Data Protection Declaration

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the Controller” in this Privacy Policy.

How do we collect your data?

Some of your data is collected when you provide it to us. This may, for example, be data that you enter into a contact form.

Other data is collected automatically or after you have given your consent when you visit the website by our IT systems. This primarily includes technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time with effect for the future. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any other questions relating to data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behaviour is statistically analysed using the Umami analytics program, which we operate on our own server in Germany, without cookies and without transferring data to third parties.

Only if you consent in the consent window do we additionally use Google Tag Manager. Details can be found in the section “Analytics Tools and Advertising”.

2. Hosting

The contents of this website and our customer platform are hosted on a server operated for us by our service provider. The server provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

The server is located in a data centre in Germany. Personal data collected on this website is stored on this server. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contractual data, contact details, names, website access data and other data generated via a website.

External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly and efficiently through a professional provider (Art. 6(1)(f) GDPR).

Our service provider and the hosting provider process your data only to the extent necessary to fulfil their service obligations and follow our instructions with regard to this data.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Controller

The controller responsible for data processing on this website is:

intellcert GmbH Heilmannring 57 13627 Berlin Telephone: +49 30 86329721 E-mail: info@intellcert.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, e-mail addresses or similar data).

Storage Period

Unless a more specific storage period has been specified in this Privacy Policy, your personal data will remain with us until the purpose for the data processing no longer applies.

If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data pursuant to Art. 9(1) GDPR are processed.

In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR.

If you have consented to the storage of cookies or to access to information on your terminal device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of Section 25(1) TDDDG. Consent may be withdrawn at any time.

If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR.

Furthermore, we process your data on the basis of Art. 6(1)(c) GDPR if this is necessary for compliance with a legal obligation.

Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Information regarding the legal bases applicable in each individual case is provided in the following sections of this Privacy Policy.

Information on Data Transfers to Third Countries

With your consent, we use Google Tag Manager on this website. In this context, personal data may be transferred to Google LLC in the USA.

Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision pursuant to Art. 45 GDPR.

Details can be found in the section “Google Tag Manager”.

Apart from this, we do not use any services that transfer personal data to the USA or other third countries.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may withdraw consent that you have already given at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right at any time, on grounds arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions.

The respective legal basis on which processing is based can be found in this Privacy Policy.

If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right at any time to object to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement.

The supervisory authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59–61 10555 Berlin Germany

The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format.

If you request the direct transfer of the data to another controller, this will only be carried out to the extent technically feasible.

Access, Deletion and Rectification

Within the framework of the applicable statutory provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to have this data rectified or deleted.

You may contact us at any time regarding this or any other questions relating to personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose.

The right to restriction of processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally require time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.

If we no longer require your personal data, but you require it for the exercise, defence or establishment of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may – apart from its storage – only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption.

You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Objection to Advertising E-mails

The use of contact details published as part of the legal notice obligation for the purpose of sending unsolicited advertising and information materials is hereby objected to.

The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example through spam e-mails.

4. Data Collection on This Website

Cookies and Local Storage

This website uses cookies for analytics and advertising purposes only if you consent in the consent window; details can be found in the section “Google Tag Manager”. Your browser stores your selection in its local storage so that the window does not appear again each time you visit the website; no data is transmitted to us in this process. You can change or withdraw your selection at any time via “Cookie Settings” in the footer.

When you log in to your customer account (My intellcert), our customer platform sets a technically necessary session cookie that recognises you during your session and is deleted when you log out or when the session expires. The legal basis is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(b) GDPR, as the cookie is strictly necessary for the service you have requested; consent is therefore not required.

You can configure your browser so that you are informed when cookies are set, allow cookies only in individual cases, or generally exclude them. If cookies are disabled, logging in to the customer account is not possible; all other functions of this website remain available.

Server Log Files

The server on which this website is operated automatically collects and stores information in so-called server log files, which your browser transmits: browser type and browser version, operating system used, referrer URL, time of the server request and IP address.

This data is not combined with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free presentation, security and optimisation of our website.

The log files are deleted after no more than 14 days.

Contact, Quotation and Other Forms

If you submit enquiries to us via one of our forms (contact, request for quotation, callback request, course pre-registration, waiting list, last-minute offer or service request questionnaire), the information you provide in the enquiry form, including the contact details you enter there, will be stored by us for the purpose of processing your enquiry and in the event of follow-up questions.

We do not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary in order to take steps prior to entering into a contract.

In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if such consent has been requested; consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.

You can complete the service request questionnaire over several sessions. As long as you do not submit it, your browser stores the intermediate status exclusively in its local storage on your device; no data is transmitted to us in this process.

By selecting “Start Again”, you delete the intermediate status; after submission, it is deleted automatically. If you wish, you can additionally save it as a file on your device.

The legal basis for local storage is Section 25(2) No. 2 TDDDG; it serves solely to enable you to temporarily save the questionnaire.

After submission, we store the questionnaire together with its attachments and a PDF version in our customer platform and retain it as a record for our accreditation procedure; you will receive the PDF version by e-mail.

Enquiries by E-mail, Telephone or Fax

If you contact us by e-mail, telephone or fax, your enquiry, including all personal data resulting from it (name, enquiry), will be stored and processed by us for the purpose of handling your request.

We do not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary in order to take steps prior to entering into a contract.

In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if such consent has been requested; consent may be withdrawn at any time.

The data you send to us as part of contact enquiries will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed).

Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Applications

If you apply for a position or as a trainer via our application form, we process the data you provide (name, contact details, information about your qualifications) and the uploaded documents (for example, CV, certificates, competence assessment form) for the purpose of carrying out the application procedure.

The legal basis is Art. 6(1)(b) GDPR and, where an employment relationship is being considered, Section 26 BDSG.

The documents are stored in our customer platform and are accessible only to persons involved in the procedure.

If no cooperation is established, we delete your application documents no later than six months after completion of the procedure, unless you have expressly consented to a longer retention period for future procedures.

If cooperation is established, we transfer the data to the contractual documentation.

Public Certificate Register and Certificate Verification

As a certification body, we are required under DIN EN ISO/IEC 17021-1 and DIN EN ISO/IEC 17024 to be able to demonstrate the validity of the certificates we issue upon request.

For this purpose, we operate a certificate verification service on this website.

For certificates issued to organisations, the certificate number, name of the organisation, location, standard, scope, validity period and status can be retrieved.

For certificates and training records issued to individuals, the holder’s name, certificate number, designation, validity and status are displayed only if a search is made using the certificate number or name; a list of all personnel certificates is not published.

At the request of the certificate holder, we additionally provide a view-only copy of the certificate that cannot be downloaded as a file.

The legal basis is Art. 6(1)(b) GDPR (certification contract) in conjunction with Art. 6(1)(f) GDPR; our legitimate interest and the interest of the public lie in enabling the validity of a certificate to be reliably verified.

The entries remain accessible for the validity period of the certificate and beyond that for as long as evidence of its status (for example, expired, withdrawn or replaced) is required.

Certificate holders may object to the display of their name on grounds arising from their particular situation; in this case, we will verify the information only upon individual request.

Comment Function on This Website

For the comment function relating to posts on this website, in addition to your comment, the time it was created, the name you provide and, if you provide it, your e-mail address are stored.

Your e-mail address is not published; it is used only for follow-up questions and to prevent misuse.

Comments are reviewed by us before publication (moderation) and are displayed on the website only after approval.

We reserve the right not to publish comments or to remove them.

Comments and the associated data are stored and remain on this website until the commented content is deleted, you request deletion, or the comments must be deleted for legal reasons.

The storage is based on your consent (Art. 6(1)(a) GDPR).

You may withdraw consent that you have given at any time; an informal notification by e-mail to us is sufficient.

The lawfulness of the data processing carried out prior to withdrawal remains unaffected by the withdrawal.

Customer Account (“My Account”, My intellcert)

You can create a customer account on this website.

In doing so, we process the data you provide during registration (title, first and last name, e-mail address and, optionally, company and telephone number), as well as data relating to your account: your login credentials in encrypted form, the time of your logins, and the contact details and billing address maintained by you in your account.

In the customer account, we provide you with your bookings, invoices and certificates.

We send your login credentials to the e-mail address provided; when you log in for the first time, you set your own password.

Processing is carried out in order to take steps prior to entering into a contract and to perform the contract relating to the use of the customer account (Art. 6(1)(b) GDPR).

You can delete your customer account yourself at any time; we will then block access and remove your login credentials.

We retain data relating to bookings and invoices insofar as we are legally obliged to do so (in particular commercial and tax-law retention periods, Art. 6(1)(c) GDPR), and delete it once these periods have expired.

Processing in Our Customer Platform and by Service Providers

Information from contact forms, enquiries, pre-registrations, applications, comments and customer accounts is stored in a customer platform used by us, which is operated on servers in Germany.

The technical operator of the platform is our service provider HomePageHeroes (Peyman Rezvani), Berlin, which develops and operates the systems on our behalf and with which we have concluded a data processing agreement pursuant to Art. 28 GDPR.

The service provider acts on our behalf pursuant to Art. 28 GDPR and is bound by our instructions.

For sending e-mails from the website (for example, confirmations of receipt or login credentials), we use an e-mail service provider with servers located in the European Union.

5. Analytics Tools and Advertising

Umami (Self-Hosted Web Analytics)

This website uses the open-source web analytics solution Umami, which is operated on our own server in Germany.

No data is transmitted to third parties.

Umami does not use cookies and does not store full IP addresses; it records the page accessed, the referral source, browser and device type, screen size, language and country, in each case in a form that does not allow individual persons to be recognised beyond the respective day.

No user profile is created.

The use of Umami is based on Art. 6(1)(f) GDPR.

We have a legitimate interest in statistically analysing the use of our website in order to improve it.

Since no cookies are set and no information is stored on or accessed from your terminal device, consent pursuant to Section 25 TDDDG is not required.

Google Tag Manager

Only if you consent in the consent window do we use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on this website.

Before consent is given, the website does not load anything from Google.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

You can withdraw or change your consent at any time with effect for the future via “Cookie Settings” in the footer.

Google Tag Manager: We use Tag Manager to integrate services for advertising purposes.

It loads scripts from Google servers and is therefore loaded only after you have given your consent to the “Marketing” category.

In this context, data may also be transferred to Google LLC in the USA; it is certified under the EU-US Data Privacy Framework (see “Information on Data Transfers to Third Countries”).

The length of time for which cookies and data are stored depends on Google’s specifications and the settings in our Google account.

Further information on how Google handles user data can be found in Google’s Privacy Policy:

https://policies.google.com/privacy

6. Plugins and Tools

Fonts (Locally Hosted)

For the uniform display of fonts, this website uses web fonts that are stored locally on our server.

No connection to servers of Google or other providers is established when the fonts are loaded.

Protection of Forms Against Misuse

Our forms (contact, quotation, last-minute offer, callback, waiting list, application, comments, registration) are protected against automated submissions by technical measures on our own server (including a verification field invisible to humans and a limitation on the number of requests per connection).

No third-party services such as Google reCAPTCHA are integrated for this purpose; the IP address briefly processed for this purpose is not permanently stored.

The legal basis is our legitimate interest in protecting our systems against misuse (Art. 6(1)(f) GDPR).

7. Social Media

Links to Social Networks

On this website you will find references (links) to our profiles on LinkedIn, Instagram, Facebook and X.

These are simple links, not embedded plugins or social media elements.

Therefore, when you visit this website, no data is transmitted to the operators of these networks.

Only when you follow a link do you leave our website; from that point onwards, the privacy policies of the respective network apply (LinkedIn Ireland Unlimited Company, Meta Platforms Ireland Limited, X Corp.).

Version: INS_111130, Revision 01.00 of 23.09.2026