Privacy Notice

Data protection and data security are of great importance to us for everyone involved with, interested in, or using our website and other services. Transparency regarding the processing of your personal data and the protection of your information are therefore particularly important to us.

Below, we explain what information SRH collects when you visit our websites or use our services and how this information is used.

The following Privacy Notice provides information in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we determine the purposes and means of processing either independently or jointly with others. We also provide information about third-party components used to optimize our services and improve the user experience, where such components involve the processing of personal data by third parties.

Data Controller

The provider responsible for this website under applicable data protection laws is:

SRH Berufsbildungswerk Neckargemünd GmbH
Im Spitzerfeld 25
69151 Neckargemünd
Germany

Phone: +49 (0) 6223 89-1010
Email: info.bbwn@srh.de

Company Data Protection Officer

frankenDSB DatenschutzManufaktur GmbH
Unterer Steinberg 11
97453 Schonungen
Germany

Email: datenschutzbeauftragter-srh@frankendsb.de

Your Data Protection Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Article 15 GDPR – Right of Access: The right to obtain information free of charge about your stored personal data, its origin, potential recipients, and the purposes of data processing.
• Article 16 GDPR – Right to Rectification: The right to request the correction or completion of inaccurate or incomplete personal data.
• Article 17 GDPR – Right to Erasure: The right to request the deletion of personal data concerning you without undue delay.
• Article 18 GDPR – Right to Restriction of Processing: The right to request restrictions on the processing of your personal data if further processing is still necessary.
• Article 20 GDPR – Right to Data Portability: The right to receive and transfer personal data that you have provided to us.
• Article 21 GDPR – Right to Object: The right to object to the processing of your personal data based on legitimate interests, where grounds relating to your particular situation exist or where the objection concerns direct marketing.
• Article 77 GDPR in conjunction with Section 19 of the German Federal Data Protection Act (BDSG) – Right to Lodge a Complaint: The right to lodge a complaint with the competent supervisory authority. A list of data protection authorities and their contact details is available at: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html.

To exercise your rights, please use the contact information provided above for the data controller.

General Data Collection

When you access our website or retrieve a file, information about this activity is stored in a log file on our web server.

The following data may be collected:

• IP address (stored in anonymized form whenever possible)
• Domain name of the website from which you accessed our site
• Names of the files accessed
• Date and time of access
• Name of your Internet service provider
• Operating system and browser version of your device, where applicable

We store IP addresses solely for data security purposes to ensure the stability and security of our systems. The legal basis for this processing is Article 6(1)(f) GDPR.

We reserve the right to perform statistical analyses of anonymized data sets.

How Do We Use and Share Your Personal Data?

Where our website provides the option to enter personal or business information, such as email addresses, names, or postal addresses, the disclosure of this information is entirely voluntary.

Inquiries submitted through a contact form on our website are forwarded to the intended recipient by email. These emails are encrypted during transmission. However, because end-to-end encryption is not used, you should not submit sensitive or highly confidential information through this channel.

We use the personal data you provide exclusively for the technical administration of our websites and to fulfill your requests and requirements. This generally includes performing a contract concluded with you or responding to your inquiry.

The applicable legal bases for processing are:

• Article 6(1)(a) GDPR: Your consent
• Article 6(1)(b) GDPR: Performance of a contract or implementation of pre-contractual measures
• Article 6(1)(f) GDPR: Our legitimate interests

We do not disclose or otherwise transfer your personal data to third parties unless this is necessary for the performance of a contract, required by law, or you have expressly consented to such disclosure.

We will never sell your personal data.

Any consent you have provided may be withdrawn at any time with effect for the future.

How Long Do We Store Your Data?

As a general rule, we store all information you provide to us only within the limits permitted by law and only until the purpose for which the data was collected has been fulfilled.

For example, data relating to inquiries is stored until the inquiry has been resolved, while newsletter-related data is stored until you unsubscribe from the newsletter.

If longer storage is necessary or required by law, the data will be retained for the applicable period and automatically deleted afterward.

How Do We Ensure Data Processing Security?

Our company implements all necessary technical and organizational security measures to protect your personal data against loss and misuse.

Your data is stored in a secure operating environment that is not accessible to the public.

In certain cases, your personal data is encrypted during transmission using Secure Socket Layer (SSL) technology. This means that communication between your computer and our company's servers is protected by a recognized encryption method, provided that your browser supports SSL.

Cookies

Our website uses cookies.

A cookie is a small data file created when you visit a website and temporarily stored on your device.

When you visit our website again, your browser sends the previously stored cookie back to our server. The server can then analyze the information received through this process.

Cookies can be used, for example, to manage advertising displays or make website navigation easier.

Some cookies are necessary to ensure the proper functioning of our website.

The stated legal basis is Article 6(1)(f) GDPR, which concerns the legitimate interests of the website operator. We use cookies only in accordance with Article 5(1)(a) GDPR and the principles of lawfulness, fairness, and transparency.

If you wish to prevent the use of cookies in general, you can do so by adjusting the settings in your web browser, such as Internet Explorer, Mozilla Firefox, Opera, or Safari.

For cookies that are not technically necessary, you can find additional information in this Privacy Notice about the cookies used by third-party tools and plugins.

Matomo Cookieless Tracking

We use the open-source software Matomo to analyze and statistically evaluate anonymized usage data from our website.

The information collected about website usage is transmitted exclusively to Matomo servers located in European data centers and aggregated into anonymized usage profiles. We use this data to analyze how our website is used. The collected data is not shared with third parties.

IP addresses are anonymized using IP masking, making it impossible to identify individual users. We have enabled the “Do Not Track” setting. In addition, measures are in place to prevent the storage of personally identifiable information, such as email addresses.

Data processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in optimizing our website.

Contact Forms

If you submit an inquiry through our contact form, the information you provide, including your contact details, will be stored and processed for the purpose of responding to your inquiry and handling any follow-up questions.

Your data will be used exclusively for the purpose of responding to and processing your inquiry.

Data processing is based on your voluntarily given consent in accordance with Article 6(1), first sentence, point (a) GDPR. You may withdraw your consent at any time (right of withdrawal).

Newsletter

We send newsletters containing promotional information only with the recipients' consent or where permitted by law.

Registration for our newsletter follows a double opt-in procedure. After signing up, you will receive an email asking you to confirm your subscription.

This confirmation is necessary to verify that you are the owner of the email address.

Newsletter registrations are logged to provide evidence of compliance with legal requirements.

This includes storing the date and time of registration and confirmation, as well as your IP address. Any additional information you provide during newsletter registration will also be stored.

Information other than your email address, such as your name, is used solely to personalize the newsletter.

You may unsubscribe from the newsletter at any time. An unsubscribe link is included in every newsletter email.

SSL and TLS Encryption

For security reasons and to protect the transmission of confidential information, such as inquiries you send to us as the website operator, this website uses SSL or TLS encryption.

You can recognize an encrypted connection when the browser's address bar changes from "http://" to "https://" and a padlock icon appears in your browser.

If you wish to contact our company by email, please be aware that the confidentiality of transmitted information cannot be guaranteed. Email content may potentially be accessed by third parties.

We therefore recommend sending sensitive or highly confidential information to us exclusively by postal mail.

References and Links to Third-Party Websites

This website contains references to third-party websites in the form of links.

Data is transmitted to the linked destination only when you click on a link. This transmission is technically necessary.

The transmitted data may include, in particular:

• Your IP address
• The date and time you clicked the link
• The webpage on which you clicked the link
• Information about your internet browser

If you do not want this information to be transmitted to the linked destination, please do not click on the link.

If you follow a link to one of these third-party websites, please note that these websites have their own privacy policies. We assume no responsibility or liability for these policies.

Security Notice

We protect our website and other IT systems against the loss, destruction, unauthorized access, unauthorized modification, or unauthorized disclosure of your data through appropriate technical and organizational measures.

However, despite all reasonable precautions, complete protection against every potential security risk cannot be guaranteed.

Because we cannot guarantee complete data security when communicating by email, we recommend sending confidential information by postal mail.

Changes to This Privacy Notice

We reserve the right to modify this Privacy Notice if the legal requirements, our online services, or the methods of data collection change.

However, this applies only to statements concerning data processing.

If user consent is required or if any provisions of this Privacy Notice govern the contractual relationship with users, changes will only be made with the user's consent.

We therefore recommend reviewing this Privacy Notice whenever necessary, particularly before providing personal data.