Privacy and Data Protection - iB Learning Platform

1. Purpose

Declaration of consent for members of the virtual learning environment (VLE), provided by the Inclusive Business Action Network (iBAN) within GIZ in Bonn, on the storage and use of data.

2. General

The Inclusive Business Action Network (iBAN) is a global initiative supporting the scaling and replication of inclusive business models. iBAN manages the largest global online knowledge platform (iBAN blue) on inclusive business and offers a focused Capacity Development Programme (iBAN weave) for selected companies and policymakers in developing and emerging countries.

iBAN is funded by the German Federal Ministry for Economic Cooperation and Development. It is implemented by the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH. An earlier phase of this project (01/2017 – 12/2021) was supported by the European Union.

Data processing is the responsibility of the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH.

The Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH is a public-benefit federal enterprise for international cooperation. We work as a federal enterprise under private law. Our aim is to achieve the development-policy objective of improving the living conditions of people worldwide and conserving the natural resources on which livelihoods depend.

 

Postal Address:

GIZ Bonn, Friedrich-Ebert-Allee 32 + 36, 53113 Bonn

GIZ Eschborn, Dag-Hammarskjöld-Weg 1–5, 65760 Eschborn

 

Contact: info[at]ib-an.net

Contact details of the data protection officer: datenschutzbeauftragter[at]giz.de

 

3. Information on how collected data will be processed

This declaration explains how iBAN, represented by GIZ will process user data of the VLE. iBAN is collecting, processing and storing data only as described below and for the purpose of providing a virtual self-learning environment to the general public. Data is processed in in line with Art. 6 Para. 1 lit. a DSGVO (the data subject has given consent to the processing of his or her personal data for one or more specific purposes).

Registration process (necessary for the delivery of the service):

The following data shall be collected when a user registers on the VLE based on the individual declaration of consent: first name, last name, user name (alias), e-mail address and an encrypted password. This information is compulsory to access the VLE. Users shall not be able to see any profile information of any other user except the user alias name.

Course information (necessary for the delivery of the service):

On the VLE's dashboard, each user can 1) choose the course to participate in, 2) view the individual progress, and 3) download their individual confirmation of completion. Content on the VLE comprises of presentation slides, quizzes and audio. The VLE is designed to be a self-learning tool. Any results (for example of quizzes) shall only be visible for the individual user.

While using the VLE, connection data regarding each user's course activity shall be collected in log files and will be processed automatically. It is solely used for the technical delivery, statistical impact measurement and user-friendly execution of the respective course (e.g. store learning progress in order to start a course unit now and finish later).

Optional profile information:

In the VLE, each user has the option of adding the following information to their profile: country, name of organization, about. This data shall not be processed or assessed in any way.

Feedback survey:

In order to continuously improve the features of the VLE and for M&E purposes, users shall be contacted for anonymous feedback surveys. Participation in surveys is voluntary.

Software for VLE:

Moodle The open source software Moodle shall be used to implement the VLE. The following data will be collected and processed (necessary for the delivery of the service): IP address, browser type, date and time of login/logout, course activity (progress of user on online course).

  • The collection and processing of the connection data outlined above is necessary to enable the delivery of the website to each user's computer.
  • Moodle collects and processes information in log files for the purpose of eventual trouble shooting, user-friendly delivery of the platform and to ensure backups of the system in order to avoid loss of information.

Tracking of user data for statistical purposes

In accordance with Art. 6 para. 1 lit. f DSGVO, data will be processed for statistical purposes. Such processing is only conducted in an anonymized form over the internal log files of the VLE.

The VLE uses two cookies:

  • Functional cookie: The first cookie is called MoodleSession and transmits data about user progress to log files in the VLE. This cookie allows users to retain the login when progressing from page to page, to store and access their learning progress and use the VLE on a continuous basis. At the same time, the log files are used for statistical impact measurement of the platform. The cookie is deactivated when the user logs off or exits the web browser. The legal basis for this processing is Art. 6 para. 1 lit. b DSGVO.

  • Functional cookie: The other cookie serves to simplify usage of the VLE and remembers the user login when the person returns to the page. The cookie does not track users when they are logged off or when they navigate other websites. Users can activate the cookie when logging in to the VLE. The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a DSGVO.
  • Statistical cookie: For statistical purposes and to improve service, the VLE uses technology provided by Matomo (formerly PIWIK). Matomo uses cookies which are stored on the user’s computer and which enable an analysis of the use of our online offer by the user. Matomo processes the following data: the browser type and version you use, the operating system you use, your country of origin, date and time of the server request, the number of visits, your time spent on the website and the external links you click. The IP address of the users is anonymized before it is stored. Data is not passed on to third parties. Users can object to the anonymized data collection by the Matomo program at any time with effect for the future by clicking on the link below.

The statistical purpose implies that the result of processing for statistical purposes is not personal data, but aggregate data, and that this result or the personal data are not used in support of measures or decisions regarding any particular natural person. Cookies are stored on the user's computer and transmitted by the user to the VLE.

4. Reference to user rights

You can request information from us about the personal data that concerns you and is processed by Moodle. In accordance with art. 15 DSGVO, you may request a copy of this data.

  • You also have the right to have your personal data corrected (pursuant to Art. 16 DSGVO) or deleted (pursuant to Art. 17 DSGVO), to have the processing restricted by the controller (pursuant to Art. 18 DSGVO) or to object to such processing (pursuant to Art. 21 DSGVO) and to have it transferred (pursuant to Art. 20 DSGVO).
  • You have the right not to be subject to a decision based exclusively on automated processing that has legal effect on you or similarly significantly affects you (pursuant to Art. 22 DSGVO).

To undertake any of these rights, please send an email to info[at]ib-an.net.

If you have any questions or complaints about this website, please contact the GIZ data protection officer (see contact information provided above). You also have the right to lodge a complaint with the responsible data protection supervisory authority. The responsible authority in this case is the German Federal Commissioner for Data Protection and Freedom of Information (BfDI).

5. Closing remark

GIZ uses appropriate technical and organizational measures to secure personal data against unintentional or intentional falsification, destruction, loss or access by unauthorised persons. Access to personal data is restricted to GIZ staff from the Inclusive Business Action Network who need to process the data for the above-mentioned purpose, and who will handle the information provided in a proper and confidential manner.

The data will be used exclusively for the declared purposes. Any other use will always be dependent on consent being obtained again.