Data protection

Information on data protection

As a public body, the German Accreditation Council is subject to the provisions of the EU General Data Protection Regulation (DS-GVO) and the NRW Data Protection Act. It is ensured that the regulations on data protection are also observed by external service providers involved.

Here we would like to inform you about our principles and procedures for the collection, storage and processing of personal data in connection with the provision and use of our information offer on the Internet and in connection with the subscription to our newsletter or contacting us by e-mail.

Name and address of the data controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

German Accreditation Council
Adenauerallee 73
53113 Bonn
Telephone +49 (0) 228-338306-0
E-mail: akr@akkreditierungsrat.de
Website: www.akkreditierungsrat.de

Data Protection Officer

The officially appointed data protection officer of the Accreditation Council, Mr Andreas Braun, can be reached by e-mail to braun@akkreditierungsrat.de or via the address:

German Accreditation Council
Data Protection Officer
Andreas BRaun
Adenauerallee 73
53113 Bonn
Telephone +49 (0) 228-338306-0
Fax +49 (0) 228-338306-79

Data processing on this website

Protocol or log files

The website of the Accreditation Council is hosted by tänzermedien GmbH Bonn.

Tänzermedien GmbH
Nikolausstr. 5
53129 Bonn
Telephone: 0228 – 304 134 – 0
Fax: 0228 – 304 134 99
E-mail: info@taenzer.de
Website: www.taenzer.de

When you use our information offer, personal data is collected there. This is necessary for technical reasons in order to guarantee all the functionalities of our website and the security of our offer.

Every time you access the contents of the website, data is temporarily stored in so-called protocol or log files, which may allow identification. The following data is collected each time the website is accessed:

  • Date and time of access
  • Name of the Internet service called up, the resource called up and the action used
  • query made by the client
  • amount of data transferred
  • message as to whether the retrieval was successful
  • IP address of the calling computer
  • client information (including browser, operating system)

This data is not merged with other data sources (e.g. contact details for newsletter orders).

This data from the protocol or log files is used to defend against and analyse attacks on the website and is stored for seven days and then permanently deleted. The legal basis for the temporary storage is thus Art. 6 para. 1 p. 1 lit. e DSGVO.

Use of cookies and web statistics

This website uses the open source web analysis service Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and enable us to analyse your use of our website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymised before storage.

Matomo cookies remain on your terminal device until you delete them. The storage of Matomo cookies and the use of this analysis tool are based on your consent (Art. 6 para. 1 lit.7. a DSGVO). The consent can be revoked at any time. The information generated by the cookies about the use of this website will not be passed on to third parties.

You can deactivate the storage and use of Matomo cookies below this paragraph. In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, this will have the effect that the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit this website again. As an alternative to deactivating the Matomo cookie, you can also generally prevent the storage of cookies by setting your browser software accordingly.

Apart from that, we only use session cookies. This allows us to recognise you and store your session information while you are using our website. Session cookies are small pieces of information that a provider stores in the RAM of the visitor’s computer. A randomly generated, unique identification number is stored in a session cookie, a so-called session ID. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. The session cookies used by the Accreditation Council are deleted as soon as you end the session. You can prevent the use of session cookies by setting your Internet browser so that it does not accept cookies. You can also define in your browser whether you want to be informed about the setting of cookies and only allow cookies in individual cases, whether you want to exclude the acceptance of cookies for certain cases or even generally. You can also activate the automatic deletion of cookies when you close the browser. How this works exactly depends on your browser. You have the option to prevent actions you take here from being analysed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users. Your visit to this website is currently collected by Matomo web analytics. Deselect this checkbox to opt-out.

Passing on data

Data that has been logged when accessing the Accreditation Council’s website will only be passed on to third parties outside the Accreditation Council,

  • if we are obliged to do so by law or by judicial or prosecutorial order, or
  • in the event of attacks on the Accreditation Council’s Internet infrastructure, the transmission is necessary for legal or criminal prosecution.

Links to other websites

This website contains links to other websites. The Accreditation Council has no influence on compliance with the data protection regulations of the operators.
We also have no influence on the content of these external websites. When setting up the links, we carefully check the contents. However, we cannot guarantee the correctness and completeness of external offers; external providers can change their contents at any time without the knowledge of the editors.

YouTube-Videos

We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer. The legal basis for the display of the videos is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The information collected is stored on Google servers, including in the USA. In these cases, the provider has stated that it has imposed a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring data internationally.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy: https://www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/

Newsletter dispatch

We use Newsletter2Go as a service provider for sending our newsletters. In the course of your registration you agree that your entered data (gender, first name, last name and e-mail address) will be transmitted to Newsletter2Go. Please note the data protection provisions and general terms and conditions of Newsletter2Go. The legal basis for the storage of the data is your consent (Art. 6 para. 1 p. 1 lit. a DSGVO). The registration system with an additional message containing a request for final registration (double-opt-in) ensures that the newsletter is explicitly desired by you. The confirmation of your registration is stored so that the Accreditation Council can prove it if necessary (cf. Art. 5 para. 2 DSGVO). We use your data exclusively for sending the newsletter.

You can unsubscribe at any time and thus revoke your consent to data processing. For the purpose of unsubscribing, you will find a corresponding link in each newsletter. Furthermore, it is also possible to unsubscribe directly on the website of the Accreditation Council or to unsubscribe from the newsletter by sending a message to akr@akkreditierungsrat.de. The Accreditation Council will then delete all stored data immediately.

Contacting us by e-mail

If you send us an e-mail, personal data is entered on an expressly voluntary basis (legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO).

The following can be stored here:

  • Salutation
  • Name
  • First name
  • Email address
  • Street
  • House number
  • Postcode
  • City
  • Telephone number
  • Subject
  • Your message
  • Date and time
  • User
  • IP address

When you contact us, the data you voluntarily provide must be stored so that we can respond to your request.
We will only use the personal data you enter for the purpose you have requested.

Data will only be passed on to third parties with the consent of the persons concerned; the Accreditation Council reserves the right in individual cases to forward requests addressed to it which (also) fall within the area of responsibility of other institutions. Forwarding a request to an institution in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) requires your express consent.

We delete the personal data that we receive by e-mail as soon as the storage is no longer necessary for the purpose pursued by you or in connection with administrative processes triggered by it and the retention obligations applicable for this.

The secrecy of telecommunications also protects the content of your e-mails from unauthorised access and processing. We can ensure compliance with this for the area of the Accreditation Council. However, we would like to point out that data transmission via the Internet can generally be recorded by other Internet operators and users. Personal data is therefore only transmitted in encrypted form if possible.

Protection of minors

Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people. We do not knowingly collect such data.

Automated decision making including profiling

We do not use fully automated decision-making (including profiling) in accordance with Art. 22 DSGVO to process the data you provide to us.

Rights of the data subject

Right to complain to the competent supervisory authority

In the event of violations of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the Federal State of North Rhine-Westphalia.

You have the following rights vis-à-vis us with regard to the personal data concerning you:
You have the right at any time to free information about the data stored regarding your person, its origin and recipient as well as the purpose of storage. You also have the right to correction, the right to deletion and the right to restriction of processing. You also have the right to object to the processing of your data. Information on the stored data can be obtained from the data protection officer of the Accreditation Council.

General

In the course of further development of the Internet offer, changes to this data protection declaration may also become necessary. We therefore recommend that you read the data protection declaration again from time to time.
General information on data protection can be found on the website of the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia: www.ldi.nrw.de.