ºÚÁϳԹÏÍø

With this data privacy policy we inform you about how we process personal data. The protection of your privacy is of the utmost importance to us, so it goes without saying that we comply with the legal provisions on data protection.

Our data protection declaration applies to the following domains:

Names and Contact Details of those Responsible

HSBA ºÚÁϳԹÏÍø gGmbH
Represented by Prof. Dr. Tim Goydke
Willy-Brandt-Straße 75
20459 Hamburg
Germany

Data Security Officer

Should you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, you can contact us and our Data Security Officer as follows:

External Data Security Officer

Claudia Albrecht
PRW Consulting GmbH
Leonrodstr. 54
80636 München
Phone: (0 89) 21 09 77-70

Any queries or concerns related to your data should be addressed to datenschutz(at)hsba.de.

If you wish to communicate directly with our Data Security Officer (for example, because you wish to address a particularly sensitive matter), please establish contact by telephone or postal service as communication by e-mail may have security gaps. Please state in your request that your concern relates to the company HSBA ºÚÁϳԹÏÍø.

Personal Data

Personal data describe all information about an identified or identifiable person. This includes the following categories of personal data that HSBA processes:

• Your contact details (such as first and last name, address, e-mail address, telephone number)
• Your date of birth, place of birth, country of birth, nationality, gender
• Your mother tongue and additional language certificates for English and, if applicable, German (for non-native speakers)
• Your CV
• an up to date profile photo for your student ID card and for an HSBA-internal profile for teaching staff
• Your university entrance qualification
• Awards (such as diplomas and certificates)
• Identification numbers (such as social security number, tax number, tax ID, passport or ID card number, insurance numbers, matriculation number)
• Payment data (such as account number, credit card number, financial institution)
• Your correspondence with us (e.g. in regards to examinations, questions to the Service Office)
• Customer data (such as invoice data, user profiles, address, order history, payment data)
• Online identifiers (such as cookie IDs, advertising IDs)
• Log files with information about your visit to our website

Usage of Cookies

General Information on Cookies:

A cookie is a text file containing an identification number which, when the website is used, is transmitted to the user's computer together with the other data actually requested and stored there. The file is kept there for later access and serves to authenticate the user. As cookies are only simple files and not executable programmes, they pose no risk to the computer.

Depending on the user's selected Internet browser settings, the user automatically accepts cookies. However, this setting can be changed and the storage of cookies can be deactivated or set so as to notify the user as soon as a cookie is set. If the use of cookies is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by changing your Internet browser settings, thus permanently disabling the setting of cookies.

Cookies that are already active can be deleted at any time using an Internet browser or other software programs. Please note that we may work together with advertising partners who help us to make our jonline offering more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (cookies from third parties).

Session Cookies:

Session cookies are used for the duration of a session and are automatically deleted when the executing browser is closed. They ensure, for example, that video and audio files can be played, that your user input is temporarily stored during the input time and thereby improving user-friendliness.

Persistent Cookies:

Persistent cookies remain on your end device once the browser has been closed. These cookies can, for example, save your user preferences, such as language settings, and analyse user behaviour on our website. Storage duration of persistent cookies corresponds to the respective duration of the individual cookie. Afterwards they are automatically deleted.

Our Cookie Policy:

/en/cookie-info/

Use and Purpose

We process your data for the following purposes:

• to correspond with you (e.g. for important information on your studies)
• to provide services (e.g. Microsoft Office, Microsoft Teams, etc.)
• to process contracts with you (e.g. studies, training, employment)
• for consideration and processing of your application
• to provide our services (e.g. administration and fulfilment of the study contract)
• to improve our service
• to assure quality and provide statistics
• for advertising purposes (such as our newsletter, information on events, etc.)
• to enable your participation in our competitions
• to enable your participation in our events
• to enable your participation in our surveys

Legal Foundation

We base the processing of your data on the following legal bases:

• your consent, if you have given us such consent (Art. 6 para. 1 lit. a) GDPR)
• the initiation or execution of a contract with you (Art. 6 para. 1 lit. b) GDPR
• the fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR
• the implementation of our legitimate interests (Art. 6 para. 1 lit. f) GDPR

Legitimate Interests

When processing your data, we pursue the following legitimate interests:

• the improvement of our offering
• the protection of our systems against misuse
• the production of statistics
• Marketing purposes
• the storage of our correspondence with you

Requirement or Obligation to Provide Data

Unless this is expressly stated, the provision of your data is not required or obligatory.

Sources of Data

In the case that we do not receive the data from you directly, or about the device you use, it comes from the following sources:

• Data of companies and self-employed people from publicly available official sources
• Data on B2B contacts of specialised service providers
• Data from trade fairs, portals, registration lists for joint events
• Research of publicly available data (imprint, memberships of industry associations etc.)

Duration of Storage

We store your data,

• if you have consented to the processing, at most until you revoke your consent;
• if we require the data for the execution of a contract, at most for as long as the contractual relationship with you exists;
• if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh our own;
• if there are legal obligations to retain data, until the end of such retention periods.

Groups of Data Recipients  

When processing your data, we work together with service providers and companies of the following categories who have access to your data

• Our cooperation partners for the allocation of study places (potential employers as part of the dual study programme)
• Our cooperation partners for scholarships of the Junge Akademie
• Partner institutions
• Libraries
• Provider of web analysis tools
• Web hosting and web development providers
• Service provider for IT development services
• Marketing and advertising agencies
• Sales service provider
• Payment service provider
• Receivables management and collection service provider
• Call Center
• Email and newsletter provider
• Service provider for editing and translations
• CRM system service provider
• Cloud services
• Conference and Webinar Software
• Service provider for online surveys
• Social media platforms
• Service provider for bookkeeping and invoicing

Recipients of data

When processing your data, we work together with the following service providers who have access to your data:

Calendly

We use Calendly, a tool from Calendly, LLC, BB&T Tower 271 17th St NW, Atlanta, GA 30363, United States of America, to schedule, prepare and follow up on appointments. Therefore, we process data from you such as log data, IP address, first and last name, title, position, employer, contact information (company, e-mail, phone, business address), connection data, localization data, other data in an electronic form used by user in the context of Calendly services. To object / To revoke your consent, please send us an email to datenschutz(at)hsba.de. For more information visit: .

CleverReach

To send out our newsletter we use the services of the third party CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. Using their services enables us to analyse the newsletter usage, e.g. the number of actually opened newsletters or whether a purchase was made on our website after a link in the newsletter has been clicked (conversion tracking). The data you enter to receive newsletters is transmitted to CleverReach.

Privacy policy of CleverReach:

To object to the collection of data, you must unsubscribe from the newsletter using the link in the e-mail you receive or you can use these forms:

HSBA Newsletter: 

Bachelor Newsletter: 

Master Newsletter: 

Eventbrite

We use the service of Eventbrite DE GmbH, Oranienstr. 25, 10999 Berlin, Germany, for the execution of our events and webinars. When you register with Eventbrite, we generally collect your first and second name and your email address. By registering through the service, you enable us to send you all the information you need via email, for example, to attend a webinar or event. To object to or withdraw your consent, please send us an email to datenschutz(at)hsba.de.

For more information, please visit the provider's privacy policy:

Facebook Custom Audience

On our website we use the services of Facebook Custom Audience of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland which is integrated via the Facebook pixel. When you visit our website, a direct connection is established to the Facebook servers, informing which of our pages you have visited. If you are logged in on Facebook, this data is assigned to your personal Facebook account by Facebook. The service further lets us determine whether the user was directed to our site by clicking on one of our Facebook ads. This helps us to display our advertisements ("Facebook Ads") only to users who have an interest in our offering thereby optimising them.

Facebook's Privacy Policy:  

If you are registered and logged in on Facebook, you can edit your advertising preferences under your profile, in "Settings" under "Advertising settings".

Facebook Lookalike Audience

We use Facebook Lookalike Audience of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to display interest-based advertising for our offering. Through our custom audience, Facebook uses the data collected there to determine a target audience whose interests are similar to those of the custom audience, so that our advertising is displayed to them.

Facebook's privacy policy:  

If you are registered and logged in on Facebook, you can edit your advertising preferences under your profile, and under "Settings" and "Advertising settings".

Facebook Social Media Plugin

Our website integrates social media plugins from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. You can recognise these by the "thumbs up" button or the blue "f" logo.

A list of Facebook plugins can be found here:

By visiting our website a connection to the Facebook servers is established. If you are logged in on Facebook, Facebook can assign the visit to our website to your user account. If you interact with the plugin (e.g. clicking the "thumbs up" button), Facebook will assign this to your profile and save it. We have no influence on the scope and content of the data collected by Facebook.

Facebook's data usage policy:  

To prevent the assignment of the collected data to your profile, you must log out of your account.

GetResponse

We use the GetResponse MAX service from GetResponse S.A. (Polish limited liability company), Grunwaldzka 413 80-309, Gdansk, Poland, to send our newsletter. This allows us to use data to analyse newsletter usage, e.g. the number of newsletters actually opened or which page was opened after clicking on a link in the newsletter (conversion tracking). The data you enter to receive the newsletter is transmitted to GetResponse.

Data protection provisions of GetResponse:

To object or to withdraw your consent, please send an email to datenschutz(at)hsba.de.

Google Ads

We use on our website the Google Ads service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. If you access our website via a Google ad, a cookie is installed for 30 days, which enables us to record the actions on our website after clicking on our ad. This helps us to analyse and optimise our campaigns and to display advertising that is relevant to our customers' interests.

Privacy policy of Google:  

You can object to the collection and storage of data by Google. If you have a Google Account, you can deactivate personalised advertising here:

Google AdSense

On our website we use the Google AdSense service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Cookies are used to collect data in order to analyise user behaviour on our or third party websites to display interest-based advertising.

Google's privacy policy:  

You can object to the collection and storage of data by Google at any time with future effect.  If you have a Google Account, you can deactivate personalised advertising here:

Google Analytics

We use the Google Analytics service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Cookies are used to collect and analyse usage data on our website  to optimise and improve our services. We use the anonymisation extension "_anonymizeIp()" for the anonymised recording of the IP address.

Privacy policy of Google:  

You can object to the collection and storage of data by Google at any time with effect for the future. To do so, follow this link and install the add-on:

or 

Google Remarketing

On our website we use the Google Remarketing service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland.  Cookies are used to collect data which analyse the user behaviour of interested parties of our or third party websites. If you continue your internet activity, we can then offer you further targeted advertising.

Privacy policy of Google:  

You can object to the collection and storage of data by Google at any time with future effect. If you have a Google Account, you can deactivate personalised advertising here:

Google Tag Manager

On our website we use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The service is designed to manage website tags through a user interface and does not collect any personal information itself. Under certain circumstances, tags triggered by the service may collect data.

Google's privacy policy:

Hotjar

We use the Hotjar service of Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. Cookies are used to collect and analyse data on user behaviour on our website in order to optimise and improve our website offer.

Hotjar's privacy policy:  

You can object to the collection and storage of data by Hotjar at any time with effect for the future. To do so, please follow this opt-out link:

Instagram Plugin

Social media plug-ins from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA are integrated on our website. These can be identified by the Instagram "camera" logo. A list of the plugins can be found here:

By visiting our website, a connection to the Instagram servers is established. If you are logged in on Instagram, Instagram may associate your visit to our website with your user account. If you interact with the plugin (e.g. clicking the "camera" button), Instagram will associate this with your profile and save it.

We have no control over the scope and content of the data collected by Instagram.

Instagram Privacy Policy:  

To prevent the assignment of the collected data to your profile, you must log out of your account.

Jotform

We use the Services of Jotform.com (Jotform Inc. 4 Embarcadero Center, Suite 780, San Francisco CA 94111, USA).

The purpose of the use is the creation of online forms on our website. Therefore, depending on the form used, we process your name, e-mail address, telephone number, postal address, dates of birth and information about your school performance. To object to or withdraw your consent, please send us an email to datenschutz(at)hsba.de. For more information, please visit .

LinkedIn Conversion Tracking

We use LinkedIn conversion tracking from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Cookies are used to collect data to analyse user behaviour on our or third party websites in order to display interest-based advertising.

LinkedIn's privacy policy:  

You can object to the collection and storage of data by LinkedIn at any time with future effect. To do so, please follow this opt-out link:

LinkedIn Plugin

Our website integrates social media plug-ins from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You may recognise these by the blue highlighted "in" logo. When you visit our website, a connection to the LinkedIn servers is established. LinkedIn furthermore receives the information that you have visited our site with your IP address.  If you are logged in on LinkedIn, LinkedIn may associate your visit to our website with your user account. If you interact with the plugin (e.g., clicking the "in" button) and you are logged in, LinkedIn will associate that interaction with your profile and store it. We have no influence on the scope and content of the data collected by LinkedIn.

Privacy policy of LinkedIn:

To prevent the assignment of the collected data to your profile, you must log out of your account. You can also object to the data collection by LinkedIn. Please follow this opt-out link: 

LinkedIn Website Retargeting

On our website we use LinkedIn Website Retargeting from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Cookies are used to collect data which analyse the user behaviour of interested parties of our or third party websites. If you continue your Internet activity, we are able to address you again with our advertising in a targeted manner.

LinkedIn's privacy policy:  

You may object to the collection and storage of data by LinkedIn. To do so, please follow this opt-out link: 

Microsoft Advertising (Bing Ads)

We use Bing Conversion Tracking provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA for marketing and tracking purposes. If you have clicked on a Bing ad, a cookie is set, which enables Microsoft Bing and us to recognize that someone has clicked on an ad, has been redirected to our website and has reached a previously determined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. In addition, your encrypted IP address is collected. No personal information about the user's identity is shared.

To disable Bing, please click on this link: 

Microsoft's privacy policy can be found here: 

Microsoft Dynamics 365 (CRM)

We use Microsoft Dynamics 365 (CRM) from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to manage and maintain customer relationships, marketing, track sales leads and their status, and provide utilizable data. Therefore, we process the following data from you such as your sign-in information, name and contact information, device and usage information, your contacts, information about your activities, diagnostic data, and the contents of your communications and files associated with your account. To object / To revoke your consent, please send us an email to datenschutz(at)hsba.de. For more information visit the privacy policy: .

Microsoft Forms

We use Microsoft Forms from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to create forms, surveys and polls. Therefore, we process the following data from you such as content of the forms, surveys, name, e-mail, log files, cookies. To object / To revoke your consent, please send us an email to datenschutz(at)hsba.de. For more information visit the privacy policy: .

Microsoft Teams

We use the Microsoft Teams service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, through which meetings and/or webinars (hereinafter "Online Meetings") can be held. We use Microsoft Teams to enable digital lectures and meetings. During an online meeting, your personal data may be processed in the form of video or audio. However, you can decide for yourself whether your camera and microphone are switched on or off. Furthermore, it is up to you to share content or not, and you can stop sharing at any time. If you participate in the chat function, we process your personal data contained in the chat texts and the other participants are also aware of this content. If you dial into the online meeting by telephone, we process your telephone number. Your IP address is stored in log files of the servers. HSBA may record any online meeting. In such a case you will be informed about the recording. After the online meeting, the recording will be saved in Microsoft Stream and we can share the recording with other participants.

To object or to revoke your consent, please send us an email to datenschutz(at)hsba.de.

For more information please visit the provider’s privacy policy:

reCaptcha

We use the reCaptcha service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The service determines whether the input to an internet form is performed by a bot or other automated processing or by a human being. Your IP address, which is shortened for anonymisation, and data required for reCaptcha are transmitted to Google, whereby no combination of other data from Google takes place.

To the privacy policy of Google:

SoundCloud

Social media plugins from SoundCloud Limited, Rheinsberger Straße 76/ 77, 10115 Berlin, Germany, are integrated on our website. These can be identified by the orange "clouds" logo. When you visit our website, a connection to the SoundCloud servers is established. SoundCloud also receives information that you have visited our site using your IP address. If you are logged in on SoundCloud, SoundCloud can attribute your visit to our website to your user account. If you interact with the plugin (e.g. clicking the "play" button), SoundCloud will assign this to your profile and save it. We have no influence on the scope and content of the data collected by SoundCloud.

Privacy policy of SoundCloud:

To prevent the assignment of the collected data to your profile, you must log out of your account.

Spotify

Our website integrates social media plugins from Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden. You can recognize them by the Spotify logo with a green background. You can find a list of the plugins here: //developer.spotify.com/branding-guidelines/. When you visit our website, a connection to the Spotify servers is established. Spotify also receives information that you have visited our site using your IP address. If you are logged in to Spotify, Spotify may associate your visit to our website with your user account. If you interact with the plugin (e.g. clicking the "Play" button), Spotify will assign this to your profile and save it. We have no influence on the scope and content of the data collected by Spotify.

Privacy policy of Spotify:

Spreadshop

We use Spreadshop from sprd.net AG, Gießerstraße 27, 04229 Leipzig, Germany, to create and manage our online shop. Therefore, we process the data from you such as log data (e.g., IP address, Date and time of the request, the page from which you are visiting us, your operating system and its interface, your browser type as well as language and version of the browser software), contact details, payment details, username. To object / To revoke your consent, please send us an e-mail to datenschutz(at)hsba.de. For more information visit the privacy policy: .

TYPO3

We use TYPO3 a system from TYPO3 GmbH, Emanuel-Leutze-Str. 11 40547 Düsseldorf Germany, to fulfill our daily tasks regarding planning, creation and publishing of content, up to intelligent workflows, digital resource management as well as search engine optimization. Therefore, we process data from you such as browser settings, operating system, or time the site was accessed, IP address. To object / to revoke your consent, please send us an e-mail to datenschutz(at)hsba.de. For more information visit the privacy policy: .

XING PlugIn

Social media plug-ins from XING AG, Dammtorstrasse 30, 20354 Hamburg, Germany, are integrated into our website. These can be identified by the "x" logo. When you visit our website, a connection is established with the XING servers. XING also receives information ton your IP address. If you are logged on to XING, XING can assign the visit to our website to your user account. If you interact with the plugin (e.g. by clicking the "X" button) and you are logged in, XING will assign this to your profile and save it. We have no influence on the scope and content of the data collected by XING.

Privacy policy of XING:  

To prevent the assignment of the collected data to your profile, you must log out of your account. You can also object to the collection of data by XING. Please follow this opt-out link: 

YouTube

Our website integrates social media plugins from YouTube, a company of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland („Google“). By visiting our website a connection to the YouTube servers is established. We use the "enhanced privacy mode" provided by YouTube to do this. According to YouTube, for example, the information that you have visited our site using your IP address is only transmitted to Youtube when you interact with the plugin (e.g. clicking on an embedded video). If you are logged in on YouTube, YouTube can assign the visit to our website to your user account. If you interact with an embedded video, for example, YouTube will assign this to your profile and save it. We have no influence on the scope and content of the data collected by YouTube.

Privacy policy of Google:

To prevent the assignment of the collected data to your profile, you must log out of your account.

Zapier

We use the services of Zapier (Zapier, Inc., 548 Market St. #62411, San Francisco, CA 94104-5401, USA).

Zapier is a service by means of which we can link actions between different apps, synchronize applications with each other and enable an automated workflow between apps. Therefore, we process your Name, email address, IP address, phone number and website visit details. To object or to revoke your consent, please send us an e-mail to datenschutz(at)hsba.de. For more information, please visit .

Zoom

We use the Zoom service from Zoom Video Communications, Inc. 55 Almaden Blvd, Suite 600,

San Jose, CA 95113, USA, through which meetings and/or webinars (hereinafter "Online Meetings") can be held. During an Online Meeting, your personal data may be processed in the form of video or audio. However, you can decide for yourself whether the camera and microphone are switched on or off. Furthermore, it is up to you whether or not to share content, and you can stop sharing content at any time. If you participate in the chat function, we process your personal data contained in the chat texts and the other participants are also aware of this content. If you dial into the online meeting by telephone, we process your telephone number. Your IP address is stored in log files of the servers. HSBA may record the online meeting. In such a case you will be informed about the recording. After the online meeting, the recording can be stored in the cloud of Zoom, where we can share the recording with other participants.

To object or to revoke your consent, please send us an e-mail to datenschutz(at)hsba.de.

For more information, please visit the provider's privacy policy: .

Transfers to Third Party Countries

Data is transferred to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other suitable guarantees, such as certification or proven compliance with international security standards.

Your Rights

As a data subject, you have the following rights:

• to request information on the processing of your data and to receive a copy of your personal data. You can request information on, among other things, the purposes of the processing, the categories of personal data processed, the recipients of the data (if a transfer is made), the duration of the storage or the criteria for determining the duration;
• to receive or transmit the personal data concerning you in a structured, common and machine-readable format or to have it transmitted to another responsible
• to correct your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
• have your data deleted or blocked.
• have the processing of your data restricted;
• oppose the processing of your data;
• withdraw your consent to the processing of your data for the future; and
• complain to the supervisory authority about unauthorised data processing.

Validity of this Data Privacy Statement

If our processes change, we adjust this information.

This privacy policy is valid as of: 22.01.2024