Data protection

We attach great importance to compliance with data security and the data protection regulations according to EU-DSGVO and DSAnpUG-EU. We would like to inform you below about the processing and use of your data.

F+U Rhein-Main-Neckar gGmbH and the F+U Unternehmensgruppe gGmbH process and use your data exclusively within the framework of the statutory regulations.

Controller:

F+U Rhein-Main-Neckar gGmbH
Kurfürsten-Anlage 64 - 68
D-69115 Heidelberg
Phone: +49 6221 7050-0
Fax: +49 6221 7050-350
E-mail: heidelberg@fuu.de
www.fuu.de
Registered office of the company: Heidelberg
Managing directors: Hans-Dieter Sauer, Oliver Sauer, Ralph Sauer

Person responsible:

F+U Unternehmensgruppe gGmbH
Kurfürsten-Anlage 64 - 68
D-69115 Heidelberg
Phone: +49 6221 7050-0
Fax: +49 6221 7050-350
E-mail: heidelberg@fuu.de
www.fuu.de
Registered office of the company: Heidelberg
Managing Directors: Hans-Dieter Sauer, Oliver Sauer, Ralph Sauer, Dr Kathrin Adam

Data protection officer:

F+U Rhein-Main-Neckar gGmbH
Klaus Ludwig
Poststrasse 4-6
D-64293 Darmstadt
Phone: +49 6151 8719-33
E-mail: dsb@fuu.de

The use of our website is generally possible without providing personal data. Every access to our homepage and every retrieval of a file stored on the homepage is logged. The storage serves internal system-related and statistical purposes.

The following are logged

• Name of the retrieved file
• Date and time of access,
• amount of data transferred,
• Notification of successful retrieval,
• Web browser and requesting domain,
• IP addresses of the requesting systems,
• browser used, operating systems and your access provider.

The above-mentioned data is processed by us for the following purposes and stored until it is automatically deleted:

• Ensuring a smooth connection setup and convenient use of the website.
• To analyse system security and stability.
• For further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.
Under no circumstances do we use this data to draw conclusions about you personally. We also use cookies and analysis services. You will find more detailed explanations in sections 4 and 5.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

We hereby expressly prohibit the use of contact data published within the scope of the imprint obligation by third parties for sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

The website contains links to other websites which are subject to the liability of the respective site operators. No legal offences were apparent at the time of linking.

When registering for our newsletter

If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your e-mail address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an email address, the desired language and your first name and surname.

You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time to dsb@fuu.de by e-mail.

Contact form

If you have any questions about our services, we offer you the opportunity to contact us using the forms provided on our website.

It is necessary to provide your e-mail address and your name so that we know who sent the enquiry and can answer it. This information is always provided on a voluntary basis and will not be passed on to third parties without your express consent

Further personal data is only collected if you provide this information voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be deleted after your enquiry has been finally dealt with.

The purpose of the data processing is to answer your enquiry about our educational offers listed on the website or your application or registration.

Applicant portal

On our websites, we provide you with the opportunity to apply online for our Heidelberg Private School Centre, our technical school centres and our international study and vocational academies iba and isba.

To do this, you must first register via an application portal. You will be asked to enter the following data:

• Salutation,
• first name,
• surname,
• e-mail address,
• password,
• Password repetition.

Once you have successfully completed your registration, you will receive a confirmation link to the e-mail address you provided to verify your details.

If you wish to use the online application option, we will process the data you provide there, such as

• Type of school/study programme data
• Contact details (e-mail, telephone, etc.)
• Portrait
• Date and place of birth
• Driving licence and vehicle registration
• Nationality
• Address and country
• School leaving certificate
• Graduation date and grade
• School name and location
• Language skills
• If applicable, further information on training/studies (title, degree, date, etc.)
• Information on internships
• Curriculum vitae
• Certificates
• Other documents (references, police clearance certificate, health certificate, letter of motivation, etc.) certificate of good conduct, health certificate, letter of motivation, etc.)

The data processing for the purpose of the online application with us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the online application can be deleted by you yourself at any time in the applicant portal or will be deleted at the latest 24 months after the last receipt of the information provided by you, unless a contractual relationship results from this.

The purpose of data processing is to record your online application, to check your eligibility to study and to provide you with information about the educational programmes listed on our website.

Facebook fan pages

The use of our fan page on Facebook is linked to the creation or existence of a Facebook account.
This requires the specification of

• First name, surname,
• e-mail address or mobile phone number,
• gender,
• date of birth

required.

Further personal information, whether in public or private mode, must be entered by you in your account settings. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square Harbour, Dublin 2, Ireland.

Facebook's privacy policy is available athttps:// www.facebook.com/privacy/explanationcan be found here.

We expressly point out that both Instagram and Facebook process user data (e.g. personal information, IP address, etc.) and may also use it for business purposes. It is not clear to us what data is stored, for how long and where this data is stored. If you have any concerns about the use of this fan page, please contact us via our website https://www.fuu.de.

Facebook and F+U Rhein-Main-Neckar gGmbH are jointly responsible for the processing of personal data.

The supplementary agreement to Facebook's privacy policy can be found as a Page Insights addendum at: https: //www.facebook.com/legal/terms/page_controller_addendum

According to this addendum, we are obliged to forward all user enquiries or contacts from the supervisory authorities directly to Facebook using a form in order to obtain a joint clarification.

As the provider of this fan page, we may process data if, for example, you apply or enquire with us via the contact forms located there or leave contact requests or remarks in your comments. Beyond this, we do not process any other personal data from your use of our service

Data processing by F+U Rhein-Main-Neckar gGmbH is carried out in accordance with Art. 6 Para. 1 S.1 lit. a GDPR on the basis of your voluntarily granted consent and Art. 6 Para. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed there.

The purpose of data processing is to provide information and advice on our listed school and educational offers.

Linkedin

The comprehensive use of our fan page Fanpage de.linkedin.com/company/f-u-rhein-main-neckar-ggmbh on Linkedin is linked to the creation or existence of a Linkedin account.

This requires the specification of

• e-mail address,
• password

is required.

Further personal information may need to be entered by you in your account settings. This service is provided by Linkedin Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Linkedin's privacy policy can be viewed at https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.

Linkedin and F+U Rhein-Main-Neckar gGmbH and F+U Unternehmensgruppe gGmbH are jointly responsible for the processing of personal data.

The use of our fan page and its functions is your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information offered there on our website https:\\www.fuu.de.

The data collected about you when you access our fan page on Linkedin is processed by Linkedin Inc. and may be transferred to countries outside the European Union. We do not know how this data is processed by Linkedin Inc.

If you are registered with Linkedin, please note that Linkedin can track that you have visited this website and how you have used this and possibly other websites.

As the provider of this fan page, we may process data if, for example, you apply or enquire with us via the contact forms located there or leave contact requests or remarks in your comments. Beyond this, we do not process any other personal data from your use of our service.

Data processing by F+U Rhein-Main-Neckar gGmbH and F+U Unternehmensgruppe gGmbH is carried out in accordance with Art. 6 Para. 1 S.1 lit. a GDPR on the basis of your voluntarily given consent and Art. 6 Para. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed there.

The purpose of the data processing is to provide information and advice on our listed school and educational offers as well as the job offers linked there.

XING

The comprehensive use of our fan page www.xing.com/pages/f-urhein-main-neckarggmbh on XING is linked to the creation or existence of a XING account.

This requires the specification of

• Surname, first name,
• e-mail address,
• password

is required.

Further personal information may have to be entered by you in your account settings.

This service is provided by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. XING's privacy policy can be viewed at https://privacy.xing.com/en/privacy-policy.

XING and F+U Rhein-Main-Neckar gGmbH and F+U Unternehmensgruppe gGmbH are jointly responsible for the processing of personal data.

The use of our fan page and its functions is your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information offered there on our website https:\\www.fuu.de.

The data collected about you when you access our fan page on XING is processed by XING SE and may be transferred to countries outside the European Union. We do not know how this data is processed by XING SE.

Please note that if you are logged in to XING, XING can track that you have visited this website and how you have used this and, if applicable, other websites. XING provides further information on this under the following link: https://www.xing.com/terms.

As the provider of this fan page, we may process data if, for example, you apply or enquire with us via the contact forms located there or leave contact requests or remarks in your comments. Beyond this, we do not process any other personal data from your use of our service.

Data processing by F+U Rhein-Main-Neckar gGmbH and F+U Unternehmensgruppe gGmbH is carried out in accordance with Art. 6 Para. 1 S.1 lit. a GDPR on the basis of your voluntarily given consent and Art. 6 Para. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed there.

The purpose of data processing is to provide information and advice on our listed school and educational offers as well as the job offers linked there.

Instagram

The comprehensive use of our fan page www.instagram.com/fuu.bildungscampus/ on Instagram is linked to the creation or existence of an Instagram account.

This requires the specification of

• First name, surname,
• e-mail address or mobile phone number,
• password

is required.

Further personal information, whether in public or private mode, must be entered by you in the settings of your account. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square Harbour, Dublin 2, Ireland. Instagram's privacy policy can be found at https://help.instagram.com/519522125107875/?maybe_redirect_pol=0.

Instagram and F+U Rhein-Main-Neckar gGmbH and F+U Unternehmensgruppe gGmbH are jointly responsible for the processing of personal data. Further information on Instagram's data processing can be found in Instagram's privacy policy at https://help.instagram.com/196883487377501?ref=dp.

We expressly point out that both Instagram and Facebook process user data (e.g. personal information, IP address, etc.) and may also use it for business purposes. It is not clear to us which data, for how long and where this data is stored.

If you have any concerns about the use of this fan page, please contact us via our website https:\\www.fuu.de.

The supplementary agreement to Facebook's privacy policy can be found as a Page Insights addendum at: https: //www.facebook.com/legal/terms/page_controller_addendum

According to this addendum, we are obliged to forward all user enquiries or contacts from the supervisory authorities directly to Facebook using a form in order to obtain a joint clarification.

As the provider of this fan page, we may process data if, for example, you apply or enquire with us via the contact forms located there or leave contact requests or remarks in your comments. Beyond this, we do not process any other personal data from your use of our service

Data processing by F+U Rhein-Main-Neckar gGmbH and F+U Unternehmensgruppe gGmbH is carried out in accordance with Art. 6 Para. 1 S.1 lit. a GDPR on the basis of your voluntarily given consent and Art. 6 Para. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed there.

The purpose of the data processing is to provide information and advice on our listed school and educational offers as well as the job offers linked there.

Salesforce

We use the Salesforce customer management system to optimise customer service. We use Salesforce to collect, link and analyse the form data (contact, customer account, enquiries, contract data, etc.) processed as part of our website and contracts with you. This data is transferred to the Salesforce servers. This data processing is carried out on the basis of our overriding legitimate interest in optimising our customer service in accordance with Art. 6 para. 1 f) GDPR. Salesforce is cloud-based, i.e. the services are provided via the Internet and servers distributed around the world are used. Your data may therefore also be transferred to non-EU countries.

Salesforce guarantees that an appropriate level of data protection is maintained by means of standard contractual clauses when data is transferred to third countries.

https://www.salesforce.com/eu/blog/2021/09/salesforce-dpa-update-contractual-clauses

In Germany, Salesforce is represented by Salesforce Germany GmbH, Erika-Mann-Str. 63, 80636 Munich.

Further information on data protection can be found at: https://www.salesforce.com/company/privacy/

DocuSign

We use this service as part of the digital conclusion of contracts with you. This enables us to offer you the option of signing and countersigning contracts electronically. You can do this using any browser on a PC or smartphone.

If you provide us with your e-mail address when processing the contract, we can provide you with the contract to be signed via the "DocuSign" platform on request. In this case, we will send you an e-mail with a link to your contract documents.

Unless otherwise stated in the following sections, data processing is carried out exclusively by the Internationale Berufsakademie der F+U Unternehmensgruppe gGmbH.

The signature service of our partner DocuSign Inc. Germany, Neue Rothofstrasse 13-19, 60313 Frankfurt, offers the possibility to exchange contract documents via the Internet and to sign them in a legally compliant manner without the exchange of paper documents.

For this purpose, you will receive an e-mail from us with a personalised link that you can use to view the documents intended for you and sign the contract. The personalised link is created when we send the documents relating to your contract to our partner DocuSign in encrypted form.

The fact that you provide us with your email address ensures that the personalised link is only sent to you.

The legal basis for the processing of your personal data is the fulfilment of the contract pursuant to Art. 6 para. 1 lit. b GDPR.

After signing the contract documents, your personal data transmitted to us will be stored in the database of our hosting partner DocuSign as a so-called finalised envelope. We receive an email about the signature and storage, then transfer the signed documents to our own system and assign them to your contract. The finalised envelope at DocuSign is automatically deleted after 12 weeks. We store the documents in our system in accordance with the statutory retention period and then delete them automatically.

Docusign guarantees the maintenance of an appropriate level of data protection for transfers to third countries by means of the following binding internal data protection regulations recognised by the EU (so-called Binding Corporate Rules). https://www. docusign.com/trust/privacy/binding-corporate-rules

Further information on data protection can be found at: https: //www.docusign.com/company/privacy-policy

YouTube

We use the YouTube service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland on our websites.

We use YouTube to post our own videos and make them publicly accessible. With
YouTube is a service provided by YouTube LLC.

Some of our website pages contain links or connections to YouTube. We would like to point out that if you follow a video produced by us via a link on YouTube, YouTube will process the data (e.g. personal information, IP address) in accordance with its own data usage guidelines and use it for business purposes.

We also directly integrate videos stored on YouTube on some of our Internet pages. This means that if you call up a YouTube video on a page of our website, a connection to the YouTube servers is established. You will be asked to accept or reject cookies before the content is displayed.

The integration of YouTube content therefore only takes place in "extended data protection mode". This is provided by YouTube itself and ensures that YouTube does not initially store any cookies on your device. However, when the relevant pages are accessed, the IP address and any other data are transmitted and thus, for example, which of our websites you have visited. However, this information cannot be assigned to you unless you have logged in to YouTube or another Google service (e.g. Google+) before accessing the page or are permanently logged in.

As soon as you start playing an embedded video by clicking on it, YouTube only stores cookies on your device through the extended data protection mode, which do not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by making the appropriate browser settings and extensions.

The privacy policy of Google Ireland Limited can be found at: https://policies.google.com/privacy.

OpenApply

We use the OpenApply service of Faria Education Group Limited, 121 SW Salmon Street, Suite 1200, Portland, OR 9720, U.S.A. on our websites.

We use this service as part of the digital online application system for student applications to our International School at HPC. This allows you to complete all forms and questionnaires online and upload the required documents. Please read the admission information on the enrolment page https://www.hpc-international.de/de/programme/grade-5/grade-5-open-apply before you start your application.

We collect the following data on this registration page:

• Contact details (e-mail, telephone, etc.)
• Portrait
• Gender, date and place of birth
• nationality
• Address and country

It is then necessary to register via a registration portal. You will be asked to provide the following data:

• E-mail address,
• password,
• Repeat password.

You can then use this portal to submit further application documents such as

• school leaving certificate
• Graduation date and grade
• School name and location
• language skills
• If applicable, further information such as certificates, etc.

upload.

Faria Education Group Limited ensures that an adequate level of data protection is maintained when transferring data to third countries by means of the following binding corporate rules recognised by the EU.

Further information on data protection can be found at: https://www.managebac.com/terms/gdpr

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties:

• For the purpose of comprehensive counselling and contractual agreement on further educational offers by our companies
  • International University of Cooperative Education of the F+U Group gGmbH,
  • ISBA gGmbH - International Study and Vocational Academy,
  • International University of Applied Sciences for Business, Technology and Culture gGmbH,
  • Academy of Languages gGmbH,
  • Edunex GmbH.

Data processing is based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

• If you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR (e.g. to potential practice partners, etc.),
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
• for the accounting processing of contracts and their implementation and administration
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
• A transfer of your data to third countries is not planned.

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more convenient for you. For example, we use so-called session cookies to recognise whether you have visited individual pages of our website. These are automatically deleted after you leave our website.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our website again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see section 5). These cookies enable us to automatically recognise that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the purposes mentioned in order to safeguard our legitimate interests as well as those of Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our websites. On the other hand, we use the tracking measures to statistically record the use of our websites and to evaluate them for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Use of Google Analytics/Remarketing and Google Adwords

This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http: //tools.google.com/dlpage/gaoptout?hl=de.