Privacy Policy
circle institute GmbH
Effective: August 2025
General Information
Thank you for your interest in our website and services. Protecting your personal data is a top priority for us. This Privacy Policy explains what personal data we collect, how we use it, the purposes of processing, and your rights under applicable data protection laws.
Our data protection practices comply with the legal requirements of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This policy particularly fulfills our information obligations under Articles 13 and 14 GDPR.
Controller
circle institute GmbH
Robert-Rössle-Str. 10, Building D85
D-13125 Berlin, Germany
Phone: +49 (0)30 9489 2250
Email: info@circle-institute.com
1. Data Collection and Use
a) Accessing the Website (Server Log Files)
When visiting our website, our server automatically stores the following data:
- Browser type and version
- Operating system
- IP address (shortened/anonymized)
- Date and time of access
- Referrer URL
- Requested page/file
- Access status (e.g., error code)
- Data volume transmitted
This data is processed solely for technical operation, IT security, and error analysis based on our legitimate interest (Art. 6(1)(f) GDPR). No personal profiling takes place.
b) Registration Forms (e.g., Online Training)
When registering for training events, we collect:
- Name, title, address, email
- Profession, specialization, continuing education number
- Billing address, VAT number (optional)
- Training participation, dates, course details
The purpose is to process your registration, conduct the training, and potentially report participation to medical associations (Art. 6(1)(b) GDPR). Data is stored for up to 5 years in accordance with medical recordkeeping requirements.
c) Contact Requests
If you contact us via email, form, phone, or fax, we process your personal data to respond to your inquiry.
Legal basis: Art. 6(1)(a), (b), or (f) GDPR depending on the context.
Data will be deleted when it is no longer required or if you withdraw your consent.
d) Newsletter
We require your email address to send you our newsletter. You will receive a confirmation via double opt-in.
Legal basis: Art. 6(1)(a) GDPR.
You may unsubscribe at any time; your data will then be deleted.
e) Cookies
We use essential cookies and — with your consent — analytics/tracking cookies.
Legal basis: Art. 6(1)(a) or (f) GDPR; § 25(1) TTDSG.
Details can be found in the cookie banner and this Privacy Policy.
f) Hosting
Our website is hosted by IONOS SE. IONOS logs technical data (e.g., IP, referrer, timestamp).
See: IONOS Privacy Policy
We have signed a Data Processing Agreement (DPA) with IONOS (Art. 28 GDPR).
g) Web Analytics with IONOS WebAnalytics
IONOS collects anonymous statistical data (visitor numbers, page usage, device info) without using cookies.
Purpose: technical optimization of the website (Art. 6(1)(f) GDPR).
h) Web Analytics with Matomo (On-Premise)
We also use Matomo for anonymized website analytics without cookies.
Collected data includes:
- Anonymized IP address
- Pages visited, click paths
- Session duration
- Browser/device/OS
- Referrer
Processing is based on Art. 6(1)(f) GDPR (service optimization). Matomo runs on our own server; no data is shared with third parties. You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
You may opt out of tracking anytime:
i) CMR-ORBIT Platform
When using our CMR-ORBIT online platform for cardiovascular MRI case evaluations, we process:
- Login credentials, username, password
- Name, contact information
- Medical specialization, profession
- Evaluation history, education certificates
- IP address, timestamps
Legal basis: Art. 6(1)(b) and (f) GDPR.
Purpose: documentation of education, platform usage, and quality assurance.
CMR-Orbit Plattform (Usage Conditions):
- It is prohibited to record, share, store, or use the case data or images externally (e.g., screenshots, downloads, presentations).
- The platform is intended for registered users only. Misuse may result in legal consequences.
2. Plugins und Tools
We use the following third-party tools:
- Font Awesome (Art. 6(1)(f) GDPR)
Privacy Policy: fontawesome.com/privacy - LinkedIn (Analytics & Buttons)
Processed by: LinkedIn Corporation, USA
Legal basis: Art. 6(1)(a) GDPR
More information: LinkedIn Privacy Policy - WPForms (Forms)
Provider: WPForms LLC, USA
Legal basis: Art. 6(1)(a) GDPR
WPForms does not store form data on their servers – all entries are processed locally in the WordPress database
More information: WPForms Privacy Policy - Newsletter (Newsletter)
Processed by: Web Agile S.a.s. di Fietta Roberto, Italy
Legal basis: Art. 6(1)(a) GDPR
Newsletter does not store data on their servers – all entries are processed locally in the WordPress database
More information: Newsletter Privacy Policy
3. External Links & Third Country Transfers
Our site may contain links to third-party providers (e.g., SCMR, CVI). We are not responsible for their data protection practices. Please note that using such external services may involve data transfers to non-EU countries (e.g., USA) without an equivalent level of data protection.
4. Your Rights as a Data Subject
Under GDPR, you have the right to:
- Access your data (Art. 15 GDPR)
- Rectify inaccurate data (Art. 16 GDPR)
- Erasure ("right to be forgotten") (Art. 17 GDPR)
- Restrict processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time (Art. 7(3) GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, contact: info@circle-institute.com
5. Data Security
We implement appropriate technical and organizational measures to protect your data against loss, destruction, manipulation, and unauthorized access. Our security standards are regularly updated in line with technological developments.
6. Right of Withdrawal
If you have given us consent to process your personal data, you may withdraw it at any time with effect for the future.
A withdrawal can be made informally by email to info@circle-institute.com.
The lawfulness of data processing prior to withdrawal remains unaffected.
Please note: withdrawal may limit access to certain services (e.g., CMR-ORBIT).