Privacy Policy
1. General Information and Mandatory Disclosures
The protection of your personal data is very important to us. Below, we provide information about the collection, processing, and use of personal data when you use our website.
Data controller as defined by the GDPR:
PDA Headquarter, Lausitzer Str.10, 68775 Ketsch Deutschland Vertreten durch Marc Baum E-Mail: elearning@pdaww.com
2. Data Collection When You Visit Our Website
When you visit our website, information is automatically transmitted from your device’s browser to our server and temporarily stored in what are known as server log files. This includes:
Page visited
Date and time of access
Amount of data sent
Source/link that brought you to this page
Browser and operating system used
IP address (anonymized if necessary)
The processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the technical stability and security of the website.
3. Use of Cookies
Our website uses cookies to improve the user experience and enable certain features. We use both session cookies and persistent cookies.
You can configure your browser to notify you when cookies are set and allow you to decide whether to accept them on a case-by-case basis. Disabling cookies may limit the functionality of the website.
For more information, please see our Cookie Policy
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) we use, as well as the related consents. For details on how “Real Cookie Banner” works, please visit https://devowl.io/de/rcb/datenverarbeitung/.
The legal basis for the processing of personal data in this context is Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR. Our legitimate interest is the management of the cookies and similar technologies used, as well as the related consents.
Providing personal data is neither required by contract nor necessary for entering into a contract. You are not required to provide personal data. If you do not provide personal data, we will not be able to manage your consents.
4. Getting in touch
If you contact us via the contact form or by email, your information will be stored for the purpose of processing your inquiry and for any follow-up questions. This processing is carried out in accordance with Article 6(1)(f) of the GDPR (legitimate interest) or Article 6(1)(b) of the GDPR (performance of a contract).
5. Newsletter
We use MailPoet to send newsletters. The following data is processed:
Email address
Name (optional)
IP address and timestamp
Data processing is based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time. MailPoet stores data on servers located within the EU.
6. Disclosure of Data
We will only share your data with third parties if it is permitted by law or if you have given your express consent.
7. Your Rights
You have the right to:
Information about your stored data (Art. 15 GDPR)
Correction of inaccurate data (Art. 16 GDPR)
Deletion of Your Data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
To exercise your rights, please contact: elearning@pdaww.com
Withdrawal of your consent
You may withdraw your consent at any time. This does not affect the lawfulness of the processing carried out prior to the withdrawal.
8. SSL encryption
Our website uses SSL or TLS encryption to ensure the secure transmission of confidential information.
9. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time with future effect, particularly to comply with legal requirements, technical developments, or changes to our services. We recommend that you review this Privacy Policy regularly to stay informed of any updates.
If any significant changes are made that affect your rights or require new consent, we will notify you separately, to the extent possible.
9. Payment processing with Klarna
We use the payment service provider Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden, to process payments. As part of the payment process, personal data is transmitted to Klarna and processed there. This is done solely for the purpose of fulfilling and processing your order.
Why Klarna collects personal data
Klarna requires certain personal data to facilitate payments, conduct credit checks, prevent fraud, and ensure secure and efficient payment processing.
What data does Klarna receive?
The following data may be transmitted to Klarna:
- First and last name
- Address
- Email address
- Phone number
- Payment information (e.g., bank account information, credit card details)
- Order details (e.g., item, price, shipping method)
The specific data transmitted depends on the selected payment method (e.g., purchase on account, instant bank transfer, installment plan).
Legal basis for data processing
Klarna processes your data on the basis of Article 6(1)(b) of the GDPR (performance of a contract) and, where applicable, Article 6(1)(f) of the GDPR (legitimate interest in secure and efficient payment processing). Klarna may also pursue its own interests pursuant to Art. 6(1)(f) GDPR, such as conducting credit checks.
Data Retention Period at Klarna
Klarna retains personal data only for as long as necessary to fulfill contractual and legal obligations. The specific retention period is determined by statutory retention periods and Klarna’s internal policies.
For more information about Klarna's data processing practices, please refer to Klarna's Privacy Policy.
10. Payment processing with Stripe (SEPA & credit card)
We use the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to process payments via SEPA direct debit and credit card.
Why Stripe collects personal data
Stripe processes personal data to process payments securely and reliably, detect and prevent fraud, and comply with legal requirements (e.g., for anti-money laundering purposes).
What data Stripe receives
The following data is transmitted as part of the payment processing via Stripe:
- First and last name
- Billing and shipping address
- Email address
- Payment information (e.g., IBAN for SEPA, credit card number, expiration date, CVC)
- IP address and technical device information
- Transaction data (e.g., amount, currency, date, order number)
Stripe may also use this data to verify the payment and enable security measures such as 3D Secure.
Legal basis for data processing
Data is processed in accordance with Article 6(1)(b) of the GDPR for the performance of a contract (payment processing) and in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in a secure and efficient payment process. Stripe may also fulfill its own legal obligations in accordance with Article 6(1)(c) of the GDPR.
Data Retention Period at Stripe
Stripe retains personal data only for as long as necessary to fulfill contractual and legal obligations. The specific retention period is determined by tax and commercial law requirements, as well as Stripe’s internal policies.
For more information about Stripe's data processing practices, please refer to Stripe's Privacy Policy.
10. Payment processing with Apple Pay and Google Pay
In addition to traditional payment methods, we also offer the option to pay via Apple Pay and Google Pay. These services enable secure and fast payment processing via mobile devices or compatible browsers.
Why Apple Pay and Google Pay Collect Personal Data
Both services collect and process personal data to authorize payments, ensure security, prevent fraud, and comply with legal requirements.
What data is transmitted
When using Apple Pay or Google Pay, the following data is processed:
- Payment information (e.g., virtual credit card number, token)
- Device information (e.g., device type, operating system)
- Transaction details (e.g., amount, merchant name, date)
- location data, if necessary, for fraud prevention
The actual payment details (e.g., credit card number) are not transmitted directly to us, but are forwarded to us by Apple or Google in an encrypted and tokenized form.
Legal basis for data processing
Data is processed in accordance with Article 6(1)(b) of the GDPR for the performance of a contract, as well as in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in modern and secure payment processing.
Data Retention Periods for Apple Pay and Google Pay
Apple and Google retain personal data only for as long as necessary to fulfill legal and contractual obligations. The retention period is governed by the respective providers’ privacy policies.
For more information on data processing, please refer to the respective privacy policies:
11. WooCommerce
We use WooCommerce to process orders. The following data is processed in this process:
Name, address, email address
Payment Information
Order History
Data is processed for the purpose of fulfilling the contract in accordance with Article 6(1)(b) of the GDPR. Technical data such as IP addresses and cookies are also stored.
11. Content Management System
Our website is powered by WordPress. Technical data such as IP addresses, browser information, and timestamps are processed to ensure functionality and security (Art. 6(1)(f) of the GDPR).
Stay up to date!
I’d like to receive exclusive emails featuring attractive discounts, new products, and special promotions. If you don’t want to miss out on any more offers and want to stay informed about new products, limited-time deals, and exclusive benefits, sign up for our newsletter today. This way, you’ll always stay up to date—conveniently via email and completely free of charge.
