Privacy

The protection of your personal data is of the utmost importance for ECCG GmbH (TheComplianceTraining) and therefore you will find the following information in our privacy policy …

… General information about ECCG GmbH

… General information on data processing

… Information on our data processing activities

​… Information on required data transmissions

… Information on the protection of your data and your rights

… Information about Cookies

If you have any questions or uncertainties regarding data protection, you can contact our data protection officer using the options listed in I.

I. General Information about ECCG GmbH

Responsible in the sense of the General Data Protection Regulation (GDPR), as well as the BDSG-neu is:

European Center for Corporate Governance (ECCG) GmbH

Wilhelm-Leuschner-Str. 9

63179 Obertshausen

Germany

Telephone: 06104/775-1000

E-Mail: contact@thecompliancetraining.com

Website: https://www.thecompliancetraining.com/

Contact information of the Data Protection Officer (DPO)

DPO can be contacted via:

European Center for Corporate Governance (ECCG) GmbH

Wilhelm-Leuschner-Str. 9

63179 Obertshausen

Germany

Telephone: 06104/775-1000

E-Mail: datenschutz@eccg.info

II. General Information on Data Processing

1. Scope


Generally, ECCG GmbH processes your personal data only in order to be able to present contents and services for a well working website and to make contact with you. We always ask for your consent to process your personal data, unless the processing is allowed anyway, e. g. due to legal requirements.


2. Legal Basis

​The legal basis for the processing of your personal data results from Art. 6(1) of the EU General Data Protection Regulation (GDPR).


In case that your consent is required for the processing of your personal data, this results from Art. 6(1)(a) GDPR.


If the processing of your personal data is necessary for the fulfilment of a contract or pre-contractual measures, Art. 6(1)(b) GDPR serves as the legal basis.


Art. 6(1)(c) GDPR is the legal basis for the processing of your personal data for the fulfilment of legal obligations on behalf of ECCG GmbH.


For the protection of vital interests Art. 6(1)(d) GDPR is the legal basis, for public interests Art. 6(1)(e) GDPR applies.


If the processing of personal data is necessary to safeguard legitimate interests of ECCG GmbH or other third parties and the interests, basic rights and fundamental freedoms of the persons concerned do not outweigh, Art. 6(1)(f) GDPR is the legal basis.


III. Information on our Data Processing Activities


Visiting and Using our Website

1. Description and Scope of Data Processing


Whenever you visit our website https://www.thecompliancetraining.com/, we automatically collect information and data from your computer system or mobile device. In this context, we receive the following data:

a. Information on browser type and used version

b. Operating system

c. Internet-Service-Provider

d. Your IP address

e. Date and time of your access

f. Website from which you access https://www.thecompliancetraining.com/

g. Websites that are called up by your system via our website


We store the collected data in log files of our system. We do not store this data together with your other personal data.


2. Legal Basis for the Data Processing


Art. 6(1)(f) GDPR is the legal basis for the temporary storage of data and log files.


3. Purpose of Data Processing


For the duration of your session it is necessary to save your IP address in order to deliver our website to your computer or mobile device.

The uniform storage in log files ensures the functionality of our website and makes an important contribution to the security of the IT systems of ECCG GmbH. Furthermore we use the data to improve our online offer.

Finally, this is also the reason for our legitimate interest in data processing.


4. Duration of Storage

We delete stored log files after seven days. In case, we would need log files for a longer period for the purposes aforementioned, we would anonymize or delete your IP address rendering an allocation to you impossible.


5. Right to object and right to erasure

Clients or website visitors have the right of objection. Since the data is absolutely necessary for the provision of our website, you would not be able to use our website afterwards.


Communication with the client or website visitor


A. Contact form

1. Description and Scope of Data Processing


In order to send a message to ECCG GmbH you may use the contact form of our website. In this context, we receive the following data:


a. First name

b. E-Mail address

c. Telephone number

d. Company name

e. Company address

f. Content of your message


These data are also stored at the time the message is sent


a. Your IP address

b. Date and time


The data will only be used to process your request and will not be passed on to third parties.


2. Legal Basis for the Data Processing

Art. 6(1)(a) GDPR and thus your consent (given by you when submitting the contact form) constitutes the legal basis for data processing.


3. Purpose of Data Processing

Processing of contact initiated by clients or website visitors and prevention of misuse of the IT systems of ECCG GmbH.


4. Duration of Storage

The personal data collected when submitting a message via contact form to us will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified. Further data, collected when submitting the message, will be deleted within 7 days at the latest.


5. Right to object and right to erasure


The client or website visitor may revoke his or her preliminiary granted consent at any time. In this case all data that has been accumulated by using the contact form will be deleted immediately and the processing of a still open request sent by contact form will be terminated.


B. E-Mail

1. Description and Scope of Data Processing


In order to send a message to the ECCG GmbH an e-mail can be sent to the e-mail address https://contact@eccg.eu/. All player data sent with the e-mail will be saved.


a. E-mail address

b. E-mail contents and attachments


All data will only be used to process your request and will not be passed on to third parties.


2. Legal Basis for the Data Processing

Art. 6(1)(f) GDPR and thus our legitimate interests, constitutes the legal basis for data processing.


3. Purpose of Data Processing

It is a legitimate interest of ECCG GmbH to answer player requests received by e-mail as soon as possible, as well as to prevent misuse of the IT systems of ECCG GmbH.


4. Duration of Storage

The personal data collected in the course of e-mail communication will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified.


5. Right to object and right to erasure

The client or website visitor may object to the storage of his or her personal data at any time. In this case, the conversation with the client or website visitor cannot longer be maintained.


C. Telephone

1. Description and Scope of Data Processing


You may contact ECCG GmbH via telephone number +49 6104/809 364 00 to get in touch with us.

In this context, we receive the following data:


a. First name

b. Last name

c. E-Mail addres

d. Telephone number

e. Content of the conversation


All data will only be used to process your request and will not be passed on to third parties.


2. Legal Basis for the Data Processing

Art. 6(1)(f) GDPR and thus our legitimate interests, constitutes the legal basis for data processing.


3. Purpose of Data Processing

It is a legitimate interest of ECCG GmbH to answer client calls and appropriate requests as soon as possible.


4. Duration

The personal data collected in the course of telephonic communication will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified. If a recall will be stipulated during the clarification phase, no matter from which side, the data will be stored, but will be deleted seven days after the last telephone call took place at the latest.


5. Right to object and right to erasure

The caller can object to the storage of his personal data at any time. However, this means that telephone communication can no longer take place.


IV. Information on required data transmissions


Associated Companies / Group Companies

All collected and personal data will be made available by ECCG GmbH to associated companies within the group of companies.


1. Description and Scope of Data Processing

All processed data, for example, when visiting the website or getting in touch with us, and mentioned in this privacy policy will be also made available to associated companies within the group of companies for the purposes described below.


2. Legal Basis for the Data Processing

Art. 6 para. 1 lit. f DSGVO and thus our legitimate interest in being able to offer you our services fully, continuously and in line with the latest trends represents the legal basis for data processing.


3. Purpose of the Data Processing

ECCG GmbH offers comprehensive services of different disciplines at the highest level. The expertise of our professionals contributes a considerable part on this and is allocated over various companies associated with ECCG GmbH. In order to present the comprehensive services across all disciplines, a data transfer, strictly limited to associated companies, is essential.


4. Duration of Storage

As soon as data stored at ECCG GmbH has to be deleted, the corresponding data stored at associated companies within the group of companies will also be irretrievably removed.


5. Right to object and right to erasure

In case, personal data that is processed in connection with art. 6(1)(a) GDPR and thus with the client’s or website visitor´s consent, a revocation is sufficient to prohibit further processing. In case, data is processed in connection with art. 6(1)(b) GDPR and thus by contract, the termination of the contract closed with ECCG GmbH is necessary to stop the data processing. In order to end the processing of data, which is carried out in connection with art. 6(1)(f) GDPR, an objection of your consent is necessary, which will be only effective for the future.


V. Informationen on the Protection of Your Data and Your Rights


Your rights as data subject

1. Right of access (Art. 15 GDPR)

You have the right to be informed whether and which personal data we process from you. In accordance with GDPR, we will provide you with a summary of your personal data on request. In accordance with the GDPR, we have a 30-day period to respond to your request for information.


2. Right to rectification (Art. 16 GDPR)

If you inform us that data processed by us on your behalf is incorrect or incomplete, we will adjust it immediately after positive verification.


3. Right to erasure (Art. 17 GDPR)

We delete personal data immediately on request, provided that none of the reasons stated in art. 17 GDPR oppose this. Deletion can always only take place for the future.


4. Right to restriction of processing (Art. 18 GDPR)

If you wish, we will restrict the processing of your data if one of the conditions specified in the GDPR applies.


5. Notification obligation (Art. 19 GDPR)

We will inform recipients (e. g. data processors) of any requests for personal data that we have received, if you have sent us a request to correct, restrict or delete your personal data.


6. Right to data portability (Art. 20 GDPR)

Upon request, we will provide your data in a generally used, machine-readable format and will transfer your personal data to another responsible person upon request.


7. Right to object (Art. 21 GDPR)

You can object to the processing of personal data concerning you at any time, provided that the processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR.


8. Revocation

Generally, you can only revoke the processing of your personal data if you have previously given your consent in accordance with Art. 6(1)(a) GDPR. A revocation is only valid for the future.


Automated Decision Making and Profiling

ECCG GmbH carries out automated decisions on individual cases including profiling only if European or national legal provisions allow it or you have given us your explicit consent. In order to protect your rights and freedoms as well as legitimate interests, at least one natural person participates in automated decisions. If you have given your consent to the processing of your personal data for automated decisions on individual cases s including profiling, you can revoke it at any time, always for the future. Please use one of our contact channels.


International Data Transmission

In general, recipients of personal data must be located in the European Union (EU) or the European Economic Area (EEA). Otherwise, data may only be sent to third countries if there is an adequacy decision by the EU Commission, if standard data protection clauses approved by the EU Commission are used, or if approved binding corporate rules are involved or if you gave us your explicit consent. ECCG GmbH does not send any data to recipients in third countries.


​Right to lodge a complaint with a supervisory authority

​If you come to the conclusion that the processing of personal data concerning you is not in accordance with the GDPR, you have the right to lodge a complaint with a competent supervisory authority (art. 77 GDPR). An overview of the supervisory authorities in the Federal Republic of Germany can be found at

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.


Adaptions to the Privacy Policy

From time to time, ECCG GmbH may amend this privacy policy and inform you accordingly. In case, your consent is required for this – depending on the type and scope -, we will obtain it.


VI. Information about Cookies


Our website https://www.eccg.eu/ uses cookies, which are temporarily stored on your device. The respective company that places the cookie receives certain information, which is mainly used to make our website more user-friendly and to improve it. ECCG GmbH is allowed to use essential cookies without your consent (legal basis: Art. 6(1)(f) GDPR), but you have the right to object. In case you would object to the use of essential cookies, it cannot be excluded that our website can no longer be used to its full extent, as e. g. page navigation, language settings or the display of secure parts of our website may no longer function properly. For the use of non-essential cookies, e. g. for marketing or analysis purposes, your active consent is required (opt-in procedure), whereby Art. 6(1)(a) GDPR forms the legal basis for this. When you visit our website, you can give us the necessary consent or refuse to give it by clicking on the appropriate boxes in the cookie banner. You can also deactivate cookies in the settings of your internet browser or restrict their functions. Previously stored cookies can also be deleted directly. Restrictions implemented in your web browser may also lead to restrictions in the functionality of the website.


Cookies

a. Essential technical cookies:

/


b. Non-essential preferenical cookies:


i. Name: wpml_browser_redirect_test

Provider: https://eccg.eu/

Purpose: Storage of language of website user.

Expiry: Session

Data is sent to: France


C. Non-essential statistical cookies:


i. Name: symfony

Provider: https://pro.ispringcloud.eu/

Purpose: Noticing product added to the shopping cart.

Expiry: Session

Data is sent to: Germany


d. Cookies de marketing no esenciales:

/


mi. Otras cookies no esenciales:


i. Nombre: browser_has_html5_support

Provider: https://pro.ispringcloud.eu/

Propósito: Incorporación de e-learning al sitio web

Expiry: Session

Data is sent to: Germany


ii. Nombre: Id. del par de claves de CloudFront

Proveedor: https://ispringcloud.eu/

Propósito: Incorporación de e-learning al sitio web

Expiry: Session

Data is sent to: Germany


III. Nombre: Política de CloudFront

Proveedor: https://ispringcloud.eu/

Propósito: Incorporación de e-learning al sitio web

Expiry: Session

Data is sent to: Germany


IV. Nombre: CloudFront-Signature

Proveedor: https://ispringcloud.eu/

Propósito: Incorporación de e-learning al sitio web

Expiry: Session

Data is sent to: Germany


v. Nombre: preparado_content_viewed_stat_data_538

Provider: https://pro.ispringcloud.eu/

Propósito: Incorporación de e-learning al sitio web

Caducidad: persistente

Data is sent to: Germany


vi. Nombre: test_cookie_521

Proveedor: profesional. https://ispringcloud.eu/

Propósito: Incorporación de e-learning al sitio web

Expiry: Session

Data is sent to: Germany