Controller

The controller within the meaning of data protection legislation, in particular the EU General Data Protection Regulation (GDPR), is:

Nathalie Wallner

Owner of LeadershipAkademie.Online

Address:

Wacholderstraße 10

84051 Essenbach

Germany

Contact:

Telephone: 08703 9894364

Email: info@leadershipakademie.info

Website: www.leadershipakademie.online

Thank you for visiting our website. The secure handling of your data is particularly important to us. We therefore wish to provide you with detailed information about how your data is used when you visit our website.

Legal basis for processing

Article 6(1), first sentence, point (a) GDPR serves as the legal basis for processing operations for which our company obtains consent for a specific purpose. Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, for example for the delivery of goods or the provision of another service or consideration, processing is based on Article 6(1), first sentence, point (b) GDPR. The same applies to processing operations necessary for taking steps prior to entering into a contract, for example in response to enquiries about our products or services. Where our company is subject to a legal obligation requiring the processing of personal data, such as compliance with tax obligations, processing is based on Article 6(1), first sentence, point (c) GDPR. In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or another natural person, pursuant to Article 6(1), first sentence, point (d) GDPR. Finally, processing operations may also be based on Article 6(1), first sentence, point (f) GDPR. This legal basis applies to processing not covered by any of the preceding legal bases where processing is necessary for the legitimate interests pursued by our company or a third party, provided that the interests or fundamental rights and freedoms of the data subject do not override those interests.

Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We disclose your personal data to third parties only if:

• you have given your express consent pursuant to Article 6(1), first sentence, point (a) GDPR;
• disclosure is necessary for the establishment, exercise or defence of legal claims pursuant to Article 6(1), first sentence, point (f) GDPR, and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed;
• disclosure is required by law pursuant to Article 6(1), first sentence, point (c) GDPR; or
• disclosure is legally permissible and necessary for the performance of contractual relationships with you pursuant to Article 6(1), first sentence, point (b) GDPR.

Rights of data subjects

You have the right:

• under Article 15 GDPR, to request information about your personal data processed by us, including the purposes of processing, categories of personal data, categories of recipients to whom your data has been or will be disclosed, the envisaged retention period, rights to rectification, erasure, restriction of processing or objection, the right to lodge a complaint, the source of your data where not collected from you, and the existence of automated decision-making, including profiling, and meaningful information about its details where applicable;
• under Article 16 GDPR, to request the immediate rectification of inaccurate personal data or completion of incomplete personal data stored by us;
• under Article 17 GDPR, to request erasure of personal data stored by us unless processing is necessary for exercising the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest, or the establishment, exercise or defence of legal claims;
• under Article 18 GDPR, to request restriction of processing if you contest the accuracy of the data, processing is unlawful but you oppose erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21 GDPR;
• under Article 20 GDPR, to receive personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
• under Article 7(3) GDPR, to withdraw consent previously given to us at any time, with the consequence that processing based on that consent may no longer continue in the future; and
• under Article 77 GDPR, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider that processing of your personal data infringes the GDPR. As a rule, you may contact the supervisory authority at your habitual residence, place of work or the place of the alleged infringement.

Right of access, rectification, blocking, erasure and objection

Upon written request, we will inform you about the personal data we hold concerning you. You also have the right to rectification, blocking, objection or erasure of such data. Requests should be sent to the address stated in the legal notice on our website.

Right to object

Where your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR on grounds relating to your particular situation or where the objection relates to direct marketing. In the latter case, you have a general right to object, which I will implement without requiring you to state a particular situation. To exercise your right to withdraw consent or object, simply send an email to the address stated in the legal notice on our website.

General collection of data

When you access our website or retrieve a file, data relating to this process is stored in a log file on our web server. In particular, the following data may be stored:

• IP address (stored in anonymised form where possible)
• Domain name of the website from which you came
• Names of files accessed
• Date and time of access
• Name of your internet service provider
• Where applicable, operating system and browser version of your device

We store IP addresses only for data security purposes in order to ensure the stability and security of our system (legal basis: Article 6(1)(f) GDPR). We reserve the right to perform statistical analyses of anonymised datasets.

Cookies

Our website uses cookies. A cookie is a text file created when a website is visited and temporarily stored on the website user’s system. If the user accesses our website server again, the user’s browser sends the previously received cookie back to the server. The server can analyse the information obtained through this process. Cookies can, for example, control the display of advertisements or make navigating a website easier. Cookies are also necessary to enable the functionality of our website (the legal basis cited is Article 6(1)(f) GDPR, the legitimate interests of the website operator; we use cookies only in accordance with Article 5(1)(a) GDPR, i.e. the principles of lawfulness, fairness and transparency). If you wish to prevent the use of cookies, you can do so through the local settings of your internet browser (for example, Internet Explorer, Mozilla Firefox, Opera or Safari).

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their residence, place of work or the place of the alleged infringement, if they consider that the processing of personal data relating to them infringes the EU General Data Protection Regulation (GDPR).

Right to data portability

You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format.

Links to other websites

Our website/app may from time to time contain links to third-party websites or to other websites operated by us. If you follow a link to any of these websites, please note that they have their own privacy policies and that we accept no responsibility or liability for those policies. Please review the relevant privacy policies before providing personal data to those websites.

SSL encryption

This website uses SSL (Secure Socket Layer) encryption to transmit data from your browser to our server and to servers providing files that we embed on our website. SSL transmits data in encrypted form. The data cannot be altered and the sender can be identified. You can recognise SSL encryption by the “https” prefix in the website address displayed in your browser.

References to third-party websites

This website provides references to third-party websites in the form of links. Data is transmitted to the linked destination only when you click such a link. This is technically necessary. The transmitted data includes, in particular, your IP address, the time at which you clicked the link, the page on which you clicked the link, and information about your internet browser. If you do not want this data transmitted to the linked destination, do not click the link.

ProvenExpert rating badge

We use a rating badge provided by Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin, Germany (“ProvenExpert”). This badge displays current customer reviews in the form of star ratings and comments received. In doing so, your IP address, the page you visited, the time of access and your browser configuration are transmitted to ProvenExpert. Further information can be found in the ProvenExpert privacy information.

Wordfence

We have integrated Wordfence into this website. The provider is Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”). Wordfence protects our website against unwanted access and malicious cyberattacks. For this purpose, our website establishes a permanent connection to Wordfence servers so that Wordfence can compare accesses to our website with its databases and block them where necessary. Wordfence is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting the website against cyberattacks as effectively as possible. Where corresponding consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR; consent may be withdrawn at any time. Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available at: https://www.wordfence.com/help/general-data-protection-regulation/.

Google Fonts

This website uses certain fonts provided by Google for display purposes. When you access a page, your browser loads these fonts. Your IP address and the page (internet address) you visited are transmitted to a Google server. Further information about Google Fonts is available at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.

YouTube videos

We have embedded YouTube videos on our website. These videos are stored on the servers of the YouTube provider and can be played on our website through an embedded player. Videos are embedded with enhanced privacy settings enabled. When you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer and data may be transmitted to Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA, as the operator of YouTube.

According to the information currently available, at least the following data is transmitted to Google Inc. as the operator of YouTube and the DoubleClick network when YouTube videos are played: IP address and cookie, the specific address of the page accessed on our website, the system date and time of access, and your browser identifier.

This data is transmitted regardless of whether you have a Google user account and are logged in or do not have an account. If you are logged in, this data may be associated directly with your account by Google. If you do not want this association with your profile, you must log out before activating the video play button.

YouTube and Google Inc. store this data as user profiles and may use it for advertising, market research and/or the needs-based design of their websites. Such analysis is carried out in particular (including for users who are not logged in) to provide targeted advertising and inform other users about your activities on our website. You have the right to object to the creation of these user profiles; to exercise that right, you must contact Google as the operator of YouTube.

Further information about the purpose and scope of data collection and its processing by Google is available on the relevant information page.

ZOOM conferencing system

We use the “Zoom” tool to conduct conference calls, online meetings, video conferences and/or webinars (hereinafter “online meetings”). Zoom is a service provided by Zoom Video Communications, Inc., based in the USA.

Note: If you visit the Zoom website, the Zoom provider is responsible for data processing. However, visiting the website is only necessary to download the Zoom software. You can also use Zoom by entering the relevant meeting ID and, where applicable, other meeting access details directly in the Zoom app. If you do not wish to or cannot use the Zoom app, basic functions are also available through a browser version, which you can find on the Zoom website.

What data is processed?

Different types of data are processed when using Zoom. The scope of the data also depends on the information you provide before or during participation in an online meeting. The following personal data is processed:

User details: first name, last name, telephone number (optional), email address, password (if single sign-on is not used), profile picture (optional), department (optional).

Meeting metadata: topic, description (optional), participant IP addresses, device/hardware information.

For recordings (optional): MP4 file containing all video, audio and presentation recordings; M4A file containing all audio recordings; text file containing the online meeting chat.

For telephone dial-in: incoming and outgoing telephone numbers, country name, start and end times. Additional connection data, such as the device IP address, may also be stored.

Text, audio and video data: You may be able to use chat, question or polling functions in an online meeting. In that case, the text you enter is processed so that it can be displayed in the online meeting and, where applicable, recorded. To display video and play audio, data from your device’s microphone and any video camera is processed for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time using the Zoom applications. To participate in an online meeting or enter a meeting room, you must provide at least your name.

Scope of processing

I use Zoom to conduct online meetings. If I intend to record online meetings, I will inform you transparently in advance and, where necessary, ask for your consent. The fact that a recording is taking place will also be displayed in the Zoom app.

For webinars, we may also process questions submitted by webinar participants for recording and follow-up purposes.

If you are registered as a Zoom user, reports on online meetings (meeting metadata, telephone dial-in data, questions and answers in webinars, webinar polling functions) may be stored by Zoom for up to one month.

Automated decision-making within the meaning of Article 22 GDPR is not used. Section 26 of the German Federal Data Protection Act (BDSG) is the legal basis for data processing. Our interest in these cases is the effective conduct of online meetings.

Otherwise, the legal basis for processing personal data when conducting online meetings is Article 6(1)(b) GDPR, insofar as meetings are held within contractual relationships. If no contractual relationship exists, the legal basis is Article 6(1)(f) GDPR. Here too, my interest is the effective conduct of online meetings.

Security notice

We protect our website and other IT systems against loss, destruction, unauthorised access, unauthorised alteration or unauthorised disclosure of your data by appropriate technical and organisational measures. Despite all due care, complete protection against every risk is not always practically possible. As we cannot guarantee complete data security when communicating by email, we recommend using postal mail to transmit confidential information.

Changes to this privacy policy

We reserve the right to amend this privacy policy if the legal situation, this online offering or the nature of data collection changes. However, this applies only to statements concerning data processing. Where user consent is required or parts of the privacy policy contain provisions governing the contractual relationship with users, the privacy policy will only be amended with the user’s consent. Please therefore review this privacy policy as needed, particularly if you provide personal data.