Privacy policy

Grundlage eines effektiven Datenschutzes ist die umfassende Information über die Erhebung, Verarbeitung und Nutzung Ihrer Daten („Datenverarbeitung“). Daher möchten wir Sie informieren,

  • Wann bzw. bei welchen Aktionen wir Daten verarbeiten
  • Welche Daten wir aus welchen Gründen verarbeiten
  • Wer Daten erhält
  • Welche Rechte Sie wegen der Datenverarbeitung durch uns haben.

Diese Datenschutzerklärung regelt nur die Nutzung personenbezogener Daten auf unserer Website inklusive der Unterseiten. Wenn Sie unsere Website über einen Link verlassen oder unsere Präsenz auf einer Social-Media-Plattform besuchen, verlassen Sie auch den Anwendungsbereich dieser Datenschutzerklärung.

Die Übertragung von Informationen zu oder von dieser Website wird mit einer SSL-Verschlüsselung abgesichert.
Diese Datenschutzerklärung können Sie dauerhaft und jederzeit unter der Adresse abrufen und ausdrucken.

1. Contact details

The data controller responsible for the processing of data within the scope of this website in accordance with the General Data Protection Regulation (GDPR) is:

German Testing Board e. V.
Koldestraße 8 b
91052 Erlangen

Phone: +49 (0)9131 976106
Fax: +49 (0)9131 976108

Data Protection Officer: Dr. Thomas Lapp

2. General information on data processing

2.1 Scope of personal data being processed

The provision of this website requires processing of various types of information. In addition, the extent of data processing depends on your use of the functionalities of the website, for example if you contact us via the contact form or if you consent to the processing of your data.

You are under no obligation to provide us with your personal data. However, if the provision of these data is necessary for technical reasons in order to access our website, your refusal to process your data will prevent you from entering and using our website.

As a visitor to our website, you are not subject to an automated individual decision-making in the meaning of Article 22 GDPR.

2.2 Legal basis for the processing of personal data

The legal basis for the processing of personal data is presented below.

Contract performance or steps taken prior to entering into a contract – Article 6 (1b) GDPR

Data will be processed only to the extent necessary for the performance and fulfilment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data will be processed by us only to this extent.

Legitimate interest – Article 6 (1f) GDPR

Data will be processed insofar as we have a legitimate interest in such processing and no conflicting overriding interests of the data subject are evident. The specific interest is explained in this Privacy Policy in the section concerning the description of processing.

Consent – Article 6 (1a) GDPR

Data will be processed if you have expressly consented to the type and scope of data processing. You may withdraw your consent at any time with effect for the future. However, this does not affect the processing of data that has taken place up to this date.

Legal obligation – Article 6 (1c) GDPR

Data will be processed as far as this is necessary in order to comply with German or European legal obligations.

2.3 Erasure of data and storage period

We will erase your personal data as soon as the legal basis for their processing no longer applies. In some cases, however, several legal bases may apply at a time, or with the elimination of one legal basis, a new one may start to apply, such as e.g. the obligation to store certain data in order to comply with the statutory obligation of storage.

3. Data processing for the provision of the website

To be able to display the content of this website, we need to process certain information. Information starts to be processed once you access our website. Furthermore, our website offers various functionalities that require further data processing.

3.1 Log-Files

When you visit our website your browser sends various types of information to our server. We need these to establish and maintain the connection. These data include your IP address, which we treat as personal data. In addition, the following data are collected:

  • Date and time of access
  • The type of your browser
  • Your operating system
  • Source/referring page
  • Referrer
  • The country you are currently in
  • Bounce rate
  • Visitor ID
  • Resolution of your terminal device
  • Browser plug-ins

Your IP address will not be stored. We store those data in the so-called server log files. These data are not collated with any other data about you. The storage of log files serves the legitimate interest of providing and further developing our website as well as the purpose of statistical evaluation. Stored log files are deleted after 7 days at the latest, unless a longer storage period is necessary, for example to prevent or clarify an attack on our website.

3.2 Cookies

3.3 PIWIK/ Matomo

In order to customise our website, we create user profiles using the web analytics tool Matomo (previously PIWIK) of InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”). Matomo uses cookies which are stored on your terminal device and can be read by us. In this manner, we are able to identify returning visitors and view their statistics. We only use Matomo with the anonymisation function.

The legal basis for data processing for analytical purposes is our legitimate interest in the statistical evaluation of user behaviour for us to be able to continuously optimise and better market our website and services.
You may object to the storage and evaluation of data concerning your use of our website by enabling a so called opt-out cookie in your browser by clicking the button below. Matomo will then no longer collect any data about you. This cookie must be enabled for any type of the browser used. If you clear the stored cookies in the future, the opt-out cookie will also be cleared.

The data will be processed to analyse how you use our website during your visit and only until you object to such processing in a legally effective manner.

4. Requests for proposal regarding training courses offered by our premium partners

You can use the contact form on our website at any time to send us a request for proposal regarding the training courses offered by our premium partners. The following information is requested for this purpose:

  • Salutation
  • Name
  • First name
  • Email address

These data are marked as mandatory fields. All other data that you transmit to us within the scope of your request or enquiry, also via the free text field, are voluntary.

We use those data exclusively for processing your request for proposal. For this purpose, we transmit your data to the respective premium partner who offers the training course your request for proposal refers to. The said partner contacts you in response to your request for proposal. We, thus, act as an intermediary between our premium partners and their (prospective) clients.

The purpose of data processing is to process the booking of the training course by you (contract performance, steps taken prior to entering into a contract).

We will erase your data as soon as we forward them to our premium partners, i.e. within 2 weeks at the latest.

5. Social networks

We maintain web pages on social networks, such as Twitter. The respective social network provider gives detailed information on the type of personal data being processed and the manner of processing.

6. Right to object and right to withdraw consent

Where data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. Your objection or withdrawal will only have an effect for the future. Where the used analytical cookies have their own option of disabling, such an option is each time indicated for the relevant cookie. You may exercise your right of objection or withdrawal at any time by contacting . If you object to processing based on our legitimate interest, we are nevertheless entitled to continue the processing of your personal data if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

7. Rights of data subjects

If data relating to your person (‘personal data’) are processed, you are the data subject within the meaning of Article 4 (1) GDPR. As a data subject, you have the rights indicated below with regard to your personal data. To exercise these rights, please contact us using the contact details above.

Right of access pursuant to Article 15 GDPR
You have the right of access to your personal data that are being processed by us. This applies to the mandatory information set out in Article 15 GDPR.

Right to rectification pursuant to Article 16 GDPR
You have the right to have inaccurate personal data rectified without undue delay or completed if they are incomplete.

Right to erasure pursuant to Article 17 GDPR
You have the right to request the erasure of your personal data if one of the reasons set out in Article 17 GDPR applies, in particular, if a legal basis for the processing no longer exists.

Right to restriction of processing pursuant to Article 18 GDPR
You have the right to request the restriction of processing of your personal data if one of the reasons set out in Article 18 GDPR applies, in particular, if you want to request restriction of processing instead of data erasure.

Right to data portability pursuant to Article 20 GDPR
You have the right to request all personal data that we store about you be disclosed to you in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller, without hindrance from the controller to which the personal data have been provided.

Right to lodge a complaint with a supervisory authority, Article 77 GDPR
Pursuant to Article 77 GDPR you have the right to lodge a compliant with a competent supervisory authority.

8. Data recipient

Some activities regarding the processing of your personal data on this website are also carried out by data processors, in particular the hosting of the website. In such cases, personal data are processed exclusively on the basis of an agreement about processing data on behalf of the controller in accordance with Article 28 (3) GDPR.

In addition, we transmit personal data that you enter when making a request for proposal in order to fulfil our contractual obligations towards a respective premium partner.

9. Transfer of data to third countries

The personal data which we collect from you on this website will not be transferred to any third countries outside the European Economic Area.