DATA PROTECTION AND DATA PRIVACY POLICY

We thank you for your visit to our website https://bellicon.academy.com and your interest in our company and our offers. Despite careful control of the contents, we do not assume any liability for external links to third-party contents, as we have not initiated the transfer of this information, did not select the addressee of the transmitted information and the transmitted information ourselves or have amended any such information ourselves.

The protection of your personal data in connection with the collection, processing of use on the occasion of your visit to our Internet pages is an important concern for us. The collection, processing and use of your personal data takes place within the scope of the statutory provisions on which you may for instance obtain information on the website www.bfd.bund.de.

In the following, we explain which information we record on the occasion of your visit to our websites and how this information is used.

1.   Collection and Storage of Personal Data as well as Nature and Purpose of their Use

a) When visiting the Website

Whenever a customer (or any other visitor) visits our website, the Internet browser used on your device (computer, laptop, tablet, smartphone, etc.) automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.

The following data is in this connection collected and stored, without any action on your part, until the time of automatic deletion:

• IP-address of the accessing computer as well as device-ID or individual device identifier and type of device,
• the name of the retrieved file and the transmitted data volume, as well as date and time of the retrieval,
• report on successful retrieval,
• accessing domain,
• description of the type of Internet browser used and of the operating system of your device as well as the name of your access provider, as the case may be,
• your browser history data as well as your default web log information,

Our justified interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR is based on the following purposes:

• ensuring the smooth establishment of a connection and comfortable use of the website,
• analysis of system security and system stability, and
• other administrative purposes.

In no event will we use the collected data for the purpose of drawing any conclusions as to your person.

b) When using our Contact Form

Should you have questions of any kind, we offer you the possibility to contact us via a Contact Form provided on our website. In this connection, the specification of your name and of a valid email address is at least required, so that we know, who sent the enquiry and are able to answer it. Further information may be provided on a voluntary basis.

The data processing for the purpose of establishing contact with us takes place in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily granted consent.

The personal data collected by us for the use of the Contact Form will be automatically erased after the inquiry you have sent us has been answered.

c) When concluding a contractual Relationship

Upon the conclusion of a contractual relationship on our website, we ask you to provide the following personal data:

• data that personally identifies you, such as name and email address, address for invoice and delivery, and telephone number,
• VAT ID or Tax number
• information on your means of payment,
• additional personal data to whose collection we are legally obliged or entitled and which we require for your authentication, identification or for verifying the data collected by us.

The above-mentioned data are processed for the handling of the contractual relationship and, if required, forwarded onto the shipping agent hired for delivery. The processing of the data is performed on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR. The storage period is restricted to the contractual purpose and, if applicable, legal and contractual retention regulations.

The personal data collected by us for the order will be blocked from further use after the contract has been fully processed. Data will be stored until the expiry of the legal warranty obligation and then deleted, unless we are obliged to store it for a longer period in accordance with Art. 6 Para. 1 Sentence 1 lit. c GDPR due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR.

d) Use of Payment service providers

We also work with the following payment service providers to process your order. We pass on your order data to the payment service provider selected by you within the scope of the payment processing - for the purpose of the payment – as far as this is necessary for payment processing. You can select the following payment service providers for payment. The legal basis for the transfer of data is in each case Art. 6 Para. 1 S. 1 lit. B GDPR.

PayPal:

If you select payment via "PayPal", you will be forwarded directly via an interface to the payment service provider PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg "PayPal") after confirmation of the conclusion of the contract, where you can enter your payment data and select your desired payment method with PayPal and then process the payment. We would like to point out that PayPal's data protection regulations apply here. For information on the processing of your personal data by PayPal and your rights, please refer to the PayPal data protection principles (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

As a precaution, we would like to point out that PayPal reserves the right to carry out a creditworthiness check if PayPal is to make advance payment due to the justified interest in accordance with Art. 6 Para. 1 sentence 1 lit. b GDPR in determining your solvency. For this purpose, PayPal may pass on your payment data to credit agencies. The result of the credit check with regard to the statistical probability of non-payment can contain probability values (so-called score values), which are calculated on the basis of scientifically recognised mathematical-statistical procedures and include address data, among other things, in their calculation. According to PayPal, their interests worthy of protection are taken into account in accordance with the statutory provisions. For more information, in particular on your rights, please refer to PayPal's applicable data protection principles (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

Stripe:

By selecting the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will forward your information provided during the ordering process together with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number). Your data will only be passed on for the purpose of processing payment with Stripe and only for this purpose. You can find more information about Stripe's data protection at https://stripe.com/de/privacy#translation.

e) When registering for our Newsletter

If you expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address for sending you our newsletter on a regular basis.

To send the newsletter, we work together with the provider "MailChimp" (Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). MailChimp is a service with which, among other things, the sending of newsletters can be organised and analysed. For more information, in particular on the handling of your data by MailChimp, please refer to the information in section 9 of our data protection declaration.

Deregistration is possible at any time, for instance via a link at the end of a newsletter. Alternatively, you can send us your deregistration request also via email to info@bellicon.business (it is best to use the reference: "Unsubscribe Newsletter").

2.   Disclosure of personal Data

No transmission of your data to third parties for purposes other than those listed below takes place.

We disclose your data to third parties only, if:

• you gave your express consent to such disclosure (Art. 6 para. 1 sentence 1 lit. a GDPR),
• this is required for the performance of contracts to which you are a party (Art. 6 para. 1 sentence 1 lit. b GDPR),
• there is a legal obligation to disclose the data (Art. 6 para.1 sentence 1 lit. c GDPR),
• the disclosure is required for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 para. 1 sentence 1 lit. f GDPR).

In these cases, the volume of the disclosed data is however restricted to the necessary minimum.

Our data protection and data privacy provisions are in compliance with the applicable provisions of data protection legislation and the data are processed only in the Federal Republic of Germany.

3.   Rights of Data Subjects

Upon your request, we will be pleased to inform you whether and which personal data are stored with regard to your person (Art. 15 GDPR), in particular on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge complaints, the origin of your data, if these were not collected by us, and on the existence of automated individual decision-making, including profiling.

You also have the right to rectify any incorrectly collected personal data or to have incompletely collected data completed (Art. 16 GDPR).

Moreover, you have the right to demand the restriction of processing of your data by us, if the legal prerequisites are fulfilled (Art. 18 GDPR).

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to demand transmission of the data to another controller (Art. 20 GDPR).

Moreover, you have the so-called "Right to be forgotten", i.e. you are entitled to demand that we erase your personal data as soon as the legal prerequisites for such erasure are fulfilled (Art. 17 GDPR).

Irrespective of the above, your personal data will automatically be erased by us, when the purpose of the data collection no longer exists or the data processing has been unlawful.

In accordance with Art. 7 para. 3 GDPR you have the right to revoke your consent given to us at any time. As a consequence, we will not be permitted to continue the processing of data that was performed on this basis in the future.

You in addition have the right to object at any time against the processing of your personal data, if a right to object is provided for by law. In the event of a legally valid objection, your personal data will also be automatically erased by us (Art. 21 GDPR). 

If you wish to avail yourself of your right of revocation or objection, just send an email to info@bellicon.business

In the event of any violations of the provisions of data protection legislation, you are able, in accordance with Art. 77 GDPR, to lodge a complaint with the competent supervisory authority. The competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information (https://www.datenschutz-berlin.de/) as well as any other supervisory authority.

4.   Duration of Data Storage

The collected data are stored by us as long as this is required for the performance of the contracts concluded with us or as long as you have not exercised your right to erasure or to transfer of data to another company.

5.   Cookies

We use cookies on our website. These are small text files that are automatically generated by your browser and stored on your device when you visit our website. The cookie is used to store information that is related to the specific device you are using. However, this does not mean that we will obtain immediate knowledge of your identity.

These cookies are set as so-called First Party Cookies ("own cookies") or Third Party Cookies ("third party cookies"). First party cookies are set by the website you are currently on and are not made accessible by browsers across domains. A Third Party cookie, on the other hand, is set by a third party, not by the actual website you are currently on.

In addition, cookies are divided into technically necessary and technically not necessary cookies. Both technically necessary cookies and technically unnecessary cookies are set on our website in accordance with the following paragraphs.

a) Technically necessary cookies

Technically necessary cookies are absolutely necessary for the operation of our website and lead, for example, to the fact that certain functions are made possible for the first time. These technically necessary cookies, which are only required and set for the individual online session, are automatically deleted after leaving our website.

The legal basis for the use of these technically necessary cookies is Art. 6 Para. 1 sentence 1 lit. f) GDPR.

b) Technically not necessary cookies

If you have given your consent, we will use so-called technically not necessary cookies on our website. The technically not necessary cookies are mainly used to evaluate the use of the website as well as user behaviour, to compile reports on the activities of visitors to the website and to provide further services associated with the use of the website.

The technically not necessary cookies used by us are explained in our cookie banner with regard to the functionality, duration and possible third party recipients of the data. If certain third party providers used by us set cookies within the scope of the service provided for us, this will also be pointed out separately in our Data Privacy Policy.

The legal basis for the use of technically not necessary cookies is Art. 6 Para. 1 sentence 1 lit. a GDPR, provided that you have given your consent.

You can revoke your consent at any time. You can also configure the setting of cookies at any time. For example, you can set your browser so that it informs you beforehand when cookies are set or completely refuses cookies.

Java applets and Java script are used in the provision of our Internet offers. If you do not wish to use these utilities or active content for security reasons, you should deactivate the corresponding setting in your browser.

6.   Pretix

We use Pretix for online appointment booking. Pretix is a service provided by rami.io GmbH, Berthold-Mogel-Straße 1, 69126 Heidelberg.

Pretix provides an internet-based service that allows you to make appointments online and allows us to manage these appointments. The data you enter will be processed by Pretix exclusively for booking appointments and for no other purpose. Pretix states that it uses technically necessary cookies to ensure the functionality of the appointment booking. Pretix does not store IP addresses, browser data, referrers or other unnecessary metadata. Further information on data protection at Pretix can be found at: https://pretix.eu/about/en/privacy.

We have concluded an order processing agreement with Pretix, through which Pretix has undertaken to process the data in accordance with the applicable data protection laws.

7.   Google Meet

We use Google Meet (hereinafter "Google Meet") to conduct video and audio conferences, webinars and other types of video and audio meetings. Google Meet is a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google").

When using Google Meet, data of the participants will be processed and stored on Google's servers, as long as these are part of any communication processes with us. This data may include, in particular, registration and contact data, visual and vocal contributions as well as entries in chats and shared screen contents. Where Google Meet is referenced in communications, business or other relationships with us, Google Meet may process usage data and metadata for security, service optimisation or marketing purposes.

The personal data is transferred to Google in accordance with a standard contractual clause concluded with Google, with which Google has undertaken to guarantee a level of data protection equivalent to that within the EU in the event that the data is transferred to third countries.

In addition, we have concluded an order processing contract with Google. Through this contract, Google assures that it processes the data in accordance with the General Data Protection Regulation and ensures the protection of the rights of the data subject.

The corresponding data processing is carried out on the basis of Art. 6 (1) sentence 1 lit. b GDPR and may be necessary for the performance of the contract with you or for pre-contractual measures. In addition, data processing is carried out on the basis of our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate economic interest lies in improving customer care in order to provide our services.

You can find more information about Google and data protection at Google here: https://policies.google.com/privacy?hl=de.

8.   Google Analytics

If you have given your consent, Google Analytics, a web analysis service of Google is used on this website. The use includes the operating mode "Universal Analytics"; this makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyse the activities of a user across all devices.

Google uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. We would like to point out that on this website Google Analytics has been extended to include IP anonymisation in order to guarantee anonymous collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You can find more information on the terms of use and data protection at (https://marketingplatform.google.com/about/analytics/terms/gb/ or https://policies.google.com/?hl=en).

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to website operators relating to website activity and internet usage.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 Para. 1 sentence1 lit. a GDPR.

The data sent by us and linked to cookies, user identifiers (e.g. User-ID) or advertising-IDs are automatically erased after 14 months. The erasure of data whose retention period has expired takes place automatically once a month.

You can revoke your consent at any time with effect for the future by preventing the storage of cookies through an appropriate setting in your browser software; however, we would like to point out that in this case you may not be able to fully use all the functions of this website.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting your data across multiple devices, you must opt-out of all systems you use. If you click here (https://tools.google.com/dlpage/gaoptout?hl=en), the opt-out cookie will be set to disable Google Analytics.

9.   MailChimp

For the dispatch of newsletters, we utilise the services of MailChimp, an offer of Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service which inter alia enables the organisation and dispatch of newsletters. When you input data for the purpose of receiving newsletters (e.g. your email address), these are stored on the servers of MailChimp in the USA. MailChimp has received a certification in accordance with the "EU-US Privacy Shield". The "Privacy Shield" is an agreement concluded between the European Union (EU) and the USA that shall guarantee compliance with European data protection and data privacy standards in the USA.

The personal data is transferred to MailChimp in accordance with a standard contractual clause concluded with MailChimp, with which MailChimp has undertaken to ensure a level of data protection equivalent to that within the EU in the event that the data is transferred to third countries.

With the help of MailChimp, we are able to analyse our newsletter campaigns. When you open an email that has been sent by MailChimp, a file contained in the email (so-called web-beacon) establishes a connection to the servers of MailChimp in the USA. Thus, it is possible to determine whether a newsletter message was opened and which links, if any, were clicked. Moreover, technical information is recorded (e.g. time of retrieval, IP-address, browser type and operating system). We are not able to attribute this information to the respective recipients of the newsletters. They exclusively serve the purpose of statistical analysis of newsletter campaigns. We can use the results of these analyses to better adapt future newsletters to the interests of the recipients.

If you do not wish any analysis by MailChimp, you need to unsubscribe from the newsletter. For this purpose, we provide a relevant link in each newsletter message.

The data processing is performed on the basis of your consent (Art. 6 para. 1 lit. a GDPR), which you can revoke at any time. The lawfulness of the data processing procedures that have already taken place remains unaffected by such revocation.

The data stored from you with us for the purpose of receiving newsletters remains stored by us until your deregistration from the newsletter and will be deleted from both our servers and from the servers of MailChimp after you unsubscribe from the newsletter. Data, which has been stored by us for other purposes (e.g. email addresses for the member section), remain unaffected thereby. For more details, you may wish to consult the data privacy provisions of MailChimp at https://mailchimp.com/legal/terms/.

We have concluded a so-called "Data Processing Agreement" with MailChimp, in which we obligate MailChimp to protect the data of our customers and not to disclose them to any third parties.

10.   Use of YouTube

Our website includes videos about YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The videos are stored on www.youtube.com and can be played directly from our website. Our website enables you to connect to YouTube. Normally, when you visit a website with embedded videos, your IP address is sent to YouTube and cookies are installed on your computer. However, we have integrated the YouTube videos with the "extended data protection mode" on our website. YouTube provides this extended data protection mode itself and ensures that no cookies are initially stored on your device. When you visit the relevant website, however, a connection to the "DoubleClick" network of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, is established and your IP address is transmitted in "extended data protection mode". In particular, this indicates that you have visited our website. However, this data cannot be specifically assigned to you unless you have registered or are registered with YouTube or another Google service prior to visiting the website.

As soon as you start the playback of an embedded video by clicking on it, YouTube only stores cookies on your end devices that do not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by appropriate browser settings and extensions.

We have neither knowledge nor influence on the possible collection and use of your data by YouTube. For more information, please refer to YouTube's privacy policy at https://policies.google.com/privacy?hl=en&gl=uk.

11.   Links to our Internet Presence in Social Networks

We have integrated links to our Internet presences in the social networks (Facebook, Twitter, Instagram, Pinterest) on our website. We would like to point out that these are only links that lead to our website in the mentioned networks, they are not so-called plugins with which you could, for example, "share" or "link" information on our website in the networks. As far as we know, it is technically not possible for social networks to collect personal data on our website via mere links. Please refer to the data protection information of the respective network for the purpose and scope of data collection after forwarding.

We would like to point out that data of our website visitors can also be processed outside the European Union. This can result in risks for the users, as it could, for example, make it more difficult to enforce the rights of the users.

It is also possible that user data may be processed by third parties for market research and advertising purposes. For example, user profiles can be created on the basis of user behaviour and the resulting interests of users. The user profiles can also be used, for example, to place advertisements within and outside social networks that are presumed to correspond to the interests of the user. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behaviour and interests are stored. Furthermore, data may be stored in the user profiles independently of the devices used by the users (in particular if the users are members of the respective social network and are logged in to this network).

The processing of users' personal data is based on our legitimate interests in providing users with effective information and communicating with users pursuant to Art. 6 para. 1 p. 1 lit. f. GDPR. If users are asked by the respective providers for consent to data processing (i.e. declare their consent e.g. by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 p. 1 lit. a GDPR.

For a detailed representation of the respective processing and the possibilities of objection (Opt-Out), we refer to the following linked information of the respective providers. Also in the case of requests for information or the assertion of your rights as a data subject, we point out that these can be asserted most effectively with the social networks. Only these have access to the data of their users and can directly take appropriate measures and provide information. Should you nevertheless need help, you can contact us.

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) - Privacy policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
• Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - Privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated
• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) - Privacy policy/ Opt-Out: http://instagram.com/about/legal/privacy/.

12.   Data Security and Data Privacy

We endeavour to take any and all necessary technical and organisational security measures to store your personal data in such a way that they are not accessible by third parties or the general public. Should you wish to contact us by email, we would like to draw your attention to the fact that, when using this means of communication, the confidentiality of the transmitted information cannot be ensured in full. We therefore recommend that you send us confidential information exclusively by post.

13.   Name and contact details of the data controller

bellicon Europe GmbH
Poststraße 4-5
10178 Berlin

Germany

info@bellicon.business

 

 

 

Status: March 2022