Privacy Policy

Preamble

We are delighted that you have visited our learning platform and are interested in the AI Campus and its activities. The AI Campus offers you the opportunity to participate in free online learning opportunities on the subject of artificial intelligence. As a registered user, you can access the course content (videos, quizzes, learning materials) and AI tools. In addition, the discussion forum and learning groups are available for exchange among course participants.

When registering for our learning opportunities, it is necessary to collect and store personal data. We take the protection of your personal data seriously and want you to feel safe and comfortable as a user of our learning platform. We are committed to data privacy in accordance with the EU General Data Protection Regulation (EU GDPR) and receive regular training in the areas of data protection and data security. Below, we would like to explain how we protect your data and what this means for you when you use our (online) services.

You can access this privacy policy on every page of our website by clicking on the ‘Privacy’ link at the bottom of the page and print and/or save it using your browser's functions.

General

We have summarised the most important points and principles of this privacy policy for you:

  • Responsible for the processing of your data on the AI Campus is the Stifterverband für die Deutsche Wissenschaft e.V., which, in its role as operator of this learning platform, is hereinafter referred to as ‘AI Campus’.
  • The AI Campus always strives to minimise the collection of personal data: to participate in our courses, you only need to provide your name, a username and your email address and choose a password. Any additional information (such as age, gender, professional situation, etc.) helps us to improve our services, but is voluntary.
  • The AI Campus uses your personal data to issue your performance records and your name will appear in the discussion forums if you participate there. Please note: other users can see your real name in the forums unless you specify a different display name in your profile. Your email address will be used to send you information about learning opportunities you have registered for, as well as announcements about new AI Campus offerings and information about changes to the platform.
  • With your consent, AI Campus will pass on your personal data to professional bodies if these are required to automatically recognise the performance records as continuing education credits or continuing education hours upon successful completion of our courses.
  • The AI Campus evaluates pseudonymised data sets as part of research work aimed at improving your learning success and our offerings.
  • The AI Campus is happy to assist you in exercising your rights with regard to your personal data. The contact point for this is info@ki-campus.org.

Below, we explain the individual points of the privacy policy in more detail.

I. Name and address of the controller

Data controller

The Stifterverband für die Deutsche Wissenschaft e.V. is responsible for data processing in accordance with Art. 26 GDPR for the fulfilment of information obligations and the processing of data subject rights:

Stifterverband für die Deutsche Wissenschaft e.V.
Barkhovenallee 1
45239 Essen  
Tel.: + 49 201 8401-0 
Fax: + 49 201 8401-255

Data protection officer

The data protection officer of the contact point is:

TÜV Informationstechnik GmbH
TÜV NORD Group
IT Security, Business Security & Privacy
Langemarckstraße 20
45141 Essen
Deutschland
T 0201 8999-461
F 0201 8999-666
Email: privacyguard@tuvit.de

II. General information on data processing

1. Scope of personal data processing

We collect and use personal data from our speakers, event participants, visitors to our website and subscribers to our newsletter only to the extent necessary to provide our services. The collection and use of personal data of our users is carried out regularly only with their consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

This website and the associated mobile apps also offer content for users under the age of 16. In this case, the consent of the legal guardian is required for registration. This must be sent in advance to info@ki-campus.org.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the aforementioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

III. Data processing in connection with the use of our website

1. Provision of the website and log files

a. Description and scope of data processing

Each time you visit our website, our system automatically collects data and information from the computer system of the requesting computer.

The following data may be collected:

  • Information about your browser (type and version)
  • Information about your operating system (type and version)
  • Your Internet service provider
  • Name of the website requested
  • IP address of the computer you are using to access the website
  • Date and time of access
  • Websites from which you accessed our website (so-called referrer URL)
  • Websites that you access via our website
  • HTTP error code and error message (in the event of faulty requests)

The data is stored in the log files of our systems. This data is used exclusively for finding and repairing errors (e.g. in the platform software or server configuration). Log files are stored for a maximum of 4 weeks. This data is not stored together with other personal data.

b. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

c. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Storage in log files is done to ensure the functionality of the website. The data also helps us to optimise the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.

d. Duration of storage

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to assign them to the requesting client.

2. Use of cookies

a. Description and scope of data processing

Our website uses cookies. Cookies are small files that are stored on your data carrier and store certain settings and data for exchange with our system via your browser. Cookies help us, for example, to implement basic functions of our platform, such as keeping you logged in across multiple interactions. There are two different types of cookies: session cookies, which are deleted as soon as you close your browser, and temporary cookies, which are stored on your data carrier for a longer period of time. This storage helps us to design our website and our offers for you accordingly and makes it easier for you to use, for example by storing certain entries you have made so that you do not have to repeat them constantly.

The cookies we use are mostly so-called session cookies, which are used to identify you during your visit. Session cookies expire automatically at the end of the session.

In addition, we use temporary cookies to store user settings in your browser, such as the language of the subtitles or the volume in the video player. If you consent to our use of your anonymised data for web analysis, we store temporary cookies with a lifetime of one week as part of the web analysis tool ‘Matomo’.

No personal data is stored in the cookies we use. The cookies are therefore not attributable to a specific person and therefore not to you. Furthermore, we do not link the data stored in the cookies to your personal data.

If you wish to object to the storage of cookies, you can deactivate the storage of cookies in your browser, restrict it to certain websites or set your browser to notify you as soon as a cookie is sent. You can also delete cookies from your PC's hard drive at any time. Please note, however, that you will not be able to use our website if you refuse to accept session cookies.

b. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR for technically necessary cookies and Art. 6 para. 1 lit. a GDPR for cookies for analysis purposes.

c. Purpose of data processing

The purpose of using these cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

Cookies are used for analysis purposes to improve the quality of our website and its content.

d. Duration of storage, objection and removal options

Cookies are stored on the user's computer and transmitted to our site. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. If cookies are already stored, they can be deleted at any time, even automatically. If cookies are deactivated for our website, it may not be possible to use all functions of the website to their full extent.

3. Newsletter

a. Description and scope of data processing

If you subscribe to one of our newsletters, ‘AI Campus Newsletter’ and ‘AI Campus Recommendations,’ we require your email address as mandatory information in order to send you the newsletter. All other information is optional. Your data will only be used to send you our newsletter. You will first receive an email with a link that you must click to confirm that you wish to receive the newsletter (‘double opt-in’). This prevents someone else from subscribing to the newsletter on your behalf. We also store your newsletter subscription and your confirmation so that we can prove that you have subscribed. Evaluations of the use of our newsletter are carried out exclusively on an anonymous basis. For the purpose of sending the newsletter, we store your data until you revoke your consent or until the newsletter is finally discontinued. If you do not confirm your newsletter subscription, we will delete your data after 24 hours. Please confirm your subscription (‘double opt-in’) within 24 hours, otherwise you will have to register again. Our employees in the areas of communication and system administration have access to your data.

b. Legal basis for data processing

The newsletter is sent on the basis of the user's registration on the website. The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR, provided that consent has been given.

c. Purpose of data processing

The email address of users is collected for the purpose of sending the newsletter. The newsletter is sent based on the registration of users on the website. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

d. Disclosure to third parties

We use the MailChimp platform to send our ‘AI Campus Newsletter’ and the Quentn platform to send our ‘AI Campus Recommendations’ newsletter.

If you subscribe to our ‘AI Campus Newsletter’, you must consent to the processing of your data and the sending of the newsletter by MailChimp. Your data will be transferred to The Rocket Science Group LLC. MailChimp is prohibited from selling your data and using it for any purpose other than sending newsletters. MailChimp's privacy policy can be found at https://mailchimp.com/legal/. You can unsubscribe from the newsletter at any time.

If you subscribe to our newsletter ‘AI Campus Recommendations’, you must consent to the processing of your data and the sending of the newsletter by Quentn. Your data will be transferred to Quentn.com GmbH. Quentn is prohibited from selling your data and using it for purposes other than sending newsletters. Quentn's privacy policy can be found at https://quentn.com/de/datenschutz. You can unsubscribe from the newsletter at any time.

e. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The email address of users will therefore be stored for as long as the newsletter subscription is active. The newsletter is sent on the basis of the user's registration on the website. The other personal data collected during the registration process will generally be deleted after a period of seven days.

f. Right to object and right to erasure

Users can unsubscribe from the newsletter at any time. For this purpose, each newsletter contains a link that also allows users to revoke their consent to the storage of personal data collected during the registration process.

4. Contact form and email contact

a. Description and scope of data processing

A contact form is available on our website, which can be used to contact us electronically. If you make use of this option, the data entered in the input mask will be transmitted to us and stored. This data includes:

  • Surname, First Name
  • Email address
  • Date and time of contact

Alternatively, you can contact us via the email address provided. In this case, your personal data transmitted with the email will be stored. The data will be used exclusively for processing the conversation. The data will be deleted no later than 3 months after the last communication, unless statutory retention periods apply.

b. Legal basis for data processing

The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR if the user has given their consent.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

c. Purpose of data processing

The processing of personal data from the input mask is used solely for the purpose of processing the contact request. In the event of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

d. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected, unless tax or commercial law retention and documentation periods require longer storage.

The personal data collected additionally during the sending process will be deleted after a period of seven days at the latest.

e. Right to object and right to erasure

You have the right to withdraw your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In this case, your data will be deleted by us. In this case, please contact us by email at info@ki-campus.org.

All personal data stored in the course of contacting us will be deleted in this case.

5. Chatbot

a. Description and scope of data processing

- In accordance with the EU AI Act, we operate a chatbot on our website that was developed by the company scieneers. The chatbot is used to automatically answer user enquiries about our services. When using the chatbot, anonymised personal data is processed. This includes: the content you enter in the chat,

- the IP address,

- the date and time of the enquiry,

- the browser and operating system used (user agent),

- location data (e.g. for mobile devices),

- language settings and other technical metadata.

Communication via the chatbot is logged anonymously in order to improve service quality and to be able to trace technical problems. Data is transferred to the provider within the scope of technical provision and, if necessary, for analysis of chat usage.

b. Legal basis for data processing

The data is processed on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in efficient and user-friendly communication with website visitors.

If the chatbot is only used after active consent has been given via the cookie consent tool, Art. 6 para. 1 lit. a GDPR is the additional legal basis.

Within the meaning of the EU AI Act, the chatbot is classified as an AI application with ‘limited risk’ and not as an application with ‘high risk’. This entails transparency requirements (see https://www.bitkom.org/Bitkom/Publikationen/Umsetzungsleitfaden-zur-KI-Verordnung-EU-2024-1689).

c. Purpose of data processing

The purpose of data processing is to provide an interactive communication channel through which visitors can quickly and easily obtain information or communicate concerns. In addition, usage data may be statistically evaluated in order to optimise the chatbot from a technical perspective.

d. Duration of storage

The data processed via the chatbot will be stored for the duration of the processing of your request and then deleted, unless there are legal storage obligations. Chat logs are automatically deleted as soon as they are no longer required for support or security purposes.

e. Right to object and right to erasure

You can object to the processing of your personal data at any time. In this case, you will no longer be able to use the chatbot. If processing is based on consent, you can revoke this consent at any time with future effect, e.g. via the cookie settings tool or by sending a message to the contact address below.

Furthermore, you have the right to information, correction or deletion of your data in accordance with Art. 15 ff. GDPR.

6. JavaScript and Microsoft Azure

We use JavaScript to implement basic functions and to increase the user-friendliness of our website. JavaScript does not store any personal data. If you disable JavaScript in your browser settings, you will only be able to use our services to a very limited extent.

For reasons of better usability, our website loads parts of so-called ‘static resources’, i.e. files that rarely change and are often quite large, such as JavaScript (JS), Cascading Style Sheets (CSS) or images from a so-called Content Delivery Network (CDN). Some course videos are also loaded from the CDN. CDN operators run servers in many locations around the world and mirror our static resources on each of these servers. When your browser downloads one of these files, you are always connected directly to the nearest – and therefore fastest – CDN server. The CDN providers are informed which of our pages you have visited (‘referrer URL’). They also receive your IP address.

The CDN for the AI Campus is Microsoft Azure Edge. Azure Edge is provided by Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. The data protection officer responsible for the EEA can be contacted at: Microsoft Ireland Operations Limited, Attn: Data Protection Officer, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

7. Use of Matomo

a. Description

In order to continuously improve our offering, we use the open source web analytics software Matomo.

Matomo enables us, for example, to obtain real-time reports on the number of visitors, the search engines used and the search terms that led users to our offering.

This helps us to optimise our website and tailor it to your needs.

Unlike web analytics tools from external providers, Matomo offers the advantage that the analysis is carried out by the responsible body (see section A) itself and not by external service providers, i.e. no data (in particular your IP address) is transferred to third parties.

The use of Matomo is based on your voluntary consent, which you generally give when you visit the website for the use of cookies. When you visit the website again, you can change the cookie settings you selected as the basis for your consent.

b. Storage & opt-out

Matomo uses cookies that are stored on your computer and enable an analysis of your use of the website (see also Section III, 2. D). These cookies have a lifetime of one week. The information generated by the cookie about your use of this website is stored on our server.

You can object to tracking with Matomo at any time via your browser settings (‘Do Not Track’) or in your user profile.

c. Anonymisation of your IP

We would also like to point out that Matomo is used on this website with the ‘Anonymize_IP’ function. This ensures that your IP address is collected anonymously (so-called IP masking). Your IP address is only stored in abbreviated form, which ensures anonymity and does not allow any conclusions to be drawn about your identity.

d. Purpose

In order to continuously improve our offering, we use the open source web analytics software Matomo.

e. Third-party providers

Further information about Matomo is available at the following address: https://matomo.org/what-is-matomo/

8. Social media

All links to social media profiles are set as external links, so that no personal data is transferred to the profiles when the page is accessed. This only happens when the social media buttons are used.

a. Use and application of LinkedIn

Our website links to our social media profile on LinkedIn. This is done by integrating a LinkedIn button on the website. LinkedIn is an internet-based social network that allows users to connect with existing business contacts and establish new business contacts.

LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA.

If you are logged into LinkedIn at the same time, clicking on the LinkedIn button will assign this information to your personal LinkedIn user account and this personal data will be stored by LinkedIn. If you do not want this information to be transferred to LinkedIn, you can prevent this by logging out of your LinkedIn account before visiting our website.

The privacy policy published by LinkedIn, which can be found at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_join-form-privacy-policy, provides information about the collection, processing and use of personal data by LinkedIn.

b. Use and application of Instagram

Our website uses social plugins (‘plugins’) from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an ‘Instagram camera’.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the United States and stored there.

If you are logged in to Instagram, Instagram can immediately associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the ‘Instagram’ button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.

The purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and settings options for protecting your privacy, can be found in Instagram's privacy policy:

https://help.instagram.com/155833707900388/

We base this processing on Art. 6 para. 1 sentence 1 lit. f GDPR. This legal basis permits the processing of personal data within the scope of the ‘legitimate interest’ of the controller, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest lies in analysing the use of our website.

If you do not want Instagram to associate the data collected via our website directly with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading by using add-ons for your browser, e.g. the script blocker ‘NoScript’ (http://noscript.net/).

c. Use and application of YouTube

Our website links to our social media profile on YouTube. This is done by integrating a YouTube button on the website. YouTube is an internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is a subsidiary of Google LLC. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you are logged in to YouTube at the same time, clicking on the YouTube button will assign this information to your personal YouTube user account, and this personal data will be stored by YouTube. If you do not want this information to be transmitted to YouTube, you can prevent this by logging out of your YouTube account before visiting our website.

The privacy policies published by YouTube and Google, which can be found at https://policies.google.com/privacy?hl=de&gl=de, provide information about the collection, processing and use of personal data by YouTube and Google.

d. Use and application of Vimeo

Our website displays content from the video portal Vimeo.com. Vimeo.com is operated by Vimeo LLC, 555 West 18th Street, New York, NY 10011, USA. When you visit one of our pages equipped with our video player, a connection to the Vimeo servers is established. Vimeo is informed which of our pages you have visited (‘referrer URL’). Vimeo also receives your IP address.

Further information on how your data is handled can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.

e. Use and application of TikTok

Our website links to our social media profile on TikTok. This is done by integrating a TikTok button on the website. TikTok is a social network that allows users to create, share and discover short video clips, with a particular focus on creativity and entertainment.

TikTok is operated by TikTok Inc., 5800 Bristol Parkway, Suite 100, Culver City, CA 90230, USA. TikTok Technology Limited, The Sorting Office, Ropemaker Place, Dublin 2, Dublin, D02 HD23, Ireland, is responsible for data protection issues within Europe.

If you are logged into TikTok at the same time, clicking on the TikTok button will assign this information to your personal TikTok user account and this personal data will be stored by TikTok. If you do not want this information to be transferred to TikTok, you can prevent this by logging out of your TikTok account before visiting our website.

The privacy policy published by TikTok, which can be found at https://www.tiktok.com/legal/privacy-policy, provides information about the collection, processing and use of personal data by TikTok.

f. Use and application of BlueSky

Our website links to our social media profile on BlueSky. This is done by integrating a BlueSky button on the website. BlueSky is a decentralised social network that allows users to exchange text posts and content, relying on open protocols and interoperability.

BlueSky is operated by Bluesky PBLLC, 548 Market Street PMB 72878, San Francisco, CA 94104–5401, USA.

If you are logged in to BlueSky at the same time, clicking on the BlueSky button will assign this information to your personal BlueSky user account, and this personal data will be stored by BlueSky. If you do not want this information to be transferred to BlueSky, you can prevent this by logging out of your BlueSky account before visiting our website.

BlueSky's privacy policy is available at https://bsky.social/about/support/privacy-policy.

g. Use and application of Threads

Our website links to our social media profile on Threads. This is done by integrating a Threads button on the website. Threads is a social network primarily focused on text posts and discussions and is closely linked to the Instagram ecosystem.

Threads is operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, is responsible for the European region.

If you are logged in to Threads (or Instagram or other Meta services) at the same time, clicking on the Threads button will assign this information to your personal user account and this personal data will be stored by Meta. To prevent this, please log out of your Threads or Meta account before visiting our website.

The applicable privacy policy of Threads is part of the general Meta privacy policy and can be found at https://privacycenter.instagram.com/policy.

9. Links to external websites

Our website contains links to websites of other providers not affiliated with us. Once you click on the link, we no longer have any influence on the processing of any data transferred to third parties when you click on the link (such as your IP address or the URL where the link is located), as the behaviour of third parties is naturally beyond our control. We therefore cannot accept any responsibility for the processing of such data by third parties.

Google Ads Conversion

We use Google Ads Conversion to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Ads). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

These advertising materials are delivered by Google via so-called ‘ad servers’. For this purpose, we use ad server cookies, which allow certain parameters for measuring success, such as the display of ads or clicks by users, to be measured. If you reach our website via a Google ad, Google Ads will store a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indication that the user no longer wishes to be targeted).

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data in the advertising measures mentioned above. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement of ours. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

Recipients:

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy, https://policies.google.com/technologies/partner-sites and https://services.google.com/sitestats/de.html.

Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 GDPR have been concluded as appropriate safeguards. Further information can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=en

Deletion/revocation:

You can prevent participation in this tracking process in various ways:

a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies will prevent you from receiving third-party ads

b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin

c) by deactivating interest-based advertising from providers who are part of the self-regulation campaign ‘About Ads’ via the link https://youradchoices.com/, whereby this setting will be deleted when you delete your cookies

d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin

e) by means of the appropriate cookie settings.

We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.

Cookie lifetime: up to 180 days (this only applies to cookies set via this website).

Legal basis:

Art. 6 (1) a GDPR (consent)

IV. Collection of data in connection with registration for and participation in our events

1. Registration for our seminars and courses

a. Description and scope of data processing

On our website, we offer interested parties the opportunity to register for AI Campus events (e.g. workshops, network meetings, symposia, conferences) by providing personal data. The data is entered into an input mask, transmitted to us and stored. The following data is collected during the registration process:

  • Date and time of registration
  • Title (optional)
  • First name
  • Surname
  • University/institution
  • Field of study
  • Email
  • Personal motivation for participation
  • Desire to be informed about the work of the AI Campus by email (can be revoked at any time)

We use your data only for processing your enquiry, registration, event and complaint handling. Your data will not be passed on to third parties.

At events, you may have the opportunity to provide us with information about special needs (e.g. food intolerances, allergies). In this case, we ask for your express consent to the processing of your data and will process the data exclusively for the purpose of handling the event. Under certain circumstances, it may be necessary to pass this information on to third parties who provide the respective service, e.g. caterers, the hotel, etc. We will also ask for your consent in this case. Consent and provision of information are voluntary. However, if you do not give your consent or do not provide information about your needs, we will not be able to take your needs into account. The data will be deleted by us no later than three months after the end of the event.

b. Legal basis for data processing

The legal basis for data processing is Art. 6 (1) lit. b GDPR. In the case of notification of food intolerances, Art. 6 lit. a GDPR is the basis.

c. Purpose of data processing

Data processing is used to process and invoice the registration and to ensure the proper execution of the event.

d. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected, unless we are obliged to store it for longer due to tax or commercial law retention and documentation periods. This storage and documentation may be carried out digitally and in analogue form.

The data collected via the online registration form in accordance with V.1.a. will also be transferred to the website's content management system under the respective event and stored there. All event data (including the data collected in accordance with V.1.a.) will be deleted from the website's content management system 24 months after the end of the event.

2. Interpretation of participant lists

a. Description and scope of data processing

If you have given your consent, we also use the data of participants at events to network participants and to document the event for participants, for example by displaying or distributing lists of participants. If you have consented to receiving further information about the work of the AI Campus, we will store your data for the purpose of sending you this information until you object to this.

b. Legal basis for data processing

The legal basis for data processing with regard to checking attendance is Art. 6 (1) lit. b GDPR. The legal basis for publishing the participant lists is Art. 6 (1) lit. f GDPR.

c. Purpose of data processing

Data processing serves to ensure the proper execution of the event.

d. Right to object

You have the right to object to the publication of your name on the list of participants in accordance with Art. 21 GDPR. If you do so before the event takes place, your name will not appear on the list of participants. Please note that once the event has taken place, it is no longer possible to withdraw your consent to publication.

3. Photography at events

If expressly indicated, we also use the data of participants at events for the purpose of documenting the event through photo and film recordings, which may also be used for advertising and public relations purposes by the AI Campus and its partners, for networking among participants, and for documenting the event for participants. In doing so, the AI Campus will either ensure that there are at least sufficiently large areas in which participants can only be photographed or filmed with their express or at least implied consent, and that the areas in which photography and filming take place without express or at least implied consent are clearly recognisable, or participants can declare their objection by means of a visually recognisable, visible sign such as a name tag or a wristband in a specific colour.

We assume that your interests, rights and freedoms do not preclude this, as you have the option of withdrawing from the recordings without major restrictions. Processing is generally unlimited. However, by 31 December of the year following the end of the event at the latest, a review will be carried out to determine whether the photo and film recordings are still required and, if so, whether a time limit can be set for processing. If the review shows that, due to the significance of the event or training programme or the recordings, no time limit on processing can be set at this stage, a further review will be carried out by 31 December of the tenth year following the last review. These recordings may be made available to the general public.

4. Use of digital tools and recordings at digital events

The AI Campus conducts some of its events online using the video conferencing systems ‘Zoom’ and ‘MS Teams’. A data processing agreement in accordance with Art. 28 GDPR has been concluded with both providers. Further information on the processing of your data by Zoom can be found at https://zoom.us/de-de/privacy.html# and by Microsoft at https://privacy.microsoft.com/de-de/privacystatement.

In addition, the tools provided by Miro, Mentimeter or EasyRetro may be used in the context of digital events to collect ideas, conduct surveys, etc. Further information on the processing of your data by Miro can be found at https://miro.com/legal/privacy-policy/, by Mentimeter at https://www.mentimeter.com/privacy and by EasyRetro at https://easyretro.io/privacy/.

To attend an event, you must first register. When you register for the event, we collect the following data:

  • Date and time of registration
  • Title (optional)
  • First name
  • Surname
  • University/institution
  • Email
  • Personal motivation for participating (optional)
  • Preference to be informed about the work of the AI Campus by email (can be revoked at any time)

The data is collected solely for the purpose of granting you access to the event. We may also publish participant lists with surnames, first names and the address of the sending organisation in order to promote exchange between participants and with the speakers.

By registering, you expressly consent to this data collection.

The legal basis for data processing is Art. 6 (1) lit. a GDPR, as you consent to the aforementioned data processing when registering for the event.

Data processing is used to carry out our event. If the event is recorded and published, data processing is used for the public relations work of the AI Campus.

If we record, edit and publish the event as an image and sound recording, we will inform you of this in advance and obtain your consent during the registration process. You can revoke this consent at any time with effect for the future. We will then ensure that you will no longer be visible in the recording. If you do not wish to be seen in the video, we recommend that you turn off your video camera. You can prevent your name from being identified in the recording, e.g. in the chat or in the audio recording, by using a pseudonym instead of your real name.

V. Collection of data for our learning platform

1. Description and scope of data processing

a. Login

AI Campus only stores your name, a user name and your email address, as well as additional data in your user profile that you provide voluntarily, e.g. gender, date of birth, organisation, function or avatar image (your ‘personal data’). The data will be stored for as long as you have an active user account on the AI Campus, and beyond that, if necessary, for any additional period of time for which the AI Campus is legally obliged to retain your personal data.

b. Tracking

If you participate in our AI Campus courses that bear the title ‘Original’, the following data will be collected:

Registration, course termination, learning success

  • Name
  • Email
  • Avatar
  • Learning progress
  • Certificates
  • Contributions to the forum (including blocked contributions)
  • Peer assessment submissions
  • Activity in the learning rooms
  • Posts in the learning room forums

Data processing is used to continuously monitor the technical functionality of the platform and the acceptance and quality of the content. Data processing is therefore used exclusively for technical and content-related quality management. Access to this data is restricted to the administrators of the AI Campus and, in relation to your respective course, the lecturers who developed the course for the AI Campus learning platform. Both groups of persons have been bound by us to maintain data confidentiality.

c. Transfer of data for the crediting of continuing education credits and hours

Insofar as the AI Campus is approved as an official continuing education portal for professional organisations (e.g. medical associations), upon successful completion of the approved courses, continuing education credits or hours may be automatically credited, provided that the participants have previously consented to the transfer of their personal data to the professional organisation.

d. Support

If you require support while using our courses and send an email to our support team, the following data will be collected:

  • Location
  • User ID
  • Email

The collected data will be deleted no later than 3 months after your enquiry has been answered. After this period, data will only be used in anonymised form for the purpose of optimising the performance of the platform offering.

e. Evaluation of pseudonymised data sets

The AI Campus may pseudonymise personal data provided under this privacy policy and create pseudonymised data sets from it. These may be used to improve the AI Campus offering.

2. Legal basis for data processing

The legal basis for data processing in the public section is Art. 6 (1) lit. b GDPR. The legal basis for data processing in the non-public section is Art. 6 (1) lit. a GDPR, as you consent to the aforementioned data processing when registering for the platform.

3. Purpose of data processing

The AI Campus requires your personal data to enable you to participate in AI Campus learning offerings that you are interested in. The provision of this personal data is entirely voluntary. Unfortunately, however, we are unable to guarantee you access to the learning offerings without at least your name, a user name and your email address.

Your name and email address will also appear on your personal performance records, i.e. the ‘confirmation of participation’ or the ‘certificate’. Your date of birth will also be included here if you have provided it in your user profile. Your email address will also be used for course-related communication and to announce new courses and changes to the AI Campus platform.

4. Disclosure to third parties

In principle, your personal data will be processed by AI Campus for the purposes specified in sections II and III. In doing so, it may be necessary to pass on your data to specialised service providers and partners of AI Campus in order to provide the service you have requested. Service providers are strictly bound by a contract for order processing and are not permitted to process the data for their own purposes.

We have concluded data processing agreements (DPA) in accordance with Art. 28 GDPR with the following service providers:

- Administration of the Drupal website and the comprehensive learning platform:

LOOM GmbH

Goethestraße 2-3

Entrance B, 4th floor

10623 Berlin

- Housing and support for the Drupal system landscape:

uvensys GmbH

Robert-Bosch-Str. 4b

35440 Linden

- FAQ chatbot and AI course tutor:

scieneers GmbH

Kantstraße 1A

76137 Karlsruhe

The data processing agreements ensure that the providers process the personal data of our users only in accordance with our instructions and in compliance with the applicable data protection regulations.

5. Revocation

You have the right to revoke your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time.

In this case, your data will be deleted from our records. In this case, please contact us by email at info@ki-campus.org. Upon receipt of your revocation, you will no longer be able to use the e-learning platform, in particular access the course materials. Depending on the time of revocation, participation in webinars may also be excluded.

VI. Application for competitions & funding

On our website, we offer applicants the opportunity to register by providing personal data. The data is entered into an input mask, transmitted to us and stored. Application documents are shared with jury members for evaluation. The following data is collected during the registration process:

  • Date and time of registration
  • Email address
  • Institution
  • Name of contact person
  • Title of the learning offer
  • Content area of the learning offer
  • Subject group(s) addressed by the learning offer
  • Format of the learning offer

The data of rejected applicants will be deleted no later than 63 months after the last communication, unless statutory retention periods apply.

1. Legal basis for data processing

The legal basis for the processing of master data is Art. 6 (1) lit. b GDPR.

2. Purpose of data processing

Personal master data is processed in order to be able to review applications for scholarship funding.

3. Transfer of data to third parties

Application documents are shared with jury members who have been sworn to data secrecy for evaluation purposes. Furthermore, for some of our funding programmes, the data is transferred to the funding provider for documentation of the appropriate use of funds.

4. Data deletion and storage period

Your personal data will be deleted as soon as the purpose for which it was stored no longer applies. Deletion will take place after 6 months at the latest. This does not apply to the data of funding recipients. The statutory retention periods apply to this data.

VII. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right to information

You can request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing is taking place, you can request the following information from the controller:

  1. the purposes for which the personal data is processed
  2. the categories of personal data that are processed
  3. the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed
  4. the planned duration of storage of the personal data concerning you or, if this is not possible, criteria for determining the storage period
  5. the existence of a right to rectify or erase personal data concerning you, a right to restrict processing by the controller or a right to object to such processing
  6. the existence of a right to lodge a complaint with a supervisory authority
  7. all available information on the origin of the data if the personal data are not collected from the data subject
  8. the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information on whether the personal data concerning you is being transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to rectification

You have the right to obtain from the controller the rectification and/or completion of personal data concerning you if the personal data processed are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

3. Right to restriction of processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

  1. if you dispute the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data
  2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead
  3. the controller no longer needs the personal data for the purposes of the processing, but you require it for the assertion, exercise or defence of legal claims, or
  4. if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons

If the processing of personal data concerning you has been restricted, such data may – apart from its storage – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been imposed in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to erasure

a. Obligation to erase

You can request information from AI Campus at any time about which personal data AI Campus has stored and processed about you. You can also request the correction or deletion of your personal data at any time. Please note that AI Campus can only delete your personal data if there is no legal obligation or overriding right requiring AI Campus to retain this data. Please also note that deletion of all your personal data will result in you no longer being able to use the AI Campus platform.

Furthermore, you can request a copy of the personal data you have provided from AI Campus. In this case, please contact the data protection officer named above and provide the information and the data processing operation for which you require information. AI Campus will work with you to determine how your request can best be resolved.

You can also request that AI Campus restrict access to your personal data for further processing. This applies in the following cases:

  1. if you indicate that the personal data stored about you by AI Campus is incorrect (only if AI Campus is obliged to verify the accuracy of the relevant personal data)
  2. if AI Campus has no legal basis for processing your personal data and you request that AI Campus restrict the processing of your personal data
  3. if AI Campus no longer needs your personal data, but you determine that AI Campus is storing this data in order to give you the opportunity to exercise your rights or defend yourself against legal claims by third parties, or
  4. if you object to the processing of your personal data by the AI Campus (based on the legitimate interest of the AI Campus as set out in Section B) for the time it takes to clarify whether the AI Campus has an overriding right or a legal obligation to process your personal data.

Please address such requests to the data protection officers named above.

b. Information to third parties

If the controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17(1) GDPR, it shall take reasonable steps, including technical measures, to inform data controllers who process the personal data of the data subject's request for the erasure of all links to, or of the personal data themselves, or of the erasure of copies or replications of the personal data.

c. Exceptions

The right to erasure does not apply if the processing is necessary

  1. for exercising the right of freedom of expression and information
  2. for compliance with a legal obligation which requires processing in accordance with Union law or the law of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  3. for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
  5. for the establishment, exercise or defence of legal claims.

5. Right to information

If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to obtain information about these recipients from the controller.

6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format.

You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that

  1. the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
  2. the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services, you have the option of exercising your right to object by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

8. Right to revoke your consent to data protection

You may withdraw your consent to the processing of your personal data by AI Campus under this privacy policy at any time. As soon as you exercise this right, AI Campus will cease processing your personal data unless there is a legal obligation to do so. However, the withdrawal of your consent does not affect data processing operations that took place in the past until the time of withdrawal. You can give or withdraw your consent at any time in your settings in the AI Campus portal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  1. is necessary for entering into or performing a contract between you and the controller
  2. is authorised by Union or Member State law to which the controller is subject and that law provides for appropriate measures to safeguard your rights and freedoms and legitimate interests, or
  3. with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g applies and appropriate measures to protect your rights and freedoms and legitimate interests have been taken.

With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

If you believe that the AI Campus is not processing your personal data in accordance with the requirements set out here or the laws granted to you by the EU GDPR, you can lodge a complaint at any time with the data protection authority of the EEA member state in which you live or with the Federal Data Protection Commissioner of Germany.