With its online platform - openHPI - the Hasso Plattner Institute offers you the possibility to take part in free online courses on Information Technology-related topics. As a registered user, you have access to the course content (videos, quizzes, reading material) and, after a successfully completed final exam, you receive a certificate. Moreover, for the duration of the course the discussion forum and the collab spaces are available for your questions and interaction with other learners.
When conducting online courses, the collection and storage of personal data are unavoidable. The protection of your data and the lawful collection, processing, and use of it is, therefore, a matter of particular concern to us. We would thus like to inform you here which data will be collected when you visit our website and register for one or more of our courses. We would further like to inform you about the purpose of collecting this data and in what scope it will be used.
You can find the most important points and principles of this privacy statement here:
The following sections give you all the details concerning our privacy statement.
Data Controller. The data controller in case of openHPI (https://open.hpi.de and respective openHPI mobile applications) is the Hasso-Plattner-Institut für Digital Engineering gGmbH, Prof.-Dr.-Helmert-Str. 2-3, 14482 Potsdam, Germany ("HPI"), with its data protection officer Bernhard Rabe (email@example.com).
Collection and storage of personal data. HPI will only store your name, email address and the respective profile data that you provide voluntarily, e.g. gender, date of birth, employer or university, city, country, career status, expertise, highest degree, IT background and position (your “Personal Data") for as long as you have an active user account on the openHPI platform plus, where applicable, any additional periods under applicable laws during which HPI has to retain your Personal Data.
Why is the provision of Personal Data required? HPI requires your Personal Data to enable you to attend openHPI courses that are of interest to you. Any provision of this information is entirely voluntarily for you. However, without provisioning email address and name, it will unfortunately not be possible for HPI to make the relevant openHPI courses available to you.
Your name and email address will also appear on personal course documents, such as “Confirmations of Participation", “Records of Achievement" and "Certificates". Your email address will be used for course-related communications and the announcement of new courses and changes to the openHPI platform.
Transmission of Personal Data to a non-EEA country. openHPI does not transfer any of your Personal Data to countries outside the European Economic Area.
Recipients of Personal Data. HPI does not forward or otherwise transmit any Personal Data to third parties.
Rights to access/rectification/erasure/restriction of processing/portability. You can request from HPI at any time information about which Personal Data HPI processes about you and the correction or deletion of such Personal Data. You can also always change or delete your Personal Data by yourself on the openHPI platform. Please note, however, that HPI can or will delete your Personal Data only if there is no statutory obligation or prevailing right of HPI to retain it. Kindly note further that if you request that HPI deletes all of your Personal Data, you will not be able to continue to use openHPI.
You may further request from HPI a copy of the Personal Data that you have provided to HPI. In this case, please contact the email address below and specify the information or processing activities to which your request relates. HPI will carefully consider your request and discuss with you how it can best fulfill it.
Furthermore, you can request from HPI that HPI restricts your Personal Data from any further processing in any of the following events: (i) you state that the Personal Data HPI has about you is incorrect, (but only for as long as HPI requires to check the accuracy of the relevant Personal Data), (ii) there is no legal basis for HPI processing your Personal Data and you demand that HPI restricts your Personal Data from further processing, (iii) HPI no longer requires your Personal Data but you claim that you require HPI to retain such data in order to claim or exercise legal rights or to defend against third-party claims or (iv) in case you object to the processing of your Personal Data by HPI (based on HPI’s legitimate interest as further set out in Section B. below) for as long as it is required to review as to whether HPI has a prevailing interest or legal obligation in processing your Personal Data.
Please direct any such request to firstname.lastname@example.org.
Right to lodge a complaint with a supervisory authority. If you take the view that HPI is not processing your Personal Data in accordance with the requirements set out herein or applicable EEA data protection laws, you can at any time lodge a complaint with the data protection authority of the EEA country where you live or with the data protection authority of Germany.
Consents of children. This website and app also offer content for users of an age of below 16 years. If you are younger than 16, you need your parents to give consent to your usage of openHPI. Please direct this consent, written and signed, either to email@example.com or to
Hasso-Plattner-Institut für Digital Engineering gGmbH
Processing based on a legitimate interest of HPI. Each of the use cases below constitutes a legitimate interest of HPI to process or use your Personal Data. If you do not agree with this approach, you may object against HPI’s processing or use of your Personal Data as set out below.
Surveys. HPI may invite you to participate in questionnaires and surveys. These questionnaires and surveys will be generally designed in a way that they can be answered without any Personal Data. If you nonetheless enter Personal Data in a questionnaire or survey, HPI may use such Personal Data to improve the openHPI services.
Evaluation of Pseudonymized Data Sets. HPI may pseudonymize Personal Data provided under this Privacy Statement to create and process pseudonymized and aggregated data sets, which will then be used to improve the openHPI offerings.
Logging. In every visit to our website, the user data from your Internet browser is automatically submitted and stored in protocol files - the so-called server log files. The stored data sets contain the following information:
These data are solely used for bug tracking purposes, i.e. to find and fix errors in our platform software. Logging data is retained for a maximum duration of 4 weeks.
You can at any time object against HPI’s use of your Personal Data for these purposes by sending an email to firstname.lastname@example.org. In this case, HPI will carefully review any such objection and cease further use of the relevant information, unless HPI can claim compelling legitimate grounds for the use of the information, which override your interest in objecting or if HPI requires the information for the establishment, exercise or defense of legal claims.
Web Analysis. To continually improve our offer we use the open-source web analytics software "Matomo" (formerly known as "Piwik").
With Matomo we can receive in real-time reports about, e.g., the number of visitors, the search machines and the search words used that lead user to our offer. This helps us to constantly optimize our offer and design it accordingly.
In contrast to the web analysis tools of external providers, using Matomo offers you the advantage that the analysis is carried out by the Data Controller itself (see Section A.) instead of by an external service provider. This means that none of your Personal Data used for Web Analysis (in particular your IP address) will be transmitted to third parties.
You can object to being tracked with Matomo anytime by setting the "Do Not Track" option in your browser or opting out here:
You can obtain further information about Matomo, for example, at the following address: https://matomo.org/what-is-matomo/
The purposes of the processing of personal data including the legal basis.
Creating a minimal user profile. HPI requires your name and email address in order to enable you to participate in openHPI courses and to register for the openHPI website and respective mobile applications. Your name, email address and date of birth (optionally, if you provide it in your profile) will also appear on personal course documents, such as “Confirmations of Participation", “Records of Achievement" and "Certificate". Your email address will be used for course-related communications and the announcement of new courses and changes to the openHPI platform.
Parts of the openHPI web offerings and respective mobile applications bring you in touch with other openHPI users, e.g. to discuss with other learners in the discussion forum or the Collab Spaces of openHPI courses. If you decide to participate in these activities, other users will have access to parts of your minimal profile data, i.e. your full name (unless you choose to set a differing display name in your user profile) and your profile picture, if you have uploaded one.
Withdrawal of consent into the processing of Personal Data. You may withdraw your consent for HPI to process your Personal Data as stated herein at any time. Once you assert this right, HPI will not process your Personal Data any longer unless legally required to do so. However, any withdrawal has no effect on past processing by HPI up to the point in time of your withdrawal. Please direct any such request to email@example.com.
Cookies. Our website uses "cookies". Cookies are small files that are stored on your data carrier and store specific settings and data for exchange with our system via your browser. Cookies help us, for example, to realize fundamental features of the platform, e.g. keeping you logged in, as well as to design our offers to be as comfortable, efficient and interesting as possible for you. A basic distinction is made between different types of cookies: so-called session cookies, which can be deleted as soon as you close your browser, and temporary cookies, which are saved for a longer period of time on your data carrier. This storage helps us design our website and our offer in a way that suits you. It also eases your use. For example, certain entries you make are saved in such a way that you do not have to continually repeat them.
For the most part, the cookies we use are so-called session cookies, with which you can be identified during the duration of your visit. After the session has ended the session cookies expire automatically.
Moreover, we use temporary cookies to store user preferences in your browser (for example caption language or volume in the video player). If you give us consent for Web Analysis (see Section C), we store temporary cookies as part of the web analysis tool "Matomo". These have a lifespan of 1 week.
There is no personal data saved on the cookies we implement. The cookies are thus not assignable to you or to any other person.
If you wish to dissent from the storage of cookies, you can deactivate cookie storage in your browser, limit its use to certain websites, or set your browser in such a way that you will be informed as soon as a cookie is sent. You can also delete cookies at any time from your PC's hard drive. However, please note that you will be unable to use our offer if you completely reject the storage of session cookies.
If you decide to pay for a product within openHPI by credit card, the technical processing will be carried out by:
Computop Business Informatics GmbH
The corresponding credit card information is exclusively stored and processed by Computop Wirtschaftsinformatik GmbH (https://www.computop.com/uk/data-privacy/). There is no storage or processing of credit data information at the HPI.
HPI only stores and processes your data needed for invoicing, according to legal obligation.
Links to other websites. Our website contains links to the websites of other, unrelated providers. After clicking on such a link, we no longer have any influence on the processing of any data that is transferred to the third party (such as the IP address or the URL on which the link is located), since the behavior of third parties is beyond our control. Therefore, we cannot accept any responsibility for the processing of any such data by third parties.
The social media buttons used are purely links, and thus not the so-called "like" and "share" buttons used by social media services. They do not transfer customer data or IP addresses.
Vimeo. Our website includes content from the video portal Vimeo.com. The site operator is Vimeo LLC, 555 West 18th Street, New York, NY 10011, USA. When you visit one of our sites with a video player, a connection will be established to the Vimeo servers.
Vimeo will then be informed which of our pages you have visited ("Referer URL"). Vimeo will also have access to your IP address.
For more information about Vimeo's handling of user data, please see the Vimeo data privacy statement at https://vimeo.com/privacy.
The CDN for openHPI is Microsoft Azure Edge, operated by the Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. The responsible data protection officer for the EEA can be contacted via Microsoft Ireland Operations Limited, Attn: Data Protection Officer, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
This page was last changed at Thu, 12 Mar 2020 15:41:20 +0000.