The protection of your personal data is very important to us. Therefore, we inform you below about the collection, processing and use of your data by imbus in accordance with Art. 13 of the (DSGVO).
1. legal instructions
Person in charge
imbus AG
Kleinseebacher Str. 9
91096 Moehrendorf
Germany
Data Protection Officer
You can reach us at datenschutz(at)imbus.de.
Legal basis, purpose
- Provision of offers and services for the fulfillment of business purposes (Art. 6 para.1f DSGVO)
- Fulfillment of legal obligations (Art. 6 para.1c DSGVO)
- Consent on your part (Art. 6 para.1a DSGVO)
- As far as necessary, we process your data beyond the actual fulfillment of the contract for the protection of legitimate interests of us (Art. 6 Abs.1f DSGVO)
Disclosure to third parties
Data will only be passed on to third parties in compliance with the applicable data protection regulations. Recipients of personal data may be, for example:
- External trainers (independent trainers or partner companies)
- Examination centers (if participating in an examination)
Your data may be passed on to certified service providers who act as processors for us:
- Support or maintenance of EDP or IT applications
- Data destruction
- In the case of blended learning, additional data is passed on to service providers for the corresponding online services (see below)
These service providers are bound by contract and are obliged to treat your data confidentially in accordance with Art. 28 para. 3 p. 2 lit. b, 29, 32 para. 4 DSGVO.
If, when voluntarily using online services (see below), you yourself store personal data there in addition to our data transfer, we ask you to inform yourself about the corresponding data protection information of the respective tool manufacturers.
A transfer of your data by us to the following third parties will further take place, as far as an obligation to do so exists:
- Authorities
- Tax advisor or business and payroll tax and tax auditor
Disclosure to third countries
Your data will only be processed by us within the European Union and states within the European Economic Area (EEA). In the case of online training, certain tools may transfer the data recorded directly by the tool to third countries, if applicable. These tools are not mandatory and are listed below.
Duration of data storage
We process and store your personal data as long as this is necessary for the fulfillment of our contractual and legal obligations. If the data is no longer required for the fulfillment of contractual or legal obligations, it will be deleted. The data will be deleted if you exercise your right of deletion.
Exceptions occur,
- insofar as statutory retention obligations must be fulfilled, e.g. the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are generally six to ten years;
- for the preservation of evidence within the framework of the statutory limitation provisions. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years.
In the context of blended learning, we also arrange for the relevant tool providers to delete the data we share with you.
Your rights
You have the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR.
In the case of the right to information and the right to erasure, restrictions may apply in accordance with Sections 34 and 35 BDSG (2018).
Complaint to the supervisory authority
In case of complaints regarding data protection, you can contact the competent supervisory authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA),
Promenade 18, 91522 Ansbach
Tel. +49 (0) 981 180093-0
Fax +49 (0) 981 180093-800
E-Mail poststelle(at)lda.bayern.de
If you have any further questions about the collection, processing or use of your personal data, or in cases of information, correction or deletion of data, as well as revocation of consent granted, please contact our data protection officer by e-mail at: datenschutz(at)imbus.de
2. Training feedback
If you would like to provide anonymous feedback on our training after the course has ended, we provide a survey using LimeSurvey GmbH from Hamburg. No login is required and the link is not personalized. Your answers will be collected anonymously and the records in the tool will be deleted after processing. The provision of e-mail or other personal data within the survey is optional and voluntary by you. The general data protection information of the LimeSurvey GmbH website can be found at https://www.limesurvey.org/de/datenschutzhinweise.
3. Online training in the Virtual Classroom
In order to participate in Virtual Classroom (VC) Live online training, the use of an online tool for broadcasting the training is mandatory. The use of other tools during the training (see list below) is done by you on a voluntary basis.
In the context of VC trainings, we do not pass on your personal data to the service providers of the corresponding tools and imbus Academy does NOT make any video or audio recordings during a Virtual Classroom training!
All specified tools store at least your IP address and use cookies to cache session information.
The following tools are used:
- YuLinc ®
In order to conduct live online seminars in the Virtual Classroom, the imbus Academy usually uses the tool "YuLinc" from the company netucate system GmbH from Bad Homburg in Germany.
The use of YuLinc is mandatory for participation.
You will receive an anonymous so-called guest link from us.
When calling, you will be asked to enter your name. This is a mandatory field, but the use of e.g. abbreviations is always possible and recommended by us.
You have the possibility to use chat, question or survey function. Here, the text entries you make are processed in order to display them in the online VC training and logged for a maximum of 2 weeks. In order to enable the display of video and the playback of audio, the data of the microphone and/or the video camera of your end device will be processed for the duration of the online VC training. You can disable the camera and/ or microphone at any time within the online training software. The servers for audio and video are hosted in Germany, see https://www.netucate.com/sicherheit/schutz-der-daten. There is no data processing outside the European Union. - GoToMeeting ®: only in case of server failure of YuLinc
If during a training session the service of Netucate (see above) should fail permanently, the training will alternatively be continued with the tool "GoToMeeting" of the company LogMeIn Ireland Limited. LogMeIn also uses subcontractors in third countries (including the USA).
You can find information about this under https://www.logmeininc.com/de/legal/privacy resp. https://www.logmeininc.com/de/legal/privacy/international.
We strongly discourage the use of your full name and the use of audio, chat and video by participants. - Conceptboard ®: Optional, used differently depending on the course and trainer.
In some courses, the imbus Academy uses the "conceptboard" tool from the company Conceptboard Cloud Service GmbH from Halle (Saale) in Germany for small group exercises, if required.
Conceptboard also uses subcontractors in third countries. Information about this as well as the general privacy policy can be found at https://conceptboard.com/de/privacy/.
The use of the guest access is possible without providing personal data, but tracking is done via cookies. As an identifier we therefore recommend e.g. an abbreviation instead of your full name. - TaskCards: for easier access to accompanying material.
If you want to use the service offered by some trainers for easier downloading of e.g. syllabi and sample exams, you can use the services of Systems GmbH from Schmalkalden in Germany. No login is required and only the IP address and time of access are stored. According to TaskCards, no further data is collected from visitors to a bulletin board. You can find more details at https://www.taskcards.de/#/home/privacyPolicy. - Learning Apps ®: optional and only with individual trainers
In individual courses, sample tasks and exercises can be supported with surveys from LearningApps.org from Bern (Switzerland). This is always done voluntarily and a login or the provision of personal data is not necessary. Access data (such as IP address, date and time of access, name of the accessed file) are only collected for the creation of anonymized usage statistics by Google Analytics as a service provider, see https://learningapps.org/rechtliches.php.
4. Corporate Seminars in Virtual Classroom
If your company insists on using a different online conferencing software (e.g. Microsoft Teams ®) than the one listed above, your company is responsible for the privacy of your personal data and we ask you to contact your company's data protection officer if you have any questions.
5. Online Training Blended Learning
In order to conduct a blended learning training course, it is mandatory for us to transfer data to the learning management system (LMS) and to collect personal data within the LMS. We use the LMS Avendoo® of Magh und Boppert GmbH from Paderborn, hosted in Nuremberg and Falkenstein. We create an account for you in the LMS.
Your personal data will be deleted from the LMS together with your account four weeks after the end of the course.
The following personal data will be stored in the LMS in connection with your account and the course you attended:
- E-mail address
- Login name
- First name, last name
- title and gender (m/f/u)
- the respective reading and learning progress and the processing time when reviewing the learning units
- the presence or absence in the Kickoff and the Virtual Classroom Workshops
- the course attended
- the time of the last login in the LMS.
- Session cookies are created and your IP address is stored to control the technical process in the LMS. No further tracking takes place and no 3rd party cookies are set.
Measures exist with regard to the confidentiality of data processing (Art. 32 (1) (b) GDPR) and the integrity of data processing (Art. 32 (1) (b) GDPR). Subordinate employees have been instructed (Art. 32 (4) GDPR). The subordinate employees of Magh und Boppert GmbH only access data with personal content for service work after consultation with imbus AG.
Furthermore, the tools listed under "Online Training in the Virtual Classroom" are used for the Kickoff and the Virtual Classroom Workshops (see above).
For exercises, the Virtual Showroom II software from imbus AG can also be used. No personal data is stored in this case. Additionally, there is the option for a free demo license of our tool TestBench. The privacy policy of TestBench and Virtual Showroom II can be found under https://www.testbench.com/legal/#privacy_policy.
Your Contact to the Academy
Mrs. Katrin Krauss
mail: akademie@imbus.de
phone: +49 9131 / 7518-750
fax: +49 9131 / 7518-50