This Privacy Notice explains how your personal data is processed in connection with the use of this website and the provided functionalities, such as the menu for ordering information, a blog, and search functions (hereinafter collectively referred to as the “Website”).
This Website uses SSL or TLS encryption for security and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries submitted to the data controller). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.
1. Data Controller and Data Protection Officer
This Website is operated by IU Internationale Hochschule GmbH, Juri-Gagarin-Ring 152, 99084 Erfurt (“IU”). IU is the data controller for the processing of your personal data. IU has appointed Dr. Annette Demmel, SPB DPO Services GmbH, Unter den Linden 21, 10117 Berlin as its data protection officer. You can contact IU either in writing or per email at firstname.lastname@example.org.
2. Data Collection When Visiting the Website
When using our Website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “Server Log Files”). When you access our Website, we collect the following data, which is technically necessary in order to display the Website for you:
- Our Website visited
- Date and time of access
- Quantity of data transmitted in byte
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used
The processing takes place in accordance with Art.6(1)(b) of the General Data Protection Regulation (“GDPR”) on the basis of your use of our Website and our interest in improving the stability and functionality of our Website in accordance with Art.6(1)(f) GDPR.
Depending on your browser settings and whether you have given us your consent, cookies may be used when you visit this Website in order to extend the functionality of the Website and make it more convenient for you to use. Cookies are small text files that are stored on your computer. Most of the cookies used by IU are deleted from your hard drive at the end of the browser session (“Session Cookies”). In addition, IU uses so-called permanent cookies (“Persistent Cookies”), which remain on your device in order to recognize you the next time you visit the Website. If cookies are used, they collect and process to an individual extent certain user information such as browser and location data, IP address values and as described in the Server Log Files. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. An overview of the cookies used and the duration of the respective cookie storage can be found in the cookie settings in our Cookie Consent Tool.
If personal data is also processed through individual cookies used by us, the processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our Website (so-called “Necessary Cookies”) or in accordance with Art. 6(1)(a) GDPR on the basis of your consent for all other cookies (marketing and analysis cookies).
4. Cookie Consent Tool
5. Contact (e.g. by email)
If you contact us by email, we process your email address. If you also provide us with your name and other personal data, we also process this data. The legal basis for this processing is Art. 6(1)(b) GDPR. We process your data in order to respond to your inquiry. Your personal data will be retained in each case for the period determined by IU in order to perform the task and will be deleted thereafter. Only employees of IU who are responsible for responding to contact requests will receive access to your personal data. Except for the transfers of usage data to the USA described in connection with Google Analytics, IU will not transfer your personal data to a third country outside the EU. Any other transfer will only take place if IU is required to do so by law or by public authorities or if the transfer is necessary in the context of your use of the Website.
6. Applications for Advertised Jobs
I. Categories of data, the purpose of processing, legal basis, recipients, and retention period for data in your application
If you apply for an advertised job, we process the following categories of personal data, in particular:
- Your name, i.e. first and last name,
- Your address,
- Your telephone number,
- Your email address,
- Information in your curriculum vitae, including
- Education history, highest school-leaving qualification and final grade,
- Information, certificates and final grade relating to your vocational training (at a company or in school) and/or
- Information, certificates and final grade relating to your academic studies,
- Details of previous employers together with information on the line of work,
- Information together with proof of advanced training, continuing education and/or other qualifications,
- Other information you provide, such as hobbies, knowledge of foreign languages, other details regarding special skills, etc.
- Your desired salary,
- Your photograph,
- Your signature,
- Letters of recommendation, if applicable, and
- All data submitted in an application together with other proof and documentation.
If you apply for a job, we use the so-called double opt-in procedure, i.e. you will receive an email with which you must confirm that you are the email address owner. Please note that this is purely a precautionary measure and that sending a confirmation email to you has no legal effect. The legal basis for this processing is the submission of your application to us in accordance with Art. 6(1)(b) GDPR.
IU uses various IT service providers to assist us in providing our career websites that you can use to submit a job application. Employees of such service providers, especially of those who provide the portals we use and through which you have uploaded your application to us, may receive access to your personal data for troubleshooting purposes in individual cases. Your application data that you upload via our application portal is hosted in the EU. We have concluded a data processing agreement with our service providers for this purpose in accordance with Art. 28 GDPR. In this context, it is also possible that employees of the service provider who are responsible for technical support may receive access to your personal data from outside the EU. In this case, we have incorporated the EU standard contractual clauses into the data processing agreement. In addition, employees of service providers providing advice, such as law firms, who are legally bound to secrecy, may receive access to your personal data.
If we offer you a permanent position at IU, we will process your personal data as described in the privacy notice for employees. If we are unfortunately unable to consider your application further, we will process your data for a period of six (6) months from the date of sending the rejection letter and delete your data thereafter.
6.1 Talent Pool for Job Applicants
If you would like your application documents to also be considered for other suitable job vacancies, you can give us your consent in accordance with Art. 6(1)(a) GDPR to include your documents in our talent pool. We will then process your application documents for a period of 6 months. If you would like your application documents to be kept in the talent pool beyond this period, we will ask you for your consent again before the aforementioned period expires. If you do not give us any further consent or if you withdraw your previous consent, we will delete your application documents within two weeks of receiving your withdrawal. Only employees of IU who are responsible for processing applications receive access to the application data stored in the talent pool. IU uses a software solution of Workday, Inc. to store your application data. Your data is hosted in a data center in the European Union.
6.2 Login for Job Applicants
If you apply for a job with us, you can create a user profile on our Workday platform. For this purpose, we process your personal data, such as your full name, your self-selected password, your email address, your contact details (such as address and telephone number), together with the information contained in your application – as described above under Applications for Advertised Jobs.
The legal basis for this processing is a user relationship concluded with you in accordance with Art. 6(1)(b) GDPR. We will retain your personal data for the duration of the application process. If your application process is completed, for whatever reason, your personal data (i.e. your user profile) will be retained by us for a period of six months and then deleted, unless you continue to use your access for other applications.
In order to provide this platform, we have engaged Workday Inc., 6110 Stoneridge Mall Road, CA 94588 Pleasanton (“Workday”). Your personal data is hosted in a data center located in the European Union. However, in exceptional circumstances, employees of Workday, Inc. may receive access to your personal data for troubleshooting, support and maintenance purposes. For this reason, we have entered into a data processing agreement with Workday, which incorporates the EU standard contractual clauses. You have the right to obtain a copy of the EU standard contractual clauses. If you wish to exercise this right, please contact us at email@example.com.
7. Web Analysis Services
Our website uses analysis services in order to collect information about our website, provided you have consented to the setting of the corresponding cookies. The data obtained with the help of these analysis services, such as the location of the visitors or their length of stay on our website, gives us information about visitor behaviour on our website. With the help of this data, we can not only eliminate website issues, but also improve the efficiency of our website. Further information on the analysis services used on our website can be found below. For information on the processing of personal data by the cookies set for this purpose, such as the storage duration of the cookies, please refer to our cookie settings.
7.1 Google Analytics
We use Google Analytics to get an overview of the behaviour of website visitors, and gain insights regarding our digital marketing efforts. Google Analytics allows us to collect and evaluate the data specifically relevant to IU, for example how far down a webpage was scrolled, which button was clicked, etc. Google Analytics also helps us, for example, understand user demographic characteristics such as age, gender and interests, geographic characteristics such as language and location, as well as technical characteristics such as device type, browser and operating system. With the help of this data we can not only optimise our website, but can also recognise how the respective user sessions ended (e.g. simple website visit, request for information material, application for studies). Google Analytics also helps us recognise which webpage a user is accessing and via which channel the users come to our website from (e.g. via a paid or unpaid ad, a Google search, a Facebook post or direct access to the website). With the help of this information, IU can identify which marketing channels are working and which are not. Google Analytics also allows us to recognise user paths, i.e. where users are moving on our website, whether they are going back to the start page and how many users access our website. With the help of this information, we can, for example, recognise whether the jumping off of a large number of users is due to a technical defect in the website. The above data gives us a good overview of our website and how it is used. Even if we collect user data, we cannot draw any conclusions about your identity from this data, as we receive reports from Google Analytics that are based on aggregated data sets.
Information on the provider, the cookies set, the legal basis for cookie collection, international data transfers and storage times of the cookies can be found in our cookie settings.
8. Google Tag Manager
This website uses Google Tag Manager (“GTM”), a service provided by Google Ireland Ltd. (“Google”), with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Through the use of GTM, tags such as code snippets or pixels are used on our own Website by means of a so-called container, which inserts a kind of placeholder into the source code and in which the tools that are to be used are stored without IU having to interfere with the source code of our Website. Using GTM, tools can be used on our own Website without having to include each of them in the source code. Instead, only the code of GTM has to be included, and then GTM can be used as a central place to launch or disable the desired tools.
GTM works on the Website when a defined user behavior triggers a tag (i.e. a pixel tag, web beacon, or html code) for the tool. GTM collects the relevant data for the built-in tool and forwards it to the tool. Information about the tools used on our Website that are loaded via GTM can be found here. In this context, not only are the data categories described for the respective tools transferred to the respective tool providers; Google Ireland Ltd. also receives information about your usage behavior on our Website. Since a large number of the tool providers are located in countries outside the EU, please refer to the description of the respective tools if you would like to receive information on the transfer mechanisms agreed with IU. IU has also entered into a data processing agreement with Google Ireland Ltd., which incorporates the EU standard contractual clauses. The main content of this agreement is available for review here: https://policies.google.com/privacy/frameworks?hl=de.
IU uses GTM to deploy not only statistical tools but also marketing tools. Accordingly, GTM is a statistics and marketing tool, and the use of GTM is based on your consent in accordance with Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future by sending an email to firstname.lastname@example.org.
9. Social Media
10. Rights of Data Subject
You can contact IU in writing or per email at email@example.com in order to exercise the following rights:
- Access your data in order to check and verify this data;
- Obtain a copy of your personal data;
- Rectification, erasure or restriction of processing, which also includes the right to complete incomplete or incorrect data by providing a supplementary statement;
- Right to object to the processing;
- You can receive your provided personal data in a structured, commonly used and machine-readable format and transmit this data to another controller, provided that you have given your consent to the processing or the processing is based on a contract;
- If you have given us your consent to process your personal data, you can withdraw this consent at any time with effect for the future.
You also have the right to lodge a complaint with a supervisory authority in connection with the processing of your personal data.
11. Why Do We Collect Your Personal Data?
You may choose not to provide us with your personal data or choose to provide incomplete data. In such a case, for example, if you prevent the storage of a cookie, you may not be able to use all the functionalities of the Website. If you do not provide us with your personal data or only provide us with incomplete personal data in the context of an admission procedure or a job application, we may not be able to accept you as a student or offer you the opportunity to participate in a job application procedure.