Being the operator of our online offering, Bertelsmann Stiftung is the data controller in charge of processing personal data of any users of such online offering. You can find our contact details in the imprint of the online offering, while the contacts for questions concerning processing of the personal data are named directly in this Privacy Statement.
We, the Bertelsmann Stiftung, are strongly committed to protecting your privacy and your private and personal data. We collect, save, and use your personal data strictly in accordance with the provisions of this Privacy Statement and the applicable data protection provisions, including without limitation the European General Data Protection Regulation (GDPR) and national data protection provisions.
With this Privacy Statement, we wish to inform you to what extent and for what purpose your personal data is processed in connection with the use of our online offering.
Personal data is all information about an identified or identifiable individual. This includes information about your identity such as your name, your e-mail address, or your postal address. Any information that cannot be directly linked to your identity (e.g. statistical details such as the number of users of the online offering) is, however, not considered to be personal data.
You can essentially use our online offering without disclosing your identity and without providing any personal data. In that case, we will merely collect general information about your visit to our online offering. However, some of the services offered require you to provide certain personal data. As a rule, we will process such data only for purposes connected with the use of this online offering, including without limitation for the provision of the desired information. Whenever personal data is collected, you are only required to provide the data that is absolutely essential. Also, you may be asked to provide additional details, which are optional information provided voluntarily. We let you know in each case whether the input fields are for mandatory or optional details. More specific details are provided in the relevant section of this Privacy Statement.
There is no automated decision-making on the basis of your personal data in connection with the use of our online offering.
Processing personal data
We store the information provided by you on protected dedicated servers located within the European Union. Technical and organisational measures are taken to protect such servers against loss, destruction, access, modification, or dissemination of your data by unauthorized persons. Access to your data will be permitted only to a limited number of persons in charge of the technical, commercial, or editorial support of the servers. Notwithstanding regular controls, full protection against all risks cannot be provided.
Your personal data is transmitted over the Internet in encrypted form. We use SSL (Secure Socket Layer) encryption for transmission of data.
Disclosure of personal data to third parties
We use your personal information exclusively for providing the provide services that you have requested from us. Insofar as we use external service providers in performing the service requested, such external service providers will also access the data exclusively for the purpose of performing the service. By taking the necessary technical and organisational measures we ensure compliance with privacy policies and we demand the same of our external partners.
Moreover, we will not disclose the data to any third parties, including without limitation for advertising purposes, without your express consent. We will disclose your personal data only if you have given your consent to disclosure of the data or insofar as we are entitled or obligated to do so under legal provisions and/or administrative or judicial orders. This may include, without being limited to, giving information for purposes of criminal prosecution, in order to avert danger, or in order to enforce intellectual property rights.
Legal basis of data processing
Insofar as we obtain your consent to processing your personal data, Article 6(1)(a) of the GDPR constitutes the legal basis for such data processing.
Insofar as we process your personal data because processing is necessary for the performance of a contract or is necessary under a quasi-contractual relationship with you, the lawfulness of data processing is based on Article 6(1)(b) of the GDPR.
Insofar as we process your personal data because processing is necessary for compliance with a legal obligation, the lawfulness of data processing is based on Article 6(1)(c) of the GDPR.
Furthermore, Article 6(1)(f) of the GDPR may constitute the legal basis for data processing, if processing of your personal data is necessary for the purposes of the legitimate interests pursued by our Foundation or by a third party, except where such interests are overridden by your interests or your fundamental rights and freedoms which require protection of personal data.
Throughout this Privacy Statement, we always point to the legal basis underlying our processing of your personal data.
Deletion of data and duration of storage
We invariably delete or block any personal data provided by you as soon as the purpose of storage of such data ceases to apply. However, we may continue to store your personal data beyond that, if such storage is governed by legal provisions to which we are subject, including without limitation the legal obligation to retain business records and documentation. In such a case, we will delete or block the personal data after the prescribed period of time has expired.
Use of our online offering
Cookies enable us recognise your computer and make any default settings immediately available. Cookies help us to improve our online offering and to provide you with an even better service customised to meet your particular requirements. This also constitutes a legitimate interest in the processing of the data in accordance with Article 6(1)(f) of the GDPR.
Most web browsers are set to accept cookies by default. However, you can disable the storage of cookies or set up your web browser to inform you when you receive a cookie. It is also possible to manually delete stored cookies in the browser settings. Please note that your use of our online offering may be limited or restricted if you refuse to save cookies or delete necessary cookies.
- Frequency of page views
- Search terms used
- Use of website functions
- Shortened IP address
- Date and time of the query
- Access status/HTTP status code
- Respective data quantity transferred
- Website from which the request comes
- Operating system and its interface
- Language and version of the browser software
When storing website visitor data, certain data, including without limitation visitors' IP addresses, device and domain data, is stored in shortened and/or encrypted form so that the individual user cannot be identified based on the data. The data collected is never merged with other existing data, e.g. for the purpose of identifying an individual.
The IP address is shortened as soon as possible on an automated basis without you as a user having to carry out any special adjustments or configurations.
We use analysis cookies in order to improve the quality of our online offering and its contents and in order to examine and optimise the reach and searchability of our online offering. These purposes at the same time constitute a legitimate interest within the meaning of the legal basis for data processing in accordance with Article 6(1)(f) of the GDPR.