Privacy Policy

This Privacy Policy governs the manner in which the School collects, uses, maintains and discloses information collected from users (each, a “Student”) of the School. This Privacy Policy applies to the School and all Courses offered by the School.

Data Protection Notice

Controller
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Dr. Daniel Mühlbauer
Wittelsbacher Allee 70
82140 Olching
Daniel(at)hr-datenliebe.de

Personal identification information

We may collect personal identification information from Students in a variety of ways, including, but not limited to, when Students enroll in the School or a Course within the School, subscribe to a newsletter, and in connection with other activities, services, features, or resources we make available in our School. Students may visit the School anonymously. We will collect personal identification information from Students only if they voluntarily submit such information to us. Students can refuse to supply personal identification information but doing so may prevent them from engaging in certain School related activities.

We process your personal data on the following legal bases:

(1) contractual necessity (to fulfill our obligations in providing the course),
(2) your consent (for newsletters), and
(3) legitimate interests (e.g., improving our services).

We retain personal data as long as necessary to provide our services to you and fulfill the purposes outlined in this Policy. We will also retain and use personal data to the extent necessary to comply with legal obligations, resolve disputes, and enforce our agreements. After that, the data is securely deleted.

How we use collected information

The School may collect and use Students’ personal identification information for the following purposes:

  • To improve customer service
    Information you provide helps us respond to your customer service requests and support needs more efficiently.
  • To personalize user experience
    We may use information in the aggregate to understand how our Students as a group use the services and resources provided in our School.
  • To send periodic emails
    We may use Student email addresses to send Students information and updates pertaining to their order. Student email addresses may also be used to respond to Student inquiries, questions, or other requests.

EU data subjects have the right to access, rectify, or erase their personal information, as well as to restrict or object to certain processing. You also have the right to data portability.

Using the contact details provided, you can exercise the following rights at any time in accordance with the EU General Data Protection Regulation (GDPR):

  • Right of access to the data we store about you and how we process it (Art. 15 GDPR)
  • Right to rectification of inaccurate personal data (Art. 16 GDPR)
  • Right to erasure of the data we store about you (Art. 17 GDPR)
  • Right to restriction of processing, if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
  • Right to object to the processing of your data by us (Art. 21 GDPR)
  • Right to data portability, provided you have consented to data processing or have entered into a contract with us (Art. 20 GDPR)

If you have given us consent, you can revoke it at any time with effect for the future.

You may also file a complaint with a supervisory authority at any time—for example, with the supervisory authority responsible for the federal state where you reside or with the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with their addresses can be found at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Sharing your personal information

We do not sell, trade, or rent Student personal identification information to others.

Provision of Paid Services

Nature and Purpose of Processing
We process the data you provide in the course of an order for the purpose of fulfilling and handling your order. This also includes returns, exchanges, and complaints.
Your personal data is used only to the extent necessary to process the order and deliver the requested products and services.

Legal Basis
The processing of the data required for the conclusion of a contract is based on Art. 6(1)(b) GDPR.

Recipients
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.
To fulfill the contract, we pass on your name and address to the shipping company responsible for delivery, where this is necessary to deliver ordered goods.
Depending on which payment service provider you choose during the order process, we will transmit the payment data collected for this purpose to the bank in charge of the payment and, if applicable, to any payment service providers we have commissioned.

Storage Duration
We store these data in our systems until the statutory retention periods expire. Generally, these are 6 or 10 years for proper bookkeeping and tax purposes.

Transfer to Third Countries
The collected data may be transferred to the following third countries:

  • USA

Provision Mandated or Required
Providing your personal data is contractually required. Without providing it, we cannot execute the order.

Creating a Customer Account

Nature and Purpose of Processing
On our website, you have the option to create a customer account. We record your contact details and link your purchases to your account.
In addition to the data you provide, the following data will be stored at the time the customer account is created:

  • Name
  • Email
  • Date
  • Last login

Legal Basis
The processing of data entered during registration is based on the user’s consent (Art. 6(1)(a) GDPR).

Recipients
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Storage Duration
Data is processed in this context only as long as the corresponding consent exists.

Transfer to Third Countries
The collected data may be transferred to the following third countries:

  • USA

Provision Mandated or Required
Creating a customer account is voluntary. It may be beneficial for fulfilling a contract with you or for carrying out pre-contractual measures, but it is not required. You can place orders as a guest at any time.

Withdrawal of Consent
You can request the deletion of your customer account at any time by contacting us at the address provided below.

Third party websites

Student may find advertising or other content in our School that link to the websites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these websites and are not responsible for the practices employed by websites linked to or from our School. In addition, these websites or services, including their content and links, may be constantly changing. These websites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Student, is subject to that website's own terms and policies.

If we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision from the European Commission.

Changes to this Privacy Policy

The School has the discretion to update this Privacy Policy at any time. We encourage Students to frequently check this page for any changes. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of modifications.

Your acceptance of these terms

By enrolling in the School, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not enroll in the School. Your continued enrollment in the School following the posting of changes to this Privacy Policy will be deemed your acceptance of those changes.

If you have any questions about this Privacy Policy or wish to lodge a complaint, please contact

Dr. Daniel Mühlbauer, Wittelsbacher Allee 70,
82140 Olching,
daniel(at)hr-datenliebe.de.

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.