SAE Alumni GmbH | Germany
This Privacy Policy provides information on how SAE Alumni GmbH processes personal data. It applies in particular to our online shop (saestore.com/alumni), to subscriptions within the scope of our Alumni Program, to events, as well as to our other communication and administration.
1. Controller
The controller is:
SAE Alumni GmbH
Kiefernstraße 7
82256 Fürstenfeldbruck
Germany
Email: alumni@sae.edu
For data protection inquiries, you can reach us at: datenschutz@sae.edu
2. Data Protection Officer
Our Data Protection Officer can be reached at: datenschutz@sae.edu or by mail at the postal address mentioned above.
3. Joint Controllership within the AD Education Group
For certain centralized group processes, SAE Alumni GmbH processes personal data jointly with other German companies of the AD Education Group within the meaning of Art. 26 GDPR.
This applies in particular to central administration, CRM, communication, and reporting processes.
The joint controllers for these shared processes are:
AD Education Germany Holdings GmbH
Zielstattstraße 30
81379 Munich
Germany
SAE-Institute GmbH
Zielstattstraße 30
81379 Munich
Germany
SAE Alumni GmbH
Kiefernstraße 7
82256 Fürstenfeldbruck
Germany
AD Education Germany Holdings GmbH provides central systems, defines group-wide standards, and coordinates shared data protection processes. SAE Alumni GmbH processes the data within day-to-day operations and remains the primary point of contact for individuals communicating with it.
The essential content of the joint controllership agreement is that AD Education Germany Holdings GmbH coordinates central systems, standards, and data protection processes, while the respective operating company is responsible for specific communication, contract execution, and support for the data subjects.
You may assert your data protection rights against any of the joint controllers. For simplicity, you can contact the following central contact point at any time:
AD Education Germany Holdings GmbH
Data Protection
Zielstattstraße 30
81379 Munich
Germany
Email: datenschutz@sae.edu
4. What Data We Process
Depending on the occasion, we process in particular the following data:
Master data, e.g., first and last name, company name if applicable
Contact data, e.g., email address, phone number, address
Order and subscription data, e.g., booked workshops, events, masterclasses, or memberships
Payment data, e.g., payment status, method of payment; complete card or account details are processed exclusively by the payment service provider
Communication data, e.g., emails, messages, event registrations
Usage data of our website, provided you have consented to this
As a rule, we receive this data directly from you.
5. Purposes and Legal Bases
We process personal data for the following purposes:
Purpose | Legal Basis |
Processing inquiries and establishing contact | Art. 6 para. 1 lit. b or lit. f GDPR |
Processing orders in the online shop, including providing access data to booked formats | Art. 6 para. 1 lit. b GDPR |
Administration of subscriptions in the Alumni Program | Art. 6 para. 1 lit. b GDPR |
Payment processing | Art. 6 para. 1 lit. b GDPR |
Accounting and statutory retention | Art. 6 para. 1 lit. c GDPR |
Receivables management for overdue claims | Art. 6 para. 1 lit. f GDPR |
Alumni communication, organization of events, and non-promotional information regarding the Alumni Program | Art. 6 para. 1 lit. f GDPR |
Newsletters, promotional targeting, and marketing communication | Art. 6 para. 1 lit. a GDPR |
Non-essential cookies, web analysis, tracking, or marketing technologies | Art. 6 para. 1 lit. a GDPR; additionally Sec. 25 para. 1 TDDDG for device access |
Internal organization, IT security, and corporate governance | Art. 6 para. 1 lit. f GDPR |
Our legitimate interest lies in particular in a secure, efficient, and group-wide uniform organization of our alumni, event, communication, and IT processes, as well as in maintaining contact with our alumni. Promotional communication will only take place if separate consent has been granted or if the legal requirements for this are met.
6. Obligation to Provide Data
Insofar as data is required for an order, a subscription, a statutory obligation, or the execution of an event, this data must be provided. Without this data, we cannot provide the respective service.
Voluntary information and consents can be refused or later revoked without any disadvantages.
7. Recipients of Personal Data
Personal data is only disclosed to entities that require it for the respective purposes. These include in particular:
internal specialist departments
companies of the AD Education Group, as far as necessary
Hosting service providers: Hetzner Online GmbH (server and database hosting in Germany)
Payment service providers: Stripe Payments Europe, Ltd. (Ireland)
Providers of our consent management, web analysis, and tracking tools, provided you have consented
Accounting and tax consulting
Authorities, courts, or debt collection agencies, as far as necessary
Where required, service providers are contractually bound as processors.
8. Transfer to Third Countries
We process data within the EU or EEA wherever possible. For individual service providers – particularly in the areas of payment processing, web analysis, and marketing – processing may take place in the USA.
In these cases, we ensure that the statutory requirements for third-country transfers are complied with, in particular through adequacy decisions (e.g., EU-US Data Privacy Framework), EU Standard Contractual Clauses, or other appropriate safeguards. You can obtain a copy of these safeguards upon request at datenschutz@sae.edu.
9. Retention Period
We store personal data only as long as necessary for the respective purpose or as required by statutory retention periods:
Order, invoice, and payment data: in accordance with commercial and tax law retention obligations (8 or 10 years pursuant to Sec. 147 AO, Sec. 257 HGB).
Subscription data: for the duration of the subscription and subsequently within the scope of statutory retention obligations.
Inquiry and communication data without reference to an order: up to 24 months after the last contact, unless a retention obligation applies.
Data from consents (newsletter, tracking): until withdrawal.
10. Online Shop and Payment Processing
Through our online shop (saestore.com/alumni), you can purchase workshops, events, masterclasses, and potentially other products. Ordering is possible as a guest; account registration is currently not required.
If a customer account is automatically created during the ordering process, this serves the purpose of order processing, accessing purchased content, and managing your order.
When placing an order, we process your first and last name, email address, country, postal code, city, state, and – if provided – company and phone number. Access details for booked online formats (e.g., Zoom) will be sent to you via email.
The shop is hosted on servers and databases of Hetzner Online GmbH in Germany.
Payments and subscriptions are processed through Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Various payment methods are available depending on your selection (e.g., credit card, Google Pay, Klarna). For subscriptions, Stripe provides a customer portal where you can manage the term, renewal, and cancellation. In connection with payments and subscriptions, transaction-related emails, e.g., regarding payments, renewals, or subscription management, may be sent via Stripe.
We do not receive or store full card or account details ourselves. A transfer to third countries (especially the USA) cannot be ruled out; the protection mechanisms specified under Section 8 apply. Further information can be found at: https://stripe.com/privacy.
11. Cookies, Web Analysis, and Consent Banner
Our website and our online shop use technically necessary cookies and comparable technologies to ensure the functionality of the site and the ordering process.
Furthermore, provided you have given your consent, we use the following non-essential technologies:
Matomo for web analysis.
Google Analytics for web analysis (Provider: Google Ireland Limited; data transfer to the USA is possible).
You can manage your consent via our consent management tool (Borlabs Cookie). You can revoke or change your consent there at any time with effect for the future.
12. No Automated Decision-Making
We do not engage in solely automated decision-making within the meaning of Art. 22 GDPR.
13. Your Rights
In accordance with legal requirements, you have the following rights:
Access to your personal data
Rectification of incorrect data
Erasure of personal data
Restriction of processing
Data portability
Objection to processing based on legitimate interests
Withdrawal of granted consents with effect for the future
Lodging a complaint with a data protection supervisory authority
To exercise your rights, you can contact: datenschutz@sae.edu
You may also assert your rights against any of the joint controllers.
The competent supervisory authority for SAE Alumni GmbH is in particular:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
14. Changes to this Privacy Policy
We may adapt this Privacy Policy if legal, technical, or organizational changes arise. The currently valid version will always be provided on our website.