Information on data protection in accordance with Art. 13 GDPR
1.1 Description of the processing activity
These data protection notices are made in connection with processing based on our eLearning service (learning management system).
1.2 Name and contact details of the person responsible
Responsible for data collection is: ACEP eTraining GmbH, Raalandsweg 28, 22559 Hamburg, E-Mail: firstname.lastname@example.org, Tel.: +49 (0) 40 2263 3548 0.
1.3 Origin of personal data
ACEP eTraining GmbH processes personal data that it receives from you as part of its business relationship.
In addition, ACEP eTraining GmbH processes personal data that it has legitimately obtained and is allowed to process from publicly accessible sources (e.g. trade and association registers, press, media).
1.4 Purposes and legal basis of the processing
1.4.1 The following categories of data are processed:
Personal details (name, address, telephone number, e-mail, date of birth)
Order data (e.g. delivery order),
Data from the fulfillment of our contractual obligation
Advertising and sales data
Documentation data (data from advice and service calls)
Supplier data (e.g. external suppliers)
1.4.2 Purposes and legal basis of the processing
ACEP eTraining GmbH processes personal data (Art. 4 Paragraph 2 GDPR) on the basis of Art. 6 Paragraph 1 Sentence 1 Letter b GDPR. The processing serves the implementation of our contracts or pre-contractual measures with you and the execution of your order, as well as all activities necessary for the operation and administration of our learning management system. The respective details for the purpose of data processing can be found in the respective contract documents and terms and conditions.
If you have given ACEP eTraining GmbH your consent to the processing of your personal data for specific purposes (e.g. tracking on our website, contests, addressing & communication for advertising purposes, information on the product range), the legality of this processing is given on the basis of your consent (Art. 6 para. 1 sentence 1 letter a GDPR). Consent given can be withdrawn at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.
In addition to the actual fulfillment of the contract, ACEP eTraining GmbH processes personal data in accordance with Art. 6 Paragraph 1 Sentence 1 Letter f GDPR. This is permissible insofar as the processing is necessary to safeguard our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms that require the protection of personal data do not prevail. Such a legitimate interest exists with
a) Execution of payment processing via external service providers
b) Assertion of legal claims and defense in legal disputes
c) To advertise your own products within the permitted legal framework (e.g. advertising to existing customers or referral advertising that is not relevant under data protection law)
d) Ensuring IT security and IT operations of the company
e) In order to prevent and investigate criminal offenses, in particular we use data analyzes to identify indications that point to fraud or abuse.
In addition, ACEP eTraining GmbH processes personal data in accordance with Art. 6 Para. 1 Letter c GDPR, insofar as this is necessary for the fulfillment of legal obligations to which it is subject as a company. The purposes of the processing include, among others. z. B. Commercial and tax retention obligations according to § 257 Commercial Code (HGB) and § 147 Tax Code (AO).
1.4.3 Purposes and legal bases of processing (video conferences (VKS))
If you have given ACEP eTraining GmbH your consent to the processing of your personal data for participation in a separate seminar, web seminar or video conference, the legality of this processing is given on the basis of your consent (Art. 6 Para. 1 S. 1 Letter a GDPR). A given consent can be withdrawn at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.
ACEP eTraining GmbH processes personal data (Art. 4 Paragraph 2 GDPR) on the basis of Art. 6 Paragraph 1 Sentence 1 Letter b GDPR. The processing serves the implementation of our contracts or pre-contractual measures with you and the execution of your order, as well as all activities necessary for the operation and administration of our data protection advice. In this case, the implementation of the seminar, the video conference or the training is part of a contract concluded with you, which we thereby fulfill. The respective details for the purpose of data processing can be found in the respective contract documents and terms and conditions.
1.4.4 Processing of your data during video conferences
You can register for the web seminar, seminar or the video conference by emailing us by leaving your name and email. We verify your identity via a personal query by email.
You will then receive a personal invitation link from us by e-mail in your e-mail inbox. At the time of the event, you can take part in the event in the web application by clicking on the link. Your email address is also visible to other participants. The address is not used for any other purpose. As the organizer, you will only be invited to the waiting area if your booking has been confirmed.
The event takes place via the Teams service (Microsoft Deutschland GmbH, subsidiary of Microsoft Inc.). In this regard, we refer to the data protection declaration of our IT service provider.
1.5 Recipients or categories of recipients of the personal data
Within ACEP eTraining GmbH, those departments have access to your data that need it to fulfill the contractual and legal obligations of ACEP eTraining GmbH. Processors employed by ACEP eTraining GmbH (Art. 28 GDPR) can also receive data for these purposes.
Recipients in the following categories will receive your data:
IT services (e.g. hosting our email accounts)
Logistics (e.g. to ensure the storage and delivery of our products)
Collection (e.g. in the case of outsourcing receivables management for unpaid payments due)
Advice and consulting
Sales and marketing (e.g. when creating marketing campaigns in the case of recruiting existing customers)
Social media companies
Courts, bailiffs and authorities (e.g. when applying for a payment order (court) or when enforcing an enforceable title (bailiff))
Lawyers (e.g. to assert their own claims or to defend against third-party claims or lawsuits)
Tax advisor (in the case of tax advice or preparation of the annual financial statements)
1.6 Transfer of personal data to a third country
There are no plans to transfer your personal data to a third country / international organization.
It is planned to transfer your personal data to Microsoft, a company whose parent company is based in the USA. It cannot be ruled out that the mother may have access to your data.
There is no adequacy decision by the EU Commission for the level of data protection in the USA.
For the intended data transfers to third countries, ACEP eTraining GmbH has additional suitable or appropriate guarantees in the form of contracts with SDKs (standard data protection clauses) in accordance with Art. 26 GDPR. Microsoft does not guarantee that data will be passed on to the authorities without exhausting the legal process. More information is available here:
1.7 Duration of storage of personal data
We delete your personal data as soon as it is no longer required for the purposes mentioned above. It can happen that data is stored for the time in which legal claims are asserted against us (statutory period of limitation 3 years § 195 BGB, up to 30 years § 197 BGB).
We also save your data insofar as we are legally obliged to do so. Corresponding proof and retention obligations arise for us from:
of the tax code: 10 years for tax purposes (§ 147 AO) (e.g. customer data and accounting data for tax purposes)
the requirements according to § 257 HGB: 6 years for documentation in accordance with commercial law requirements (e.g. documents and e-mails or order and order documents in communication)
1.8 Rights of data subjects
According to the General Data Protection Regulation, you have the following rights:
If your personal data is processed, you have the right to receive information about the data stored about you (Art. 15 GDPR).
If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
If the legal requirements are met, you can request the deletion or restriction of processing and object to processing (Articles 17, 18 and 21 GDPR).
If you have consented to data processing or if there is a data processing contract and data processing is carried out using automated procedures, you may have the right to data portability (Art. 20 GDPR).
If you make use of your above-mentioned rights, the responsible body will check whether the legal requirements for this have been met.
If you are of the opinion that data processing violates applicable data protection law, you have the right to complain to a data protection supervisory authority. You can contact the supervisory authority responsible for our company under the following contact details:
The Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg
1.9 Obligation to provide the data
In order to conclude a contract, it is necessary that you provide ACEP eTraining GmbH with the following data:
E-mail address of contact person
Name of contact person
Phone number of contact person
VAT ID of the company
Without this data, ACEP eTraining GmbH will usually have to refuse to conclude the contract or it will no longer be able to carry out an existing contract and may have to terminate it.
1.10 Social media links
You will find links to the following social networks on our website:
You can use this link to go directly to the LinkedIN profile of ACEP eTraining GmbH. You can find information on the collection and handling of personal data at LinkedIN here.
Information about your right of objection according to Art. 21 GDPR
1. For reasons that arise from your particular situation, you have the right to object at any time to the processing of personal data relating to you, which is based on Art. 6 Paragraph 1 Sentence 1 Letter f GDPR (data processing based on a weighing of interests) to file an objection.
If you file an objection, ACEP eTraining GmbH will no longer process your personal data, unless ACEP eTraining GmbH can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defense of legal claims.
2. In individual cases, ACEP eTraining GmbH processes your personal data in order to operate direct mail. You have the right to object at any time to the processing of data concerning you for the purpose of such advertising. If you object to processing for direct marketing purposes, ACEP eTraining GmbH will no longer process your personal data for these purposes.
The objection can be made informally and should be addressed to:
ACEP eTraining GmbH, Espellohweg 44, 22607 Hamburg, email@example.com, +49 (0)40 2263 3548 0