PRIVACY POLICY

– Processing of Personal Data in the Context of the F24 Academy –

F24 AG (hereinafter referred to as “F24“, “we“, or “us“) offers an e-learning solution on the topic of crisis management (“E-Learning Solution“).

In this context, various processing of personal data takes place. F24 takes the protection of personal data very seriously and complies with the applicable statutory data protection provisions.

This Privacy Policy is intended to provide (potential) customers, including their company/shareholders, directors, contact persons or other employees (hereinafter collectively referred to as “Customer“, “Customers“, “you“, or “your“) with an overview of the purposes for which F24 processes your data in connection with the E-Learning Solution, how F24 does this and what rights F24 has against you in relation to your data.

If you are also a user of the F24 website (available at https://f24.com), please also note the privacy policy published there for the processing of personal data in connection with the provision/use of the website.

F24 AG (Ridlerstrasse 57, 80339 Munich, Germany, www.f24.com) is responsible for processing your personal data (i.e., the controller).

Contact details of the data protection officer: Datenschutz@f24.com.

  • WHAT IS PERSONAL DATA?

“Personal data” is any information relating to an identified or identifiable natural person, which in your case means any information that we can associate with you, even if this is not possible directly, but e.g., via an identification number.

  • WHERE DO WE GET THE PERSONAL DATA FROM?

Unless otherwise described below, we receive your personal data directly from you or your company if you send it to us (e.g., by e-mail, post, telephone or via the E-Learning Solution).

    • performance

We process your personal data for the establishment, performance, and termination of the contract(s) with you or your company. We receive your contract data directly from you or your company. This includes the following categories of personal data:

  • Your master data (first and last name, title),
  • if applicable, your company, including address,
  • if applicable, proof of your identity,
  • your (professional) contact details (e-mail address, telephone number),
  • correspondence with you and your company,
  • if applicable, your position.

In addition, we process the following, possibly personal, data:

  • Contract data (e.g., subject matter of the contract, term, Customer category),
  • payment data (e.g., bank details, invoices, payment history).

Under certain circumstances, we may also collect and store company-related data that we obtain from public sources (e.g., the commercial register, the press or your company’s website). These may be publications of your company and publications of third parties.

The processing includes, in particular, the billing of our services (including receivables management) as well as the communication with you required for the performance of the contract.

For the purpose of executing/fulfilling the contract, we may also transfer your personal data to processors and third parties – namely computing and storage service providers, service providers for the labelling of data, printing and shipping service providers, back office/IT service providers, credit institutions, payment service providers, service providers for receivables management and advertising material service providers/agencies – and vice versa.

The legal basis for the processing of your personal data is Art. 6 para. One sent. 1 b) or f) of the EU General Data Protection Regulation (“GDPR“). Insofar as we base the processing on a legitimate interest, such interest lies in initiating and fulfilling contracts with your company or in ensuring that your identity is correct.

Insofar as third parties are not acting as processors for us, the legal basis for the disclosure/transfer and further processing of your personal data to or by these third parties is also Art. 6 para. 1 sent. 1 b) or f) GDPR. In these cases, it is a matter of performing services that we cannot provide ourselves but which are necessary for the performance of the contract(s). We, therefore also have a legitimate interest in having such services performed by third parties and disclosing or transferring the personal data required for this to them.

If there is a particular risk of non-payment, we may carry out an address and/or credit check before concluding a contract with you or your company and take the results of this check into account when deciding whether to conclude a contract with you. If the are negative, we may refuse a contractual relationship with you or your company or make the conclusion of the contract subject to further conditions (e.g., different payment method).

In order to obtain address/creditworthiness information, we transfer the data you provide when initiating the contract to a credit agency. The legal basis for these transfers is Art. 6 para. 1 sent. 1 b) or f) GDPR. We have a legitimate interest in avoiding or minimizing credit risks and bad debt risks. The processing of the data by the abovementioned company(/ies) serves this legitimate interest and is carried out within the framework of the requirements of Section 31 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – “BDSG“). Address data may be used to calculate creditworthiness values, but the calculation is not based solely on address data.

  • Implementation of further measures at your instigation

If you and/or your company initiate/s further measures by us that are not already specified in sections 4.1 to, these measures may require further data processing. In this respect, the legal basis is generally Art. 6 para. 1 sent. 1 b) or f) GDPR. Insofar as we base the processing on a legitimate interest, such interest lies in the handling and, if necessary, implementation of measures initiated by your company or by you as a contact person (or in any other capacity) for your company.

  • Processing due to legal obligations / further recipients

Particularly in the context of the performance of the contract, the fulfilment of legal obligations (especially from commercial, corporate and tax law) requires us to process certain personal data (e.g. for accounting purposes or the fulfilment of rights to information under corporate law). The legal basis for such processing is Art. 6 para. 1 sent. 1 c) GDPR. In this context, we may disclose or transmit your personal data to affiliated companies (Section 15 of the German Stock Corporation Act (Aktiengesetz); legal entities regardless of their legal form), tax consultants, accountants, auditors, lawyers, public offices and authorities as well as courts.

  • Further purposes

Insofar as we intend to use your personal data for further purposes beyond the abovementioned purposes, we will assess whether these further purposes are compatible with the initial purposes within the meaning of Art. 6 para. 4 GDPR and whether we need to inform you separately. Depending on the circumstances, we will inform you of the change of purpose and obtain your consent for further processing.

  • No automated decision-making

There is no automated decision-making, including profiling, as referred to in Art. 22 para. 1 and 4 GDPR.

  • DATA TRANSFERS TO COUNTRIES OUTSIDE THE EUROPEAN UNION (“EU”) / EUROPEAN ECONOMIC AREA (“EEA”)

As a matter of principle, F24 does not transfer your personal data to countries outside the EU/EEA in the cases mentioned in section 4. However, if this should become necessary, F24 has – unless an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR exists for this country – implemented appropriate safeguards pursuant to Art. 46 GDPR to ensure an adequate level of protection. These safeguards are usually EU standard contractual clauses pursuant to Art. 46 para. 2 c) GDPR and can be provided by F24 upon request.

  • DURATION OF STORAGE AND DELETION OF YOUR DATA

Unless otherwise described above, we delete your personal data when the purpose of the processing has been fulfilled or the contractual relationship with you or your company has ended, all mutual claims have been satisfied and, unless there are other statutory retention obligations (in particular under the German Fiscal Code (Abgabenordnung) or the German Commercial Code (Handelsgesetzbuch)) or legal bases (e.g. your consent) for further processing.

  • DATA SECURITY

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Insofar as we process your personal data, you are entitled to the following rights pursuant to Art. 12, 15 et seq. GDPR:

  • Right to information
  • Right to rectification or erasure and, if necessary, restriction of processing
  • Right to data portability
  • Right to object to further processing

You have the right to object to the processing of your personal data for direct marketing purposes at any time without giving reasons.

If we process data on the basis of our legitimate interests (Art. 6 para. 1 sent. 1 f) GDPR), you have the right to object to such processing at any time on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

  • If you have given us separate consent, you can withdraw your consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.

You are welcome to contact us to exercise your rights as well as for general questions regarding the processing of your personal data via the contact details provided in section 1.

In addition, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us. A list of German supervisory authorities and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

***

July 2023