With the following information, we will provide you an overview of the processing of your personal data by us and your rights.
1. Who is responsible for data processing and who can I contact?
The responsible authority is:
Institute for Leadership Dynamics GmbH (ILD)
D-14193 Berlin-Grunewald, Germany
Phone: +49(0)30 235 777 50
Fax: +49(0)30 235 779 33
You can reach our extern data protection officer under:
Data Protection Officer
Institute for Leadership Dynamics GmbH
D-14193 Berlin-Grunewald, Germany
3. Which data do we use?
In general, you can visit our websites without informing us about your identity, unless you send us an e-mail or a message using a contact form, or giving us consent to receive information material. Thereby, we only process data that is relevant for responding to your request or for providing our information material. The collecting of data is evident from the respective input forms. The required data are marked as mandatory fields. In case, we will ask you to provide us with further personal data, please keep in mind that this only happens on a voluntary basis. We use this information to organise our offers more individual or better suited to the needs of our customers.
When registering for the use of our personalised services, we will collect some personal data, such as name, address, contact and communication information, like phone number and e-mail address. As soon as you are registered, you have access to content and services, only offered for registered users. If necessary, registered users have the option of changing or deleting the provided data at any time. Moreover, we of course provide you at any time with information on all personal data, which we hold about you. We will gladly correct or delete them upon your request, as far as no statutory storage requirements preclude.
4. For what purposes and on what legal basis do we use your data?
We process your personal data in accordance with the provisions of the statutory General Data Protection Regulation (GDPR) of the EU and the Federal Data Protection Act (FDPA). Please also note our information about your right of objection under Article 21 of the GDPR.
a) The fulfilment of contractual obligations (Article 6 section 1b of the GDPR)
The processing of personal data takes place for the performance of a contract, as well as for the implementation of pre-contractual measures, which take place at your request.
- Use of our personalised services
b) Balance of interests (Article 6 section 1f of the GDPR)
If necessary, we process your data in addition to the actual fulfilment of the contract for the protection of legitimate interests of us or third parties.
- Exercising of legal claims and defence in the event of legal disputes
- Guarantee of IT security
- For direct marketing
- Responding to your request
c) On the basis of your consent (Article 6 section 1a of the GDPR)
Unless you have given us consent on the processing of personal data for specific purposes, processing shall be lawful based on your consent. Assigned consent can be revoked at any time. Please note that the revocation only works for the future. Processing that occurred before the revocation, is not affected.
- Sending information material
- Using contact forms
- Provision of newsletters: For providing our newsletters, we use the so-called Double Opt-in procedure. This means that we will only send you a newsletter if you have explicitly confirmed your consent for receiving them. You have the opportunity to unsubscribe from any newsletter each time you receive it.
d) On the basis of legal requirements (Article 6 section 1c of the GDPR) or in the public interest (Article 6 section 1e of the GDPR)
Moreover, as a company, we are subject to various legal obligations (e.g. commercial code, tax laws).
5. Who gets my data?
Within ILD, authorities gain access to your data, which they need to fulfil our contractual and legal obligations, or in the course of balance of interests. Also, our service providers and vicarious agents can get data for these purposes, as long as they maintain confidentiality and our data protection law. A transfer of your personal information to third parties only occurs based on the regulations of the GDPR and the FDPA.
6. Are data transmitted to a third country?
Data transmission to countries outside of the EU or the EEA (so-called third countries) usually does not take place. In case, such a transmission is necessary, we will inform you in detail.
7. How long will my data be stored?
We process and store your personal data as long as required for the fulfilment of our contractual and legal obligations, or in the context of balance of interests. The data are deleted on a regular basis if they are not required for the fulfilment of these purposes anymore, unless their limited processing is necessary to comply with trading and taxation storage limits, such as the commercial code and the tax code. The deadlines for storage and documentation are six to ten years.
8. What privacy rights do I have?
You have the right of access under Article 15 of the GDPR, the right to rectification according to Article 16 of the GDPR, the right to erasure after Article 17 of the GDPR, the right to restriction of processing from Article 18 of the GDPR, the right to object according to Article 21 of the GDPR, as well as the right to data portability under Article 20 of the GDPR. Furthermore, you have the right to lodge a complaint with a supervisory authority (Article 77 of the GDPR in conjunction with § 19 of the FDPA).
A list of the supervisory authorities and their contact details can be found on the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
You may revoke your consent to the processing of personal data at any time. Please note that the revocation only works for the future. Processing that occurred before the revocation, is not affected. Please also note our information about your right of objection under Article 21 of the GDPR.
For the exercise of your rights, please use the aforementioned contact of our data protection officer.
9. Is there a duty to provide data?
In the context of a contact request, the registration for our personalised services and their use, or the ordering of information material, you must provide the personal data required for their processing (mandatory fields). Without this data, we cannot answer your request or deliver the information you requested.
10. Is there automated decision-making including profiling?
In principle, we do not use fully automated decision-making including profiling according to Article 22 of the GDPR.
11. Information about your right of objection under Article 21 of the GDPR
a) Case-specific right of objection
You have the right to object to the processing of your personal data for reasons that arise from your particular situation. The prerequisite for this is that the data processing takes place in the public interest or on the basis of a balance of interests. This also applies to profiling. In the event of objection, we will not process your personal information anymore, unless we can demonstrate compelling legitimate grounds for processing of such data that outweigh your interests, rights and freedoms. Or your personal data serve the assertion, exercise or defence of legal claims.
b) Objection to the processing of your data for direct advertising
In individual cases, we use your personal data for our direct advertising. You have the right to
object to this at any time; this also applies to profiling, if it is related to direct advertising. In the event of an objection, we will no longer process your personal data for these purposes. The objection can be made free of form and should, if possible, be sent to the aforementioned contact of our data protection officer.
12. What data is processed when using the website?
a) Usage-related information
By calling our webpages, we receive usage data. This includes information such as screen resolution, browser version, internet access, operating system, language, plugins used, country or region origin and search engines. The stored data will only be evaluated for statistical purposes and for the optimisation of our websites. A transfer to third parties and a user-related evaluation does not take place. Furthermore, for a short period of a few days, we store the connection data to our websites (IP addresses) for ensuring IT security.
To facilitate navigation, so-called session cookies are used when calling individual pages. These cookies expire at the end of the session and do not contain any personal data, what means that the contents of the cookies are not evaluated user-related. You can set your browser so that you only allow cookies on a case-by-case basis or not at all.
Cookies, which are required to carry out the electronic communication process or to provide certain functions, are saved on the basis of Article 6 section 1 lit. f of the GDPR. In this case, the storage of cookies is carried out for the purpose of technically error-free and optimised provision of our services. The deactivation of cookies may limit the functionality of this website.
13. How safe is my data?
To protect the personal data of our customers and interested parties, we use a secure online transmission method, the so-called "Secure Socket Layer" (SSL) transmission. With this secure method, all transmitted data is encrypted before being sent. Your personal data will only be processed on data centres and computers protected by security technologies and appropriate industry standards (e.g. firewalls, password protection, access control, etc.).
14. Which plugins and tools are in use on the website?
a) Social Plugins
Our websites may contain so-called social plugins ("plugins") of the social networks facebook.com, twitter.com, xing.com, linkedin.com, pinterest.com, addthis.com, reddit.com and plus.google.com.
In order to increase the protection of your data when visiting a website on our website, the plugins are integrated into the site via a so-called "2-click" or "Shariff" solution. This integration ensures that when you visit a website that contains such plugins, you will not be able to connect to Facebook, Twitter, Xing, LinkedIn, Pinterest, AddThis, Reddit and Google+. Only when you activate the plugins and thus give your consent to the data transfer, your browser provides a direct connection to the servers of Facebook, Twitter, Xing, LinkedIn, Pinterest, AddThis, Reddit and Google+. The content of the respective plugin is directly transmitted to your browser and integrated into the page. The plugin then transmits data (including your IP address) to the operators of said social networks. We have no influence on the amount of data that the social networks use with the help of plugins. As far as we know, Facebook, Twitter, Xing, LinkedIn, Pinterest, AddThis, Reddit and Google+ receive information about which of our web pages you have accessed and are currently using. By calling up the plugins, Facebook, Twitter, Xing, LinkedIn, Pinterest, AddThis, Reddit and Google+ will also receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile on the corresponding social networks or you are not logged in. This information (including your IP address) will be transmitted from your browser directly to a server of the operators of Facebook, Twitter, Xing, LinkedIn, Pinterest, AddThis, Reddit and Google+ in the US and is stored there. At Xing, data storage takes place in Germany. The information may be posted on the respective social network and displayed there to your contacts.
If you are a member of one of the social networks, and you want to limit the collection of data through our websites, and the aggregation of your user data with the data stored about you on the respective social network, you should log out before you visit our website.
b) Google Analytics
We only use Google Analytics with activated IP anonymisation. This means that the IP address of the users will be shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by the user's browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly. In addition, the transfer of the data generated by the cookie and related to the use of the online offer to Google and the processing of this data by Google can be prevented by downloading and installing the browser plug-in available under the following link:
Our website uses plugins from the Google-powered YouTube page. Operator of the pages is the
d) The use of Google AdWords Conversion Tracking
e) Use of script libraries (Google Webfonts)
In order to render our content correctly and graphically appealing across browsers, we use script libraries and font libraries on this website, such as Google Webfonts (https://www.google.com/webfonts/). Google Webfonts are transferred to the cache of your browser to prevent multiple loading. If the browser does not support Google Webfonts or prohibits access, content will be displayed in a standard font.
The call of script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - but currently also unclear whether and if so for what purposes - that operators of such libraries collect data.
f) The use of Adobe Typekit
g) The use of Google Maps
This website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data about the use of map features by visitors. For more information about Google's data processing, please refer to the Google Privacy Notice. There you can also change your personal privacy settings in the privacy centre. For detailed instructions on how to manage your own data related to Google products, click here.
15. Links to websites of other providers