With this data privacy policy we inform you about how we process personal data. The protection of your privacy is of the utmost importance to us, so it goes without saying that we comply with the legal provisions on data protection.

Our data protection declaration applies to the following domains:

www.hsba.de

www.imf-institut.de

www.digitalsustainable.world

www.studentenfutter-podcast.de

Names and Contact Details of those Responsible

HSBA Hamburg School of Business Administration gGmbH
Represented by Prof. Dr. Insa Sjurts, Dr. Immo Schmidt-Jortzig
Willy-Brandt-Straße 75
20459 Hamburg
Germany

Data Security Officer

Should you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, you can contact us and our Data Security Officer as follows:

External Data Security Officer

ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer
Große Bleichen 21, 20354 Hamburg, Germany
Any queries or concerns related to your data should be addressed to datacontrol(at)hsba.de.

If you wish to communicate directly with our Data Security Officer (for example, because you wish to address a particularly sensitive matter), please establish contact by postal service as communication by e-mail may have security gaps. Please state in your request that your concern relates to the company HSBA Hamburg School of Business Administration.

Personal Data

Personal data describe all information about an identified or identifiable person. This includes the following categories of personal data that HSBA processes:

Your contact details (such as first and last name, address, e-mail address, telephone number)
Your date of birth, place of birth, country of birth, nationality, gender
Your mother tongue and additional language certificates for English and, if applicable, German (for non-native speakers)
Your CV
an up to date profile photo for your student ID card and for an HSBA-internal profile for teaching staff
Your university entrance qualification
Awards (such as diplomas and certificates)
Identification numbers (such as social security number, tax number, tax ID, passport or ID card number, insurance numbers)
Payment data (such as account number, credit card number, financial institution)
Your correspondence with us (e.g. in regards to examinations, questions to the Service Office)
Customer data (such as invoice data, user profiles, address, order history, payment data)
Online identifiers (such as cookie IDs, advertising IDs)
Log files with information about your visit to our website

Usage of Cookies

General Information on Cookies:

A cookie is a text file containing an identification number which, when the website is used, is transmitted to the user's computer together with the other data actually requested and stored there. The file is kept there for later access and serves to authenticate the user. As cookies are only simple files and not executable programmes, they pose no risk to the computer.

Depending on the user's selected Internet browser settings, the user automatically accepts cookies. However, this setting can be changed and the storage of cookies can be deactivated or set so as to notify the user as soon as a cookie is set. If the use of cookies is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by changing your Internet browser settings, thus permanently disabling the setting of cookies.

Cookies that are already active can be deleted at any time using an Internet browser or other software programs. Please note that we may work together with advertising partners who help us to make our jonline offering more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (cookies from third parties).

Session Cookies:

Session cookies are used for the duration of a session and are automatically deleted when the executing browser is closed. They ensure, for example, that video and audio files can be played, that your user input is temporarily stored during the input time and thereby improving user-friendliness.

Persistent Cookies:

Persistent cookies remain on your end device once the browser has been closed. These cookies can, for example, save your user preferences, such as language settings, and analyse user behaviour on our website. Storage duration of persistent cookies corresponds to the respective duration of the individual cookie. Afterwards they are automatically deleted.

Our Cookie Policy:

https://www.hsba.de/en/cookie-info/

Use and Purpose

We process your data for the following purposes:

to correspond with you (e.g. for important information on your studies)
to provide services (e.g. Microsoft Office, Microsoft Teams, etc.)
to process contracts with you (e.g. studies, training, employment)
for consideration and processing of your application
to provide our services (e.g. administration and fulfilment of the study contract)
to improve our service
to assure quality and provide statistics
for advertising purposes (such as our newsletter, information on events, etc.)
to enable your participation in our competitions
to enable your participation in our events
to enable your participation in our surveys

Legal Foundation

We base the processing of your data on the following legal bases:

your consent, if you have given us such consent (Art. 6 para. 1 lit. a) GDPR)
the initiation or execution of a contract with you (Art. 6 para. 1 lit. b) GDPR
the fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR
the implementation of our legitimate interests (Art. 6 para. 1 lit. f) GDPR

Legitimate Interests

When processing your data, we pursue the following legitimate interests:

the improvement of our offering
the protection of our systems against misuse
the production of statistics
Marketing purposes
the storage of our correspondence with you

Requirement or Obligation to Provide Data

Unless this is expressly stated, the provision of your data is not required or obligatory.

Sources of Data

In the case that we do not receive the data from you directly, or about the device you use, it comes from the following sources:

Data of companies and self-employed people from publicly available official sources
Data on B2B contacts of specialised service providers
Data from trade fairs, portals, registration lists for joint events
Research of publicly available data (imprint, memberships of industry associations etc.)

Duration of Storage

We store your data,

if you have consented to the processing, at most until you revoke your consent;
if we require the data for the execution of a contract, at most for as long as the contractual relationship with you exists;
if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh our own;
if there are legal obligations to retain data, until the end of such retention periods.

Groups of Data Recipients

When processing your data, we work together with service providers and companies of the following categories who have access to your data

Our placement cooperation partners
Partner institutions
Provider of web analysis tools
Web hosting and web development providers
Service provider for IT development services
Marketing and advertising agencies
Sales service provider
Payment service provider
Receivables management and collection service provider
Call Center
Email and newsletter provider
Service provider for editing and translations
CRM system service provider
Cloud services
Conference and Webinar Software
Service provider for online surveys
Social media platforms
Service provider for bookkeeping and invoicing

Recipients of data

When processing your data, we work together with the following service providers who have access to your data:

CleverReach

To send out our newsletter we use the services of the third party CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. Using their services enables us to analyse the newsletter usage, e.g. the number of actually opened newsletters or whether a purchase was made on our website after a link in the newsletter has been clicked (conversion tracking). The data you enter to receive newsletters is transmitted to CleverReach.

To object to the collection of data, you must unsubscribe from the newsletter using the link in the e-mail you receive.

Eventbrite

We use the service of Eventbrite DE GmbH, Oranienstr. 25, 10999 Berlin, Germany, for the execution of our events and webinars. When you register with Eventbrite, we generally collect your first and second name and your email address. By registering through the service, you enable us to send you all the information you need via email, for example, to attend a webinar or event. To object to or withdraw your consent, please send us an email to datacontrol@hsba.de.

For more information, please visit the provider's privacy policy: https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_GB

Facebook Custom Audience

On our website we use the services of Facebook Custom Audience of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland which is integrated via the Facebook pixel. When you visit our website, a direct connection is established to the Facebook servers, informing which of our pages you have visited. If you are logged in on Facebook, this data is assigned to your personal Facebook account by Facebook. The service further lets us determine whether the user was directed to our site by clicking on one of our Facebook ads. This helps us to display our advertisements ("Facebook Ads") only to users who have an interest in our offering thereby optimising them.

Facebook's Privacy Policy: www.facebook.com/policy.php

If you are registered and logged in on Facebook, you can edit your advertising preferences under your profile, in "Settings" under "Advertising settings".

Facebook Lookalike Audience

We use Facebook Lookalike Audience of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to display interest-based advertising for our offering. Through our custom audience, Facebook uses the data collected there to determine a target audience whose interests are similar to those of the custom audience, so that our advertising is displayed to them.

Facebook's privacy policy: www.facebook.com/policy.php

If you are registered and logged in on Facebook, you can edit your advertising preferences under your profile, and under "Settings" and "Advertising settings".

Facebook Social Media Plugin

Our website integrates social media plugins from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. You can recognise these by the "thumbs up" button or the blue "f" logo.

A list of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=en_US

By visiting our website a connection to the Facebook servers is established. If you are logged in on Facebook, Facebook can assign the visit to our website to your user account. If you interact with the plugin (e.g. clicking the "thumbs up" button), Facebook will assign this to your profile and save it. We have no influence on the scope and content of the data collected by Facebook.

Facebook's data usage policy: www.facebook.com/policy.php

To prevent the assignment of the collected data to your profile, you must log out of your account.

Google Ads

We use on our website the Google AdWords service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. If you access our website via a Google ad, a cookie is installed for 30 days, which enables us to record the actions on our website after clicking on our ad. This helps us to analyse and optimise our campaigns and to display advertising that is relevant to our customers' interests.

You can object to the collection and storage of data by Google. If you have a Google Account, you can deactivate personalised advertising here: https://adssettings.google.com/authenticated

Google AdSense

On our website we use the Google AdSense service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Cookies are used to collect data in order to analyise user behaviour on our or third party websites to display interest-based advertising.

Google's privacy policy: policies.google.com/privacy

You can object to the collection and storage of data by Google at any time with future effect. If you have a Google Account, you can deactivate personalised advertising here: https://adssettings.google.com/authenticated

Google Analytics

We use the Google Analytics service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Cookies are used to collect and analyse usage data on our website to optimise and improve our services. We use the anonymisation extension "_anonymizeIp()" for the anonymised recording of the IP address.

You can object to the collection and storage of data by Google at any time with effect for the future. To do so, follow this link and install the add-on:

tools.google.com/dlpage/gaoptout

https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh?hl=de

Google Fonts

To display fonts on our website, we use the Google Fonts service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. When you visit our website, a connection to the Google servers is established. Google also receives information on your IP address this way.

Google Remarketing

On our website we use the Google Remarketing service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Cookies are used to collect data which analyse the user behaviour of interested parties of our or third party websites. If you continue your internet activity, we can then offer you further targeted advertising.

Google Tag Manager

On our website we use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The service is designed to manage website tags through a user interface and does not collect any personal information itself. Under certain circumstances, tags triggered by the service may collect data.

Google's privacy policy: https://policies.google.com/privacy?hl=en

Hotjar

We use the Hotjar service of Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. Cookies are used to collect and analyse data on user behaviour on our website in order to optimise and improve our website offer.

Hotjar's privacy policy: www.hotjar.com/legal/policies/privacy

You can object to the collection and storage of data by Hotjar at any time with effect for the future. To do so, please follow this opt-out link: https://www.hotjar.com/legal/compliance/opt-out

Instagram Plugin

Social media plug-ins from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA are integrated on our website. These can be identified by the Instagram "camera" logo. A list of the plugins can be found here: en.instagram-brand.com/assets/icons

By visiting our website, a connection to the Instagram servers is established. If you are logged in on Instagram, Instagram may associate your visit to our website with your user account. If you interact with the plugin (e.g. clicking the "camera" button), Instagram will associate this with your profile and save it.

We have no control over the scope and content of the data collected by Instagram.

Instagram Privacy Policy: help.instagram.com/519522125107875

To prevent the assignment of the collected data to your profile, you must log out of your account.

LinkedIn Conversion Tracking

We use LinkedIn conversion tracking from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Cookies are used to collect data to analyse user behaviour on our or third party websites in order to display interest-based advertising.

LinkedIn's privacy policy: www.linkedin.com/legal/privacy-policy

You can object to the collection and storage of data by LinkedIn at any time with future effect. To do so, please follow this opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

LinkedIn Plugin

Our website integrates social media plug-ins from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You may recognise these by the blue highlighted "in" logo. When you visit our website, a connection to the LinkedIn servers is established. LinkedIn furthermore receives the information that you have visited our site with your IP address. If you are logged in on LinkedIn, LinkedIn may associate your visit to our website with your user account. If you interact with the plugin (e.g., clicking the "in" button) and you are logged in, LinkedIn will associate that interaction with your profile and store it. We have no influence on the scope and content of the data collected by LinkedIn.

To prevent the assignment of the collected data to your profile, you must log out of your account. You can also object to the data collection by LinkedIn. Please follow this opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

LinkedIn Website Retargeting

On our website we use LinkedIn Website Retargeting from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Cookies are used to collect data which analyse the user behaviour of interested parties of our or third party websites. If you continue your Internet activity, we are able to address you again with our advertising in a targeted manner.

LinkedIn's privacy policy: www.linkedin.com/legal/privacy-policy

You may object to the collection and storage of data by LinkedIn. To do so, please follow this opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Livestorm

For our webinars we use the service of Livestorm, 24 rue Rodier, 75009 Paris, France. For registration via Livestorm, we usually collect your name and surname as well as your email address. By registering through the service, you allow us to send you all the information you need via email to participate in the webinar. To object or withdraw your consent, you can use the link in your registration confirmation or you can send us an email to datacontrol@hsba.de.

For more information, please visit the provider's privacy policy: https://livestorm.co/privacy-policy/

Microsoft Advertising (Bing Ads)

We use Bing Conversion Tracking provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA for marketing and tracking purposes. If you have clicked on a Bing ad, a cookie is set, which enables Microsoft Bing and us to recognize that someone has clicked on an ad, has been redirected to our website and has reached a previously determined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. In addition, your encrypted IP address is collected. No personal information about the user's identity is shared.

To disable Bing, please click on this link: https://account.microsoft.com/privacy/ad-settings/

Microsoft's privacy policy can be found here: https://www.microsoft.com/en-us/trust-center/privacy

Microsoft Teams

We use the Microsoft Teams service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, through which meetings and/or webinars (hereinafter "Online Meetings") can be held. We use Microsoft Teams to enable digital lectures and meetings. During an online meeting, your personal data may be processed in the form of video or audio. However, you can decide for yourself whether your camera and microphone are switched on or off. Furthermore, it is up to you to share content or not, and you can stop sharing at any time. If you participate in the chat function, we process your personal data contained in the chat texts and the other participants are also aware of this content. If you dial into the online meeting by telephone, we process your telephone number. Your IP address is stored in log files of the servers. HSBA may record any online meeting. In such a case you will be informed about the recording. After the online meeting, the recording will be saved in Microsoft Stream and we can share the recording with other participants.

To object or to revoke your consent, please send us an email to datacontrol(at)hsba.de.

For more information please visit the provider’s privacy policy: https://privacy.microsoft.com/en-GB/privacystatement

reCaptcha

We use the reCaptcha service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The service determines whether the input to an internet form is performed by a bot or other automated processing or by a human being. Your IP address, which is shortened for anonymisation, and data required for reCaptcha are transmitted to Google, whereby no combination of other data from Google takes place.

To the privacy policy of Google: https://policies.google.com/privacy?hl=en

SoundCloud

Social media plugins from SoundCloud Limited, Rheinsberger Straße 76/ 77, 10115 Berlin, Germany, are integrated on our website. These can be identified by the orange "clouds" logo. When you visit our website, a connection to the SoundCloud servers is established. SoundCloud also receives information that you have visited our site using your IP address. If you are logged in on SoundCloud, SoundCloud can attribute your visit to our website to your user account. If you interact with the plugin (e.g. clicking the "play" button), SoundCloud will assign this to your profile and save it. We have no influence on the scope and content of the data collected by SoundCloud.

To prevent the assignment of the collected data to your profile, you must log out of your account.

Spotify

Our website integrates social media plugins from Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden. You can recognize them by the Spotify logo with a green background. You can find a list of the plugins here: https://developer.spotify.com/branding-guidelines/. When you visit our website, a connection to the Spotify servers is established. Spotify also receives information that you have visited our site using your IP address. If you are logged in to Spotify, Spotify may associate your visit to our website with your user account. If you interact with the plugin (e.g. clicking the "Play" button), Spotify will assign this to your profile and save it. We have no influence on the scope and content of the data collected by Spotify.

Universe

We use the service Universe from Ticketmaster GmbH, Alt-Moabit 60, 10555 Berlin, Germany, for the execution of our events and webinars. For registration via Universe, we generally record your first and second names as well as your email address. By registering via the service, you enable us to send you all the information you need via email, e.g. to participate in a webinar or event. If you wish to object to or withdraw your consent, please send us an email to datacontrol@hsba.de.

For more information, please visit the provider's privacy policy: https://www.universe.com/privacy

XING PlugIn

Social media plug-ins from XING AG, Dammtorstrasse 30, 20354 Hamburg, Germany, are integrated into our website. These can be identified by the "x" logo. When you visit our website, a connection is established with the XING servers. XING also receives information ton your IP address. If you are logged on to XING, XING can assign the visit to our website to your user account. If you interact with the plugin (e.g. by clicking the "X" button) and you are logged in, XING will assign this to your profile and save it. We have no influence on the scope and content of the data collected by XING.

To prevent the assignment of the collected data to your profile, you must log out of your account. You can also object to the collection of data by XING. Please follow this opt-out link: https://nats.xing.com/optout.html?locale=en_US

YouTube

Our website integrates social media plugins from YouTube, a company of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland („Google“). By visiting our website a connection to the YouTube servers is established. We use the "enhanced privacy mode" provided by YouTube to do this. According to YouTube, for example, the information that you have visited our site using your IP address is only transmitted to Youtube when you interact with the plugin (e.g. clicking on an embedded video). If you are logged in on YouTube, YouTube can assign the visit to our website to your user account. If you interact with an embedded video, for example, YouTube will assign this to your profile and save it. We have no influence on the scope and content of the data collected by YouTube.

To prevent the assignment of the collected data to your profile, you must log out of your account.

Zoom

We use the Zoom service from Zoom Video Communications, Inc. 55 Almaden Blvd, Suite 600,

San Jose, CA 95113, USA, through which meetings and/or webinars (hereinafter "Online Meetings") can be held. During an Online Meeting, your personal data may be processed in the form of video or audio. However, you can decide for yourself whether the camera and microphone are switched on or off. Furthermore, it is up to you whether or not to share content, and you can stop sharing content at any time. If you participate in the chat function, we process your personal data contained in the chat texts and the other participants are also aware of this content. If you dial into the online meeting by telephone, we process your telephone number. Your IP address is stored in log files of the servers. HSBA may record the online meeting. In such a case you will be informed about the recording. After the online meeting, the recording can be stored in the cloud of Zoom, where we can share the recording with other participants.

To object or to revoke your consent, please send us an e-mail to datacontrol@hsba.de.

For more information, please visit the provider's privacy policy: https://zoom.us/privacy.

Transfers to Third Party Countries

Data is transferred to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other suitable guarantees, such as certification or proven compliance with international security standards.

Your Rights

As a data subject, you have the following rights:

to request information on the processing of your data and to receive a copy of your personal data. You can request information on, among other things, the purposes of the processing, the categories of personal data processed, the recipients of the data (if a transfer is made), the duration of the storage or the criteria for determining the duration;
to receive or transmit the personal data concerning you in a structured, common and machine-readable format or to have it transmitted to another responsible
to correct your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
have your data deleted or blocked.
have the processing of your data restricted;
oppose the processing of your data;
withdraw your consent to the processing of your data for the future; and
complain to the supervisory authority about unauthorised data processing.

Validity of this Data Privacy Statement

If our processes change, we adjust this information.

This privacy policy is valid as of: 16.09.2020

Undergraduate Degrees

Choose your programme

Plan your studies

Postgraduate Degrees

Choose your Programme

Plan your studies

Doctoral Programme

Research

How to Apply

Campus Life

Experience the HSBA

Podcast

International

Outbound Mobility

Inbound Mobility

Choose your programme

Plan your studies

Choose your Programme

Plan your studies

Research

How to Apply

Experience the HSBA

Podcast

Outbound Mobility

Inbound Mobility

Privacy Policy

Data Privacy Statement

Names and Contact Details of those Responsible

Data Security Officer

Personal Data

Usage of Cookies

Use and Purpose

Recipients of data

Transfers to Third Party Countries