Controller for processing your personal data in accordance with the General Data Protection Regulation (GDPR) is TÜV SÜD Akademie GmbH, Westendstraße 160, 80339 Munich, Germany. You can reach our data protection officer by mail at TÜV SÜD Business Services GmbH, Westendstr. 199, 80686 Munich, Germany, with the addition "AKD Datenschutz" or by e-mail at [email protected].

Regarding your consent and the use of MS Teams: 

The processing of your personal data described here is based on your consent, which can be revoked at any time (Art. 6 para. 1 lit. a GDPR).
Alternatively, you have the option of taking part in a face-to-face examination on site at TÜV SÜD Akademie premises. In this case, please approach your contact person.
If you revoke your consent, the basis for conducting the online examination no longer applies.

There is no recording of the data processed in the course of the online examination via teams.

In the course of the online examinations, the company Microsoft is processor for the operation of the MS Teams system according to to Art. 28 GDPR.
The MS Teams system is operated by Microsoft. The locations of the servers are contractually guaranteed to be in Europe. Microsoft may send personal data to sub-processors worldwide.
Microsoft is a US provider. The USA is a third country outside the European Union within the meaning of the GDPR.
So-called EU standard contractual clauses have been concluded with Microsoft. The contents of these clauses cover the requirements from Art. 28 GDPR on minimum requirements for contracts for processors.
In addition, we inform you that Microsoft is subject to the US Cloud Act, which allows American law enforcement authorities to access stored data even if the storage takes place outside the United States of America. Microsoft reserves the right to use Customer Personal Data (any personal data, including text, sound, video or image files) for "legitimate business activities" as an independent data controller. Microsoft may engage subcontracted processors to perform services on Microsoft's behalf in accordance with the contracts entered into. When engaging a sub-processor, Microsoft will ensure through a written contract that the sub-processor may access and use Customer Data or Personal Data only to provide the services for which Microsoft has stored it and not use it for any other purpose.

Microsoft reserves the right to transfer the above Personal Data to approximately 150 sub-processors in approximately 35 countries worldwide for processing. All transfers of personal data to a third country or international organization are, according to Microsoft, subject to appropriate safeguards as described in Article 46 of the GDPR.

You can find more information about Microsoft's data processing in the MS Trust Center and the MS Privacy Policy.


On the use of the online platform "TÜV SÜD CertBay"

We process your personal data for the purpose of conducting online examinations on the online platform "TÜV SÜD CertBay" as part of the performance of contractual or pre-contractual measures (Art. 6 para. 1 b GDPR, Art. 6 para. 1 f GDPR).

We use cookies on the online platform "TÜV SÜD CertBay". A cookie is a small data package (text file) that your browser stores on your device on instruction of a visited website to "remember" information. These cookies are set by us and are referred to as first-party cookies. In the case of CertBay, they are so-called session cookies (a random string of numbers and letters).
These cookies are necessary for the website to function and cannot be disabled in your systems. Usually, these cookies are only set in response to actions you take that correspond to a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or to notify you of these cookies. However, some areas of the website will not function after exclusion. These cookies do not store any personal data.
Other cookies for performance analysis or marketing purposes are not used.

In individual cases, your personal data is transmitted to licensing and examination bodies (e.g. public authorities, accreditation bodies, Federal Employment Agency) as part of examinations conducted by TÜV SÜD Akademie GmbH.
We use service providers by way of order processing in the provision of services within the EU, in particular for the provision, maintenance and servicing of IT systems.

Your personal data is not transferred to third countries. The exception to this is data from participants and clients located in third countries.

If the data is no longer required for the fulfillment of contractual or legal obligations and rights, it is regularly deleted, usually after 10 years, unless its - temporary - further processing is required for the fulfillment of the purposes for an overriding legitimate interest.


Regarding your data subject rights and other information

The processing of data relating to you by us is not connected with an automated decision-making or profiling.

If you have any questions about the processing of your personal data by us, we will of course be happy to provide you with information about the data relating to you (Art.15 GDPR). In addition, you have a right to rectification (Art.16 GDPR), erasure (Art.17 GDPR), restriction of processing (Art.18 GDPR), objection to processing (Art.21 GDPR) and the right to data portability (Art.20 GDPR) if the legal requirements under the GDPR are met. Finally, you have the right to lodge a complaint with a competent data protection supervisory authority (Art.77 GDPR, § 19 BDSG).

Your right to object: If you wish to revoke a consent you have given (data processing based on Art. 6 para. 1 lit. a GDPR) or object to the processing of your personal data due to your particular situation (data processing based on Art. 6 para. 1 lit. f GDPR), all you need to do is send a short message to our data protection officer at any time by e-mail to [email protected] or by post to TÜV SÜD Business Services GmbH, stating "AKD Datenschutz", Westendstr. 199, 80686 Munich, Germany.


Status: 20.08.2021