With this data privacy policy we inform you about how we process personal data. The protection of your privacy is of the utmost importance to us, so it goes without saying that we comply with the legal provisions on data protection.
Our data protection declaration applies to the following domains:
HSBA Hamburg School of Business Administration gGmbH
Represented by Prof. Dr. Insa Sjurts, Dr. Immo Schmidt-Jortzig
Willy-Brandt-Straße 75
20459 Hamburg
Germany
Should you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, you can contact us and our Data Security Officer as follows:
External Data Security Officer
ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer
Große Bleichen 21, 20354 Hamburg, Germany
Any queries or concerns related to your data should be addressed to datacontrol(at)hsba.de.
If you wish to communicate directly with our Data Security Officer (for example, because you wish to address a particularly sensitive matter), please establish contact by postal service as communication by e-mail may have security gaps. Please state in your request that your concern relates to the company HSBA Hamburg School of Business Administration.
Personal data describe all information about an identified or identifiable person. This includes the following categories of personal data that HSBA processes:
General Information on Cookies:
A cookie is a text file containing an identification number which, when the website is used, is transmitted to the user's computer together with the other data actually requested and stored there. The file is kept there for later access and serves to authenticate the user. As cookies are only simple files and not executable programmes, they pose no risk to the computer.
Depending on the user's selected Internet browser settings, the user automatically accepts cookies. However, this setting can be changed and the storage of cookies can be deactivated or set so as to notify the user as soon as a cookie is set. If the use of cookies is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by changing your Internet browser settings, thus permanently disabling the setting of cookies.
Cookies that are already active can be deleted at any time using an Internet browser or other software programs. Please note that we may work together with advertising partners who help us to make our jonline offering more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (cookies from third parties).
Session Cookies:
Session cookies are used for the duration of a session and are automatically deleted when the executing browser is closed. They ensure, for example, that video and audio files can be played, that your user input is temporarily stored during the input time and thereby improving user-friendliness.
Persistent Cookies:
Persistent cookies remain on your end device once the browser has been closed. These cookies can, for example, save your user preferences, such as language settings, and analyse user behaviour on our website. Storage duration of persistent cookies corresponds to the respective duration of the individual cookie. Afterwards they are automatically deleted.
Our Cookie Policy:
https://www.hsba.de/en/cookie-info/
We process your data for the following purposes:
Legal Foundation
We base the processing of your data on the following legal bases:
Legitimate Interests
When processing your data, we pursue the following legitimate interests:
Requirement or Obligation to Provide Data
Unless this is expressly stated, the provision of your data is not required or obligatory.
Sources of Data
In the case that we do not receive the data from you directly, or about the device you use, it comes from the following sources:
Duration of Storage
We store your data,
Groups of Data Recipients
When processing your data, we work together with service providers and companies of the following categories who have access to your data
When processing your data, we work together with the following service providers who have access to your data:
CleverReach
To send out our newsletter we use the services of the third party CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. Using their services enables us to analyse the newsletter usage, e.g. the number of actually opened newsletters or whether a purchase was made on our website after a link in the newsletter has been clicked (conversion tracking). The data you enter to receive newsletters is transmitted to CleverReach.
Privacy policy of CleverReach: https://www.cleverreach.com/en/privacy-policy/
To object to the collection of data, you must unsubscribe from the newsletter using the link in the e-mail you receive.
Eventbrite
We use the service of Eventbrite DE GmbH, Oranienstr. 25, 10999 Berlin, Germany, for the execution of our events and webinars. When you register with Eventbrite, we generally collect your first and second name and your email address. By registering through the service, you enable us to send you all the information you need via email, for example, to attend a webinar or event. To object to or withdraw your consent, please send us an email to datacontrol@hsba.de.
For more information, please visit the provider's privacy policy: https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_GB
Facebook Custom Audience
On our website we use the services of Facebook Custom Audience of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland which is integrated via the Facebook pixel. When you visit our website, a direct connection is established to the Facebook servers, informing which of our pages you have visited. If you are logged in on Facebook, this data is assigned to your personal Facebook account by Facebook. The service further lets us determine whether the user was directed to our site by clicking on one of our Facebook ads. This helps us to display our advertisements ("Facebook Ads") only to users who have an interest in our offering thereby optimising them.
Facebook's Privacy Policy: www.facebook.com/policy.php
If you are registered and logged in on Facebook, you can edit your advertising preferences under your profile, in "Settings" under "Advertising settings".
Facebook Lookalike Audience
We use Facebook Lookalike Audience of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to display interest-based advertising for our offering. Through our custom audience, Facebook uses the data collected there to determine a target audience whose interests are similar to those of the custom audience, so that our advertising is displayed to them.
Facebook's privacy policy: www.facebook.com/policy.php
If you are registered and logged in on Facebook, you can edit your advertising preferences under your profile, and under "Settings" and "Advertising settings".
Facebook Social Media Plugin
Our website integrates social media plugins from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. You can recognise these by the "thumbs up" button or the blue "f" logo.
A list of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=en_US
By visiting our website a connection to the Facebook servers is established. If you are logged in on Facebook, Facebook can assign the visit to our website to your user account. If you interact with the plugin (e.g. clicking the "thumbs up" button), Facebook will assign this to your profile and save it. We have no influence on the scope and content of the data collected by Facebook.
Facebook's data usage policy: www.facebook.com/policy.php
To prevent the assignment of the collected data to your profile, you must log out of your account.
Google Ads
We use on our website the Google AdWords service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. If you access our website via a Google ad, a cookie is installed for 30 days, which enables us to record the actions on our website after clicking on our ad. This helps us to analyse and optimise our campaigns and to display advertising that is relevant to our customers' interests.
Privacy policy of Google: policies.google.com/privacy
You can object to the collection and storage of data by Google. If you have a Google Account, you can deactivate personalised advertising here: https://adssettings.google.com/authenticated
Google AdSense
On our website we use the Google AdSense service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Cookies are used to collect data in order to analyise user behaviour on our or third party websites to display interest-based advertising.
Google's privacy policy: policies.google.com/privacy
You can object to the collection and storage of data by Google at any time with future effect. If you have a Google Account, you can deactivate personalised advertising here: https://adssettings.google.com/authenticated
Google Analytics
We use the Google Analytics service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Cookies are used to collect and analyse usage data on our website to optimise and improve our services. We use the anonymisation extension "_anonymizeIp()" for the anonymised recording of the IP address.
Privacy policy of Google: policies.google.com/privacy
You can object to the collection and storage of data by Google at any time with effect for the future. To do so, follow this link and install the add-on:
tools.google.com/dlpage/gaoptout
or
Google Fonts
To display fonts on our website, we use the Google Fonts service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. When you visit our website, a connection to the Google servers is established. Google also receives information on your IP address this way.
Privacy policy of Google: https://policies.google.com/privacy?hl=en
Google Remarketing
On our website we use the Google Remarketing service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Cookies are used to collect data which analyse the user behaviour of interested parties of our or third party websites. If you continue your internet activity, we can then offer you further targeted advertising.
Privacy policy of Google: policies.google.com/privacy
You can object to the collection and storage of data by Google at any time with future effect. If you have a Google Account, you can deactivate personalised advertising here: https://adssettings.google.com/authenticated
Google Tag Manager
On our website we use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The service is designed to manage website tags through a user interface and does not collect any personal information itself. Under certain circumstances, tags triggered by the service may collect data.
Google's privacy policy: https://policies.google.com/privacy?hl=en
Hotjar
We use the Hotjar service of Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. Cookies are used to collect and analyse data on user behaviour on our website in order to optimise and improve our website offer.
Hotjar's privacy policy: www.hotjar.com/legal/policies/privacy
You can object to the collection and storage of data by Hotjar at any time with effect for the future. To do so, please follow this opt-out link: https://www.hotjar.com/legal/compliance/opt-out
Instagram Plugin
Social media plug-ins from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA are integrated on our website. These can be identified by the Instagram "camera" logo. A list of the plugins can be found here: en.instagram-brand.com/assets/icons
By visiting our website, a connection to the Instagram servers is established. If you are logged in on Instagram, Instagram may associate your visit to our website with your user account. If you interact with the plugin (e.g. clicking the "camera" button), Instagram will associate this with your profile and save it.
We have no control over the scope and content of the data collected by Instagram.
Instagram Privacy Policy: help.instagram.com/519522125107875
To prevent the assignment of the collected data to your profile, you must log out of your account.
LinkedIn Conversion Tracking
We use LinkedIn conversion tracking from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Cookies are used to collect data to analyse user behaviour on our or third party websites in order to display interest-based advertising.
LinkedIn's privacy policy: www.linkedin.com/legal/privacy-policy
You can object to the collection and storage of data by LinkedIn at any time with future effect. To do so, please follow this opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
LinkedIn Plugin
Our website integrates social media plug-ins from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You may recognise these by the blue highlighted "in" logo. When you visit our website, a connection to the LinkedIn servers is established. LinkedIn furthermore receives the information that you have visited our site with your IP address. If you are logged in on LinkedIn, LinkedIn may associate your visit to our website with your user account. If you interact with the plugin (e.g., clicking the "in" button) and you are logged in, LinkedIn will associate that interaction with your profile and store it. We have no influence on the scope and content of the data collected by LinkedIn.
Privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=en_EN
To prevent the assignment of the collected data to your profile, you must log out of your account. You can also object to the data collection by LinkedIn. Please follow this opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
LinkedIn Website Retargeting
On our website we use LinkedIn Website Retargeting from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Cookies are used to collect data which analyse the user behaviour of interested parties of our or third party websites. If you continue your Internet activity, we are able to address you again with our advertising in a targeted manner.
LinkedIn's privacy policy: www.linkedin.com/legal/privacy-policy
You may object to the collection and storage of data by LinkedIn. To do so, please follow this opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Livestorm
For our webinars we use the service of Livestorm, 24 rue Rodier, 75009 Paris, France. For registration via Livestorm, we usually collect your name and surname as well as your email address. By registering through the service, you allow us to send you all the information you need via email to participate in the webinar. To object or withdraw your consent, you can use the link in your registration confirmation or you can send us an email to datacontrol@hsba.de.
For more information, please visit the provider's privacy policy: https://livestorm.co/privacy-policy/
Microsoft Teams
We use the Microsoft Teams service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, through which meetings and/or webinars (hereinafter "Online Meetings") can be held. We use Microsoft Teams to enable digital lectures and meetings. During an online meeting, your personal data may be processed in the form of video or audio. However, you can decide for yourself whether your camera and microphone are switched on or off. Furthermore, it is up to you to share content or not, and you can stop sharing at any time. If you participate in the chat function, we process your personal data contained in the chat texts and the other participants are also aware of this content. If you dial into the online meeting by telephone, we process your telephone number. Your IP address is stored in log files of the servers. HSBA may record any online meeting. In such a case you will be informed about the recording. After the online meeting, the recording will be saved in Microsoft Stream and we can share the recording with other participants.
To object or to revoke your consent, please send us an email to datacontrol(at)hsba.de.
For more information please visit the provider’s privacy policy: https://privacy.microsoft.com/en-GB/privacystatement
reCaptcha
We use the reCaptcha service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The service determines whether the input to an internet form is performed by a bot or other automated processing or by a human being. Your IP address, which is shortened for anonymisation, and data required for reCaptcha are transmitted to Google, whereby no combination of other data from Google takes place.
To the privacy policy of Google: https://policies.google.com/privacy?hl=en
SoundCloud
Social media plugins from SoundCloud Limited, Rheinsberger Straße 76/ 77, 10115 Berlin, Germany, are integrated on our website. These can be identified by the orange "clouds" logo. When you visit our website, a connection to the SoundCloud servers is established. SoundCloud also receives information that you have visited our site using your IP address. If you are logged in on SoundCloud, SoundCloud can attribute your visit to our website to your user account. If you interact with the plugin (e.g. clicking the "play" button), SoundCloud will assign this to your profile and save it. We have no influence on the scope and content of the data collected by SoundCloud.
Privacy policy of SoundCloud: https://soundcloud.com/pages/privacy
To prevent the assignment of the collected data to your profile, you must log out of your account.
Spotify
Our website integrates social media plugins from Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden. You can recognize them by the Spotify logo with a green background. You can find a list of the plugins here: https://developer.spotify.com/branding-guidelines/. When you visit our website, a connection to the Spotify servers is established. Spotify also receives information that you have visited our site using your IP address. If you are logged in to Spotify, Spotify may associate your visit to our website with your user account. If you interact with the plugin (e.g. clicking the "Play" button), Spotify will assign this to your profile and save it. We have no influence on the scope and content of the data collected by Spotify.
Privacy policy of Spotify: https://www.spotify.com/de/legal/privacy-policy/
Universe
We use the service Universe from Ticketmaster GmbH, Alt-Moabit 60, 10555 Berlin, Germany, for the execution of our events and webinars. For registration via Universe, we generally record your first and second names as well as your email address. By registering via the service, you enable us to send you all the information you need via email, e.g. to participate in a webinar or event. If you wish to object to or withdraw your consent, please send us an email to datacontrol@hsba.de.
For more information, please visit the provider's privacy policy: https://www.universe.com/privacy
XING PlugIn
Social media plug-ins from XING AG, Dammtorstrasse 30, 20354 Hamburg, Germany, are integrated into our website. These can be identified by the "x" logo. When you visit our website, a connection is established with the XING servers. XING also receives information ton your IP address. If you are logged on to XING, XING can assign the visit to our website to your user account. If you interact with the plugin (e.g. by clicking the "X" button) and you are logged in, XING will assign this to your profile and save it. We have no influence on the scope and content of the data collected by XING.
Privacy policy of XING: privacy.xing.com/en/privacy-policy
To prevent the assignment of the collected data to your profile, you must log out of your account. You can also object to the collection of data by XING. Please follow this opt-out link: https://nats.xing.com/optout.html?locale=en_US
YouTube
Our website integrates social media plugins from YouTube, a company of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland („Google“). By visiting our website a connection to the YouTube servers is established. We use the "enhanced privacy mode" provided by YouTube to do this. According to YouTube, for example, the information that you have visited our site using your IP address is only transmitted to Youtube when you interact with the plugin (e.g. clicking on an embedded video). If you are logged in on YouTube, YouTube can assign the visit to our website to your user account. If you interact with an embedded video, for example, YouTube will assign this to your profile and save it. We have no influence on the scope and content of the data collected by YouTube.
Privacy policy of Google: https://policies.google.com/privacy?hl=de
To prevent the assignment of the collected data to your profile, you must log out of your account.
Zoom
We use the Zoom service from Zoom Video Communications, Inc. 55 Almaden Blvd, Suite 600,
San Jose, CA 95113, USA, through which meetings and/or webinars (hereinafter "Online Meetings") can be held. During an Online Meeting, your personal data may be processed in the form of video or audio. However, you can decide for yourself whether the camera and microphone are switched on or off. Furthermore, it is up to you whether or not to share content, and you can stop sharing content at any time. If you participate in the chat function, we process your personal data contained in the chat texts and the other participants are also aware of this content. If you dial into the online meeting by telephone, we process your telephone number. Your IP address is stored in log files of the servers. HSBA may record the online meeting. In such a case you will be informed about the recording. After the online meeting, the recording can be stored in the cloud of Zoom, where we can share the recording with other participants.
To object or to revoke your consent, please send us an e-mail to datacontrol@hsba.de.
For more information, please visit the provider's privacy policy: https://zoom.us/privacy.
Data is transferred to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other suitable guarantees, such as certification or proven compliance with international security standards.
Your Rights
As a data subject, you have the following rights:
Validity of this Data Privacy Statement
If our processes change, we adjust this information.
This privacy policy is valid as of: 16.09.2020