The following information is to be provided pursuant to Art. 13 et sqq. General Data Protection Regulation (GDPR) where personal data are collected from the data subject.

Identity and contact details of the controller

Holzhofer Consulting GmbH
Lochhamer Str. 31
82152 München-Planegg
Tel.: +49 (89) 1 25 01 56 00
(hereinafter "Holzhofer Consulting", "we, "us")

Purposes of the processing for which the personal data are intended as well as the legal basis for the processing

Personal data in this e-learning portal are processed for the performance of a contract (Art. 6 para. 1 lit. b GDPR). The following personal data is provided by the client for the registration in the e-learning portal:

• Salutation
• First name
• Last name
• Email address
• Company affiliation
• Language preference

For completing the registration process you receive an activation link to the provided email address in order to confirm this with a click. Alternatively you can copy the link to the address bar of your web browser and request the activation page.

For proof of participation in the the courses data is stored that confirms the participation.

If you request support for the usage of the e-learning portal, your data is processed to for working on your request and for the case, that follow up question arise.

Due to technical reasons each access to the e-learning portal a limited number of data is collection (so-called connection data). This data is necessary to establish and keep the connection between your endpoint device and our servers. Furthermore this data is necessary for keeping the session after sign-in and to protect unauthorized access to this session. The processing is based on Art. 6 para. 1 lit. b and Art. 32 GDPR. The following data or categories of data are collected:

• IP address
• Date and time of your visit
• Browser type and version
• Used operating system
• Referer-URL
• Name of the visited web page

After sign-in to the e-learning portal a cookie is set for keeping and protecting the session. You have to allow this cookie to be set in your web browser to use the e-learning portal.

Automated individual decision-making, including profiling

Your personal data will not be processed for automated decision-making, including profiling, as referred to in Art. 22 sec. 1 & 4 GDPR.

Categories of recipients of personal data

We may transfer personal data to the following categories of recipients:

• Public sector entities due to legal requirements.
• Affiliates for contractual performance or for providing services.
• Processors within the meaning of Art. 28 GDPR in the course of commissioned data processing.
• Other third parties for auxiliaries.

Transfer to third countries

Personal data will not be transferred to countries outside of the European Union or the EEA.

Security

Holzhofer Consulting employs the legally required technical and organisational measures to protect personal data from loss, destruction, manipulation, theft and other unauthorised access.

Period of retention

Personal data will be stored only as long as it’s required for the fulfilment of the purposes for which the data was collected originally and to establish, execute or defend legal claims, or as long as it is legally required. The legal requirements for retention periods primary result from trade and tax law (particularly sections 147 AO and 257 HGB). Data due for deletion respectively after omission of legal claims will be securely erased in accordance with all legal requirements.

Rights of the data subject

If not stated other the "Holzhofer Consulting GmbH" is responsible for the processing of your data. You have the possibility to make use of your rights as a data subject:

• Right of access in pursuance of Art. 15 GDPR.
• Right to rectification in pursuance of Art. 16 GDPR.
• Right to erasure in pursuance of Art. 17 GDPR.
• Right to restriction of processing in pursuance of Art. 18 GDPR.
• Right to data portability in pursuance of Art. 20 GDPR.
• Right to object in pursuance of Art. 21 GDPR.

If you want to execute your rights please send your request via email or letter post to the contact details specified above.

Right to lodge a complaint with a supervisory authority

Additionally you can contact pursuant to Art. 77 para. 1 GDPR a supervisory authority with a complaint at any time. For us basically the Bayerische Landesamt für Datenschutzaufsicht, Postfach 606, D-91511 Ansbach is competent. Alternatively you may contact your local competent supervisory authority.