PRIVACY POLICY
DigiDuck GmbH collects personal data about you as part of its e-learning portal (hereinafter “portal”). Strict compliance with the regulations of the Federal Data Protection Act, the Telemedia Act and the General Data Protection Regulation forms the basis of our trusting relationship with you as a user.
Our portal may also contain links to external websites. However, we assume no responsibility for the content of these external editorial offers. When you leave our site, we recommend that you carefully read the privacy policy of any website that collects personal data.
1. RESPONSIBLE
| a) Responsible for data processing
DigiDuck GmbH Phone: +49 2181 273 849 0 |
b) Data protection officer We have appointed a data protection officer for our company:Ralph Hoff Poststraße 61 41516 Grevenbroich Phone: +49 (2181) 473 73 84 |
2. WHAT IS PERSONAL DATA?
Personal data is any data that relates directly or indirectly to you as a person. This includes, for example, data such as your date of birth, your address and IP address, but also texts or images that allow you to be identified as a person. The following data protection declaration explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
If necessary, we may be obliged by law to disclose your data to third parties. However, we will only comply with such requests within this framework and after carefully checking whether such an obligation actually exists.
Data processing takes place in Germany or in other European countries. If, in exceptional cases, a transfer to a third country takes place, then only to those countries in which an appropriate level of data protection exists or where we can equally ensure this through suitable guarantees such as the conclusion of standard contractual clauses or certifications.
3. WHAT DATA IS PROCESSED?
a) When you visit the portal
When you visit our portal, each access and each retrieval of a file stored on this website is logged in order to enable the use of the offer. The following data is logged:
• IP address of the visitor-
• Time of the visit
• The url that was called
• The status code
• The protocol
• The browser of the visitor
• The operating system ofthe visitor
The data is also stored in the log files of our system. A storage of these data together with other personal data of the user does not take place.
i) Legal basis
The legal basis for the temporary storage of the data and the log files is a legitimate interest Art. 6 para. 1 lit. f DSGVO.
ii) For what purpose is this data processed?
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
iii) How long is the data stored?
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The data stored in the log files will be deleted after 14 days at the latest.
b) Through the use of cookies
The portal uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a User accesses a website, a cookie may be stored on the User’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Session cookies store information used during your current visit to the site. These cookies are automatically deleted when you leave our site.
In addition, we also use temporary cookies to optimize the user experience, which are stored on your terminal device for a certain specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what entries and settings you have made so that you do not have to enter them again.
i) Legal basis
The cookies required for the operation of the portal and the related processed personal data, are necessary for the stated purposes to protect our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO.
ii) For what purpose is this data processed?
The cookies set are technically necessary. Individual functions of the learning platform cannot be offered without the use of cookies. For these, it is necessary, for example, that the browser is recognized even after a page change.
We do not use the collected user data to create user profiles or to provide visitors to our pages with advertising. The information generated by the cookies about your use of this website is not passed on to third parties.
iii) How long are cookies stored and how can I delete them?
Cookies are stored on your computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. You have the option to prevent the use of cookies. To do this, you must change the corresponding settings in your Internet browser (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari). However, in order to use the functions of the learning platform, you must allow the use of cookies in the browser. Otherwise, there is a possibility that the functionality of the learning platform will not be available.
4. HOSTING THE PORTAL
This portal is hosted and made available in cooperation with an external service provider.
In the course of hosting, the following personal data is processed:
• IP addresses
• contents of contact requests as well as related meta and communication data
• contract data
• contactdata
• names
• website accesses and other data generated via a website
i) Legal basis
The hosting serves the provision of the portal and thus the fulfillment of the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our portal by a professional provider (Art. 6 para. 1 lit. f DSGVO).
ii) For what purpose is this data processed
Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.
We use the hosting provider PlusServer GmbH, Hohenzollernring 72, 50672 Cologne, Germany, as part of a commissioned processing pursuant to Art. 28 DSGVO. The location of the server is in Germany. For this purpose, a corresponding
Contract for order processing has been concluded with the provider.
iii) How long will the data be stored
Your data will be stored by the contractor and the hosting company until the purpose for the data processing no longer applies.
b) When filling out the feedback form
Portal users (employees) can contact us via a contact form, especially if there are technical difficulties with the portal and you want to report them to us or you want to send us feedback.
For this purpose, you can voluntarily provide the following data-
name, first name-
e-mail address-
your feedback to us
The following data will also be stored at the time the message is sent
:- Date and time the feedback was submitted cContext for which training a feedback was submitted
i) Legal basis
The legal basis for the processing of data transmitted through the use of our contact forms is Art. 6 (1) lit. f DSGVO. In the case of voluntary provision of supplementary data such as (name, e-mail), this is done with your consent (Art. 6 para. 1 lit. a DSGVO)
ii) For what purpose is this data processed?
The data is only stored for processing the feedback or for responding and contacting you. The provision of further data is optional, but will likewise only be used to respond to the inquiry. The transmission of data from the contact form is encrypted.
iii) How long is the data stored?
The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request. Follow-up inquiries may also occur here, in which case the data will remain stored until a final response is received. Communication is terminated when it is clear from the circumstances that the matter in question has been conclusively clarified.
Any additional personal data collected during the sending process will remain anonymized and permanently stored.
c) When using the portal
The respective company as a customer of the portal receives a company-specific access. The customer then sends us an Excel spreadsheet with personal data of the employees (users).
The following data of the users are required for the creation and later registration
:- Surnames, first names-
E-mail addresses-
Password
Afterwards, the user receives an e-mail with a start password, which he or she uses to access the portal. There, the user must enter a changed password when logging in for the first time. The password is stored encrypted in a database.
During use, data on the use of the portal and information on which courses have been completed are also processed.
i) Legal basis
We process data during the use of the portal as well as the data required for registration for the purpose of implementing the contract with the customer (Art. 6 para. 1 lit. b DSGVO). We act as a processor (Art. 28 DSGVO) for the processing of personal data for our customers.
ii) For what purpose is this data processed?
We use the personal data only for the provision of the respective employee training offer and the general learning opportunities on the portal. The e-mail address is used for registration on the portal and for sending e-mail notifications.
Users are notified by email when new courses are due or when learning material is updated for an existing course. If courses are created for a specific time window, users also receive a reminder message three days before the course expires and another message when the course has expired.
In addition, personal data is processed within the portal for the following purposes
:- Personalized retrieval to identify you as a user. This information is used to provide the courses for retrieval and adaptation to your individual requirements
; – Support during retrieval of the courses, including evaluation of your learning progress and to issue you with a personal certificate of completed instruction
; – Correspondence with you as a user and the responsible persons in your company;-
Optimization ofthe
functionality of the portal
; – Documentation of which users have been instructed on which topics (partly due to legal obligations to provide evidence).
This information is also made available to the commissioning company.
– Creation of a certificate of participation (after successful completion of a course)
iii) How long is the data stored?
You always have access to the data of your user account on the portal, which you can view at any time in the protected area of the portal.
The data collected during registration will be stored as long as the company is registered for the portal and an employee has not yet left the company, after which they will be deleted. Employees who have left the company are blocked and archived by the system. Legal retention periods, also e.g. for the retention of training certificates, remain unaffected.
iv) Will the data be passed on
The user installation and other services related to the learning platform are provided for us by STORMS|SOFTWARE (Luxemburger Str. 33, 41812 Erkelenz). A contract for order processing in accordance with Art. 28 DSGVO has been concluded with the company. Personal data is thus only processed according to our explicit instructions.
5. WHEN PLAYING A VIDEO HOSTED ON YOUTUBE
We occasionally include videos from the websites www.YouTube.com on our portal when appropriate. In this case, the content is stored directly on YouTube and embedded on our site from there.
i) Purpose:
Playing video content and simple preparation of content in a learning unit / e-learning.
ii) Legal basis:
We show you these videos on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f DSGVO. The videos shown contain details about our products or other useful information for you as a user.
iii) Type of data:
When calling up the videos in question, the IP address, technical information (browser, operating system, basic device information) and, in particular, which of our Internet pages you have visited are communicated.
iv) How is the data stored / processed?
We have embedded our videos in a data protection-friendly manner (“Enhanced data protection mode”). This means that information about you is only passed on to them when you watch the video. Only then will a server connection to YouTube be established and then a corresponding cookie will also be set. This is not used to monitor your user behavior, but rather to save your settings, such as the playback status and the desired volume. You will be informed about this again before each video.
The extended data protection mode only saves cookies that do not contain any personally identifiable data. However, if you have an account with YouTube, the company may be able to identify you. You can avoid that the provider recognizes you as a logged-in user by logging out of your account before playing the video
Provider of the YouTube platform: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Further information on data protection at Google/YouTube can be found here: https://www.google.com/policies/privacy/.
A general advertising opt-out is possible here: https://adssettings.google.com/authenticated.
Transmission to third countries: There is, since it is a US provider, a transmission to the USA.
6. HOW IS DATA TRANSMITTED?
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, we use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
If your personal data is processed, you are a data subject in the sense of the DSGVO and you are entitled to the following rights vis-à-vis the responsible party
:- Right to information according to Art. 15 DSGVO (restrictions possible according to § 34 Federal Data Protection Act (BDSG)
)- Right to correction according to Art. 16 DSGVO-
Right to deletion accordingto Art.
17 DSGVO (restrictions possible according to § 35 BDSG
)- Right to restriction of processingaccording to Art.
18DSGVO- Right
to object according to Art. 21DSGVO-
Revocation of consent according to Art. 7 para. 3 DSGVO- Right
to data portability according to Art. 20 DSGVO-
Right to complain to a supervisory authority according to Art. 77 DSGVO in conjunction with § 19 BDSG
The supervisory authority responsible for us is the Data Protection Complaints Office:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia Postfach 20 04 44, 40102 Düsseldorf, Germany
8. HOW CAN I OBJECT OR REVOKE?
If you have given us consent to process personal data, you have the right to revoke your declaration at any time with effect for the future.
You can object to such data processing that we have based on the legal basis “Legitimate Interest” (Art. 6 para. 1 lit. f DSGVO).
You also have the right to object to the processing of personal data for direct marketing purposes (Art. 21 (2) DSGVO). After the objection has been made, your data will no longer be processed “for direct marketing purposes” (Art. 21 (3) DSGVO).
To do so, send your revocation/objection by e-mail or post to the contact details of DigiDuck GmbH mentioned at the beginning
9. STATUS OF THE DECLARATION
This privacy policy is currently valid and has the status of January 2022.
Due to further development of the portal or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.