This general privacy policy applies to all data processing performed by Forschungsinstitut Betriebliche Bildung (f-bb) gGmbH. Please also note the information provided in specific privacy policy statements that may be included in requests for personal information, for example, other f-bb websites, forms, or other situations. This privacy policy will be updated to reflect changes to how we process data, changes in the law, or further development of safeguards. You can also receive this information in written form.

Since the protection of personal data is very important to us, we naturally conduct our activities in accordance with the applicable legislation for the protection of data security and personal data. We therefore inform you below about the kinds of information we collect, what we do with it, and to whom we may provide it.

Scope
This privacy policy applies to all websites fro which f-bb gGmbH is responsible. Our websites may, however, contain links to third-party sites to which our privacy policy does not apply. f-bb ensures the confidentiality of your personal information: All employees are required to keep your information confidential in accordance with the relevant data protection laws and our security measures are updated in line with the latest state of technology. In addition, we have appointed a data protection officer to ensure compliance with this privacy policy.

Responsible for data protection
Forschungsinstitut Betriebliche Bildung (f-bb) gGmbH

Contact
f-bb gGmbH, Rollnerstraße 14, 90408 Nuremberg, Germany
Telephone +49 (0) 911-277-79-0
Fax +49 (0) 911-277-79-50
Email info@f-bb.de

Contact details for the data protection officer
Data Protection Officer of f-bb gGmbH
c/o bfz gGmbH, Garden-City-Straße 4, 96450 Coburg, Germany
Telephone +49 (0) 89-44108-347
Email datenschutz@f-bb.de

Purposes, legal basis
Our processing activities are based on permissible purposes and legal bases. These will be communicated to you whenever we collect data for processing.* If processing is based on the legitimate interests of the data controller or of a third party, we will also indicate these interests at that time.* You may assert your right to object to the processing of your data at any time.

Data source, third-party collection
If data has not been collected from you, we are required to inform you about the types of data collected and their source.*

Recipients
When we transfer personal data to third parties, we will provide the names or categories of potential recipients for each project.* It is possible that service providers will be used that are not considered third parties for these purposes. Only designated persons working for the data controller and the processor will have access to the data.

Foreign recipients
As a rule, we do not transmit data to third countries or international organisations. Should this nevertheless be the case, we will inform you about the nature of such processing and any decisions of the EU Commission concerning the adequacy of the recipients' level of data protection or we may refer to guarantees we may have obtained in this regard and provide copies of the same if available.*

Retention period
We store and process personal data only as long as necessary to achieve the specified purpose. We will indicate how long the data will be retained or the criteria for subsequently determining the duration of this storage in each project.* If data is subject to a legal or contractual documentation requirements, its further use is limited to these purposes and it will be deleted after expiry of the retention period.

Revocability
If processing is based on your voluntary consent, you have the right to revoke this consent at any time. The revocation is only effective for future processing. When you give your consent, you will be informed about this right to revoke your consent and of any consequences if you refuse or revoke your consent.*

Duty to cooperate
If you have a duty to cooperate by providing your personal information, we will inform you of your legal or contractual obligations or of the requirements to conclude a contract with us and of any consequences if you refuse to provide your information.*

Decision making
When processing includes automated decision-making including profiling, you will be provided with meaningful information about the logic involved, and the implications and possible consequences of such processing.*

Change of purpose
We must notify you before we use data for a purpose other than that for which it was originally collected. In addition, we may required to process personal data to meet our duty to provide information or to assist with the prosecution of criminal offences or to counter threats to public security. It may also be required to assert, exercise, or defend against civil claims. We will first check whether your interest in protecting your data would preclude such further processing.

Your rights as a data subject
You have the right to information about the data stored about you; to correct incorrect data; to request the deletion of data unlawfully stored or no longer required to fulfil legal obligations; to restrict processing for specific purposes; to object to certain processing operations; and, under certain conditions, to request that your data be transferred elsewhere. In automated decisions, you can demand that the decision not be made entirely automatically, you can represent your own point of view, and you can challenge the outcome of the automated decision. Please note that we can only grant rights to data subjects who have credibly demonstrated their identities. You have the right to appeal to a supervisory authority. We recommend that you address your concerns first to your existing contact persons or to our offices or to our company data protection officer.

If you have any privacy concerns about this data processing or need assistance in exercising your rights as a data subject, please contact our data protection officer using the information above.

* Information provided through special privacy policy or during processing.

Educational research and events

Purposes, legal bases: We process your personal data for the preparation and implementation of research projects, including participation in networks, events, and projects. The respective purposes may be specified in more detail in forms, contracts, consents, and information provided. The legal basis of the processing may include: the fulfilment of a contract with you (e.g. registration); your consent to use certain data for research (e.g. health data, images, interviews); our legitimate interest or the interest of our clients to perform research. When commissioned by your organisation, your employer, your service provider (sponsor), or similar entities, we process your data to fulfil their legitimate interests. We may also be legally obliged to process or transmit certain data, for example to fulfil an order or to comply with regulations (e.g. arising from government grants or labour or social law). We are also subject to legal documentation and disclosure obligations.

Categories of data: For client and network partner contacts as well as members of the specialist public, this data may include personal details, professional contact data, areas of responsibility, and any contributions and activities relevant to the project/cooperation. For contributors to research projects, we process personal information, contact information, socio-biographical data, and any developments and results.

Storage duration: Depending on the requirements of the funded projects, we store evidence for 10 to 20 years, in individual cases up to 25 years; individual documents stored under the regulations of commercial and tax law may be stored up to ten years. Where possible, we anonymise or pseudonymise the data.

Categories of recipients: We will, if necessary, provide necessary data to external recipients, such as the client and the sponsor (proof of eligibility requirements and our services provided), to network partners and project partners (e.g. if jointly responsible for processing), and to service providers to fulfil the tasks assigned to them (e.g. names to freelancers, organisers, hotels). Due to our legitimate interests in joint administration of data, data may be processed by internal service providers of the group under the same conditions that would apply to the data controller. It is possible that service providers will be used that are not considered third parties for these purposes. Designated persons working for the data controller and the processor will only process the data in accord with our instructions. Transfers to countries outside the EU are not planned, except as indicated in specific projects (e.g. international research projects).

Revocation: You may revoke your consent at any time and without stating reasons, with future effect. Your personal data will then be deleted promptly. The consequences of such revocation will depend on the purpose for which it was originally collected. It may result in exclusion from an event or research project or from receiving any project-related information or invitations.  The respective consequences of a revocation may be specified in more detail in forms, contracts, consents, and information provided.

Browser/internet technology
In accordance with the principle of avoiding and minimising data collection data collection wherever possible, we only collect personal data on our website if it is necessary for your desired purpose and/or if you voluntarily provide it to us.

As a result,
•          When you obtain information from f-bb's own websites,
we do not collect any "personal information" other than the IP address of your computer, the date and time of access, the browser type, the operating system of your PC, the domain name of the website you came from, the number of times you have visited the site, the average length of stay, as well as the pages you have looked at. This information is only intended to determine the attractiveness of our website and to improve its performance and content.
•          When you sending us an email:
Personal data that you provide to us by email (your name, email address, and message) will only be used for correspondence with you or for the purpose for which you provided us with the data. No personal surfing profiles or the like are created or processed. Please keep in mind that this means of communication is not suitable for sending confidential messages due to the current lack of data encryption capabilities. 

Cookies
Cookies are small text files that are stored on your computer. They are used to shape your user experience during your visit to our website.
Cookies enable us, for instance, to customise a website in line with your interests, or to store your password so that you do not have to reenter it each time. Some cookies exist only for the duration of your visit to the website. These session cookies only contain technical information and no personal data. They are automatically deleted when you leave our website. If you do not wish us to re-identify your computer, please configure your Internet browser to erase all cookies from your computer's hard drive, block all cookies or to issue a warning before a cookie is stored.
Please do not allow cookies on PCs that are used by several people without user management (personal login with secret password) such as public computers, since they may result in the misuse of the data by other users.

Google Analytics
Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94034, USA ("Google"). Google Analytics stores cookies on your system for this purpose. We will truncate your IP address before sending it to Google. On our behalf, Google will use this information to evaluate your use of the website and to compile reports on website activity. We have agreed with Google that the IP address transmitted as part of Google Analytics will not be combined with other data from Google. You can prevent the storage of cookies and thus further analytics by following these steps: 1. By saving an opt-our cookie or 2. by installing an opt-out plug-in. In these cases, not all features of this website may be available.

1. Opt-out cookie: Disable Google Analytics via a cookie
2. Plug-in Download browser plug-in.

To learn more about privacy at Google, visit http://www.google.com/analytics/terms/en.html and https://www.google.com/intl/en/policies/.

Links to other providers
Our website contains links to other companies. We cannot guarantee that these providers comply with data security regulations. Please read their privacy policies with care.

Social media appearances

We maintain a presence on social media. Registered users of these platforms have the opportunity to communicate with us there and to connect with our websites. In doing so, we become aware of the information and messages stored in the users' profiles, which we may use for further communication with these visitors. We have integrated buttons on our website that you can use to visit our social media presences. Only when you press the button is a connection established with the respective service and data about the origin of our website is transmitted to the platform. Through the visit and interaction, personal data is also processed by the respective platform operators. For users who are logged in to the platform at this time, this information may be added to their personal user profile.

We manage our social media accounts with ‘Hootsuite’, a service provided by Hootsuite Inc, 5 East 8th Avenue Vancouver, BC, Canada V5T 1R6, Privacy Policy https://www.hootsuite.com/de/legal/privacy. We use the service to prepare and publish our posts and to clearly track events relating to our companies and offers on the various services. The service provider has undertaken to process personal data from our area of responsibility exclusively for our purposes and in accordance with our instructions as part of order processing. Data is processed within the framework of an adequacy decision by the EU Commission for a comparable level of data protection in Canada.

Xing

We use XING (www.xing.com) to present ourselves to the public as an employer and educational service provider and as a way for applicants, project partners and customers to contact us. XING is a service of XING AG, Dammtorstr. 29 - 32, 20345 Hamburg, Germany. Information on data protection at XING: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn

We use LinkedIn (www.linkedin.com) to present ourselves to the public as an employer and educational service provider and as a way for applicants, project partners and customers to contact us or receive updates. LinkedIn is provided for users in the European Union, the European Economic Area and Switzerland by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn Ireland is a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA and may transfer data to the USA and other countries on the basis of standard data protection clauses of the EU Commission. Information on data protection at LinkedIn: https://www.linkedin.com/legal/privacy-policy

X (Twitter)

We use the short message service X to publish messages, to network and to discuss with you. The service provider is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland. Twitter International Unlimited Company is a subsidiary of X Corp, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and may transfer data to the USA and other countries on the basis of standard data protection clauses of the EU Commission. Information on data protection at X: https://x.com/de/privacy

Updates to this privacy policy
If f-bb gGmbH changes its internet procedures or if internet and IT security technology continues to evolve, this privacy policy will be updated.