Privacy Policy

Data Protection Regulation according to the DSGVO

1. Name, address of the person responsible

Responsible in the sense of the basic data protection regulation as well as other national data protection laws of the member states and other data protection regulations is the

Connected Business a brand of

Paradigm Pioneers Limited

Ground Floor, 71 Lower Baggot Street

Dublin 2, Co. Dublin, D02 P593, Ireland

Website: www.connected-b.com

Represented by:

Mounira Latrache & Angel Hernandez

General information about data processing

Extent of processing of personal data

In principle, we process personal data of our users only to the extent necessary to provide a functional website and our content and services, or to optimize the technical functionality of our website. The processing of personal data of our users takes place regularly only after the consent of the user. An exception applies in cases where prior consent is not possible for reasons of fact and the processing of the data is permitted by law.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, the legal basis is Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR). Art. 6 para. 1 lit. b DSGVO serves as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party. This also applies to processing operations required to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfill a legal obligation to which Paradigm Pioneers Limited is subject, the legal basis is Art. 6 para. 1 lit. c DSGVO. Art. 6 para. 1 lit. d DSGVO is the legal basis for the case where vital interests of data subjects or another natural person require the processing of personal data. If the processing is necessary to safeguard the legitimate interests of our company or a third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former interest, then Art. 6 para. 1 lit. f DSGVO as legal basis for processing.

Deletion of data and storage duration

The deletion or blocking of personal data of the data subject takes place as soon as the purpose of the storage is omitted. In addition, it may be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. A deletion or blocking of data takes place even if a prescribed by the standards just mentioned storage period expires, unless there is a need for further storage of the data for a contract or a contract.

Website provisioning and creation of log files

Description and scope of data processing

Every time our website is accessed, our system automatically records data and information from the computer system WordPress of the calling computer. The following data is collected here:

1. Information about the used version of the browser type and the browser type

2. Information about the user’s operating system

3. Information about the Internet service provider of the user

4. The IP address of the user

5. The date and time of access

6. Information about websites from which the user’s system accesses the Connected Business website

7. Information about websites accessed by the user’s system through our website

This data is also stored in the log files of our system. This does not affect the IP addresses of the user or other data that allow the data to be assigned to a user. A storage of this data together with other personal data of the user does not take place.

Legal basis for data processing

For the temporary storage of data, Art. 6 para. 1 lit. f DSGVO the legal basis.

Purpose of data processing

In order to enable delivery of the website to the user’s computer, temporary storage of the IP address by the system is necessary. To do this, the IP address of the user must be saved for the duration of the session. According to Art. 6 para. 1 lit. f DSGVO lies in these purposes also our legitimate interest in data processing.

Duration of storage

1. Controller and Contact

The controller responsible for the processing of personal data on this Website and in connection with our services is:

Paradigm Pioneers Limited

acting under the brand Connected Business

Ground Floor, 71 Lower Baggot Street, Dublin 2, Co. Dublin, D02 P593, Ireland

Website: www.connected-b.com

If you have any questions about this Privacy Policy or data protection, you can contact us using the details provided in our Imprint or via the contact options on the Website.

2. General Information on Data Processing

2.1 We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.

2.2 We only process personal data where this is necessary to:

- provide and optimise our Website and online platforms,

- perform contracts and pre-contractual measures,

- comply with legal obligations, or

- pursue our legitimate interests, provided your interests or fundamental rights do not override these.

2.3 We delete or anonymise personal data once the purpose of processing no longer applies and no statutory retention obligations require further storage.

3. Categories of Data and Purposes

We process the following categories of personal data, depending on how you interact with us:

3.1 Website visit and server logs

- Data: IP address, date and time of request, URL of accessed page, referrer URL, browser type and version, operating system, device information.

- Purpose: technical provision of the Website, IT security, prevention of misuse.

- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation of the Website).

3.2 Cookies and similar technologies

We use cookies and similar technologies to:

- technically provide our Website (e.g. session cookies, consent cookies),

- analyse usage and reach (e.g. analytics tools),

- display or measure advertising, where applicable.

Details on the types of cookies and tools used, their purposes, storage periods and options to withdraw consent are provided in our cookie banner and, where applicable, in an additional cookie notice.

- Legal basis:

- Art. 6(1)(f) GDPR for technically necessary cookies (legitimate interest),

- Art. 6(1)(a) GDPR for cookies requiring consent (e.g. analytics/marketing).

3.3 Contact via form or email

- Data: name, email address, company, message content, and any other information you voluntarily provide.

- Purpose: processing your enquiry, preparing offers, customer communication.

- Legal basis:

- Art. 6(1)(b) GDPR (performance of contract or pre-contractual measures), and/or

- Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

3.4 Registration and purchase of online courses / digital products

- Data: name, email address, company, position, billing address, payment details (processed via external payment providers), login data.

- Purpose: setting up user accounts, provision of digital content, billing, customer support, documentation for tax and commercial law.

- Legal basis: Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligations), Art. 6(1)(f) GDPR (legitimate interest in providing and securing our services).

3.5 Corporate trainings and B2B services

- Data: contact details of contact persons (name, email, phone, role), organisation details, project-related information.

- Purpose: planning, delivering and evaluating trainings and consulting services, customer relationship management.

- Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

3.6 Newsletter, free webinars and free resources

(a) Newsletter subscription

If you subscribe to our newsletter via form or checkbox:

- Data: email address, name (optional), consent documentation.

- Purpose: sending regular information about Connected Business, our programmes, events, content and offers.

- Legal basis: Art. 6(1)(a) GDPR (consent).

We use the so-called double opt-in procedure, where required by law: you receive an email asking you to confirm your subscription.

You can withdraw your consent at any time with effect for the future by clicking the unsubscribe link in any newsletter or by contacting us.

(b) Automatic newsletter subscription when purchasing or registering for free resources

When you:

- purchase an online course or digital product, or

- register for a free webinar, download or similar free resource,

we may also use your email address to send you emails about similar products and services and relevant content.

We will clearly inform you at the point of purchase or registration that:

- you will be added to our email list, and

- you can unsubscribe from these emails at any time.

- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in direct marketing to existing customers and interested parties) and, where required, Art. 6(1)(a) GDPR (consent).

You can object to this use of your email address at any time (see Section 8).

4. Analytics, Plug-ins and Third-Party Tools

Depending on your consent settings and our current technical implementation, we may use third-party services such as:

- Web analytics tools (e.g. Google Analytics or similar)

Purpose: analyse usage of our Website, improve content and marketing.

Legal basis: Art. 6(1)(a) GDPR (consent) where required.

IP addresses are generally shortened/anonymised where possible.

- Social media plug-ins or embedded content

(e.g. LinkedIn, Facebook, Instagram, YouTube or similar)

When you click such buttons or view embedded content, your browser may connect directly to the servers of these providers and transmit usage data. The respective providers are responsible for this processing under their own privacy policies.

- Email marketing and CRM tools

Purpose: send newsletters, manage mailing lists, track basic performance metrics (e.g. open rates, link clicks) to optimise communication.

Legal basis: Art. 6(1)(a) GDPR (consent) and/or Art. 6(1)(f) GDPR (legitimate interest in effective marketing and communication).

The concrete service providers, where required by law, will be listed in an up-to-date manner in this Privacy Policy or in our cookie banner / cookie notice.

5. Recipients and Data Transfers

5.1 We only share personal data with third parties where this is necessary for the purposes described above, permitted by law or agreed by you. Typical recipients include:

- IT service providers and hosting providers,

- payment service providers,

- email and newsletter service providers,

- analytics and marketing service providers,

- cooperation partners and subcontractors in the context of our trainings and projects,

- tax advisors, auditors and legal counsel where necessary.

5.2 Some recipients may be located outside the EU/EEA. In such cases, we ensure an adequate level of data protection, for example through:

- adequacy decisions by the European Commission, or

- standard contractual clauses approved by the European Commission.

6. Storage Period

We store personal data only as long as necessary for the purposes described or as long as we are legally obliged to do so (e.g. tax and commercial retention periods).

- Contract and billing data: usually up to 10 years after the end of the contractual relationship (depending on applicable law).

- Newsletter data: until you withdraw your consent or object to receiving marketing emails.

- Server logs: usually for a short period (e.g. a few weeks) unless longer storage is required for security or legal reasons.

- Contact requests: as long as necessary to process your request and any follow-up questions.

7. Your Rights under GDPR

You have the following rights regarding your personal data:

- Right of access (Art. 15 GDPR): to obtain information about the data we process about you.

- Right to rectification (Art. 16 GDPR): to have inaccurate data corrected and incomplete data completed.

- Right to erasure (Art. 17 GDPR): to have your data deleted where certain conditions apply.

- Right to restriction of processing (Art. 18 GDPR).

- Right to data portability (Art. 20 GDPR): to receive data you have provided in a structured, commonly used and machine-readable format or to transmit it to another controller.

- Right to object (Art. 21 GDPR):

- you can object at any time to the processing of your data based on Art. 6(1)(f) GDPR (legitimate interest), especially for direct marketing;

- if you object to processing for direct marketing, we will no longer use your data for such purposes.

- Right to withdraw consent (Art. 7(3) GDPR): you can withdraw any consent given at any time with effect for the future.

- Right to lodge a complaint (Art. 77 GDPR): you can lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In Ireland, the competent authority is the Data Protection Commission (DPC).

To exercise your rights, please contact us using the contact details provided in Section 1.

8. Objection to Direct Marketing

You can object at any time to the processing of your personal data for the purpose of direct marketing (including newsletter and marketing emails) with effect for the future, without giving reasons.

The easiest way is to click the unsubscribe link included in our emails. You can also contact us directly.

9. Data Security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

This includes, for example, the use of SSL/TLS encryption on our Website for secure data transmission.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in legal requirements or in our processing activities.

The current version is always available on our Website. We recommend reviewing this Privacy Policy regularly.