Data Protection Declaration

Data protection declaration of TÜV Rheinland Akademie GmbH

TÜV Rheinland Akademie GmbH welcomes you to our weblog and is pleased about your interest in our blog posts. Data protection and data security for our customers and users have, from time immemorial, been of great significance to us. The protection of your personal data is therefore very important and a special concern of ours.

General guidelines and mandatory information

This privacy policy gives you an overview of the type of data collected by TRA and what happens to your personal data when you visit our weblog. We shall treat your personal data confidentially and in compliance with the legal data protection regulations as well as this privacy policy. When you visit our weblog, your browsing behavior can be statistically evaluated. This is mainly done using cookies, analysis tools and tools of third-party providers. In principle, your browsing behavior is analyzed anonymously; this browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by avoiding the use of particular tools. Detailed information about this can be found in the following guidelines to our privacy policy.

Information about the collection of personal data

1.) In the following sections we shall inform you about the collection and further processing of personal data when you visit our weblog. Personal data refers to all data which relates to you personally or with which you can be identified personally, e.g. name, address, e-mail address, or user behavior.

2.) The Controller, according to Article 4(7) of the EU General Data Protection Regulation (GDPR), is

TÜV Rheinland Akademie GmbH
Alboinstraße 56
12103 Berlin, Germany

Represented by the Board of Directors: Markus Dohm, Dr. Steffi Artl, Andreas Ollhoff

Tel.: +49 (0) 221 / 806 – 0
Fax: +49 (0) 221 / 806 – 114

For the following weblog:

3.) You can reach our legally designated data protection specialist at:
a.) with the subject line “Data protection specialist”
b.) or through our postal address with the tag “Data protection specialist”.

4.) When you contact us by e-mail or via a contact form, we shall store the personal data you submit to us (your e-mail address, your name and your telephone number, if necessary) for purposes of responding to your questions. We shall delete the data connected with this event as soon as its storage is no longer required, or we shall restrict the processing of this data if there are any legal obligations necessitating its storage.

5.) If we engage contracted service providers for individual functions of our service provision, or if we want to use your data for advertising purposes, we shall hereafter inform you in detail about the respective procedures. At the same time, we shall also tell you the fixed criteria for the storage duration.

6.) Insofar as your inquiry necessitates the transmission of personal data to particular recipients, the data will also be shared with third parties. This will always take place within the framework of legal regulations.

7.) This weblog uses SSL and/or TLS encryption for security reasons and to protect the transmission of confidential contents, e.g. submitted contents of a form. If the encryption is activated, the data transmitted to us cannot be read by third parties. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the lock symbol in the browser bar.

8.) The use of the contact details published in connection with the obligatory legal notice for sending not explicitly solicited advertising and information material is hereby excluded. The operators of the weblog reserve the right to take express legal steps in the event of unsolicited circulation of advertising information, for example through spam e-mails.

Your rights

1.) You can assert the following rights against us regarding your personal data:
a.) Right to information,
b.) Right to rectification or erasure of personal data,
c.) Right to restriction of processing,
d.) Right of objection to the processing,
e.) Right to data portability.

2.) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Collection of personal data when you visit our weblog

1.) If you are simply visiting our weblog for information purposes, and not to register or send us any information at all, we shall still collect the following personal data which will be transmitted to our server by your browser.

a.) IP address
b.) Date and time of your inquiry
c.) Time zone difference to Greenwich Mean Time (GMT)
d.) Contents of the request (precise page)
e.) Access status / HTTP status code
f.) The respective amount of data transmitted
g.) Website originating the request
h.) Browser
i.) Operating system and its interface
j.) Language and version of the browser software

The legal basis for the processing of your data is Article 6(1)(f) of the GDPR, which allows the processing of technically requisite data that ensures a stable and secure operation of the weblog.

2.) In addition to the data mentioned earlier, cookies are stored on your computer when you visit our weblog. Cookies are small text files which are stored on your hard disk and associated with the browser you use; through these cookies, information is transmitted to the institution which has placed the cookie on your computer (here, our organisation). Cookies cannot run any programmes on or transmit viruses to your computer. They serve to make our web content more user-friendly and more effective as a whole.

3.) Use of cookies:
a.) This weblog uses the following types of cookies, whose scope and functionality is described here below:
I.) Transient cookies (refer to b)
II.) Persistent cookies (refer to c)
b.) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. This type of cookie stores what is known as a “session ID” with which different requests from your browser can be assigned to the common session. Through this, your computer can be recognized the next time you visit our website. Session cookies are deleted when you log out or when you close the browser.
c.) Persistent cookies are deleted after a pre-determined time, which can vary from one cookie to the next. You can delete cookies at any time through the security settings of the browser.
d.) You can configure your browser settings according to your wishes and reject the placement of third-party cookies, for instance, or of all cookies. We would like to point out that in this case you may not be able to use all the functions on this website to the fullest extent.

The legal basis for the processing of your data in this case is still Article 6(1)(f) of the GDPR (e.g. for proper operation of the weblog). Insofar as other cookies (e.g. cookies for analysis of your browsing behavior) are stored on your computer, these will be treated separately in our privacy policy.

Other functions and services of our weblog

1.) Apart from the purely informative use of our weblog, we also offer various services which you can use if interested. To do this, you generally have to give us more personal data, which we shall use to provide the respective service and for which the previously outlined principles of data processing apply.

2.) We shall partly engage external service providers to process your data. These have been carefully selected and commissioned by us; they are bound by our instructions and are regularly monitored by us.

3.) Furthermore, we can share your personal data with third parties if we have arranged to participate in promotions, competitions, conclusion of contracts or other similar services in collaboration with our partners. You can get more information about this by providing your personal details or in the subsequent description of the service offered.

4.) Provided that our service providers or partners have their headquarters in a country outside the European Economic Area (EEA), we shall inform you about the consequences of this state of affairs in the description of the service offered.

Objection to or revocation of the processing of your data

1.) If you have consented to the processing of your data, you can always revoke this consent at any time. After you have expressed such a revocation to us, it will influence the permissibility of processing your personal data.

2.) Provided that we are basing the processing of your personal data on the need to balance interests, you can raise an objection to this processing of your data. This is the case if the processing is not required in particular to fulfil a contract with you, a fact which we endeavor to outline in the subsequent description of the respective functions. When exercising such a right of objection, we request that you outline the reasons why we should not process your personal data in the manner we have described. If you present to us your reasons, we shall check the circumstances and either stop and/or adjust the processing of the data, or present compelling counterarguments for continuing with the data processing.

3.) You can of course object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to the use of your data for advertising through the following contact address: By e-mail to or by post to TÜV Rheinland Akademie GmbH, Alboinstraße 56, 12103 Berlin, Germany.

Analyse Tools und Werbung

Einsatz von Matoma (früher Piwik)

1.) Dieser Weblog nutzt den Webanalysedienst Piwik, um die Nutzung unserer Website analysieren und regelmäßig verbessern zu können. Über die gewonnenen Statistiken können wir unser Angebot verbessern und für Sie als Nutzer interessanter ausgestalten. Rechtsgrundlage für die Nutzung von Piwik ist Art. 6 Abs. 1 S. 1 lit. F DS-GVO.

2.) Für diese Auswertung werden Cookies (näheres dazu in § 3) auf Ihrem Computer gespeichert. Die so erhobenen Informationen speichert der Verantwortliche ausschließlich auf seinem Server in Deutschland. Die Auswertung können Sie einstellen durch Löschung vorhandener Cookies und die Verhinderung der Speicherung von Cookies. Wenn Sie die Speicherung der Cookies verhindern, weisen wir darauf hin, dass Sie gegebenenfalls diese Website nicht vollumfänglich nutzen können. Die Verhinderung der Speicherung von Cookies ist durch die Einstellung in ihrem Browser möglich. Die Verhinderung des Einsatzes von Piwik ist möglich, indem Sie den folgenden Haken entfernen und so das Opt-out-Plug-in aktivieren: [Piwik iFrame].

3.) Diese Website verwendet Piwik mit der Erweiterung „AnonymizeIP“. Dadurch werden IP-Adressen gekürzt weiterverarbeitet, eine direkte Personenbeziehbarkeit kann damit ausgeschlossen werden. Die mittels Piwik von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen von uns erhobenen Daten zusammengeführt.

4.) Das Programm Piwik ist ein Open-Source-Projekt. Informationen des Drittanbieters zum Datenschutz erhalten Sie unter

Social media plug-ins

1.) We currently use the following social media plug-ins on our website:
a.) Facebook
b.) Twitter
c.) LinkedIn
d.) Xing
e.) WhatsApp
f.) YouTube
g.) Google+
h.) Pinterest
i.) Instagram

2.) We use the two-click solution. This means that when you visit our site, no personal data is sent initially to the plug-in providers. You can identify the provider of the plug-in by the marking on the box, via the provider’s initial letters or logo. We give you the opportunity to communicate directly with the plug-in provider via the button. The plug-in provider will receive the information that you have visited the relevant page on our website only if you click on the marked field and thereby activate it. In addition, the data specified in Part 1, Section 3 of this policy will be transmitted. In the case of Facebook, according to this provider, the IP address is anonymised immediately after being collected in Germany. When the plug-in is activated, your personal data is therefore sent to the relevant plug-in provider and stored there (in the case of US providers, in the USA). Because the plug-in providers carry out data collection using cookies in particular, we recommend deleting all cookies via the security settings in your browser before clicking on the greyed-out box.

3.) We have no influence on the data collected or on the data processing operations, nor do we know the full scope of the data collection, the purposes of the processing or the retention periods. We also have no information regarding the erasure of the collected data by the plug-in providers.

4.) The plug-in provider stores the data collected regarding you as usage profiles and uses these for advertising and market research purposes and/or for ensuring that its website is designed in accordance with requirements. Such use is carried out in particular (including for users who are not logged in) for the purposes of displaying appropriate advertising and informing other users on the social network about your activities on our website. You have a right to object to the creation of these user profiles. To assert this right, you must contact the relevant plug-in provider. Via the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve the experience we offer and make it more interesting for you as a user. The legal basis for the use of plug-ins is Art. 6(1)(1)(f) GDPR.

5.) The data transfer takes place irrespective of whether or not you have an account with the plug-in provider and are logged into your account. If you are logged into your account with the plug-in provider, your data collected on our website will be linked directly to this account. If you click on the activated button and e.g. link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend regularly logging out after using a social network, in particular before activating the button, as in this way you can prevent a link being made by the plug-in provider to your profile.

6.) Further information on the purpose and scope of the collection and processing of data by the plug-in provider is available in the privacy policies of these providers listed below. In these privacy policies, you can also find further information on your associated rights and setting options for protecting your privacy.

7.) Addresses of the relevant plug-in providers and URLs for their privacy policies:
a.) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; ; further information on data collection: , and . Facebook has joined the EU-U.S. Privacy Shield,

b.) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; . Twitter has joined the EU-U.S. Privacy Shield,

c.) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; . LinkedIn has joined the EU-U.S. Privacy Shield,

d.) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE;

e.) WhatsApp / Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; further information on data collection.

f.) YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Die YouTube, LLC ist eine Tochtergesellschaft der Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

g.) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; . Google has joined the EU-U.S. Privacy Shield, .

h.) Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”) further information on data collection

i.) Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA;

Integration of YouTube videos

1.) We have integrated YouTube videos in our website. These videos are stored on and can be played directly from our website. The videos are all integrated in “enhanced data protection mode”, meaning that no data regarding you as a user is transmitted to YouTube if you do not play the videos. The data specified in paragraph 2 is transmitted only when you play the videos. We have no influence over this data transmission.

2.) Through the visit to the website, YouTube receives the information that you have accessed the relevant page on our website. In addition, the data specified in Part 1, Section 3 of this policy will be transmitted. This takes place irrespective of whether you have a user account with YouTube that you are logged into or whether no user account exists. If you are logged in on Google, your data will be linked directly to your account. If you do not want your data to be linked to your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for advertising and market research purposes and/or for ensuring that its website is designed in accordance with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users on the social network about your activities on our website. You have a right to object to the creation of these user profiles. To assert this right, you must contact YouTube.

3.) Further information on the purpose and scope of the collection and processing of data by YouTube is available in the privacy policy. Here, you can also find further information on your rights and setting options for protecting your privacy: . Google also processes your personal data in the USA and has joined the EU-U.S. Privacy Shield, .

Use of Google reCAPTCHA

Our website uses the reCAPTCHA service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The request serves to distinguish whether the input was made by a human or automatic machine processing. The request includes the submission of the IP address and any other data required by Google for the reCAPTCHA service. For this purpose your input will be transmitted to Google and used further there. Google will, however, shorten your IP address beforehand within the Member States of the European Union or other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website in order to assess your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not associated with any other data held by Google. Your data may also be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission, the “Privacy Shield”. Google participates in “Privacy Shield” and has submitted to its requirements. By activating the request you agree to the processing of your data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.You can find more detailed information on Google reCAPTCHA and the associated data protection declaration at: