Privacy Policy

With the following privacy information, we inform you about how we handle your personal data and about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The entity responsible for data processing is ImpactSkillsLab (hereinafter referred to as “we” or “us”).

General Information

Contact

If you have any questions or suggestions regarding this information or wish to exercise your rights, please contact:

H. Pechtl
Meschenicher Strasse 440
Germany
Phone: +49 2236 480 4099
Email: Cheftrainer@impactskillslab.com

Legal Bases

The data protection term “personal data” refers to any information relating to an identified or identifiable natural person. We process personal data in compliance with the applicable data protection regulations, in particular the GDPR and the BDSG.

We process personal data only on the basis of a legal authorisation. Personal data is processed:

• with your consent (§ 25 para. 1 TTDSG or Art. 6 para. 1 lit. a GDPR),
• for the performance of a contract to which you are a party or to carry out pre-contractual measures at your request (Art. 6 para. 1 lit. b GDPR),
• to comply with a legal obligation (Art. 6 para. 1 lit. c GDPR), or
• where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms requiring protection of personal data do not prevail (Art. 6 para. 1 lit. f GDPR).

Duration of Storage

Unless otherwise stated below, we store data only for as long as necessary to fulfil the purpose of processing or to comply with contractual or legal obligations. Legal retention obligations may arise in particular from commercial or tax law.

From the end of the calendar year in which the data was collected, personal data contained in accounting records is stored for ten years, and personal data contained in commercial correspondence and contracts is stored for six years. In addition, data relating to consent requiring documentation as well as complaint and claim matters is stored for the duration of the statutory limitation periods.

Data stored for marketing purposes will be deleted if you object to processing for this purpose.

Categories of Data Recipients

We use processors to process your data. Processing activities performed by such processors include, for example, hosting, email dispatch, IT system maintenance and support, customer and order management, order processing, accounting and billing, marketing activities, or file and data carrier destruction.

Processors are natural or legal persons, authorities, institutions, or other bodies that process personal data on behalf of the controller. Processors do not use the data for their own purposes and are contractually obliged to ensure appropriate technical and organisational data protection measures.

In addition, we may transfer your personal data to entities such as postal and delivery services, our bank, tax consultants/auditors, or tax authorities.

Processing When Exercising Your Rights

If you exercise your rights under Articles 15 to 22 GDPR, we process the transmitted personal data for the purpose of implementing these rights and to be able to provide proof thereof. Data stored for the purpose of providing information and preparing such information will be processed exclusively for this purpose and for data protection control purposes; otherwise, processing will be restricted in accordance with Art. 18 GDPR.

The legal basis for this processing is Art. 6 para. 1 lit. c GDPR in conjunction with Arts. 15 to 22 GDPR and § 34 para. 2 BDSG.

Your Rights

As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

• The right to obtain information pursuant to Art. 15 GDPR and § 34 BDSG as to whether and to what extent we process personal data concerning you.
• The right to rectification pursuant to Art. 16 GDPR.
• The right to erasure pursuant to Art. 17 GDPR and § 35 BDSG.
• The right to restriction of processing pursuant to Art. 18 GDPR.
• The right to data portability pursuant to Art. 20 GDPR.

If you have given separate consent to data processing, you may withdraw this consent at any time pursuant to Art. 7 para. 3 GDPR. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.

Right to Object

You have the right, pursuant to Art. 21 para. 1 GDPR, to object to processing based on Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation.

If personal data is processed for direct marketing purposes, you may object to such processing pursuant to Art. 21 paras. 2 and 3 GDPR.

General Data Processing on Our Website

When using the website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected during your visit. Under data protection law, IP addresses are considered personal data. An IP address is assigned by an internet service provider to each device connected to the internet.

Processing of Server Log Files

When using our website for informational purposes only, general information transmitted by your browser to our server is automatically stored. This includes browser type and version, operating system used, pages accessed, referrer URL, IP address, date and time of the server request, and HTTP status code.

Processing is carried out to safeguard our legitimate interests on the basis of Art. 6 para. 1 lit. f GDPR and serves the technical administration and security of the website. The stored data is deleted after 14 days unless there are concrete indications of unlawful use requiring further investigation.

We are not able to identify you as a data subject based on this information. Articles 15 to 22 GDPR therefore do not apply pursuant to Art. 11 para. 2 GDPR unless you provide additional information enabling identification.

Contact Options and Inquiries

Our website contains contact forms that allow you to send us messages. Mandatory fields are required to process your request; additional information is voluntary.

We process the data to respond to your inquiry. If the inquiry relates to the conclusion or performance of a contract, Art. 6 para. 1 lit. b GDPR applies. Otherwise, processing is based on our legitimate interest in communicating with inquiring persons (Art. 6 para. 1 lit. f GDPR).

Cookies

We use cookies and similar technologies. Cookies are small data files stored by your browser when visiting a website. You have full control over cookie usage via your browser settings.

Some cookies are technically necessary for website operation. Others may be used for functionality, analytics, or marketing purposes, including third-party cookies. Non-essential cookies are used only with your consent pursuant to § 25 para. 1 TTDSG and Art. 6 para. 1 lit. a GDPR.

Video Streaming Services

We use video conferencing services to communicate with prospective or existing contractual partners or to deliver services. Personal data is processed by us and the respective provider.

This includes technical data such as IP addresses, device identifiers, operating systems, and connection types. Content shared during sessions may also be stored on provider servers.

Processing is based on:

• Art. 6 para. 1 lit. b GDPR (seminar delivery),
• Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication),
• Art. 6 para. 1 lit. a GDPR (consent, where recordings are made).

We use the following services:

Zoom (Zoom Video Communications, Inc., USA)

Microsoft Teams (Microsoft Ireland Operations Limited, Ireland)

Webex (Cisco Systems, Inc., USA)

Skype (Microsoft Ireland Operations Limited, Ireland)

Data transfers to third countries may occur. Please refer to the providers’ privacy policies for details.

Further Data Processing

Email Contact

If you contact us by email, we process your data to respond to your inquiry based on our legitimate interest (Art. 6 para. 1 lit. f GDPR).

Customer and Prospect Data

When you contact us as a customer or interested party, we process your data to establish or perform contractual relationships. Legal bases are Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.

We may also process data for analysis and marketing purposes based on Art. 6 para. 1 lit. f GDPR. Additional processing may occur with consent or to fulfil legal obligations.

Use of Email Address for Marketing Purposes

We may use your provided email address to inform you about similar products or services we offer. The legal basis is Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG.

You may object at any time by informing us.