The controller within the meaning of the General Data Protection Regulation (hereinafter: "GDPR") for the data processing of personal data on our Website is
AICU GmbH
c/o Campus Founders
Bildungscampus 1
D-74076, Heilbronn
Deutschland
Our appointed data protection officer is:
Kertos GmbH
Briennerstraße 41
80333 München
Deutschland
E-Mail: dsb@kertos.io
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address or IP address. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, e.g. by anonymising the information, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis such as your consent.
a) Scope and purpose of data processing
We collect and use our users' personal data only insofar as this is technically necessary to provide a functional Website and our content and services or information.When you access and use our Website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.The following information is collected without any action on your part and stored until it is automatically deleted:
We process the aforementioned data for the following purposes:
b) Legal basis
Art. 6 para. 1 lit. f GDPR serves as the legal basis. The processing of the aforementioned data is necessary for the provision of a Website and to enable secure and convenient use and thus serves to safeguard a legitimate interest of our company.
c) Storage period and data erasure
As soon as the aforementioned data is no longer required to display the Website, it is deleted (latest within 30 days). The collection of data for the provision of the Website and the storage of data in log files is absolutely necessary for the operation of the Website. Consequently, the user has no option to object. Further storage will take place in individual cases if this is required by law.
d) Third Parties
For the hosting of the Website we use an external service provider, Webflow, Inc.,
398 11th St., Floor 2, San Francisco, CA 94103 (hereinafter: "Webflow"). Your personal data will be passed on to Webflow in order to provide the services. Webflow’s servers are based in the United States, therefore it is possible that the personal data collected is transferred to the United States. There is an EU commisson adequancy decision for data transfers to the US, the EU-U.S. Data Privacy Framework. “Webflow” is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR.For more information, please refer to Webflow’s Privacy Policy (https://webflow.com/legal/eu-privacy-policy) or ask us about the DPA that has been concluded.
a) Scope and purpose of data processing
On our Website, we offer you the opportunity to contact us by E-Mail. When you contact us, the personal data you provide such as title, name, content of the e-mail and your e-mail address, will be processed.This data is processed by us for the purpose of enabling us to process your enquiry properly. If you contact us by e-mail, your personal data will not be passed on to third parties.
b) Legal basis
The data processing described above for the purpose of establishing contact is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interests in being able to process your enquiry. If your enquiry serves to prepare the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis.
c) Storage period and data erasure
As soon as your enquiry has been dealt with and the matter in question has been conclusively clarified, your personal data processed via the contact form will be deleted. Further storage may take place in individual cases if this is required by law or is necessary for the fulfilment of the contract.
a) Scope and purpose of data processing
On our website, we offer you the opportunity to get in touch with us via a contact form, e.g. regarding a consultation. For this purpose we use “webflow” provided by Webflow, Inc.
398 11th St., Floor 2, San Francisco, CA 94103 (hereinafter: "Webflow"). Your personal data will be passed on to Webflow in order to provide the services. Webflow’s servers are based in the United States, therefore it is possible that the personal data collected is transferred to the United States. There is an EU commisson adequancy decision for data transfers to the US, the EU-U.S. Data Privacy Framework. “Webflow” is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. If you contact us via this form, the following personal data will be processed:
This data is processed by us for the purpose of enabling us to process your enquiry properly. When using the contact form, your personal data will not be passed on to third parties.
b) Legal basis
The data processing described above for the purpose of establishing contact is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interests in being able to process your enquiry. If your enquiry serves to prepare the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis.
c) Storage period and data erasure
As soon as your enquiry has been dealt with and the matter in question has been finally clarified, your personal data processed via the contact form will be deleted. Further storage may take place in individual cases if this is required by law or is necessary for the fulfilment of the contract.
a) Scope and Purpose of Data Processing
On our website, we offer you the opportunity to schedule a demo of our Services via Google Calander Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (hereinafter: "Google"). When you use this tool, the following personal data will be processed:
This data is processed to facilitate the scheduling of a demo and to communicate with you regarding your appointment. The data entered in the booking form will only be used for the purpose of managing the appointment and will not be shared with third parties unless explicitly required to fulfill the service.The information is usually forwarded to a Google server in the USA and stored there. There is an EU commisson adequancy decision for data transfers to the US, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR.
b) Legal Basis
The processing of your personal data for booking a demo is necessary to fulfill a contractual obligation or to take steps prior to entering into a contract, pursuant to Art. 6 (1) (b) GDPR. The demo is a key step in evaluating and providing our Services to you or your organization
c) Storage Period and Data Erasure
Your personal data related to the demo booking will be retained until the appointment has been completed and no further communication or follow-up actions are required. If no contract or further interaction follows, your data will be deleted after 90 days, unless legal retention obligations require further storage.
For managing your consent to the use of cookies and other tracking technologies, we use the consent tool “Cookiebot by Usercentrics”. This gives you the opportunity to accept or decline the processing of your device information and personal data using cookies and other tracking technologies. The purpose of “Usercentrics” is to allow users of the website to decide wether to allow cookies and similar technologies, and to offer them the opportunity to change settings every time they use the website.
By using “Usercentrics”, we process personal data as well as information from the devices. Your data will be sent to Usercentrics (Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany). The Information about the settings you have made is stored on your device.
a) Scope and purpose of data processing
We use cookies on our website.A cookie is a set of information that isstored on your computer when you visit our website and enable your browser to be reassigned. Cookies store information such as your language settings, the duration of your visit to our website or the entries you make there.There are different types of cookies. Session cookies are temporary cookies that are stored in the user's Internet browser until the browser window is closed and the session cookies are deleted. Permanent or persistent cookies are used for repeated visits and are stored in the user's browser for a predefined period of time. First-party cookies are set by the website that the user visits. Only this website is authorised to read information from the cookies. Third-party cookies are set by organisations that do not operate the website that the user is visiting.A distinction can also be made between technically necessary, functional and advertising cookies. The former are necessary to ensure basic website functions (such as saving the language setting). Functional cookies collect information about the user's behaviour and whether they receive any error messages. Advertising cookies, on the other hand, are used to offer the user customised advertising.
b) Legal basis
Due to the purposes of use described, the legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR, as we have an interest in the user-friendly presentation of our website. If you have given us your consent to the use of functional and advertising cookies on the basis of a notice ("cookie banner") provided by us on the website, the legality of the use is also governed by Art. 6 para. 1 sentence 1 lit. a GDPR.
c) Storage period and data erasure
As soon as the data transmitted to us via the cookies is no longer required to fulfil the purposes described above, this information is deleted. Further storage will take place in individual cases if this is required by law.
d) Configuration of the browser settings
Most browsers are set to accept cookies by default. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if cookies are deactivated by your browser settings on our website. You can also use your browser settings to delete cookies already stored in your browser or to display the storage period. It is also possible to set your browser to notify you before cookies are stored. As the various browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options.
e) Cookie list
We use tracking and analysis tools to ensure the continuous optimisation and needs-based design of our website. With the help of tracking measures, we are also able to statistically record the use of our website by visitors and to further develop our online offering for you with the help of the knowledgegained. If you have given us your consent to the use of cookies on the basis of a notice ("cookie banner") provided by us on the website, the legality of the use is also based on Art. 6 para. 1 sentence 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the processed data.
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, US; hereinafter: "Google"). Google Analytics uses "cookies" (see § 5) and similar tracking methods such as device fingerprinting
The information stored inthese cookies, for example about the time, place and frequency of your use of this website, is usually forwarded to a Google server in the USA and stored there. There is an EU commisson adequancy decision for data transfers to the US, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics may also collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Google will use the information generated by cookies on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can generally prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can withdraw your consent to the processing and transfer to third countries at any time in the consent tool “cookiebot”. This will not affect the lawfulness of the processing before.
This website uses Google Tag Manager, wich is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (hereinafter: "Google"). Google Tag Manager allows the management of website tags. When you visit the website, an HTTP-Request is sent to Google. As a result, device information (such as your IP address) are transmitted to Google and within to a Google Server in the USA. There is an EU commisson adequancy decision for data transfers to the US, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR.
You can withdraw your consent to the processing and transfer to third countries at any time in the consent tool “Cookiebot”. This will not affect the lawfulness of the processing before.
a) Scope and purpose of data processing
Our presence on social networks and platforms serves to improve active communication with our customers and interested parties. Therefore, a link to our company page on the social network "LinkedIn" provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is integrated on our Website. Based on the data transmitted to the respective service via the social plugin, the service may be able to assign you to your account with it.Before you click on the link no data is transferred directly to LinkedIn. Data is only transferred when you click on the button. By doing so, you leave our Website and establish a direct connection between your browser and the Facebook servers. Information on the data that is subsequently collected by LinkedIn can be found here:https://de.linkedin.com/legal/privacy-policy
b) Legal basis
The legal basis for this processing of your personal data is your consent (by clicking on the button) according to Art. 6 para. 1 lit. a GDPR.
Within our company, only those persons have access to your personal data who need it for the purposes stated in each case. Your personal data will only be passed on to external recipients if we are legally authorized to do so or if we have your consent. Below you will find an overview of the relevant recipients:
We process your data mainly within the European Union (EU) and the European Economic Area (EEA). However, some of our service providers may be based outside the EEA in so-called "third countries". The General Data Protection Regulation places high demands on the transfer of personal data to third countries. All our data recipients must fulfil these requirements. Before we transfer your data to a service provider in a third country, each service provider is first checked for its level of data protection. A service provider is only selected if it can demonstrate an adequate level of data protection outside the EEA. Regardless of whether our service providers are based within the EEA or in third countries, each service provider must conclude an order processing agreement with us. Service providers outside the EEA must fulfil additional requirements. In accordance with Art. 44 ff. GDPR, personal data may be transferred to service providers who fulfil at least one of the following requirements:
We undertake to treat your personal data confidentially. In order to prevent manipulation, loss or misuse of your data stored by us, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.
However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data - e.g. when sent by e-mail - may be read by third parties. We have no technical influence on this. It is your responsibility as a user to protect the data you provide against misuse by means of encryption or in any other way.
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
You have the following legal rights against us regarding your personal data:
Right of access
You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.
Right to rectification
You have the right to request the rectification of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.
Right to erasure ("right to be forgotten")
You have the right to request erasure if the processing is not necessary. This is the case, for example, if your data is no longer required for the original purposes, if you have revoked your declaration of consent under data protection law or if the data has been processed unlawfully.
Right to restriction of processing
You have the right to restrict processing, e.g. if you believe that the personal data is incorrect.
Right to data portability
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you. In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
Right to withdraw your consent under data protection law
You can revoke your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the legality of the processing carried out up to the point of revocation.
Without prejudice to these rights, you have the right to lodge a complaint with a supervisory authority at any time if you believe that the processing of your personal data violates data protection regulations.
.ico){kind=small}