retention is Art. 6 para. 1 subpara. 1 letter c GDPR in conjunction with §§ 147 AO, 257 HGB. Legitimate interest in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR are the fulfillment of your request, the promotion of the sale of our services, appropriate advertising, the assertion or exercise of legal rights or the defense against legal claims.
Our website uses offers from third-party providers. These are: Youtube and Vimeo. Normally, your web browser would automatically exchange information with these providers, such as your IP address. To prevent this, we use so-called two-click solutions: To use the offers of third-party providers, you must first activate the data transfer to these third-party providers. No data will be transferred to the third-party provider before you have done this, and you will remain unknown to the third-party provider. If you activate this button, information will be transferred directly from your web browser to the respective provider, over which we no longer have any influence – just as if you were to follow another link to another website. The legal basis is Art. 6 (1) 1 lit. f GDPR; the legitimate interest is your wish to activate and use the third-party content.
The data transmitted in this process includes, for example, the page from which you clicked the button and your IP address. If you are logged in to the provider or the provider can otherwise identify you, for example via cookies stored on your computer, the provider can, for example, link the information that you have visited our website with the other information about you, such as your user account with the provider. If you do not want the provider to associate this information with your other information, you should log out beforehand and preferably also delete the cookies in your web browser.
If you transfer data to third-party providers, these are subject to the data protection provisions of these providers. We can no longer guarantee this. Please note that it may be that the country in which the third-party provider is located may not have such strict data protection as ours. You can find out about the data protection provisions of third-party providers on the respective pages of the following plugins and tools:
YouTube with advanced data protection
This website embeds videos from the website YouTube. The website operator is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of these websites that has YouTube embedded in it, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in advanced data protection mode. According to YouTube, videos played in advanced data protection mode are not used to personalize your surfing on YouTube. Ads displayed in advanced data protection mode are also not personalized. No cookies are set in advanced data protection mode. Instead, however, so-called local storage elements are stored in the user's browser, which, similar to cookies, contain personal data and can be used for recognition. You can find more information about the advanced privacy mode here: support.google.com/youtube/answer/171780
After activating a YouTube video, further data processing operations may be triggered over which we have no influence.
YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding agreement has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) DSGVO and Section 25 (1) TDDDG, insofar as the agreement includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The agreement can be revoked at any time. Further information about data protection at YouTube.
Google Fonts
This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. When you access a page, your browser loads the required fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you use has to establish a connection with Google's servers. As a result, Google learns that your IP address was used to access this website. The use of Google Fonts is based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in a uniform presentation of the font on the operator's website. If a corresponding agreement has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, insofar as the agreement includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The agreement can be revoked at any time.
If your browser does not support Google Fonts, a standard font is used by your computer.
Further information about Google Fonts can be found at and in Google's privacy policy: . The company is certified according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards for data processing in the United States. Each DPF-certified company is committed to complying with these data protection standards. For more information, please contact the provider at the following link: https://developers.google.com/fonts/faq
Further web fonts
In addition, our website uses fonts (web fonts) from Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA ("Monotype"). If your browser is configured accordingly, your browser will establish a direct connection to Monotype when you access our website, so that Monotype technically needs to know your IP address and other data about your browser that it automatically sends. According to Monotype's privacy policy, this data is stored for 30 days to count page views (on which the compensation we pay depends) and to prevent unauthorized use of the web fonts. You can usually disable web font loading in your browser; then your browser will not connect to Monotype. The legal basis for the processing is Art. 6 para. 1 subpara. 1 lit. f GDPR. Our and your interest in a visually appealing presentation of our website is the legitimate interest. The legal basis for the transmission to the USA is Art. 49 (1) subpara. 1 (processing is necessary for the performance of a contract to which the data subject is party). For more information about Monotype's processing of personal data, please visit: https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/datenschutzrichtlinie-zum-tracking-von-webschriften/
This information applies if you use Microsoft 365 applications together with us. This applies in particular to the use of a Microsoft Office application such as Teams, SharePoint, Stream, Forms, etc. (hereinafter referred to as M365). Microsoft Azure is used for the purpose of logging on to HPI applications.
M365 is a productivity, collaboration and exchange platform for individual users, teams, communities and networks that can be used across organizational units. When you use M365, personal data about you is processed.
Our contractual partner for the licensing of these applications is Microsoft Ireland Operations Limited, South CountyBusiness Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521, Ireland. This company may transfer data to subcontractors based in the USA, in particular to Microsoft Corporation, One Microsoft Way Redmond, Washington 98052, USA.
If you need information about the processing by Microsoft, you can find it under the following link: https://privacy.microsoft.com/en-us/privacystatement
You are not required to provide personal information to us. However, by not providing us with certain information (for example, how to contact you if you would like an answer from us), it is possible that we will be unable to complete your request. In the context of special procedures (for example, when you register for an event or our newsletter), you may again be required to provide us with certain information. Without this data we may not, for example, be able to process your registration or send you our newsletter. You will be expressly informed if this should be the case.
Generally, your personal data remains within our area of responsibility, except in special cases (e.g., co-operative events), in which we will then explicitly inform you to whom your data will be sent. If compelling circumstances arise, it may be necessary to pass on your data to external consultants, for example to lawyers in the case of legal disputes (legal basis Art. 6 para. 1 subpara. 1 letter f GDPR; purpose and legitimate interest: the exercising, defending or asserting of legal rights). In certain areas, such as web hosting, e-mail hosting, relationship management and event management, we use specialized service providers. These are strictly bound to our instructions with an order processing contract and are not allowed to process the data for their own purposes. Our data protection officer has extensive rights of control, accorded by Art. 37, 38 GDPR, and therefore access to personal data (legal basis Art. 6 para. 1 subpara. 1 letter c in conjunction with Art. 37, 38 GDPR). Further recipients of your data are listed in the notes on the respective data processing. In certain cases, we may need to disclose your personal information to third parties so that you can receive the service you want; this means to vicarious agents, for example banks and other payment service providers or to postal service providers. In certain areas, such as web hosting and email hosting, we use specialized service providers. These providers are strictly bound by our instructions through an agreement on commissioned data processing and may not process the data for their own purposes. If in special cases (e.g., co-operative events with partners outside of the EU), your data will be transferred to third countries, we will inform you of this and, if required, also separately about the legal basis and level of data protection.
Your data will not be used for automated decision-making or profiling.
Under the relevant legal requirements, you have the right to receive information about your data, the right to have such data corrected or deleted, the right to the restriction of processing, the right to object to processing, and the right to data tranferability. In particular, you have the right to object to the processing of your data for advertising purposes at any time without incurring costs other than the transmission costs, according to the rates of your provider (e.g., the costs of an email=usually none). This applies, for example, if you have registered for an event and do not wish to be informed about similar events. If the data processing is based on consent, you have the right to revoke your consent at any time without this affecting the legality of the processing being carried out on the basis of consent to revocation or processing on any other legal basis. If you want to exercise these rights, you can simply write to or click on the unsubscribe link in any email newsletter to unsubscribe. If we call you, you can also communicate this to us directly.
You also have the right to complain to a data protection supervisory authorityabout our processing of your personal data, for example to the supervisory authority whom we answer to:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht
Stahnsdorfer Damm 77
14532 Kleinmachnow
Tel: +49 (0)33203 356-0
Fax: +49 (0)33203 356-49
Email: poststelle@lda.brandenburg.de
If you have questions or requests regarding data protection, you can contact us at any time.
Your contact is: datenschutz@hpi.de
Insofar as the processing of your personal data is based on Art. 6 para. 1 subpara. 1 letter e or f GDPR, you have the right to object to processing in accordance with Art. 21 GDPR. If your objection is made for reasons arising from your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or for the establishment, exercise of defence against legal claims. If your opposition is directed against direct marketing, including profiling, insofar as it is connected with such direct mail, we will no longer process your personal data for these purposes.
If you decide to pay for an event by credit card, the technical processing will be carried out by PayPal.
The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you pay via PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 point a GDPR (consent) and Art. 6 para. 1 point b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.
You can learn more about the use of data by PayPal in their Privacy Policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Account
If you book our online course with us, you will receive the access data for our course area and the link to log in to this area by email.
For this purpose, we use the platform of the provider Memberspot GmbH, Rilkestr. 26, 71642 Ludwigsburg (hereinafter “Memberspot”).
Would you like to know more about data protection at Memberspot? You can find more information here: https://www.memberspot.de/datenschutz.
We use Memberspot to provide the course you have purchased, i.e. on the basis of Art. 6 para. 1 lit. b GDPR, i.e. to fulfill the contract with you.
We have concluded a data processing agreement (DPA) with Memberspot. This ensures that Memberspot only processes your personal data in accordance with our instructions and in compliance with the GDPR.
After purchasing a course, we will send you a link via Memberspot with which you can register and create an account in the course area. You can then use the courses you have purchased in the course area after logging into your account.
When you create an account, the data you provide will be stored on a revocable basis (see below for deletion).
Use of the community
In the course area, you have the opportunity to actively participate in our community or read along. To do this, you must first log in to your account. If you want to actively participate, i.e. comment, you can also do this using a name of your choice. There is no obligation to use a clear name; it is possible to use a pseudonym.
Until you delete your account or individual posts, we will store all information that you enter in the community, i.e. posts, comments on other posts, etc., in addition to your account data. The legal basis for this is your consent, Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent in your account in your profile under “Community settings” at any time with effect for the future.
Deletion of the account
You can delete all data, including your entire account, at any time by submitting a request to our program management.
If you delete your account, your public statements will remain visible to all readers. All other data will be deleted. If you would like your posts to be anonymized or deleted, you can change your name (e.g. to GAST) and delete your posts before deleting your account. Or contact us: info-pdt@hpi.de
Legal recourse is excluded.
