Protecting your personal data and therefore your privacy is a top priority for our institution. With this privacy statement, we would like to inform you which data HHL Leipzig Graduate School of Management (HHL gemeinnützige GmbH) collects and processes when you visit and use its website.
Responsible authority in accordance with the Data Protection Act:
HHL Leipzig Graduate School of Management
T: +49 (0)341 9851-60
1. Purpose of collection
HHL processes personal data solely to pursue its own business purposes. Personal data is processed solely to the extent which is required to render or provide the services you have ordered. Your personal data will not be forwarded to third parties without your express consent.
2. Collecting general information
When you visit our website, information of a general nature is automatically collected. This relates to details about your browser, operating system, internet service provider, time of access, IP address and similar information. None of the collected information can be used to identify you directly.
The collected information is used for the statistical evaluation, maintenance, safety and optimization of the website.
Regarding the storage, we observe the general regulations for deletion and the principles of data avoidance and minimization. According to these, personal data is deleted when the purpose of continued storage ceases to exist and there is no more reason to store personal data.
3. Personal data
Personal data is information with which a natural person is or can be clearly identified. This relates to details of personal or material circumstances which allow for a direct identification of an individual.
We process personal data only insofar as the data protection regulations will allow us. When doing so, we strive to comply with all necessary technical and organizational measures to appropriately ensure the safety of your personal data and protect against unauthorized access or misuse.
If we process personal data, we use security measures such as firewalls, encryption technology and physical access barriers for the IT department. We take the necessary precautions using state-of-the-art technology to minimize the risk of manipulation, unauthorized access, data loss etc.
4. Contacting us
If you contact us via the contact form or e-mail, your data will be stored in order to process the inquiry and any subsequent questions. Please note that this information is transmitted unencrypted. Your data will not be forwarded to third parties without your consent.
We use cloud-based services to process personal data during the admission and study process. Agreements in accordance with section 11 of BDSG have been concluded with the provider of these services (Salesforce) regulating the processing of the data as well as allowing for processing outside the scope of the EU Data Protection Directive. Due to sovereign authorities outside the EU being able to access to your data, we recommend that you do not upload particularly sensitive data (in accordance with section 3, paragraph 9 of BDSG) to the system but instead send them to your contact person vial e-mail.
By confirming you have read and accepted our Terms and Conditions and the Privacy Statement, your consent to the processing of personal data as described above will be logged. The consent may only be revoked with effect for the future. At this stage, we can only assure logical deletion of the data stored so far. Revoking your consent will be accompanied by further limitations during the application and study process of which we will gladly inform you on a case-by-case basis. Salesforce participates in the EU-U.S. Privacy Shield Framework. For further information, please visit www.privacyshield.gov/participant;
5. Integration of third-party services and content
At times, we also integrate third-party content into our online offer. This includes, among other things, graphics from other websites or Google Maps. These third-party providers will be notified of your IP address; otherwise the content could not be displayed. We do not have any influence on whether the third-party providers store your e-mail address (e.g., for statistical purposes) but we seek to only use images where no such data is stored. As soon as we learn about IP addresses being stored, we will inform the user of this circumstance.
6. Registration feature
If you wish to use our offer, we require the data which you submitted during the registration process. The data entered into the input during registration is collected.
To sign up for the newsletter offered on our website, we need an e-mail address from you as well as information which allows us to verify that you are the owner of the e-mail address as indicated and that you agree to receiving the newsletter. We use this data exclusively for the newsletter service and do not forward this information to third parties.
You may revoke your consent to the storing and processing of your personal data and the newsletter subscription at any time. You can do so by clicking the respective link which is included in every newsletter.
We use MailChimp as a list provider to send out our newsletter. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318. Arrangements in accordance with section 28 of the GDPR on data processing are in place with the provider. MailChimp participates in the EU-U.S. Privacy Shield Framework. For further information on data protection at MailChimp, please visit mailchimp.com/legal/privacy/.
9. Google AdWords
This website uses Google AdWords and, in doing so, its conversion tracking feature as well, from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. If you come to our website by clicking on a Google ad, Google AdWords will add cookies to your computer. These cookies become invalid after 30 days and do not serve as a means of personal identification. If you visit specific pages of the AdWords customer’s website and the cookie has not yet expired, both Google and we, the customer, can see that the user clicked on the advertisement and was redirected to the current page. Every AdWords customer receives a different cookie. Cookies can therefore not be tracked over AdWords customer websites. The information collected with the help of the conversion cookies are used in the creation of conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers receive information about the total number of users which have clicked on their advertisement(s) and also how many of these customers were redirected to a website with a conversion tracking tag. However, these AdWords customers do not receive any information which could personally identify the users. If you do not wish to participate in the tracking process, you can block the Google AdWords conversion tracking cookie by changing your browser settings (block cookies from the www.googleadservices.com domain). Google’s privacy statement on conversion tracking is available at https://services.google.com/sitestats/en_US.html.
11. Google Analytics
On this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states of the Treaty on the European Economic Area. The full IP address will be transmitted to a Google Server in the USA and shortened there only on an exceptional basis. On behalf of the operator of this website, Google will use this information for evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet use to the website operator. Google will not associate the IP address transmitted under Google Analytics by your browser with other data held by Google. You may prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we must advise you that in this case, you might not be able to use, to the full extent, all functions of this website. You may prevent Google from recording the data generated by the cookie and pertaining to your use of the website (including your IP address), or processing these data by downloading and installing the following browser plug-in available through the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Plug-ins from the social network Facebook provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, have been integrated into our website. The Facebook plug-ins can be recognized by the Facebook logo. An overview of all Facebook plug-ins is available at developers.facebook.com/docs/plugins/.
If you visit our website, the plug-in establishes a direct connection between your browser and the Facebook server. Consequently, Facebook receives the information that you visited our website with your IP address. If you click the Facebook button while logged into your Facebook account, you can link content from our website to your Facebook profile. Therefore, Facebook can link your visit to our website to your user account. Please note that we, as the provider of the website, do not have any knowledge of what kind of data is transmitted or how it is used by Facebook. For further information on the subject, please see Facebook’s data policy at https://www.facebook.com/policy.php.
If you do not wish for Facebook to be able to link your visit to our website to your user account, please log out of your Facebook account.
Our website uses features provided by Twitter Inc., 795 Folsom St, Suite 600, San Francisco, CA 94107, USA. If you use the Twitter button, Twitter will link your Twitter account to the website used by you. This information is shared with other Twitter users, especially your followers. As a part of this process, data is transmitted to Twitter.
HHL as the operator of this website does not obtain any information from Twitter about the content or use of the transmitted data. For further information, please click the following link: https://twitter.com/en/privacy
On this website we are running CaptainForm, which is owned by 123 FormBuilders, Flavia Palace, Vladimirescu n° 10, Ground Floor 300195, Timisoara, Romania, EU. With this service we are able to create and evaluate online-forms e.g. for application purpose. For that reason all data that you entered in this forms will be transmitted to the server of CaptainForm where they are stored in our user-account.
Within this user-account we are able to have a look into your data and may analyze or extract it. We use the data entered by you only for the purpose stated in the context of the consent given by you. The data will not be passed on to third parties. The service itself has no access to this data.
The legal basis for this processing results from your consent pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO.
16. Links to other websites
This website contains links to other websites. We have no influence over whether the operators of external websites comply with the data protection regulations.
17. Revocation, changes, corrections and updates
You have the right to demand information at any time regarding the personal data HHL gGmbH has stored about you. You also have the right to have your data corrected, limited, transferred or deleted or object to the processing of your data as far as this is permitted and does not violate any legal stipulations.
To exercise your rights, please contact the Data Protection Officer of HHL.
Furthermore, you also have the right to file a complaint with the responsible supervisory authority.
We reserve the right to update this privacy statement occasionally so that it complies with the legal requirements and to reflect any changes made to our offer. For any subsequent visit to our website, the new privacy statement shall then apply.
Data Protection Officer
For any queries regarding data protection at HHL gGmbH, please contact our Data Protection Officer directly or send us an e-mail.
Data Protection Officer:
Mitteldeutsche Gesellschaft für Informationssicherheit und Datenschutz mbH