Business meets Training

Privacy Notice (Version: 18 March 2026)

A. General Information

(1) Definitions

For the purposes of this Privacy Notice, the following definitions pursuant to Article 4 of the General Data Protection Regulation (GDPR) apply:

• “Personal Data” (Article 4(1) GDPR)

  • Any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

• “Processing” (Article 4(2) GDPR)

  • Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

• “Controller” (Article 4(7) GDPR)

  • The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.

• “Third Party” (Article 4(10) GDPR)

  • A natural or legal person, public authority, agency, or body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

The controller within the meaning of Article 4(7) GDPR is:

Britta Tyschak

Kemminghauser Str. 17

44339 Dortmund

Germany

(3) Legal Bases for the Processing of Personal Data

(a)

As a general principle, the processing of personal data is prohibited unless it is permitted under one of the legal bases provided by law. These include, in particular:

• Article 6(1), first subparagraph, point (a) GDPR (“Consent”)

The data subject has given consent to the processing of their personal data for one or more specific purposes.

• Article 6(1), first subparagraph, point (b) GDPR

Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.

• Article 6(1), first subparagraph, point (c) GDPR

Processing is necessary for compliance with a legal obligation to which the controller is subject.

• Article 6(1), first subparagraph, point (d) GDPR

Processing is necessary in order to protect the vital interests of the data subject or of another natural person.

• Article 6(1), first subparagraph, point (e) GDPR

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

• Article 6(1), first subparagraph, point (f) GDPR (“Legitimate Interests”)

Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

(b)

The storage of information on an end user’s terminal equipment or access to information already stored on such terminal equipment is permitted only where one of the following legal bases applies in favor of the controller:

• Section 25(1) TDDDG

The end user has given informed and comprehensive consent.

• Section 25(2), No. 1 TDDDG

Where the sole purpose of storing information on the end user’s terminal equipment or accessing information already stored on the end user’s terminal equipment is to carry out the transmission of communication over a public telecommunications network.

• Section 25(2), No. 2 TDDDG

Where the storage of information on the end user’s terminal equipment or access to information already stored on the end user’s terminal equipment is strictly necessary in order for the provider of a digital service to provide a digital service explicitly requested by the user.

(c)

The legal basis applicable to each processing activity carried out by us is specified, where required, in the relevant sections of this Privacy Notice. In some cases, a processing activity may be based on more than one legal basis.

(4) Erasure of Data and Storage Period

Below, we explain how long we store your personal data and when it is erased or restricted for the processing activities we carry out. Unless a specific storage period is stated below, your personal data will be erased or restricted as soon as the purpose for which it was collected or the legal basis for its storage no longer applies.

As a rule, your data is stored only on our servers located in Germany, subject to any transfer of data in accordance with Section A.(8) of this Privacy Notice.

Your data may be stored beyond the specified period in the following cases:

if there is a pending or anticipated legal dispute with you or other legal proceedings;

if storage is required by statutory provisions applicable to us as the controller (e.g., Section 257 of the German Commercial Code (HGB) or Section 147 of the German Fiscal Code (AO)).

After expiry of the applicable statutory retention periods, the personal data will be restricted or erased unless further storage is required and there is a valid legal basis for such continued processing.

(5) Data Security

We implement appropriate technical and organizational security measures to ensure the integrity of personal data and to minimize the risk of accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties (for example, through the use of TLS encryption for our website).

The security measures implemented are determined in light of the state of the art, the costs of implementation, the nature, scope, context, and purposes of the processing, as well as the risks associated with a personal data breach, including the likelihood and severity of such risks for the data subjects.

Our security measures are continuously reviewed and improved in line with technological developments. Further information regarding our technical and organizational measures can be provided upon request.

(6) No Automated Decision-Making (Including Profiling)

We would like to inform you that we do not intend to use the personal data collected from you for automated decision-making, including profiling, within the meaning of Article 22 GDPR.

(7) No Obligation to Provide Personal Data

As a general rule, you may use this website without providing any personal data.

(8) Your Rights as a Data Subject

Under the provisions of the GDPR, you have the right to exercise your rights with regard to the personal data processed by the controller. The controller’s contact details are provided above in Section (2).

As a data subject, you have the following rights:

Pursuant to Article 15 GDPR – Right of Access

You have the right to obtain confirmation from the controller as to whether personal data concerning you is being processed and, where that is the case, to access such personal data.

Pursuant to Article 16 GDPR – Right to Rectification

You have the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Pursuant to Article 17 GDPR – Right to Erasure

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay where one of the grounds set out in Article 17(1) GDPR applies. The controller is obliged to erase the personal data without undue delay where the legal requirements are met.

Pursuant to Article 18 GDPR – Right to Restriction of Processing

You have the right to obtain from the controller restriction of processing where one of the conditions set out in Article 18(1) GDPR applies.

Pursuant to Article 20 GDPR – Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, provided that the requirements of Article 20(1) GDPR are fulfilled.

Pursuant to Article 21 GDPR – Right to Object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you where such processing is based on Article 6(1), first subparagraph, point (e) or point (f) GDPR.

Pursuant to Article 7(3) GDPR – Withdrawal of Consent

You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You will be informed of this right before giving your consent. It shall be as easy to withdraw consent as it is to give it.

Pursuant to Article 77 GDPR – Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

Complaints may be lodged with the supervisory authority responsible for us:

Berlin Commissioner for Data Protection and Freedom of Information

Alt-Moabit 59–

6110555 Berlin

Germany

E-mail: mailbox@datenschutz-berlin.de

9) Changes to this Privacy Notice

As data protection law continues to evolve and technological and organizational changes occur, this Privacy Notice is reviewed regularly to determine whether amendments or additions are required. Any changes will be communicated, in particular, on this website.

B. Visiting the Website at the Domain bmt-elearning.com

(1) Description of the Functionality

When you visit the website available at bmt-elearning.com, personal data relating to you may be processed.

(2) Categories of Personal Data Processed

When you use this website for informational purposes, we collect, store, and process the following categories of personal data:

Log Data

When you visit our website, a temporary and anonymized log file (server log file) is stored on our web server. It contains the following information:

  • the website from which our page was accessed (referrer URL);
  • the name and URL of the requested page;
  • the date and time of access;
  • the type, language, and version of the web browser used;
  • the IP address of the requesting device, shortened so that it can no longer be attributed to an individual;
  • the volume of data transferred;
  • the operating system used;
  • the message indicating whether the request was successful (access status/HTTP status code);
  • the GMT time zone difference.
  • User Account Data

When a user account is created, we process the information submitted during registration, such as:

  • title or gender (where applicable);
  • first and last name;
  • postal address;
  • organization;
  • e-mail address; and
  • the date and time of registration.
  • Contact Form Data

When you use one of our contact forms, we process the information submitted, including, where applicable:

  • title or gender;
  • first and last name;
  • postal address;
  • company;
  • e-mail address; and
  • the date and time the form was submitted.

(3) Purpose and Legal Basis of Processing

We process the personal data described above in accordance with the provisions of the GDPR, other applicable data protection legislation, and only to the extent necessary.

Where processing is based on Article 6(1), first subparagraph, point (f) GDPR, the purposes described below also constitute our legitimate interests.

Processing of Log Data

Log data is processed for statistical purposes and for the continuous improvement of our website. This includes, in particular, optimizing the stability and security of the website and its connections.

Legal basis: Article 6(1), first subparagraph, point (a) or point (f) GDPR.

Processing of Contact Form Data

Contact form data is processed for the purpose of responding to customer inquiries and communicating with users.

Legal basis: Article 6(1), first subparagraph, point (b) or point (f) GDPR.

Pursuant to Section 25(1) and (2) TDDDG, the storage of information on your terminal device or access to information already stored on your terminal device is permitted where such storage or access is necessary for the execution of the requested processes or services.

(4) Duration of Processing

Your personal data is processed only for as long as necessary to achieve the purposes described above. The legal basis applicable to each processing activity is indicated in the relevant section describing that activity.

For information regarding the use and storage period of cookies, please refer to Section A.(4). Further information on the storage periods applicable to personal data can also be found in Section A.(4).

(5) Use of Cookies, Plugins and Other Services on the Website

(a) Cookies

Our website uses cookies. Cookies are small text files that are assigned to the browser you use by means of a unique character string and stored on your device. They enable the party placing the cookie to obtain certain information.

Cookies cannot execute programs or transmit viruses to your computer and therefore cannot cause any damage. Their purpose is to make our website more user-friendly, efficient, and convenient for you.

Cookies may contain data that enables the recognition of the device being used. In some cases, however, cookies merely contain information relating to certain settings that cannot be linked to an individual. Cookies cannot directly identify a user.

A distinction is made between session cookies, which are deleted automatically when you close your browser, and persistent cookies, which remain stored on your device beyond the individual browsing session.

The legal basis for the use of cookies that are strictly necessary to provide you with the digital service you have expressly requested is Section 25(2), No. 2 TDDDG.

Pursuant to Section 25(1) TDDDG in conjunction with Article 6(1), first subparagraph, point (a) GDPR, the processing of data that is not strictly technically necessary is lawful only where the data subject has given explicit and active consent.

(b) Tracking

The following tracking service is used:

Jetpack

This website uses features of the Jetpack plugin to provide website analytics, contact forms, and search functionality. The service is provided by Aut O’Mattic A8C Ireland Ltd., 25 Herbert Place, Grand Canal Dock, Dublin D02 AY86, Ireland. Its parent company, Automattic Inc., is headquartered in the United States.

Jetpack Statistics

Jetpack Statistics is used to analyze visits to our website and to optimize our online services.

For this purpose, the following data may be processed:

  • IP address;
  • user agent;
  • requested and referring URLs;
  • date and time of access;
  • browser language;
  • country code; and
  • where the user is logged in to WordPress.com, the WordPress.com user ID and username.

The website operator receives only aggregated statistical reports (e.g., the total number of page views) and does not have access to individual personal data.

Logs containing IP addresses and, where applicable, WordPress.com usernames are retained by Automattic for a maximum of 28 days and are used solely for providing the statistics service.

  • The following information may be collected:
  • page and post views;
  • video plays for videos hosted on WordPress.com;
  • clicks on external links;
  • referring URLs;
  • search terms; and
  • country information.

Where enabled, Jetpack may also perform anonymous performance monitoring when pages are loaded. This includes measuring page loading times and resource usage to ensure the technical stability and performance of the plugin. Such performance monitoring is carried out exclusively on an aggregated and anonymous basis.

The website operator can configure Jetpack to respect visitors’ Do Not Track (DNT) browser settings. This feature is not enabled by default.

In addition, enhanced visitor statistics, including UTM parameter analysis and device analytics, may be used.

Jetpack Contact Forms

Where Jetpack Contact Forms are used on this website, they serve to collect inquiries, contact requests, and sales leads.

The following information may be processed when a form is submitted:

  • name;
  • e-mail address;
  • website;
  • message content; and
  • technical information such as the IP address and user agent.

If the Akismet service is enabled, these data are transmitted to Akismet for spam detection. Akismet is also operated by Automattic.

The submitted form data are stored in the website database and forwarded to the website operator by e-mail. These notification e-mails also contain the sender’s IP address and the submission timestamp.

In connection with contact forms, post data and post metadata may also be synchronized. Where Akismet is enabled, the IP address and user agent are likewise synchronized because they form part of the metadata.

Jetpack Search

To improve the search functionality of the website, Jetpack Search may be used.

For this purpose, visitors’ search terms, filters, and search queries are processed in order to provide search results through WordPress.com servers.

In addition, anonymized and aggregated information relating to page views and search activities is used to improve the relevance of search results.

The following information may be processed:

  • IP address;
  • URL;
  • user agent;
  • timestamp;
  • browser language;
  • country code;
  • search queries; and
  • applied search filters.

Processing is carried out in an anonymized manner and exclusively for improving the functionality and quality of the search service.

Legal Basis

The processing of personal data is based on Article 6(1), first subparagraph, point (f) GDPR, reflecting our legitimate interest in analyzing, securing, and optimizing our website.

Where consent is required, processing is based on Article 6(1), first subparagraph, point (a) GDPR in conjunction with Section 25(1) TDDDG. Any consent given may be withdrawn at any time with effect for the future.

Personal data may be transferred to the United States on the basis of the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, on the basis of Automattic’s certification under the EU–U.S. Data Privacy Framework (DPF).

Akismet

This website uses the Akismet service to automatically detect and filter spam communications.

The service is provided by Aut O’Mattic A8C Ireland Ltd., 25 Herbert Place, Grand Canal Dock, Dublin D02 AY86, Ireland. Its parent company, Automattic Inc., is headquartered in the United States.

The processing of personal data is carried out pursuant to Article 6(1), first subparagraph, point (f) GDPR, based on the website operator’s legitimate interest in ensuring the integrity, security, functionality, and abuse-free operation of the website and its communication channels.

Where explicit consent is required, processing is additionally based on Article 6(1), first subparagraph, point (a) GDPR in conjunction with Section 25(1) TDDDG, particularly where information is stored on, or accessed from, the user’s terminal device (for example through cookies or similar technologies).

Any consent given may be withdrawn at any time with effect for the future.

Personal data may be transferred to third countries, in particular to the United States, on the basis of the European Commission’s Standard Contractual Clauses pursuant to Article 46 GDPR.

In addition, Automattic Inc. is certified under the EU–U.S. Data Privacy Framework (DPF), which is intended to ensure an adequate level of data protection for transfers of personal data to the United States.