We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory Data Protection Regulations and this BMS Privacy Policy. With the following information, we provide you with an overview of the processing of your personal data by us and your rights under data protection law.
1. Who is responsible for personal data processing and who can I contact? The responsible body is:
2. To whom does the Data Protection Policy apply? This data protection policy applies to visitors to our website, in particular interested parties as well as persons who would like to use and benefit from our offers, or who would like to gain information about Berlin Metropolitan School gGmbH. Furthermore, you can find data protection information for our partners and other external parties under point 6 of this data protection declaration and policy.
3. What data is processed when using the website? a) Access to and storage of information in terminal equipment By using our website, information (e.g., IP address) may be accessed or stored (e.g., cookies) on your device. This access or storage may involve further processing of personal data within the GDPR Framework.
In cases where such access to information or such storage of information is absolutely necessary for the technical error-free provision of our services, this is done on the basis of Section 25 (1) Sentence 1, (2) No. 2 TTDSG.
In cases where such a process serves other purposes (e.g., the needs-based design of our website), it will only be carried out on the basis of Section 25 (1) TTDSG with your consent in accordance with Article 6 (1) a DSGVO. The consent can be revoked at any time applicable immediately and in future. The requirements of the DSGVO and the Federal Data Protection Act (BDSG) apply to the processing of your personal data.
For more information on the processing of your personal data and the relevant legal bases in this context, please refer to the following sections on the specific processing activities on our website.
b) Web Hosting This website is hosted in Berlin, Germany. Personal data collected on this website is stored on our servers. This may include IP addresses, contact requests, meta and communication data, website accesses, and other data generated via a website.
We collect the listed data in order to be able to guarantee a smooth connection setup of the website and a technical, error-free provision of our services. The processing of this data is absolutely necessary to provide you with the website. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 (1) lit. f DSGVO.
We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 DSGVO, in which we oblige the provider to protect our customers' data and not to pass it on to third parties.
c) Server Log Files When visitors access our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
Date and time of the request
Name of the requested file
Page from which the file was requested
Access status
Web browser and operating system used
(Complete) IP address of the requesting computer
Amount of data transferred
We collect the listed data in order to be able to guarantee a smooth connection setup of the website and a technical, error-free provision of our services. The processing of this data is absolutely necessary to provide you both with access and use of the website. The log files are used to evaluate system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website pursuant to Art. 6 (1) lit. f DSGVO.
For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. After 90 days at the latest, the data is anonymized by shortening the IP address at the domain level, so that it is no longer possible to establish a link to the individual user.
In addition, the data is processed anonymously for statistical purposes, if necessary. This data is never stored together with other personal data of the user, compared with other data, or passed on to third parties.
d) Use of Cookies The internet pages sometimes use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective, and safer. Cookies are small text files stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.
If cookies are deactivated, the functionality of this website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technical, error-free and optimized provision of its services. Insofar as other cookies (e.g., cookies for the analysis of your surfing behavior) are stored, these are treated separately in this privacy policy.
e) Change Cookie Settings You can revoke or change your cookie settings at any time. To do so, call up the cookie settings again via the "Cookie Settings" link at the bottom of the website.
4. Third-party Modules and Analysis Tools 4.1 Plug-ins and Tools Vimeo Videos from "Vimeo" are embedded on this website. "Vimeo" is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA.
If you have given us your consent to do so, the processing is carried out for the optimal marketing of our offer in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.
For videos from "Vimeo" that are embedded on our website, the tracking tool Google Analytics is automatically integrated. We have no influence on the tracking settings and the analysis results collected via this and cannot view them. In addition, web beacons are set for website visitors via the embedding of "Vimeo Videos".
To prevent the setting of Google Analytics tracking cookies, you can prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent the collection of data generated by the cookies and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
For the purpose and scope of the data collection and the further processing and use of the data by the providers, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of "Vimeo": https://vimeo.com/privacy
Google Maps Our homepage uses the online map service provider Google Maps via an interface. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functionalities of Google Maps, it is necessary to store your IP address.
Google uses cookies to collect information about user behavior. The legal basis for the processing of your personal data is your consent granted for this purpose in accordance with Art. 6 Para. 1 lit. a DSGVO.
Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of GDPR. To ensure this, Google uses standard data protection clauses in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
4.2 Analysis Tools Google Analytics Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies".
Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity. Google will also use this information to provide the website operator with other services related to the use of the website and the internet. The IP address sent by your browser as part of Google Analytics is not combined with other data from Google. The processing is carried out in accordance with Art. 6 para. 1 lit. a DSGVO on the basis of the consent provided by you.
We use Google Analytics only with IP anonymization enabled. This means that your IP address is only processed by Google in a shortened form.
We have finalized and implemented an order processing contract with the service provider in which we have obliged the service providers to protect our customers' data and to not pass it on to third parties.
Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
The Google Analytics terms of use and information on data protection can be accessed via the following links:
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Deletion of user-level and event-level data linked to cookies, user identifiers (e.g., user ID), and advertising IDs (e.g., DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) occurs no later than 14 months after their collection.
You can prevent the storage of cookies by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website without restrictions. You can also prevent Google from collecting the data generated by the cookie and from analyzing your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=de.
4.3 Shared Content via plugins (Facebook, Google+1, Twitter & Co.) Social Plugins Our Internet pages may contain so-called social plugins ("plugins") of the social networks facebook.com, twitter.com, xing.com, linkedin.com, pinterest.com, addthis.com, reddit.com and plus.google.com.
In order to increase the protection of your data when visiting a website of our internet presence, the plugins are integrated into the page by means of a so-called "2-click" or "Shariff" solution. This integration ensures that when you call up a website that contains such plugins, no connection is established with the servers of Facebook, Twitter, Xing, LinkedIn, Pinterest, addthis, reddit and Google +. Only when you activate the plugins and thus give your consent to the transmission of data, does your browser establishes a direct connection to the servers of Facebook, Twitter, Xing. LinkedIn, Pinterest, addthis, reddit and Google +. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to the operators of the aforementioned social networks.
We have no influence on the scope of the data that the social networks collect with the help of the plugins. To the best of our knowledge, Facebook, Twitter, Xing, LinkedIn, Pinterest, addthis, reddit and Google+ receive information about which of our websites you have currently and previously visited.
By calling up the plugins, Facebook, Twitter, Xing, LinkedIn, Pinterest, addthis, reddit and Google+ receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile with the corresponding social networks or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the operators of Facebook, Twitter, LinkedIn, Pinterest, addthis, reddit and Google + in the USA and stored there. In the case of Xing, the data storage takes place in Germany. The information may be published in the respective social network and displayed there to your contacts.
For the purpose and scope of the data collection and the further processing and use of the data by the aforementioned social networks, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information under
If you are a member of a social network and would like to limit the collection of data via our websites and the merging of your user data with the data stored about you by the respective social network, you should log out of it before visiting our website.
5. Contact, Application, and Registration a) Contacting If you send us inquiries via email, the information you provide in your email, including the personal data you include there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The specification of an email address is required for contacting us, the specification of your first and last name and your telephone number is voluntary. Under no circumstances will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f DSGVO. Your data will be deleted after final processing of your request, provided that there are no legal retention obligations. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f DSGVO.
b) Student Application Form If you want to enroll your child at BMS, you have the possibility to complete and submit an application form on our website. This registration form basically only asks for data that is necessary for school registration. This can be details about the parents, such as last name, first name, address and contact details, as well as information about the student such as last name, first name, age, and other information required for registration.
The information you provide will be processed solely for the purpose of processing your registration. The legal basis is Art. 6 para. 1 lit. b), the implementation of pre-contractual measures. Your data will only be stored for as long as it is necessary for registration or, if your child is accepted, it will be stored for the period of school attendance and, if applicable, taking into account statutory retention obligations.
c) Applications within the Scope of our Job Advertisements
Berlin Metropolitan School gGmbH collects and processes the personal data of applicants for the purpose of handling the application process and the associated establishment of an employment relationship (pursuant to § 26 BDSG). The processing can take place by post and electronically. If your application documents reach us electronically, for example by e-mail or via a web form located on the website, then they will be transmitted to the controller.
In addition to processing application documents and as part of our student safeguarding procedure Berlin Metropolitan School gGmbH carries out a comprehensive background check on applicants who have successfully completed an interview. This includes checking references from previous or current employers, checking social media activities, name searches on an internet search engine and name searches on international sex offender websites.
If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents are automatically deleted latest six months after receipt of the application, provided that no other legitimate interests of the controller oppose deletion, or we agree with the applicant on longer storage, e.g. for future job postings. Another legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
In addition, you have the opportunity to voluntarily inform yourself about our current job offers on Schrole Connect: https://go.schrole.com/public/738/berlin-metropolitan-school We would like to point out at this point that Berlin Metropolitan School gGmbH is not the operator of this website and only makes use of the Schrole Connect offer in the context of job postings. For more information on Schrole Connect and its terms of use, please visit schroleconnect.com.
6. Events Berlin Metropolitan School holds events for students and parents. These can be open days or other information events. If it is an online event, you can register for this event via a registration link.
a) Processing Purpose We use the "Microsoft Teams" tool to hold online events and webinars (hereinafter: "Online Meetings"). "Microsoft Teams" is a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521 (hereinafter: "Microsoft").
b) Responsibility The responsible party for data processing directly related to the conduct of "Online Meetings" is the entity named at the beginning of this Privacy Policy.
Note: If you access the "Microsoft Teams" website, the "Microsoft Teams" provider is responsible for data processing. However, accessing the website is only necessary for the use of "Microsoft Teams" in order to download the software for the use of "Microsoft Teams".
If you do not want to or cannot use the "Microsoft Teams" app, you can also use "Microsoft Teams" via your browser. The service will then also be provided via the "Microsoft Teams" website.
c) What data is processed? When using "Microsoft Teams", various types of data are processed. The scope of the data also depends on the data you provide before or during participation in an "online meeting".
The following personal data are subject to processing:
User details: For example, display name, email address (if applicable), profile picture (optional), preferred language
Meeting metadata: For example, date, time, meeting ID, phone numbers, location
When dialing in with the telephone: information on the incoming and outgoing call number, country name, start and end time. If necessary, further connection data, such as the IP address of the device, can be stored.
Text, audio, and video data: You may have the option of using the chat, question or survey functions in an "online meeting". To this extent, the text entries you make are processed in order to display them in the "online meeting" and, if necessary, to log them. To enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device will be processed y for the duration of the meeting accordingly. You can turn off or mute the camera or microphone yourself at any time via the "Microsoft Teams" applications.
For recordings (optional): MP4 file of all videos, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat. If we want to record "online meetings", we will inform you in advance and - if necessary - obtain consent from you.
To participate in an "online meeting" or to enter the "meeting room", you must at least provide information about your name.
e) Processing Scope We use "Microsoft Teams" to conduct "online meetings". If we want to record "online meetings", we will transparently communicate this to you in advance and - if necessary - obtain consent from you.
If it is necessary for the purpose of logging the results of an online meeting, we will log the chat content in individual cases.
f) Legal basis of data processing The legal basis for data processing when conducting "online meetings" is Art. 6 para. 1 p. 1 lit. b DSGVO, insofar as the meetings are conducted in the context of contractual relationships.
If there is no contractual relationship, the legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. Here, too, our interest is in the effective implementation of "online meetings".
In addition, your personal data may be processed on the legal basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a DSGVO (e.g., when recording webinars).
g) Recipient / Passing on of Data Personal data processed in connection with participation in "online meetings" will not be disclosed to third parties as a matter of principle unless it is specifically intended for disclosure. Please note that the content of "online meetings", as well as personal meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.
Other recipients: The "Microsoft Teams" provider necessarily obtains knowledge of the above-mentioned data insofar as this is provided for under our order processing agreement with "Microsoft Teams". We have concluded an order processing contract with the service provider, in which we oblige it to protect the data of our customers and not to pass it on to third parties.
h) Data processing outside the European Union Microsoft uses international subcontractors and is in association with other companies in countries outside the EU. This may result in a transfer of personal data to the USA, among other countries, which is why further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, Microsoft has agreed to standard data protection clauses with its affiliated companies and subcontractors in accordance with Article 46 (2) c of the GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
8. Privacy Information for Partners & Externals a) Purposes and Legal basis of the Processing We process your personal data in accordance with the provisions of the European General Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the establishment, implementation or performance of a contract or for the implementation of pre-contractual measures. Insofar as personal data is required for the initiation or implementation of a contractual relationship or in the context of the implementation of pre-contractual measures, processing is lawful pursuant to Art. 6 (1) lit. b DSGVO.
If you give us your expressed consent to process personal data for specific purposes (e.g., transfer to third parties, evaluation for marketing purposes, or advertising by e-mail), the lawfulness of this processing is based on your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. Consent provided can be revoked at any time with effect for future (see section 9 of this data protection information).
If necessary and legally permissible, we process your data beyond the actual contractual purposes for the fulfillment of legal obligations pursuant to Art. 6 para. 1 lit. c DSGVO. In addition, processing may be carried out to protect the legitimate interests of us or third parties and to defend and assert legal claims pursuant to Art. 6 para. 1 lit. f DSGVO. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.
b) Personal Data Categories We only process data that is related to the establishment of the contract or the pre-contractual measures. This may be general data about you or individuals in your company (name, address, contact details, etc.) as well as any other data that you provide to us in the context of establishing the contract.
c) Data Sources We process personal data that we receive from you in the course of contacting you or establishing a contractual relationship or in the course of pre-contractual measures.
c) Data Recipient We only pass on your personal data within our company to those areas and individuals who need this data to fulfill contractual and legal obligations or to implement our legitimate interests.
Otherwise, data is only forwarded to recipients outside the company if this is permitted or required by law, if the forwarding is necessary for processing and thus fulfilling the contract or, at your request, for carrying out pre-contractual measures, if we have your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:
External tax consultant;
Public bodies and institutions (e.g., public prosecutor's office, police, supervisory authorities, tax office) if there is a legal or official obligation;
Recipients to whom the transfer is directly necessary for the establishment or fulfillment of the contract.
e) Transfer to a Third Country A transfer to a third country is not intended.
f) Duration of Data Storage As far as necessary, we process and store your personal data for the duration of our business relationship or for the fulfillment of contractual purposes. This also includes, among other things, the initiation and execution of a contract.
In addition, we are subject to various storage and documentation obligations as dictated by the German Commercial Code (HGB) and the German Fiscal Code (AO), among other things. The retention and documentation periods prescribed there are two to ten years.
Finally, the storage period is also governed by the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
What Data Protection Rights do I have? You have the right to information under Article 15 EU GDPR, the right to rectification under Article 16 EU GDPR, the right to deletion under Article 17 EU GDPR, the right to the restriction of processing under Article 18 EU GDPR, the right to object under Article 21 EU GDPR, and the right to data portability under Article 20 EU GDPR. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 EU DS-GVO in conjunction with Section 19 BDSG).
The data protection supervisory authority responsible for Berlin Metropolitan School gGmbH is: The Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, Tel.: 030 / 13889-319, .
You can revoke your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. For exercising your rights and further questions regarding data protection, please contact to our data protection officer (see contact information above).
8.1 Information about your Right Object According to Article 21 EU GDPR a) Individual Right of Objection You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing is carried out in the public interest or on the basis of a balancing of interests. This also applies to profiling.
In the event of an objection, we will no longer process your personal data. Unless we can demonstrate compelling legitimate grounds for processing such data that override your interests, rights and freedoms. Or your personal data is used for the assertion, exercise or defense of legal claims.
b) Objection to the Processing of User Data for Public Relations In individual cases, we use your personal data for our public relations work. You have the right to object to this at any time; this also applies to profiling if it is related to direct advertising. In the event of an objection, we will no longer process your personal data for these purposes. The objection can be made at any time and should be submitted in writing preferably to our data protection officer (see contact details above).
9. How Secure is my Data? To protect personal data, we use a secure online transmission method called "Secure Socket Layer" (SSL) transmission. All information transmitted using this secure method is encrypted before it is sent. Your personal data is processed exclusively on industry-standard data centers and computers protected by security technologies (e.g., firewalls, password protection, access controls, etc.).
10. Legal Obligations The provision of personal data for the decision on the finalization of a contract, the performance of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision in the context of contractual measures if you provide such personal data that is required for the finalization of the contract, the fulfillment of the contract, or pre-contractual measures.
11. Automated Decision-Making Automated decision-making or profiling according to Art. 22 DSGVO does not take place.
12. Modification Rights We reserve the right to adapt or update this BMS Data Protection Policy, if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and consider changes to our services, e.g., when introducing new services. The current version applies to your visit.
BMS Privacy Policy Version Status: 01.01.2023
Data protection declarations / Privacy Policies
Privacy Policy Social Media
Information on data processing in relation to social media platforms
1. Introduction and general information about social media
The protection of your personal data is very important to us. In the following, you will find information on the processing of your data that is collected through your use of our social media presences on social networks and platforms. Your data will be processed in accordance with applicable laws and regulations.
1.1. General information about the controller
Berlin Metropolitan School gGmbH, Linienstraße 122 in 10115 Berlin maintains presences or “fan pages” on various social media – platforms. For the processing of your personal data in connection with your visit to our presence or our “fan page” on the platforms Facebook and LinkedIn, we are jointly responsible with the operators of the respective platform mentioned here under 1., insofar as they provide us with aggregated information on visitors to our fan page or our presence (“Insights”). Detailed information on the scope of processing in joint responsibility related to the respective providers can be found in the second section of this Privacy Policy.
1.1.1. Joint controllership
The operator of the platform Facebook: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, a subsidiary of Meta Platforms, Inc, 1601 Willow Rd Menlo Park, CA 94025-1452, USA. The operator of the LinkedIn platform is: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W Maude Ave Sunnyvale, CA, 94085-2810 USA.
We have concluded an agreement with the operators pursuant to Art. 26 GDPR regarding joint responsibility for the processing of your personal data (Controller Addendum). This agreement specifies the data processing operations for which we or the respective operator are responsible when you visit our Fanpage or our presence on the platform of the respective operator. You can view this agreement under the following link:
If your personal data is processed by one of the social media platform providers listed below, this processing is carried out under the platform operator’s own responsibility within the meaning of Art. 7 No. 4 GDPR. For the assertion of your data subject rights, we point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. Should you still require assistance, please feel free to contact us at any time.
Instagram page, to Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, Vimeo page, Vimeo.com Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA
1.1.3. Own responsibility ofBerlin metropolitanschool gGmbh
For the processing of your personal data in the cases mentioned under 1.4. to 1.7. which is not carried out by the operators mentioned under 1.1.2. solely we are responsible.
1.2. Data transfer, recipients and data transfers to third countries
If we pass on personal data to the providers of social media platforms, the latter are recipients of the data within the meaning of Art. 4 (9) GDPR. Since personal data is transferred to countries outside the EU (e.g. U.S.) when visiting and interacting with the social media platforms used by us, further appropriate safeguards are required to ensure the level of data protection under the GDPR.
- Facebook: Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to compliance with adequate data protection standards, which can be verified via the following link: www.dataprivacyframework.gov/s/participant-search. For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, the provider states that it uses standard contractual clauses in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe, see here: facebook.com/privacy/policy/
- LinkedIn: states to use appropriate safeguards for third country transfers, including in particular standard contractual clauses, to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: www.linkedin.com/help/linkedin/answer/a1343190
In cases where providers process your personal data under their own responsibility (1.1.2.), we have no influence on the processing thereof by the provider and its use of such data (at least after transmission of the data). For more information, please check the privacy policy of the respective provider and, if necessary, use the opt-out / personalization options regarding data processing by the provider:
- Instagram - Privacy Policy/Opt-out: instagram.com/about/legal/privacy/ - Instagram (Meta Platforms, Inc.) is certified under the EU-U.S. Data Privacy Framework and is therefore committed to compliance with adequate data protection standards, which can be verified via the following link: www.dataprivacyframework.gov/s/participant-search. For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, the provider states that it uses standard contractual clauses in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe, see here: instagram.com/about/legal/privacy/
- Vimeo - Privacy Policy / Opt-Out: vimeo.com/privacy - According to its privacy policy, Vimeo uses standard contractual clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: vimeo.com/privacy
1.3. Access to and storage of information in terminal equipment (cookies)
When you visit our Facebook fan page or other social media sites, one or more cookies are set on your terminal device by the platform provider. Cookies are small text files that are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or an automatic solution is provided by your web browser.
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or display advertising.
By interacting with our Facebook fan page or our other social media appearances, information (e.g. your IP address) may be accessed or stored (e.g. cookies) in your terminal equipment. This access or storage may involve further processing of personal data according to the GDPR.
The activity or validity period of cookies can vary greatly, but you can delete them manually at any time using your web browser settings. If you have technical questions about this, please contact the manufacturer of your web browser. Further information on the use of cookies and their legal basis can be found in the respective provider’s privacy policy. Links to the respective data protection statements can be found above under “Data transfer and recipients”. If you have any further questions, please contact the provider of the respective social media platform directly.
1.4. Data processing for market research and advertising purposes
Generally, personal data is processed on the company website for market research and advertising purposes of the provider of the social media platform. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. In addition, an extensive evaluation of your interactions on the social media platform is carried out by the provider. By means of the collected data, usage profiles can be created. These are used to place advertisements within and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the usage profiles regardless of the devices you use. This is regularly the case if you are a member of the respective platforms and logged in to them. You can find more information on this in the data protection information of the respective provider.
When you visit our social media site or interact with it, we may receive personal data from you, which we, in addition to the provider, also process under our own responsibility, other than in the cases mentioned in section 2. of this privacy policy. This may be information that you actively provide (comments, likes, and information you provide publicly, such as your profile picture or name).
Collection of information about who has viewed our social media presence: Depending on the provider and your settings on the provider’s platform, it may also be the case that we are informed about who has viewed our appearance or page within the platform. The provider LinkedIn supplies us with information about which LinkedIn user has visited our LinkedIn presence. This information is provided to us by LinkedIn without any time limit regarding the time of storage.
Our access to the aforementioned data results from the operation of our social media presence; no further processing of this data by us takes place except in the cases mentioned in this privacy policy. We have a legitimate interest in the operation of our social media presence and the associated processing of personal data that you actively publish or make available to us in accordance with Art. 6 (1) (1) (f) GDPR. Our legitimate interest lies in the promotion as well as in making available an effective communication and interaction option with our company.
1.5. Data processing when you contact us
We collect personal data ourselves when you contact us, for example, via a contact form or through a messenger service of the respective platform, such as Facebook Messenger. Which data is collected depends on the information you provide and the contact data you have submitted or made available. This data is stored by us for the purpose of processing the request and to answer any follow-up questions. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR and, if applicable, Art. 6 (1) lit. b GDPR if your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no legal obligations to retain data. We assume that processing is complete if it can be inferred from the circumstances that the matter in question has been conclusively resolved.
1.6. Data processing for contract management
If your contact via a social network or other platform aims at the conclusion of a contract for the delivery of goods or the provision of services with us, we process your data for the performance of the contract or for the implementation of pre-contractual measures or for the performance of the requested services. The legal basis for the processing of your data in this case is Art. 6 (1) lit. b GDPR.
Your data will be deleted if it is no longer required for the performance of the contract or if it is determined that the pre-contractual measures do not lead to the conclusion of a contract corresponding to the purpose of the contact. Please note, however, that it may be necessary to store personal data of our contractual partners even after the conclusion of the contract in order to comply with contractual or legal obligations.
1.7. Data processing on the basis of consent
If you are asked by the respective providers of the platforms to give your consent to processing for a specific purpose, the legal basis of the processing is Art. 6 (1) lit. a., Art. 7 GDPR. Given consent can be revoked at any time with effect for the future.
2. Processing in joint responsibility with the provider of the social media platform
2.1. Facebook-Fanpage (Insights feature)
2.1.1. Data processing regarding “page insights” when visiting our Facebook fan page
When you visit our Facebook fan page, your personal data will be processed by Facebook as the operator of the platform and by us as the operator of the fan page. Insofar as this data processing takes place in connection with the Insights functionality of Facebook (Meta Platforms Ireland Ltd. or Meta Platforms Inc.), we are jointly responsible for such processing with Facebook (Art. 26 (1) GDPR).
Page Insights (https://www.facebook.com/business/a/page/page-insights) is a function provided by Facebook, which allows the operator of a Facebook fan page (us) to obtain summarized data about the interaction of visitors.
Page Insights may be based on personal data collected in connection with a person’s visit to or interaction with our site and in connection with content provided. Please be aware of what personal data you share with us via Facebook. Your data may be processed for market research and advertising purposes even if you are not logged into Facebook or do not have a Facebook account. For example, user profiles can be created from the usage behavior and resulting interests of the users. The user profiles can in turn be used, for example, to display advertisements within and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies that are stored on your terminal device. Furthermore, data that is independent of the devices utilized by the users may also be stored in the user profiles; in particular, if the users are members of the respective platforms and logged in to them.
We only receive summarized (aggregated) data from Facebook, which does not allow any conclusions to be drawn about individual persons.
Your personal data is processed by us for advertising and marketing purposes. (E.g.: increasing the reach and awareness of our fan page through target group-specific design of posts, evaluation of the success of marketing campaigns).
The legal basis for the processing of your personal data relating to Facebook Insights is the consent the Facebook user gives to Facebook (Art. 6 (1) lit. a GDPR.)
For information on the purposes Facebook pursues with the processing of your personal data and the legal basis for this data processing, please refer to Facebook’s privacy policy.
Please note that we have no influence on the data collection and further processing within the responsibility of Facebook. As a result, we can not provide information about the extent to which, where and for how long the data is stored by Facebook. Furthermore, we cannot state to what extent Facebook complies with existing deletion obligations, what evaluations and links are made with the data on the part of Facebook and to whom the data is passed on by Facebook.
Information on the processing of your personal data, which is processed by Facebook for its own purposes, can be found in Facebook’s privacy policy: www.facebook.com/about/privacy/
2.1.2. Your rights as an affected person of the data processing
If you as a visitor to the site would like to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both Facebook and us. You can independently adjust your advertising settings in your user account. To do so, click on the following link and log in:
2.2.1. Data processing regarding “page insights” when visiting our LinkedIn page
When you visit our LinkedIn presence, your personal data will be processed by LinkedIn as operator of the platform and by us as operator of our presence within the platform. Insofar as this data processing takes place in connection with the Insights functionality of LinkedIn (LinkedIn Ireland Unlimited Company. or LinkedIn Corporation.), we are jointly responsible for it with LinkedIn (Art. 26 (1) GDPR).
LinkedIn Page-Insights (https://legal.linkedin.com/pages-joint-controller-addendum) is a function provided by LinkedIn, which allows the operator of a LinkedIn page (us) to receive summarized data about the interaction of visitors.
LinkedIn evaluates your interaction with our LinkedIn presence as part of the Page Insights function and also uses the personal information provided by you (professional activity, industry, country, etc.). The evaluated data is made available to us by LinkedIn, but only in aggregated form (i.e. LinkedIn does not provide us with specific information on individual users as part of this function, but only summarized information). We use this aggregated data for the target group-specific presentation of our LinkedIn page and generally for its optimization with regard to the above-mentioned advertising purposes.
We have a legitimate interest in these advertising purposes and the processing of your data is based on Art. 6 (1) lit. f GDPR.
For information on the purposes LinkedIn pursues with the processing of your personal data and the legal basis for this data processing, please refer to LinkedIn’s privacy policy.
Please note that we have no influence on the data collection and further processing within the responsibility of LinkedIn. As a result, we can not provide information about the extent to which, where and for how long the data is stored by LinkedIn. Furthermore, we cannot state to what extent LinkedIn complies with existing deletion obligations, what evaluations and links are made with the data on the part of LinkedIn and to whom the data is passed on by LinkedIn.
2.2.2. Your rights as an affected person of the data processing
If you as a visitor to the site would like to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both LinkedIn and us. You can independently adjust your advertising settings in your user account.
You will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller in the following.
You have the right –
to request information about your personal data processed by us; Art. 15 GDPR. In particular, you may obtain information about the purpose of processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing, the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling and meaningful information about the logic involved.
To obtain from the controller without undue delay the rectification of inaccurate personal data or have incomplete personal data completed; Art. 16 GDPR.
To obtain from us the erasure of personal data concerning, unless the processing is necessary for, exercising the right of freedom of expression and information, compliance with a legal obligation, reasons of public interest, achieving purposes in the public interest and the establishment, exercise or defence of legal claims, Art. 17 GDPR.
To obtain from us restriction of processing where, the accuracy of personal data is contested by you, the processing is unlawful, we no longer need the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21; Art. 18 GDPR.
To receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller; Art. 20 GDPR
To lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement; Art. 77 GDPR.
To withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before it’s withdrawal. Prior to giving consent, you shall be informed thereof; Art. 7 para. 3 GDPR. In case of countermand the respective data shall be deleted immediately, unless further processing cannot be based on a legal basis for processing without consent.
4. Right to object
In accordance with Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on processing for the purposes of the legitimate interests (Art. 6 Abs. 1 lit. GDPR) pursued by us. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.
If you wish to make use of your right to objection or withdraw your consent, send an E-Mail to datenschutzbeauftragter@datenschutzexperte.de.
5. Storage period
The personal data collected and stored by us will be erased from our systems, if the purpose of processing ceases to exist or if you have made use of your right of withdrawal or objection. Legal retention periods remain unaffected. We have no influence on the storage period of your data being stored by social media providers for their own purposes. For further details, please contact them directly.
6. Subject to change
We reserve the right to adapt or update this privacy policy, if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take account of changes to our services, e.g. the introduction of new services. The most current version applies to your visit.
Status of this privacy policy: 12.05.2025
Privacy Notice for Image and Filming
Dear visitor,
In accordance with the requirements of Art. 13 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. In order to ensure that you are fully informed about the processing of your personal data in the context of this event, please take note of the following information. Processing will take place in the form of the taking of a picture and/or film as well as the publication of the picture and/or film.
1. DATA CONTROLLER WITHIN THE MEANING OF DATA PROTECTION LAW
Berlin Metropolitan School gGmbH Linienstraße 122 in 10115 Berlin Phone +49 30 88727 390 Fax +49 30 88727 3920 Email info@metropolitanschool.com Website: www.metropolitanschool.com
2. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER
PROLIANCE GmbH Leopoldstraße 21 in 80802 München Email datenschutzbeauftragter@datenschutzexperte.de
3. PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (German Federal Data Protection Act).
The data processing for the documentation and communication of school events is based on our legitimate interest pursuant to Art. 6 para. 1 (f) GDPR. Our legitimate interest here is to inform and engage our school community, to promote transparency, and to communicate the values and activities of our educational environment to the public. This includes presenting events on our website and our social media platforms, as well as maintaining internal records for the purpose of archiving school life, supporting educational development, and fostering a shared sense of identity within our community.
In the case of recordings where the event as such is not in the fous of the media coverage and individuals are highlighted, the legal basis is the voluntary consent of the person concerned pursuant to Art. 6 para. 1 a GDPR.
4. CATEGORIES OF PERSONAL DATA
The personal data processed by us here are pictures and/or films of the participants of Berlin Metropolitan School gGmbH Events.
5. SOURCES OF THE DATA
We process personal data in the form of pictures and/or films taken of you during and after all school related Events from Berlin Metropolitan School gGmbH.
6. RECIPIENT OF THE DATA
We only share your personal data within our company with those areas and persons who need this data to implement our legitimate interest.
The data will be processed upon publication on our
• Facebook page and/or Instagram page, to Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, • LinkedIn page, to LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, • Vimeo page, Vimeo.com Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA • Social Media Management Tool, METRICOOL SOFTWARE, S.L., Calle Téllez, Nr. 12, Entreplanta H, 28007 Madrid
transmitted.
7. TRANSMISSION TO A THIRD COUNTRY
A transfer to a third country is not intended. However, it cannot be ruled out that data published on the Internet may also be transferred to third countries.
8. DURATION OF DATA STORAGE
As far as necessary, we process and store your personal data for the duration of our legitimate interest. The data will be deleted when it is no longer required for the above purposes or you have exercised your right of objection. If the taking and/or publication of images and/or films is based on your consent, we will delete the images and/or films concerned immediately upon receipt of your withdrawal, unless further processing can be based on a legal basis for processing without consent.
Please note that information placed on the Internet, including image and film recordings, can be easily copied and further processed. There are specialized archiving services whose aim is to permanently document the state of certain websites on specific dates. This can mean that information published on the Internet can still be found elsewhere even after it has been erased from the website on which it was originally published.
9. YOUR RIGHTS
Every data subject has the right of access under Article 15 GDPR, the right of rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to notification under Article 19 GDPR and the right to data portability under Article 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 of the GDPR. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected. Please also note that we may need to retain certain data for a certain period of time in order to comply with legal requirements (see section 8 of this privacy notice).
Right of objection:
Insofar as the processing of your personal data is carried out for the protection of legitimate interests in accordance with Art. 6 para.1 (f) of the GDPR, you have the right, in accordance with Art. 21 of the GDPR, to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling legitimate reasons for the processing. These must override your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal entitlements.
To protect your rights, you can contact us using the contact details provided in section 1.
10. NECESSITY OF PROVIDING PERSONAL DATA
In principle, you are free to decide whether or not to permit the taking and/or publication of images and/or films. However, the provision may be necessary if and to the extent that you have contractually committed to us to do so.
11. AUTOMATED DECISION-MAKING
As a matter of principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR for the taking and/ or publication of images and/or films. Should we use these procedures in individual cases, we will inform you separately about this or obtain your consent, if this is required by law.
Our website uses cookies to offer a better browsing experience, to provide social media features and to analyse traffic. For further information, see our Privacy Policy.
Essential: Cookies for core website functionality. Comfort: Includes Google Maps and the Vimeo video player. Social Media: Enables the integration of Twitter feeds. Statistics: Allows to collect visitor statistics with Google Analytics.