We process your personal data exclusively on https://academy.amanngirrbach.com/ within the provisions of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz, DSG). In this statement you will find all relevant information about the type, extent, and purpose of the collection and use of personal data.
2. Data processing
a. Registration and enrollment for courses/webinars via the Academy
We process your personal data (name, contact details, profession, password) provided in the course of registration on our Academy platform for the purpose of creating an account, organizing the enrolled online courses and webinars and informing you about relevant circumstances regarding your registration or your account. Data processing is performed for the fulfillment of (pre-)contractual obligations to you pursuant to Art. 6 Sec. 1 lit. b GDPR and on the basis of our predominantly legitimate interests pursuant to Art. 6 Sec. 1 lit. b GDPR. If you do not provide us with all the obligatory information during the registration process, we will not be able to provide you with our services.
We delete your data after 24 months.
b. Issuing of further education certificates
Insofar as you participate in courses and webinars for which ADA CERP continuing education credits are awarded, we will also process your quiz results in addition to your data relating to registration and enrollment. This is performed for the fulfillment of (pre-)contractual obligations to you pursuant to Art. 6 Sec. 1 lit. b GDPR.
We store these data for a period of 6 years.
c. Processing of communication in the chat
You have the opportunity of communicating with the instructors via the chat during the online courses and webinars. We store the communication history including your registration data for a maximum of six months to be able to answer any follow-up questions. Processing is based on the fulfillment of the contract according to Art. 6 Sec. 1 lit. b GDPR as well as on our predominantly legitimate interests in high-quality seminars, taking into account the open questions of the participants.
d. Direct marketing activities
Insofar as you have consented to receiving promotional information by e-mail or telephone as part of the registration process, we will process the contact data you have provided (address, e-mail address, telephone, fax) for the following purposes:
Regular news about products and current product offers from us as well as from the partner companies named in the consent. This also includes customer satisfaction surveys and communications about current competitions and social media campaigns. The frequency of the mailings depends on the offers, competitions and campaigns that are available.
To optimize and personalize the notices you receive by email, AG checks when and how often they are opened by the recipients and which links are clicked on.
You also consent that we may personalize the mailings based on these data and tailor them to your personal interests. To do this, we may also use the following information:
- personal contact data
- information about the company in which you are employed
- any products purchased and made inquires about from Amann Girrbach
- any stated areas of interest
You can revoke your consent at any time without giving reasons, free of charge and with effect for the future.
e. Analytic tools, advertising & cookies
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool which allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It is only used for the administration and execution of its integrated tools. However, the Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States.
The use of the Google Tag Manager is based on Art. 6 Sec. 1 lit. a GDPR.
This website uses functions of the Google Analytics web analysis service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyze the behavior of visitors to the website. Here, the website operator receives various usage data, for example, accessed pages, duration of visit, operating systems used and the origin of the user. These data may be summarized by Google in a profile which is assigned to the respective user or his/her end terminal.
Google Analytics employs technologies which enable recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information recorded by Google about the usage of this website is usually transferred to a Google server in the USA and saved there.
The use of this analytical tool is based on Art. 6 Sec. 1 lit. a GDPR.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Apart from being able to revoke your consent at any time, you can also prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Duration of storage
Data stored by Google at the user and event level which is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de
The data generated with etracker are processed and stored by etracker on behalf of the provider of this website exclusively in Germany and are thus subject to the strict German and European data protection laws and standards. etracker has been independently audited and certified in this regard and been awarded the ePrivacyseal data protection seal of approval.
Data processing is performed on the basis of the legal provisions of Art. 6 Sec. 1 lit. a GDPR.
Further information on data protection at etracker can be found here.
LinkedIn Insight Tag
This website uses the Insight tag from LinkedIn. The provider of this service is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Data processing by LinkedIn Insight Tag
By using the LinkedIn Insight Tag, we receive information about visitors to our website. If a visitor to the website is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g., career level, company size, country, location, industry, and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, we can use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take any other action (conversion measurement). Conversion measurement can also be performed across devices (e.g. from PC to tablet). The LinkedIn Insight Tag also provides a retargeting feature which allows us to display targeted off-site advertising to the visitors of our website, whereby, according to LinkedIn, there is no identification of the advertising addressee.
LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser characteristics and the time of access). The IP addresses are shortened or (if used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data are then deleted within 180 days.
The use of LinkedIn Insight is based on Art. 6 Sec. 1 lit. a GDPR.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.
Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in the account settings. To avoid a link between data collected on our website by LinkedIn and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
Conclusion of an agreement for contract processing
We have concluded a contract processing agreement with LinkedIn.
We use Hubspot on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (referred to in the following as Hubspot).
Among other things, Hubspot allows us to administrate existing and potential customers as well as customer contacts. With the aid of Hubspot, we are able to record, sort and analyze customer interaction via e-mail, social media or telephone across different channels. The thus collected personal data can be analyzed and used for communication with the potential customer or for marketing activities (e.g. newsletter mailings). Hubspot further enables us to collect and analyze the user behavior of our contacts on our website.
The use of Hubspot is based on Art. 6 Sec. 1 lit. a GDPR.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield.
Agreement on contract processing
We have concluded a contract processing agreement with Hubspot. This is a contract required by data protection law, which ensures that Hubspot only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Cookie consent with Cookiebot
Our website uses Cookiebot's cookie consent technology to obtain your consent for the storage of specific cookies on your end terminal and to document this in accordance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (referred to in the following as "Cookiebot").
The use of Cookiebot is based on your consent. The legal framework for this is Article 6 Sec. 1 Sentence 1 lit. a of the GDPR.
Agreement on contract processing
We have concluded a contract processing agreement with Cookiebot. This is a contract required by data protection law, which ensures that Cookiebot only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
3. Data transfer
We also transfer your personal data to external subcontractors or service providers to the extent necessary:
- to IT service providers and/or data hosting or data processing providers;
- to other service providers, providers of tools and software solutions that also support us in the provision of our services and work on our behalf;
- to possible third parties involved in the fulfillment of our obligations to you;
- to other external third parties to the extent necessary (e.g. auditors, insurance companies in the event of insurance claims, legal representatives if required, etc);
- to authorities and other public bodies, insofar as this is required by law (e.g. tax authorities, etc.).
If we process data outside the EU/EEA, we take appropriate safeguards to ensure the protection of your data.
4. Rights of data subjects
Upon request, we will provide you with information at any time about all your personal data which we process. In addition, in certain cases you also have a right to data portability and thus the surrender of your personal data disclosed to us in a structured, common and machine-readable format.
Under certain conditions, you may also request the restriction of processing as well as the correction and deletion of your personal data.
You can revoke your consent at any time without giving reasons with effect for the future. Until then, we process your data legally.
As a data subject, you may object to the use of your data at any time if processing is performed for direct marketing purposes (e.g. postal mailing). Insofar as we process your data in our interest or in the interest of a third party, you additionally have the right to object at any time if reasons arise from your particular situation.
More information about your rights and the applicable restrictions, can be found at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.
In certain jurisdictions (e.g. Portugal) you also have the right to determine who may exercise your rights after your death (otherwise this will be your heirs) and/or to determine that these should not be exercised and/or to give instructions about the further processing of your personal or sensitive data (sensitive data, data about your private life, images and data related to communication)
You further have the right to complain to the competent data protection authority. The competent authority for the respective country can be found here: https://edpb.europa.eu/about-edpb/board/members_en.