Data protection regulations

Information on data protection and privacy

With this data protection notice we inform you (in the following text also referred to as „user“ or „data subject“) in a general way about the data processing in our company. The Gesellschaft für praxisbezogene Forschung und wissenschaftliche Lehre GmbH (hereinafter GFL GmbH) as the owner of the PFH Professional School of Management, Technology & Innovation (hereinafter PFH Professional School) collects, processes and uses your personal data in accordance with the provisions of the German Data Protection Act („DS-GVO“) and the German Federal Data Protection Act („BDSG“).


The entity responsible for data processing is GFL GmbH, Weender Landstraße 3-7, 37073 Göttingen. You can contact the data protection officer of GFL GmbH by e-mail at


2. General information on data processing

1.1  Categories of personally identifiable data

We process the following categories of personally identifiable information:

  • Master data (e.g. names, addresses, place and country of birth, date of birth, etc.)
  • Contact data (e.g. e-mail, telephone/fax number, etc.)
  • Content data (e.g. text entries, image files, videos, etc.)
  • Meta/communication data (e.g. IP addresses)
  • Social security data (e.g. health insurance company)
  • Data relevant to your studies or courses (e.g. certificates, curriculum vitae, courses, examinations, work experience)
  • Bank account details (e.g. IBAN)


1.2  Recipients or categories of recipients of personally identifiable information

If, in the course of our processing, we disclose data to other persons and companies such as web hosts, contract processors or other third parties, transfer it to them or otherwise grant them access to the data, this is done on a legal basis (e.g. if transfer of the data to third parties is necessary for the performance of the contract in accordance with Art. 6 Para. 1 letter b DS-GVO) if the persons concerned have consented or a legal obligation provides for this.


1.3  Purpose of processing

Your personally identifiable information will be processed exclusively for the purposes of application processing, contract execution, invoicing, utilization of services, compliance with legal regulations, as well as for consulting, support, and statistical purposes.


1.4  Duration of storage of personally identifiable information

The criterion for the duration of the storage of personally identifiable information is the respective legal retention period. After this period has expired, the corresponding data will be deleted if they are no longer required for the fulfillment of the purpose, the performance of the contract or contract initiation.


1.5  Rights of data subjects

You have the following rights:

  • In accordance with Art. 7 para. 3 DS-GVO, you may revoke your consent to us at any time.
  • In accordance with Art. 15 DS-GVO, to request information about your personally identifiable information processed by us. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the origin of the data, if it has not been collected by us, as well as the possible existence of an automated decision-making process including profiling and, if applicable, meaningful information about the particulars thereof.
  • In accordance with Art. 16 DS-GVO, to immediately request the correction of incorrect or incomplete personal data stored by us.
  • In accordance with Art. 17 DS-GVO, to demand the deletion of your personal data stored with us unless processing is necessary e.g. to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
  • Pursuant to Art. 18 DS-GVO, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer require the data, but you require it for the assertion, exercise or defense of legal claims or in the event that you have lodged an objection to the processing in accordance with Art. 21 DS-GVO.
  • In accordance with Art. 20 DS-GVO, if the conditions set out therein are met, to receive your personal data that you have provided us in a structured, common, and machine-readable format or to request that it be transferred to another designated party.
  • To complain to a supervisory authority in accordance with Art. 77 DS-GVO. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the location of the registered office of our company.


1.6  Right of objection

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 S. 1 letter f of the DS-GVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DS-GVO, provided that there are reasons for doing so arising from your particular situation. If you wish to exercise your right of objection, simply send an e-mail to our data protection officer Ms. Peggy Repenning at


2.  Use of our digital programs

For the purpose of joint study success, you can/must use some programs/ tools during your further education. We use the following applications: Microsoft Office 365, OSTicket, Access, Internet platform, PostfixServer for e-mails and Blackboard Collaborate. We use Whatsapp for consulting of interested parties and course participants. Study events are recorded via Blackboard and made available on


3. Contact after course completion/newsletter

The individual course participant of the PFH Professional School is very important to us, which is why we would like to keep in touch with you as a graduate after completion of the course.


(1)  If you give us your consent (see below), we would like to contact you after completion of your course via your private e-mail address to provide the following information:


  • Developments at the PFH Professional School
  • New and/or further developed course programs
  • Information about our cooperation partners


Furthermore, we would like to contact you to conduct surveys for scientific studies with you.


(2) For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the address you entered, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.


(3)  Your e-mail address is the only mandatory information for sending the newsletter. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.

(4)  You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter e-mail or by sending an e-mail to


(5)  We have no influence on the scope and further use of the data collected by sending our newsletter to your private e-mail address and ask you to inform yourself about this on the respective privacy policy of your e-mail provider.


(6) Analysis of user behavior when the newsletter is sent. We use rapidmail GmbH to send our newsletter. rapidmail GmbH is a German, certified newsletter software provider (company headquarters: Augustinerplatz 2, 79098 Freiburg i.Br.), which was carefully selected according to the requirements of the DSGVO and the BDSG. Your data will be transmitted to rapidmail GmbH. In this context, rapidmail GmbH is prohibited from using your data for any purpose other than the sending of the newsletter. rapidmail GmbH is not permitted to pass on or sell your data.


The data you enter to subscribe to the newsletter are stored on the servers of rapidmail in Germany.


For analysis purposes, the e-mails sent with rapidmail contain a so-called „tracking pixel“ which connects to the servers of rapidmail when the e-mail is opened. Thus it can be determined whether a newsletter message was opened. rapidmail also determines whether and which links in the newsletter message are clicked. All links in the e-mail are so-called trak- king links that can be used to count your clicks. These surveys are not personalized. For more information on the analysis functions of rapidmail, please refer to the following link:


We have closed a contract with rapidmail for the processing of order data in which we commit rapidmail to protect the data of our customers and not to pass them on to third parties. This contract can be viewed under the following link: files/adv/muster-auftragsdatenverarbeitung.pdf.

With the selection of the further action I agree to the privacy policy.

Zuletzt angesehen / last viewed