The following information provides an overview of how we process your personal data and outlines your rights under data protection law.
1. Who is the data controller/ processor and who can I contact?
The controller is
BBIS Berlin Brandenburg International School GmbH
Schopfheimer Allee 10
Tel.: +49 (0)33203 8036-0
Fax: +49 (0)33203 8036-121
You can contact our Data Protection Officer at:
BBIS Berlin Brandenburg International School GmbH
Data Protection Officer
Schopfheimer Allee 10
Tel.: +49 (0)33203 8036-230
3. What kind of data do we use?
In principle, you can visit our web pages without disclosing your identity to us. If you send us an e-mail or communicate with us via a contact form, your message and your e-mail address will be used exclusively for this correspondence with you.
Applications in the context of our job advertisements
The primary statutory basis for the processing of your personal data in this application process is § 26 BDSG (Federal Data Protection Law). According to this law, it is allowed to process data which is required to make a decision on an employment relationship. Should the data be required following completion of the application process for any prosecution, the data can be processed based on the requirements of Art. 6 of the EU GDPR, in particular for the purposes of legitimate interests as set out in Art. 6 (1) (f) EU GDPR. Our interest then concerns the establishment or defence of legal claims.
By sending us your application, you declare your acceptance that we may store and process your data for the purposes of the application process, staffing and recruitment. You may withdraw this consent at any time and withdraw your application.
The personal data collected as part of your application will only be processed by us for the purposes of examining the applications and staffing. The responsible employees of our HR department cooperate with the management of the specialist departments to fill the positions.
Your data will be deleted six months after completion of the application process, unless you agree to a longer storage period, in which case you will be considered for future job advertisements. In the event of your recruitment, your data will be incorporated into our HR data records.
Our employees and parents are able to log in to the internal portal of our website. These accounts are created in the course of recruitment (employees) pursuant to Art. 6 (1) (f) EU GDPR and/or during the conclusion of contracts (parents) pursuant to Art. 6 (1) (b) EU GDPR. This data is essentially private information in the context of schooling. It is not possible for third parties to use the internal portal of the website. Please also note the information in the school contract and our General Terms and Conditions in this regard.
4. For which purposes and on what legal basis do we use your data?
We process your personal data in compliance with the provisions of the General Data Protection Regulation of the EU (EU GDPR) and the Federal Data Protection Law (BDSG). Please also see our information about your right to object pursuant to Article 21 GDPR.
a) To fulfil contractual obligations (Art. 6 (1) (b) EU GDPR)
We process personal data for the performance of our services, as well as to take steps arising from your request prior to entering into a contract.
b) Based on your consent (Art. 6 (1) (a) EU GDPR)
Insofar as you have given us your consent to process personal data for certain purposes (e.g. receiving a newsletter, use of your photos), the processing is lawful on the basis that you have given your consent. You may withdraw your consent at any time. Please note that the withdrawal only has effect for the future. Processing carried out prior to withdrawal is not affected thereby.
c) In context of balancing of interests (Art. 6 (1) (f) EU GDPR)
If necessary, we process your data beyond the actual performance of the contract in order to safeguard our legitimate interests or those of third parties.
• Establishment and defence of legal claims
• Guaranteeing IT security
• Statistical purposes
5. Who obtains my data?
Within Berlin Brandenburg International School GmbH (BBIS), your data is only accessed by whoever needs it to carry out your request and for the performance of our contractual and legal obligations. Service providers and vicarious agents engaged by us can also process data for these purposes if they commit themselves to confidentiality and follow our data protection law instructions.
6. Is the data transferred to a third country?
The data is not transferred to countries outside of the EU/EEA (“third countries”).
7. How long is my data stored?
We process and store your personal data for the period required to perform our contractual and legal obligations. The data is deleted, if it is no longer required for the performance of contractual or legal obligations. This is unless further processing of the data – subject to a time limit – is required to comply with retention periods prescribed by commercial and tax law, for example the German Commercial Code and the Tax Code.
8. What are my data protection rights?
You have the right to information pursuant to Article 15 EU GDPR, the right to rectification pursuant to Article 16 EU GDPR, the right to erasure pursuant to Article 17 EU GDPR, the right to restriction of processing pursuant to Article 18 EU GDPR, the right to object pursuant to Article 21 EU GDPR and the right to data portability pursuant to Article 20 EU GDPR. In addition, you have a right to lodge a complaint with a supervisory authority (Article 77 EU GDPR in conjunction with § 19 BDSG). For a list of supervisory authorities and their contact details, click here.
The supervisory authority with responsibility for BBIS is: The Regional Commissioner for Data Protection and for the Right of Access to Files, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Tel.: +49 (0)33203 356-0. E-mail: firstname.lastname@example.org.
You can withdraw the consent you have given us for the processing of your personal data at any time. Please note that the withdrawal only has effect for the future. Processing carried out prior to withdrawal is not affected thereby. Please also see our information about your right to object pursuant to Article 21 GDPR.
If you wish to exercise your rights or if you have any further questions about data protection, please contact our Data Protection Officer (see details above).
9. Is there an obligation to provide data?
You only have to provide us with personal data if you actively participate in our services. The personal data concerned are those required for performance of the services, processing your requests, and processing the associated contractual rights and obligations. This is what we are also obliged to collect by law.
10. Does automated decision-making, including profiling, take place?
In principle we do not use any fully automated decision-making, including profiling, pursuant to Article 22 EU GDPR. In the event that we use profiling for targeted marketing in the context of our public relations work, you will be informed of this separately.
11. Information about your right to object pursuant to Article 21 EU GDPR
a) Right to object in individual cases
You have the right to object to the processing of your personal data for reasons that arise from your particular situation. The prerequisite is that the data is processed in the public interest or on the basis of balancing of interests. The same applies to profiling. In the event of an objection being raised, we will no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing of this data which override your interests, rights and freedoms; or the processing serves the establishment, exercise or defence of legal claims.
b) Objection to the processing of your data for PR activities
We use your personal data for our PR activities in individual cases. You have the right to object to this at any time; the same applies to profiling if it is related to direct marketing. In the event of an objection being raised, we will no longer process your personal data for these purposes. The objection can be raised on an informal basis and should if possible be addressed to our Data Protection Officer using the contact details provided above.
12. What kind of data are processed when using the website?
a) Usage-related information
We obtain usage data when you visit our web pages. This includes details like screen resolution, browser version, internet access, operating system, language, plug-ins, origin by country/region and search engines. The stored data is only evaluated for statistical purposes. The data is not transmitted to third parties and they are not evaluated with respect to the user.
13. How secure is my data?
In order to protect the personal data of both our customers and other viewers, we use a secure online transmission technology called a “Secure Socket Layer” (SSL). All the information transmitted using this secure method is encrypted before it is sent. Your personal data is exclusively processed in data centres and on computers that are protected by industry-standard security technologies (e.g. firewalls, password protection, access control, etc.).
14. Third-party modules, plug-ins and analytics tools
14.1 Third-party modules
We provide a link allowing our employees, parents and students to log in to ManageBac (pursuant to Art. 28 (3) EU GDPR). These accounts are created in the course of recruitment (employees) pursuant to Art. 6 (1) (f) EU GDPR and/or during the conclusion of contracts (parents, students) pursuant to Art. 6 (1) (b) EU GDPR. ManageBac is essentially used as an information platform for communication, notifications, news and sharing documents. Third parties are not able to use ManageBac. Please also note the information in the school contract and our General Terms and Conditions in this regard.
14.2 Plug-ins and tools
14.3. Analytics tools
Google Tag Manager
Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide additional services connected with use of the website and the internet to the website operator. Google uses pseudonyms for this purpose. The IP address transmitted by your browser in connection with Google Analytics is not combined with other Google data. Google Tag Manager is used on this website. Google Tag Manager is a solution of Google Inc., allowing companies to manage website tags on an interface. Google Tag Manager is a cookie-free domain which does not collect any personal data. Google Tag Manager enables the activation of other tags which by themselves collect data in certain circumstances. We are notifying you of this separately. Google Tag Manager does not access these data. Insofar as the user opted for deactivation at domain or cookie level, this is maintained for all tracking tags implemented with Google Tag Manager.
To measure conversion rates, this website uses the visitor activity pixel of Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will be transferred to the USA and other third-party countries too. This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyze the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns. For us as the operators of this website, the collected data is anonymous. We are not in a position to arrive at any conclusions as to the identity of users. However, Facebook archives the information and processes it, so that it is possible to make a connection to the respective user profile and Facebook is in a position to use the data for its own promotional purposes in compliance with the Facebook Data Usage Policy. This enables Facebook to display ads on Facebook pages as well as in locations outside of Facebook. We as the operator of this website have no control over the use of such data. The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in effective advertising campaigns, which also include social media. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time. In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/. You also have the option to deactivate the remarketing function “Custom Audiences” in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook. If you do not have a Facebook account, you can deactivate any user based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.