Data Protection and Overview
This privacy policy provides a concise overview of how your personal data is handled when you visit our website. Personal data refers to any information that can identify you personally. For detailed insights into our data protection practices, please refer to the full privacy policy below.
Responsible Party for Data Collection
The data processing on this website is conducted by CampusCruise. Our contact details can be found in the Imprint section (add a contact page link) of this website.
How We Collect Your Data
Your data may be collected in two ways:
Purpose of Data Usage
We use your data for various purposes, including:
Your Rights Regarding Your Data
You have the right to request information about the origin, recipient, and purpose of your stored personal data at any time and free of charge. You can also request corrections, blocking, or deletion of your data. For any inquiries regarding data protection, please contact us using the information in the Imprint. Additionally, you have the right to lodge a complaint with the relevant supervisory authority.
Analytics and Third-Party Tools
When you visit our website, your browsing behavior may be evaluated statistically, primarily using cookies and analysis tools. Typically, this analysis is done anonymously and cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. Details can be found in our privacy policy under “Third-party tools and analysis.”
Social Media Presence
We maintain profiles on various social networks and platforms to communicate with customers and provide information about our services. When accessing these networks, the terms and data processing guidelines of their respective operators apply.
Unless stated otherwise, we process the data of users who interact with us on social media platforms, such as commenting on posts or sending messages.
General Information and Obligations
Data Protection Commitment
We are committed to protecting your personal data and handling it confidentially in accordance with legal data protection regulations. This privacy policy explains what data we collect and how we utilize it, as well as the purposes behind our actions.
Please be aware that data transmission over the internet (e.g., via email) may have security vulnerabilities, and complete protection from third-party access is not feasible.
Responsible Body Information
The entity responsible for data processing on this website is:
CampusCruise
Hildesheimer Str. 304, 30519 Hannover
+49 176 62841415
info@campuscruise.de
Withdrawal of Consent for Data Processing
Many data processing activities require your explicit consent. You can withdraw your consent at any time by sending us an informal email. The legality of data processing conducted prior to your withdrawal remains unaffected.
Right to File a Complaint
If you believe there has been a violation of data protection law, you have the right to lodge a complaint with the relevant supervisory authority. The competent authority for data protection issues is the data protection officer of the state where our company is based. A list of data protection officers and their contact details can be found at the following link: List of data protection officers..
Data Portability Rights
You have the right to receive the data we process automatically based on your consent or contractual obligations in a common, machine-readable format. You may also request direct transfer of this data to another responsible party if technically feasible.
SSL/TLS Encryption
For security purposes and to protect confidential information (such as orders or inquiries sent to us), this website employs SSL or TLS encryption. You can recognize an encrypted connection by the address bar changing from “http://” to “https://” and the lock symbol in your browser.
When SSL/TLS encryption is active, the data you send to us cannot be accessed by third parties.
Encrypted Payments on Our Website
If you provide payment information after entering a paid contract, this data is processed securely for payment purposes. Payment transactions using standard payment methods (e.g., Visa / MasterCard, direct debit) are conducted over a TLS connection.
You can recognize an encrypted connection by the address bar changing from “http://” to “https://” and the lock symbol in your browser.
Information, Blocking, Deletion
In accordance with applicable rights, you are entitled to free information about your personal data collected, its origin, and the purpose of processing. You may also request correction, blocking, or deletion of this data. For this, and for any further inquiries regarding personal data, please contact us at the provided address.
Security Measures
We implement appropriate security measures in line with Article 32 GDPR to ensure the confidentiality, integrity, and availability of data. These measures include physical access controls and data handling protocols to protect against unauthorized access.
Contacting Us
If you contact us (e.g., via contact form, email, phone, or social media), the information you provide will be used to process your inquiry according to Article 6 (1)(b) GDPR. The details you share may be stored in a CRM system or a similar request management system.
We will delete inquiries that are no longer necessary, reviewing their necessity every two years while adhering to legal retention obligations.
Objection to Advertising Emails
We hereby oppose the use of contact data published for sending unsolicited advertising materials. We reserve the right to take legal action against the sending of unsolicited promotional information.
Data Collection on Our Website
Cookies
Some pages of our website use cookies. Cookies do not harm your computer and do not contain viruses. They are small text files stored on your computer by your browser to enhance user-friendliness, effectiveness, and security.
Most cookies used are “session cookies,” which are automatically deleted after your visit. Other cookies remain on your device until you delete them, allowing us to recognize your browser upon your next visit.
You can configure your browser to notify you about cookie settings, allowing you to accept cookies selectively or deny them altogether. Disabling cookies may restrict website functionality.
Cookies necessary for conducting electronic communication or providing specific features (e.g., shopping cart) are saved based on Article 6 (1)(f) GDPR. The website operator has a legitimate interest in storing these cookies for optimal service provision.
Server Log Files
The website provider automatically collects and stores information in server log files transmitted by your browser. This includes:
This data is not merged with other data sources.
Data processing is based on Article 6 (1)(b) GDPR, allowing for processing necessary for contractual obligations.
Contact Forms
When you submit inquiries via the contact form, your details, including your contact information, will be stored for processing and potential follow-up. We will not share this data without your consent.
Data entered in the contact form is processed based on your consent (Article 6 (1)(a) GDPR), which you can withdraw at any time. An informal email notification suffices. Data retention is maintained until you request deletion, withdraw consent, or the purpose for storage no longer applies. Legal retention periods remain unaffected.
Comment Function on This Website
When using the comment function, your comment, along with the timestamp, email address, and selected username, will be saved.
IP Address Storage
Our comment function saves the IP addresses of users posting comments. As we do not pre-screen comments, this data is essential to take action against authors in case of legal violations.
Comment Subscription
As a user, you can subscribe to comments after registration. A confirmation email will verify the ownership of your provided email address. You can unsubscribe anytime via the link in the notification emails. However, data provided for other purposes (e.g., newsletter subscription) will remain stored.
Comment Retention Period
Comments and associated data (e.g., IP address) are saved and will remain until the commented content is deleted or removed for legal reasons (e.g., offensive comments).
Legal Foundation
Comments are stored based on your consent (Art. 6 Para. 1 a GDPR). You can revoke your consent at any time. An informal notification via email is sufficient. The legality of any data processing already performed remains unaffected by the withdrawal.
Data Processing (Customer and Contract Data)
We collect, process, and use personal data only as necessary for the establishment, content, or modification of the legal relationship (inventory data). This is done under Art. 6 Para. 1 lit. b GDPR, which permits data processing to fulfill a contract or pre-contractual measures. We only collect, process, and use personal data regarding your use of our website (usage data) if necessary to enable or charge the user for the use of the service.
Customer data collected will be deleted once the order is completed or the business relationship has ended. Statutory retention periods remain unaffected.
Order Processing in the Online Shop and Customer Account
We process our customers’ data during the order processes in our online shop to allow them to select and order products and services, along with payment and delivery.
The processed data includes inventory data, communication data, contract data, payment data, and the individuals affected by the processing include our customers, interested parties, and other business partners. The processing occurs to provide contractual services in the context of operating an online shop, billing, delivery, and customer service. We utilize session cookies to store the shopping cart contents and permanent cookies to maintain the login status.
Processing is carried out under Art. 6 Para. 1 lit. b (Execution of order processes) and c (Legally required archiving) GDPR. Information marked as required is necessary to justify and fulfill the contract. We only share data with third parties as needed for delivery, payment, or legal obligations towards legal advisors and authorities. Data will only be processed in third countries if necessary to fulfill the contract (e.g., upon the customer’s request for delivery or payment).
Users can optionally create a user account, allowing them to view their orders. The required mandatory information is communicated to users during registration. User accounts are private and cannot be indexed by search engines. If users terminate their user accounts, their data regarding the account will be deleted unless retention is required for commercial or tax law reasons under Art. 6 Para. 1 lit. c GDPR. Information in the customer account remains until deleted, with subsequent archiving if legally required. Users are responsible for backing up their data if termination occurs before the contract ends.
During registration and the use of our online services, we store the IP address and the time of the respective user action. This storage is based on our legitimate interests, as well as protecting the user against misuse and unauthorized use. This data is not shared with third parties unless necessary to enforce our claims or there is a legal obligation to do so under Art. 6 Para. 1 lit. c GDPR.
Deletion occurs after the statutory warranty and comparable obligations expire, with the necessity of data storage assessed every three years; in the case of statutory archiving obligations, deletion occurs after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).
Participation in Affiliate Partner Programs
Within our online offer, we utilize our legitimate interests (i.e., analysis, optimization, and economic operation of our online offer) in accordance with Art. 6 Para. 1 lit. f GDPR, customary tracking measures necessary for the operation of the affiliate system. Below, we clarify the technical background for users.
The services offered by our contractual partners may also be advertised and linked on other websites (known as affiliate links or after-buy systems, e.g., links or third-party services offered after a contract is concluded). The operators of these websites receive a commission if users follow the affiliate links and subsequently take advantage of the offers.
In summary, tracking whether users interested in affiliate links and/or our available offers take advantage of them is necessary for our online offer. For this purpose, the affiliate links and our offers are supplemented with specific values, such as the initial website (referrer), time, an online identifier of the operator of the website where the affiliate link was located, an online identifier of the respective offer, an online identifier of the user, and tracking-specific values like Advertising material ID, Partner ID, and categorizations.
The online identifiers of the users we use are pseudonymous values. This means that the online identifiers themselves do not contain personal data such as names or email addresses. They merely help us determine whether the same user who clicked on an affiliate link or expressed interest in an offer through our online offer took advantage of it, i.e., has concluded a contract with the provider. However, the online identifier is personal if the partner company and we possess the online identifier alongside other user data. This allows the partner company to inform us whether the user has taken advantage of the offer so that we can process any bonuses.
Social Media Integration
Share content via plugins (Facebook, WhatsApp, Instagram, etc.)
The content on our pages can be shared in accordance with data protection regulations in social networks such as Facebook, Twitter, or Google+. For this purpose, this site uses a sharing tool that only establishes direct contact between the networks and users when the user actively clicks on one of these buttons.
This tool does not automatically transfer user data to the operators of these platforms. If the user is logged into one of the social networks, an information window appears in which the user can confirm the text before sending when using the social buttons from Facebook, Google + 1, Twitter, and others.
Our users can share the content of this page in accordance with data protection regulations in social networks without creating complete surfing profiles by the operators of the networks.
Analytics Tools and Advertising
Google Analytics
This website employs features of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies,” which are text files stored on your computer, enabling analysis of your website usage. The information generated by the cookie about your use of this website is typically transmitted to a Google server in the USA and stored there.
IP Anonymization
We have activated the IP anonymization feature on this website. This means your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. The full IP address is only transferred to a Google server in the USA and shortened there in exceptional cases. Google will use this information on behalf of the operator of this website to evaluate your usage, compile reports on website activity, and provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser Plug-in
You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that if you do so, you may not be able to use the full functionality of this website. You can also prevent Google from collecting data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: Google Analytics Opt-Out.
Objection to Data Collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set that prevents the collection of your data on future visits to this website: Deactivate Google Analytics for this Website.
You can find more information on user data handling in Google Analytics in Google’s privacy policy: Read more.
Order Processing
We have entered a contract for order data processing with Google and fully implement the stringent requirements of the German data protection authorities when using Google Analytics.
Demographic Characteristics in Google Analytics
This website uses the “demographic features” function of Google Analytics. This allows reports to be created that contain information about the age, gender, and interests of website visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as outlined in the “Objection to Data Collection” section.
Plugins and Tools
YouTube
Our website uses plugins from the Google-operated YouTube site. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers will be established. The YouTube server is informed about which of our pages you have visited.
If you are logged into your YouTube account, you allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is utilized in the interest of an attractive presentation of our online offers, representing a legitimate interest under Art. 6 Para. 1 lit. f GDPR. Further information on user data handling can be found in YouTube’s privacy policy: YouTube Privacy Policy.
Newsletter Subscription
If you wish to subscribe to our newsletter available on our website, we require your email address, along with information that verifies your ownership of this email address and your consent to receive our newsletter. No additional data is collected unless provided voluntarily. We use this information solely to send you the requested newsletters and do not share it with third parties.
The data provided in the newsletter registration form is processed exclusively based on your consent (Art. 6 Para. 1 lit. a GDPR). You can withdraw your consent for the storage of your data, email address, and its use for sending the newsletter at any time, for example, through the “Unsubscribe” link included in the newsletter. The legality of the data processing carried out prior to your revocation remains unaffected.
Your data, stored for the purpose of newsletter subscription, will be retained until you unsubscribe. After unsubscribing, your data will be deleted. Data retained for other purposes (e.g., email addresses for the member area) will not be affected.
Newsletter Performance Tracking
Our newsletters contain a “web beacon,” a pixel-sized file that is retrieved from our server when the newsletter is opened. If we use a mailing service provider, this data may be retrieved from their server as well. This retrieval process gathers technical information such as browser and system information, IP address, and access time.
This information is utilized to technically enhance our services based on the data collected, as well as to analyze user reading habits based on their locations (determined using the IP address) and access times. The statistical analysis includes determining whether newsletters are opened, when they are opened, and which links are clicked. Although this information can technically be linked to individual newsletter recipients, our intention, along with that of the mailing service provider, is not to monitor individual users. Instead, the evaluations serve to understand user reading preferences, allowing us to tailor our content accordingly.
A separate revocation of the performance tracking is not possible; in this case, you must cancel the entire newsletter subscription.
Security Measures
The IP address of visitors, the user ID of logged-in users, and the usernames associated with login attempts are conditionally logged to monitor for malicious activities and protect the site from specific types of attacks. Examples of logged conditions include login attempts, logout requests, suspicious URL access, content changes on the website, and password updates. This information is retained for 14 days.
Our website is scanned by Sucuri SiteCheck to detect potential malware and security vulnerabilities. We do not send personal information to Sucuri; however, Sucuri may encounter personal information during its scans (e.g., in comments). Further details can be found in the Privacy Policy of Sucuri.
This website is part of a network protecting against distributed brute-force attacks. To activate this protection, the IP addresses of visitors logging into the site are shared with a service provided by iThemes. For details on data protection regulations, please refer to Privacy Policy of iThemes..
Google Fonts
This website utilizes Google Fonts to ensure uniform font display. When you access a page, your browser loads the necessary fonts into its cache to display text correctly.
To achieve this, your browser must establish a connection to Google’s servers, thereby informing Google of your IP address accessing our website. Google Fonts are used to maintain a consistent and appealing presentation of our online services, which constitutes a legitimate interest under Art. 6 Para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font available on your computer will be used.
For additional information regarding Google Fonts, please visit the Google Web Fonts at google fonts faq and in Google’s privacy policy: Privacy Policies von Google.
Payment Processing
PayPal
On our website, we provide payment options through PayPal. The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).
If you choose PayPal as your payment method, the payment details you provide will be transmitted to PayPal.
Your data will be shared with PayPal based on Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (contractual processing). You have the option to withdraw your consent for data processing at any time. Withdrawal does not affect the legality of past data processing activities.
Hosting and Email Services
The hosting services we utilize facilitate the following operations: infrastructure and platform services, computational capacity, storage space, database services, email dispatch, security services, and technical maintenance necessary for operating our online offerings.
We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, and metadata from customers, interested parties, and visitors of this online offering based on our legitimate interests in the efficient and secure operation of this online service in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (agreement on order processing).
Access Data and Log File Collection
We, or our hosting provider, collect data about every access to the server hosting this service (commonly known as server log files) based on our legitimate interests as outlined in Art. 6 Para. 1 lit. f GDPR. The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, success notifications, browser type and version, user’s operating system, referrer URL (the previously visited page), IP address, and requesting provider.
For security purposes (e.g., to investigate misuse or fraud), log file information is stored for a maximum of 7 days and is then deleted. Data that must be retained for evidence purposes will not be deleted until the issue has been fully resolved.