Privacy Policy
The protection of your privacy is very important to PMI Production Management Institute GmbH (hereinafter “we” or “PMI”) when processing your data. The data collected is processed according to the provisions of the Federal Data Protection Act (Bundesdatenschutzgesetz “BDSG”), the General Data Protection Regulation (“GDPR”) and other legal regulations as they apply to electronic business transactions in Germany. The processing of personal data by us serves the purpose of fulfilling the contract with you within the meaning of Art. 6 sect. 1 lit. b GDPR or to safeguard our legitimate interests, in particular our accountability to tax authorities, our interest in optimizing our websites and advertising within the meaning of Art. 6 sect. 1 lit. f GDPR.. Unless one of the aforementioned legal grounds for permission exists, we will obtain your consent pursuant to Art. 6 sect. 1 lit. a GDPR prior to data processing. Detailed information on data processing can be found in the following explanations. PMI therefore asks you to take note of these and, if necessary, to print them out or save them.
1. General information on data protection at PMI
1.1. The responsibility for data processing lies with
PMI Production Management Institute GmbH
Fraunhoferstraße 22
82152 Planegg (Germany)
Telefon: +49 (89) 857 61 46
Telefax: +49 (89) 859 58 38
E-Mail: datenschutz@pmi-m.de
The contact person for questions regarding data protection at PMI is Ms. Andrea Walbert (Managing Partner).
1.2. Processing of Personal Data
a.) How do we collect your data?
Personal data is only collected by PMI if you actively communicate this to us, e.g. by telephone contact, when creating a customer account, when ordering our newsletter or via our contact form on our website. You have the right at any time to object to the use of this data for any purpose in the future. See also point 1.3.
b.) What do we use your data for?
Personal data collected from you will only be used for the purpose for which you provided them to us or for the processing of which you have given us your consent. Once the contractual relationship has been completed in full, the user data will only be stored for as long as is necessary due to tax and commercial law retention periods. After these periods have expired, however, the data will be deleted unless you have expressly consented to their further or other use. You can also assert rights during the retention periods, such as blocking your data. See point 1.3 for more information.
c.) On what basis and for how long do we use your data?
If we obtain your consent for the processing of personal data, Art. 6 sect. 1 lit. a EU Data Protection Basic Regulation (GDPR) serves as the legal basis for the processing of personal data.
Art. 6 sect. 1 lit. b GDPR serves as a legal basis for the processing of personal data required for the fulfilment of a contract with you. This shall also apply to processing operations necessary for the implementation of pre-contractual measures.
If the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 sect. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 sect. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and fundamental freedoms do not prevail, Art. 6 sect. 1 lit. f GDPR serves as the legal basis for the processing.
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Once the contractual relationship has been completed in full, the user data will only be stored for as long as is necessary due to statutory retention periods (e.g. tax and commercial law). After these periods have expired, however, the data will be deleted unless you have expressly consented to their further or other use.
d.) Who receives your data?
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:
- You have given your express consent to this in accordance with Art. 6 sect. 1 sentence 1 lit. a GDPR,
- The disclosure pursuant to Art. 6 sect. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- In the event that there is a legal obligation to pass on data pursuant to Art. 6 sect. 1 sentence 1 lit. c GDPR, and
- This is legally permissible and required for the execution of contractual relationships with you pursuant to Art. 6 sect. 1 sentence 1 lit. b GDPR.
A transfer of personal data to state institutions and authorities or a collection of such data for this purpose only takes place within the framework of mandatory national legal provisions.
Your data will be forwarded to the following categories of companies for the purpose of processing a contractual relationship (e.g. provision or brokerage of a service or sale of goods) - depending on the type of concrete contractual relationship - which we regularly use to provide our services or for other areas of contract processing:
Guest lecturers, media partners, contract processors used by us, tax and legal advisors, and the following training partners:
- APICS: 8430 West Bryn Mawr Avenue, Suite 1000, Chicago, IL 60631, USA
- Demand Driven Institute: PO Box 1432, AZ 85502, USA
- Inchainge B.V.: Emmalaan 5, 3732 GM De Bilt, The Netherlands
To the extent required by law, we will conclude a data processing agreement with these service providers (Art. 28 GDPR) in order to ensure data processing only within our instructions under appropriate data security measures.
In particular, we arrange training courses, seminars and examinations for recognised third-party certifications ("Training Partners"). If you wish to make use of one of our services in this context, for example to acquire examination certificates or memberships through us or to register for examinations, it may be necessary for us to forward personal data to these Training Partners for this purpose. The further implementation of the education or seminar offers or examinations provided by the Training Partners lies within the sole responsibility of the Training Partners. PMI is not responsible for the data protection declarations or compliance with any data protection obligations towards you. We would like to point out that we cooperate with the following training partners based in so-called third countries outside the EU:
- APICS: 8430 West Bryn Mawr Avenue, Suite 1000, Chicago, IL 60631, USA
- Demand Driven Institute: PO Box 1432, AZ 85502, USA
The transfer of data to Training Partners in third countries is carried out on the basis of Art. 44ff. GDPR.
1.3. Information about your user rights
Upon request, PMI will inform you as soon as possible and in writing whether and which personal data we have stored about you. If, despite our efforts to ensure that our data is correct and up to date, incorrect data is stored, it will be corrected by us upon request.
In addition to this right to correction, you may also have the right to block and to erasure personal data collected by us. It may be that we cannot immediately comply with every request for erasure for legal reasons, above all due to tax or commercial law regulations, or for reasons of smooth contract execution. In this case, we will contact you and discuss with you to what extent we can block the data for further processing and from what point in time a final deletion is possible.
In addition, you have the right to request that we transfer the data to you as a structured, common and machine-readable format or, at your express request, forward it to a third party.
You may object to the use of your data for the future, i.e. for purposes other than the execution of the contract or processing in our legitimate interest. In particular, you may object to the use of your data for advertising purposes. You also have the right to request only a restriction on the use of data for specific purposes.
In the event that there should be further questions regarding the collection, processing and use of personal data or the correction, deletion or blocking of such data, please contact PMI. The contact address can be found in point 1.1.
The supervisory authority responsible for us or for complaints against us:
Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht “BayLDA”)
Promenade 27
91522 Ansbach, Germany
E-mail: poststelle@lda.bayern.de
2. Data Processing on Our Website
2.1. Automatically Collected Data (Server Log Files)
When you visit our website, our web server or the provider entrusted with its operation ("web host") collects the following standard data transmitted by your internet browser to us or our web host (so-called server log files) and stores it in a log file:
- IP address
- date and time of the server request
- accessed pages
- protocols
- status code
- amount of data
- referrer URL
- browser type and version
- hostname of the accessing computer
- users of password-protected pages
The server logfiles contain IP addresses or other data that facilitate allocation to a user. This could be the case, for example, if the link to the website from which the user accesses the website or the link to the website to which the user switches contains personal data. The data is stored in the log files of our web host. This data will not be stored together with other personal data of the user or merged. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. PMI or the web host used by us processes this information on the basis of our legitimate interest pursuant to Art. 6 sect. 1 S. 1 lit. f) GDPR in connection with Art. 28 GDPR (conclusion of a contract for order processing) in order to determine and improve the attractiveness, the services and the contents of the Internet presence or to enable a secure provision of our online offer.
2.2. Contact Form and Email Contact
A contact form is available on our website, which can be used for electronic contact. If a user takes this opportunity, the data entered in the input mask is transmitted to us and stored with the content of the message. This data is:
- salutation
- name
- company (optional)
- telephone number (optional)
- information that you leave within your message/feedback
At the time the message is sent, the following data will also be stored:
- the IP address of the user
- date and time of registration
Alternatively, you can contact us via our e-mail address (info@pmi-m.de). In this case, the personal data transmitted with the e-mail will be stored.
In this context, the disclosure of data to third parties is not pursued, unless it is necessary to pursue our entitlements or there is a legal obligation pursuant to Art. 6 sect. 1 lit. c GDPR. Your data will be used exclusively for the processing of the conversation as well as in the case of your consent in our contact form, for the dispatch of our newsletter (see point). The processing of personal data from the input mask of the contact form or an email sent to us serves us otherwise only for the process of establishing contact. In the event of contact being established, this shall also constitute the necessary legitimate interest in the processing of data in line with Art. 6 sect. 1 lit. f GDPR or insofar as this is necessary for the establishment, content or amendment of the legal relationship (contract, contract initiation relationship) on the basis of Art. 6 sect. 1 lit. b GDPR. The other personal data processed during the sending procedure serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
2.3. Dispatch of Program- and Event information
We at PMI would like to inform you twice a year about program news and upcoming Events (seminars, workshops, professional events) via mailing. For this we need your e-mail address, salutation and your name.
You can subscribe to the mailing by using the contact form or registering it during the registration process in our shop or by filling in a data collection form during an Event of PMI. For verification purposes, the IP address and the registration date (timestamp) are stored in addition to your e-mail address and name for the newsletter dispatch.
You can object to the newsletter being sent at any time. At the end of each mailing you can find a link for this purpose. You can also contact us directly (datenschutz@pmi-m.de).
For the dispatch of our mailing we use „CleverReach“, a service provided by CleverReach GmbH und Co. KG, Mühlenstraße 43, 26120 Rastede, Germany and represented by CleverReach Verwaltungs GmbH, Mühlenstraße 43, 26180 Rastede, Germany. You can view the privacy policy of the Newsletter service provider here: www.cleverreach.com/en/privacy-policy/.
CleverReach is used on the basis of our legitimate interests pursuant to Art. 6 sect. 1 lit. f GDPR and an order processing contract pursuant to Art. 28 sect. 3 sentence 1 GDPR. CleverReach can use data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for technical optimization of the dispatch and display of the newsletter or for statistical purposes. However, CleverReach is not entitled to use the data of our newsletter recipients to write to them itself or to pass on the data to third parties.
2.4. Shop Area and Registration Form on the Website
Via our website you can send us the registration form or purchase courses, exams or memberships.
We collect, process and use personal data on the basis of Art. 6 sect. 1 lit. b GDPR for the fulfilment of a contract or pre-contractual measures, insofar as they are necessary for the establishment, content or amendment of the legal relationship (inventory data). We collect, process and use personal data relating to the use of our Internet pages (usage data) on the basis of Art. 6 sect. 1 lit. b GDPR only to the extent necessary to enable the user to make use of the service or for invoicing purposes.
Within the course of using our registration form the user area will store the anonymized IP address and the time of each user action. The storage of this usage data collected during registration or use of the registration form is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use pursuant to Art. 6 sect. 1 lit. f GDPR. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 sect. 1 lit. c GDPR. The IP addresses are deleted after 60 days at the latest.
We only transfer personal data to third parties if this is necessary for the execution of the contract, e.g. to our training partner (see point 1.2 according to d.) and if this is necessary for the fulfilment of the contract (e.g. purchase of examinations or memberships). The basis for the transmission in this case is Art. 6 sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
A further transmission of data will not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
2.5. Links to other websites
Our website may contain links to other websites. PMI is not responsible for their privacy statements or content.
In particular, PMI maintains online presences within social networks and platforms (Xing, LinkedIn, Twitter, YouTube) and links to them from our website. By clicking on the respective buttons (recognizable by the respective logos of the social networks or platforms) you can reach to the respective online presences. The purpose of these online presences is to communicate with active customers, interested parties and users and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply. Unless otherwise stated in our data protection declaration, we process user data on the basis of our legitimate interests (Art. 6 sect. 1 lit. f GDPR) only if they communicate with us within the social networks and platforms, e.g. post articles on our online presence or send us messages.
2.6. Data security
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page on our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
The employees and subcontractors of PMI are contractually bound to secrecy and observance of data secrecy.
3. Cookies
We use cookies to establish and maintain the connection. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. Cookies may be necessary to establish a connection or improve the use of the website. The following technically necessary cookies are used:
Cookie name | Description and purpose of processing | Storage time | Cookie type | Objection |
cookieconsent_status | Remembers if the cookie hint was clicked away or not. | 1 year | Necessary (internal cookie) | Select “do not accept cookies” in your browser settings |
dp_cookieconsent_status | Remembers which cookie types you allowed. | 1 year | Necessary (internal cookie) | Select “do not accept cookies” in your browser settings |
PHPSESSID | This cookie stores your current session with reference to PHP applications and therefore ensures that all functions of the page, which are based on the programming language PHP, can be displayed completely. | End of browsersession | Necessary (internal cookie) | Select “do not accept cookies” in your browser settings |
fe_typo_user | This cookie is generated by the CMS (Content Management System) TYPO3 for the unmistakable identification of a user. | Ende der Browsersitzung | Necessary (internal cookie) | Select “do not accept cookies” in your browser settings |
phpMyAdmin | This cookie stores your current session with reference to PHP applications and therefore ensures that all functions of the page, which are based on the programming language PHP, can be displayed completely. | End of browsersession | Necessary (internal cookie) | Select “do not accept cookies” in your browser settings |
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
The use of technically required cookies and the associated data processing is based on our legitimate interest in a technically flawless and comfortable use of our website. Technical cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage duration of persistent cookies is determined by the provider and can be viewed by you in your browser, for example.
3.2. Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate 9 / 16 interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.
3.3. Google Analytics
In order to further improve the usability of this website, we also collect data on user behaviour when you visit our website, which we evaluate for this purpose. For this reason, we use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google's European subsidiary is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google is certified for the Privacy Shield (https://www.privacyshield.gov), which ensures compliance with EU privacy standards.
Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The following Cookies are used by Google:
Cookie name | Description and purpose of processing | Storage time | Cookie type | Objection |
_ga | Logging of page visits by Google Analytics: Anonymised statistics of the visit on a particular computer. | 2 years | Statistics (Third party cookie) | Select “do not accept cookies” in your browser settings You can prevent the entry of your data through Google Analytics by deactivating the statistics cookies through the data protection settings for this website |
_ga_TVW7776VYJ | Identification code of the website for analysis of the website visit by Google Analytics. | 2 years | Statistics (Third party cookie) | Select “do not accept cookies” in your browser settings You can prevent the entry of your data through Google Analytics by deactivating the statistics cookies through the data protection settings for this website |
_gid | User recognition by Google Analytics within 24 hours after first visit. | 24 hours | Statistics (Third party cookie) | Select “do not accept cookies” in your browser settings You can prevent the entry of your data through Google Analytics by deactivating the statistics cookies through the data protection settings for this website |
This website uses Google Analytics 4. Anonymization of IP addresses is therefore not necessary, since IP addresses are neither logged nor saved from this version. All other information generated by the above-mentioned cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.
Data will only be processed for analysis purposes if you give us your consent to do so. This consent then also forms the legal basis for the processing operations described, including any data transfers to third countries such as the USA.
If you do not agree with the use of Google Analytics, you can adjust the cookie settings of your browser accordingly or deactivate the functions here.
The data processing for usage analysis takes place during your visit to the website and only until the time of your effective objection.
You can find out more about Google's privacy policy at the following internet addresses:
www.google.de/policies/privacy
4. Newsletter
4.1. Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.
4.2. CleverReach
This website uses CleverReach for the sending of newsletters. The provider is the CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter “CleverReach”). CleverReach is a service that can be used to organize and analyze the sending of newsletters. The data you have entered for the purpose of subscribing to our newsletter (e.g., e-mail address) are stored on servers of CleverReach in Germany or in Ireland.
Newsletters we send out via CleverReach allow us to analyze the user patterns of our newsletter recipients. Among other things, in conjunction with this, it is possible how many recipients actually opened the newsletter e-mail and how often which link inside the newsletter has been clicked. With the assistance of a tool called Conversion Tracking, we can also determine whether an action that has been predefined in the newsletter actually occurred after the link was clicked (e.g., purchase of a product on this website). For more information on the data analysis services by CleverReach newsletters, please go to: https://www.cleverreach.com/en/features/reporting-tracking/.
The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.
If you do not want to permit an analysis by CleverReach, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message.
The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.
For more details, please consult the Data Protection Provisions of CleverReach at: https://www.cleverreach.com/en/privacy-policy/.
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
Newsletter mailing to existing customers
If you order goods or services from us and enter your e-mail address, this e-mail address may subsequently be used by us to send you newsletters, provided we inform you of this in advance. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter. You can unsubscribe from this newsletter at any time. There is a corresponding link in every newsletter for this purpose. In this case, the legal basis for sending the newsletter is Art. 6 (1)(f) GDPR in conjunction with Section 7 (3) UWG.
After you unsubscribe from the newsletter distribution list, we may store your email address in a blacklist to prevent future mailings to you. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1)(f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our
legitimate interest.
5. Miscellaneous
This data protection declaration is currently valid and is as of 07/2024. Due to the further development of our website and offers above or due to changed legal or official requirements, it may be necessary to amend this data protection declaration. You can call up and print out the current data protection declaration on our website at any time.