I. General information
(1) Below we inform you about the collection of personal data when using our website.
(2) With reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as the ‘General Data Protection Regulation’ or ‘GDPR’ for short), the term ‘personal data’ means all data that can be related to you personally. This includes, for example, your name, address, email address and user behavior. With regard to other terms, in particular the terms ‘processing’, ‘controller’, ‘processor’ and ‘consent’, we refer to the statutory data protection definitions in Art. 4 GDPR.
(3) The Swiss Federal Act on Data Protection, hereinafter referred to as ‘FADP’, also applies to matters that have an impact in Switzerland, even if they are initiated outside Switzerland. However, we use the terms of the GDPR throughout this document. The terms ‘personal data’, ‘processing’, ‘processor’, ‘special categories of data’ and data portability used in the GDPR also refer to the terms ‘personal data’, ‘processing’, ‘processor’, ‘data portability’ and ‘sensitive personal data’ used in the DPA, insofar as the DPA applies. In this case, the legal meaning of the terms is determined by the DPA.
(4) We only process personal data to the extent necessary to provide a functional website and the content and services we offer. The processing of personal data only takes place regularly if you have given us your consent within the meaning of Art. 6 para. 1 lit. a) GDPR or if the processing is permitted by legal regulations, in particular by one of the legal bases mentioned in Art. 6 para. 1 lit. b) to lit. f) GDPR.
(5) Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this is provided for by national or European regulations to which we are subject. In this case, the data will be blocked or erased when the storage period prescribed by the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfillment of a contract.
(6) Insofar as we use contracted service providers for individual functions of our website or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes.
II Responsible body
(1) The controller within the meaning of Art. 4 No. 7 GDPR, the other data protection laws applicable in the Member States of the European Union and other provisions and regulations of a data protection nature is
MAGISTER Kreativagentur UG
Managing Directors: Benjamin Breuer and Maximilian Anzile
Theresienstrasse 40
80333 Munich
Commercial register: HRB 287651
Register court: Munich Local Court
Phone: +49 089 24416984
E-mail: hochschulberatung@magister.de
(2) Further details on the responsible body can be found in our legal notice.
III Data Protection Officer
You can reach and contact our data protection officer at the following address:
Benjamin Breuer
Theresienstrasse 40
80333 Munich
Tel: +49 089 24416984
E-Mail: hochschulberatung@magister.de
IV. Your rights
(1) You have the following rights vis-à-vis us with regard to your personal data:
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
(3) Within the scope of the DPA, you also have the right to:
V. Processing of personal data when using our website for information purposes
(1) If you visit our website without registering or otherwise providing us with information (‘informational use’), we only collect the personal data that your web browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to enable you to view our website and to ensure stability and security: IP address, date and time of the request, time zone difference to GMT, content of the website, access status (HTTP status), amount of data transferred, request website, web browser, operating system, language and version of the browser
(2) The aforementioned data is also stored in log files on our servers. This data is not stored together with your other personal data.
(3) The collection and temporary storage of the IP address is necessary to enable the delivery of our website to your end device. For this purpose, your IP address must be stored for the duration of your visit to our website.
(4) The storage of the above-mentioned data in log files serves to ensure the functionality and optimization of our website and to ensure the security of our information technology systems.
(5) This data is not analyzed for marketing purposes; our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for the collection and temporary storage of the aforementioned data and log files is Article 6(1)(f) GDPR and the aforementioned data for the provision of our website will be deleted when the respective session has ended. The collection of the aforementioned data for the provision of our website and the storage of this data in log files is absolutely necessary for the operation of our website. There is no possibility of objection.
VI Processing of personal data through cookies
(1) We use so-called cookies on our website. Cookies are small text files that are stored on the storage medium of your end device, for example on a hard disk, and through which certain information flows to us as the body that sets the cookie. Cookies cannot execute programs or transmit viruses to your end device. This website uses the following types of cookies, the scope and function of which are explained below.
(2) Cookies that are stored associated with your web browser:
(3) The processing of personal data by the aforementioned cookies serves to make our website more user-friendly and effective for you. Some functions of our website cannot be offered without the use of these cookies. In particular, some functions of our website require that your web browser can be identified even after a page change. If you have an account, we use cookies to identify you for subsequent visits. This prevents you from having to log in again each time you visit our website. The data processed by cookies that are required to provide the functions of our website are not used to create user profiles. Where cookies are used for analysis purposes, they are used to improve the quality and user-friendliness of our website, its content and functions. They enable us to understand how the website, which functions are used and how often they are used. This enables us to continuously optimize our offer.
(4) Insofar as cookies are not technically mandatory, we only set them with your previously declared consent, which you can also revoke at any time. The legal basis is Art. 6 para. 1 lit. a) GDPR.
(5) The aforementioned cookies are stored on your end device and transmitted by it to our server. You can therefore configure the processing of data and information by cookies yourself. You can make appropriate configurations in the settings of your web browser, through which you can, for example, reject third-party cookies or cookies altogether. In this context, we would like to point out that you may then not be able to use all the functions of our website properly. We also recommend that you regularly delete cookies and your browser history manually.
VII. Further functions and offers on our website
(1) In addition to the aforementioned informational use of our website, we offer various services that you can use if you are interested. This usually requires the provision of further personal data. We require this data to provide the respective service. The above data processing principles apply.
(2) In some cases, we use external service providers who have been carefully selected and commissioned by us to process this data. These service providers are bound by our instructions and are regularly monitored by us. Insofar as personal data is passed on to third parties in the course of services that we offer together with partners, you can find more detailed information in the following descriptions of the individual services. If these third parties are based in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.
VIII Making contact
(1) If you contact us by e-mail, the personal data you send us with your e-mail will be stored.
(2) We also have a contact form on our website that you can use to contact us. The data you enter in the input mask will be transmitted to us and stored: first name, surname, e-mail address.
(3) The data will only be used to answer your questions. Unless explicitly stated in this privacy policy, the data will not be passed on to third parties. We also record your IP address and the time of sending.
(4) The processing of the above personal data serves solely to process your inquiries.
(5) The processing of other personal data collected through the use of the contact form provided on our website serves to prevent misuse and to ensure the security of our information technology systems.
(6) This also constitutes our legitimate interest in the processing of your personal data. Insofar as you have given us your consent for this, the legal basis for the processing of this data is Art. 6 para. 1 lit. a) GDPR. Otherwise, the legal basis for the processing of this data is Art. 6 para. 1 lit. f) GDPR, in particular in the event that you send us the data by e-mail. Insofar as you wish to work towards the conclusion of a contract through your e-mail, Art. 6 para. 1 lit. b) GDPR constitutes an additional legal basis.
(7) Subject to statutory retention periods, the data will be deleted as soon as we have finally processed your request. If you contact us by e-mail, you can object to the storage of your personal data at any time. We would like to point out that in this case your request cannot be processed any further. You can declare your revocation or objection by sending an e-mail to the e-mail address given in our legal notice.
IX. Blog
(1) We offer a blog on our website. In this blog we publish articles on various topics.
(2) If you have given us your consent to store the data, you can revoke this at any time. You can object to this storage of the above data at any time.
X. Online application
(1) We offer you the opportunity to apply online on our website. You will need to provide personal data in order to participate in the application process. This data may include personal master data such as first name, surname, address, date of birth, contact details such as telephone number or e-mail address as well as data relating to your educational and/or professional background such as school and work references, data on training, internships or previous employers. This data may originate from an application form you complete online on the application platform or from the documents you provide, such as a cover letter, a CV, an application photo, certificates or other evidence of professional qualifications. Data that is mandatory for participation in the application process is marked accordingly as mandatory information. Unless a third-party provider whose service we use to provide the online application function is named in this privacy policy, the data will not be passed on to third parties.
(2) We process the above data for the purpose of carrying out the application process. If you have given us your consent, the legal basis for processing the data is Art. 6 para. 1 sentence 1 lit. a) GDPR. Insofar as the processing of the above data takes place for the initiation of contractual relationships, the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR.
(3) The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event that an employment relationship, training relationship, internship or other employment relationship is established following the application process, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application process ends with the receipt of a rejection. In this case, the data will be deleted after four weeks. Deletion will not take place if further processing and storage of your personal data is necessary in individual cases for the assertion, exercise or defense of legal claims. In this case, we have a legitimate interest in the further processing and storage of your personal data. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR. Your personal data will not be erased even if we are obliged by law to continue storing your personal data.
(4) You can revoke any consent you have given us at any time. You can object to the processing of your personal data at any time. In particular, you have the option of withdrawing your application at any time. As part of the application process, you should only provide us with the personal data that is necessary for participation in the application process and its implementation. There is no legal or contractual obligation to provide data. However, we would like to point out that we cannot carry out the application process without this data and cannot consider your application. The same applies in the event of an objection to the processing of your data. You can have the data stored about you changed at any time.
(5) We also offer you the opportunity to have your application saved in an application pool. This gives you the opportunity for us to consider your application beyond the specific reason for your application in the context of other future application procedures. The storage of your application in the application pool requires your consent. We store your application in the application pool for six months. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. a) GDPR. You can withdraw your consent at any time.
(6) We process and/or store your personal data on a server of an external provider in the European Union. This ensures that the standards and regulations of European data protection law are complied with.
XI. Facebook Connect
We use the service on our website.
The service makes it easier to register for services on the Internet. Instead of using a registration mask on our website, you can enter your login data from the provider and then use our services. By using the service, your web browser automatically establishes a direct connection with the provider’s server. To log in, you will be redirected to the provider’s website. There you can log in with your user data. This will link your user account with our offer. We have no influence on the further use of data collected by the provider through the use of the service.
We use the service to facilitate and shorten the registration and login process for you. You can prevent the processing of the above information by the provider by using our registration form and not using the service.
The service transfers personal data to the USA. The EU Commission has decided that this country offers an adequate level of data protection (TADPF). The service has submitted to the TADPF.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
2 Dublin
Ireland
https://www.facebook.com/
XII. Facebook Custom Audiences
We use the service on our website.
The service enables us to display interest-based advertisements (“ads”) to visitors to our website when they visit other websites that also use the service. By using the service, your web browser automatically establishes a direct connection with the provider’s server. We have no influence on the scope and further use of the data collected by the provider through the use of the service. To the best of our knowledge, the provider receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you have a user account with the provider and are registered, the provider can assign the visit to your user account. Even if you are not registered or have not logged in, it is possible that the provider will find out and store your IP address and any other identifying features.
We use the service for marketing and optimization purposes, in particular to place relevant and interesting ads for you and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.
The service transfers personal data to the USA. The EU Commission has decided that this country offers an adequate level of data protection (TADPF). The service has submitted to the TADPF.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
https://www.facebook.com/settings/?tab=ads#_
Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
2 Dublin
Ireland
https://www.facebook.com/
XIII Facebook pixel
We use the service on our website.
The service enables the provider to display our ads on Facebook, so-called “Facebook ads”, only to those Facebook users who have visited our website, in particular those who have shown an interest in our online offering or in certain topics or products. The service makes it possible to check whether a user has been redirected to our website after clicking on our Facebook ads. Among other things, the service uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device. If you are logged in to Facebook with your user account, your visit to our website will be noted in your user account. The data collected about you is anonymous to us and does not allow us to draw any conclusions about the identity of the user. However, this data can be linked by the provider to your user account there. We have no influence on the scope and further use of data collected by the provider through the use of the service. To the best of our knowledge, the provider receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you have a user account with Facebook and are registered, the provider can assign the visit to your user account. Even if you are not registered with Facebook or have not logged in, it is possible for the provider to find out and store your IP address and any other identifying features.
We use the service for marketing and optimization purposes, in particular to place relevant and interesting ads for you and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.
The service transfers personal data to the USA. The EU Commission has decided that this country offers an adequate level of data protection (TADPF). The service has submitted to the TADPF.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
2 Dublin
Ireland
https://www.facebook.com/
XIV Google Analytics 4
We use the service on our website.
We use the service to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. By statistically evaluating user behavior, we can improve our offer and make it more interesting for you as a user. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
The service uses cookies, i.e. small text files that are stored on your end device and enable your use of our website to be analyzed. The information generated by the cookie about the use of our website is transmitted to a server of the provider within the EU and stored there. The IP addresses are shortened on these servers. A correspondingly pseudonymized data set is transmitted to the USA.
The service transfers personal data to the USA. The EU Commission has decided that this country offers an adequate level of data protection (TADPF). The service has submitted to the TADPF.
You can also prevent the cookies generated by this service from being saved by making the appropriate settings in your web browser. We would like to point out that in this case you may not be able to use all the functions of our website. If you wish to prevent the collection of data generated by the cookie and related to your user behavior (including your IP address) and the processing of this data by the provider of the service, you can also download and install the web browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
In order to oblige the provider of this service to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing contract with the provider.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.de/
XV Google Fonts
We use the service on our website.
The service enables us to use external fonts. For this purpose, the required font is loaded into the browser cache by your web browser when you access our website. This is necessary so that your browser can display a visually improved presentation of our texts. If your browser does not support this function, a standard font is used by your computer for display. These fonts are integrated by a server call to one of the provider’s servers. This tells the server which of our web pages you have visited. The IP address of your device’s browser is also stored by the provider. We have no influence on the scope and further use of the data that is collected and processed by the provider through the use of the service.
We use the service for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly.
The service transfers personal data to the USA. The EU Commission has decided that this country offers an adequate level of data protection (TADPF). The service has submitted to the TADPF.
The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.de/
XVI Google Tag Manager
We use the service on our website.
The service enables us as marketers to manage website tags via an interface. The tool that implements the tags is a cookie-less domain and does not collect any personal data itself. The service triggers other tags, which in turn may collect data. The service does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with the service.
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.de/
https://policies.google.com/privacy?hl=de&gl=de
XVII Gravatar
We use the service on our website.
The service stores and processes information about your user behavior on our website. For this purpose, the service uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device and that enable an analysis of your use of our website.
We use the service to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. By statistically evaluating user behavior, we can improve our offer and make it more interesting for you as a user. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
The service transfers personal data to the USA. The EU Commission has decided that this country offers an adequate level of data protection (TADPF). The service has submitted to the TADPF.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Provider:
Aut O’Mattic A8C Ireland Ltd.
Grand Canal Dock, 25 Herbert Pl
D02 AY86 Dublin
Ireland
https://automattic.com/
https://automattic.com/privacy/
XVIII Podigee
We use the service on our website.
When you access a website in which media content from the provider is integrated, data is transmitted to a server of the provider and stored there. If you have a user account with the provider and are registered, the provider can assign the visit to your user account. The provider stores this data as a user profile and uses it for the purposes of advertising, market research and/or the needs-based design of its websites. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles. Please contact the provider directly.
We integrate the provider’s content on the web pages of our website in order to make this content directly available to you without you having to access the content separately on the provider’s pages. This allows us to improve our offer and the user experience for you and make it more interesting.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Supplier:
Podigee UG (haftungsbeschränkt)
Am Walde 2
56249 Herschbach
https://www.podigee.com/
https://www.podigee.com/de/about/privacy/
XIX Vimeo
We use the service on our website.
When you access a website in which media content from the provider is integrated, data is transmitted to a server of the provider and stored there. If you have a user account with the provider and are registered, the provider can assign the visit to your user account. The provider stores this data as a user profile and uses it for the purposes of advertising, market research and/or the needs-based design of its websites. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles. Please contact the provider directly.
We integrate the provider’s content on the web pages of our website in order to make this content directly available to you without you having to access the content separately on the provider’s pages. This allows us to improve our offer and the user experience for you and make it more interesting.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Provider:
Vimeo.com, Inc.
555 West 18th Street
New York 10011 New York
United States
https://vimeo.com/
