Privacy Policy

Information on the collection of personal data

In the following, we provide you with information on the collection of your personal data when you use our website. Personal data is defined as any data that can be linked to you as an individual, such as your name, address, email address, or user behaviour.
The General Data Protection Regulation (GDPR) is the legal basis for this privacy policy.
The data controller according to Article 4 paragraph 7 of the GDPR is

IESE Stiftung Deutschland
Maria-Thersia-Strasse 15
81675 München

In view of the size of the foundation, we are not under any legal obligation to appoint a data protection officer. Please contact any of our employees should you have questions concerning data privacy.

Should we commission service providers with performing individual functions of our offer, we have provided detailed information on the affected processes below, including the criteria defined for determining the period of storage. Insofar as our suppliers or partners have their registered office outside the European Economic Area (EEA), we will inform you about what this means for you in the description of the offer.

Collection of personal data when accessing the website

When using our website solely for the purpose of obtaining information, i.e., only viewing its content without registering or transmitting information to us in any other way, we only process the personal data that your browser transmits to our server. This processing is required in order to display our website and ensure its stability and security. This is a legitimate interest which is the basis for the processing of data in accordance with Article 6 paragraph 1 lit. f) of the GDPR.

It concerns the following data:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Subject matter of the request (specific page)
  • Access status/HTTP status code
  • Volume of data transferred in each event
  • Web page sending the request
  • Browser
  • Operating system and user interface
  • Language and version of browser software

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For data collected for the purpose of accessing the website, this is the case when the respective session ends. For data collected in log files, this is the case after no more than seven days. Longer storage periods are possible; however, in this case, the user IP address is deleted or truncated so that it is no longer possible to relate it to the accessing client.

Your rights

Your rights

You have the following rights as the subject of your personal data:

  • Right to information: You may request information on whether we have stored any of your personal data and which data we have stored. You will receive this information from us free of charge. Your right to information may not apply or be restricted if and to the extent that providing you with such information would entail disclosing confidential information, such as information protected by professional secrecy.
  • Right to rectification: Should your personal data stored by us be inaccurate or incomplete, you have the right to demand its correction at any time.
  • Right to erasure: You have the right to demand the erasure of your personal data if and to the extent the data are no longer required for the purpose it was collected for or – if its processing is subject to your consent – you have withdrawn your consent. In this event, we must cease the processing of your data and delete it from our IT systems and databases. You have no right to erasure of your data
    • if a statutory provision requires the continued storage or processing of this data;
    • if the processing of the data is required in order to assert, exercise or defend legal rights or claims.
  • Right to restriction of processing: You have the right to demand the restriction of the processing of your personal data.
  • Right to data portability: You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format and have the right to have those data transmitted to another controller. This right only applies
    • if you have provided this data to us on the basis of your consent or a contract concluded with us;
    • the data is processed with the help of automated means.
  • Right of withdrawal of consent: To the extent that we process your data based on consent that you have given us, you have the right to withdraw your consent at any time with effect for the future. Any processing up to the moment of withdrawal remains lawful.
  • Right to objection: If the processing of your data is based on a weighing of legitimate interests, you have the right to object to its processing at any time.

To exercise any of the above-mentioned rights as a data subject, please send an email describing your specific request to info@iese-stiftung.org

  • Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the competent data protection authority at any time if you believe that the processing of your personal data violates data protection law. The competent data protection authority for us is:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Postfach 1349
E-Mail: poststelle@lda.bayern.de
www.datenschutz-bayern.de

Changes to this privacy policy
We review this privacy policy whenever there are changes the way we process data and whenever other opportunities call for a review.
Version: March 2023