Privacy policy

Welcome to eiIET's Privacy Notice

The European Institute of Innovation, Entrepreneurship, and Technology (eiIET) always prioritises keeping personal data secure, and we respect the privacy of everyone who comes with us. The privacy policy gives you all the information you need about how we collect your data, how we use it, and how secure it is with us. And also your legal rights and how the law protects you.

The intention of this Privacy Notice

1) Deliver the personal data by any other means or

2) Login for marketing materials

3) Enquiry form/a callback

4) Vising our website or mobile app from social media platforms like Facebook, Snapchat, Twitter, Pinterest, Instagram, Vkontakte, Unibuddy, WhatsApp, or any similar platforms.

5) When you register on our website for Enquiry, apply for any course (online, full-time, or part-time), or when you apply for employees or staff at your company, which may lead them to become customers of ours.

We do not intend to collect any data relating to children under 14 on this website, which is not for children. However, where it collects the personal data of children in the field of business or marketing, we ensure that we will take proper measures to protect and safeguard the data and obtain the parent's/guardian's consent before collecting. For further information about this, you can contact us at dpm@eiiet.com.

Important: You must read and be fully aware of the privacy policy on our website regarding the understanding of the information we collect from you and how we process it.

1. Important information and who we are

Data Controller

This website is managed by the European Institute of Innovation, Entrepreneurship, and Technology, a company registered in Germany with the number HRB 259669 B and its registered office at Lessingstraße 79, 13158 Berlin, Germany.

eiIET has a designated data protection manager (DPM) who will be in charge of this data-protecting privacy policy. If you have any inquiries about this privacy policy, including any requests regarding your legal rights, please always contact the DPM using the details below.

Contact details

Name of legal entity data controller: European Institute of Innovation, Entrepreneurship, and Technology (eiIET).

Data Protection Manager in charge: Meenu Antony

Data Protection Email address: dpm@eiiet.com

In this notice, there will be changes from time to time. Any modifications we may make in the future will be posted on this page. Please examine frequently to see any updated changes.

Necessary: The personal data we hold about you must be correct and current. Please keep us informed about any updates to your data during your journey with us.

Third-party loops

Our website may contain links to third-party websites. Clicking on those loops or visiting those websites may permit third parties to access and share your personal data. We are not accountable for these third-party website privacy statements and have no authority over these third parties. We advise you to read the privacy policy of every website you visit.

2. Information we collect from you

Personal data: or personal information, refers to any information related to an identifiable individual. This includes details that can directly identify a person, such as their name, address, phone number, email address, or identification number.

We have some standard documents that we collect, use, store, and share, which may include:

Identification Documents: include a passport, driver's licence, national ID card, or similar government-issued documents.

Education and Employment Records: contain academic certificates, employment contracts, and professional licences.

Contact data includes a phone number, email address, postal address, social media profiles, emergency contacts, and communication preferences.

Employment data: involves a resume or curriculum vitae (CV), cover letter, job application form, offer letter, payroll information, performance reviews, training certificates, employee handbook, termination letter, or similar employment data.

Financial data: contains bank statements, loan agreements, invoices and receipts, insurance policies, or similar financial data.

Marketing and Communication Data: It may include prospectuses and brochures, a public relations kit, a social media content calendar, internal communication guidelines, website content, email campaigns, student requirements materials, press releases, and event promotion materials.

Technical data: involves hardware inventory, data backups and recovery plans, software documentation, security policies and procedures, network diagrams, training materials for IT staff, and system architecture documentation.

Usage Data: contains financial transaction records, system logs, research data, attendance and participation records, surveys and feedback data, the learning management system (LMS), website and app usage data, login and authentication data, communication metadata, and library usage data.

Visa data: Visa data collected by an institution, such as a university or business, typically includes information on individuals' visa status and documentation. The specific data collected may vary based on the purpose of the visa application and the relevant immigration regulations. Common elements of visa data collected include passport information, visa application form, biometric data, visa type, confirmation of enrollment or employment, visa issuance, and expiration date, proof of financial means, health insurance information, and proof of accommodation or similar data.

Special category data: It may contain genetic data, criminal records, health and medical data, racial or ethnic origin, biometric data, sexual orientation, and gender identity.

Criminal offence data: It may typically include police reports, court records, arrest records, witness statements, and relevant legal documents pertaining to the case.

3. How do we collect your data?

We collect information and personal data through different methodologies, which may include:

Direct interactions: You may share your data and information directly by communicating with us by phone, email, post, or otherwise. When we collect this data, we may include visiting our website, logging in or signing up, registering on our website, requesting marketing to be sent to you, and entering our promotion events, surveys, or feedback.

From automated technologies: We may robotically collect technical data about your materials, patterns, and browsing actions when you visit our website. We gather this information using server logs, cookies, and other similar technologies.

Publicly available resources or from third parties: We get personal data about you from different public sources and third parties, which may include:

Technical data, marketing, identity, academics, contact information, and communications from agencies and private website publishers based in and outside Europe.
Contact and identity data from data aggregators.
Social media providers include Instagram, Facebook, Google Optimizer, Google Tag Manager, Google Analytics, and other similar services.
Contact and identity data from sources publicly available, like the Electoral Register based inside the EU.

4. How do we use your information?

We will strictly follow the law and only use your personal data when the law permits us. We will mainly use your data for the following occurrences:

Enrollment and Admission: We collect data during registration and admission to manage student records and academic progress and provide necessary services.
Security and Access Control: For security purposes, including access control, monitoring, and ensuring the safety of individuals within their premises.
Legal and Compliance Obligation: To meet legal requirements, comply with regulations, and fulfil contractual obligations.
Marketing and Promotion: For marketing purposes, tailor promotions, advertisements, and outreach efforts based on individuals' preferences and behaviours.
Personalisation of Services: To personalise and improve the quality of services.
Communication and outreach: To communicate with individuals, share important information, and facilitate engagement.

Please review the table below to learn about the types of legal groundwork that will depend on the processing of your personal data.

We usually do not depend on consent as a legal basis for preparing your personal data other than in connection with sending direct marketing communications to you via SMS or email. You always have the right to cancel your consent to marketing at any time by contacting us at dpm@eiiet.com or by clicking the link in the relevant emails to unsubscribe.

5. Purpose of use of your personal data

Purpose	Types of data	Legal rights to use to process the data
Students/approaching students
To register/enrol as a new student and provide a student ID card/number	Contact data Identity data Academic data	Signing a contract with you
Request for course enquiries, applications, and to respond to your call/email	Contact data	Signing a contract with you
Enrolment	Student data Identity data	Requirements to sign a contract
Allow you to finish a survey	Marketing and Communications Data Contact Data Identity Data Financial Data Transaction Data	Sign a contract with you Necessary for our legal rights Necessary to comply with a legal responsibility
Make adjustments to meet medical conditions/disability requirements	Health Data	Requirements to sign a contract
Examination of equal opportunities	Nationality, gender and religion	Legal responsibility
Health management/emergency accident	Emergency contact	Important consent letter
Distributors to eiIET
Process and receive services fees; manage payments; and defend any claims brought against eiIET	Marketing and Communications Data Contact Data Identity Data Financial Data Transaction Data	Sign a contract with you Necessary for our legal rights Necessary to comply with a legal responsibility
Register you as a distributor of eiIET.	Contact data Identity data	Requirements to sign a contract
Partners of eiIET
Deliver customer orders Manage payment fees Collect/Process/recover money owed Accounting records Defense of legal claims brought against us.	Marketing and Communications Data Contact Data Identity Data Financial Data Transaction Data	Sign a contract with you Necessary for our legal rights Necessary to comply with a legal obligation
Register you as a partner of eiIET	Contact data Identity data	Requirements to sign a contract

6. Graduation

Your name and student ID will be published in the graduation brochure. If you are not interested in publishing your name and details, email us at dpm@eiiet.com five weeks before the ceremony.
When you walk across the stage, your name and designation will be announced in the graduation ceremony.
Your photographs will be taken at your graduation ceremony.
Crowd pictures will be taken in our graduation venue by the photographers whom the institute will arrange, and these may include images of you and your guests.
If you are not interested in clicking on your photos, you must inform the photographer before the picture is taken.
At graduation, if you are unwilling to have the pictures taken when crossing the stage or being handed over the certificate, you must inform us at dpm@eiiet.com five weeks before the date of your graduation ceremony.
Videos taken at the graduation ceremony will be uploaded to our official website for viewing and used for upcoming post-graduate events.
Television companies may be available to film our VIP guests and interview our best graduates. If you wish to appear or refrain from appearing on television, you should maintain your distance from the filming place.
The pictures and videos taken at the ceremony will be used to promote the activities of eiIET, such as promotional materials, a worldwide website, brochures, and course leaflets. Please keep in mind that the website will be open worldwide.

Suppose you have any requests or inquiries about the use of personal data at graduation ceremonies. Please email us at dpm@eiiet.com five weeks before the graduation ceremony date. Please read the full privacy notice below:

Important: When emailing for your request, please remember to add your student identity number and course of study.

Identity of controller

European Institute of Innovation, Entrepreneurship and Technology (eiIET)

Intention for processing/ gathering

The primary purpose of collecting your personal data may include documentation of the graduation event to celebrate the achievements of the students, awards for the graduates, and promotional purposes of the institute for the future.

Legal basis

Article 6(1)(a) consents to the release of personal data to the press.

Article 6(1) of the General Data Protection Regulation contains:

The legal basis for processing personal data for filming and photography is for future promotion of the institute; for further information, see the photography statement provided. It is the lawful right of the controller to use pictures of successful graduates and ceremonies for future promotion of the institute. To balance the students' and individuals' rights and freedom, the institution will provide information to avoid inclusion in the filming and photography and protect their rights in the event. It is essential for both the student/graduates and the institution involved in documenting significant life events to be celebrated.

Whose data is being gathered?

Students, institution employees, and all others attending the ceremony, including those invited by students/graduates as their guests.

What data is being gathered?

Name, contact information, identification number, educational background, virtual images, and photographs.

How do we gather the data?

Photographs are collected by a camera on the day of the graduation event and by the event organisation for the institute.

Who has access to the data shared outside the institution?

To the public: the publication of names in graduation brochures and promotional materials for other institutions in electronic or printed format.

How do we protect the data?

The photographs/images and videos are kept securely in accordance with the institution's information security and data protection policies.

Up-to-date Data

Students should always remember to keep the data up-to-date throughout their studies and keep us informed about the updated information so that the personal data we used at the time for graduation purposes is accurate and will be recorded as well.

Is the data used for any automated decision-making?

No, we never use automated decision-making or profiling in the graduation ceremony.

Is the information shared outside the European Union?

Graduation Ceremony videos and photographs will be broadcasted over social media through the internet, and they will be available outside the EU.

Sometimes, third parties may share photographs and graduation brochures outside the EU.

Your rights

Students/graduates can request to keep their details private from the official graduation brochures.
The graduation ceremony is optional for students/graduates. They can choose to graduate without attending the graduation ceremony.
You need to write an email to dpm@eiiet.com to request the changes five weeks before the graduation ceremony date.

7. Supporters and Alumni

What personal data do we gather?

We may have to collect a range of personal data about you from outside sources. The majority of your personal data is collected directly from you. If you were a former student/alumni of eiIET, all the personal data gathered during your studies will be transferred from your student record to eiIET´s alum database. If you are a supporter of eiIET, the personal data we will have is the data collected during your interactions.

The personal data we hold may include your personal identity, contact details, and data about your time at eiIET.

The career data may include your interactions with eiIET, automated decision-making/profiling results, communication held between the alums and development department, and your record of donations.

We may have data gathered from social media networks such as online posts, Internet searches, and websites.

Why are we gathering the data, and for what purpose?

We only gather personal data according to data protection laws. Typically, we collect your personal data to increase alum involvement with the student experiences with eiIET, fundraising programmes, support communications, and related activities conducted by the alums and development department. If we put in more details, these activities may include donations for an event you are attending, informing you about the fundraising strategy and wealth analysis and research, sending you publications and inviting you, and informing you about the benefits available.

Do we use automated decision-making or profiling?

We may use automated decision-making or profiling to ensure transparency, fairness, and compliance with relevant data protection regulations. Students or individuals should be informed about the use of these systems, understand the criteria involved, and have the ability to challenge decisions made by automated processes. Additionally, safeguards should be in place to prevent discriminatory outcomes and protect individuals' rights.

On what legal basis do we process your personal data?

We want to make sure you understand all of your data protection rights. These are the following conditions for processing a legal request, legitimate interest, or your consent to process your personal data:

GDPR Article 6(1)(f) – Processing is necessary for the pursuit of our legitimate interests
GDPR Article 6(1)(a) – Consent of the data subject
GDPR Article 6(1)(c) – Processing is necessary for compliance with a legal obligation

To whom do we share your personal data, and what do we share?

Occasionally, we may have to share your personal data with registered partners and third parties. The table given below shows what data we share and what data we share.

Recipient	Data we share
Event organisations	Data including nutritional requirements, assistance , accessibility requirements and registration details
Third-parties engaged by eiIEt to provide alumni and services related to fundraising strategy, wealth analysis, research and the support of eiIET	Contact details and course information
Partners associated with alumni programmes and support activities	Contact details and course information
Technology, administrative and support departments associated with alumni events	Health information,details of necessary implementation of reasonable adjustment, contact details and course informations
Institutional clubs and related societies	Contact details and course information
Third-party data processors who use your personal data on behalf of us	Contact details and course information
Our internal staff and development department	Course information, contact details, Health information, and details of necessary implementation of reasonable adjustment

How do we protect the data?

All your personal data is held securely on eiIET´s alumni and supporter database; only a limited number of staff will have access and be protected.

Before sharing your personal data with anyone, we will ensure that we have appropriate data-sharing agreements. Under any circumstances, we do not sell your personal data to third parties or allow them to access it.

eiIET will be fully committed to keeping your personal data safe with us and will be working ethically and honestly.

Your right as a data subject

You will have the right to have your personal data processed by us, as listed below:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data under certain conditions.
The right to data portability – You have the right to request that we transfer the data that we have collected.

How long is your personal data kept?

Personal data in support of your alum's relationship with eiIET will be kept until there is no legal basis for holding it until you withdraw the consent.

If you request that we delete your personal data, we will maintain some personal data to ensure that we do not unintentionally contact you in the future. We also need to keep some financial records for statutory reasons.

Maintain your personal data

You can update and maintain our personal data by contacting the Alumni Development Department by email, phone, or postal mail at +49 30 233618554 or via email at support@eiiet.com. You can also change your communication preference at any time to request how we process your data.

Activities of your complaints inquiries, and rights

For more information about your rights or if you have any complaints or inquiries, please contact our Data Protection Manager.

Data Protection Manager

Address: Lessingstraße 79, 13158 Berlin, Germany.

Email: dpm@eiiet.com

8. Disclosure of your personal data

Data will also be shared with these parties:

Internal third party (HR, IT, or finance to other departments within the institution).
External third parties (partnered organisations, universities, or research institutions to collaborate on projects or educational initiatives).
Specific third parties (consulting firms, nonprofit organisations, government institutions, legal firms, and technology providers)

If a change happens to your business, the new authority may use your personal information in the same way as the privacy policy. In the future, we may seek to have other businesses or merge with other companies, and your personal data will be shared. We will instruct all third parties to respect the security of your personal data and process it per the data protection law.

We do not permit the parties to use your personal data for their own purposes, and they will only have permission to process your personal data for specified purposes and according to our institution's instructions.

9. INTERNATIONAL DATA SHARING

Some of our third parties are based outside the European Union, so processing your personal data may involve a transfer of data outside the European Union. However, if we transfer your personal data outside Europe, we will take measures with similar protection to safeguard your details. You will be strictly informed about sharing your personal data with third countries. The transfer of personal data will be done in accordance with Union or Member State law.

Please contact our DPM for further information about transferring your personal data outside the European territory.

10. CAREER ACTIVITIES

Privacy notice if you are a job applicant.

The purpose of this notice

This is the Privacy Notice for Recruitment of the European Institute of Innovation, Entrepreneurship, and Technology GmbH.

This notice applies to all candidates applying to work with us, including consultants, contractors, workers, work experience students, teachers, directors, employees, and administrative staff. It applies to all kinds of work, such as part-time, full-time, permanent, temporary, or for a fixed term.

We are the Data Controller System, meaning we have the right to keep your personal data and are responsible for deciding how we hold and use your personal data. This notice will give you brief information about how and why we collect and use your personal data in the recruitment process and your rights concerning your personal data. We may make changes to this notice at any time.

Your Personal Data

In this privacy notice, 'Your personal data' means personal information and details. The paragraphs below set out your personal data that we may process. Your personal information does not include data where the identity has been removed. Your personal data must be accurate and relevant. Please inform us if your personal data changes during the recruitment process.

Special category personal data

This special data category includes race or ethnicity, trade union membership, political opinions, biometric data, religious or philosophical beliefs, genetic data, health information, and data concerning a person's sex life or sexual orientation. By processing these data, we ensure individuals' privacy rights.

From where do we get your information?

Usually, your personal data will come directly from us, and in some cases, it may also come from the following resources:

Google and social media networking accounts such as LinkedIn.
Consultancies or agencies may provide us with the following personal data: personal contact details and date of birth.
References from former employees you have permitted to share your personal information.
Recruitment agencies may provide your personal information, which includes personal contact details, skills and experiences, hobbies and interests, qualifications, schools attended, details of previous employment, and interview notes.
eiIET staff members may provide your personal information if they refer you for recruitment.

If you would like to know more about the source of your personal data, please contact the HR department.

Access to your personal data

We may access your personal data during and after the recruitment process. This may include collecting your personal details, using them, storing them, recording them, destroying them, and, in some cases, disclosing them.

To be precise, we access your personal information for the reasons and based on the legal grounds set out in the following table, as well as to:

Maintain records of the recruitment procedures, protect your essential interests, abide by the law, and establish, defend, or exercise legal rights.

Purpose for accessing your personal data	Reasons for processing your personal data	Your personal data
For disabled candidates, consider reasonable adjustments to the recruitment process	To sign a contract To comply with a legal rights	The effects of the disability Information about the disability
Make a decision about your appointment or recruitment, including processing your skills, suitability and qualifications for the work	To sign a contract for our legitimate interests: to select suitable contractors, workers and employees	Personal data provided in your cv, cover letter, email, interview notes and from application form
Contact you for the recruitment procedures and any offers of work	To sign a contract	Personal contact details
For providing equal opportunities	To sign a contract for our legitimate interests: to review equality of opportunity	Health data, including disability information, data revealing race, sexual orientation or religious beliefs, age and date of marriage or partnership status, and information regarding pregnancy and maternity
Determine any potential contract between us and you	To sign a contract To comply with a legal rights	Offer letter and work contract between us and you
If you have accepted the offer from us to work with us, from referees whom you may given us permission to contact and credit checks, and professional memberships, qualifications, or registration	To sign a contract for our legitimate interests: to select suitable contractors, workers and employees	Details of the previous employer, dates of previous employment, skills, details, and capabilities. For credit check: personal contact details, date of birth, registration, qualification, practicing certificates, contact details, credit account and usage of credit score and membership details

Data about criminal convictions

To ensure we make recruitment decisions and assess suitability for particular work, we will need information regarding your criminal background, as explained in this section.

We need this data to enter a contract with you, to abide by the legal rules, for our interest in selecting suitable contractors and employer workers, and to perform the law of employment rights.

If you accept the offer to work with us, it will give us the right to check your criminal record; we will ask you for a disclosure check and provide us with a copy.

Data needed for the contract

The sections above identify personal information we may need to enter into a contract with you. You are not obligated to provide this information, but if you don't do it, we are unable to proceed with the recruitment process or enter into a contract.

Statutory requirement to provide your personal data

Document confirming your right to work in Germany: You are not obligated to provide this information. Still, we can only proceed with the contract process if you do it.

Sharing personal data with third parties

We may share your personal data with the following third parties: where it is necessary to enter into a contract with you, where there is another legitimate interest in doing so, or where it is essential to protect your vital interests or those of another person:

Other third parties as necessary to abide by the law.
Health professionals and occupational health providers are involved in your care to consider reasonable adjustments to the recruitment process for disabled applicants.
Professional Advisors

Automated decision-making

No, we do not involve any automated decisions in the recruitment process.

Sharing your personal data outside the European Union

Some of our external third parties are outside the European Union. In that case, if we share your profile and personal details with them, they will consider that the data was transferred outside the European Union.

We will consider protecting your privacy and data with the Data Protection Law whenever we do this.

How long will we keep your data?

After the recruitment process, if you don't start working with us, we will keep your profile and personal information for six months after that to allow us to establish, defend, and exercise our legitimate interest to enable us to reconsider your application and contact you if the position you applied for becomes available again.

If you inform us to keep your information and personal data so that we can contact you in the future if any suitable position is available, we will write to you separately to obtain your consent to keep the information for a fixed period of one year.

Your rights as a data subject

You will have rights to your personal data processed by us, which are listed below:

Right to information: The right to information gives you the right to get a copy of your personal data through a request, and it may charge you a small fee for the service.
Right to data portability: The right to data portability allows you to request that we share the personal data we have gathered with another organisation or directly with you in certain situations. If you submit a request, we have thirty days to answer.
Right to delete: The right to delete permits you to request to remove all your personal data from the database in some circumstances.
Right to object: Under certain conditions, you have the right to object to our processing of your personal information.
Right to rectification: The right to rectification allows you to request the correction of your incorrect personal information. You also have the option that we will enter any information you think is missing.
Right to restrict: Under certain situations, the right to restrict allows you to request that we restrict your personal information from processing.

If you have any questions or if you need more information, please contact our Data Protection Manager at: dpm@eiiet.com

11. Data security

We have a variety of measures to protect data and ensure the confidentiality, integrity, and availability of information.

Data encryption: encrypting sensitive data both during transmission and storage to prevent unauthorised access.
Access Controls: Implementing an access control mechanism to restrict data access only to authorised personnel, ensuring a need-to-know basis.
Regular data backups: Conduct regular backups of critical data to prevent data loss and facilitate recovery during a security incident.
Secure password policies: enforcing strong password policies and multi-factor authentication to enhance user account security.
Secure software development: following safe coding practices and conducting regular security assessments for software applications.

In some cases, you can ask us to delete your personal information. See below for more information.

12. YOUR LEGAL RIGHTS

To make a request: If you would like to request access to your personal information, please contact us at the European Institute of Innovation, Entrepreneurship, and Technology, Lessingstraße 79, 13158 Berlin, Germany, or by email at dpm@eiiet.com.

What we may need from you: We may need a request from you with specific information that helps us verify your identity and secure your right to access your personal data. This security measure ensures that your personal data is not disclosed to anyone who has no right to receive it. We may also directly contact you for further information about your request to access your data to speed up our responses.

Right to information: The right to information gives you the right to get a copy of your personal data through a request, and it may charge you a small fee for the service.
Right to data portability: The right to data portability allows you to request that we share the personal data we have gathered with another organisation or directly with you in certain situations. If you submit a request, we have thirty days to answer.
Right to delete: The right to delete permits you to request to remove all your personal data from the database in some circumstances.
Right to object: Under certain conditions, you have the right to object to our processing of your personal information.
Right to rectification: The right to rectification allows you to request the correction of your incorrect personal information. You also have the option that we will enter any information you think is missing.
Right to restrict: Under certain situations, the right to restrict allows you to request that we restrict your personal information from processing.

13. Advertising Partners Privacy Policies

This privacy notice is for the advertising partners who are working with eiIET.

Third-party advertiser's privacy policies outline the procedures and principles governing the handling of your data within the context of advertising collaborations. This privacy notice covers several key aspects:

Types of data collected: It may include information on browsing habits, demographics, or other relevant data.
Purpose of data collected: This often revolves around delivering targeted and personalised advertisements to users based on their interests, preferences, or behaviour.
Data shared with: This includes specifics about what is shared, with whom, and for what purpose.
Consent and opt-out options: information about collecting individuals' consent for data gathering and providing mechanisms for users to opt out if they do not wish to participate in targeted advertising.
Security measures: assurances regarding the security procedures to protect individuals' data from unauthorised access, breaches, or misuse during the advertising collaboration.
Compliance with regulations: statements regarding relevant data protection regulations, such as GDPR or other regional privacy laws, ensuring that the institution and its advertising partners adhere to legal standards.
Updates to the policy: information on how and when the privacy policy may be updated, with a commitment to informing users of any changes.
Contact information: Contact us at dpm@eiiet.com for inquiries or concerns about privacy practices, demonstrations, and accessibility.

Important note: eiIET has no access to or control over third-party advertisers' cookies.

14. Third-party Privacy Policies

This is the privacy notice for third parties in eiIET.

Third-party privacy is crucial to safeguarding sensitive information and upholding privacy standards. This policy should clearly outline the following:

Purpose: This notice aims to protect and safeguard students' personal information while sharing or using it by third parties.
Data shared: Personal data sharing may include student records, financial information, or other sensitive data.
Legal rights: All the information will be shared by following relevant data protection laws, such as GDPR, HIPAA, or other applicable regulations.
Confidentiality and security measures: Data will be protected by security measures, including encryption, access controls, and regular security assessments.
Data usage limitations: They need to clearly state the purpose for which the data is used, emphasising that it should only be used for the intended educational purposes.
Data retention: There will be a period of time for the third parties to access and use the information obtained from us. Their permit to access the data will end when the contractual relationship between the institution and the third party ends.
Auditing and monitoring: We will regularly audit to ensure the third party's compliance with the privacy policy, including on-site visits or remote monitoring.
Contractual agreements: There will be comprehensive contracts that clearly articulate the responsibilities and obligations of both the institution and the third party regarding data protection.

15. Cookies and Web Beacons

When addressing cookies and web beacons in the privacy notice, it's important to be transparent about data collection practices.

- Purpose: They were specifically used for essential functions, analytics, or other purposes.
- Types of cookies used: It may include session cookies, persistent cookies, or third-party cookies.
- Consent mechanism: Students or individuals can provide or withdraw consent for cookie usage at any time by writing a request to the data protection manager.
- Data collected: Personal data collected may include information on user preferences, browsing behaviour, or other relevant data.
- Purpose of data collection: Data collected through cookies and web beacons may include important personal information, contact details and other related information.
- Contact information: If you have any concerns regarding using cookies and web beacons, please contact us at dpm@eiiet.com.

16. Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

eiIET does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately, and we will do our best efforts to promptly remove such information from our records.

17. Subscribe to comments

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

Contact Us

If you have any questions or suggestions about our Privacy Policy or if you need to delete your data, do not hesitate to contact the Data Protection Manager at dpm@eiiet.com. We will respond to you within thirty days.

Privacy policy

Welcome to eiIET’s Privacy Notice

The intention of this Privacy Notice

The primary goal of this privacy notice is to provide information on how eiIET gathers and approaches your data. The second important thing is that we are highly dedicated to protecting every piece of data you share with us through our website when you: 1) Deliver the personal data by any other means or 2) Login for marketing materials 3) Enquiry form/a callback 4) Vising our website or mobile app from social media platforms like Facebook, Snapchat, Twitter, Pinterest, Instagram, Vkontakte, Unibuddy, WhatsApp, or any similar platforms. 5) When you register on our website for Enquiry, apply for any course (online, full-time, or part-time), or when you apply for employees or staff at your company, which may lead them to become customers of ours. We do not intend to collect any data relating to children under 14 on this website, which is not for children. However, where it collects the personal data of children in the field of business or marketing, we ensure that we will take proper measures to protect and safeguard the data and obtain the parent’s/guardian’s consent before collecting. For further information about this, you can contact us at dpm@eiiet.com. Important: You must read and be fully aware of the privacy policy on our website regarding the understanding of the information we collect from you and how we process it.

1. Important information and who we are

DATA Controller This website is managed by the European Institute of Innovation, Entrepreneurship, and Technology, a company registered in Germany with the number HRB 259669 B and its registered office at Lessingstraße 79, 13158 Berlin, Germany. eiIET has a designated data protection manager (DPM) who will be in charge of this data-protecting privacy policy. If you have any inquiries about this privacy policy, including any requests regarding your legal rights, please always contact the DPM using the details below. Contact details Name of legal entity data controller: European Institute of Innovation, Entrepreneurship, and Technology (eiIET). Data Protection Manager in charge: Meenu Antony Data Protection Email address: dpm@eiiet.com In this notice, there will be changes from time to time. Any modifications we may make in the future will be posted on this page. Please examine frequently to see any updated changes. Necessary: The personal data we hold about you must be correct and current. Please keep us informed about any updates to your data during your journey with us. Third-party loops Our website may contain links to third-party websites. Clicking on those loops or visiting those websites may permit third parties to access and share your personal data. We are not accountable for these third-party website privacy statements and have no authority over these third parties. We advise you to read the privacy policy of every website you visit.

2. Information we collect from you

Personal data: or personal information, refers to any information related to an identifiable individual. This includes details that can directly identify a person, such as their name, address, phone number, email address, or identification number. We have some standard documents that we collect, use, store, and share, which may include: Identification Documents: include a passport, driver’s licence, national ID card, or similar government-issued documents. Education and Employment Records: contain academic certificates, employment contracts, and professional licences. Contact data includes a phone number, email address, postal address, social media profiles, emergency contacts, and communication preferences. Employment data: involves a resume or curriculum vitae (CV), cover letter, job application form, offer letter, payroll information, performance reviews, training certificates, employee handbook, termination letter, or similar employment data. Financial data: contains bank statements, loan agreements, invoices and receipts, insurance policies, or similar financial data. Marketing and Communication Data: It may include prospectuses and brochures, a public relations kit, a social media content calendar, internal communication guidelines, website content, email campaigns, student requirements materials, press releases, and event promotion materials. Technical data: involves hardware inventory, data backups and recovery plans, software documentation, security policies and procedures, network diagrams, training materials for IT staff, and system architecture documentation. Usage Data: contains financial transaction records, system logs, research data, attendance and participation records, surveys and feedback data, the learning management system (LMS), website and app usage data, login and authentication data, communication metadata, and library usage data. Visa data: Visa data collected by an institution, such as a university or business, typically includes information on individuals’ visa status and documentation. The specific data collected may vary based on the purpose of the visa application and the relevant immigration regulations. Common elements of visa data collected include passport information, visa application form, biometric data, visa type, confirmation of enrollment or employment, visa issuance, and expiration date, proof of financial means, health insurance information, and proof of accommodation or similar data. Special category data: It may contain genetic data, criminal records, health and medical data, racial or ethnic origin, biometric data, sexual orientation, and gender identity. Criminal offence data: It may typically include police reports, court records, arrest records, witness statements, and relevant legal documents pertaining to the case.

3. How do we collect your data?

We collect information and personal data through different methodologies, which may include: Direct interactions: You may share your data and information directly by communicating with us by phone, email, post, or otherwise. When we collect this data, we may include visiting our website, logging in or signing up, registering on our website, requesting marketing to be sent to you, and entering our promotion events, surveys, or feedback. From automated technologies: We may robotically collect technical data about your materials, patterns, and browsing actions when you visit our website. We gather this information using server logs, cookies, and other similar technologies. Publicly available resources or from third parties: We get personal data about you from different public sources and third parties, which may include: Technical data, marketing, identity, academics, contact information, and communications from agencies and private website publishers based in and outside Europe. Contact and identity data from data aggregators. Social media providers include Instagram, Facebook, Google Optimizer, Google Tag Manager, Google Analytics, and other similar services. Contact and identity data from sources publicly available, like the Electoral Register based inside the EU.

4. How do we use your information?

We will strictly follow the law and only use your personal data when the law permits us. We will mainly use your data for the following occurrences: Enrollment and Admission: We collect data during registration and admission to manage student records and academic progress and provide necessary services. Security and Access Control: For security purposes, including access control, monitoring, and ensuring the safety of individuals within their premises. Legal and Compliance Obligation: To meet legal requirements, comply with regulations, and fulfil contractual obligations. Marketing and Promotion: For marketing purposes, tailor promotions, advertisements, and outreach efforts based on individuals’ preferences and behaviours. Personalisation of Services: To personalise and improve the quality of services. Communication and outreach: To communicate with individuals, share important information, and facilitate engagement. Please review the table below to learn about the types of legal groundwork that will depend on the processing of your personal data. We usually do not depend on consent as a legal basis for preparing your personal data other than in connection with sending direct marketing communications to you via SMS or email. You always have the right to cancel your consent to marketing at any time by contacting us at dpm@eiiet.com or by clicking the link in the relevant emails to unsubscribe.

5. Purpose of use of your personal data

Purpose Types of data Legal rights to use to process the data Students/approaching students To register/enrol as a new student and provide a student ID card/number Contact data Identity data Academic data Signing a contract with you Request for course enquiries, applications, and to respond to your call/email Contact data Signing a contract with you Enrolment Student data Identity data Requirements to sign a contract Allow you to finish a survey Marketing and Communications Data Contact Data Identity Data Financial Data Transaction Data Sign a contract with you Necessary for our legal rights Necessary to comply with a legal responsibility Make adjustments to meet medical conditions/disability requirements Health Data Requirements to sign a contract Examination of equal opportunities Nationality, gender and religion Legal responsibility Health management/emergency accident Emergency contact Important consent letter Distributors to eiIET Process and receive services fees; manage payments; and defend any claims brought against eiIET Marketing and Communications Data Contact Data Identity Data Financial Data Transaction Data Sign a contract with you Necessary for our legal rights Necessary to comply with a legal responsibility Register you as a distributor of eiIET. Contact data Identity data Requirements to sign a contract Partners of eiIET Deliver customer orders Manage payment fees Collect/Process/recover money owed Accounting records Defense of legal claims brought against us. Marketing and Communications Data Contact Data Identity Data Financial Data Transaction Data Sign a contract with you Necessary for our legal rights Necessary to comply with a legal obligation Register you as a partner of eiIET Contact data Identity data Requirements to sign a contract

6. Graduation

The most significant event for graduates is the graduation ceremony. It is a formal event held for the elite to celebrate and acknowledge the academic achievements of students who have completed their courses successfully. These ceremonies are held publically; therefore, there is no expectation of privacy under the particular data protection for anyone attending. So here we are listing the points about protecting your data during the graduation ceremony. This applies to all students eligible for an award or those intending to graduate, whether they attend a ceremony or not. Please note the following pieces of information and make sure your invited guests are also aware of this information: Your name and student ID will be published in the graduation brochure. If you are not interested in publishing your name and details, email us at dpm@eiiet.com five weeks before the ceremony. When you walk across the stage, your name and designation will be announced in the graduation ceremony. Your photographs will be taken at your graduation ceremony. Crowd pictures will be taken in our graduation venue by the photographers whom the institute will arrange, and these may include images of you and your guests. If you are not interested in clicking on your photos, you must inform the photographer before the picture is taken. At graduation, if you are unwilling to have the pictures taken when crossing the stage or being handed over the certificate, you must inform us at dpm@eiiet.com five weeks before the date of your graduation ceremony. Videos taken at the graduation ceremony will be uploaded to our official website for viewing and used for upcoming post-graduate events. Television companies may be available to film our VIP guests and interview our best graduates. If you wish to appear or refrain from appearing on television, you should maintain your distance from the filming place. The pictures and videos taken at the ceremony will be used to promote the activities of eiIET, such as promotional materials, a worldwide website, brochures, and course leaflets. Please keep in mind that the website will be open worldwide. Suppose you have any requests or inquiries about the use of personal data at graduation ceremonies. Please email us at dpm@eiiet.com five weeks before the graduation ceremony date. Please read the full privacy notice below: Important: When emailing for your request, please remember to add your student identity number and course of study. Identity of controller European Institute of Innovation, Entrepreneurship and Technology (eiIET) Intention for processing/ gathering The primary purpose of collecting your personal data may include documentation of the graduation event to celebrate the achievements of the students, awards for the graduates, and promotional purposes of the institute for the future. Legal basis Article 6(1)(a) consents to the release of personal data to the press. Article 6(1) of the General Data Protection Regulation contains: The legal basis for processing personal data for filming and photography is for future promotion of the institute; for further information, see the photography statement provided. It is the lawful right of the controller to use pictures of successful graduates and ceremonies for future promotion of the institute. To balance the students’ and individuals’ rights and freedom, the institution will provide information to avoid inclusion in the filming and photography and protect their rights in the event. It is essential for both the student/graduates and the institution involved in documenting significant life events to be celebrated. Whose data is being gathered? Students, institution employees, and all others attending the ceremony, including those invited by students/graduates as their guests. What data is being gathered? Name, contact information, identification number, educational background, virtual images, and photographs. How do we gather the data? Photographs are collected by a camera on the day of the graduation event and by the event organisation for the institute. Who has access to the data shared outside the institution? To the public: the publication of names in graduation brochures and promotional materials for other institutions in electronic or printed format. How do we protect the data? The photographs/images and videos are kept securely in accordance with the institution’s information security and data protection policies. Up-to-date Data Students should always remember to keep the data up-to-date throughout their studies and keep us informed about the updated information so that the personal data we used at the time for graduation purposes is accurate and will be recorded as well. Is the data used for any automated decision-making? No, we never use automated decision-making or profiling in the graduation ceremony. Is the information shared outside the European Union? Graduation Ceremony videos and photographs will be broadcasted over social media through the internet, and they will be available outside the EU. Sometimes, third parties may share photographs and graduation brochures outside the EU. Your rights Students/graduates can request to keep their details private from the official graduation brochures. The graduation ceremony is optional for students/graduates. They can choose to graduate without attending the graduation ceremony. You need to write an email to dpm@eiiet.com to request the changes five weeks before the graduation ceremony date.

7. Supporters and Alumni

What personal data do we gather? We may have to collect a range of personal data about you from outside sources. The majority of your personal data is collected directly from you. If you were a former student/alumni of eiIET, all the personal data gathered during your studies will be transferred from your student record to eiIET´s alum database. If you are a supporter of eiIET, the personal data we will have is the data collected during your interactions. The personal data we hold may include your personal identity, contact details, and data about your time at eiIET. The career data may include your interactions with eiIET, automated decision-making/profiling results, communication held between the alums and development department, and your record of donations. We may have data gathered from social media networks such as online posts, Internet searches, and websites. Why are we gathering the data, and for what purpose? We only gather personal data according to data protection laws. Typically, we collect your personal data to increase alum involvement with the student experiences with eiIET, fundraising programmes, support communications, and related activities conducted by the alums and development department. If we put in more details, these activities may include donations for an event you are attending, informing you about the fundraising strategy and wealth analysis and research, sending you publications and inviting you, and informing you about the benefits available. Do we use automated decision-making or profiling? We may use automated decision-making or profiling to ensure transparency, fairness, and compliance with relevant data protection regulations. Students or individuals should be informed about the use of these systems, understand the criteria involved, and have the ability to challenge decisions made by automated processes. Additionally, safeguards should be in place to prevent discriminatory outcomes and protect individuals’ rights. On what legal basis do we process your personal data? We want to make sure you understand all of your data protection rights. These are the following conditions for processing a legal request, legitimate interest, or your consent to process your personal data: GDPR Article 6(1)(f) – Processing is necessary for the pursuit of our legitimate interests GDPR Article 6(1)(a) – Consent of the data subject GDPR Article 6(1)(c) – Processing is necessary for compliance with a legal obligation To whom do we share your personal data, and what do we share? Occasionally, we may have to share your personal data with registered partners and third parties. The table given below shows what data we share and what data we share. Recipient Data we share Event organisations Data including nutritional requirements, assistance , accessibility requirements and registration details Third-parties engaged by eiIEt to provide alumni and services related to fundraising strategy, wealth analysis, research and the support of eiIET Contact details and course information Partners associated with alumni programmes and support activities Contact details and course information Technology, administrative and support departments associated with alumni events Health information,details of necessary implementation of reasonable adjustment, contact details and course informations Institutional clubs and related societies Contact details and course information Third-party data processors who use your personal data on behalf of us Contact details and course information Our internal staff and development department Course information, contact details, Health information, and details of necessary implementation of reasonable adjustment How do we protect the data? All your personal data is held securely on eiIET´s alumni and supporter database; only a limited number of staff will have access and be protected. Before sharing your personal data with anyone, we will ensure that we have appropriate data-sharing agreements. Under any circumstances, we do not sell your personal data to third parties or allow them to access it. eiIET will be fully committed to keeping your personal data safe with us and will be working ethically and honestly. Your right as a data subject You will have the right to have your personal data processed by us, as listed below: The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service. The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete. The right to erasure – You have the right to request that we erase your personal data under certain conditions. The right to restrict processing – You have the right to request that we restrict the processing of your personal data under certain conditions. The right to object to processing – You have the right to object to our processing of your personal data under certain conditions. The right to data portability – You have the right to request that we transfer the data that we have collected. How long is your personal data kept? Personal data in support of your alum’s relationship with eiIET will be kept until there is no legal basis for holding it until you withdraw the consent. If you request that we delete your personal data, we will maintain some personal data to ensure that we do not unintentionally contact you in the future. We also need to keep some financial records for statutory reasons. Maintain your personal data You can update and maintain our personal data by contacting the Alumni Development Department by email, phone, or postal mail at +49 30 233618554 or via email at support@eiiet.com. You can also change your communication preference at any time to request how we process your data. Activities of your complaints inquiries, and rights For more information about your rights or if you have any complaints or inquiries, please contact our Data Protection Manager. Data Protection Manager Address: Lessingstraße 79, 13158 Berlin, Germany. Email: dpm@eiiet.com

8. Disclosure of your personal data

Data will also be shared with these parties: Internal third party (HR, IT, or finance to other departments within the institution). External third parties (partnered organisations, universities, or research institutions to collaborate on projects or educational initiatives). Specific third parties (consulting firms, nonprofit organisations, government institutions, legal firms, and technology providers) If a change happens to your business, the new authority may use your personal information in the same way as the privacy policy. In the future, we may seek to have other businesses or merge with other companies, and your personal data will be shared. We will instruct all third parties to respect the security of your personal data and process it per the data protection law. We do not permit the parties to use your personal data for their own purposes, and they will only have permission to process your personal data for specified purposes and according to our institution’s instructions.

9. INTERNATIONAL DATA SHARING

10. CAREER ACTIVITIES

Privacy notice if you are a job applicant. The purpose of this notice This is the Privacy Notice for Recruitment of the European Institute of Innovation, Entrepreneurship, and Technology GmbH. This notice applies to all candidates applying to work with us, including consultants, contractors, workers, work experience students, teachers, directors, employees, and administrative staff. It applies to all kinds of work, such as part-time, full-time, permanent, temporary, or for a fixed term. We are the Data Controller System, meaning we have the right to keep your personal data and are responsible for deciding how we hold and use your personal data. This notice will give you brief information about how and why we collect and use your personal data in the recruitment process and your rights concerning your personal data. We may make changes to this notice at any time. Your Personal Data In this privacy notice, ‘Your personal data’ means personal information and details. The paragraphs below set out your personal data that we may process. Your personal information does not include data where the identity has been removed. Your personal data must be accurate and relevant. Please inform us if your personal data changes during the recruitment process. Special category personal data This special data category includes race or ethnicity, trade union membership, political opinions, biometric data, religious or philosophical beliefs, genetic data, health information, and data concerning a person’s sex life or sexual orientation. By processing these data, we ensure individuals’ privacy rights. From where do we get your information? Usually, your personal data will come directly from us, and in some cases, it may also come from the following resources: Google and social media networking accounts such as LinkedIn. Consultancies or agencies may provide us with the following personal data: personal contact details and date of birth. References from former employees you have permitted to share your personal information. Recruitment agencies may provide your personal information, which includes personal contact details, skills and experiences, hobbies and interests, qualifications, schools attended, details of previous employment, and interview notes. eiIET staff members may provide your personal information if they refer you for recruitment. If you would like to know more about the source of your personal data, please contact the HR department. Access to your personal data We may access your personal data during and after the recruitment process. This may include collecting your personal details, using them, storing them, recording them, destroying them, and, in some cases, disclosing them. To be precise, we access your personal information for the reasons and based on the legal grounds set out in the following table, as well as to: Maintain records of the recruitment procedures, protect your essential interests, abide by the law, and establish, defend, or exercise legal rights. Purpose for accessing your personal data Reasons for processing your personal data Your personal data For disabled candidates, consider reasonable adjustments to the recruitment process To sign a contract To comply with a legal rights The effects of the disability Information about the disability Make a decision about your appointment or recruitment, including processing your skills, suitability and qualifications for the work To sign a contract for our legitimate interests: to select suitable contractors, workers and employees Personal data provided in your cv, cover letter, email, interview notes and from application form Contact you for the recruitment procedures and any offers of work To sign a contract Personal contact details For providing equal opportunities To sign a contract for our legitimate interests: to review equality of opportunity Health data, including disability information, data revealing race, sexual orientation or religious beliefs, age and date of marriage or partnership status, and information regarding pregnancy and maternity Determine any potential contract between us and you To sign a contract To comply with a legal rights Offer letter and work contract between us and you If you have accepted the offer from us to work with us, from referees whom you may given us permission to contact and credit checks, and professional memberships, qualifications, or registration To sign a contract for our legitimate interests: to select suitable contractors, workers and employees Details of the previous employer, dates of previous employment, skills, details, and capabilities. For credit check: personal contact details, date of birth, registration, qualification, practicing certificates, contact details, credit account and usage of credit score and membership details Data about criminal convictions To ensure we make recruitment decisions and assess suitability for particular work, we will need information regarding your criminal background, as explained in this section. We need this data to enter a contract with you, to abide by the legal rules, for our interest in selecting suitable contractors and employer workers, and to perform the law of employment rights. If you accept the offer to work with us, it will give us the right to check your criminal record; we will ask you for a disclosure check and provide us with a copy. Data needed for the contract The sections above identify personal information we may need to enter into a contract with you. You are not obligated to provide this information, but if you don’t do it, we are unable to proceed with the recruitment process or enter into a contract. Statutory requirement to provide your personal data Document confirming your right to work in Germany: You are not obligated to provide this information. Still, we can only proceed with the contract process if you do it. Sharing personal data with third parties We may share your personal data with the following third parties: where it is necessary to enter into a contract with you, where there is another legitimate interest in doing so, or where it is essential to protect your vital interests or those of another person: Other third parties as necessary to abide by the law. Health professionals and occupational health providers are involved in your care to consider reasonable adjustments to the recruitment process for disabled applicants. Professional Advisors Automated decision-making No, we do not involve any automated decisions in the recruitment process. Sharing your personal data outside the European Union Some of our external third parties are outside the European Union. In that case, if we share your profile and personal details with them, they will consider that the data was transferred outside the European Union. We will consider protecting your privacy and data with the Data Protection Law whenever we do this. How long will we keep your data? After the recruitment process, if you don’t start working with us, we will keep your profile and personal information for six months after that to allow us to establish, defend, and exercise our legitimate interest to enable us to reconsider your application and contact you if the position you applied for becomes available again. If you inform us to keep your information and personal data so that we can contact you in the future if any suitable position is available, we will write to you separately to obtain your consent to keep the information for a fixed period of one year. Your rights as a data subject You will have rights to your personal data processed by us, which are listed below: Right to information: The right to information gives you the right to get a copy of your personal data through a request, and it may charge you a small fee for the service. Right to data portability: The right to data portability allows you to request that we share the personal data we have gathered with another organisation or directly with you in certain situations. If you submit a request, we have thirty days to answer. Right to delete: The right to delete permits you to request to remove all your personal data from the database in some circumstances. Right to object: Under certain conditions, you have the right to object to our processing of your personal information. Right to rectification: The right to rectification allows you to request the correction of your incorrect personal information. You also have the option that we will enter any information you think is missing. Right to restrict: Under certain situations, the right to restrict allows you to request that we restrict your personal information from processing. If you have any questions or if you need more information, please contact our Data Protection Manager at: dpm@eiiet.com

11. Data security

We have a variety of measures to protect data and ensure the confidentiality, integrity, and availability of information. Data encryption: encrypting sensitive data both during transmission and storage to prevent unauthorised access. Access Controls: Implementing an access control mechanism to restrict data access only to authorised personnel, ensuring a need-to-know basis. Regular data backups: Conduct regular backups of critical data to prevent data loss and facilitate recovery during a security incident. Secure password policies: enforcing strong password policies and multi-factor authentication to enhance user account security. Secure software development: following safe coding practices and conducting regular security assessments for software applications. In some cases, you can ask us to delete your personal information. See below for more information.

12. YOUR LEGAL RIGHTS

Under certain conditions, you have legal rights under data protection laws about your personal data. You can request access to your personal data, and it enables you to receive a copy of the personal data we hold about you, and you can check whether we are lawfully processing it. To make a request: If you would like to request access to your personal information, please contact us at the European Institute of Innovation, Entrepreneurship, and Technology, Lessingstraße 79, 13158 Berlin, Germany, or by email at dpm@eiiet.com. What we may need from you: We may need a request from you with specific information that helps us verify your identity and secure your right to access your personal data. This security measure ensures that your personal data is not disclosed to anyone who has no right to receive it. We may also directly contact you for further information about your request to access your data to speed up our responses. Right to information: The right to information gives you the right to get a copy of your personal data through a request, and it may charge you a small fee for the service. Right to data portability: The right to data portability allows you to request that we share the personal data we have gathered with another organisation or directly with you in certain situations. If you submit a request, we have thirty days to answer. Right to delete: The right to delete permits you to request to remove all your personal data from the database in some circumstances. Right to object: Under certain conditions, you have the right to object to our processing of your personal information. Right to rectification: The right to rectification allows you to request the correction of your incorrect personal information. You also have the option that we will enter any information you think is missing. Right to restrict: Under certain situations, the right to restrict allows you to request that we restrict your personal information from processing.

13. Advertising Partners Privacy Policies

This privacy notice is for the advertising partners who are working with eiIET. Third-party advertiser’s privacy policies outline the procedures and principles governing the handling of your data within the context of advertising collaborations. This privacy notice covers several key aspects: Types of data collected: It may include information on browsing habits, demographics, or other relevant data. Purpose of data collected: This often revolves around delivering targeted and personalised advertisements to users based on their interests, preferences, or behaviour. Data shared with: This includes specifics about what is shared, with whom, and for what purpose. Consent and opt-out options: information about collecting individuals’ consent for data gathering and providing mechanisms for users to opt out if they do not wish to participate in targeted advertising. Security measures: assurances regarding the security procedures to protect individuals’ data from unauthorised access, breaches, or misuse during the advertising collaboration. Compliance with regulations: statements regarding relevant data protection regulations, such as GDPR or other regional privacy laws, ensuring that the institution and its advertising partners adhere to legal standards. Updates to the policy: information on how and when the privacy policy may be updated, with a commitment to informing users of any changes. Contact information: Contact us at dpm@eiiet.com for inquiries or concerns about privacy practices, demonstrations, and accessibility. Important note: eiIET has no access to or control over third-party advertisers’ cookies.

14. Third-party Privacy Policies

This is the privacy notice for third parties in eiIET. Third-party privacy is crucial to safeguarding sensitive information and upholding privacy standards. This policy should clearly outline the following: Purpose: This notice aims to protect and safeguard students’ personal information while sharing or using it by third parties. Data shared: Personal data sharing may include student records, financial information, or other sensitive data. Legal rights: All the information will be shared by following relevant data protection laws, such as GDPR, HIPAA, or other applicable regulations. Confidentiality and security measures: Data will be protected by security measures, including encryption, access controls, and regular security assessments. Data usage limitations: They need to clearly state the purpose for which the data is used, emphasising that it should only be used for the intended educational purposes. Data retention: There will be a period of time for the third parties to access and use the information obtained from us. Their permit to access the data will end when the contractual relationship between the institution and the third party ends. Auditing and monitoring: We will regularly audit to ensure the third party’s compliance with the privacy policy, including on-site visits or remote monitoring. Contractual agreements: There will be comprehensive contracts that clearly articulate the responsibilities and obligations of both the institution and the third party regarding data protection.

15. Cookies and Web Beacons

When addressing cookies and web beacons in the privacy notice, it’s important to be transparent about data collection practices. Purpose: They were specifically used for essential functions, analytics, or other purposes. Types of cookies used: It may include session cookies, persistent cookies, or third-party cookies. Consent mechanism: Students or individuals can provide or withdraw consent for cookie usage at any time by writing a request to the data protection manager. Data collected: Personal data collected may include information on user preferences, browsing behaviour, or other relevant data. Purpose of data collection: Data collected through cookies and web beacons may include important personal information, contact details and other related information. Contact information: If you have any concerns regarding using cookies and web beacons, please contact us at dpm@eiiet.com.

16. Children’s Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. eiIET does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately, and we will do our best efforts to promptly remove such information from our records.

17. Subscribe to comments

As a user of our website, you can subscribe to comments after you have registered. With a confirmation email, we check whether you are the owner of the given email address. You can unsubscribe from the subscription function for comments at any time via a link in a subscription email. The data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us. Changes to This Privacy Policy We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page. Contact Us If you have any questions or suggestions about our Privacy Policy or if you need to delete your data, do not hesitate to contact the Data Protection Manager at dpm@eiiet.com. We will respond to you within thirty days.