Content:
-
A. General
-
B. Collection and processing of personal data if you use our website
-
C. Collection and processing of personal data in the context of a distance learning course
-
D. Statistics, web analytics, advertising based on tracking and retargeting – use of cookies
Privacy policy
A. General
Thank you for your interest in our website. The protection of your personal data (hereinafter also referred to as ‘data’) is a major and important concern for us, which we take very seriously. In the following, we would therefore like to inform you in detail about which data is collected when you visit our website and use our offers there, and how this data is processed or used by us in the following. We would also like to inform you about the accompanying technical and organizational measures we have taken to protect your data.
Please note that this privacy policy may be updated from time to time due to the implementation of new technologies and/or changes in the law. We will draw your attention to this in an appropriate manner. Of course, we will always take your interests into account in an appropriate manner in the event of any changes.
1. Person responsible, contact
The responsible party pursuant to Art. 4 No. 7 of the EU General Data Protection Regulation (‘GDPR’) is
ecodemy GmbH
Fritz-Schäffer-Strasse 1
53113 Bonn
Germany
Seat of the company: Bonn
Local court: Bonn, HRB 24293
Managing directors: Dominik Grimm, Philipp Wiebe
If you have any questions or comments about this privacy policy or data protection in general, please contact us: .
2. Legal basis for the processing of your data
If the legal basis is not stated in the privacy policy, the following applies:
- Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) (a), Art. 7 GDPR serves as the legal basis.
- If the processing of personal data is necessary for the performance of a contract, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
- Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
- If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
3. Your rights
You may assert the following free rights against the data controller in accordance with the statutory provisions:
- Withdrawal of your consent (Art. 7 (3) GDPR),
- Right to access by the data subject (Art. 15 GDPR),
- Right to rectification or erasure (Art. 16 and Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object (Art. 21 GDPR).
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by the controller.
4. Retention Periods
The data processed by us will be deleted or restricted in its processing in compliance with the statutory provisions, in particular in accordance with Art. 17 and 18 GDPR. Unless expressly stated within the scope of this privacy policy, we erase data stored by us as soon as it is no longer required for their intended purpose. Data will only be retained beyond the time it is no longer needed for its intended purpose if this is necessary for other legally permissible purposes or if the data must be retained longer due to statutory retention obligations. In these cases, processing is restricted, that means blocked, and the data are not processed for other purposes. Legal retention obligations arise, for example, from Section 257 (1) German Commercial Code (6 years for commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) and from Section 147 (1) German Fiscal Code (10 years for books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
5. Data processing and recipients of data
In some cases, we use external service providers who are obliged to follow our instructions in order to process your data. These have been carefully selected and commissioned by us and are regularly monitored. For this purpose, we have concluded contractual processing agreements with the external service providers in accordance with the requirements and in compliance with Art. 28 GDPR. Independent processing for our own purposes does not take place through the order processors.
For the operation of this website, we use a hosting provider who processes inventory data, contact data, content data, contract data, usage data, meta data and communication data of visitors or customers of this website on our behalf and on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 (1) (f), Art. 28 GDPR.
6. Third country transfers
If personal data is transferred to a third country or to an international organization, we will inform you separately about the transfer and the underlying legal standard. The data transfer is secured with standard contractual clauses according to Art. 46 GDPR or with other suitable transfer safeguards according to Art. 44 ff. GDPR.
Third countries for which there is no adequacy decision. This means that it may not be guaranteed that a comparable level of data protection as provided for by the GDPR exists in the USA. Likewise, it cannot be guaranteed that the rights of data subjects are enforceable and that effective legal remedies are available against data recipients located in the third countries. This relates in particular to remedies and enforceability with respect to security and law enforcement authorities that may have access to your data.
7. Data security
We also use technical and organizational security measures to protect personal data that we receive or collect, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorized persons. Our security measures are continuously improved in line with technological developments.
Among other things, this website uses SSL encryption for secure data transmission. The widespread SSL procedure (Secure Socket Layer) is used in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual website page is encrypted by the closed key or lock symbol in the lower or upper status bar of your browser.
B. Collection and processing of personal data if you use our website
1. Technical provision of the website, hosting
For the informational use of our website, it is generally not necessary for you to actively provide personal data. Rather, we collect and use in this case only those of your data that your Internet browser automatically transmits to us. This includes:
- the date and time you access one of our web pages,
- your browser type and browser version,
- the browser settings,
- the operating system used,
- the last page you visited,
- the amount of data transferred and the access status (file transmitted, file not found, etc.),
- your IP address.
The data is stored on our servers in the EU. We do not store this data together with any other personal data other than that specified above. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s terminal device. For this purpose, the user’s IP address must remain stored for the duration of the session. In addition, we create so-called log files. The storage of the created log files is done to ensure the security of our information technology systems. A personal evaluation of the data, especially for marketing purposes, does not take place.
The processing of the aforementioned data is technically necessary for the offer of a website according to Art. 6 (1) (b), (c), (f) GDPR in order to provide you with our website and to ensure stability and security. In particular, the purpose of creating log files is to be able to detect attacks on our systems.
Parts of our website can be found via Google.com search as so-called Accelerated Mobile Pages (Google AMP), which are marked as such in the URL and also with a lightning bolt.
The AMP pages of this website are loaded directly from Google’s cache, which results in significantly shorter retrieval times. The controller for the output of the pages via AMP is Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. We have no impact on the data processing and the handling of your IP address. Under certain circumstances, Google may transfer your IP address to a Google server in the USA and store it there. As far as Google Ireland Limited transfers personal data to the US parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google guarantees by means of standard contractual clauses to maintain the EU level of data protection.
2. Contact form, ticket system
You have the possibility to contact us by email or phone. Furthermore, you may use our contact form, which you can find in the help center as well as via our integrated ‘Help’ button, which is placed in the help center at the bottom left of our website. If you click on the ‘Help’ button and, after entering your question or a keyword, do not receive the information you need or a proper answer, you may contact us directly in the next step by clicking on ‘Leave a message’ via the contact form.
The processing of your data in the context of contacting us by email or telephone is based on your (presumed) consent in accordance with Art. 6 (1) (a) GDPR, or in accordance with Art. 6 (1) (b) GDPR, if the contact is in connection with contractual performance obligations, depending on the content of the request for purely informational questions. The legal basis for data processing in connection with our contact form is your consent pursuant to Art. 6 (1) (a) GDPR, which you have given us before submitting the form.
To contact you via our contact form, we only need your email address in order to may reply to you. In addition, you may voluntarily provide your name so that we can address you personally. If necessary, we also process data that you voluntarily provide to us in the free text field provided for the respective request.
We use the ticket system Zendesk, a platform of Zendesk Inc., 1019 Market Street, San Francisco, CA 94103, USA, to process requests by email and via the contact form. We have concluded a data processing agreement with Zendesk pursuant to Art. 28 (3) GDPR and standard contractual clauses, with which the provider guarantees the EU level of data protection. Zendesk uses your data only for the technical processing of the request and does not share it with third parties. For this purpose, Zendesk uses a data center located in the EU. For more information, please visit https://www.zendesk.com/company/customers-partners/eu-data-protection/.
We will delete your contact requests immediately after processing, unless legal retention periods require continued retention.
3. Other plugins and integrated content
Google Maps
On the basis of your consent, which can be withdrawn at any time with effect for the future, in accordance with Art. 6 (1) (a), Art. 7 GDPR, we use the Google Maps service on our website. You declare your consent via the cookie/privacy banner during your first visit to our website. Google Maps will not be used without your consent. To withdraw your consent, please click on the link ‘Change cookie settings’ above under ‘D. Statistics, web analytics, advertising based on tracking and retargeting – use of cookies’ or remove the cookies on your computer (usually you have to press Ctrl+Shift+Del at the same time). This service is provided by the operator Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service enables us to display interactive maps directly on our website. By visiting our website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. Google stores your data as usage profiles and uses them for the purpose of advertising, market research and / or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. For this purpose, it is possible that the provider Google stores a cookie on your terminal device. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this. For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the privacy policy of the provider Google. There you will also find further information about your rights in this regard and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy.
Insofar as Google Ireland Limited transfers personal data to the US parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google guarantees by means of standard contractual clauses to maintain the EU level of data protection.
4. International Directory for Vegan Nutritionists
We offer you and other Vegan Nutritionists the possibility of being registered after successfully completed study of the Vegan Nutritionist (for example our distance learning course ‘Vegan nutritionist’), voluntarily in the directory for Vegan Nutritionist. This directory is publicly accessible on the Internet. Here you may register with the following information: First name, last name and company, contact details (street and no., zip code and city, country, website, email, Skype, social media channels), profession(s), focus, (other) services, availability, motto of the consultation and picture. In addition, the completed distance learning courses of ecodemy are displayed in the profile. This entry is made voluntarily on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and may be withdrawn at any time. The withdrawal of your consent does not affect the lawfulness of the processing carried out up to that point. You may send your withdrawal by email to .
If you wish to make a change to your information in the Vegan Nutritionist Directory, please also contact us by email at .
In addition, we use our host provider and Zendesk, a platform of Zendesk Inc, 1019 Market Street, San Francisco, CA 94103, to implement the Vegan Nutritionist Directory. Zendesk uses your data only for the technical processing of the request and does not share it with third parties. For this purpose, Zendesk uses a data center located in the EU. No data is transferred to third countries. For more information, please visit https://www.zendesk.com/company/customers-partners/eu-data-protection/
5. Presence in social media
We maintain presences in social media in order to communicate with customers and interested parties there and may inform them. If the respective networks are called up, the conditions of the operators apply.
6. Applications
If you apply for a job with us, we will process your personal data in accordance with the information below.
We process your application data in order to be able to assess whether you have the suitability, qualifications and professional performance for the position for which you are applying. For us, the legal requirements for the selection process result in particular from the General Equal Treatment Act. The legal basis for processing within the scope of the selection procedure for the establishment of employee or trainee relationships is Art. 88, Art. 6 (1) (b), GDPR in conjunction with Section 26 (1) BDSG.
If your application documents contain special categories of personal data, e.g. information about health, religious beliefs or ethnic origin, we also base our processing on Art. 9 (2) (b), Art. 88 GDPR, Section 26 (3) BDSG due to our legal obligations as an employer and the associated protection of your fundamental rights. In addition, we also process your information on the basis of Art. 9 (2) (h) GDPR, Section 26 (3) BDSG, in order to may take occupational health and preventive health measures.
In the application process, we will use all the information you provide to advance your application and to check whether we may offer you a job with us. In addition, we have to fulfill our legal obligations as an employer. The provision of personal data is necessary for the lawfulness of the selection process to be carried out. The absence of relevant personal data in the application documents may result in your not being considered for the vacant position.
We will only use your contact details to contact you and inform you about the progress of the application process. We will only use other information contained in your application documents to determine your suitability for the position to be filled.
Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event that an employment relationship, training relationship, internship or other service relationship is established following the application process, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application process ends for you when you receive a rejection. This also applies in the case of a speculative application.
In this case, your personal data will be deleted six months after receipt of the rejection, unless longer storage is necessary for the defense of legal claims. The defense or assertion of legal claims is also our legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
We will inform you separately about the storage period of your personal data in the event of the establishment of an employment relationship.
7. Social-Media
Unless otherwise stated, we process your data on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR to improve content and to make it more convenient for you to use. The purposes described coincide with our legitimate interests. If cookies are used in connection with the embedding of social media content, this is done on the basis of your consent to Art. 6 (1) (a), Art. 7 GDPR.
a) Links to Social-Media Profiles
We also link to our presences on various social networks on our website. The integration takes place via a linked graphic of the respective network. This prevents an automatic connection to the server of the respective network when you call up our website; instead, you will only be forwarded to the service of the respective social network by clicking on the corresponding graphic.
After the forwarding, information is collected by the respective network, whereby it may not be excluded that a processing of the data collected in this way takes place in the USA.
The data collected are initially IP address, date, time and website visited. However, if you are logged into your user account of the respective network, the network operator may be able to assign the collected information of the specific visit to your personal account. If you interact via a ’Share ’ button of the respective network, this information may be stored in your personal account and possibly published. If you want to prevent the collected information from being directly assigned to your user account, you must log out before clicking on the graphic or the ’Share’ button.
We use the social networks listed below on our website:
Facebook, Instagram, YouTube, LinkedIn, Twitter, Spotify, WhatsApp, Threema, TikTok, Pinterest, iTunes, XING.
Meta Platforms Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; further information on data collection: https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications and also https://www.facebook.com/about/privacy/your-info#everyoneinfo.
Instagram, Meta Platforms Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, https://instagram.com/about/legal/privacy/.
Spotify, Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Schweden, https://www.spotify.com/de/legal/privacy-policy/.
Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Irland, https://www.apple.com/de/legal/privacy/.
Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy.
WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland; https://www.whatsapp.com/legal/.
Threema GmbH, Churerstrasse 82, 8808 Pfäffikon SZ, Schweiz; https://threema.ch/de/privacy.
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, und TikTok Information Technologies UK Ltd., WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom; https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, https://www.google.com/policies/privacy/.
Pinterest Europe Limited, 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Irland; https://policy.pinterest.com/de/privacy-policy.
Xing AG, New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland https://www.xing.com/privacy.
LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, https://de.linkedn.com/legal/privacy-policy.
b) Videos from YouTube
On the basis of your consent, which can be withdrawn at any time with effect for the future, in accordance with Art. 6 (1) (a), Art. 7 GDPR, we use the YouTube service on our website. You declare your consent via the cookie/privacy banner when you first visit our website. YouTube will not be used without your consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of our websites equipped with a YouTube plugin, a connection to YouTube’s servers is established. This tells the YouTube server which of our websites you have visited. To achieve this purpose, among others, Google uses cookies.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You may be able to prevent this by logging out of your YouTube account.
Insofar as Google Ireland Limited transmits personal data to the US parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google guarantees by means of standard contractual clauses to maintain EU data protection levels.
The privacy policy can be found at: https://www.google.com/policies/privacy/.
To withdraw your consent, please click on the link ‘Change cookie settings’ above under ‘D. Statistics, web analytics, advertising based on tracking and retargeting – use of cookies’ or remove the cookies on your computer (usually you have to press Ctrl+Shift+Del at the same time). You can find the opt-out option at: https://adssettings.google.com/authenticated.
c) Videos from Vimeo.com
On the basis of your consent, which can be withdrawn at any time with effect for the future, according to Art. 6 (1) (a), Art.7, Art. 49 (1) (a) GDPR, we use the Vimeo service on our website. You declare your consent via the cookie/privacy banner when you first visit our website. Vimeo will not be used without your consent. To withdraw your consent, please click on the link ‘Change cookie settings’ above under ‘D. Statistics, web analytics, advertising based on tracking and retargeting – use of cookies’ or remove the cookies on your computer (usually you have to press Ctrl+Shift+Del at the same time). Vimeo’ is a service of Vimeo Inc, Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. The USA is assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by U.S. security authorities, possibly without effective legal recourse. To protect your data, we have concluded standard contractual clauses with the provider Vimeo, with which the provider guarantees an EU level of data protection. You can find Vimeo’s privacy policy at https://vimeo.com/privacy.
Vimeo currently uses Google Analytics. In this regard, we refer to the above statements on Google Analytics and again to the privacy policy at https://www.google.com/policies/privacy, to the opt-out options for Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=en and to Google’s settings for data use for marketing purposes at https://adssettings.google.com/.
C. Collection and processing of personal data in the context of a distance learning course
1. Registration and use of the campus and community
The use of the Campus and Community areas is reserved exclusively for existing customers. If you are interested in our products and services, you may either find out more about the respective distance learning courses by clicking on ‘Distance learning’ in the Distance learning school menu or register yourself. If you have any questions, please contact us by email at .
In order to use the Campus and Community areas, it is necessary for you to register. Mandatory information required for the processing of contracts and if you register for the online platform is marked separately, other information is voluntary. If you register, we use the so-called double opt-in procedure. After your registration, an email will be sent to the email address you provided, in which we ask you to confirm that you wish to create a customer account. This is done by clicking on a hyperlink contained therein. If the confirmation by hyperlink is not given or a registration is not completed by sending your distance learning contract, your user account will be deleted after a 90-day period. The legal basis for the creation of a user account is Art. 6 (1) (b) GDPR. In addition, we are entitled to retain your IP addresses and times of registration and confirmation in order to prove your registration and, if necessary, to clarify a possible misuse of your personal data. The legal basis for this is Art. 6 (1) (c) and (f) GDPR. The processing of voluntarily provided information is based on Art. 6 (1) (a) GDPR. To change individual profile details, please log in. For a complete deletion of your profile, please send us an email to the contact details above. Data that we are legally obligated to retain remains unaffected by the deletion. We process the data you provide to process your distance learning contract. For this purpose, we may pass on your payment data to our house bank. The legal basis for this is Art. 6 (1) (b) GDPR.
We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information. The legal basis for this is Section 7 (2) No. 3 Act against unfair Competition (UWG) or on the basis of the statutory permission pursuant to Section 7 (3) UWG.
Online- signing via Eversign
If you register for one or more of our distance learning courses, the contract will be signed via Eversign. Eversign is operated by Apilayer GmbH with the address FN 443956b, Hörlgasse 12/4, 1090 Vienna, Austria. We have concluded a data processing agreement with this provider within the meaning of Art. 28 GDPR. The purpose of this data processing is the fully digital completion of the distance learning contract. The legal basis for the use of Eversign for the execution of the contract signing is Art. 6 (1) (f) GDPR.
For this purpose, the data from your registration form:
- Name, title
- address
- date of birth
- Bank details incl. account holder and address
- IP address
are processed on our server and also transmitted to Eversign as the recipient of this data. Eversign does not process this data independently for its own purposes.
In addition, data relating to the audit trail (that means when was the document created, by whom was it viewed, when was it signed by whom, with which IP was it accessed) is processed by us and Eversign. This data is used for the purpose of proving that the document was signed.
More information about Eversign’s privacy policy may be found here: https://eversign.com/legal/privacy.
Eversign is used to improve our online offer, for economic reasons as well as for environmental protection. These are legitimate interests according to Art. 6 (1) (f) GDPR.
2. Payment Study fees
You can pay the study fees by PayPal, SEPA direct debit or by bank transfer.
If you choose one of these payment methods, your payment data will be forwarded to the payment service provider for payment processing. These third-party providers process your personal data as an independent controller in accordance with their data protection regulations. The transfer is based on the fulfillment of the contract according to Art. 6 (1) (b) GDPR and on our legitimate interests in secure payment processing and fraud prevention according to Art. 6 (1) (f) GDPR.
If you pay via PayPal, you will be directed to the PayPal website via a link. During the payment process, your name, address, email address, phone number and account information will be processed. Please refer to the Terms and Conditions, Terms of Use and Privacy Policy of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, on the website.
For the purpose of carrying out the SEPA direct debit procedure, we process the personal data provided by you in the registration form (last name, first name, address, name and location of your credit institution, IBAN, etc.). The data will be transferred by direct debit to the banking institution specified by you.
The legal basis is the consent given by you in accordance with Art. 6 (1) (a), Art.7 GDPR.
3. Forum
Our forum is only available to registered students of our distance learning school. If you use your forum profile, we store all the information you provide in the forum, for example public posts, pinboard entries, friendships, private messages, etc., in addition to your login data until you log out, in order to operate the forum. The legal basis for this is Art. 6 (1) (f) GDPR.
If you revoke or terminate your distance learning contract, your public statements, especially posts in the forum, will remain visible to all readers, but will be anonymously marked as ‘Alumnus’. Your content in the user profile will no longer be accessible and your profile will also be anonymized and marked as ‘Alumnus’. If you want your public posts to be deleted as well, please contact .
4. Comment function on this website
For the comment function on this site, in addition to your comment, information on the time of creation of the comment, your email address and, if you do not post anonymously, the username you have chosen will be stored.
Our comment function stores the IP addresses of users who post comments. Since we do not check comments on our website before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda. The legal basis for this processing is Art. 6 (1) (a), (f) GDPR.
Based on your consent or by subscribing to an ecodemy add-on, you can subscribe to our newsletter, which will inform you about our current interesting offers. The legal basis for sending the newsletter is accordingly:
- establishment, execution and termination of the information contract according to our General Information Contract Terms and Conditions – Art. 6 (1) (b) GDPR.
- information about our and other services – Art. 6 (1) (a) GDPR (consent).
For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 7 days, your information will be automatically deleted. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. The only mandatory information for sending the newsletter is your email address. The rest of your data is voluntary and will be used to address you personally and to send you specific information. After your confirmation, we will store your email address for the purpose of sending you the newsletter.
To unsubscribe from the newsletter, you can declare your withdrawal by clicking on the link provided in every newsletter email or by sending an email to . We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the sent emails contain so-called tracking links. With the data obtained in this way, we create a user profile in order to tailor our newsletter to your individual interests. In doing so, we record when you have opened and read our newsletters and which links you have clicked on in them, and infer your personal interests from this. The information is stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously. The newsletter is sent using the dispatch service provider ‘Klick-Tipp’, a service of the English provider Klick-Tipp Limited, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom. For more information, please visit https://klick-tipp.com/datenschutzerklärung/. The shipping service provider is used on the basis of a contract processing agreement pursuant to Art. 28 (3) GDPR.
6. Voucher codes
We offer our customers the opportunity to redeem voucher codes if they book distance learning courses on our website as part of our partner program for advertising our distance learning courses with advertising partners. The voucher codes are generated in such a way that we may assign them to a specific partner.
When you redeem a voucher code from one of our partners on our website, we process the following data: Data from your ecodemy account, date of redemption of the voucher, value of the voucher, partner of our voucher. The processing of the data is necessary for the execution of the contract according to Art. 6 (1) (b) GDPR, on the one hand to be able to credit you with the corresponding discount if you book, on the other hand to be able to pay out a commission to our partners for the ‘referral’. In particular, we will not pass on any personal data to the partners.
7. ecodemy® certificates
In the Campus you may download your ecodemy® certificates via your ecodemy account under the tab ‘Certificates’. This is done simply by downloading by clicking on the button ‘Download certificate’. The certificate will then be made available to you immediately.
For the issuance of the certificate it is necessary that we process your following personal data, which we have already collected in the context of your registration, among other things: First and last name, date of birth, distance learning course incl. processing time and subject areas, final grade if applicable, type of performance determination and date of completion. The legal basis for data processing is Art. 6 (1) (b) GDPR, whereby the data processing serves the fulfillment of our contractual obligations to you.
D. Statistics, web analytics, advertising based on tracking and retargeting – use of cookies
1. General information about cookies
We use so-called cookies on our website. These are text files of small memory size that are stored by your browser on the device you are using (computer, smartphone, tablet). The files contain information (usually identifiers, identification numbers) that our website may retrieve from your device and assign to a database stored by us or our partners (see third-party cookies). This enables us and our partners to recognize that our website has already been accessed from your device. You can determine whether cookies may be set and accessed by changing the settings in your browser. You may, for example, completely deactivate the storage of cookies in your browser, limit it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. Cookies may not execute programs or transmit viruses to your terminal device.
We use so-called session cookies (also referred to as ‘temporary cookies’), for example, cookies that are only temporarily stored for the duration of your use of one of our websites. For the full functionality of our website, it is necessary for technical reasons to allow the aforementioned session cookies. The purpose of these cookies is, among other things, to recognize your browser as ‘logged in’ during your visit to our website, even if you navigate across several pages in the meantime. You can find out about further purposes in the cookie settings.
Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You may delete the cookies in the security settings of your browser at any time.
In addition, we sometimes use the so-called fingerprinting method. Fingerprinting is the recognition of your device based on information about your computer hardware, software, add-ons and browser settings. For simplicity, we always refer to ‘cookies’ here.
Unless otherwise stated, the processing described in this section is based on your consent pursuant to Art. 6 (1) (a), Art. 7 GDPR
If you would like to change your cookie settings subsequently, you may do so here: .
You can find out how to delete cookies via your browser below under Functional life – How cookies may be avoided and deleted.
2. Partner program
We offer a partner program on our website for advertising our distance learning courses with advertising partners. In doing so, users may be directed to our website via an affiliate link, where a cookie may be set. Only with the use of the cookie we may ensure a unique commission assignment of a referred student who visits our website via an affiliate link. We store the personal data collected in this way for 90 days.
3. Affiliate links/advertising links
The links marked with an asterisk (*) are so-called affiliate links. If you click on such an affiliate link and make a purchase via this link, we will receive a corresponding commission from the online store. For this purpose, it is necessary that our affiliate partner identifies you and may track that you came to the respective product via the advertising link placed on our website and made a subsequent transaction. For this purpose, our affiliate partner uses cookies or comparable recognition technologies (e.g. device fingerprinting) on its website.
We have a legitimate interest in the correct calculation of the affiliate remuneration. The storage and analysis of the data is therefore based on Art. 6 (1) (f) GDPR.
We participate in the Amazon PartnerNet affiliate program.
The provider is Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l, Amazon Services Europe S.à.r.l. and Amazon Media EU S.à.r.l., all four located at 38, avenue John F. Kennedy, L-1855 Luxembourg, and Amazon Digital Germany GmbH, Domagkstr. 28, 80807 Munich, Germany (collectively referred to as ‘Amazon Europe’). For more information, please see Amazon Europe’s privacy policy at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.
When you click on the Amazon Europe affiliate links/advertising links, you will leave our website and go to the Amazon Europe website. There, the corresponding terms and conditions (https://www.amazon.de/gp/help/customer/display.html?nodeId=201909000) and the privacy policy (https://www.amazon.de/gp/help/customer/display.html/ref=help_search_1-2?ie=UTF8&nodeId=3312401&qid=1331541913&sr=1-2) of Amazon Europe apply.
4. Publisher of the cookies – third party cookies
We use our own cookies as well as cookies from partners. If the cookies originate from us, they are so-called ‘first-party cookies’. Information about the purpose and duration of our first-party cookies can be found in our cookie settings.
If cookies come from third parties whose services we use, these are referred to as ‘third-party cookies’. We would like to inform you about these below.
If third-party cookies are stored on your device via our website. The publisher of third-party cookies may be able to track your usage patterns online across multiple websites. The publishers of the third-party cookies sometimes come from so-called third countries (countries outside the EU/EEA), in which an adequate level of data protection is not guaranteed. In third countries, especially the USA, there is a risk that your data will not be processed according to EU standards. In particular, effective legal protection against state access to your personal data is not guaranteed. If the cookies originate from publishers in third countries, the legal basis is your consent according to Art. 49 (1) (a) GDPR.
You can also find more information in the privacy policies of the publishers of the third-party cookies, which we always link to.
5. Web analytics, statistics tools
In order to determine which contents of our website are most interesting for you, we continuously measure the number of visitors and the most viewed contents. For this purpose, we process your data
– to record the number of visitors to our web pages,
– to record the respective visiting times of our website visitors, and
– to record the visit order of different web pages and product pages in order to optimize our website.
a) Google Analytics
On the basis of your consent, which can be withdrawn at any time with effect for the future, according to Art. 6 (1) (a), Art. 7 GDPR, we use the Google Analytics service on our pages. You declare your consent via the cookie/privacy banner if you visit our website for the first time. Google Analytics will not be used without your consent.
If Google Analytics is a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 (‘Google Analytics’ or ‘Google’). Insofar as Google Ireland Limited transmits personal data to the US parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google guarantees by means of standard contractual clauses to maintain a European level of data protection.
By using Google Analytics, we aim to evaluate the analysis results generated by Google Analytics in order to optimize the web offer. Google Analytics uses cookies (text files on your computer that may be used to recognize your terminal device), which enable Google to analyze the use of our website.
This website also uses Google remarketing tags. Cookies are stored on your terminal device for this purpose. If you use Google pages later, you will be presented with banners and text ads according to your previous behavior. Here, too, the data is collected anonymously.
We would like to point out that Google Analytics has been extended on our websites to ensure anonymous collection of IP addresses (so-called IP masking). The IP address is only recorded by Google in shortened form, which ensures anonymization and does not allow any conclusions to be drawn about your identity. If IP anonymization is used on our websites, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The information collected by the cookies about the use of our websites (including your anonymized IP address) may under certain circumstances be transferred to a Google server in the USA under the responsibility of Google and stored there. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Standard contractual clauses have been concluded between Google Ltd. and Google Inc. (USA) for transfer protection.
Google uses the aforementioned information on our behalf to evaluate your use of our websites, to compile reports on website activity for us and to provide us with other services related to the use of websites and the Internet. We have concluded a data processing agreement with Google Ireland Ltd. in accordance with Art. 28 GDPR.
To withdraw your consent, please click on the link ‘Change cookie settings’ above under ‘D. Statistics, web analytics, advertising based on tracking and retargeting – use of cookies ‘ or remove the cookies on your computer (usually this requires pressing Ctrl+Shift+Del at the same time). You may prevent the collection of data generated by the cookies and related to your use of these web pages (incl. the IP address) to Google as well as the processing of this data by Google also on other websites by using the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. For more information on Google Analytics Terms of Use and Privacy Policy, please visit https://www.google.com/analytics/terms/ and https://support.google.com/analytics/topic/2919631?hl=de&ref_topic=1008008 .
You may also prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set that will prevent your data from being collected if you visit this website in the future: Disable Google Analytics.
b) Google Tag Manager
We use the Google Tag Manager of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager enables us to implement and manage so-called tags, that means small code elements, in our website via a central interface. The Tag Manager does not use cookies itself. It does, however, trigger others, which in turn may collect data, also by means of cookies. Google does not access this data. Google Analytics and Microsoft Ads, for example, are integrated via this.
Google does not gain access to third-party analysis data via the Tag Manager. Google only learns the IP address of the user, which is necessary to run the Google Tag Manager.
You can find more information about the Google Tag Manager and how it works at: https://www.google.com/intl/de/tagmanager/faq.html
6. Advertising based on tracking and retargeting
We only want to show you ads that you are really interested in. Therefore, we use tracking and retargeting technologies on our website for advertising tailored to your interests. Cookies are generally used for this purpose. The cookies cached for this purpose allow our retargeting partners to recognize visitors to our website under a pseudonym and show you only products that are likely to interest you.
Unless otherwise stated, the processing described in this section is based on your consent pursuant to Art. 6 (1) (a), Art. 7 GDPR. If you would like to change your cookie settings subsequently, you can do so here: Change cookie settings.
You can find out how to delete cookies via your browser below under Functional life – How to avoid and delete cookies.
We use the collected data for statistical and advertising purposes and in particular
– for targeted advertising, including via advertising networks in cooperation with partners,
– to measure the success and billing of advertising measures between advertising partners and us,
– to track which advertisements you have already seen in order to prevent you from seeing the same advertisement again, and
– to assess which parts of our website need to be optimized.
Unless otherwise stated, we use the following services as processors and contractually oblige them to process data only on our behalf.
a) Microsoft Ads (Bing Ads)
We use the online advertising program ‘Microsoft Ads’ on our website, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (‘Microsoft’). Microsoft Ads is an Internet advertising service that allows advertisers, such as us, to serve ads based on your interests in Bing search engine results and the Microsoft Ads network. Microsoft processes information about your usage behavior to create pseudonymous usage profiles. These usage profiles are used to analyze your surfing behavior and to display ads that are tailored to your interests. This is done by means of a cookie set by Microsoft, which has a validity of 180 days. This cookie is also set via our site if you have previously agreed to it in our cookie settings.
We learn the total number of users who clicked on a Bing ad and were then redirected to our conversion page, for example the page linked in the ad. However, we do not receive any information with which we may personally identify individual users.
The legal basis for the processing if Microsoft Ads is used is your consent, Art. 6 (1) (a), Art. 7 GDPR. Your data will be processed in the USA by Microsoft. The legal basis for the transfer to the third country USA is also your consent, Art. 49 (1) (a) GDPR. You declare your consent to the use of Microsoft Ads and the transfer of your data to the USA via the cookie settings if you visit our website for the first time. You may withdraw your consent at any time via the settings without incurring any disadvantages.
If you have a user account with Microsoft, you will be shown personalized advertisements based on data from Microsoft Ads. You may prevent this by using the following link https://choice.microsoft.com/de-DE/opt-out to declare your objection.
For more information on data protection and the cookies used by Microsoft Ads, please visit the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement.
b) Meta Pixel
On the basis of your consent, which can be withdrawn at any time with effect for the future, in accordance with Art. 6 (1) (a), Art. 7 GDPR, we use the service Meta Pixel and Conversions API (in short ‘CAPI’), a server-side event tracking tool, on our website. You declare your consent via the cookie/privacy banner during your first visit to our website. Meta Pixel/CAPI will not be used without your consent. To withdraw your consent, please click on the ‘Change cookie settings’ link above under ‘D. Statistics, web analytics, advertising based on tracking and retargeting – use of cookies’ or remove the cookies from your computer (usually this requires pressing Ctrl+Shift+Del at the same time). Meta Pixel/CAPI is a service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. CAPI is a data interface through which we transmit data about behavior on our website to Facebook for evaluation. When processing data using CAPI, the data is processed on our web server in addition to the collection in the client – even if the Meta pixel should be blocked, the data collection with CAPI continues to function. For more information, please visit: https://www.facebook.com/business/help/2041148702652965?id=818859032317965&recommended_by=363303621411154.
By calling up this pixel in your browser, Meta can then track whether a Facebook ad was successful, for example you booked a course from us. In addition, this enables us to display the Facebook ads only to Facebook users who have visited our website or who have certain characteristics (such as the same interest in vegan nutrition as visitors to our website) (‘Customer Audiences’). We only receive statistical data from Facebook without reference to a specific person. This allows us to record the effectiveness of Facebook ads and only show you relevant ads on Facebook. Insofar as Facebook transmits personal data to the US parent company Meta Platforms Inc, 1601 S California Ave, Palo Alto, California 94304, USA, Meta guarantees by means of standard contractual clauses to maintain EU data protection levels.
c) Pinterest-Tag
We use the Pinterest Tag service on our website, this is a pixel. This allows us to track certain user actions predefined by us that are performed on our website (for example completed transactions, leads, searches on the website, views of product pages, etc.) to determine how successful our advertising and actions on Pinterest are and influence the traffic to our website and the demand for our services. The analysis is done in aggregate, statistical form, so we cannot attribute the actions to the individual website visitor. In addition, however, it is possible that the above information from you is associated with other information that Pinterest has stored about you, for example, based on your Pinterest account on the social network ‘Pinterest’.
The legal basis for the processing when using Pinterest-Tag is your consent, Art. 6 (1) (a), Art. 7 GDPR. Pinterest Tag’ is a service of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
As far as Pinterest Europe Ltd. transfers personal data to the US parent company Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA, Pinterest guarantees by means of standard contractual clauses to maintain EU data protection level. You can find Pinterest’s privacy policy at https://policy.pinterest.com/de/privacy-policy.
d) TikTok Pixel
We use the TikTok Pixel on our website. TikTok Pixel is a service provided by TikTok Technology Ltd, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Ltd, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom.
By using the TikTok Pixel, we can understand and track the activity of your visit to our website. For example, when you choose a course of study on our website, the TikTok Pixel is triggered and stores your actions on our website in one or more cookies. Personal data such as IP address, device ID, device type, operating system, user agent, country, language, and information about the web browser or app used may also be transferred to TikTok. TikTok subsequently processes the data for its own purposes. We use the data collected via the TikTok Pixel to improve the advertisements and for personalized advertising. To the extent that TikTok transfers personal data to third countries outside the EU or EEA, TikTok guarantees by means of standard contractual clauses to maintain EU data protection levels.
The use of the TikTok Pixel is based on Art. 6 (1) (a), Art. 7 GDPR. For more information, please visit: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE and https://ads.tiktok.com/i18n/official/policy/privacy
7. Functional duration – How to avoid and delete cookies
A distinction must be made between session cookies and persistent cookies. Session cookies are deleted when you close your browser. Persistent cookies remain on your computer until you delete them or until the time specified by the publisher has expired. The function durations of the individual cookies can be found in the privacy settings.
You can use the privacy settings to withdraw consent with effect for the future. By withdrawing the consent, the legality of the processing carried out on the basis of the consent until the withdrawal is not affected.
In addition, you can select in your browser settings whether and which cookies may be stored. It is possible to block all cookies, including ‘strictly necessary cookies’, via the settings. Alternatively, cookies from third-party providers can be blocked. Please note that the website may then no longer function properly.
You can delete cookies already stored on your device in the browser settings. If all cookies are deleted, this website may no longer function as usual. It may be necessary for you to log in again, for example.
For more information on how to delete cookies from your browser, click here: