DATA PRIVACY POLICY

 

Introduction
As part of its operations, IH&SAT UG, with its registered office at Stadtstrasse 11, D-79104 Freiburg, Germany, collects and processes certain information, some of which may be classified as “personal data.” In compliance with applicable data protection legislation, we inform you that your data may be collected in the following situations:

  • when you navigate on our website,
  • through emails exchanged between you and IH&SAT UG or other email communication tools,
  • when you register on the website,
  • when you subscribe to our newsletter,
  • when you make an appointment for a personal consultation.

Your data will be integrated into IH&SAT UG’s data processing system. Protecting your privacy is a top priority for us, so we handle this data responsibly and confidentially, strictly for specified purposes.

The individuals affected by this data processing include users of our website, clients, prospects, and subscribers (hereafter “Data Subjects”).

This website is protected by reCAPTCHA and is subject to Google’s privacy policy.

Data Collected and Its Use

  • Data Provided Directly
    This refers to information you directly provide to us, such as via a contact form (for inquiries, course registration, appointment scheduling, or newsletter subscription) or through email and telephone communications.
  • Automatically Collected Data
    During your visits to the website, and with your consent in compliance with applicable laws and regulations, we may collect anonymous web analytics data related to your browsing. Google Analytics cookies facilitate this process. Data collected includes:
    • IP address,
    • device and browser used,
    • date and time of your visit.

You can manage your cookie preferences at any time through the “Cookies” menu, available as a pop-up on our website. This option is accessible on all browsers and devices (including smartphones and tablets).

Use of Data

Data Provided Directly
Depending on the nature and purpose of your interaction with IH&SAT UG, we may collect data to identify you. This includes:

  • contact form for information requests and appointment scheduling (first name, last name, email, phone number),
  • registration form for courses (first name, last name, email, phone number, postal address),
  • newsletter subscription form (first name, last name, email).

We may also collect additional information to help manage your course registration, such as details related to participation, invoices, responses to your questions, and support materials. By providing your email address, you consent to its use as a communication channel between IH&SAT UG and, if applicable, with participants in your group. We take the necessary steps to ensure this information is used solely for its intended purpose.

Automatically Collected Data
Web analytics data, including anonymous IP addresses, browser information, visit time, operating system, language, and viewed pages, is collected anonymously. Google Analytics cookies allow us to measure website traffic, track usage, and identify any issues to continuously improve the user experience.

Data Sharing and Transfer
Data covered by this policy is used by IH&SAT UG, which is responsible for data processing. Only the following individuals may access this data, strictly for the purposes detailed below:

  • Employees:
    IH&SAT UG team members who reasonably require this data to fulfill the purposes set out in this policy.

 

  • Cookie management tools

             We use the Real Cookie Banner to manage cookies. Visit https://devowl.io/rcb/data-processing/ for more details.

 

  • Third Parties:
    We may share data with third-party providers, such as:
    • Brevo (newsletter distribution),
    • Calendly (appointment scheduling),
    • Axeptio (cookie consent management),
    • Microsoft 365 (office work IT applications and online services).

These providers act as IH&SAT UG’s subcontractors and are obligated to comply with European data protection laws. For further information, refer to their privacy policies.

Data transferred includes:

  • Brevo: first name, last name, email address,
  • Calendly: first name, last name, email address, phone number,
  • Axeptio: anonymous IP, web browser, version and name, referral URL,
  • Microsoft 365: email address.

Third parties cannot access user data beyond what is necessary for their specific purpose. We will not share your data with additional third parties unless required by law or for legal proceedings, evidence, or rights protection. If you follow hyperlinks from our site to another website, please note that we are not responsible for and have no control over their privacy policies or practices.

Legal Basis for Data Processing
IH&SAT UG collects personal data from Data Subjects based on either (i) their consent, where such consent is required, which is freely given, clear, and unambiguous; (ii) a contract involving the data subject or pre-contractual measures requested by the data subject; (iii) a legal authorization; (iv) a legitimate interest; or (v) when data processing is necessary to establish, exercise, or defend legal claims or when the courts act in a judicial capacity.

The legal basis for data processing is Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016, on data protection and free data movement (GDPR).

Data Retention Period

Purpose

Retention Period

Contract implementation for participation in our courses

Data is processed as long as necessary for participation-related matters, including follow-up and support after the course, and/or until you request data deletion.

Information requests

Data is processed as long as necessary to respond to your request and/or until you request data deletion.

Marketing

Data is processed for 3 years after your last interaction with us or until you unsubscribe from the newsletter.

Beyond the processing period necessary to fulfill the purposes described above, data will be securely stored and protected with restricted access for the period during which liability may arise due to processing. Data will be deleted once any applicable liability periods expire.

Personal data may be archived to comply with legal, tax, accounting, and therapeutic obligations, such as the requirement to retain invoices for 10 years.

Security of Your Personal Data
IH&SAT UG protects your personal data through physical and organizational measures to prevent unauthorized access, misuse, disclosure, loss, or destruction. However, as the Internet is not completely secure, we cannot guarantee the absolute security of personal data transmitted via our website. You are responsible for ensuring that the device you use to access our site is properly secured against malicious software.

Without adequate security measures (e.g., secure browser settings, updated antivirus software, firewall, avoidance of dubious software), your data and passwords may be vulnerable to unauthorized access by third parties. We encourage you to choose a strong password and keep it confidential.

Rights Regarding Your Personal Data
Data is managed and stored in full compliance with GDPR (Chapter 3, Articles 12–23). You have the following rights regarding your data:

  • Right of access,
  • Right of rectification,
  • Right of erasure,
  • Right to restrict processing,
  • Right to notification (rectification, erasure, restriction),
  • Right to data portability,
  • Right to object,
  • Right not to be subject to automated decision-making or profiling.

 

Exercising Your Rights
To exercise your rights, please contact:

Dr. Katrin REUTER
Stadtstrasse 11, D-79104 Freiburg, Germany
Tel.: +49 761 55 29 66
Email: info@naranjo-sat.com

 

Changes to this Privacy Policy
This Privacy Policy was last updated in November 2024. It may be amended periodically to maintain legal compliance and reflect changes in our data collection practices. We recommend that users review our policy periodically to stay informed of any updates. If necessary, we may notify users by email of significant changes to this policy.