LOG IN
Foresight Academy

Privacy policy

We are pleased that you are visiting our website. The protection and security of your
personal information when using our website is very important to us. We would therefore like
to inform you at this point which of your personal data we collect when you visit our website
and for what purposes it is used.
This privacy policy applies to the website of Foresight Academy GmbH, which can be
reached under the domain www.foresightacademy.com as well as the various subdomains
("our website").

Who is responsible and how can I reach you?

Responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Foresight Academy GmbH
Hochbrückenstraße 6
80331 Munich
Germany
+49 17670274296
carmen.fischer-seeger@foresightacademy.com

What is it about?

This privacy statement complies with the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal in individual cases for the assertion, exercise or defense of legal claims and if there are statutory retention obligations.

Who gets my data?

We only share your personal data that we process on our website with third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis in the individual case (e.g. consent or protection of legitimate interests). In addition, we share personal data with third parties in individual cases if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 GDPR, they may be recipients of your personal data. For more information on the use of processors and web services, please refer to the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your end device during your visit to our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information by using cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. You can find detailed information about the cookies used in the cookie settings or in the Consent Manager of this website.

What rights do I have?

Under the terms of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

  • Information pursuant to Art. 15 GDPR about the data stored about you in the form of significant information about the details of the processing and a copy of your data;

  • Rectification according to Art. 16 GDPR of incorrect or incomplete data stored by us;

  • Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;

  • Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their erasure because you need them for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.

  • Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) (a) GDPR or on the basis of a contract pursuant to Art. 6 (1) (b) GDPR and these have been processed by us with the aid of automated processes. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.

  • Objection pursuant to Art. 21 GDPR against the processing of your personal data, insofar as this is carried out on the basis of Art. 6 (1) e, f GDPR and there are reasons for this that arise from your particular situation or the objection is addressed to direct advertising. The right to object does not exist if overriding compelling legitimate reasons for the processing are demonstrated or the processing is carried out for the assertion, exercise or defense of legal claims. Where the right to object does not exist for individual processing operations, it is indicated there.

  • Revocation pursuant to Art. 7 (3) GDPR of your granted consent with effect for the future.

  • Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

How is my data processed in detail?

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling does not take place.

Provision of the website

Type and scope of processing

When accessing and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting computer.

  • Date and time of access

  • Name and URL of the accessed file

  • Website from which the access is made (referrer URL)

  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR. Our website is hosted by Netlify. When you access one of our web pages, your browser therefore establishes a connection to a server of Netlify, Inc, 610 22nd Street, Suite 315, San Francisco, CA 94107, USA. You can find more information on how Netlify processes your data in Netlify's privacy policy at https://www.netlify.com/privacy/.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest to display our website and ensure security and stability on the basis of Art. 6 (1) f GDPR. The collection of data and storage in log files is mandatory for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as the further storage of log files is required by law, the processing is based on Art. 6 (1) c GDPR. There is no legal or contractual obligation to provide the data, however, accessing our website is technically not possible without providing the data.

Storage period

The aforementioned data is stored for the duration of the display of the website.

Newsletter

Type and scope of processing

If you register on our website to receive our newsletter, we collect your e-mail address and store this information together with the date of registration and your IP address. Subsequently, you will receive an e-mail in which you must confirm your registration for the newsletter (double opt-in). If you do not confirm the registration, it will automatically expire and the data will not be processed for the newsletter dispatch.

To send the newsletter, we use a service that processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.

Purpose and legal basis

We process your data for the purpose of sending the newsletter on the basis of your consent pursuant to Art. 6 (1) a GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future pursuant to Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but sending the newsletter is not possible without the provision of your data.

Storage period

After registration for the newsletter, we store the data at most until the confirmation of the registration. After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter).

Registration of a user account

Type and scope of processing

For the use of certain areas of our website, you have the option to register a user account. The information collected during registration via the mandatory fields is required to provide access to the user account. In addition, you may voluntarily provide additional information for supplementary (convenience) functions.

For the registration of a user account, your personal data will be disclosed exclusively in accordance with this privacy policy.

For user administration and authentication, we use the Supabased tool from the provider Supabase, Inc, 970 Toa Payoh North #07-04, Singapore. In order to provide the services, it is necessary to process the contact details you used for your registration. This is a mutual interest on the basis of Art. 6 (1) lit. f GDPR.

We have concluded an order processing contract according to Art. 28 GDPR with Supabase as well as standard contractual clauses, which place a transfer to a third country under appropriate data protection and oblige the processor to process your data only within the scope of our instructions.

You can find further information on data protection at https://supabase.com/privacy.

Purpose and legal basis

We process your data for the purpose of providing you with a user account to fulfill a contract with you pursuant to Art. 6 (1) b GDPR. There is a contractual obligation to provide your data, as this information is required to identify you and for the fulfillment of the contract on our behalf. There is no legal obligation to provide the data. Without the provision of this information, the registration of a user account and thus the conclusion of a contract is not possible.

Furthermore, the processing of additional voluntarily provided information for the purpose of providing further (comfort) functions is based on your consent pursuant to Art. 6 (1) a GDPR. By deactivating the functions / By deleting the voluntary information in the user account, you can declare your revocation at any time with effect for the future pursuant to Art. 7 (3) GDPR.

Storage period

We store your personal data in the context of providing the user account for the duration of the contractual relationship. After the end of the contract / deletion of the user account, your data will only be stored further if there are legal retention obligations (e.g. tax and commercial law).

Additional information that you provide to us on the basis of your consent will only be stored until you revoke your consent by deactivating the functions / by deleting the data, but at the longest until the end of the contract on which the provision of the user account is based.

Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to provide you with information and offers also within social networks and to offer you further ways to contact us and to inform yourself about our offers. In the following, we inform you about the data that we or the respective social network process from you in context with the access and use of our fan pages/accounts.

Data that we process from you

If you wish to contact us via Messenger or via Direct Message via the respective social network, we generally process your user name via which you contact us and, if applicable, store further data provided by you insofar as this is necessary to process/respond to your request.

The legal basis is Art. 6 (1) f GDPR (processing is necessary to protect the legitimate interests of the controller).

(Static) Usage Data we Receive from the Social Networks

We receive automatically provided statistics regarding our accounts via Insights functionalities. The statistics include, among other things, the total number of page views, likes, information on page activities and post interactions, reach, video views, and information on the proportion of men/women among our fans/followers.

The statistics only contain aggregated data that cannot be related to individual persons. You are not identifiable to us by this.

Which data the social networks process from you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and, to this extent, no user account for the respective social network is required.

Please note, however, that when you visit the respective social network, the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no control. Details on this can be found in the privacy policy of the respective social network (see the corresponding links above)

Insofar as you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required.

We have no influence on the data processing by the social networks within the scope of their use by you. To our knowledge, your data is stored and processed in particular with regard to the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies), on the basis of which advertising based on your interests is played both within and outside the respective social network. It cannot be ruled out that your data will be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the privacy policy/cookie policy of the social networks. There you will also find information on your rights and objection options.

Matomo Web Tracking

Type and scope of processing

We use the open source software tool Matomo (formerly PIWIK) on our website. The software sets a cookie in your browser (for cookies, see already above). If individual pages of our website are called up, the following data is stored:

Two bytes of the IP address of the user's calling system (anonymized IP address).

The website called up

The website from which the user accessed the accessed website (referrer)

The subpages that are accessed from the accessed website

The time spent on the website

The frequency with which the website is accessed

We use a version of the software hosted by InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand. In doing so, the above data is processed by InnoCraft Ltd.

Purpose and legal basis

We process your data with the help of the analysis software Matomo for the purpose of evaluating the use of individual components and contents of our website on the basis of your consent pursuant to Art. 6 (1) a GDPR and § 25 para. 1 TDDDG.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by InnoCraft Ltd. Further information can be found in the privacy policy for Matomo Cloud: https://www.innocraft.com/privacy.

Google Analytics

Type and scope of processing

We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our website, subpages visited and the time spent by visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

We process data with the help of Google Analytics for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG.

Data transfer to the USA

Insofar as personal data is transmitted to servers in the USA when using Google Analytics, this is done on the basis of the EU Commission's adequacy decision on the Data Privacy Framework pursuant to Art. 45 para. 1 GDPR. If necessary, we will also ask you for your consent in accordance with Art. 49 para. 1 lit. a GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and § 25 (1) TDDDG.

Data transfer to the USA

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 (1) sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there are risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which we are not aware).

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Storyblok CDN

Type and scope of processing

We use Storyblok CDN to properly provide the content of our website. Storyblok CDN is a service provided by Storyblok GmbH, which acts as a content delivery network (CDN) on our website.

A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Storyblok GmbH, Peter-Behrens-Platz 2, A-4020 Linz, Austria, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Storyblok CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimization of our online offer in accordance with Art. 6 (1) lit. f. GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Storyblok GmbH. Further information can be found in the privacy policy for Storyblok CDN: https://www.storyblok.com/legal/privacy-policy.

Usercentrics

Type and scope of processing

We have integrated Usercentrics on our website. Usercentrics is a consent solution from Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, with which consent to the storage of cookies can be obtained and documented. Usercentrics uses cookies or other web technologies to recognize users and store the consent given or revoked.

Purpose and legal basis

The use of the service is based on the legally required consent to the use of cookies in accordance with Art. 6 (1) lit. c. GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Usercentrics GmbH. Further information can be found in the privacy policy for Usercentrics: https://usercentrics.com/privacy-policy/.

Youtube Channel

When you visit our Youtube Channel, Youtube (Google) collects, among other things, your IP address and other information that is present in the form of cookies on your PC. This information is used to provide us, as the operator of the Youtube pages, with statistical information about the use of the Youtube page. Youtube provides more detailed information on this under the following link: https://policies.google.com/privacy?hl=de&gl=de#infocollect.

By means of the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect your data on our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you provide "publicly".

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) f GDPR. Should you, as a user, have given your consent to the data processing to the respective provider of the social network, the legal basis of the processing extends to Art. 6 (1) a, Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

We are jointly responsible with Youtube for the personal content of the fan page. Data subject rights can be asserted with Google Ireland Ltd. as well as with us.

The primary responsibility for the processing of data lies with Youtube according to the GDPR and Youtube fulfills all obligations under the GDPR with regard to the processing of data, Google Ireland Ltd. provides the essence of the Page Insights supplement to the data subjects.
We do not make any decisions regarding the processing data and storage duration of cookies on user terminals.

For more information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion, as well as guidelines on the use of cookies and similar technologies in the context of registration and use, please refer to the privacy policy/cookie policy of Youtube:

https://policies.google.com/technologies/product-privacy?hl=de&gl=de

https://policies.google.com/privacy?hl=de&gl=de#infochoices