Data protection "newsletter"
1. Information about the processing of your personal data when using the "Sendinblue" newsletter service
The following data protection information provides an overview of the collection and processing of your data and how you can exercise your rights under the General Data Protection Regulation.
The EU General Data Protection Regulation (GDPR), which came into force on May 25, 2018, obliges us to provide you with comprehensive information about the processing of your personal data. Among other things, we inform you in detail about your rights as a "data subject" whose personal data we process.
1.2 Name and contact details of the person responsible
Responsible for data collection is: ACEP eTraining GmbH, Raalandsweg 28, 22559 Hamburg, E-Mail: firstname.lastname@example.org, Tel.: +49 (0) 40 2263 3548 0.
3. What personal data is used?
We process your personal data insofar as this is necessary for the transmission of messages. This includes the following data categories:
Personal details (title, surname, first name)
4. Where does the data come from?
We process personal data that we receive voluntarily from our customers as part of their newsletter registration.
5. Why and on what basis do we process your data?
We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as all other relevant laws.
As a service provider, Sendinblue enables us to provide our customers with important news and information quickly and with little administrative effort.
Data protection based on your consent (Art. 6 Para. 1 lit. a GDPR)
We collect, process and transmit your data for user feedback only with your voluntarily given consent. This consent is the legal basis for the processing of this data..
We obtain consent in a so-called "double opt-in" procedure. This means that you register for our newsletter as a first step. You will then receive a confirmation e-mail in which you must also click on a link to confirm that you wish to receive our newsletter. This process is uncomplicated, but still offers our customers the opportunity to think about whether they actually want to subscribe. We can therefore safely assume that you have effectively given us your consent after the two-stage process.
6. Where is your data transmitted to?
For the use of the service it is necessary that our external service provider
Köpenicker Straße 126
Phone: +49 (0)30 / 311 995 10
is involved in the processing of your data. Sendinblue receives the data listed above from us in order to send our newsletter content. Use of your data for other purposes is not permitted.
7. Where is your data transmitted to?
Countries outside the European Union (and the European Economic Area (“EEA”) handle the protection of personal data differently than countries within the European Union. We therefore do not use any service providers located in third countries outside the European Union to process your data. The servers on which your data are located are hosted exclusively at locations within the Federal Republic of Germany.
8. How long is your data stored?
We store your personal data until you revoke your consent. You can do this at any time via the unsubscribe link in our newsletter emails.
9. What rights do you have in connection with the processing of your data?
Every data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to deletion under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object from Art. 21 GDPR and the right to data portability from Art. 20 GDPR. The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to erasure.
9.1 Right to object
According to Art. 21 Para. 1 GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of personal data concerning you, which is based on Art. 6 Para. 1 lit. e GDPR (data processing in the public interest ) or based on Article 6 Para. 1 lit. f GDPR (data processing to protect a legitimate interest) to file an objection. This also applies to profiling based on this provision.
In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
9.2 Withdrawal of consent
You can revoke your consent to the processing of personal data at any time. Please note that the revocation only applies to the future.
9.3 Right of providing information
You can request information as to whether we have stored personal data about you. If you wish, we will tell you what data is involved, for what purposes the data is processed, to whom this data is disclosed, how long the data is stored and what other rights you have in relation to this data.
9.4 Additional rights
In addition, you have the right to have incorrect data corrected or your data deleted. If there is no reason for further storage, we will delete your data, otherwise restrict processing. You can also request that we provide any personal data that you have provided to us in a structured, commonly used and machine-readable format, either to you or to a person or company of your choice.
In addition, there is a right of appeal to the competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG)..
9.5 Exercising your rights
To exercise your rights, you can contact the person responsible or the data protection officer using the contact details provided. We will process your inquiries immediately and in accordance with the legal requirements and inform you of the measures we have taken.
10. Change of this informationen
Should the purpose or manner of processing your personal data change significantly, we will update this information in good time and find out about the changes in good time.