Data protection "user feedback"

1. Information about the processing of your personal data when using the "Jotform" feedback service

The following data protection information provides an overview of the collection and processing of your data and how you can exercise your rights under the General Data Protection Regulation.

The EU General Data Protection Regulation (GDPR), which came into force on May 25, 2018, obliges us to provide you with comprehensive information about the processing of your personal data. Among other things, we inform you in detail about your rights as a "data subject" whose personal data we process.


2. Name and contact details of the person responsible

Responsible for data collection is: ACEP eTraining GmbH, Espellohweg 44, 22607 Hamburg, E-Mail: office.etraining@acepgroup.de, Tel.: +49 (0) 40 2263 3548 0.


3. What personal data is used?

We process your personal data insofar as this is necessary for the transmission of messages. This includes the following data categories:

  • Personal details (title, surname, first name)

  • email address


4. Where does the data come from?

We process your personal data that we voluntarily receive from you as a user of our products and services as part of your feedback.


5. Why and on what basis do we process your data?

We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as all other relevant laws.

As a service provider, Jotform enables us to evaluate user feedback in a structured manner and, based on this, to continuously improve our products and services.

Data processing based on your consent (Art. 6 Abs. 1 lit. a GDPR)

We collect, process and transmit your data for user feedback only with your voluntarily given consent. This consent is the legal basis for the processing of this data.


6. Where is your data transmitted to?

There are no plans to transfer your personal data to a third country / international organization.

It is planned to transfer your personal data to Jotform Ltd, a company whose parent company is based in the USA. Jotform receives and stores your above data on servers within the EU in order to structure your user feedback and to inform us about it by email. Use of your data for other purposes is not permitted. It cannot be ruled out that the parent company may have access to your data.

There is no adequacy decision by the EU Commission for the level of data protection in the USA.

For the intended data transfers to third countries, ACEP eTraining GmbH has additional suitable or appropriate guarantees in the form of contracts with SDCs (standard data protection clauses) in accordance with Art. 26 GDPR. Jotform does not guarantee that data will be passed on to the authorities without exhausting the legal process. More information is available here:

https://www.jotform.com/de/gdpr-compliance/


7. How long is your data stored?

We store your personal data until you revoke your consent, e.g. by email to office.etraining@acepgroup.de.


8. What rights do you have in connection with the processing of your data?

Every data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to deletion under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object from Art. 21 GDPR and the right to data portability from Art. 20 GDPR. The restrictions under ยงยง 34 and 35 BDSG apply to the right to information and the right to erasure.

8.1 Right to object

According to Art. 21 Para. 1 GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of personal data concerning you, which is based on Art. 6 Para. 1 lit. e GDPR (data processing in the public interest ) or based on Article 6 Para. 1 lit. f GDPR (data processing to protect a legitimate interest) to file an objection. This also applies to profiling based on this provision.

In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

8.2 Withdrawal of consent

You can revoke your consent to the processing of personal data at any time. Please note that the revocation only applies to the future.

8.3 Right of providing information

You can request information as to whether we have stored personal data about you. If you wish, we will tell you what data is involved, for what purposes the data is processed, to whom this data is disclosed, how long the data is stored and what other rights you have in relation to this data.

8.4 Additional rights

In addition, you have the right to have incorrect data corrected or your data deleted. If there is no reason for further storage, we will delete your data, otherwise restrict processing. You can also request that we provide any personal data that you have provided to us in a structured, commonly used and machine-readable format, either to you or to a person or company of your choice.

In addition, there is a right of appeal to the competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

8.5 Exercising your rights

To exercise your rights, you can contact the person responsible or the data protection officer using the contact details provided. We will process your inquiries immediately and in accordance with the legal requirements and inform you of the measures we have taken.


9. Change of this Informationen

Should the purpose or manner of processing your personal data change significantly, we will update this information in good time and find out about the changes in good time.