Data Protection

Data protection and data processing

We take your privacy extremely seriously when processing personal data. The personal data collected from visitors to our web pages are processed in accordance with the relevant statutory provisions. Our website contains links to web pages of other providers to which this data privacy statement does not extend.

The controller within the meaning of the General Data Protection Regulation and other Member State national data protection laws as well as other data protection provisions is:

Klaus Fahle
National Agency at the Federal Institute for Vocational Education and Training (NA beim BIBB)
Robert-Schuman-Platz 3
53175 Bonn
Phone: 0228 / 107-1676
Fax: 0228 / 107-2964
Email: na[at]bibb(dot)de

What are personal data?

According to the General Data Protection Regulation, data are personal if they are or can be allocated to an identified natural person so that the person can be identified by the data. This includes all information which enables inference to be made about identity (e.g. name, telephone number or email address).

Legal basis for the processing of personal data

If we obtain the data subject’s consent for processing operations with personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) is the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. (6) (1) (b) GDPR is the legal basis. This also applies to processing operations that are necessary for taking steps prior to entering into a contract.

If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR is the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party and the interests, fundamental rights and freedoms of the data subject do not override such interests, Art. 6 (1) (f) GDPR is the legal basis for the processing.

Provision of the website

Our website is operated in cooperation with the agency ]init[ Aktiengesellschaft für digitale Kommunikation, Köpenicker Straße 9, 10997 Berlin. NA beim BIBB has concluded a contract processing agreement with ]init[ within the meaning of the GDPR.

This website is hosted on systems at bringe Informationstechnik GmbH, Zur Seenplatte 12, 76228 Karlsruhe. The Federal Institute for Vocational Education and Training has concluded a contract processing agreement with bringe within the meaning of the GDPR.

Data collected by the server statistics

The internet provision can be used without any logging of personal information. However, with every visit to a web page, data which your browser transfers to our server is logged. This includes:

• Type and version of your internet browser
• The operating system used.
• The accessed website.
• Page previously visited (referrer URL)
• Time of the server request.

Data collected by applications

For technical reasons, our servers and applications store your personal connection details in their log files when you access our web pages. However, these data are only used for the direct provision of our services, for fault rectification or for defending against an attack and are automatically deleted after a short period.

The following data are stored temporarily.

• Your IP address
• The date and time you access the page
• Address of the page accessed
• Address of the web page previously visited (referrer)
• Name and version of your browser/operating system (if transferred)

Personal data are only stored in cases where you yourself provide such data, for example when registering for an event or when ordering publications – see information under “Personalised Services”. The transfer of personal data is encrypted using a state of the art procedure (Secure Sockets Layer – SSL).

Cookies

Cookies are small text files that are placed on your device via the browser in accordance with defined standards. We use cookies to optimise the display of content and to present content in a personalised way. Some elements of our website require the requesting browser to be identifiable even after moving to another website. The user data collected using technically necessary cookies are not used for the purpose of creating user profiles. The cookies are automatically deleted at the end of the session.

We require cookies for the following applications

• Ordering system / shopping basket
• Event registrations

Your data that you have entered in the above applications are stored and transferred in the cookies.

You can deactivate or limit the transfer of cookies by changing your internet browser settings. Cookies that have already been stored can be deleted at any time. This may take place automatically.

If cookies are deactivated on our website, it may not be possible to use all functions of the website fully.

We also use cookies to analyse access to our website. – see below under “Preparation of usage data for web statistics”.

Preparation of usage data for web statistics.

We would like to make our web pages as attractive and convenient for you as possible. For this purpose, evaluating statistical data concerning usage and the collection of a range of technical details via the web browsers and computers of our visitors is helpful. For this reason, we use the web analytics programme Matomo, which works with cookies and JavaScript and automatically transfers pseudonymised user data to us. The storage and analysis always occurs in a pseudonymised manner on a central server operated by the Federal Institute for Vocational Education and Training. These data are not stored together with other personal data relating to the users.

You can object to your data being collected. It is very simple to object and requires just one click.

Options for objecting to the collection of usage data for web statistics

The following independent options are available to you for objecting to data collection by NA beim BIBB’s central Matamo service:

1. Activate the Do Not Track setting in your browser. While this setting is activated, our central Matamo service will not store any data from you. Important: the Do Not Track instruction generally applies only to the single device and individual browser in which you activate the setting. If you use several devices/browsers, then you must activate Do Not Track separately in all cases.

2. Use our Opt Out function. Click on the following checkbox to stop or restart data collection. If this checkbox is deactivated, our central Matamo service will not store any data from you. NB: For the opt-out, we need to store a special identification cookie in your browser. If you delete this or use another PC / browser, you will need to object to data collection on this website again.

Data collected by Matomo

The following data are recorded – provided you have not objected – by NA beim BIBB’s central Matomo service and are included in the usage statistics.

Basic data:

• IP address, anonymised by truncating
• Cookie for distinguishing between different visitors
• Previously visited URL (referrer), where this is transferred by the browser
• Name and version of the operating system
• Browser name, version and language setting

Also, provided JavaScript is activated:

• URLs visited on this web page
• Amount of time spent on this website
• Terms entered in the web search
• Time of page access
• Screen resolution and colour depth
• Technologies and formats supported by the browser (e. g. Cookies, Java, Flash, PDF, WindowsMedia, QuickTime, Realplayer, Director, SilverLight, Google Gears)

NA beim BIBB evaluates these data for statistical purposes only in order to improve its internet provision. Data for web statistics are collected anonymously (with truncated IP addresses) and cannot be allocated to any specific person.

The software only runs on our website servers. The user’s personal data are only stored here. There is no transfer to third parties.

Personalised services

If you have decided to make use of a personalised service, the data required and entered by you are stored. This is normally your email address, surname and forename and other data depending on the type of services offered. Your information is only used to provide the service you have required to your satisfaction and to enable us to respond to queries.

Contact form

A contact form is available on our website which can be used to contact us electronically. If a user makes use of this form, the following data contained in the input screens are transferred to us and stored:

• Your email address
• The content of your message to us
• Your name, title, organisation and address (optional)

In order to process data in the context of the sending procedure, your consent is obtained and reference is made to this Data Protection Policy.

Alternatively, you can contact us using the email address provided. In this case, the user’s personal data that have been transferred with the email are stored.

There is no transfer of data to third parties in this context. The data are used exclusively for the purposes of the conversation.

Shopping basket ordering system

NA beim BIBB provides media and print products. Users may order these online using our shopping basket ordering system. The following data from the input screens are transferred to us:

• Your title
• Your name
• Your address
• Your email address
• The publication you have ordered
• Your organisation (optional)
• Your telephone and fax numbers (optional)

These data are required for processing and progressing the order. In order to process data in the context of the sending procedure, your consent is obtained and reference is made to this Data Protection Policy.

The data are forwarded for processing to an external service provider (Caritas Werkstätten Mayen, Polcher Straße 160, 56727 Mayen), who is responsible for processing the order and sending the ordered goods. NA beim BIBB has concluded a contract processing agreement with Caritas Werkstätten Mayen within the meaning of the GDPR.

Event registrations

NA beim BIBB offers various types of events, for which persons interested in the same can register. Registrations are usually possible using a registration form on the website. Depending on the event and method of contact, various personal data are collected and transferred during registration. This is usually:

• Your title
• Your name
• Your address
• Your email address
• Your telephone number
• Whether you need barrier-free access

These data are needed in the scope of event organisation to ensure that the registration process and the management of participants both run smoothly. Depending on the event, event-specific data may also be collected and transferred in order to be able to take into account participants’ interests and requirements.

In order to process data in the context of the procedure for sending the registration form, your consent is obtained and reference is made to this Data Protection Policy.

Depending on the event, all data provided are transferred to the event organiser within NA beim BIBB or to external event organisers, where they are processed and stored. Data may also be forwarded to third parties if this is necessary e.g. for booking accommodation or transport.

When you register for an event on our website, NA beim BIBB also asks for your consent on photo and video recordings and the use of your contact data. These consents can be withdrawn at any time (Art. 7 EU General Data Protection Regulation ). The revocation of these consents does not affect the legality of the processing carried out on the basis of your consent until the revocation (Art. 7 III p. 2 EU General Data Protection Regulation).

Embedding of social media

We maintain online presences in the social networks Twitter, Facebook, Instagram and YouTube.
It has not yet been legally established whether and to what extent all networks offer their services in accordance with European data protection provisions. As soon there are any new and legally certain aspects governing the operation of our social media presence, we will respond to these without delay. Until this time, you should check carefully what personal data you provide to the social networks.

We expressly draw your attention to the fact that Twitter, Facebook (including Instagram) and Google (YouTube) store their users’ data (e.g. personal information, IP address) in accordance with their data usage guidelines and use it for commercial purposes.

NA beim BIBB has no influence on the collection and further use of data by the social networks. We do not know the extent, location and duration of the data storage, the extent to which the networks comply with existing obligations to delete data, what evaluations and links are made in relation to the data and to whom the data are forwarded.

Sharing content in social networks

To share the content of our online offer on social networks, we use so-called social media buttons. For this, we use the “c’t Shariff” function, which provides social media buttons that comply with data protection provisions.

The Shariff button only makes direct contact between the social network and the visitor if the latter actively clicks the share button. In this way, Shariff prevents you from leaving a digital trail on every website you have visited and improves data protection. By using Shariff, we are able to protect your personal data while still integrating social sharing buttons.

Embedding of YouTube and Vimeo videos

Videos from the external video platform YouTube (Google) and Vimeo are embedded in several places on our website. If you access our content while you are logged into your YouTube (Google) / Vimeo account, then YouTube (Google) / Vimeo can allocate this information to your user profile. We have no influence on YouTube (Google) / Vimeo storing users’ IP addresses and other data. You can find information regarding data processing at the following link:

http://www.google.com/intl/de/policies/privacy/

vimeo.com/privacy

Twitter

Functions of the service provider Twitter are associated with our website. These features are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “retweet” feature, the websites you have visited are linked to your Twitter account and are disclosed to other users. Data are also transferred to Twitter in this way. Please note that we as the service provider of the website obtain no knowledge about the content of the transferred data or the use of such data by Twitter. Further information about this can be found in Twitter’s Data Protection Policy at twitter.com/privacy

You can change your data protection settings with Twitter by going to your account settings at twitter.com/account/settings

Right to request information

You have the right at any time to request information regarding personal information stored on you, the origin of such data and the purpose of the storage. Upon request, we will act in accordance with applicable law in notifying you in writing whether we hold personal information about you and which information we hold. If, despite our best endeavours, information stored is incorrect, we will rectify such information upon request. Information about the stored data is provided by the NA beim BIBB Internet Editing Team

If you have any questions regarding the topic of data privacy, the Data Protection Officer of the Federal Institute for Vocational Education and Training, Mr Bernd Fahr, is available via the contact form and by telephone on +49 228 107 1713.

Security

We employ technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction and against unauthorised access. Our security measures are continually improved according to technological development.

Data transfer

Your personal data will only be transferred to government organizations and authorities where this is legally required or for prosecution in the event of attacks on our network infrastructure. Personal data are not transferred to third parties for any other purpose.

Surveys and empirical studies

The data collected by NA beim BIBB within the scope of surveys and empirical studies is treated confidentially and is used for research purposes only. We do not collect any personal data in event evaluation questionnaires. When data are collected online, the details are transferred in an encrypted form (SSL). Only anonymised data sets are used for assessments so that it is not possible to trace any individual study participants. We use the software LimeSurvey, which we have installed on our web server.

Use and transfer of personal data and intended purpose

We only use your personal data for the purposes specified in the survey. Your data will not be disclosed to third parties without your express consent.