Privacy policy (website)

General information

For this page, the responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:

stashcat GmbH 
Hamburger Allee 2-4 
30161 Hannover 
Germany
Phone: (+49)511/675190 
info@heinekingmedia.de

For data protection concerns, please contact us by mentioning sufficient details for the individualization of your person (for example, name, e-mail address, name of your institution).

E-Mail: datenschutz@heinekingmedia.de
Phone: (+49)511/675190

Extent of processing of personal data

In principle, we process personal data of our users only if it is needed for the  provision of a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent is not possible for reasons of fact and the processing of the data is permitted by law.

Legal basis for the processing of personal data

As far as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis.

In the processing of personal data, that are necessary for the performance of a contract, Art. 6 para. 1 lit. b GDPR is the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c GDPR is the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO is the legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR is the legal basis for processing. If we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) is the legal basis.

Data erasure and storage duration

The personal data of a person will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, it may be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. A blocking or deletion of the data takes place even if a storage period prescribed by the mentioned standards expires, unless there is a need for further storage of the data for a contract conclusion or a contract fulfillment.

I. Provision of the website www.schul.cloud and creation of log files

  1. Description and scope of data processing

    Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:

    1. Information about the browser type and version that is used
    2. The operating system of the user
    3. The Internet service provider of the user
    4. Date and time of access
    5. The IP address of the user (only anonymized)
    6. Websites from which the system of the user comes to our website

    The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place. The IP address is only collected anonymously and does not allow assignment to a user.

  2. Legal basis for data processing

    The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

  3. Purpose of the data processing

    The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.

    The storage in logfiles takes place,

    to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

    For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.

  4. Duration of storage

    The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.

    In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

  5. Objection and removal possibility

    The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

II. Use of Cookies

  1. Description and scope of data processing

    In order to make the visit to our website attractive and to enable the use of certain functions, we use ""cookies"". This is small text information stored in the browser or browser on the user's device. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the web page is recalled.

    Furthermore, our website uses a specially programmed ""Cookie Consent"" application. This ensures the legally correct setting of cookies. The PlugIn actively obtains the user's consent to the use of cookies and / or tracking technologies when the website is called up for the first time, but does not collect any personal data itself.

  2. Technically necessary cookies

    We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a website change. The following data are stored and transmitted in the cookies.

    • Language settings
    • Log-in information
  3. Technically Necessary Cookies, Third Party Cookies

    We also use technically unnecessary cookies on our website, which in particular enable us to analyze users' browsing habits. In this way, the following data can be transmitted:

    • Frequency of page views
    • Use of website functions
    • Entered search terms

    The following technically unnecessary cookies are so-called third party cookies:

    • Google Analytics (see also section 3 of our privacy policy)

    When accessing our website, the user is informed about the use of cookies and his consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this Privacy Notice.

  4. Note on changing the browser setting

    Most browsers are set to automatically accept cookies. The user can prevent the storage of cookies on his computer, however, by appropriate browser settings, which, however, the functionality of our website can be limited.

  5. Legal basis for data processing

    The legal basis for the processing of personal data is in the presence of a corresponding consent of the user Art. 6 para. 1 lit. a GDPR.

    Incidentally, the legal basis for the processing of personal data using cookies is Article 6 (1) lit. f GDPR.

  6. Purpose of the data processing

    The purpose of the use of technically necessary cookies is to facilitate the use of the website for users. Some features of our website can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a website change.

    The use of technically unnecessary cookies and third party cookies is for the purpose of improving the quality of our website and its contents. The analysis cookies tell us how the website is being used and so we can constantly optimize our online offerings.

    The user data collected by cookies on our website are not used to create user profiles.

    In the aforementioned purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.

  7. Duration of storage, objection and disposal options

    Cookies are stored on the user's computer and transmitted by the user to our website. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website.

III. Google Analytics

  1. General

    The web analytics tool ""Google Analytics"" is used exclusively on the schul.cloud website. The analysis of user behavior when using the website is important to us, as it analyzes the demand for content and thus optimizes the online offer.

    Important note: The web analytics tool ""Google Analytics"" is not used on the platforms schul.cloud and schul.cloud pro, this affects all areas after login.

  2. Additional notes on the use of Google Analytics

    This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA (""Google""). Google Analytics uses so-called ""cookies"", text files that are stored on users' computers and that allow an analysis of the use of the website by them. The information generated by the cookie about the use of this website by the users are usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is enabled on this website, Google will truncate your IP address beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by Google Analytics as part of Google Analytics will not, according to Google, be merged with other Google data.

    On behalf of the operator of this website, Google will use this information to evaluate users' use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. In these purposes, our legitimate interest lies in the data processing.

  3. Legal basis for data processing

    The legal basis for the use of Google Analytics is in the presence of a corresponding consent of the user Art. 6 para. 1 lit. a GDPR.

    Incidentally, the legal basis for the processing of personal data using Google Analytics in the form described here is Art. 6 para. 1 lit. f GDPR.

  4. Duration of storage

    According to our attitude, the data is automatically deleted after 38 months in Google Analytics.

    You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading the browser plug-in available at the following link and install. The current link is: tools.google.com/dlpage/gaoptout. For more information about Terms of Use and Privacy, please visit https://policies.google.com/?hl=en. Please note that on this website Google Analytics has been extended to include the code ""ga ('set', 'anonymizeIp', true);"" in order to ensure the anonymized collection of IP addresses.

    Additional information on how to handle user data in Google Analytics can be found here: https://support.google.com/analytics/answer/6004245?hl=en

IV. Google Adwords and Google Conversion-Tracking

  1. Description and scope of data processing

    To statistically record the use of our website and to evaluate it for the purpose of optimizing our website, we use Google conversion tracking.

  2. Purpose of data processing

    Google Adwords will set a cookie on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google Analytics Lawyers may request the conclusion of a contract data processing agreement for the use of Google Analytics. A template will be available at www.google.com/analytics/terms/en.pdf from Google. Attorney's knowledge and the customer realize that the user clicked on the ad and was redirected to this page. Each Adwords customer receives a different cookie. Cookies can not be tracked via the websites of Adwords customers. The information gathered using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers hear the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users..

  3. Legal basis for data processing

    The legal basis for the storage of conversion cookies is Art. 6 para. 1 lit. f GDPR. Heinekingmedia GmbH as a website operator has a legitimate interest in the analysis of user behavior in order to optimize both the advertising offer and the advertising.

    Additional information about Google AdWords and Google Conversion Tracking can be found in the Google Privacy Policy: www.google.com/policies/privacy/.

  4. Duration of storage

    You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain ""www.googleadservices.com"". You can exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of the website..

V. Contact form and email contact

  1. Description and scope of data processing

    On our website is a contact form available, which can be used for electronic contact. If a user realizes this possibility, the data entered in the input mask is transmitted to us and stored. These data are:

    • First name
    • Surname
    • E-mail
    • Website
    • Phone
    • Street
    • Postcode
    • Place
    • Message

    At the time of sending the message, the following data is also stored:

    • The IP address of the user
    • From which country the form is sent
    • From which terminal the form is sent
    • Browser language setting
    • Date and time of transmission

    For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy.

    Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.

    There is no disclosure of data to third parties in this context. The data is used exclusively for processing the conversation.

  2. Legal basis for data processing

    Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.

    The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

  3. Purpose of data processing

    The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.

    The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

  4. Duration of storage

    The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been finally clarified.

    The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

  5. Opposition and removal possibility

    The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

VI. Registration

  1. Description and scope of data processing

    On our website, we offer users the opportunity to register by providing personal information in the schul.cloud. The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is collected during the registration process:

    • Title
    • First name
    • Surname
    • E-mail address
    • Phone number
    • Position

    As part of the registration process, the consent of the user to process this information is obtained.

  2. Legal basis for data processing

    Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR. If the registration serves the fulfillment of a contract of which the user is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

  3. Purpose of data processing

    Registration of the user is required to fulfill a contract with the user or to carry out pre-contractual measures. By registering, the user creates an account in schul.cloud, which authorizes the use of the platform. With the completion of the registration and the confirmation of the terms of use, a user agreement is concluded with the user. There are no costs for the user under this contract, the use of schul.cloud is permanently free. The user can independently delete his schul.cloud account after registration in the schul.cloud app. With the deletion of the account the utilization relationship is canceled. Further information on the use of schul.cloud can be found at schul.cloud/support.

  4. Duration of storage

    The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. This is the case during the registration process for the execution of a contract or for the performance of pre-contractual measures, when the data is no longer necessary for the execution of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to comply with contractual or legal obligations.

  5. Opposition and removal possibility

    As a user, you have the option of canceling the registration at any time. To do so, you can delete your account at any time after registration in the schul.cloud app. With the deletion of the account the Nutzugsverhältnis is repealed.

VII. Google ReCaptcha

  1. Description and scope of data processing

    To ensure sufficient data security when submitting forms, we use Google ReCaptcha from Google Inc. (1600 Amphiteatre Parkway, Mountain View, CA 94043, USA) on our website.

  2. Purpose of data processing

    The query is used to distinguish whether the input is made by a human or abusive by automated, mechanical processing. The service includes sending Google your IP address and any other data needed by Google for the reCAPTCHA service. The analysis starts as soon as the user enters the website and runs in the background. The website visitor is not advised that the analysis is taking place.

  3. Legal basis for data processing

    The legal basis for processing the data is Art. 6 para. 1 lit. f GDPR. Heinekingmedia GmbH as a website operator has a legitimate interest in protecting its web sites from abusive automated spying and SPAM.
    For more information about Google ReCapotcha, see the following links:
    - https://policies.google.com/privacy?hl=en
    - https://www.google.com/recaptcha/intro/v3.html

VIII. PlugIns and Tools

YouTube

  1. Description and scope of data processing

    This website will embed videos from the YouTube page. Site Operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.YouTube.

  2. Purpose of data processing

    Videos from YouTube are included for additional information and attractive design on this website. When the user visits one of our websites that includes YouTube videos, they will be connected to YouTube. YouTube will not save information until the user clicks on the video. The following data is processed:

    • Device-ID
  3. Legal basis of data processing

    The legal basis for the transmission of data in connection with the integration of videos from YouTube is Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the inclusion of the videos in terms of the appealing presentation of the website.

    You can find more information about the handling of user data in YouTube's privacy policy at: https://policies.google.com/privacy?hl=en&gl=en

IX. Rights of the affected person

If personal data is processed by you, you are i.S.d. GDPR and you have the following rights to the responsible person:

  1. Right to information

    You may ask the person in charge to confirm if personal data concerning you is processed by us.

    If such processing is available, you can request information from the person responsible about the following information:

    1. the purposes for which the personal data are processed;
    2. the categories of personal data that are processed;
    3. the recipients or the categories of recipients to whom the personal data relating to you have been or will be disclosed;
    4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
    5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
    6. the existence of a right of appeal to a supervisory authority;
    7. all available information on the source of the data if the personal data are not collected from the data subject;
    8. the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

    You have the right to request information about whether the personal data relating to you are transferred to a third country or an international organization. In this regard, you can request the appropriate warranties in accordance with. Art. 46 GDPR to be informed in connection with the transfer.

  2. Right to rectification

    You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The person in charge must make the correction without delay.

  3. Right to restriction of processing

    You may request the restriction of the processing of your personal data under the following conditions:

    1. if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
    2. the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
    3. the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims; or
    4. if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

    If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

    If the limitation of the processing according to the o.g. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted.

  4. Right to delete
    1. Obligation to delete

      You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

      1. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
      2. You revoke your consent to the processing gem. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing. 
      3. You gem gem. Art. 21 para. 1 GDPR objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 GDPR objection to the processing.
      4. Your personal data has been processed unlawfully.
      5. The deletion of personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
      6. The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
    2. Information to third parties

      If the person in charge has made the personal data relating to you public and is in accordance with. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical ones, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Person requested by them to delete all links to such personal data or to make copies or replicas of such personal data.

    3. Exceptions

      The right to erasure does not exist if the processing is necessary

      1. to exercise the right to freedom of expression and information;
      2. to fulfill a legal obligation which requires processing under the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of official authority delegated to the controller;
      3. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
      4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
      5. to assert, exercise or defend legal claims.
  5. Right to information

    If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.

    You have the right to be informed about these recipients.

  6. Right to Data Portability

    You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

    1. the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract acc. Art. 6 para. 1 lit. b GDPR is based and
    2. the processing is done by automated methods.

    In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person responsible to another person responsible, as far as this is technically feasible. Freedoms and rights of other persons may not be affected.

    The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

  7. Right to object

    You have the right at any time, for reasons that arise from your particular situation, to prevent the processing of your personal data, which, pursuant to Art. 6 para. 1 lit. e or f GDPR takes an objection; this also applies to profiling based on these provisions.

    The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.

    If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

    If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

    Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to opt-out by means of automated procedures that use technical specifications.

  8. Right to revoke the data protection consent declaration

    You have the right to revoke your privacy statement at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

  9. Automated decision on a case-by-case basis, including profiling

    You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision

    1. is required for the conclusion or performance of a contract between you and the controller,
    2. is permitted under Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
    3. with your express consent.

    However, these decisions may not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.

    With regard to the cases mentioned in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.

  10. Right to complain to a supervisory authority

    Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is against the GDPR violates.

    The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

Your data protection is important to us: By default, we do not collect any analysis data from your visit! However, in order to continuously improve our website, we track anynomized website usage data if you agree. You can change the settings for the use of cookies at any time in the footer of the website. For more information, please refer to our Data protection (Web).

Privacy settings

Select the purpose for which this website may use cookies:

Allowed functionality

  • Storage of the progress of contacts

  • the consistent display of page content

  • Storage of your last website visit

Unauthorized functionality

  • Storage of anonymous usage data for analysis purposes

  • Allows sharing pages over social networks

  • display advertising promotions that match your interests

Allowed functionality

  • Storage of the progress of contacts

  • the consistent display of page content

  • Storage of your last website visit

  • Storage of anonymous usage data for analysis purposes

Unauthorized functionality

  • Allows sharing pages over social networks

  • display advertising promotions that match your interests

Allowed functionality

  • Storage of the progress of contacts

  • the consistent display of page content

  • Storage of your last website visit

  • Storage of anonymous usage data for analysis purposes

  • Allows sharing pages over social networks

  • display advertising promotions that match your interests