Privacy Policy | P+ Training GmbH - Professional events for the private equity industry

Privacy Policy www.pptraining.de

The protection of personal data and the responsible handling of information that you entrust to us is an important and special concern of ours. With this data privacy policy, we inform you about how, to what extent and for what purposes we process personal data during

the use of our website (see 2.)
the participation in events of the P+P Training GmbH (see 3.)

Finally, you will find general information in sections 1 and 4 to 6, that applies to both types of data processing.

1. Responsible party

Party responsible in terms of data protection law: P+P Training GmbH, Färbergraben 18, 80331 Munich, info@pptraining.de [https://www.pptraining.de/en/imprint]

2. Website: Processing of your personal data

2.1 Use of the website, access data

In principle, you can use our website for purely informational purposes without disclosing your identity. When you call up the individual pages of the website in this sense, only the access data is transmitted to our provider so that the website can be displayed to you. This is the following data:

Browser type/ browser version,
Operating system used,
Language and version of the browser software,
Host name of the accessing end device,
IP address,
Website from which the request comes,
Content of the request (specific page),
Date and time of the server request,
Access status/HTTP status code,
Referrer URL (the previously visited page),
Amount of data transferred,
Time zone difference from Greenwich Mean Time (GMT).

The temporary processing of this data is necessary to technically enable the processing of a website visit and delivery of the website to your end device. The access data is not used to identify individual users and is not merged with other data sources. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6 (1) p. 1 lit. f) GDPR. Our legitimate interests lie in ensuring the functionality of the website and the integrity and security of the website. Storing access data in log files, in particular the IP address, for a longer period of time enables us to detect and ward off misuse. This includes, for example, the defense against requests that overload the service or any bot use. The access data is deleted as soon as it is no longer required to achieve the purpose of its processing. In the case of collection of data to provide the website, this is the case when you end your visit to the website. The data is generally deleted after seven days at the latest; processing beyond this time period is possible in individual cases. In this case, the IP address is deleted or disguised in such a way that assignment to the visiting client is no longer possible.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via using the contact details listed in the “Responsible party” section.

2.2 Cookies

When using our website only, no so-called cookies are stored in the Internet browser of the end device you are using. Your privacy settings are stored in the local storage of the browser in an entry called ‘vbcn_settings’. This can only be read on our domain and is not transmitted to third parties.

For the use of certain services (such as playing videos and displaying maps and directions), cookies may be set and data may be transferred to third parties. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the end device and cannot execute programs. You can find more information on this in sections 2.4 and 2.5 of our privacy policy.

We use such cookies only after the explicit consent of the user (opt-in). If the use of cookies has been consented to once, the data subject can object to the setting of cookies by our website at any time by means of the corresponding setting. The corresponding settings can be found in the footer of the website under the item “Privacy Settings”. The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

You may object to the processing. Your right to object exists for reasons arising from your particular situation. In addition, you can also prevent data processing based on cookies as follows: by deactivating or restricting or deleting cookies in the settings of your browser software or by opening the browser you are using in “private mode”.

You can view and subsequently change the settings you have selected under the link “Privacy Settings”.

2.3 Newsletter and email advertising by us and POELLATH (P+P Pöllath + Partners)

You have the option of subscribing to the e-mail newsletter of P+P Training GmbH and P+P Poellath + Partners Rechtsanwälte und Steuerberater mbB (POELLATH) on the website, in which we will inform you regularly about our seminars and events. To receive the newsletter, you must provide a valid email address. To register for our email newsletter, there is a double opt-in process. After you have entered the data marked as mandatory, we will send you an email to the email address you have provided, in which we ask you to explicitly confirm your subscription to the newsletter (by clicking on a confirmation link). In this way, we ensure that you actually wish to receive our email newsletter. After your confirmation, we process the email address of the recipient concerned for the purpose of sending you our email newsletter. When registering for one of our events, if you also decide to receive our newsletter in the future, you may select/click on the corresponding boxes. In this case, no further confirmation is required. The legal basis of the processing is Art. 6 (1) p. 1 lit. a) GDPR. We delete this data when you terminate the newsletter subscription. We process the data until you exercise your revocation by unsubscribing from our newsletter.

We use the mailing tool CleverReach (cleverreach.com/en-de) to subscribe/unsubscribe to our mailing. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data you enter is stored on CleverReach’s servers in Germany or Ireland.

For more information, please refer to the privacy policy of CleverReach at: cleverreach.com/en-de/privacy-policy.

We have concluded an order processing contract with the service provider in accordance with Art. 28 DSGVO to ensure compliance with the protection of your data.

You may revoke your consent to the processing of the email address for receipt of the newsletter and email advertising at any time by sending us a message (info@pptraining.de) or directly via the link to unsubscribe (https://seu2.cleverreach.com/f/343299-349997/wwu/). In this case, the lawfulness of processing carried out on the basis of consent until revocation is not affected by the revocation.

We process your IP address, the time of registration for the newsletter, as well as the time of your confirmation in order to document your newsletter registration and to prevent misuse of your personal data. The legal basis for processing is Art. 6 (1) p. 1 lit. f) GDPR. Our legitimate interest in this processing is fraud prevention. We delete this data at the latest when the newsletter subscription ends.

You have the right to object to this processing of your data. Your right to object exists for reasons arising from your particular situation. You can send us your objection using the contact details listed in the “Responsible Party” section.

2.4. Integration of: YouTube videos

We use plug-ins of the video platform “YouTube.de” or “YouTube.com” on the website, a service of YouTube LLC (headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; hereinafter “YouTube”), for which “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) is the responsible party within the meaning of data protection law. With the integration we aim to include visual content (“videos”), which we have published on “Youtube.de” or “Youtube.com”, also on our website. When using the streaming function, information is also processed that is stored on your end device (e.g., IP address). The videos are embedded in “extended data protection mode”, which means that no data about you as a user is transmitted to “YouTube” if you do not play the videos. While playing videos on our website, “YouTube” receives the information that you have accessed the corresponding subpage of our website. In addition, some of the data mentioned in the section “Use of the website” is transmitted to “Google”. This occurs regardless of whether “YouTube” provides a user account through which you are logged in or whether no user account exists. If you are logged in to “Google”, your data will be directly assigned to your account. If you do not want the assignment to your “YouTube” profile, you must log out before activating the button. “YouTube” stores your data as usage profiles and processes them independently of an existing user account with “Google” for the purposes of advertising, market research and/or needs-based design of its website. The legal basis for the processing is Art. 6 (1) p. 1 lit. a) GDPR . Google also processes the data in part in the USA. There is no EU Commission adequacy decision for data transfer to the USA; the legal basis for the transfer to the USA is your consent pursuant to Art. 49 (1) p. 1 lit. a) GDPR . You can find the storage period for your data in the following descriptions of the individual third-party services. For more information on the purpose and scope of processing by “YouTube” and the storage period at “YouTube”, please refer to the privacy policy.

Technologies used
Cookies (if “Privacy-Enhanced” mode is not activated)

Collected Data
This list contains all (personal) data collected by or through the use of this service.

device information
IP address
Referrer URL
Watched Videos

Legal basis
The required legal basis for the processing of data is mentioned below.

Article 6 paragraph 1 sentence 1 lit. a GDPR

Place of processing
European Union, United States

Retention period
The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as they are no longer required for the stated processing purposes.

See “Stored Information” for more information on retention periods.

Data receiver
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Transfer to third countries
This service may transfer the collected data to another country. Please note that this service may transfer data outside of the European Union and the European Economic Area and to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly being entitled to any legal remedies. Below is a list of the countries to which the data is transferred. This can be the case for various purposes, e.g. B. for storing or processing.

The consent for this function also includes the consent to a possible transmission of the data to the USA without an appropriate level of data protection and without suitable guarantees (lack of enforceability of data subject rights, lack of legal protection options and possible, disproportionate access by government agencies to the data of the users). The use of this function requires the third-country transfer. If you do not want to agree to the third-country transfer, you must deselect this function.

Click here to read the data processor’s privacy policy. https://policies.google.com/privacy?hl=en
Click here to revoke on all domains of the processing company. https://safety.google/privacy/privacy-controls/

Storage information
Below you can see the longest potential storage time on a device when using the cookie storage method and when using other methods. You can find all information about the purpose and storage period of the cookies set by Google here: https://policies.google.com/technologies/cookies?hl=de#how-google-uses-cookies

Maximum limit for storing cookies: 2 years

You can revoke your consent to processing and third-country transfer at any time by moving the slider back in the “Privacy Settings” of the consent tool. In this case, the lawfulness of the processing carried out on the basis of consent until revocation is not affected by the revocation.

2.5 Google Maps

This website uses “Google’s” “Google Maps” service (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) for the purpose of displaying maps or map sections and thus enables you to conveniently use the map function on the website. By visiting the website, “Google” receives the information that you have called up the corresponding sub-page of our website. In addition, some of the data mentioned in the section “Use of our website” and “Cookies” are transmitted to “Google”. This occurs regardless of whether “Google” provides a user account through which you are logged in or whether no user account exists. If you are logged in to “Google”, your data will be directly assigned to your account. If you do not want the assignment to your “Google” profile, you must log out before activating the button. “Google” stores your data as usage profiles and processes them independently of the existence of a user account with “Google” for the purposes of advertising, market research and/or needs-based design of its website. The legal basis for the processing is Art. 6 (1) p. 1 lit. a) GDPR . Google also processes the data in part in the USA. There is no EU Commission adequacy decision for data transfer to the USA; the legal basis for the transfer to the USA is your consent pursuant to Art. 49 (1) p. 1 lit. a) GDPR. For further information on the purpose and scope of processing by the plug-in provider and the storage period for “Google Maps”, please visit https://www.google.de/intl/de/policies/privacy.

Technologies used
cookies

Collected Data
This list contains all (personal) data collected by or through the use of this service.

Date and time of visit
Location information
IP address
URL
Usage data

Legal basis
The required legal basis for the processing of data is mentioned below.

Article 6 paragraph 1 sentence 1 lit. a GDPR

Place of processing
European Union, United States

See “Stored Information” for more information on retention periods.

Data receiver
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Click here to read the data processor’s privacy policy: https://www.google.com/intl/de/policies/privacy/
Click here to revoke on all domains of the processing company: https://safety.google/privacy/privacy-controls/

Maximum limit for storing cookies: 2 years

2.6 Registration for events

For more information on the processing of your personal data in connection with one of our events, for which you can register on our website, please refer to section 3.

2.7. Contacting P+P Training GmbH

When contacting our company, e.g., by email, we will process the personal data you provide in order to respond to your inquiry. The legal basis for the processing is Art. 6 (1) p. 1 lit. f) GDPR or Art. 6 (1) p. 1 lit. b) GDPR if the contact is aimed at concluding a contract. If the request is aimed at the conclusion of a contract, the provision of your data is necessary and obligatory for the conclusion of a contract (see section 3). If no data is provided, it will not be possible to conclude or execute a contract in the form of contacting you or processing your inquiry. Personal data is processed solely for the purpose of processing the contact, which is also our legitimate interest. In this context, the data is not passed on to third parties. We delete the data accrued in this context after processing is no longer necessary - usually after expiry of the legally mandatory retention obligations - or if you object to further processing.

You may object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection using the contact details listed in the section “Responsible party”.

2.8. Hosting

We use the external hosting services of the provider, 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, which serve to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security, as well as technical maintenance services. For these purposes, all data – including the access data mentioned under the item “Use of our website” – are processed that are necessary for the operation and use of our website. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using external hosting services, our goal is to efficiently and securely provide our web offering.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection using the contact details listed in the “Responsible party” section.

2.9. Website support by digital agency

We use the services of a digital agency, visionbites GmbH, Pappenheimstraße 3, 80335 München, Germany, to support our website. As part of this support, the digital agency may process (e.g., for backups) the access data mentioned in the section “Use of our website”, in particular your IP address and data provided when using the online store.

The legal basis for processing is Art. 6 (1) p. 1 lit. f) GDPR. By using the services of our external digital agency, our goal is to efficiently and securely provide our web offering.

3. Data processing when participating in our events

If you register for one of our events on our website, by e-mail or via an invitation link that we send you, we process your personal data to the extent necessary for the organization, implementation and follow-up of the event. For this purpose, we collect the following data from you: First and last name, company, address, e-mail address. The legal basis for this results from Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of your data is necessary for participation in the event and you are contractually obliged to provide your data. If you do not provide your data, it will not be possible to conclude and/or execute the contract. After the purpose has been achieved (e.g. contract execution), the personal data will be blocked for further processing or deleted, unless we are authorized to process it further on the basis of a consent granted by you (e.g. consent to process the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorization (e.g. authorization to send direct advertising) or on the basis of legitimate interests (e.g. retention for the enforcement of claims). For guest management, we use the cloud solution “guestoo” (www.guestoo.de) of the company Code Piraten GmbH, which specializes in events, separately for individual events as well as within our online offer. We have concluded an order processing contract with the service provider in accordance with Art. 28 DSGVO to ensure compliance with the protection of your data.

In order to document your registration and prevent misuse of your personal data, registration for our event takes the form of the so-called double opt-in procedure. After entering the data marked as mandatory, we will send you an e-mail to the e-mail address you provided, in which we ask you to explicitly confirm your registration by clicking on a confirmation link. In doing so, we process your IP address, the date and time of registration and the time of your confirmation. We are legally obliged to prove your consent to the processing of your personal data in connection with the registration for the event (Art. 7 (1) DSGVO). Due to this legal obligation, the data processing is based on Art. 6 para. 1 p. 1 lit. c) DSGVO.
When you register with us for events managed via the guestoo cloud solution, you enter the following personal data in the registration form:

Email address
First name, last name
Company
Billing address

The personal data you provide will be stored in guestoo and processed only for the purpose of admission control and billing for the respective event. The data will first be entered into the guest list. As soon as the guest list is finalized, you will receive a QR code generated via guestoo, which you can use to legitimize yourself upon entry to the event. In order to grant you admission, we will scan your QR code on site on the day of the event. You will be admitted as soon as the system reports back that you are on the guest list. The system stores that you have checked in and when. Invoicing takes place directly via the online tool.

The legal basis is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest is to control access to our events as part of our house rights and to grant admission only to invited guests.

We store your data for the duration of the organization (incl. corresponding preparation and follow-up) of the respective event. Any existing legal obligations to retain data remain unaffected by this. Within two weeks after the conclusion of the event, your data will be deleted from guestoo with us.

The legal basis is Art. 6 para. 1 p. 1 lit. b DSGVO. The processing only serves to enable you to participate in the online event within the framework specifically set by you.

Retention of your data
We give you the opportunity to view or download the content for 4 weeks after the event. After that, we will delete the event, as well as all data associated with it.

4. Your rights

You may request information at any time and free of charge (Art. 15 GDPR) about your personal data stored by P+P Training GmbH and – insofar as the legal requirements are met – the correction (Art. 16 GDPR), deletion (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of this data. Insofar as P+P Training GmbH processes your data in pursuit of legitimate interests, you may exercise your right to object (Art. 21 GDPR). Whether and to what extent these rights exist in individual cases and which conditions apply to them is determined by the law, in particular the GDPR. The GDPR also grants you a right to data portability under certain circumstances (Art. 20 GDPR). Insofar as you have given your consent under data protection law, you may revoke this consent at any time with effect for the future (Art. 7 (3) GDPR). You also have a right to complain to the competent data protection supervisory authority (Art. 77 GDPR). If you have any questions or complaints regarding data protection at P+P Training GmbH, we recommend that you first contact info@pptraining.de. To exercise these rights and for other questions regarding data protection, please also contact info@pptraining.de. In order to process your request quickly, we recommend that you provide us with your surname, first name and, if available, your email address, as well as a copy of the advertising material in the event of an objection following receipt of advertising.

5. No automated individual case decision

We do not use your personal data for automated individual case decisions within the meaning of Art. 22 (1) GDPR.

6. Amendment of the privacy policy

New legal requirements, business decisions or technical developments may require amendments to our data privacy policy. The data privacy policy will then be adapted accordingly. You will always find the latest version on our website.

Status: February 2023