Stand: 5. November 2026
1. Controller
The controller responsible for processing personal data on this website is:
ABC Arbeitsakademie GmbH
Augustfehner Straße 36
26655 Westerstede
Germany
Represented by the managing director Janis Gebauer
Email: info@arbeitsakademie.de
For questions about data protection and to exercise your rights, you can reach us at admin@arbeitsakademie.de.
2. General information on data protection
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, names, contact details, IP addresses and information you send us as part of an enquiry or appointment booking.
We process personal data only to the extent necessary to provide our website, to handle enquiries, to arrange consultation appointments or to perform our services, or where another statutory legal basis applies.
3. Hosting and provision of the website
Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
Technical access data is processed to provide and securely operate the website.
This may include in particular:
- Pages and files accessed
- Date and time of access
- Browser type and browser version
- Operating system used
- Device type
- Referrer URL (previously visited website)
- IP address or anonymised IP address
This data serves in particular the technical provision of our website, ensuring system security and error analysis.
Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of our online offer.
A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. Processing generally takes place within the European Union or the European Economic Area.
According to IONOS, the visitor data described in connection with the web hosting service is generally stored for eight weeks. The IP address is anonymised in accordance with the provider’s information.
4. Web analytics by IONOS WebAnalytics
As part of our hosting service, IONOS WebAnalytics is used for the statistical evaluation and technical optimisation of our online offer.
In particular, the following data may be processed:
- Pages accessed
- Date and time of access
- Browser type and operating system
- Device type
- Referrer URL
- Anonymised IP address
According to IONOS, the information is collected via a log file or a tracking pixel. IONOS WebAnalytics does not use cookies for this. The IP address is anonymised after transmission.
The processing serves statistical evaluation, the improvement of technical provision and the optimisation of our online offer.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical optimisation and needs-based provision of our website.
5. Contact by email
If you contact us by email, we process the personal data you send us.
This includes in particular:
- Name and email address
- Telephone number, if applicable
- Content of your message
- Other information provided voluntarily
We use this data to handle your enquiry and for subsequent business communication.
The legal basis is Art. 6(1)(b) GDPR where your enquiry serves to initiate or perform a contract.
For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling and answering of incoming enquiries.
The data is deleted as soon as it is no longer needed to handle the enquiry and, where applicable, required evidence, unless statutory retention obligations or other lawful grounds for further storage exist.
Please do not send us particularly sensitive personal data or confidential documents by unencrypted email if possible.
6. Contact form
We provide a contact form on our website.
The following personal data may be processed during use:
- Name (mandatory)
- Email address (mandatory)
- Telephone number (optional)
- Company or organisation (optional)
- Type of request
- Message content
- Preferred way of contact
The details are used to handle the enquiry and to get in touch.
The transmission takes place via the technical infrastructure of our WordPress website to our business email inbox.
The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at initiating or performing a contract. For other enquiries, processing is based on Art. 6(1)(f) GDPR.
The mandatory details are required so that we can handle and answer your enquiry properly. Without these details, processing via the form may not be possible. There is generally no legal obligation to provide the data.
Contact enquiries are currently not transferred automatically as contacts to the CRM system HubSpot.
Your details are not used for newsletters or other advertising email communication solely because you contacted us.
We store the transmitted data only for as long as it is required to handle and document your enquiry or statutory retention obligations apply.
7. Email processing via Microsoft 365
For our business email communication we use Microsoft 365 (Microsoft 365 Business Standard), which we obtain directly from Microsoft. This also includes Microsoft Teams, which we use for video calls (see section 8).
The provider of the Microsoft 365 services is in particular Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
The following personal data is processed in particular during use:
- Names and email addresses
- Message contents
- File attachments
- Technical sending and receiving data
- Date and time of communication
The processing serves to carry out our business communication and to handle incoming enquiries.
The legal bases are Art. 6(1)(b) GDPR for contract-related communication and Art. 6(1)(f) GDPR for other business enquiries.
A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft (Microsoft Products and Services Data Protection Addendum). Microsoft uses further sub-processors for this purpose. Processing outside the EU, in particular in the USA, cannot be ruled out. It takes place on the basis of the EU-U.S. Data Privacy Framework, under which Microsoft is certified, and the 2021 EU Standard Contractual Clauses (Art. 45 and 46 GDPR).
Email communication is retained in line with the respective processing purpose and existing statutory retention obligations.
Further information:
8. Online appointment booking via HubSpot
On our website we offer the option of arranging free consultations via an appointment scheduler from HubSpot.
The provider is HubSpot Ireland Limited, Ireland.
The appointment scheduler is not loaded automatically when the page is opened. It is only loaded once you have consented to the service “HubSpot appointment booking” via our cookie banner or click the “Load appointment scheduler” button. Only then is a connection to HubSpot established and the external appointment scheduler displayed.
The legal basis for loading the appointment scheduler and the associated access to information on your device is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future, for example via the “Cookie settings” link in the footer of every page.
Alternatively, you can open the appointment scheduler via a link in a new browser window.
Data processing when the appointment scheduler loads
When the appointment scheduler loads, technical connection data is transmitted to HubSpot or the technical service providers it uses.
This may include in particular:
- IP address
- Time of access
- Browser and device information
- Technical connection information
- Information on the use of the appointment scheduler
As part of the integration, HubSpot loads external scripts, fonts and other technical resources.
In addition, HubSpot analyses views and bookings in the appointment scheduler. In particular, the cookies __hstc (6 months), hubspotutk (6 months), __hssc (30 minutes) and __hssrc (until the end of the session) may be set.
Data processing when booking an appointment
When you arrange a consultation appointment, HubSpot processes the booking information you enter.
This may include in particular:
- Name
- Email address
- Telephone number, if requested
- Preferred appointment
- Any further information provided voluntarily
We use this information exclusively to organise, conduct and follow up the requested consultation, unless a separate legal basis for further processing exists.
The legal basis for processing the booking data is Art. 6(1)(b) GDPR where the booking is connected to pre-contractual measures. For other appointment arrangements, Art. 6(1)(f) GDPR may apply.
For additional, non-essential analytics or tracking processing, separate prior consent is required where legally required.
Video call via Microsoft Teams
We use Microsoft Teams for consultations held as a video call. When you book an appointment, HubSpot automatically creates a Teams meeting link and adds it to the appointment invitation and to our calendar. For this purpose, our HubSpot account is connected to our Microsoft 365 account.
We process your name, your email address, the appointment and the meeting link. If you take part in the meeting, Microsoft also processes technical connection data and any data you voluntarily share during the call (for example video and audio, if you switch them on). The meeting is not recorded unless we expressly agree this with you in advance.
The provider is Microsoft Ireland Operations Limited, Ireland. The legal basis is Art. 6(1)(b) GDPR (carrying out the consultation you requested) and, alternatively, Art. 6(1)(f) GDPR. A data processing agreement is in place with Microsoft. Transfers of data to the USA take place on the basis of the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses. Further information can be found in Microsoft's privacy statement: https://www.microsoft.com/de-de/privacy/privacystatement
If you would rather have your consultation by phone, simply reply to the confirmation email and give us your phone number. We will then call you at the agreed time.
Data transfer to HubSpot
In providing its services, HubSpot may use other technical service providers. Data may also be processed outside the European Economic Area.
Such transfers are subject to the requirements of Art. 44 et seq. GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with HubSpot, which incorporates the EU Standard Contractual Clauses (Art. 46 GDPR).
HubSpot, Inc. (USA) is certified under the EU-U.S. Data Privacy Framework. For transfers to HubSpot, Inc., an adequacy decision of the European Commission therefore exists (Art. 45 GDPR).
The booking data is processed only for as long as it is required for appointment management, the related communication and any existing statutory retention obligations.
Further information:
9. Cookies and similar technologies
Our website is based on the WordPress content management system.
Cookies and similar technologies may be used as part of technical operation.
Technically necessary cookies can be used, for example, for secure login and administration of the website.
The legal basis for storing information on, or accessing information in, end devices is, where required, Section 25(2) TDDDG.
Where cookies or similar technologies that are not strictly necessary are used, prior consent under Section 25(1) TDDDG is generally required. The related processing of personal data is additionally governed by the GDPR.
Security cookies at HubSpot
When the external HubSpot appointment scheduler loads, cookies may be used for technical security and to defend against automated access.
This includes in particular the cookie named __cf_bm, which is used in connection with the bot protection employed by HubSpot.
The cookie is used to detect and defend against automated access. According to the technical provider Cloudflare, it generally expires after 30 minutes of inactivity.
Additional processing by HubSpot, in particular for analytics purposes, is to be distinguished from this.
You can view, manage and delete cookies via your browser settings.
Consent management (Real Cookie Banner)
To obtain and manage your consents we use the WordPress plugin Real Cookie Banner from devowl.io GmbH, Germany. The plugin runs on our own web server. What is stored is a randomly generated, pseudonymous identifier (UUID), the time and content of your decision, the version of the banner settings and the page visited. Storage of the full IP address is disabled. Your decision is stored in cookies named “real_cookie_banner…” in your browser for 365 days. The purpose is to document your consent or refusal (Art. 7(1) GDPR). The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR and Section 25(2) no. 2 TDDDG. You can change or withdraw your decision at any time via the “Cookie settings” link in the footer of every page.
Saved list
If you add training courses to your saved list, this selection is stored exclusively in your browser’s local storage (localStorage) on your device. You only use this function at your own request. To display the saved list, the identifiers of the saved training courses are sent to our server so that the course information can be delivered. We do not create a user profile from this and do not pass this information on to third parties. You can clear the saved list at any time or delete it via your browser settings. The legal basis is Section 25(2) no. 2 TDDDG, as storage is necessary to provide the function you explicitly requested.
10. Contact via WhatsApp
Our website offers a link for contacting us via the messenger service WhatsApp.
For users in the European Economic Area, WhatsApp is offered in particular by WhatsApp Ireland Limited, Ireland.
The WhatsApp button on our website is integrated as a simple external link.
Merely opening our website does not establish a connection to WhatsApp through this link.
Only when you actively click the button is the WhatsApp website or the corresponding application opened.
In doing so, personal data and technical connection information may be transmitted to WhatsApp.
If you then contact us via WhatsApp, we may process in particular the following information:
- Telephone number
- Displayed profile name
- Message contents
- Information provided voluntarily
We use this information to handle your request.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contractual or pre-contractual measure. For other enquiries, processing is based on Art. 6(1)(f) GDPR.
Please note that WhatsApp processes data independently and, where applicable, also outside the European Economic Area.
We recommend not transmitting particularly sensitive personal data or confidential documents via WhatsApp.
WhatsApp is provided by WhatsApp Ireland Ltd., which belongs to the Meta group. A transfer to the USA is possible; Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. We delete chat histories as soon as your enquiry has been dealt with, after six months at the latest. Please do not send us any documents relating to participation (e.g. education voucher or health information) via WhatsApp; please use email for this.
Further information on data processing by WhatsApp:
Teilnehmerbefragung (Feedbackbogen)
Teilnehmende unserer Weiterbildungen bitten wir zum Kursende, einen Bewertungsbogen auf unserer Website auszufüllen (arbeitsakademie.de/feedback). Die Befragung ist Teil unseres Qualitätsmanagements nach der Akkreditierungs- und Zulassungsverordnung Arbeitsförderung (AZAV).
Der Bogen wird auf unserem Webserver bei IONOS ausschließlich unter einer Ordnungsnummer gespeichert, zusammen mit dem Kurs, der gewählten Sprache, Ihren Bewertungen, Ihren freiwilligen Kommentaren und dem Datum des Eingangs. Name, E-Mail-Adresse und IP-Adresse werden nicht zusammen mit dem Bogen gespeichert, und die Seite setzt keine eigenen Cookies. Für den Seitenaufruf selbst gelten die Angaben unter „Hosting und Bereitstellung der Website“.
Die Zuordnung der Ordnungsnummer zu Ihrer Person liegt getrennt davon ausschließlich in unserem internen System. Sie dient nur dazu, zu vermerken, ob eine Bewertung abgegeben wurde, und gegebenenfalls einmal an die Befragung zu erinnern.
Die Teilnahme ist freiwillig. Rechtsgrundlage ist Art. 6 Abs. 1 lit. f DSGVO. Unser berechtigtes Interesse liegt in der Sicherung und Verbesserung der Qualität unserer Weiterbildungen sowie in der Erfüllung unserer Nachweispflichten im Rahmen der Zulassung nach AZAV. Die Bögen werden aufbewahrt, solange dies für diese Nachweispflichten erforderlich ist, und anschließend gelöscht.
Lebenslauf-Upload
Über unsere Seiten /lebenslauf-upload, /lebenslaufupload und /cv-upload können Interessierte ihren Lebenslauf hochladen und digital unterschreiben. Wir verarbeiten Name, E-Mail-Adresse, Lebenslauf und Unterschrift zur Beratung, zur Erstellung eines Angebots und zur Beantragung der Förderung (Art. 6 Abs. 1 lit. a und b DSGVO).
Die Dateien werden auf unserer Website nicht gespeichert, sondern verschlüsselt über einen Dienst der Cloudflare, Inc. an unser CRM-System HubSpot (HubSpot, Inc.) übermittelt und dort zugriffsgeschützt abgelegt. Bei der Unterschrift per Handy liegt nur das Unterschriftsbild höchstens 10 Minuten auf unserem Server und wird nach der Übertragung sofort gelöscht.
Kommt keine Teilnahme zustande, löschen wir den Lebenslauf sofort, spätestens 6 Monate nach dem letzten Kontakt. Bei einer Teilnahme gehört der Lebenslauf zur Teilnehmerakte und wird nach den gesetzlichen und QSS-Aufbewahrungsfristen gelöscht. Die Einwilligung kann jederzeit per E-Mail an info@arbeitsakademie.de widerrufen werden.
11. Disclosure of personal data
Personal data is passed on only to the extent necessary for the described processing purposes, where there is a legal obligation or where another legal basis exists.
In the course of operating the website and our communication, the following service providers in particular may process personal data:
- IONOS SE – hosting and technical infrastructure
- Microsoft – business email communication and video calls (Microsoft Teams)
- HubSpot – online appointment booking
- WhatsApp – if you use this way of contact voluntarily
Where service providers process personal data on our behalf, the requirements of Art. 28 GDPR apply.
Personal data is not passed on to third parties for independent advertising purposes solely because of a contact enquiry.
12. Storage period and deletion
As a rule, we store personal data only for as long as it is needed for the respective processing purpose.
Once this purpose no longer applies, the data is deleted, unless statutory retention obligations, legitimate interests in keeping evidence or other lawful grounds for further storage exist.
In doing so, we take into account in particular statutory commercial and tax retention obligations, where these apply to the relevant documents.
Technical access data is processed in line with the respective retention rules of the hosting and security services used.
13. Your rights as a data subject
Within the scope of the statutory requirements, you have the following rights:
Right of access under Art. 15 GDPR
You can request information about which personal data we process about you.
Right to rectification under Art. 16 GDPR
You can request the rectification of inaccurate or the completion of incomplete personal data.
Right to erasure under Art. 17 GDPR
Under the statutory requirements, you can request the erasure of your personal data.
Right to restriction of processing under Art. 18 GDPR
Under certain conditions, you can request that the processing of your personal data be restricted.
Right to data portability under Art. 20 GDPR
Under the statutory requirements, you have the right to receive personal data in a structured, commonly used and machine-readable format or to have it transmitted to another controller.
Right to object under Art. 21 GDPR
Where the processing of your personal data is based on Art. 6(1)(f) GDPR, you can object to the processing on grounds relating to your particular situation.
Withdrawal of consent
Where processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of processing carried out until the withdrawal remains unaffected.
To exercise your rights, please contact:
14. Right to lodge a complaint with a data protection supervisory authority
You have the right under Art. 77 GDPR to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The following supervisory authority is of particular relevance for our company:
The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Telephone: 0511 120-4500
Website: https://www.lfd.niedersachsen.de
Email: poststelle@lfd.niedersachsen.de
15. Data security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, manipulation or unlawful processing.
Our website is provided via an encrypted HTTPS connection.
Please note that data transmission over the internet, for example when communicating by email, may involve security risks.
16. Changes to this privacy policy
We reserve the right to amend this privacy policy if our technical processes, the service providers we use or the legal requirements change.
The version published on our website at the relevant time applies.