Last Modified : 22 September 2025
1) Preamble
In the following text, we inform you about the collection of personal data when you visit our website. Personal data are all data that can refer to you personally, e.g., name, address, e-mail address, and user behaviour.
2) Controller / Data Protection Officer (DPO)
| Controller
for data processing |
Data Protection Officer (DPO)
of the Controller |
| Frankfurt School of Finance & Management gGmbH
Adickesallee 32-34 60322 Frankfurt am Main Germany Telephone: +49 (0)69 154008-0 Represented by: |
Data Protection
intersoft consulting services AG Beim Strohhause 17 20097 Hamburg Germany |
The hosting of the website is handled by root360 GmbH.
The maintenance of the website is handled by Frankfurt School of Finance & Management gGmbH
3) Which data is processed
- a) General data acquisition with a visit to our website
In case of use of the website for purely informative reasons, thus when you do not register, request brochures, register for seminars or webinars or send us information in any other way, we only record the personal data that your browser sends to our server. If you wish to browse our website, we record the following data, which is technically necessary for us in order to present our website to you and to guarantee stability and security (the legal basis is the entitled interest in accordance with Article 6 (1) 1 (f) GDPR, insofar as access to information stored in the user’s terminal device is mandatory, also Section 25 para. 2 no. 2 TDDDG.
| Purpose of the processing | Storage duration | |
| Operating system used | Assessment according to devices to ensure optimised representation of the website | The data is deleted when the respective session is ended. |
| Information about the browser type and the version used | Assessment of the browser used to optimise our websites | |
| Internet service provider of the user | Assessment of the Internet service provider | |
| IP address | Presentation of the website on the respective device | |
| Date and time of the website visit | Ensuring the proper operation of the website | |
| If applicable, manufacturer and type designation of the smartphone, tablet or other terminal unit | Assessment of the device manufacturer and types of mobile devices for statistical objectives | |
| Logfiles | Ensuring the proper operation of the website |
It is imperative for the website operation to capture data and record it in logfiles. There is, therefore, no opportunity to raise objection.
- b) Data acquisition on external platforms
If you register for webinars, subscribe to our newsletter, or contact us via online forms, your personal data is processed through Fullfabric Ltd., 2 Stephen Street, London W1T 1AN, United Kingdom. Fullfabric enables us to manage registrations, send you the necessary information and access data, track participation status, and respond to your inquiries.
In these cases, personal data is processed via the following websites:
| Function | Purpose of data processing | Privacy policy of the provider |
| Subscription to newsletters | Sending of information on the respective services and products of the selected newsletters | [Link to the privacy policy of the newsletter provider] |
| Registration for webinars | Sending of information on the webinar, sending of the access data for participation in the webinar, transfer of the log-in status and the review report, sending of information about similar webinars | [Link to the privacy policy of the webinar provider] |
| Contact form | Answer to your inquiry | [Link to the privacy policy of the CRM or contact form provider] |
Please refer to the respective privacy policies for information on the processing of your personal data.
If you have any other questions about the processing of your data, you can contact us at cfcb@fs.de.
4) Inquiries related to general contact addresses or the contact form
You have the possibility to contact us via our general e-mail addresses or the contact form. Provided that you contact us via such an address, the personal data sent in this manner is solely processed for the intended purpose.
5) Cookies
- a) General information
Our website uses cookies. Cookies are text files that are stored in the Internet browser on the user’s computer system. If a user visits a website, a cookie can be stored on the user’s operating system. This cookie includes a characteristic character string which enables an unambiguous identification of the browser when visiting the website again.
- b) Types of cookies
Technically necessary cookies
Technically necessary cookies are not mandatory to display the website. However, some functions of the website, such as the online Campus and registration for seminars, cannot be used properly without these cookies. Consequently, there is no option for the user to object, although a deactivation of these cookies can be carried out by settings on the respective browser.
Cookies for range measurement
Cookies for range measurement collect information about the manner of use of our website, e.g. website visits or error messages. These cookies store no information that would allow the user to be identified. The collected information is exclusively aggregated and thus evaluated anonymously.
Cookies for marketing purposes
We use cookies for marketing purposes in order to target our users with advertising oriented to their interests. In addition, we use cookies in order to limit the probability of the playout of an advertisement and to measure the effectiveness of our advertising activities. This information can also be communicated to third parties, such as advertising networks.
| Name of the cookie | Purpose of the processing | Legal basis for the processing | Storage duration |
| Google Analytics | Generation and change of the cookie information; Optimisation of the representation of the website and adaptation of the contents | Consent | 38 months |
| Google GA Audiences | Generation and change of the cookie information; Optimisation of the representation of the website and adaptation of the contents | Consent | 38 months |
Technically necessary cookies
| Name of the cookie | Cookie ID | Purpose of the processing | Legal basis for the processing | Storage duration |
| Adobe Analytics | X-AB | Used to test and roll out website content variations, ensuring users receive the most relevant version of the site. | Consent | 1 day |
| Cookie Script | CookieScriptConsent | Used by Cookie-Script.com to remember visitor cookie consent preferences and ensure the proper functioning of the cookie banner. | Consent | 1 month |
| VISITOR_PRIVACY_METADATA | Stores the user’s privacy and consent choices to ensure their preferences are respected in future interactions with the site. | Consent | 6 months | |
| Cloudflare | __cf_bm | Used to distinguish between humans and bots, helping the website generate accurate usage reports. | Consent | 30 minutes |
| li_gc | Stores the guest’s consent for the use of cookies for non-essential purposes. | Consent | 6 months |
Cookies for range measurement
| Name of the cookie | Cookie ID | Purpose of the processing | Legal basis for the processing | Storage duration |
| Google Analytics | _ga_M87195QFV6 | Consent | 1 year 1 month | |
| Google Analytics | _ga | Consent | 1 year 1 month | |
| Spotify | __spdt | Used by Spotify to analyse user interactions on a website, with a focus on actions taken by listeners’ | Consent |
Cookies for marketing purposes
| Name of the cookie | Cookie ID | Purpose of the processing | Legal basis for the processing | Storage duration |
| Snapchat | _scid_r | Used for tracking unique visitors across sessions and monitoring their interactions and engagement on the website. | Consent | 13 months |
| Google AdSense | _gcl_au | Used by Google AdSense to experiment with advertisement efficiency across websites using their services. | Consent | 3 months |
| personalization_id | Collects information about how the user interacts with the website and any ads they may have seen prior to visiting the site. | Consent | 13 months | |
| muc_ads | Used for targeting and advertising purposes, tracking user interactions and personalizing ad content to improve the user experience. | Consent | 13 months | |
| bcookie | A Microsoft MSN 1st party cookie used for sharing website content on social media. | Consent | 12 months | |
| Snapchat | sc_at | Used to identify a visitor across multiple domains. | Consent | 12 months |
| guest_id_ads | Associated with Twitter’s advertising services, used to identify and track website visitors in order to display personalised ads based on their preferences and interactions. | Consent | 13 months | |
| Snapchat | _scid | Used to help identify a visitor. | Consent | 13 months |
| _fbp | Used by Meta to deliver a series of advertisement products, such as real-time bidding from third-party advertisers. | Consent | 3 months | |
| YouTube | YSC | Set by YouTube to track views of embedded videos. | Consent | Session |
| YouTube | VISITOR_INFO1_LIVE | Set by YouTube to track user preferences for embedded videos and determine whether the visitor is using the new or old version of the YouTube interface. | Consent | 6 months |
| guest_id_marketing | Used to identify a visitor across visits and devices, allowing the website to present relevant advertisements based on the visitor’s preferences. | Consent | 13 months | |
| guest_id | Twitter sets this cookie to identify and track the website visitor. It registers if a user is signed in to the Twitter platform and collects information about ad preferences. | Consent | 13 months | |
| lidc | A Microsoft MSN 1st party cookie that ensures the proper functioning of the website. | Consent | 1 day | |
| Cloudflare | _cfuvid | Used for tracking users across sessions to optimise user experience by maintaining session consistency and providing personalised services. | Consent | Session |
| Panopto | UserSettings | Used to store user preferences and settings for video content provided by Panopto, ensuring that preferences such as volume, resolution, and playback speed are remembered on subsequent visits. | Consent | 13 months |
| YouTube | __Secure-ROLLOUT_TOKEN | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Consent | 6 months |
| Snapchat | _ScCbts | This cookie is associated with Snapchat and is used for targeted advertising. | Consent | 7 days |
Storage of personal data collected via Fullfabric
| Name of the processing activity | Data categories | Purpose of the processing | Legal basis for processing | Storage duration |
| Newsletter subscription | First name, last name, e-mail address | Sending newsletters and information on services and products | Consent (Art. 6(1)(a) GDPR) | Until you unsubscribe; thereafter only as long as statutory retention or limitation periods apply (usually up to 3 years) |
| Webinar registration | First name, last name, e-mail address, access data | Providing webinar access, participation management, follow-up communication, sending information about similar events | Consent (Art. 6(1)(a) GDPR) | For the duration of the webinar and related follow-up + until the expiry of statutory limitation periods (usually up to 3 years) |
| Contact form inquiries | First name, last name, e-mail address, telephone number (if provided), message text | Answering your inquiry and subsequent communication | Legitimate interest (Art. 6(1)(f) GDPR) or Consent if required (Art. 6(1)(a) GDPR) | Until the inquiry is resolved + until the expiry of statutory limitation periods (usually up to 3 years) |
| Applications for study programmes | Application data, uploaded documents (e.g. CV, certificates), contact details | Managing applications, assessing suitability, administration of admission process | Contract initiation (Art. 6(1)(b) GDPR) | For the duration of the application process; if admitted, for the duration of the study relationship + statutory retention obligations (up to 10 years, e.g. under commercial or tax law) |
6) Integration of third-party services and content
In order to optimise our online offering and to make your stay on our website as pleasant as possible, we incorporate content and services from third-party providers. In order to be able to display this content to you, your IP address must be transmitted to this third-party provider. Under certain circumstances, further data may be collected from third-party providers or pixel tags and/or cookies may be used.
In the following, we would like to offer you further information.
Social-Plugins
This website uses social plugins of the following provider/s:
- Meta, formerly Facebook (operator: Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. The entity responsible for handling data subject rights within the EU/EEA is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland)
- X, formerly Twitter (operator: X Corp. 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The entity responsible for handling data subject rights within the EU/EEA is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland)
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
- Xing (Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany)
- LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
- Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
In general, these plugins collect data from you by default and transmit it to the provider’s servers. The legal basis for this is Article 6(1)(a) GDPR, Section 25 para. 2 no. 1 TDDDG and, if access to the information stored in the user’s terminal device is mandatory, Section 25 para. 2 no. 2 TDDDG.
Joint responsibility may exist in the context of the integration of social plugins.
The plugins also collect personal data, such as your IP address, and send it to the provider’s servers, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when you access the website. In this way, the providers can also create profiles about your usage behaviour. This happens even if you are not a member of the social network of the provider. If you are a member of the social network of the respective provider and you are logged into the social network during your visit to this website, your data and information may be linked to your profile in the social network. We have no influence on the exact scope of the data collected from you by the respective provider. For more detailed information about the scope, type, and purpose of data processing, as well as your rights and setting options for protecting your privacy, please refer to the data protection information of the respective social network provider. These are available at the following addresses:
Facebook (Meta): https://www.facebook.com/privacy/policy/
X (formerly Twitter): https://x.com/en/privacy
YouTube: https://policies.google.com/privacy
Xing: https://privacy.xing.com/en/privacy-policy
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Instagram: https://www.facebook.com/privacy/policy/
Insofar as data is processed outside the EU/EEA, the providers of:
- Facebook (Meta)
- X (X Corp.)
- YouTube (Google)
- LinkedIn (Microsoft)
- Instagram (Meta)
is certified under the Data Privacy Framework (DPF) programme and is listed in the Data Privacy Framework list of the International Trade Administration (ITA). This means that they have publicly committed to complying with the DPF obligations and that data transfer to the USA is unobjectionable due to the current adequacy decision of the European Commission of 10th July 2023.
A list of currently certified US companies can be found here: https://www.dataprivacyframework.gov/s/participant-search
Further information on the data protection framework programme can be found on the official website of the ITA: https://www.dataprivacyframework.gov/s/
YouTube Videos
We are interested in offering you a wide range of multimedia information. Therefore, we include videos from YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA). The legal basis for this is Article 6(1)(a) GDPR and Section 25 para. 2 no. 2 TDDDG.
YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
YouTube participates in the EU-U.S. Data Privacy Framework, which provides safeguards for transfers of personal data to the United States in line with European data protection law. Further information can be found here: https://www.dataprivacyframework.gov/s/
The following data is transferred to Google as the YouTube operator:
– the IP address,
– the specific address of the page accessed,
– the transmitted identifier of the browser
– system date and time of access,
– cookies that are already available and can be used to identify your browser uniquely.
Google, as the operator of YouTube, is solely responsible for this data processing. Further information can be found here.
We want to point out that Google may receive further data about cookies that are already stored on your computer. We have no influence on the extent to which these cookies are used by Google.
You can find YouTube’s privacy policy here.
7) LinkedIn
As part of our LinkedIn performance, we use various features of LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland) to promote our events or other services offered by us. We have the opportunity to advertise via LinkedIn to target groups we define through the LinkedIn Marketing Solutions offering.
LinkedIn will provide the personal data required for this purpose. We do not have access to personal information beyond that published in your profile. Depending on the settings of your LinkedIn account, the legal basis for the processing of the data by us is Article 6(1)(f) or Article 6(1)(a) GDPR. The advertising is sent by LinkedIn.
You can find more information on this here.
If you are interested in individual events or services, you have the opportunity to express your interest to us. In this case, your e-mail address and your first and last name will be transmitted to us. Your contact details will only be transmitted with your consent, on the basis of which we will then also process your data, Article 6(1)(a) GDPR.
Further information on data protection on LinkedIn can be found at the following link: https://www.linkedin.com/legal/privacy-policy.
8) Use of Google Tag Manager
For reasons of transparency, we would like to point out that we use the Google Tag Manager service of the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The provider of the service for users in the EU, the EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Google Tag Manager makes it easier for us to integrate, centrally manage and control the timing of our tags. Tags are script codes or sections of code that can trigger various functionalities, for example measuring the success of our adverts (Google Ads). The Google Tag Manager itself does not collect any personal data, but may transmit the IP address to Google.
The legal basis for this data processing is your consent in accordance with Section 25 (1) TDDDG.
If Google stores personal data, this data is stored on the Google servers. The storage period for the data processed by the individual tracking tools can be found in our individual data protection notices for the individual tools.
For more information on Google Tag Manager, see: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/.
Google Analytics web analysis service
This website uses Google Analytics. By order of the operator of this website, Google will analyse your use of the website in order to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
Since the Hamburg Commissioner for Data Protection and Freedom of Information reached an agreement with Google on the basis of the Düsseldorf Kreis resolution on the data protection-compliant design of analysis procedures for measuring the reach of Internet offers, the use of Google Analytics in compliance with data protection regulations and without complaints is possible under certain conditions. We respect these conditions, of course. In particular, we would like to point out that on this website, Google Analytics was extended by the code “gat._() in order to guarantee an anonymised recording of IP addresses (so-called IP-Masking). Your IP address is shortened by Google within member states of the European Union or in other treaty states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or https://policies.google.com/.
Google Analytics uses so-called “cookies”, text files which are stored on your computer. The information about your use of this website generated by the cookie is generally transferred to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this, you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on. If you click here, an opt-out cookie will be set to prevent the future collection of your data each time you visit this website: Deactivate Google Analytics.
In addition, we use Google Conversion Tracking in association with Google Analytics. This enables us to record the characteristics of our website visitors. For example, it is indicated to us how many PDFs on our website are downloaded or how often the contact form was filled out. Likewise, it is indicated to us how many clicks on advertisements from external sources (AdWords, LinkedIn, Xing, Bing) were made on our website.
The legal basis for the use is your consent in accordance with Article 6(1)(a) GDPR and Section 25 Para. 2 No. 2 TDDDG.
9) On which legal basis is the data processed
- a) Fulfilment of contractual and pre-contractual obligations
Using our website, there exists the possibility of acquiring products and/or services or to obtain other information and, if necessary, to receive a customised offer. In case of use of these functions, you are requested to specify further information. The legal basis for this data processing is the fulfilment of contractual or pre-contractual obligations in accordance with Article 6(1)(b) GDPR.
- b) Granting of consent
Various functions of this website are only usable if you have first given us your consent. Included in these functions are, for example, subscribing to our newsletter. You will be informed accordingly about data processing, the purposes of data processing and your rights, in particular, your right to withdraw your consent at any time. If consent is given, the legal basis for data processing is Article 6(1)(a) GDPR.
You can revoke your consent to the forwarding of your e-mail address and your first and last name at any time via the following link: Revoke
If you withdraw your consent, your data will be irretrievably deleted from all our systems.
- c) Legitimate interests
In addition, when using this website, we sometimes process personal data in our legitimate interest. Within the framework of the weighting of interests according to Article 6(1)(f), we have considered and weighed our interest in the provision and your interest in processing your personal data consistent with data protection. Since some of this data is technically necessary to enable the provision of our service and also to ensure stability and security, in particular protection against misuse, we came to a conclusion – in the case of data protection, a guarantee based on state of the art of the technology – that this data can be processed, whereby your interest in data protection-compliant processing has been taken into account to an appropriate extent.
10) Transfer of data
Forwarding of your personal data to third parties for any objectives other than those listed does not occur.
We pass on your personal data to third parties only if:
- you have given your explicit consent to this
- the transfer is required for the assertion, exercise or defence of legal claims, and no basis exists for the assumption that you have a majority interest worthy of being protected in the non-transfer of your data,
- for the case where a legal obligation exists for the forwarding, as well as
- where this is legally permissible and required for the handling of contractual relationships with you.
In the case of data communication outside of the European Union, the high European data protection level does not apply. With any transfer, it can be that there currently exists no adequacy decision of the EU Commission, as specified by Article 45 (1), (3) GDPR. This means that, to date, the EU Commission has not positively determined that the national level of data protection corresponds to the level of data protection in the European Union based on the GDPR.
Possible risks that cannot be completely ruled out in connection with the transfer of data are, in particular,
- your personal data could possibly be processed over and above the actual purpose;
- in addition, there exists the possibility that you cannot exercise and enforce your data protection rights, such as your right to information, correction, deletion or data portability, in the long term;
- there also possibly exists a high probability that incorrect data processing can result, and the protection of personal data does not fully meet the requirements of the GDPR in terms of quantity and quality;
For the continuous improvement of our website, for advertising purposes, and in order to enable certain functions of this website to be offered to you, we are instructed with the employment of processors. All processors are obliged to process the data only for the service provision defined by us. All processors were carefully selected by us, and sufficient technical and organisational measures were put in place in order to guarantee data protection.
11) Information about data subject rights
Every person affected has the right to access according to Article 15 GDPR, the right to rectification according to Article 16 GDPR, the right to erasure according to Article 17 GDPR, the right to restriction of processing according to Article 18 GDPR, the right to object from Article 21 GDPR, as well as the right to data portability from Article 20 GDPR. In the case of the right to access and the right to erasure, restrictions apply pursuant to Sections 34 and 35 BDSG.
Advice on the possibility to lodge a complaint
Furthermore, you have the right to complain to the responsible data protection supervisory authority about the processing of your personal data by us.
Advice on the withdrawal with consent
You can withdraw your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the General Data Protection Regulation came into force (before 25th May 2018). Please note that the revocation will only affect the future. Any processing implemented prior to the withdrawal will not be affected by this.
Right in the case of data processing for the purpose of direct advertising
In accordance with Article 21(2) GDPR, you have the right to object at any time to the processing of personal data concerning you. In case of your objection to processing for purposes of direct advertising, we will no longer process your personal data for these purposes. Please note that the objection will only take effect in the future. Any processing implemented prior to the objection will not be affected by this.
Note on the right to objection in case of weighting of interests
As far as we base the processing of your personal data on a weighting of interests, you can make an objection to the processing. In case of the exercise of such an objection, we request that you explain the reasons why we should not process your personal data as described. In case of your reasonable objection, we will examine the state of affairs and either discontinue or adapt the data processing or explain to you our compelling reasons worth being protected.
Links to other websites
Our websites can include links to the websites of other providers. We refer to the fact that this data protection declaration applies solely to the websites of www.frankfurt-school.de. We do not have any influence on this and do not check whether other providers comply with the applicable data protection regulations.
12) Changes to the data protection declaration
We reserve the right to change or amend this data protection declaration at any time in compliance with the applicable data protection regulations.