Introduction

We are committed to protecting the privacy and security of your personal data. This Data Processing Notice ("Notice") is designed to inform you about how we collect, use, and safeguard the personal data you provide to us as applicants to our study program. We process this data strictly for scientific and internal evaluation purposes, in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection laws.

Data Collection

When you apply to our study program, we collect data that is necessary to evaluate your application, support your participation in the program, and conduct related scientific research.

This data may include:

• - Personal identification information (e.g., name, date of birth)
• - Contact details (e.g., email address, phone number)
• - Online Profiles (e.g., LinkedIn)
• - Educational background (e.g., previous schools, qualifications, grades)
• - Employment Information
• - Personal statements
• - Recommendations or references

Purpose of Data Processing

The data collected is used for the following purposes:

• - To assess your eligibility and suitability for the study program
• - To manage your application through the selection process
• - For statistical analyses that help us improve our programs
• - To comply with legal obligations
• - Processing for Scientific Research Purposes (Art. 89 GDPR)

Legal Basis for Processing

The legal basis for processing your personal data includes:

• - The necessity of processing for the performance of a contract to which you are a party (i.e., the application and selection process for the study program)
• - Compliance with legal obligations to which we are subject
• - Our legitimate interests in conducting scientific research and statistical analyses to understand the efficacy of the program, understand the underlying causal mechanisms, and improve the educational experience.

Your personal data may be shared with:

• - Internal departments involved in the administration of the study program
• - External partners and organizations for the purposes of accreditation, certification, or research collaboration, under strict data-sharing agreements that comply with GDPR

Your data will not be transferred outside the European Economic Area (EEA) without adequate safeguards in place, in compliance with GDPR requirements.

Data Security and Retention

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. Your data will be retained only for as long as necessary to fulfill the purposes it was collected for, including for the requirements of any legal obligations.

Your Rights

Under the GDPR, you have several rights regarding your personal data, including:

• - The right to access your personal data
• - The right to have your data corrected if it is inaccurate or incomplete
• - The right to erasure ('right to be forgotten’) in certain circumstances
• - The right to restrict the processing of your data
• - The right to data portability
• - The right to object to processing, including for direct marketing purposes
• - The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, please contact our Data Protection Officer (DPO) at datenschutz@cdtm.com.

Changes to This Notice

We may update this Notice from time to time. Any changes will be posted on our website and, where appropriate, notified to you by email.

Contact Us

If you have any questions or concerns about this Notice or our data processing practices, please contact our Data Protection Officer at datenschutz@cdtm.com.

This Notice is effective as of 01.05.2024.

We would like to assure you that your privacy and the confidentiality of your information are of utmost importance to us. In our commitment to protect your identity, we have implemented rigorous data anonymization practices.