Privacy Statement
» Rights of the data subject
» Applications
» Analysis tools and advertising
» Use and application of Google Maps
» Social networks
» Legal principles
a) Personal data
Personal data means any information relating to an identified or identifiable natural person ('data subject'). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
A data subject is any identified or identifiable natural person whose personal data are processed by the controller responsible for the processing.
c) Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.
e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
f) Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
g) Controller or controller for processing
Controller or controller for processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
h) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
i) Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
j) Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
k) Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to them.
Urspring 1
D-89601 Schelklingen, Germany
Tel. +49 7394 246-0
Fax +49 7394 246-65
E-mail: info[at]urspringschule.de
Website: www.urspringschule.de
Data recording on this website
Cookies
The Urspring School Foundation's website uses cookies. Cookies are text files placed and stored on a computer system by a web browser.
Numerous websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for that cookie. It comprises a character sequence by means of which web pages and servers can be attributed to the specific web browser in which the cookie was stored. This enables the web pages and servers visited to distinguish the individual browser of the data subject from other web browsers containing other cookies. A specific web browser can be recognized and identified via the unique cookie ID.
By using cookies, the Urspring School Foundation can provide users of this website with technically error-free, optimized and more user-friendly services, which would not be possible without setting cookies.
By using a cookie, the information and offers on our website can be optimized in the interests of the user. Cookies allow us, as mentioned above, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. The user of an website that employs cookies is not required, for example, to enter their access data every time they visit the site, because this is handled by the website and the cookie stored on the user's computer system.
Further detailed information on the use of cookies in the analysis tools and advertising are covered separately elsewhere in this Privacy Statement.
The data subject may prevent the setting of cookies by our website at any time, using the corresponding setting in the web browser used, thereby permanently refusing the setting of cookies. In addition, cookies that have already been set can be deleted at any time via an web browser or other software programs. This is possible in all current web browsers. Where the data subject disables the setting of cookies in the web browser used, then in some circumstances not all functions of our website can be used to their full extent.
On the basis of point (f) of Article 6 (1) GDPR, cookies that are necessary to carry out the electronic communications operation or to provide certain functions desired by the data subject are stored. For technically error-free and optimised provision
of its services, the website operator has a legitimate interest in the storing of cookies. Insofar as other cookies – e.g. cookies in analysis tools or advertising – are stored, these are dealt with separately in this Privacy Statement.
We use the following types of cookies on the website urspringschule.de:
This website uses the following types of cookies, the scope and function of which are explained below:
- Transient cookies (session cookies)
On our website we use so-called session cookies (also called temporary or transient cookies). These cookies are stored only for the duration of your use of our website. At the end of each session the session cookies are deleted.
These cookies are absolutely necessary for the proper function of our website and cannot be technically deactivated. In general, these cookies are only set in response to actions you actively perform in response to a service request, such as determining your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies directly or to inform you about these cookies. However, some areas of the website may not function in this case.
The use of these session cookies is based on Art. 6 (1), point (f) GDPR. Without the use of these cookies, it is technically impossible for you to access and use the website.
- Persistent cookies
We also use other cookies on our website which enable us to recognise your Internet browser on your next visit and offer you an improved user experience.
These cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. The cookies remain stored on your terminal device until the validity period of the cookies has expired or you delete them.
On our website urspringschule.de we use the following types for the following purposes:
- Essential
Technically required cookies are those that are necessary for the smooth functioning of our website (legal basis: Art. 6 (1) points (B) and (f) GDPR). - Marketing
Marketing cookies are used by third parties or publishers to display personalised advertising. These cookies will only be activated if you have given your consent to the setting of these cookies (legal basis: Art. 6 (1) point (a) GDPR). You can clearly give your consent by actively clicking on "Accept" in the displayed notice after displaying a corresponding notice and continuing to use the website. You can revoke your consent at any time. Your revocation does not affect the lawfulness of the processing that took place on the basis of the consent until the revocation. - Analysis
These cookies collect statistical data on the use of our website. The purpose of collecting statistical data by means of these analysis cookies is mainly to optimise our security, performance, usability and content after an analysis. Legal basis is Art. 6 (1) point (a) GDPR. This may include cookies used by the providers of the tracking and analysis tools we use. For more information about third-party cookies, see the information about tracking and analysis tools and other functionality that uses third-party cookies.
On our website urspringschule.de the following cookies are in use:
| Cookie name | Provider | Function | Type | Validity |
| viewed_cookie_policy | Urspringschule | Stores the user's cookie approval status for cookies on the current domain. | Essential | 1 year |
| _gat | Is used by Google Analytics to limit the request rate. | Analysis | 1 min. | |
| _ga | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | Analysis | 2 years | |
| _gid | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | Analysis | 1 day | |
| _GPSLSC | This cookie is linked to a page speed script to improve the page speed (session). | Analysis | End of session | |
| _gac_UA-68036655-1 | Google Ads | This cookie is set when a user clicks on a Google ad to reach the website. It contains information about which ad was clicked, so that achieved successes such as orders or contact requests can be assigned to the ad. | Marketing | 90 days |
| _gcl_aw | Google Ads | This cookie is set when a user clicks on a Google ad to reach the website. It contains information about which ad was clicked, so that achieved successes such as orders or contact requests can be assigned to the ad. | Marketing | 90 days |
This is how you can delete your cookies:
You decide yourself how and whether you want to use cookies. Regardless of the provider or website from which the cookies originate, you always have the option of deleting cookies, allowing them only partially or deactivating them. For example, you may not agree to third-party cookies, but you can allow all other cookies.
If you want to see which cookies have been stored in your Internet browser, or if you want to change or delete cookie settings, you can find this in your browser settings:
Chrome: Delete, activate and manage cookies in Chrome
Safari: Manage cookies and website data with Safari
Firefox: Delete cookies to remove data that websites have stored on your computer
Internet Explorer: Delete and manage cookies
Microsoft Edge: Delete and manage cookies
If you do not wish to have cookies set as a matter of principle, you can configure your browser so that it always informs you when a cookie is to be set. This allows you to decide for each individual cookie whether or not you accept it. The procedure varies depending on the browser.
The best thing to do is to search the instructions in Google using the search term "Delete Chrome cookies" or "Disable Chrome cookies" in the case of a Chrome browser, or replace the word "Chrome" with the name of your browser, e.g. Edge, Firefox, Safari.
Recording of general data and information
The Urspring School Foundation's website records a range of general data and information each time the site is accessed by a data subject or an automated system. This general data and information are stored in the server's log files. The following may be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the web page from which an accessing system reaches our website (known as the referrer), (4) the subsites which are being directed to our website via an accessing system, (5) the date and time of access to the website, (6) an internet protocol (IP) address, (7) the internet service provider (ISP) of the accessing system and (8) other similar data and information that serve to defend against dangers in the event of attacks on our IT systems.
When using this general data and information, the Urspring School Foundation does not draw any conclusions about the data subject. Rather, this information is needed in order (1) to supply the content of our website correctly, (2) to optimize the content of our website and the advertising for it, (3) to ensure the permanent functionality of our IT systems and of the technology of our website, and (4) to provide the law enforcement authorities with the information needed to prosecute in the event of a cyber-attack. These data and information, collected anonymously, are therefore evaluated by the Urspring School Foundation on the one hand for statistical purposes and, in addition, with the aim of increasing data protection and data security in our organisation in order to ultimately ensure a optimum level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
Points (a), (b) and (c) of Article 6 (1) subparagraph (1) GDPR are the legal basis for the data processing.
The data are processed solely to answer your enquiry and are retained for the duration of the statutory retention period (6 years pursuant to section 257 (1) no. 2 para. 4 of the German Commercial Code (HGB)), insofar as it involves commercial correspondence. Insofar as the data entered are data that are not required for the performance of a contract or in order to take steps prior to entering into a contract, and where it does not involve commercial correspondence, you can withdraw your consent at any time by sending a simple e-mail to us.
Contact option via the website
By reason of statutory regulations, the website of the Urspring School Foundation contains information that enables rapid electronic take-up of contact with our organisation and direct communication with us, which similarly comprises a general address for electronic mail (e-mail address). Where a data subject makes contact with the controller for processing via e-mail or via a contact form, the personal data transferred by the data subject are automatically stored. Personal data of this kind transferred on a voluntary basis by a data subject to the controller for processing are stored for the purposes of processing or making contact with the data subject. These personal data are not forwarded to third parties.
Routine erasure and blocking of personal data
The controller for processing processes and stores personal data of the data subject only for the period necessary for achieving the purpose of storage or insofar as provision was made for this by European regulators or another regulator in laws or regulations to which the controller for processing is subject.
Where the purpose of storage lapses or where a storage period specified by European regulators or another responsible regulator expires, the personal data are routinely blocked or erased in accordance with the statutory regulations.
Rights of the data subject
a) Right to confirmation
Any data subject has the right granted by European regulators to obtain confirmation from the controller for processing as to whether or not personal data concerning them are being processed. If a data subject wishes to take up this right to confirmation, they can contact an employee of the controller for processing on the matter at any time.
b) Right to information
Any data subject affected by the processing of personal data has the right granted by European regulators to obtain information free of charge from the controller for processing at any time regarding the personal data stored about them and to obtain a copy of this information. Moreover, European regulators have granted the data subject access to the following information:
- the purposes of processing;
- the categories of personal data being processed;
- the recipients or categories of recipients in respect of whom the personal data were disclosed or are being disclosed, especially for recipients in third countries or for international organisations;
- if possible, the planned period for which the personal data are being stored, or, if this is not possible, the criteria for determining this period;
- the existence of a right to rectification or erasure of the personal data concerning them or to restriction of processing by the controller or of a right to object to this processing;
- the existence of a right to complain to a supervisory authority;
- if the personal data are not collected from the data subject: all available information about the origin of the data;
- the existence of automated decision-making including profiling pursuant to Article 22 (1) and (4) GDPR and — at least in these cases — reliable information about the logic involved and the scope and intended effects of such processing for the data subject.
Additionally, the data subject has a right of access as to whether personal data was transferred to a third country or to an international organisation. Where this is the case, the data subject further has the right to obtain information regarding suitable guarantees in connection with the transfer.
If a data subject wishes to take up this right to access, they can contact an employee of the controller for processing on the matter at any time.
c) Right to rectification
Any data subject affected by the processing of personal data has the right granted by European regulators to demand rectification without undue delay of inaccurate personal data concerning them. The data subject also has the right, taking into account the purposes of the processing, to demand the completion of incomplete personal data, which may be done by providing a supplementary statement.
If a data subject wishes to take up this right to correction, they can contact an employee of the controller for processing on the matter at any time.
d) Right to erasure (right to be forgotten)
Any data subject affected by the processing of personal data has the right granted by European regulators to demand of the controller that the personal data concerning them are deleted without undue delay where one of the following grounds applies and insofar as processing is not necessary:
- the personal data were collected for such purposes or processed in some other way for which they are no longer required;
- the data subject withdraws consent on which the processing is based according to point (a) of Article 6 (1) GDPR or point (a) of Article 9 (2) GDPR, and where there is no other legal ground for the processing;
- the data subject objects to the processing pursuant to Article 21 (1) GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2) GDPR;
- the personal data have been unlawfully processed;
- the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
- the personal data have been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR.
Insofar as one of the aforementioned grounds applies and a data subject wishes to initiate the erasure of personal data stored with the Urspring School Foundation, they can contact an employee of the controller for processing on the matter at any time. The employee of the Urspring School Foundation will arrange for the request for erasure to be satisfied without due delay. Where the personal data have been made public by the Urspring School Foundation and if our organisation as controller pursuant to Article 17 (1) GDPR is obligated to erase the personal data, the Urspring School Foundation, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that the data subject has requested the erasure by such other controllers of any links to, or copy or replication of, those personal data, insofar as the processing is not necessary. The employee of the Urspring School Foundation will make the necessary arrangements in the specific instance.
e) Right to restriction of processing
Any data subject affected by the processing of personal data has the right granted by European regulators to obtain from the controller restriction of processing where one of the following conditions applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing pursuant to Article 21 (1) GDPR and it is not yet verified whether the legitimate grounds of the controller override those of the data subject.
Insofar as one of the aforementioned grounds applies and a data subject wishes to claim the restriction of personal data stored with the Urspring School Foundation, they can contact an employee of the controller for processing on the matter at any time. The employee of the Urspring School Foundation will arrange the restriction of processing.
f) Right to data portability
Any data subject affected by the processing of personal data has the right granted by European regulators to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. Furthermore, they have the right to transfer these data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6 (1) GDPR or point (a) of Article 9 (2) GDPR or on a contract pursuant to point (b) of Article 6 (1) GDPR and the processing is carried out by automated means, where the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. In exercising their right to data portability pursuant to Article 20 (1) GDPR, the data subject also has
the right to have the personal data transmitted directly from one controller to another, where technically feasible and insofar as this does not impair the rights and freedoms of other persons. The data subject can contact an employee of the Urspring School Foundation at the time to assert their right to data portability.
g) Right to object
Any data subject affected by the processing of personal data has the right granted by European regulators to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them which is based on point (e) or (f) of Article 6 (1) GDPR. This also applies for profiling based on these provisions. In the event of objection, the Urspring School Foundation shall no longer process the personal data, unless we are able to demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. Where the Urspring School Foundation processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing. This also applies for profiling, to the extent that it is related to such direct marketing Where the data subject raises an objection with the Urspring School Foundation to processing for direct marketing processes, the Urspring School Foundation shall no longer process the personal data for these purposes. In addition, where personal data are processed at the Urspring School Foundation for scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) GDPR, the data subject, on grounds relating to their particular situation, has the right to object to the processing of personal data concerning them, unless the processing is necessary for the performance of a task carried out for reasons of public interest. To exercise their right to object, the data subject can contact any employee of the Urspring School Foundation or another employee directly. The data subject is further at liberty, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise their right to object by automated means using technical specifications.
h) Automated individual decision-making, including profiling
Any data subject affected by the processing of personal data has the right granted by European regulators not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning them or similarly significantly affects them, where the decision (1) is not necessary for entering into, or performance of, a contract between the data subject and the data controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent. If the decision is (1) necessary for entering into, or performance of, a contract between the data subject and the controller or (2) occurs with the express consent of the data subject, the Urspring School Foundation shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision. If a data subject wishes to take up rights connected with automated decision-making, they can contact an employee of the controller for processing on the matter at any time.
i) Right to withdraw consent given under data protection law
Any data subject affected by the processing of personal data has the right granted by European regulators to withdraw consent to the processing of personal data concerning them at any time. If a data subject wishes to take up rights connected with withdrawing consent, they can contact an employee of the controller for processing on the matter at any time.
j) Right to lodge a complaint with the responsible supervisory authority
Any data subject affected by the processing of personal data has the right granted by European regulators to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority is the "Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit", Königsstr. 10 a, 70173 Stuttgart, Germany.
Data protection for applications and in the application procedure
The collector for processing collects and processes the personal data from applications for the purposes of handling the application procedure. Processing may also be by electronic means. This is particularly the case of the application submits relevant application documents via an electronic means, for example via e-mail or via a web form found on the website, to the controller for processing. Where the controller for processing concludes a contract of employment with an applicant, the data transferred are stored for the purposes of handling the employment relationship, respecting the statutory regulations.Where the controller for processing does not conclude a contract of employment with an applicant, the application documents are erased two months after notification of the rejection decision, insofar as no other legitimate interests of the controller for processing oppose erasure. Other legitimate interests in this sense are, for example, a burden of proof in proceedings brought under the German Equal Treatment Act (AGG).
Section 26 (1) of the Federal Data Protection Act (BDSG) and point (f) of Article 6 (1) subparagraph (1) GDPR are the legal basis for the data processing. The controller for processing has a legitimate interest in the defence of claims of liability under the German Equal Treatment Act (AGG).
Analysis tools and advertising
Data protection provisions regarding the use and application of Google Analytics (with anonymisation function)
The controller for processing has integrated the component Google Analytics (with anonymisation function) on this website. Google Analytics is a web analysis service. Web analysis is the gathering, collection and evaluation of data about the behaviour of visitors to web pages. Amongst other things, a web analysis service records data concerning from which website a data subject has arrived to an website (known as the referrer), which subsites of the website are accessed, or how often and for what dwell period a subsite was viewed. A web analysis is mainly used to optimise an website and for cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The controller for processing uses the suffix "_gat._anonymizeIp" for the web analysis via Google Analytics. Using this suffix, the IP address of the internet connection of the data subject is shortened and anonymised by Google of the access to our web pages is made from a Member State of the European Union or from another signatory state to the EEA Agreement.
The purpose of the Google Analytics component is to analyse visitor traffic on our website. Google uses the data and information obtained, inter alia, to evaluate the use of our website, in order to prepare online reports for us showing activities on our web pages, and in order to provide further services connected with the use of our website.
Google Analytics places a cookie on the IT system of the data subject. The explanation of cookies was given above. By setting the cookie, Google is enabled to analyse use of our website. With each call-up of one of the individual pages of this website operated by the controller for processing and on which a Google Analytics component was integrated, the web browser on the IT system of the data subject is automatically triggered by the respective Google Analytics component to transfer data to Google for the purposes of online analysis. As part of this technical procedure, Google obtains knowledge of personal data, such as the IP address of the data subject, that assists Google amongst other things to understand the origin of the visitors and clicks and subsequently to enable commission settlements.
The cookie stores personal data such as the time of access, the location from which an access was initiated and the frequency of visits to our website by the data subject. With each visit to our web pages, these personal data – including the IP address of the internet connection used by the data subject – are transferred to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may forward these personal data gathered using the technical procedure to third parties under certain circumstances.
The data subject may prevent the setting of cookies by our website, as outlined above, at any time by making the corresponding setting in the web browser used, thereby permanently refusing the setting of cookies. Such a setting on the web browser used would also prevent Google from setting a cookie on the IT system of the data subject. In addition, a cookie already set by Google Analytics can be erased at any time via the web browser or other software programs.
Moreover, the data subject has the opportunity to object to recording of the data produced by Google Analytics relating to use of this website and the processing of these data by Google and to prevent same. To that end, the data subject must download a browser add-on from the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on informs Google Analytics via JavaScript that no data and information on the visits to web pages are permitted to be transferred to Google Analytics. Installation of the browser add-on is evaluated by Google as an objection. If the IT system of the data subject is deleted, formatted or reinstalled at a later time, a fresh installation of the browser add-on must be performed by the data subject in order to disable Google Analytics. Where the browser add-on is uninstalled or disabled by the data subject or another person attributable to their sphere of influence, the possibility exists of re-installing or else enabling the browser add-on again. As an alternative to the browser add-on, the data subject can prevent recording by Google Analytics by clicking on the following link: Disable Google Analytics. Doing so sets an opt-out cookie that prevents the future recording of data from the data subject when visiting this website. The opt-out cookie is stored on the device of the data subject, and applies only for this browser and this website. When deleting the cookies in this browser, the opt-out cookie must be set again.
Further information and Google's applicable privacy arrangements can be downloaded from https://www.google.de/intl/de/policies/privacy/ and from http://www.google.com/analytics/terms/de.html. Google Analytics is explained in greater detail at this link https://www.google.com/intl/de_de/analytics/.
Point (f) of Article 6 (1) subparagraph (1) GDPR and section 15 (3) TMG are the legal basis in this case
for the data processing. The controller for processing has a legitimate interest in the statistical evaluation of use of the website in order to optimise the site.
The IP address and other personal data are automatically erased in Google Analytics after 26 months.
Data protection regulations for the application and use of Matomo
Our Website uses Matomo. It is an open-source software in order to record and analyze the use of our website. Usage information is transmitted to our self-hosted server and stored for analysis purposes. The software is self-hosted, the log files, which are sensitive to data protection law, are only saved on this server. We use Matomo with the "Automatically Anonymize Visitor IPs" function. This anonymization function truncates your IP address by two bytes so that it is impossible to assign it to you or to the internet connection you are using.
Matomo is operated by InnoCraft Ltd., 150 Willis St., 6011 Wellington, New Zealand.
If you do not agree to this processing your are able to object at any time by clicking the button below. In this case, a so-called opt-out cookie is stored in your browser without usage data, which means that Matomo does not collect any session data:
Further information and Matomo's applicable data protection regulations can be found at https://matomo.org/privacy/.
Section 26 (1) of the Federal Data Protection Act (BDSG) and point (f) of Article 6 (1) subparagraph (1) GDPR are the legal basis for the data processing. The controller for processing has a legitimate interest in the defence of claims of liability under the German Equal Treatment Act (AGG).
Data protection provisions regarding the use and application of Google Remarketing
The controller for processing has integrated Google Remarketing services on this website. Google Remarketing is a function of Google AdWords, enabling an organisation to allow advertising to be faded in for internet users who have previously visited the website of the organisation. The integration of Google Remarketing accordingly permits an organisation to create user-targeted advertising and consequently to arrange for display of advertisements relevant to interests to the internet user.
The operating company of the Google Remarketing services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google Remarketing is to fade-in advertising relevant to interests. Google Remarketing enables us to arrange to display advertisements via the Google advertising network or on other web pages which are matched to the individual needs and interests of internet users.
Google Remarketing places a cookie on the IT system of the data subject. The explanation of cookies was given above. By setting the cookie, Google is enabled to recognise the visitor to our website if that visitor subsequently calls up web pages that are also a member of the Google advertising network. With each call-up of an web page on which the Google Remarketing service was integrated, the web browser of the data subject automatically identifies itself to Google. As part of this technical procedure, Google obtains knowledge of personal data such as the IP address or the surfing behaviour of the user, which Google uses amongst other things to fade in advertising relevant to interests.
The cookie stores personal data such as the web pages visited by the data subject. With each visit to our web pages, therefore, personal data – including the IP address of the internet connection used by the data subject – are transferred to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may forward these personal data gathered using the technical procedure to third parties under certain circumstances.
The data subject may prevent the setting of cookies by our website, as outlined above, at any time by making the corresponding setting in the web browser used, thereby permanently refusing the setting of cookies. Such a setting on the web browser used would also prevent Google from setting a cookie on the IT system of the data subject. In addition, a cookie already set by Google Analytics can be erased at any time via the web browser or other software programs.
Moreover, the data subject has the opportunity to object to advertising relevant to interests by Google. To do so, the data subject must call up the link www.google.de/settings/ads from each of the web browsers they have used and make the preferred settings there.
Further information and Google's applicable privacy arrangements can be downloaded from https://www.google.de/intl/de/policies/privacy/.
Point (f) of Article 6 (1) subparagraph (1) GDPR is the legal basis in this case for the data processing.
The controller for processing has a legitimate interest in the analysis, optimisation and commercial running of the website and in optimising the advertising activities.
Data protection provisions regarding the use and application of Google AdWords
The controller for processing uses the Google AdWords service. Google AdWords is a service for internet advertising that permits the advertiser to place advertisements both in the Google search engine results and in the Google advertising network. Google AdWords enables an advertiser to determine particular keywords in advance by means of which an advertisement in the Google search engine results is only displayed if the user calls up a search result relevant to the keyword using the search engine. In the Google advertising network, the advertisements are distributed to thematically-relevant web pages by means of an automatic algorithm and respecting the previously-determined keywords.
The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is advertising of our website through fading in advertising relevant to interests on the web pages of third-party companies and in the search engine results of the search engine.
Where a data subject reaches our website via a Google advertisement, a cookie known as a conversion cookie is stored on the IT system of the data subject by Google. The explanation of cookies was given above. A conversion cookie loses its validity after ninety days and does not serve to identify the data subject. Where the conversion cookie has not yet expired, the cookie tracks whether particular subsites, such as the contact form submit confirmation, were accessed on our website.
Google uses the data and information gathered by using the conversion cookie to generate visit statistics for our website. These visit statistics are, in turn, used by us to determine the total number of users who were introduced to us via AdWords advertisements, i.e. to determine the success or failure of the respective AdWords advertisement and to optimise our AdWords advertisements for the future. Neither our organisation nor other advertising customers of Google AdWords receive information from Google by means of which the data subject could be identified.
The conversion cookie stores personal data such as the web pages visited by the data subject. With each visit to our web pages, therefore, personal data – including the IP address of the internet connection used by the data subject – are transferred to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may forward these personal data gathered using the technical procedure to third parties under certain circumstances.
The data subject may prevent the setting of cookies by our website, as outlined above, at any time by making the corresponding setting in the web browser used, thereby permanently refusing the setting of cookies. Such a setting on the web browser used would also prevent Google from setting a conversion cookie on the IT system of the data subject. In addition, a cookie already set by Google AdWords can be erased at any time via the web browser or other software programs.
Moreover, the data subject has the opportunity to object to advertising relevant to interests by Google. To do so, the data subject must call up the link www.google.de/settings/ads from each of the web browsers they have used and make the preferred settings there.
Further information and Google's applicable privacy arrangements can be downloaded from https://www.google.de/intl/de/policies/privacy/.
Point (f) of Article 6 (1) subparagraph (1) GDPR is the legal basis in this case for the data processing.
The controller for processing has a legitimate interest in the analysis of user behaviour in order to optimise the website and its advertising activities for the website.
Privacy policy on the use and application of Google Maps
For data protection reasons, this website does not use a direct Google Maps connection, as this would lead to an automatic data exchange with Google when the page is called up. Instead, we have only set links to Google Maps. These links are marked as external links. If you click on them, you will leave our website and be directed to Google Maps. There, a processing of personal data by Google may take place. Google alone is responsible here in the sense of data protection law. If the data subject is already logged in to Google at the time the link is clicked, Google may be able to determine the user name of the data subject from the transmitted data and associate this information with the personal user account at Google. The data subject can exclude this possibility of allocation to the personal user account by logging out of the user account beforehand.
Data protection provisions regarding the use and application of Facebook
The controller for processing has integrated links to Facebook on this website. Facebook is a social network.
A social network is a social meeting-place operated on the internet, an online community, generally enabling users to communicate with one another and to interact in the virtual space. A social network can serve as a platform for exchanging opinions and experiences or it may enable the internet community to provide personal or organisation-related information. Facebook enables users of the social network, amongst other things, to create private profiles, to upload photos and to network via friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller responsible for processing personal data, if a data subject lives outside the USA or Canada, is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
By clicking on these links, the data subject reaches the corporate page of Urspring School Foundation on Facebook. By clicking on a link to Facebook, a connection is established to the Facebook servers. The information is then transmitted to the Facebook servers that the data subject has visited this website. Further data are also transferred to Facebook: the address of the website on which the enabled link is located, the date and time the web page is accessed or the link is enabled, browser and operating system, IP address.
If the data subject is already logged into Facebook at the time the link is enabled, Facebook can be in a position to determine the user name and possibly even the real name of the data subject from the data transferred and to assign this information to the personal user account at Facebook.
The data subject is able to exclude this possibility of assignment to the personal user account by logging out from the user account beforehand.
The data policy published by Facebook, downloadable from https://de-de.facebook.com/about/privacy/, provides details regarding the gathering, processing and use of personal data by Facebook. The policy also offers an explanation of the settings options Facebook offers for protecting the privacy of the data subject. Moreover, various applications are available that make it possible to suppress data transfer to Facebook. Such applications can be used by the data subject to suppress data transfer to Facebook.
Data protection provisions regarding the use and application of YouTube
The controller for processing has integrated components from YouTube with extended privacy mode on this website. YouTube is an internet video portal enabling video publishers to post video clips for free and other users to view, rate and comment on these clips, also for free. YouTube permits the publication of all types of videos, which is why both full film and TV broadcasts, but also music videos, trailers or videos made by users themselves can be downloaded via the internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
If the data subject clicks on these links, they reach a video of Urspring School Foundation on YouTube. By clicking on a link to YouTube, a connection is established to the YouTube servers. The information is then transmitted to the YouTube servers that the data subject has visited this website. Further data are also transferred to YouTube: the address of the website on which the enabled link is located, the date and time the web page is accessed or the link is enabled, browser and operating system, IP address.
If the data subject is already logged into YouTube at the time the link is enabled, YouTube and Google can be in a position to determine the user name and possibly even the real name of the data subject from the data transferred and to assign this information to the personal user account at YouTube.
The data subject is able to exclude this possibility of assignment to the personal user account by logging out from the user account beforehand.
The data policy published by YouTube, downloadable from https://www.google.de/intl/de/policies/privacy/, provides details regarding the gathering, processing and use of personal data by YouTube and Google.
Legal basis for processing
Point (a) of Article 6 (1) GDPR serves our organisation as the legal basis for the processing operations by means of which we obtain a consent for a particular purpose of processing. If the processing of personal data is necessary for performance of a contract where the contractual party is the data subject, as is the case for example with processing operations necessary for supply of goods or provision of another service or counter-performance, then the processing is based on point (b) of Article 6 (1) GDPR. The same applies for such processing operations that are necessary for carrying out pre-contractual measures, for example in cases of enquiries relating to our products or services. Where our organisation is subject to a legal obligation through which processing of personal data becomes necessary, for example in order to satisfy tax obligations, then the processing is based on point (c) of Article 6 (1) GDPR. In rare instances, the processing of personal data could become necessary in order to protect vital interests of the data subject or of another natural person. This would be the case, for instance, if a visitor to our business were to be injured and thereupon their name, age, medical insurance details or other vital information needed to be forwarded to a doctor, a hospital or other third party. In that case, the processing would be based on point (d) of Article 6 (1) GDPR. Finally, processing operations could be based on point (f) of Article 6 (1) GDPR. Processing operations not covered by any of the aforementioned legal bases are based on this legal principle of the processing is necessary to safeguard a legitimate interest of our organisation or of a third party, insofar as the interests, basic rights and basic freedoms of the data subject do not override it. Such processing operations are in particular permitted to us due to the fact that they have been specifically mentioned by European regulators. They have in that regard advanced the view that a legitimate interest could be assumable of the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
Legitimate interests in processing undertaken by the controller or a third party
Where the processing of personal data is based on point (f) of Article 6 (1) GDPR, our legitimate interest is the performance of our business activity to the benefit of the well-being of all our employees and of our shareholders.
Duration for which the personal data are stored
The criterion for the duration of storage of personal data is the respective statutory retention period. Following expiry of that period, the relevant data are routinely erased, insofar as they are no longer necessary for contractual performance or contract initiation.
Statutory or contractual requirements for provision of personal data; necessity for conclusion of contract; obligation on the data subject to provide the personal data; possible consequences of failure to provide.
We hereby advise that the provision of personal data in parts is specified in law (e.g. tax requirements) or may arise from contractual arrangements (e.g. information about the contractual partner). Sometimes it can be necessary for conclusion of a contract that a data subject provides us with personal data which must subsequently be processed by us. The data subject is obliged, for example, to provide us with personal data if our organisation is concluding a contract with the data subject. Failure to provide the personal data would have the consequence that the contract with the data subject could not be concluded. Before provision of personal data by the data subject, the data subject must contact one of our employees. Our employee shall clarify for the data subject, specific to the individual instance, whether the provision of the personal data is specified in law or contractually or is necessary for conclusion of the contract, whether there is an obligation to provide the personal data, and what consequences the failure to provide the personal data would have.
Existence of automated decision-making
As a responsible organisation, we forego automated decision-making or profiling.
This Privacy Statement was created by the Privacy Statement Generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH.