Privacy
The organization responsible for the processing of personal data on this website is:
StartSteps Digital Education GmbH
c/o Factory Berlin
Rheinsberger Str. 76/77
10115 Berlin
Germany
For questions regarding data protection, you can contact:
datenschutzbeauftragter@startsteps.org
Your rights as a data subject
Under the General Data Protection Regulation (GDPR), you may have the following rights in relation to your personal data:
- The right to access your personal data and information about how it is processed (Art. 15 GDPR)
- The right to rectification of inaccurate personal data (Art. 16 GDPR)
- The right to erasure of your personal data (Art. 17 GDPR)
- The right to restriction of processing (Art. 18 GDPR)
- The right to data portability where the applicable requirements are met (Art. 20 GDPR)
- The right to object to certain processing of your personal data (Art. 21 GDPR)
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority.
Third-country transfers
Personal data may be processed in the United States or other countries outside the European Economic Area.
Where applicable, transfers to companies in the United States may be based on the EU-U.S. Data Privacy Framework. Where this framework does not apply, other appropriate safeguards, such as Standard Contractual Clauses, may be used.
Further information about international data transfers is available in the privacy information of the respective service provider.
Collecting general information during a visit to our website
Type and purpose of the processing
When you access our website, certain technical information may be collected automatically. This may include information such as your IP address, browser type, operating system, referring website and information about the time and manner in which you access our website.
This information may be processed for purposes including:
- Providing and maintaining the website
- Ensuring the security and stability of the website
- Identifying and resolving technical problems
- Preventing misuse or attacks
- Supporting the administration and improvement of the website
Legal basis
The processing is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR in operating a secure, stable and functional website.
Recipients
Personal data may be processed by technical service providers that support the hosting, operation, maintenance or security of our website.
Retention period
Technical data is retained only for as long as reasonably necessary for the operation, security and administration of the website, unless a longer retention period is required for legal or security reasons.
Mandatory or required provision
The processing of certain technical information, in particular the IP address, is necessary in order to provide the website and its functionality.
Lead sharing with educational partners
Type and purpose of the processing
In some cases, we may share personal data with selected educational partners where this is necessary to respond to an enquiry, support an application or provide information about a relevant educational offer.
Legal basis
We only share personal data where there is an appropriate legal basis for the transfer. Depending on the situation, this may be based on your consent pursuant to Art. 6(1)(a) GDPR, steps taken at your request before entering into a contract pursuant to Art. 6(1)(b) GDPR or another applicable legal basis.
Recipients
Recipients may include selected educational partners.
Depending on the circumstances, the receiving organisation may process the information as an independent controller and is responsible for its own data processing activities.
Retention period
We retain information relating to the sharing of personal data only for as long as necessary for the relevant purpose and to meet applicable legal, contractual or compliance requirements.
Your rights
Where an educational partner processes your personal data as an independent controller, you may also exercise your data protection rights directly with that organisation.
Further information about how an educational partner processes personal data may be available in that organisation’s own privacy notice.
Newsletter
Type and purpose of the processing
If you subscribe to our newsletter or other marketing communications, we use the information you provide to send you the communications you have requested.
Providing an email address is necessary to receive the newsletter. We may also use information such as your name to personalise communications.
Where applicable, we use a double opt-in procedure to verify newsletter registrations.
Legal basis
The legal basis for sending newsletters and marketing communications is your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time, including by using the unsubscribe option included in our marketing emails.
Recipients
Personal data may be processed by service providers that support us in sending and administering our newsletters and marketing communications.
Retention period
We retain the information required to send the newsletter for as long as your consent remains valid.
If you unsubscribe or withdraw your consent, we will stop using your data for newsletter marketing. We may retain the minimum information necessary to document your withdrawal and ensure that you are not contacted again for this purpose.
Mandatory or required provision
Providing your personal data for newsletter purposes is voluntary. Without your email address and consent, we cannot send you the newsletter.
Contact forms and enquiries
Type and purpose of the processing
When you contact us through a contact form, email or another communication channel, we process the information you provide in order to respond to your enquiry and communicate with you.
Depending on the form or nature of your enquiry, this may include your name, email address, telephone number, information about the program you are interested in and the contents of your message.
Legal basis
Where your enquiry relates to a potential application, program or contractual relationship, processing may be based on steps taken at your request before entering into a contract pursuant to Art. 6(1)(b) GDPR.
For other enquiries, processing may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in responding to enquiries and communicating with individuals who contact us.
Where you separately agree to receive marketing communications, this processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
Recipients
Personal data may be processed by service providers that support us with website forms, communications, customer relationship management or related administrative activities.
Retention period
We retain information submitted through contact forms only for as long as reasonably necessary to process and follow up on the enquiry.
Where an enquiry relates to an application, a StartSteps program or prospective participation, the information may become part of the prospective student record and may be retained in accordance with the applicable retention period.
Where legal, contractual or other retention requirements apply, relevant information may be retained for the required period.
Mandatory or required provision
Providing personal data through a contact form is generally voluntary. However, we require sufficient information to understand and respond to your enquiry.
Applicants and participants
If you apply for or participate in a StartSteps program, we process additional personal data for purposes including application management, eligibility and funding checks, program administration, course delivery and participant support.
Additional information about this processing is provided during the application or onboarding process.
Google Analytics
Type and purpose of the processing
We use Google Analytics to understand how visitors use our website and to improve our website and services.
Google Analytics may process information such as device and browser information, IP address, website usage and interactions with the website.
Google Analytics is only activated after you have given your consent.
Legal basis
The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.
Recipients
Personal data may be processed by Google and companies affiliated with Google where this is necessary to provide the analytics service.
Retention period
Personal data processed through Google Analytics is retained in accordance with the retention settings configured for our Google Analytics account.
Third-country transfers
For possible processing outside the European Economic Area, please see the section on third-country transfers above.
Revocation of consent
You can withdraw your consent at any time through our cookie or privacy settings.
Google Ads Conversion Tracking
Type and purpose of the processing
Where you have given your consent, we use Google Ads conversion tracking to understand whether users interact with our advertisements and subsequently perform certain actions on our website.
Google may process information about your device, browser, interactions with advertisements and use of our website for this purpose.
Legal basis
The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.
Recipients
Personal data may be processed by Google and companies affiliated with Google.
Retention period
Data is retained in accordance with the settings and retention periods applicable to the Google Ads service.
Third-country transfers
For possible processing outside the European Economic Area, please see the section on third-country transfers above.
Revocation of consent
You can withdraw your consent at any time through our cookie or privacy settings.
Embedded YouTube videos
Type and purpose of the processing
We embed YouTube videos on parts of our website. YouTube is a service provided by Google.
Embedded YouTube content is only loaded after you have given your consent.
When YouTube content is loaded, information such as your IP address, device and browser information, information about the page you are visiting and your interaction with the embedded content may be transmitted to Google.
If you are logged into your Google or YouTube account, Google may associate your interaction with your account.
Further information about how Google processes personal data is available in Google’s privacy information.
Legal basis
The legal basis for loading embedded YouTube content and the associated processing of personal data is your consent pursuant to Art. 6(1)(a) GDPR.
Recipients
Personal data may be transmitted to Google and companies affiliated with Google where this is necessary to provide the embedded YouTube content.
Retention period
StartSteps does not determine the retention periods applied by Google to data processed independently by Google in connection with YouTube.
Information about Google’s retention practices and options for managing or deleting data is available in Google’s privacy information.
Third-country transfers
For possible processing outside the European Economic Area, please see the general section on third-country transfers above.
Revocation of consent
You can withdraw your consent at any time through our cookie or privacy settings.
Mandatory or required provision
The provision of personal data in connection with embedded YouTube content is voluntary and based on your consent.
If you do not give your consent, embedded YouTube content will not be loaded.
SSL/TLS encryption
To protect personal data transmitted through our website, we use encryption technologies such as SSL/TLS via HTTPS.
Changes to this privacy notice
We may update this privacy notice where necessary to reflect changes to our services, data-processing activities or applicable legal requirements.
The current version published on our website applies.
Data protection contact
If you have questions about this privacy notice or the processing of your personal data, please contact:
datenschutzbeauftragter@startsteps.org