Privacy policy for website https://learning.kali-akademie.de
Thank you for your interest in using our website. The protection of personal data is a top priority for us. Below you will find information about the processing of your personal data and about your rights when using our website.
1. Controller
The controller responsible for data processing is:
K+S Aktiengesellschaft
Bertha-von-Suttner-Straße 7
34131 Kassel
Germany
Phone +49 561 9301 0
Contact: datenschutz@k-plus-s.com
2. Data Protection Officer
You can contact our data protection officer as follows
Boris Reibach
Scheja & Partners GmbH & Co. KG
Adenauerallee 136
D-53113 Bonn
Germany
Phone: 0228/2272260
Contact: https://www.scheja-partners.de/kontakt/kontakt.html
3. Your rights as a data subject
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the respective legal requirements are met:
- Information (Art. 15 GDPR):
You have the right to obtain information about the personal data processed concerning you. - Rectification (Art. 16 GDPR):
You can request the rectification of inaccurate personal data concerning you. You can also request the completion of incomplete data. - Erasure (Art. 17 GDPR):
In certain cases, you can request the erasure of your personal data. - Restriction of processing (Art. 18 GDPR):
In certain cases, you can request that the processing of your data be restricted. - Data portability (Art. 20 GDPR):
If you have provided data on the basis of a contract or consent and the processing is carried out using automated procedures, you may request that you receive the data you have provided in a structured, commonly used and machine-readable format or that it be transmitted to another controller.
Right to object on a case-by-case basis:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (balancing of interests), including profiling based on those provisions.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Objection to data processing for the purpose of direct advertising:
Where we process your personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
Withdrawal of consent (Art. 7 para. 3 GDPR):
If you have given your consent to the processing of your data, you can withdraw this at any time with effect for the future. This does not affect the lawfulness of the processing of your data until you withdraw your consent.
You can revoke your consent to cookies in the cookie settings. If you give your consent for individual services on our website, you will receive further information on revocation options when giving your consent and under section 5 (“Exercise of revocation”).
Assertion of your rights:
To exercise all of your aforementioned rights, please contact datenschutz@k-plus-s.com or send a letter to the address given in section 1 above. Please ensure that we are able to clearly identify you.
If you are of the opinion that the processing of your personal data violates data protection law, you can also lodge a complaint with a supervisory authority, in particular in the EU Member State or federal state of your habitual residence, place of work or the place of the alleged violation you are complaining about.
This also applies to the supervisory authority responsible for us:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany
Phone: +49 611 1408-0
E-mail: poststelle@datenschutz.hessen.de
Website: https://datenschutz.hessen.de/
4. Details on integrated services and functionalities
4.1. Own services
4.1.1. Provision of the website
Processed personal data:
Visited website, date and time at the time of access, - Amount of data sent in bytes, source/reference from which you came to the page (click path), operating system used, IP address used, browser information, browser plug-ins, time zone, interactions with advertising, services and products.
Purpose:
Provision of the website
Legal Basis:
Art. 6 para. 1 lit. f) GDPR (balancing of interests). We pursue the legitimate interest of providing our website.
Recipient of the personal data:
Processor for the hosting of our website:
youknow GmbH, St.-Martin-Straße 57, 81669 Munich, Germany.
Third country transfer:
In principle, data processing takes place within the EU. It is possible that our processor may transfer the data transferred to it to companies based in third countries in order to perform the above-mentioned processing activities. For this data transfer, our processor assures us that the conditions set out in Chapter V of the GDPR will be complied with. Copies of the corresponding guarantees can be obtained from the contact details provided in Section 1.
Storage period of personal data:
We do not store any data for displaying the website; log files are stored for 14 days for the purposes mentioned under Logfiles.
4.1.2. Logfiles
Processed personal data:
Visited website, date and time at the time of access, - Amount of data sent in bytes, source/reference from which you reached the page (click path), operating system used, IP address used, browser information, browser plugins, time zone, interactions with advertising, services and products.
Purposes:
System security (e.g. prevention of misuse), error diagnosis
Legal basis:
Art. 6 para. 1 lit. f) GDPR (balancing of interests). We pursue the legitimate interest of system security (e.g. prevention of misuse) and error diagnosis.
Art. 6 para. 1 lit. c) GDPR (compliance with a legal obligation). This includes disclosures to government agencies upon request.
Recipients of the personal data:
Internal departments, contract processors for the hosting and further development of our website, government agencies on request.
Third country transfer:
In principle, data processing takes place within the EU. It is possible that our processor may transfer the data transferred to it to companies based in third countries in order to perform the above-mentioned processing activities. For this data transfer, our processor assures us that the conditions set out in Chapter V of the GDPR will be complied with. Copies of the relevant guarantees can be obtained from the contact details provided in Section 1.
Storage period of personal data:
14 days.
4.1.3. Newsletter registration
Processed personal data:
Date and time of registration, IP address used during registration, name, professional group, country.
Purposes:
Newsletter registration (obtaining advertising consent), proof of consent.
Legal basis:
Art. 6 para. 1 lit. a) GDPR (consent),
Art. 6 para. 1 lit. c) in conjunction with Art. 5 para. 1 lit. a, para. 2, Art. 7 para. 1 GDPR (fulfillment of our legal obligation to be able to prove consent given).
Recipients of the personal data:
Internal departments; contract processors for the hosting of our website, Net-Federation GmbH, Sürther Hauptstr. 180b, 50999 Köln (contract processor for the registration, dispatch and evaluation of our newsletter), government agencies on request.
Third country transfer:
In principle, data processing takes place within the EU. It is possible that our processors may transfer the data transferred to them to companies based in third countries in order to carry out the above-mentioned processing activities. For this data transfer, our processor assures us that the conditions set out in Chapter V of the GDPR will be complied with. Copies of the corresponding guarantees can be obtained from the contact details provided in Section 1.
Storage period of the personal data:
Deletion immediately after unsubscribing from the newsletter: e-mail address, date of registration, IP address of registration, history of newsletters received.
Obligation to provide personal data and consequences of non-provision:
Mandatory information for subscribing to the newsletter is the e-mail address; if you do not provide us with this information, you will not be able to subscribe to the newsletter.
Exercise of revocation:
Revocation can be declared via the “unsubscribe” link in every newsletter.
4.1.4. Delivery of online courses
Processed personal data:
Registration data (name, e-mail, professional group, country), registration date, date of last visit, assigned online courses and learning status of the courses.
Purpose:
We process your personal data as part of the provision and administration of online training, online courses and online learning content and to track your learning progress.
Legal basis:
Data processing is based on your consent in accordance with Art. 6 para. 1 subpara. 1 a) GDPR.
Recipients of the personal data:
Employees of K+S Minerals and Agriculture GmbH, employees of the K+S national sales company responsible for you and the direct sales partners of K+S, youknow GmbH, Munich, Germany, which provides the Learning Management System on behalf of K+S.
Third country transfer:
The processed personal data will be transferred to the country in which the K+S sales company responsible for your country or our sales partner is located. For this data transfer, the conditions set out in Chapter V of the GDPR will be complied with. Copies of the corresponding guarantees can be obtained from the contact details provided in Section 1.
Storage period of the personal data:
We store your data for as long as is necessary for the purposes pursued by us or until you withdraw your consent. After you withdraw your consent or the purpose of processing no longer applies, your data will be deleted immediately and in compliance with data protection regulations, provided there are no other statutory retention obligations.
5. Cookies
Processed personal data:
Session-ID
Purposes:
Controlling of the browser session; check whether a user is logged in.
Legal basis:
Art. 6 para. 1 lit. f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of providing our website and conducting our online courses for registered users.
Recipients of the personal data:
youknow GmbH, Munich, which provides the Learning Management System on behalf of K+S.
Third country transfer:
There is no transfer to third countries.
Storage period of the personal data:
Up to 30 minutes after the end of the browser session.
Obligation to provide personal data and consequences of non-provision:
There is no obligation to provide personal data, but the website and the online courses cannot be displayed without the cookies.
Exercise of the objection:
Ending the browser session, deleting cookies.