Data protection information
Below we inform you about the processing of your personal data by us and the claims and rights to which you are entitled under data protection regulations.
Data protection is important to us! That is why we only ever collect and process your personal data in accordance with the statutory provisions. With these explanations, we would like to fulfill our information and transparency obligations with regard to the collection and processing of your personal data. The specific personal data we process from you is determined by the respective business relationship.
With regard to the collection of personal data when using our website and the functions provided on it, we refer to our separate data protection declaration, available at https:/inu.de/datenschutz.
- Name and contact details of the controller and the company data protection officer
This data protection information applies to data processing by:
INU – Innovative University AG
Widdersdorfer Strasse 262
50933 Cologne
(hereinafter: INU),
Tel: +49 221 66 99 21 0
E-Mail: [email protected]
Website: www.inu.de
The company data protection officer of INU can be contacted at
DATAIX GmbH
- For the attention of Mr. Sebastian Hinze, LL.M.
Bischof-Hemmerle-Weg 9
52076 Aachen
Tel: 0241 / 510 555 00
Fax: 0241 / 510 555 50
E-Mail: [email protected]
reachable.
- Collection and storage of personal data as well as type and purpose and their use
- We generally collect your data directly from you. As a rule, you provide us with this data with your order and as part of the business relationship. We only collect the mandatory data that is required for the respective contractual purpose. Any additional information is voluntary. In certain cases, however, we may receive personal data from third parties (e.g. logistics service providers, communications agencies or digital publication partners, etc.) if this is necessary for the performance of our business relationship.
Relevant personal data are personal details (in particular name, postal address, communication data and date of birth). In addition, this may also include order data (e.g. data from a payment order), data from the fulfillment of our contractual obligations (e.g. data for payment transactions), advertising, customer satisfaction survey and sales data, documentation data (e.g. conversation and consultation protocols), data about your use of our offered digital products (e.g. times of access and use of our websites, apps or newsletters, clicked pages from us or entries) as well as other data comparable to the categories mentioned.
In addition, data from the following categories, which are collected in the course of the business relationship, may also be used:
- Customer master data such as name, address, place of residence, dates of birth
- Billing data (different billing address), change of bank details for payment processing
- Contract / service data (e.g. order, different delivery address)
- Communication data for establishing and maintaining a contractual relationship via electronic communication channels, e.g. e-mail address, telephone and/or mobile phone number, fax number
- Voluntary information on special service requests
- Information on consent to advertising, use of your e-mail address or telephone number for advertising and to create profiles
- Access data and content provided when using the customer portal
- Anonymous or pseudonymized data for your own statistical analyses and marketing reports
On the other hand, we may also process personal data that we have legitimately obtained from publicly accessible sources (e.g. commercial and association registers, Internet, other media, etc.) and are permitted to process.
- We collect and process your data in accordance with the statutory provisions, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as well as other legal bases (such as the German Telemedia Act (TMG) in the area of electronic communication) for the following purposes:
- for the fulfillment of contractual obligations (Art. 6 para. 1 b GDPR)
The processing of personal data (Art. 4 No. 2 GDPR) is carried out for the following purposes:
- For processing offers and orders
- To provide and arrange additional services (e.g. newsletter orders, participation in competitions, etc.), in particular to carry out these measures with you and to execute your orders.
Further details on the purpose of data processing can be found in the respective contract documents and terms and conditions.
- as part of the balancing of interests (Art. 6 para. 1 f GDPR)
Where necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties. Examples
- Examination and optimization of procedures for needs analysis and direct customer contact
- Advertising or market and opinion research, unless you have objected to the use of your data
- Assertion of legal claims and defense in legal disputes
- Measures for business management and further development of services and products
- Consultation of and data exchange with credit agencies (e.g. SCHUFA to determine creditworthiness or default risks and current addresses)
- Ensuring IT security
- Prevention and investigation of criminal offenses
- on the basis of your consent (Art. 6 para. 1 a GDPR)
If you have given us your consent to process personal data for certain purposes (e.g. forwarding data to cooperation partners), the lawfulness of this processing is based on your consent. Any consent given can be revoked at any time.
If you have expressly consented, we will also use your data for sales and marketing information about our products that we send to you via electronic channels (e.g. email, telephone, fax, SMS, messenger, etc.) (Art. 6 para. 1 a GDPR, Section 7 UWG).
Please note that a revocation is only effective for the future. Processing that took place before the revocation is not affected.
- on the basis of legal requirements (Art. 6 para. 1 c GDPR) or in the public interest (Art. 6 para. 1 e GDPR)
As a company, we are also subject to various legal obligations, i.e. legal requirements (e.g. tax laws, UWG, etc.). The purposes of processing may include fraud and money laundering prevention, as well as the fulfillment of tax control and reporting obligations, the assessment and management of risks and the provision of information to authorities.
- Disclosure of data to third parties
- Within our company, access to your data is granted to those departments that need it to fulfill the above-mentioned purposes, in particular our contractual obligations. In order to provide our contractual services, we use selected service providers (processors, Art. 28 GDPR) and vicarious agents who may have access to your data to the extent necessary and use it to fulfill the orders we have placed. These are companies, for example, in the categories of IT services, logistics, printing services, telecommunications, debt collection and consulting as well as sales, marketing and customer satisfaction surveys. All service companies commissioned by us are checked for their data protection standards before the contract is awarded and are obliged to comply with the statutory data protection requirements. Data is only passed on to recipients outside the company if this is required or permitted by law or if you have given your consent.
- Data is not transferred to third countries (countries outside the European Economic Area – EEA).
- Duration of storage
We store the data you provide (name, postal address, e-mail address and password) for as long as you revoke any consent you may have given.
Finally, we are also subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB). The retention and documentation periods specified there are up to ten years.
In addition, the storage period also depends on the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to 30 years.
- Obligation to provide personal data
As part of our business relationship, you only need to provide the personal data that is required to enter into, establish, execute and, if necessary, terminate a business relationship or contract. If you do not provide this personal data, we will unfortunately have to refuse to conclude the contract or execute the order or will no longer be able to perform an existing contract and will have to terminate it if necessary.
- Rights of data subjects
You have the right:
- in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;
- in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, and
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.
- Right of objection
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR which we use for advertising purposes.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
- In individual cases, we process your personal data for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising.
- If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
- If you wish to exercise your right to object, simply send an e-mail to [email protected]
