The services of IYBA WE4A include the IYBA WE4A website/platform available at iyba-we4a.eu and iyba.eu,
They are each provided by Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH ("GIZ", "we", "us"). GIZ attaches great importance to responsible and transparent management of personal data.
In this Privacy Policy, we provide you with information, amongst others, about
- whom you can contact at GIZ on the subject of data protection
- what personal data we process about you in connection with our Services
- for which purposes we process your personal data and
- what rights you have in relation to your personal data.
1. Contact data of the data controller
The controller of your personal data is GIZ. GIZ can be contacted at either one of the following two postal addresses:
- Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH
Friedrich-Ebert-Allee 32 + 36
53113 Bonn
Germany - Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH
Dag-Hammarskjöld-Weg 1--5
65760 Eschborn
Germany
The GIZ team can be contacted at:
iyba-we4a@giz.de
2. Categories of personal data, processing purpose and legal basis
We process your personal data exclusively in accordance with the EU General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act (Bundesdatenschutzgesetz, "BDSG"). This means that we only process personal data to the extent necessary. Which data is required and processed for which purpose and on which legal basis is largely determined by the type of service you use.
2.1. Cookies
When you visit the IYBA WE4A Website/platform, small text files known as 'cookies' are stored on your computer. The information on the cookie you can find here (insert link to cookie policy)
2.2. Use of the IYBA WE4A platform/website
When you register on or use the IYBA WE4A website/platform, we (additionally) process personal data relating to you as follows.
2.2.1. Categories of personal data
The personal data relating to you, which we process may include the data categories listed below:
- User profile data and (other) personal data provided or created at registration, such as:
- E-mail address
- First name and surname - which do not need to be your real name (optional)
- Country, city/town and/or time zone (each optional)
- Age/year of birth (optional)
- Language (optional)
- Gender (optional)
- Other details you may choose to provide on your user profile
- General usage data, such as:
- Log-ins
- Viewed pages
- Communication users choose to provide, such as
- In one of our forums
- Feedback on events, news, opportunities
- Through help requests or via one of the forms on the platform
The above information is provided by or generated through your use of the IYBA WE4A website/platform.
2.2.2. Purposes of the processing and legal basis
In general, we process personal data relating to you to provide the IYBA WE4A website/platform. This includes, for example, maintaining and displaying your user profile, or informing you about updates on our Services. If you no longer wish to receive such information, please inform us via iyba-we4a@giz.de
Whenever the processing of personal data is necessary to fulfil a contractual activity or service, the legal basis for processing your personal data is to perform our usage contract with you (Article 6 para. 1 lit. b GDPR).
For other services and activities not linked to any contractual obligation, we want to make you aware that when we provide our services, we do so for non-commercial educational purposes. We thereby carry out a task in the public interest, assigned to us, which fulfils the requirements of Article 6(1)(e) GDPR. This is the case, for example, if you complete your profile data or we carry out evaluations of courses in order to make improvements or optimisations of the IYBA WE4A Platform/website.
Should we obtain your consent for individual processing activities (Article 6(1)(a) GDPR), this is the legal basis we rely on. This happens, for example, when you activate a YouTube video on the IYBA WE4A platform/website. See section 3.3. below for more information on YouTube videos we have embedded.
3. Recipients of your personal data and data transfers
3.1. Service Providers
We may share your personal data with the following service providers:
- European Service Network (Paddle) who is responsible for the CMS in which the IYBA WE4A website/platform is built.
- Level27 who is responsible for the hosting of the website/platform.
3.2. Integrated YouTube Videos
The IYBA WE4A Learning Services integrate YouTube videos. YouTube is operated by Google. A connection to YouTube servers is only established when you start a YouTube video. If a video is started on the IYBA WE4A website, YouTube will be informed about which of our webpages you have visited. If you are logged in to your YouTube account, you allow YouTube to assign your search behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
In addition, YouTube can store various cookies on your terminal after you start a video. According to YouTube's stated practices, the information collected through these cookies is used, amongst others, to prepare video statistics, improve user-friendliness and prevent fraud attempts. The cookies remain stored on your terminal until you delete them.
In some cases, starting a YouTube video may trigger other data processing operations over which we have no influence. YouTube is used in the interest of ensuring an appealing presentation of our online offers. More information on YouTube's data processing operations can be found in its privacy policy at https://policies.google.com/privacy?hl=en.
4. Storage of personal data
There is no automatic deletion of user accounts. The retention, review, and deletion of personal data are managed by the IYBA WE4A web administrators in accordance with applicable data protection laws and internal data retention policies.The personal data of the data subject will be deleted manually by IYBA WE4A after ten years if a contract has been initiated or if there is an existing contractual relationship. Data may continue to be retained beyond this time when the data controller is required under European or national legislation, regulations or other legal instruments to do so
Data subjects have the right to request the deletion of their personal data associated with their IYBA WE4A account at any time. Requests for erasure should be submitted to iyba-we4a@giz.de and will be assessed and processed by the IYBA WE4A web administration team in line with legal and operational requirements.
Personal data may be retained for longer than ordinarily necessary where retention is required to comply with legal, regulatory, or contractual obligations, or to establish, exercise, or defend legal claims
5. Data Subject Rights
In accordance with the General Data Protection Regulation, you have the right:
- to obtain information about your data stored by us (Article 15 GDPR),
- to have your data stored by us rectified (Article 16 GDPR),
- to have your data stored by us erased (Article 17 GDPR),
- to obtain restriction of processing of your data stored by us (Article 18 GDPR),
- to object to the storage of your data if they are processed on the basis of Article 6 para. 1 sentence 1 lit. f and lit. e, GDPR (Article 21 GDPR),
- to receive data that concern you in a commonly used and machine-readable format from the controller such that they can be potentially transmitted to another controller (right to data portability, Article 20 GDPR),
- to withdraw your consent to the extent that the data have been processed on the basis of consent (Article 6 para. 1 lit. a GDPR). The lawfulness of processing on the basis of consent given remains unaffected until receipt of the withdrawal.
- In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority for GIZ is theFederal Commissioner for Data Protection and Freedom of Information (BfDI).
Data subjects have the right to request the deletion of their personal data associated with their IYBA WE4A account at any time. Requests for erasure should be submitted to iyba-we4a@giz.de and will be assessed and processed by the IYBA WE4A web administration team in line with legal and operational requirements.
If you have any questions about the processing of your personal data, you can contact GIZ's data protection officer at datenschutzbeauftragte@giz.de.