Below, we inform you about the collection of personal data when using our website. Personal data is all data that can be personally related to you, e.g., name, address, email address, user behavior. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

 
1. Controller for Data Processing / Data Protection Officer

 
The controller pursuant to Art. 4 Abs. 7 EU General Data Protection Regulation (GDPR) is Frankfurt School Student Consulting GmbH, Adickesallee 32-34, 60322 Frankfurt am Main, Phone: +49 (0) 171 8491624, Email: contact@fs-sc.de (you can find more information in our Legal Notice)

Data protection officer of the controller: intersoft consulting services AG, Beim Strohhause 17, 20097 Hamburg, Email: datenschutzbeauftragter@fs.de 

The website is hosted by ionos GmbH.

2. Your Rights

You have the following rights against us regarding the personal data concerning you:

2.1 General Rights 

You have the right to access, rectification, erasure, restriction of processing, objection to processing, and data portability (Art. 15-21 GDPR). Insofar as processing is based on your consent, you have the right to withdraw this consent with effect for the future. 

2.2 Rights in Data Processing Based on Legitimate Interest 

Pursuant to Art. 21 Abs. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6 Abs. 1 e) GDPR (data processing in the public interest) or Art. 6 Abs. 1 f) GDPR (data processing to safeguard a legitimate interest); this also applies to profiling based on these provisions. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. 

2.3 Rights in Direct Marketing 

If we process your personal data for direct marketing purposes, you have the right, pursuant to Art. 21 Abs. 2 GDPR, to object at any time to the processing of personal data concerning you for such marketing. This also applies to profiling to the extent that it is related to such direct marketing.

In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

2.4 Right to Lodge a Complaint with a Supervisory Authority

You also have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data by us.

3. Collection of Personal Data when Visiting our Website 

When using the website for informational purposes only, i.e., if you do not contact us through the contact form or otherwise submit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for this is Art. 6 Abs. 1 f) GDPR: 

IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transmitted in each case, website from which the request comes, browser, operating system, and its interface, language and version of the browser software. 

4. Contacting us by Email 

When you contact us by email or through a contact form, the data you provide (your email address, your name if applicable) will be stored by us to answer your questions. Insofar as we request inputs via our contact form that are not required to establish contact, we have always marked these as optional. This information helps us to clarify your request and to improve the handling of your concern. Provision of this information is explicitly voluntary and with your consent, Art. 6 Abs. 1 a) GDPR. Insofar as this involves information about communication channels (for example, email address, telephone number), you also consent to us contacting you via this communication channel, if necessary, to answer your concern. You can of course withdraw this consent at any time for the future. 

We delete the data arising in this context after storage is no longer necessary, or restrict processing if statutory retention obligations exist. 

5. Newsletter 

With your consent pursuant to Art. 6 Abs. 1 lit. a) GDPR, you can subscribe to our newsletter, which we use to inform you about our current offers. For subscription to our newsletter, we use the so-called double-opt-in process. This means that after your registration, we will send an email to the specified email address asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted. 

In addition, we store your respective IP address and the times of registration and confirmation. The purpose of this process is to prove your registration and, if necessary, to clarify any potential misuse of your personal data. 

The mandatory information for sending the newsletter is your email address and your first and last name. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 Abs. 1 lit. a) GDPR. 

You can withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare the withdrawal by clicking on the link provided in every newsletter email or by contacting the data protection officer mentioned above. 

6. Information for Applicants 

We process your personal data to the extent necessary to carry out the application process. This includes your master applicant data (first name, last name, address, job position), your contact details (email address), as well as your qualification data (cover letter, CV, previous activities, professional qualifications) and (work) references and certificates. In addition, we process information that you voluntarily provide to us in your application, such as an application photo. 

We exclusively process personal data that we receive from you as part of the application process. 

Personal data of applicants may be processed for the purposes of the application process if this is necessary for the decision on establishing an employment relationship with us. The legal basis is § 26 Abs. 1 BDSG. 

If you have declared your voluntary consent to the collection, processing, or transmission of certain personal data, this consent constitutes the legal basis for processing this data (Art. 6 Abs. 1 lit. a) GDPR, § 26 Abs. 2 BDSG). 

Your data will not be disclosed to third parties and will be stored exclusively on servers in Germany. Transfer to a third country is not intended. 

We store your personal data for as long as is necessary to make a decision on your application. Insofar as an employment relationship is not established between you and us, we may store your data longer if this is necessary for defense against potential legal claims. Regularly, your data will be deleted within 3 months after the end of the application process. 

7. Use of Cookies 

7.1 General Information 

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the entity setting the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the website as a whole more user-friendly and effective. 

7.2 Technically Necessary Cookies 

We use cookies to make our website user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. 

Technically necessary cookies are not strictly required to display the website.

The legal basis is Art. 6 Abs. 1 b) GDPR.

7.3 Cookies for Audience Measurement 

Cookies for audience measurement collect information about how our website is used, e.g., page views or error messages. These cookies do not store information that allows the user to be identified. The collected information is only analyzed in aggregated form and thus anonymously. 

Name of the Cookie Purpose of processing Legal basis of processing Storage duration 
Google Analytics Creation and modification of cookie information; optimization of website display and adaptation of content Legitimate Interest 30 minutes 
PHPSESSID Optimization of website display and adaptation of content Legitimate Interest Until the end of the session 
Uncode Optimization of website display and adaptation of content Legitimate Interest Until the end of the session 
Uncode Theme Optimization of website display and adaptation of content Legitimate Interest 1 year 

7.4 Prevention of Cookies 

You can configure your browser settings to your liking and, for example, refuse to accept third-party cookies or all cookies. We point out that you may then not be able to use all functions of this website. 

8. Use of Analysis Services

 
This website uses Google Analytics. On behalf of the operator of this website, Google will evaluate your use of the website to compile reports on website activity and to provide further services related to website use and internet use to the website operator. 

Since the agreement between the Hamburg Commissioner for Data Protection and Freedom of Information and Google based on the decision of the Düsseldorf Circle for the data protection-compliant design of analysis procedures for audience measurement on internet offers, data protection-compliant and objection-free use of Google Analytics is possible under certain conditions. We naturally adhere to these requirements. In particular, we point out that on this website Google Analytics has been extended by the code "gat._anonymizelp();" to ensure anonymous collection of IP addresses (so-called IP masking). Your IP address will be shortened beforehand by Google within member states of the European Union or in other state parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ .

Google Analytics uses so-called "cookies", which are text files stored on your computer. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to fully use all functions of this website. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser add-on. If you click here, an opt-out cookie will be set, which prevents future collection of your data when visiting this website: Disable Google Analytics. 

In addition, we use Google Conversion Tracking in connection with Google Analytics. This allows us to track the behavior of our website visitors. For example, we are shown how many PDFs were downloaded on our website or how often the contact form was filled out. We are also shown how many clicks on advertisements from external sources (AdWords, LinkedIn, Xing, Bing) led to our website. 

9. Integration of Third-Party Services and Content 

In order to optimize our online presence and to make your stay on our website as pleasant as possible, we integrate content and services from third-party providers on the basis of our legitimate interest (Art. 6 Abs. 1 lit. f GDPR). To display this content to you, your IP address must be transmitted to this third-party provider. Under certain circumstances, further data may be collected by the third-party providers or pixel tags and/or cookies may be used. To what extent this is the case, you can find out in the following sections regarding the respective integrated content. 

9.1 Use of Social Plugins 

This website uses social plugins from the following providers:

– Facebook (Operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)

– LinkedIn (Operator: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2)

– Instagram (Operator: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) 

These plugins normally collect data from you by default and transmit it to the servers of the respective provider. The legal basis for using the plugins is Art. 6 Abs. 1 f) GDPR. 

The plugins collect personal data such as your IP address and send it to the servers of the respective provider, where it is stored. In addition, social plugins set a cookie with a unique identifier when accessing the respective website. This also allows the providers to create profiles about your usage behavior. This happens even if you are not a member of the social network of the respective provider. If you are a member of the social network of the provider and are logged in to the social network during your visit to this website, your data and information about the visit to this website can be linked to your profile on the social network. We have no influence on the exact scope of the data collected by the respective provider. For more information on the scope, type, and purpose of data processing and on rights and setting options to protect your privacy, please refer to the privacy policies of the respective social network provider. These can be accessed at the following addresses: 

Facebook: https://wwwfacebook.com/policy.php

LinkedIn: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=www.linkedin.com%Cli-other

Instagram: https://help.instagram.com/519522125107875

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active)

9.2 Integration of YouTube Videos

We are interested in offering you a diverse, multimedia informational experience. Therefore, we embed videos from YouTube (YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA). The legal basis for this is Art. 6 Abs. 1 lit. f GDPR.

YouTube is a subsidiary of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

Through certification under the EU-US Privacy Shield, YouTube guarantees compliance with European data protection laws. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

The embedding takes place in the extended data protection mode or the no-cookie solution. This means that cookies and pixel tags for personalizing advertising and search results are only set by YouTube when the video is played. 

By playing the YouTube video, the following data is transmitted to Google as the operator of YouTube: 

• the IP address,

• the specific address of the page accessed with us,

• the transmitted identifier of the browser, and

• the system date and time of the call,

• already existing cookies through which your browser can be uniquely identified.

Google as the operator of YouTube is soleley responsible for this data processing. Further information can be found here. 

We point out that Google may receive additional data via cookies already stored on your device. The extent to which these are used by Google is beyond our control. 

The privacy policy of YouTube can be found here. 

9.3 HubSpot 

On this website, we use HubSpot for our online marketing activities. HubSpot is a software company from the USA with a subsidiary in Ireland. Contact: HubSpot 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500. 

This is an integrated software solution with which we cover various aspects of our online marketing. These include, among other things: 

Email marketing (newsletters and automated mailings, e.g., for providing downloads), social media publishing & reporting, reporting (e.g., traffic source, hits, etc.), contact management (e.g., user segmentation & CRM), landing pages, and contact forms. 

Our subscription service allows visitors to our website to learn more about our company, download content, and provide their contact information and additional demographic information. This information and the content of our website are stored on servers of our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information collected by us is subject to this privacy policy. We use all collected information exclusively to optimize our marketing measures. 

Furthermore, to improve the user experience on our website, we use the HubSpot live chat service "Messages" on some subpages for sending and receiving messages (round chat icon in the bottom right corner of the screen). Upon consent and use of this feature, the following data is transmitted to HubSpot servers:

– Content of all sent and received chat messages

– Contextual information (e.g., page where the chat was used)

– Optional: Email address of the user (if provided by the user via the chat function)

The legal basis for using HubSpot services is Art. 6 I f) GDPR – legitimate interest. Our legitimate interest in using this service is the optimization of our marketing measures and the improvement of our service quality on the website. 

HubSpot is certified under the terms of the "EU – U.S. Privacy Shield Framework" and is subject to TRUSTe's Privacy Seal as well as the "U.S. – Swiss Safe Harbor" Framework.

 
More information on the HubSpot Privacy Policy

10. Consulting Day 

Frankfurt School Student Consulting GmbH offers students of the Frankfurt School of Finance & Management the opportunity to participate in workshops of established management consultancies as part of a Consulting Day. The application process consists of two steps. In the first step, workshop participants apply for selected, available places by voluntarily providing the following personal data. 

– Full name

– Email

– Degree sought

– Current study semester

– Grade point average

– Subject of study

– Curriculum Vitae 

These details are necessary for the application and are to be provided voluntarily; participation in the Consulting Day program can only be granted if the above personal data is provided. 

An application for one or more workshops does not entitle you to participate in such an offer; selection of participants is at the sole discretion of the organizing team of Frankfurt School Student Consulting GmbH. The decision is made based on defined criteria. 

When registereing, the IP address of the internet connection as well as the date and time are also stored. When logging in and logging out, the IP address and the date and time (so-called "timestamps") are logged. This timestamp is deleted after 7 days unless it is needed for evidentiary purposes. As long as a complete investigation of an incident has not occurred, the data will be stored or stored in a restricted manner. There is no disclosure of data to third parties without your consent, with the exception of the workshop providers of the management consultancies; we reserve the right to hand out lists of participants. 

Selected students who are granted participation in the Consulting Day program are requested to bindingly confirm their selection and participation. For this purpose, the following additional voluntary personal data will be collected in addition to the above: 

– Mobile phone number 

During the event, visual material will be recorded for internal purposes and marketing on behalf of Frankfurt School Student Consulting GmbH. This visual material will be published. Every participant has the right to object to this publication; for this purpose, participants can contact us via email. 

During the registration process, consent to this data processing is obtained, and reference is made to this privacy policy. The collected data is only collected and used to provide the Consulting Day workshop offer. The legal basis for this processing is Art. 6 Abs. 1 lit. a) GDPR. We point out that under Art. 7 Abs. 3 GDPR, you have the right to withdraw the consent given to us for the collection of data as part of the registration for Consulting Day at any time with effect for the future. You must inform us of the withdrawal by electronic or postal means. Your personal data collected by us will be deleted as soon as processing is no longer necessary and the legitimate interest therein expires; this occurs following the post-event processing. We point out, however, that we may have to observe tax and commercial retention periods here. 

11. Case Competition

Frankfurt School Student Consulting GmbH offers students of the Frankfurt School of Finance & Management the opportunity to spend an afternoon and compete in teams against each other as part of a Case Competition with established management consultancies. The application process consists of two steps. In the first step, workshop participants apply for selected, available places by voluntarily providing the following personal data. 

– Full name

– Email

– Degree sought

– Current study semester

– Grade point average

– Subject of study

– Curriculum Vitae 

These details are necessary for the application and are to be provided voluntarily; participation in the Case Competition program can only be granted if the above personal data is provided. 

An application for one or more teams does not entitle you to participate in such an offer; selection of participants is at the sole discretion of the organizing team of Frankfurt School Student Consulting GmbH. The decision is made based on defined criteria. 

When registereing, the IP address of the internet connection as well as the date and time are also stored. When logging in and logging out, the IP address and the date and time (so-called "timestamps") are logged. This timestamp is deleted after 7 days unless it is needed for evidentiary purposes. As long as a complete investigation of an incident has not occurred, the data will be stored or stored in a restricted manner. There is no disclosure of data to third parties without your consent, with the exception of the participants of the management consultancies; we reserve the right to hand out lists of participants. 

Selected students who are granted participation in the Case Competition program are requested to bindingly confirm their selection and participation. For this purpose, the following additional voluntary personal data will be collected in addition to the above: 

– Mobile phone number 

During the event, visual material will be recorded for internal purposes and marketing on behalf of Frankfurt School Student Consulting GmbH. This visual material will be published. Every participant has the right to object to this publication; for this purpose, participants can contact us via email. 

During the registration process, consent to this data processing is obtained, and reference is made to this privacy policy. The collected data is only collected and used to provide the Case Competition. The legal basis for this processing is Art. 6 Abs. 1 lit. a) GDPR. We point out that under Art. 7 Abs. 3 GDPR, you have the right to withdraw the consent given to us for the collection of data as part of the registration for Consulting Day at any time with effect for the future. You must inform us of the withdrawal by electronic or postal means. Your personal data collected by us will be deleted as soon as processing is no longer necessary and the legitimate interest therein expires; this occurs following the post-event processing. We point out, however, that we may have to observe tax and commercial retention periods here. 

12. Data Transmission 

Transmission of your data to third parties does not generally take place unless we are legally required to do so, the transfer of data is necessary for the execution of the contractual relationship, or you have previously expressly consented to the disclosure of your data. 

External service providers and partner companies, such as the delivery service provider of our newsletter, only receive your data to the extent necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the required minimum. Insofar as our service providers come into contact with your personal data, we ensure within the scope of order processing pursuant to Art. 28 GDPR that they comply with the provisions of the data protection laws in the same way. Please also note the respective data protection notices of the providers. The respective service provider is responsible for the content of external services, whereby we check the services for compliance with legal requirements within the scope of reasonability. 

We place value on processing your data within the EU / EEA. 

13. Data Security 

We have taken extensive technical and operational safety precautions to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

 
14. Changes to the Privacy Policy

We reserve the right to change or adapt this privacy policy at any time in compliance with applicable data protection regulations. As of October 2023