Thank you for visiting our website and for your interest in our company. In doing so, we respect your privacy and ensure the protection of your personal data by processing your personal data in accordance with the content of this Privacy Policy and the applicable data protection laws.

You can visit our websites without telling us who you are. In order to display our websites, you are only required to provide the data transmitted by your browser to our server (see "Log files"). Further personal data from you will only be stored if you enter it voluntarily on the website or use the corresponding functions, e.g. when entering data via our contact form.

Contact form

You can enter your personal data on our website in order to contact us. Only the information under the data marked with an asterisk is mandatory. Providing further data may be helpful for processing your request, but is not mandatory (voluntary information). This data will be used and stored with your consent exclusively for the purpose of processing your message (Art. 6 para. 1 sentence 1 lit. a GDPR). It will not be used for other purposes or passed on to third parties unless you expressly agree to this (consent).

Cookies

Cookies are very small text files used by websites that your browser stores on your end device. By using cookies, your browser can provide us with certain information.

Transient cookies are automatically deleted when you close your browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your device to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. In contrast to transient cookies, they are not deleted automatically when you close your browser. However, you can also delete the cookies at any time in the security settings of your browser.

Cookies that are absolutely necessary to provide a service expressly requested by the user ("necessary cookies") are processed within the scope of our legitimate interest in providing and operating the website on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR and §25 para. 2 TTDSG. The following necessary cookies are set when you visit our website

Fanpages

In order to provide customers, partners or other interested parties with up-to-date information and to get in touch with them, we operate so-called "fan pages" on the following social networks in addition to our own website: Facebook, Twitter, Google, Instagram, LinkedIn, XING, YouTube.

Data processing is carried out by the provider of the social media platform. Data processing outside the European Union cannot be ruled out. The provider of the platform may provide us with aggregated usage data, but we do not have access to personal data if you only visit the fan page.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR.

In the case of consent in the form of an opt-in ("tick the box", "activate button") or another form of obtaining consent, the legal basis is Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time without giving reasons to the person to whom it was given, with effect for the future.

As the data processing is carried out by the provider of the platform, we recommend that you contact the respective provider of the platform to exercise your rights to information, correction, deletion, data portability and objection when visiting our fan page. If necessary, we will of course support you in exercising your rights.

In addition, cookies may be placed on your end device. The purposes and legal basis for the use of cookies can be found under "Cookies" in this privacy policy or in the privacy policies of the platform provider.

Further information can be found under the following links:

• Facebook: Facebook Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook Ireland"). According to Facebook, when you visit our Facebook fan page, personal data is processed as follows: https://www.facebook.com/legal/terms/information_about_page_insights_data. Further information is available at: https://www.facebook.com/legal/terms/page_controller_addendum.
• Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland; https://twitter.com/privacy.
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.com/policies/privacy/partners/?hl=de.
• Instagram: Facebook Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook Ireland"); https://de-de.facebook.com/help/instagram/155833707900388.
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; http://www.linkedin.com/legal/privacy-policy.
• XING SE, Dammtorstraße 30, 20354 Hamburg, Germany, https://privacy.xing.com/de/datenschutzerklaerung.
• Youtube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.com/policies/privacy/partners/?hl=de.

Captcha

We use a captcha service in the context of our web forms. The purpose of this is to curb and prevent potentially fraudulent activities or the generation of spam requests by excluding automated requests from bots. For this purpose, we use the Friendly Captcha service of the provider Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany, which processes personal data on our behalf. A JavaScript element is integrated into the source code, which loads the software in the background. Your end device calculates the solution to a crypto puzzle for the service, which is used to understand whether the visitor is a human or whether the use is abusive through automated, machine processing (e.g. bots). The following data is processed: http request header data (such as browser, operating system, referrer), date/time of the request, version of the Friendly Captcha service used, assignment to our website, hash value (one-way encryption) of the incoming IP address, number of requests from the (hashed) IP address per period, answer to the calculation task solved by the visitor's computer. Your IP address is anonymized using a hash function and only then processed by the provider so that no conclusions can be drawn about your person. Cookies are not used here. Data processing by the provider takes place exclusively in the EU/EEA. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Log files

Each time you access our website, we collect the following information about your computer: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this request are recorded, as well as product and version information about the browser used and the operating system of your computer. We also record the website from which our site was accessed. The IP address of your computer is only stored for the duration of your use of the website and is then immediately deleted or anonymized by shortening it. The other data is stored for a limited period of time. We use this data for the operation of our website, in particular to detect and eliminate errors on the website, to determine the utilization of the website and to make adjustments or improvements (legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR).

Accessing maps and videos

You can also access maps and videos via our website. We do not transmit any personal data to the respective provider of the map information or videos when you access our website. You will only be redirected to the website of the respective provider by clicking on the corresponding placeholder. The respective provider is responsible for data processing on these websites.

Information on data processing in the context of e-recruitment

We use the e-recruiting application of BITE GmbH, Magirus-Deutz-Straße 16, 89077 Ulm, Germany, to offer you a convenient way to apply. In this context, BITE GmbH acts as a processor (Art. 4 No. 8, Art. 28 GDPR). In doing so, we process the data you provide yourself (such as name, address, contact details, references) for the purpose of initiating the employment or contractual relationship (Section 26 (1) BDSG or Art. 6 (1) sentence 1 lit. b GDPR). You also have the option of automatically uploading your data from the LinkedIn or Xing networks. If you are not considered for the position for which you have applied, we will delete your data no later than six months after a rejection. However, with your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), we would like to include your data in our talent pool for one year, even if you are not considered for an open position in our company at the time of your application. Consent is voluntary and can be revoked at any time with effect for the future. Information on your rights and contact details of the controller and data protection officer can be found in our privacy policy.

Withdrawal of consent and objection to data processing

If you have given us your consent, you can withdraw it at any time with effect for the future.

Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time.

You can send us your revocation or objection using the contact details under "Controller".

Your rights

You have the following rights vis-à-vis us with regard to your personal data

• Right to information
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to the processing
• Right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Controller

alfatraining Bildungszentrum GmbH - Kriegsstraße 100 - 76133 Karlsruhe

E-Mail: info(at)alfatraining.de - Phone: 0721 35450-300 - Fax: 0721 35450-68

Data protection officer

data protection inquiries(at)xdsb.de

Data protection information in accordance with Art. 13 and 14 GDPR for customers, suppliers and other external parties