1. Data Controller and Contact Information The data controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is:
WBS TRAINING AG, Lorenzweg 5, 12099 Berlin
Phone: +49 30 695450400
Email: kontakt@wbstraining.de
You can reach our data protection officer at:
DataCo GmbH
Phone: +49 89 740045840
Email: datenschutz@dataguard.de
2. What Data We Collect and Why
2.1. As an Interested Party or Participant/Student/Collegiate of Our Educational Products When you contact us via our website, social networks (e.g., LinkedIn, XING), phone, email, messenger service, or in person, we collect different personal data depending on whether you are seeking advice or entering into a contract. If you book training, further education, or coaching with us, we collect and process data necessary for contract execution. The scope depends on the product and your funding situation.
2.1.1. Data We Collect Directly from You
- Personal and contact details
- Date of birth (for contracts and certificates)
- Educational background/CV and qualifications
- Desired study program, profession, training or job
- Financing details and funding agency
- Health or criminal record (if required)
- Proof of disability (for exam accommodations)
- Training-relevant impairments and degree of disability
- Bank details (for direct debit payments)
- Residency status and country of origin
- Current German language proficiency
- Application details to German universities
- Verification of educational credentials by German institutions
2.1.2. Data We Receive from Third Parties
- Internship/cooperation company: progress, attendance, performance
- Rehabilitation providers: medical reports, LTA documentation
- BAMF: identity, eligibility, suitability for integration/DeuFöV courses
- Previous course providers (in case of transfer)
- Cooperation partners: data collected during referral
2.1.3. Data We Share with Third Parties
- Origin, education, residency status, exam results
- Freelance trainers/coaches: only necessary teaching/coaching data
- Publishers: registration data for digital learning materials
- External certifiers (e.g., DQS)
- Universities, immigration authorities, ministries, certification partners
- Internship/cooperation companies (in case of transfer)
- School authorities and education partners
2.1.4. Data Deletion We store personal data as long as necessary to fulfill legal and contractual obligations. If no longer required, data is deleted unless further processing is needed for retention obligations or legitimate interests.
2.2. Advertising You can subscribe to our newsletter via our website. We use a double opt-in process. If not confirmed within 30 days, your data is deleted. We store IP address, timestamp, and server IP for verification. You can revoke your consent at any time. Without consent, we may still send advertising for similar products to existing customers based on legitimate interest.
2.3. As a Company/Organization Contact Person We collect:
- Name and contact details
- Employer and position
- Appointment details
Purpose: contract fulfillment. Data is stored as long as necessary.
2.4. As a Participant in the „Refer a Friend“ Campaign We process data of both referrer and referred person to verify eligibility and deliver rewards. Referrer must obtain consent from the referred person.
2.5. Informational Use of Our Website We collect:
- IP address, date/time, time zone, requested content, status code, data volume, referrer URL, browser, OS, language/version
Purpose: website functionality and security. Data is stored for 6 months.
2.6. Job Applicants or Freelance Trainers We collect application data via our website or recruiters. Data includes CV, certificates, and other documents. We use Softgarden for applicant management. Data is stored for up to 6 months unless consent for longer retention is given.
2.7. Quality Surveys We conduct regular surveys for certified programs (AZAV). Data is pseudonymized and used only for quality assurance.
2.8. Lesson Recordings Some products include lesson recordings. Participation is voluntary. Recordings include comments, questions, and names.
2.9. Contact Forms We store:
- IP address, session ID, device fingerprint, interaction timestamps
Purpose: secure and error-free use of contact forms. Data is deleted after 180 days.
3. Processors and External Service Providers We use external processors under Art. 28 GDPR. If data is processed outside the EU, we ensure adequate protection via standard contractual clauses or adequacy decisions.
3.1. Use of Microsoft 365 Microsoft processes data under contract. Data may include text, audio, video, diagnostics, and metadata. Data is usually processed in the EU, but may be temporarily transferred to the US.
4. Your Rights You can contact datenschutz@wbs-gruppe.de to exercise your rights:
- Withdraw consent
- Object to processing based on legitimate/public interest
- Object to direct marketing
- Access, correction, deletion, restriction, data portability
- Lodge a complaint with a supervisory authority
5. Technologies Used We use cookies, tracking tools, targeting methods, and social media plugins. Details are provided in section 5 of the policy. Data may be transferred to the USA, which carries certain risks.
5.1. Cookies and Tracking Includes session cookies, persistent cookies, Flash cookies, Web Storage, tracking pixels. Cookies are used for functionality, analytics, personalization, and marketing.
5.2–5.20. Third-Party Services Includes CleverReach, Mouseflow, Hubspot, Google Tag Manager, Google Analytics, Google Ads, YouTube, Facebook, LinkedIn, Matelso, Userlike, edudip, FACT-Finder, Auvious, Convert, Microsoft Ads, Outbrain. Each service has its own privacy practices and legal basis for data processing.