Privacy policy

1. Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any information relating to an identified or identifiable natural person. For detailed information on the subject of data protection, please refer to our privacy policy set out below this text.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification, restriction of processing or erasure of this data, subject to the restrictions under applicable law. You have the right to object at any time to processing based on Art. 6(1)(f) GDPR or for advertising purposes. If you have given us your consent, you have the right to withdraw it at any time. For this and for further questions on the subject of data protection, you can contact us at any time at the address given in the privacy policy. You also have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and third-party tools

When you visit our website, your browsing behaviour may be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your browsing behaviour is generally anonymous; your browsing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.

You can object to this analysis. We will inform you about the options for objecting in this privacy policy.

2. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is any information relating to an identified or identifiable natural person. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Note on the controller

The controller responsible for data processing on this website is:

Martin Adam
Managing Director
Mediadesign Hochschule
für Design und Informatik GmbH
Franklinstraße 28-29
10587 Berlin

Phone: 030 399 266 19
Email: m.adam@mediadesign.de

3. Your data subject rights

3.1 Right of access

You have the right of access to the personal data processed about you. This means that you have the right to obtain confirmation as to whether or not personal data concerning you is being processed. If this is the case, you have the right to access the personal data processed about you and certain additional information, as well as to receive a copy in a common electronic format.

3.2 Right to rectification

You have the right to have inaccurate personal data concerning you rectified and the right to have incomplete personal data completed.

3.3 Right to erasure

You have the right to erasure of your personal data, subject to the restrictions under applicable law. This is the case, for example, if the personal data is no longer necessary for the purposes for which it is processed, you withdraw your consent and there is no other legal basis for the processing, or the processing of your personal data is not necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.

3.4 Right to restriction of processing

You have the right to restriction of the processing of your personal data, for example if you contest its accuracy or if you have objected to the processing as described above. In both cases, this right applies while we process and review your request.

3.5 Right to withdraw your consent to data processing

If you have consented to certain processing, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

3.6 Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

3.7 Right to object

You have the right to object if the processing is based on the balancing of interests under Art. 6(1)(e) or (f) GDPR, in order to request a reassessment of the interests or to object to direct marketing. We will then carry out a new assessment and will only continue to process your personal data, despite your objection, if we can demonstrate compelling legitimate grounds that override your interests.

3.8 Right to lodge a complaint with the competent supervisory authority

You can lodge a complaint if you believe that we have infringed applicable data protection provisions when processing your personal data.

4. Data protection officer

Statutory data protection officer

We have appointed a data protection officer for our company.

If you have any questions about this privacy policy, please contact our data protection officer at: datenschutz@mediadesign.de

5. Links to other websites

The practices set out in this privacy policy apply only to this website and other specifically defined situations. Other practices may apply to other websites operated by third parties. Therefore, when you follow links to websites operated by third parties or visit such websites, please review the privacy policies published on those websites. We have no control over such websites and accept no responsibility or liability for the practices pursued by third parties.

6. Data collection on our website

6.1 Cookies

We use cookies in some cases. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, more effective and more secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are deleted automatically after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can manage cookies and your consents for non-essential cookies via the cookie banner, and set your browser so that you are informed about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

The use of cookies required for the operation of the homepage is based on § 25(2) No. 2 TTDSG. Insofar as other cookies (e.g. cookies for analysing your browsing behaviour) are stored, these are dealt with separately in this privacy policy.

6.2 Server log files

We automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources. This is done, on the one hand, to enable the website to be displayed and, on the other hand, to ensure the stability and security of the website (Art. 6(1)(f) GDPR).

6.3 Usercentrics

We use the consent manager of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, to obtain the legally required cookie consents (consent data) from our site visitors.

The data is processed for the purpose of complying with legal obligations (duty to provide evidence under Art. 7(1) GDPR) and the associated documentation of your consents, and thus on the basis of Art. 6(1)(c) GDPR in conjunction with § 25(2) No. 2 TDDDG. A data processing agreement exists with the service provider.

6.4 Contact form for information materials

If you send us a request for information material via our contact form, the data you provide there will be processed for the purpose of handling the request, sending the information material and in case of follow-up questions. Your data will not be used for other purposes or passed on unless you give us your separate consent. The legal basis for the processing of your personal data is your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw this consent at any time with effect for the future. An informal message by email to datenschutz@mediadesign.de is sufficient for this. The lawfulness of the data processing carried out until the withdrawal remains unaffected. Within the scope of your consent, the data you entered in the contact form will be kept by us for a maximum of two years from the last contact, so that we can handle any later enquiries appropriately, unless you request us to delete it or withdraw your consent. Mandatory statutory provisions – in particular retention periods – remain unaffected.

We use the services of HubSpot, a service provider based in the USA, to process your data. Your data is stored in Germany. Under certain circumstances (e.g. support requests made by us to the service provider), a transfer of your data to the USA, i.e. to a third country, may nevertheless occur. Furthermore, due to US laws, American security authorities have the theoretical possibility of accessing data stored by our service provider in the EU as well. The transfer of personal data to the USA is safeguarded by an adequacy decision. In addition, a data processing agreement exists with the service provider.

6.5 Contact form for information events

If you send us a registration for an information event via our contact form, the data you provide there will be processed for the purpose of handling the registration and in case of follow-up questions. Your data will not be used for other purposes or passed on unless you give us your separate consent. The legal basis for the processing of your personal data is your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw this consent at any time with effect for the future. An informal message by email to datenschutz@mediadesign.de is sufficient for this. The lawfulness of the data processing carried out until the withdrawal remains unaffected. Within the scope of your consent, the data you entered in the contact form will be stored by us for a maximum of two years from the last contact, so that we can handle any later enquiries appropriately. Afterwards we will delete your personal data, unless mandatory statutory provisions – in particular retention periods – take precedence.

6.6 Contact form for workshops

If you send us a registration for a workshop via our contact form, the data you provide there will be processed for the purpose of handling the registration. Your data will not be used for other purposes or passed on unless you give us your consent. The legal basis for the processing of your personal data is the contractual measure pursuant to Art. 6(1)(b) GDPR. Your personal data processed within the framework of the contract will be stored until the statutory periods have expired and will then be deleted, unless we are obliged to store it for longer or you have consented to storage beyond this (Art. 6(1)(a) GDPR). If no contract is concluded, your data will be stored by us for a maximum of two years from the last contact, so that we can handle any later enquiries appropriately. Afterwards we will delete your personal data, unless mandatory statutory provisions – in particular retention periods – take precedence.

6.7 General information requests and contact

If you send us enquiries by post, email or telephone, your details, including the contact data you provide, will be stored by us, depending on the means of contact, for the purpose of handling the enquiry and in case of follow-up questions. Your data will not be used for other purposes or passed on unless you give us your separate consent. The legal basis for the processing of your personal data is your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw this consent at any time with effect for the future. An informal message by email to datenschutz@mediadesign.de is sufficient for this. The lawfulness of the data processing carried out until the withdrawal remains unaffected. Within the scope of your consent, the data you provided will be stored by us for a maximum of two years from the last contact, so that we can handle any later enquiries appropriately. Afterwards we will delete your personal data, unless mandatory statutory provisions – in particular retention periods – take precedence.

7. Analysis tools and advertising

7.1 Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookies about your use of this website (including your IP address) is transmitted to Google servers in the USA and stored there. A transfer outside the scope of application of EU law may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision.

The storage of Google Analytics cookies and access to the data stored in the cookies is based on your consent pursuant to § 25(1) TTDSG. The use of the information generated by the cookie for the evaluation of the information described is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie banner. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

7.1.1 IP anonymisation

We have activated the IP anonymisation function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

7.1.2 Browser plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

7.1.3 Alternative objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the collection of your data during future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

7.1.4 Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This makes it possible to create reports containing statements about the age, gender and interests of site visitors. This data comes from interest-based advertising by Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account, or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

7.2 Google AdSense

This website uses Google AdSense, a service for embedding advertisements, provided by Google Inc. (“Google”). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons allow information such as visitor traffic on these pages to be evaluated.

The information generated by cookies and web beacons about your use of this website (including your IP address) and the delivery of ad formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to Google’s contractual partners. However, Google will not merge your IP address with other data stored by you.

The information generated by the cookies about your use of this website (including your IP address) is transmitted to Google servers and stored there. A transfer by Google outside the scope of application of EU law to the USA and to countries that do not offer an adequate level of data protection may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision. Below you will find a list of the countries to which data may be transferred and which do not offer an adequate level of data protection.

Singapore, Taiwan, Chile

The transfer of personal data to the USA and to countries without an adequate level of data protection takes place for various purposes, e.g. for storage or processing.

The storage of Google AdSense cookies and web beacons and access to the data stored in the cookies and web beacons is based on your consent pursuant to § 25(1) TTDSG. The use of the information generated by the cookie for the evaluation of the information described is based on your consent pursuant to Art. 6(1)(a) GDPR. The transfer of the collected data to third countries without an adequate level of data protection is based on your consent pursuant to Art. 49(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie banner.

You can also prevent the installation of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent.

7.3 Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been tailored to you based on your previous usage and browsing behaviour on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).

If you have given the corresponding consent, Google links your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you log in with your Google account.

To support this function, Google Analytics collects Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; please follow this link: https://www.google.com/settings/ads/onweb/.

The information is transmitted to Google servers and stored there. A transfer by Google outside the scope of application of EU law may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision.

The aggregation of the collected data in your Google account takes place exclusively on the basis of your consent, which you can give or withdraw with Google (Art. 6(1)(a) GDPR). For data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of data is based on your consent given to the website operator. The storage of Google cookies and access to the data stored in the cookies is based on your consent pursuant to § 25(1) TTDSG. The use of the information generated by the cookie for the evaluation of the information described is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie banner. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

You can find further information and the privacy provisions in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/.

7.4 Google Ads and Google Conversion Tracking

This website uses Google Ads. Ads is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google Ads, we use so-called conversion tracking. If you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user’s computer. These cookies expire after 30 days and are not used for the personal identification of users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.

Each Google Ads customer receives a different cookie. The cookies cannot be tracked across the websites of Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

Singapore, Taiwan, Chile

The transfer of personal data to the USA and to countries without an adequate level of data protection takes place for various purposes, e.g. for storage or processing.

The storage of Google Ads cookies and access to the data stored in the cookies is based on your consent pursuant to § 25(1) TTDSG. The use of the information generated by the cookie for the evaluation of the information described is based on your consent pursuant to Art. 6(1)(a) GDPR. The transfer of the collected data to third countries without an adequate level of data protection is based on your consent pursuant to Art. 49(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie banner. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

You can find more information on Google Ads and Google Conversion Tracking in Google’s privacy policy: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

7.5 Google Tag Manager

This website uses Google Tag Manager, a tool of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). This is a tag management system with which we can integrate, manage and update so-called website tags via an interface on our homepage. Google Tag Manager thus triggers other tags, which in turn may process personal data or set cookies. We use Google Tag Manager to optimise our web presence and to save costs and time. This is also our legitimate interest in using Google Tag Manager (Art. 6(1)(f) GDPR). Google Tag Manager is only triggered once you have consented to the integrated tags or cookies and the processing of personal data. § 25(1) TTDSG applies to the delivery of and access to data stored in the cookies; Art. 6(1)(a) GDPR applies to the use of the stored data. If you consent, you also consent to a transfer to third countries to Google, including countries that do not offer an adequate level of data protection, Art. 49(1)(a) GDPR. Google acts as a processor in this respect. You can withdraw your consents at any time with effect for the future via the cookie banner. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

The data collected by this service may be transmitted to a Google server in the USA and to countries that do not offer an adequate level of data protection, and stored there. A transfer outside the scope of application of EU law may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision. Below you will find a list of the countries to which data is transferred and which do not offer an adequate level of data protection.

Singapore, Taiwan, Chile

The transfer of personal data to the USA and to countries without an adequate level of data protection takes place for various purposes, e.g. for storage or processing.

You can find more information on Google Tag Manager in Google’s privacy policy: https://www.google.com/intl/en/tagmanager/use-policy.html.

7.6 Facebook Pixel

Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), for conversion measurement.

This allows the behaviour of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The information generated by the cookies about your use of this website is transmitted to Facebook servers in the USA and to countries that do not offer an adequate level of data protection, and stored there. A transfer outside the scope of application of EU law may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision.

The information generated by the cookies about your use of this website (including your IP address) is transmitted to Facebook servers in the USA, the United Kingdom and to countries that do not offer an adequate level of data protection, and stored there. A transfer outside the scope of application of EU law may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfers of personal data to the USA and to the United Kingdom are safeguarded by an adequacy decision. Below you will find a list of the countries to which data is transferred and which do not offer an adequate level of data protection.

Singapore

The storage of Facebook cookies and access to the data stored in the cookies is based on your consent pursuant to § 25(1) TTDSG. The use of the information generated by the cookie for the evaluation of the information described is based on your consent pursuant to Art. 6(1)(a) GDPR. The transfer of the collected data to third countries without an adequate level of protection is based on your consent pursuant to Art. 49(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie banner. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Policy. This enables Facebook to display ads on Facebook pages as well as outside of Facebook. We, as the website operator, cannot influence this use of the data.

You can find further information on protecting your privacy in Facebook’s privacy notices: https://www.facebook.com/about/privacy/.

You can also deactivate the remarketing function “Custom Audiences” in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

To do so, you must be logged in to Facebook.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Once the purpose has ceased and we no longer use Facebook, the data collected in this context will be deleted. Facebook may continue to store the data beyond this. These cookies remain stored on your device for a period of up to 3 months.

7.7 LinkedIn Pixel

On this website we use the LinkedIn Pixel from LinkedIn, a social media network operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, IRELAND.

The code implemented on this page can evaluate the behaviour of visitors who have arrived at this website from a LinkedIn ad. This can be used to improve LinkedIn ads, and this data is collected and stored by LinkedIn. The LinkedIn Pixel collects the following data: URL, referrer, IP address, device and browser characteristics (user agent) and timestamp.

IP addresses are truncated or hashed, and members’ direct identifiers are removed within seven days in order to pseudonymise the data. This remaining pseudonymised data is then deleted within 90 days. The collected data cannot be viewed by us and can only be used in the context of ad placements. We also use data that does not identify you in order to improve ad relevance and to reach members across devices. Cookies are also set through the use of the LinkedIn Pixel code.

Through the use of the LinkedIn Pixel, LinkedIn is informed of the visit to this website so that visitors are shown suitable ads on LinkedIn. If you have a LinkedIn account and are logged in, the visit to this website is assigned to your LinkedIn user account. LinkedIn members can control the use of their personal data for advertising purposes via their account settings.

The information generated by the cookies about your use of this website is transmitted to LinkedIn servers in the USA and to countries that do not offer an adequate level of data protection, and stored there. A transfer outside the scope of application of EU law may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision.

The storage of cookies and access to the data stored in the cookies is based on your consent pursuant to § 25(1) TTDSG. The use of the information generated by the cookie is based on your consent pursuant to Art. 6(1)(a) GDPR. Should personal data be transferred to third countries without an adequate level of protection, this is based on your consent pursuant to Art. 49(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie banner. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

7.8 TikTok Pixel

Our website uses the conversion tracking pixel from TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”), to evaluate social media campaigns.

The information generated by the pixel about your use of this website (including your IP address) is transmitted to TikTok servers in the USA and to countries that do not offer an adequate level of data protection, and stored there. A transfer outside the scope of application of EU law may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision. Below you will find a list of the countries to which data is transferred and which do not offer an adequate level of data protection.

China

This transfer of personal data involves risks.

The legal basis for access to information already stored in your terminal equipment is § 25(1) TTDSG. The use of the information collected by the tracking pixel for the evaluation of the information described is based on your consent pursuant to Art. 6(1)(a) GDPR. The transfer of the collected data to China is based on your consent pursuant to Art. 49(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie banner. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

For the disclosure of personal data to third countries and for data processing in third countries, TikTok Technology Limited uses standard contractual clauses.

You can find further information on protecting your privacy in TikTok’s privacy notices: https://www.tiktok.com/legal/page/eea/privacy-policy/en; https://ads.tiktok.com/i18n/official/policy/controller-to-controller

Once the purpose has ceased and we no longer use TikTok, the data collected in this context will be deleted. TikTok may continue to store the data beyond this.

7.9 Google reCAPTCHA

Our website uses the Google reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to check whether data entered on this website (e.g. in contact forms) is entered by a human or by an automated program. This is intended to protect the website from spam and abuse.

The following data may be processed when using reCAPTCHA:

IP address of the user
Information about the device used (e.g. browser, operating system)
Mouse movements and interactions on the website
If applicable, time spent on the site and usage behaviour

Data processing is based on Art. 6(1)(f) GDPR (legitimate interest in the security of the website and protection against abuse). Where consent is given via the cookie banner, processing is additionally based on Art. 6(1)(a) GDPR and § 25(1) TTDSG.

You can find further information in Google’s privacy policy: https://policies.google.com/privacy

7.10 StudyCheck

We have integrated the StudyCheck rating seal on our website. The rating seal and the services advertised with it are an offering of OAK – Online Akademie GmbH, Zollstockgürtel 63, 50969 Cologne, Germany.

The rating seal serves to display ratings, reviews or other StudyCheck content on our website at your request. When the seal is loaded, a connection to StudyCheck is established in order to retrieve and display the content. To integrate the rating seal and display the ratings, reviews or other StudyCheck content, your IP address must be processed so that the content can be sent to your browser. In addition, information about your operating system, browser information and the date and time of access may be transmitted to OAK – Online Akademie GmbH.

No tracking cookies or comparable technologies are used when using the rating seal. Your personal data is automatically deleted by OAK – Online Akademie GmbH no later than 12 months after it was collected.

The legal basis for the use of the tool is your consent pursuant to § 25(1) TDDDG. You can withdraw your consents at any time with effect for the future in the consent manager.

You can find further information on data processing by OAK – Online Akademie GmbH at www.studycheck.de/datenschutz.

7.11 OpenAI Ads – conversion measurement and regional targeting

This website uses the tracking pixel of OpenAI Ads to evaluate advertising campaigns. The provider is OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43.

The OpenAI Ads pixel enables us to measure and optimise the success of our ads placed on the ChatGPT platform (so-called conversion tracking). If you reach our website via an ad on OpenAI, the pixel helps us understand which subpages you visit or whether you perform a certain action (such as registration). We also use a regional targeting function to deliver our advertising campaigns regionally and to make them more relevant for users in certain geographical areas.

When using the tracking pixel, your IP address, the IDs of clicked ads, time of access, URL accessed, browser and device information and information about the respective advertising campaigns may be collected.

If you have given your consent, OpenAI sets two first-party cookies directly via our domain on your device for conversion measurement:

__oppref: Storage period 30 days. This cookie stores a reference to an ad click in order to be able to attribute conversions to an ad.
__obref: Storage period 365 days. This cookie contains a randomly generated browser reference that can be used for conversion measurement.

The cookies serve to attribute interactions and conversions to advertising campaigns. The storage periods stated refer to the intended storage period of the respective cookies.

Data processing by the tracking pixel and the setting of the cookies take place exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You give your consent voluntarily via our consent banner when you access the website. The tracking pixel is only activated after you have given the corresponding consent. You can withdraw your consent at any time with effect for the future by opening the cookie settings via the link in our footer and deactivating the category “Marketing / OpenAI Ads”. Alternatively, you can block the storage of cookies directly in your browser settings. The lawfulness of the processing carried out until the withdrawal remains unaffected.

The personal data collected by OpenAI is processed within the European Union. In addition, data is transmitted to the parent company OpenAI LLC in the USA and processed there. In the context of a transfer of personal data to the USA, it cannot be ruled out that US authorities may access this data within the scope of their statutory powers and process it for control or surveillance purposes. The transfer of personal data to the USA is safeguarded by the EU standard contractual clauses.

8. Job applications

If you send us an application for an advertised position, your application documents are processed on the basis of Art. 88 GDPR in conjunction with § 26(1) sentence 1 BDSG. If you also send an application photo, you do so voluntarily and thereby give your consent to the collection and storage of your application photo (Art. 88 in conjunction with § 26(2) BDSG). We have a very strong interest in conducting and concluding a proper application procedure. This also includes refuting any opposing allegations of discrimination in connection with the conclusion of the application procedure, which is why your application documents are not deleted until 3 months after rejection. Longer storage of your application documents only takes place with your express consent, so that we can consider you for future job advertisements if applicable. In the case of unsolicited applications, deletion takes place, even without rejection, within a maximum of 12 months after receipt of your application documents.

9. Study applications / student contracts

You have the option of applying for a course of study with us by email, post or via our website https://studium.mediadesign.de/bewerbung-studienplatz.

When applying via our website, you can enter all personal data relevant to your application via successive input screens. As part of this process, we ask you for the following information: desired degree, course of study, language of instruction, campus, start of the course, name, email address, telephone number, city, nationality, school certificates, CV and payment arrangements. You have the option of moving between the individual screens to change data without having to re-enter all the data. For this, it is necessary that we synchronise the information you have entered in our internal system HubSpot from the click on “Next” in step 1.

Your data is stored in Germany. Under certain circumstances (e.g. support requests made by us to the service provider), a transfer of your data to the USA, i.e. to a third country, could nevertheless occur. Furthermore, due to US laws, American security authorities have the theoretical possibility of accessing data stored by our service provider in the EU as well. In this case, our service provider has submitted to the standard contractual clauses. In addition, the transfer to third countries in the USA is safeguarded by an adequacy decision (Data Privacy Framework). Furthermore, a data processing agreement exists with the service provider.

The processing of all relevant personal data for the performance of a contract takes place for the initiation, performance or termination of contractual relationships (Art. 6(1)(b) GDPR). Contract data of students is transmitted to the accounting department and the student affairs department for proper administration. The personal data processed by us for the performance of the contract is stored until the statutory periods have expired and is then deleted, unless we are obliged to store it for longer or you have consented to storage beyond this (Art. 6(1)(a) GDPR). Study applications that did not lead to a study contract are not deleted until 6 months after rejection, in order to be able to refute objections or legal actions against any decision of MD.H in case of doubt. Study applications of accepted students are likewise deleted 6 months after acceptance. We store your aptitude tests for a period of 6 months in order to enable you to have your aptitude test reviewed in case of doubt. Aptitude tests of applicants who do not begin a course of study are stored for a period of 3 years, in order to give you the opportunity to fall back on the result of the aptitude test again in the event of a new application, and to be able to counter any allegations of discrimination.

10. Applications from freelance lecturers

If you send us your application documents for freelance teaching work, your application documents are processed on the basis of Art. 6(1)(b) GDPR for the purpose of initiating a contract. We have a very strong interest in conducting and concluding a proper application procedure. This also includes refuting any opposing allegations of discrimination in connection with the conclusion of the application procedure, which is why your documents are not deleted until 6 months after rejection. If we currently have no opportunity to employ you, we would like to include your application documents for freelance teaching work in our lecturer pool so that we can come back to you at a later date. This longer storage of your application documents only takes place with your express consent pursuant to Art. 6(1)(a) GDPR. Your documents will remain in our lecturer pool for a maximum of 4 years. If we do not contact you again, your documents will be deleted after 4 years.

11. Newsletter

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter (double opt-in procedure). Further data is not collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw the consent given to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the “Unsubscribe” link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.

The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after the newsletter has been cancelled. Data stored by us for other purposes (e.g. email addresses for the members’ area) remains unaffected.

12. Plugins and tools

12.1 YouTube

We have integrated content from YouTube (videos), operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, on our homepage. This content can be played directly via our homepage. For the integration we use the “extended data protection mode”. This means that no data about you as a user is transmitted to YouTube as long as you do not play the videos. Only when you play the videos are YouTube cookies stored on your computer and data transmitted to Google.

It is irrelevant whether you have a user account with Google or are logged in there. However, if you are logged in or log in later, the data will be assigned to your user account data. The data transmitted includes your IP address and an identifier assigned to your browser (cookie ID). The cookie ID makes you recognisable on other sites. In addition, the address of the page accessed on our site, the system date and time of the access and the identifier of your browser are transmitted.

The storage of the YouTube cookie and access to the data stored in the cookies is based on your consent pursuant to § 25(1) TTDSG. The use of the information generated by the cookie for the evaluation of the information described is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out until the withdrawal remains unaffected. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision.

Google stores this data as usage profiles. These profiles are used for advertising and market research purposes, to design Google offerings in line with demand, and to inform other users about your activities on our website.

If you wish to object to the creation of user profiles by Google, you must assert your rights with Google. You can obtain further information on the purpose and scope of data collection and its processing by Google here: www.google.de/intl/en/policies/privacy.

12.2 Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The storage of Google Maps cookies and access to the data stored in the cookies is based on your consent pursuant to § 25(1) TTDSG. The use of the information generated by the cookie for the evaluation of the information described is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

The information generated by the cookies is transmitted to Google servers in the USA and stored there. A transfer outside the scope of application of EU law may take place. When personal data is transferred to the USA, there is a possibility that your data may be processed by US authorities for control and surveillance purposes. The transfer of personal data to the USA is safeguarded by an adequacy decision.

You can find more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/en/policies/privacy/.

12.3 HubSpot CRM

We use HubSpot CRM on this website. The provider is HubSpot Inc., 25 Street, Cambridge, MA 02141, USA (hereinafter HubSpot CRM).

Among other things, HubSpot CRM enables us to manage existing and potential customers as well as customer contacts. With the help of HubSpot CRM, we are able to record, sort and analyse customer interactions by email, social media or telephone across different channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g. newsletter mailings). With HubSpot CRM, we are also able to record and analyse the user behaviour of our contacts on our website.

The use of HubSpot CRM is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most efficient possible customer management and customer communication. Where corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information in the user’s terminal equipment (e.g. device fingerprinting) within the meaning of the TDDDG. You can withdraw your consents at any time with effect for the future. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

For details, please refer to HubSpot’s privacy policy:

https://legal.hubspot.com/privacy-policy.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

You can find details here: https://www.hubspot.de/data-privacy/privacy-shield.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TN8pAAG&status=Active.

Data processing agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

13. Data processing on behalf

Where we use external service providers for whom processing our personal data on our behalf is a (core) component, we conclude a data processing agreement / data protection agreement. We select these external service providers carefully and monitor them regularly. They process personal data only on our behalf and strictly in accordance with our instructions on the basis of the corresponding data processing agreement / data protection agreement (Art. 28 GDPR).

14. Transfer of personal data to third countries

If we transfer personal data to countries outside the EU, we rely on an adequacy decision of the Commission (Art. 45 GDPR), on appropriate safeguards (Art. 46 GDPR) or, under Art. 49 GDPR, on the derogations for a transfer to third countries. Details of the individual transfers to third countries can be found in the descriptions of the individual processes and in our cookie banner.

15. Storage of personal data

Unless otherwise stated in this privacy policy, personal data is stored only for as long as is necessary for the purpose or purposes for which it is processed. Where personal data is no longer necessary, it is deleted, and in any case it is deleted as provided for by statutory provisions.

16. Recipients of personal data

Unless otherwise stated in this privacy policy, onward transmission to recipients for the purposes stated above takes place only to:

• service providers for the operation of our business;

• authorities, government regulators or other law enforcement authorities and courts, where required or permitted by law or where compelled by a binding order (Art. 6(1)(f) GDPR or under other statutory provisions).

Your personal data will not be passed on further unless this is connected with the stated purposes. Where necessary, we will always inform you in advance and give you the opportunity to decide whether we may use your personal data in this different way or not.

17. Data security, data integrity

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

In addition, we maintain appropriate technical, physical and organisational measures to protect personal data against accidental or unlawful destruction or accidental loss, accidental alteration, unauthorised disclosure or unauthorised access. Where technically possible, your personal data is transmitted to us only in encrypted or anonymised form.

18. Changes to this privacy policy

In order to comply with technical and legal adjustments, changes may be made to this privacy policy.

Privacy policy

Apply by March 31, 2027