Data Protection

Privacy Policy

Personal da­ta (usual­ly re­fer­red to just as “da­ta” be­low) will on­ly be pro­ces­sed by us to the extent ne­cessa­ry and for the pur­po­se of pro­vi­ding a func­tio­nal and user-fri­end­ly web­site, in­clu­ding its con­tents, and the ser­vices of­fe­red the­re.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (her­einaf­ter re­fer­red to as the “GDPR”), “pro­ces­sing” re­fers to any ope­ra­ti­on or set of ope­ra­ti­ons such as collec­tion, re­cord­ing, or­ga­ni­za­ti­on, struc­tu­ring, sto­ra­ge, ad­ap­tati­on, al­te­ra­ti­on, re­trie­val, con­sul­ta­ti­on, use, dis­clo­sure by trans­mis­si­on, dis­se­mi­na­ti­on, or other­wi­se ma­king avail­ab­le, align­ment, or com­bi­na­ti­on, restric­tion, era­su­re, or de­st­ruc­tion per­for­med on per­so­nal da­ta, whe­ther by au­to­ma­ted me­ans or not.

The fol­lo­wing pri­va­cy po­li­cy is in­ten­ded to in­form you in par­ti­cu­lar about the ty­pe, scope, pur­po­se, du­ra­ti­on, and le­gal ba­sis for the pro­ces­sing of such da­ta eit­her un­der our own con­trol or in con­junc­tion with others. We al­so in­form you be­low about the third-par­ty com­pon­ents we use to op­ti­mi­ze our web­site and im­pro­ve the user ex­pe­ri­ence which may re­sult in said third par­ties al­so pro­ces­sing da­ta they collect and con­trol.

Our pri­va­cy po­li­cy is struc­tu­red as fol­lows:

I. Information about us as con­trol­lers of your da­ta
II. The rights of users and da­ta sub­jects
III. Information about the da­ta pro­ces­sing

I. Information about us as con­trol­lers of your da­ta

The par­ty re­spon­si­ble for this web­site (the “con­trol­ler”) for pur­po­ses of da­ta pro­tec­tion law is:

WAGENER & HERBST Management Consultants GmbH
Zeppelinstr. 136
14471 Potsdam
Germany

Phone: +49 331 275 04 0
Fax: +49 331 275 04 41
E-Mail: info[at]wagener-herbst.com

II. The rights of users and da­ta sub­jects

With re­gard to the da­ta pro­ces­sing to be de­scri­bed in mo­re de­tail be­low, users and da­ta sub­jects have the right

  • to con­fir­ma­ti­on of whe­ther da­ta con­cer­ning them is being pro­ces­sed, in­for­ma­ti­on about the da­ta being pro­ces­sed, fur­t­her in­for­ma­ti­on about the na­tu­re of the da­ta pro­ces­sing, and co­pies of the da­ta (cf. al­so Art. 15 GDPR);
  • to cor­rect or com­ple­te in­cor­rect or in­com­ple­te da­ta (cf. al­so Art. 16 GDPR);
  • to the im­me­dia­te de­le­ti­on of da­ta con­cer­ning them (cf. al­so Art. 17 DSGVO), or, al­ter­na­tively, if fur­t­her pro­ces­sing is ne­cessa­ry as sti­pu­la­ted in Art. 17 Para. 3 GDPR, to restrict said pro­ces­sing per Art. 18 GDPR;
  • to re­cei­ve co­pies of the da­ta con­cer­ning them and/or pro­vi­ded by them and to have the sa­me trans­mit­ted to other providers/controllers (cf. al­so Art. 20 GDPR);
  • to file com­p­laints with the su­per­vi­so­ry aut­ho­ri­ty if they be­lie­ve that da­ta con­cer­ning them is being pro­ces­sed by the con­trol­ler in bre­ach of da­ta pro­tec­tion pro­vi­si­ons (see al­so Art. 77 GDPR).

In ad­di­ti­on, the con­trol­ler is ob­li­ged to in­form all re­ci­pi­ents to whom it dis­c­lo­ses da­ta of any such cor­rec­tions, de­le­ti­ons, or restric­tions pla­ced on pro­ces­sing the sa­me per Art. 16, 17 Para. 1, 18 GDPR. However, this ob­li­ga­ti­on does not ap­p­ly if such no­ti­fi­ca­ti­on is im­pos­si­ble or in­vol­ves a dis­pro­por­tio­na­te ef­fort. Nevertheless, users have a right to in­for­ma­ti­on about the­se re­ci­pi­ents.

Likewise, un­der Art. 21 GDPR, users and da­ta sub­jects have the right to ob­ject to the controller’s fu­ture pro­ces­sing of their da­ta pur­suant to Art. 6 Para. 1 lit. f) GDPR. In par­ti­cu­lar, an ob­jec­tion to da­ta pro­ces­sing for the pur­po­se of di­rect ad­ver­ti­sing is per­mis­si­ble.

III. Information about the da­ta pro­ces­sing

Your da­ta pro­ces­sed when using our web­site will be de­le­ted or blo­cked as so­on as the pur­po­se for its sto­ra­ge cea­ses to ap­p­ly, pro­vi­ded the de­le­ti­on of the sa­me is not in bre­ach of any sta­tu­to­ry sto­ra­ge ob­li­ga­ti­ons or un­less other­wi­se sti­pu­la­ted be­low.

Server da­ta

For tech­ni­cal re­a­sons, the fol­lo­wing da­ta sent by your in­ter­net brow­ser to us or to our ser­ver pro­vi­der will be collec­ted, es­pe­ci­al­ly to en­su­re a se­cu­re and sta­ble web­site: These ser­ver log files re­cord the ty­pe and ver­si­on of your brow­ser, ope­ra­ting sys­tem, the web­site from which you ca­me (re­fer­rer URL), the web­pages on our site vi­si­ted, the date and time of your vi­sit, as well as the IP ad­dress from which you vi­si­ted our site.

The da­ta thus collec­ted will be tem­pora­ri­ly stored, but not in as­so­cia­ti­on with any other of your da­ta.

The ba­sis for this sto­ra­ge is Art. 6 Para. 1 lit. f) GDPR. Our le­gi­ti­ma­te in­te­rest lies in the im­pro­ve­ment, sta­bi­li­ty, func­tio­na­li­ty, and se­cu­ri­ty of our web­site.

The da­ta will be de­le­ted wi­t­hin no mo­re than se­ven days, un­less con­ti­nued sto­ra­ge is re­qui­red for evi­den­tia­ry pur­po­ses. In which ca­se, all or part of the da­ta will be ex­clu­ded from de­le­ti­on un­til the in­ves­ti­ga­ti­on of the re­le­vant in­ci­dent is fi­nal­ly re­sol­ved.

Cookies

a) Session coo­kies

We use coo­kies on our web­site. Cookies are small text files or other sto­ra­ge tech­no­lo­gies stored on your com­pu­ter by your brow­ser. These coo­kies pro­cess cer­tain spe­ci­fic in­for­ma­ti­on about you, such as your brow­ser, lo­ca­ti­on da­ta, or IP ad­dress.  

This pro­ces­sing makes our web­site mo­re user-fri­end­ly, ef­fi­ci­ent, and se­cu­re, al­lo­wing us, for examp­le, to dis­play our web­site in dif­fe­rent lan­guages or to of­fer a shop­ping cart func­tion.

The le­gal ba­sis for such pro­ces­sing is Art. 6 Para. 1 lit. b) GDPR, in­so­far as the­se coo­kies are used to collect da­ta to in­itia­te or pro­cess con­trac­tu­al re­la­ti­ons­hips.

If the pro­ces­sing does not ser­ve to in­itia­te or pro­cess a con­tract, our le­gi­ti­ma­te in­te­rest lies in im­pro­ving the func­tio­na­li­ty of our web­site. The le­gal ba­sis is then Art. 6 Para. 1 lit. f) GDPR.

When you clo­se your brow­ser, the­se ses­si­on coo­kies are de­le­ted.

b) Third-par­ty coo­kies

If ne­cessa­ry, our web­site may al­so use coo­kies from com­pa­nies with whom we co­ope­ra­te for the pur­po­se of ad­ver­ti­sing, ana­ly­zing, or im­pro­ving the fea­tures of our web­site.

Please re­fer to the fol­lo­wing in­for­ma­ti­on for de­tails, in par­ti­cu­lar for the le­gal ba­sis and pur­po­se of such third-par­ty collec­tion and pro­ces­sing of da­ta collec­ted through coo­kies.

c) Disabling coo­kies

You can re­fu­se the use of coo­kies by chan­ging the set­tings on your brow­ser. Likewise, you can use the brow­ser to de­le­te coo­kies that have al­re­ady be­en stored. However, the steps and me­a­su­res re­qui­red va­ry, de­pen­ding on the brow­ser you use. If you have any ques­ti­ons, plea­se use the help func­tion or con­sult the do­cu­men­ta­ti­on for your brow­ser or con­tact its ma­ker for sup­port. Browser set­tings can­not pre­vent so-cal­led flash coo­kies from being set. Instead, you will need to chan­ge the set­ting of your Flash play­er. The steps and me­a­su­res re­qui­red for this al­so de­pend on the Flash play­er you are using. If you have any ques­ti­ons, plea­se use the help func­tion or con­sult the do­cu­men­ta­ti­on for your Flash play­er or con­tact its ma­ker for sup­port.

If you pre­vent or restrict the in­stal­la­ti­on of coo­kies, not all of the func­tions on our site may be ful­ly us­able.

Contact

If you con­tact us via email or the con­tact form, the da­ta you pro­vi­de will be used for the pur­po­se of pro­ces­sing your re­quest. We must have this da­ta in or­der to pro­cess and ans­wer your in­qui­ry; other­wi­se we will not be ab­le to ans­wer it in full or at all.

The le­gal ba­sis for this da­ta pro­ces­sing is Art. 6 Para. 1 lit. b) GDPR.

Your da­ta will be de­le­ted on­ce we have ful­ly ans­we­red your in­qui­ry and the­re is no fur­t­her le­gal ob­li­ga­ti­on to store your da­ta, such as if an or­der or con­tract re­sul­ted the­re­from.

Google Analytics

We use Google Analytics on our web­site. This is a web ana­ly­tics ser­vice pro­vi­ded by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (her­einaf­ter: Google).

Through cer­ti­fi­ca­ti­on ac­cord­ing to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google gua­ran­tees that it will fol­low the EU’s da­ta pro­tec­tion re­gu­la­ti­ons when pro­ces­sing da­ta in the United States.

The Google Analytics ser­vice is used to ana­ly­ze how our web­site is used. The le­gal ba­sis is Art. 6 Para. 1 lit. f) GDPR. Our le­gi­ti­ma­te in­te­rest lies in the ana­ly­sis, op­ti­mi­za­ti­on, and eco­no­mic ope­ra­ti­on of our site.

Usage and user-re­la­ted in­for­ma­ti­on, such as IP ad­dress, place, time, or fre­quen­cy of your vi­sits to our web­site will be trans­mit­ted to a Google ser­ver in the United States and stored the­re. However, we use Google Analytics with the so-cal­led an­ony­mi­za­ti­on func­tion, wher­e­by Google trun­ca­tes the IP ad­dress wi­t­hin the EU or the EEA be­fo­re it is trans­mit­ted to the US.

The da­ta collec­ted in this way is in turn used by Google to pro­vi­de us with an eva­lua­ti­on of vi­sits to our web­site and what vi­si­tors do on­ce the­re. This da­ta can al­so be used to pro­vi­de other ser­vices re­la­ted to the use of our web­site and of the in­ter­net in ge­ne­ral.

Google sta­tes that it will not con­nect your IP ad­dress to other da­ta. In ad­di­ti­on, Google pro­vi­des fur­t­her in­for­ma­ti­on with re­gard to its da­ta pro­tec­tion prac­tices at

https://www.google.com/intl/de/policies/privacy/partners,

in­clu­ding op­ti­ons you can ex­er­cise to pre­vent such use of your da­ta.

In ad­di­ti­on, Google of­fers an opt-out add-on at

https://tools.google.com/dlpage/gaoptout?hl=en

in ad­di­ti­on with fur­t­her in­for­ma­ti­on. This add-on can be in­stal­led on the most po­pu­lar brow­sers and of­fers you fur­t­her con­trol over the da­ta that Google collects when you vi­sit our web­site. The add-on in­forms Google Analytics’ JavaScript (ga.js) that no in­for­ma­ti­on about the web­site vi­sit should be trans­mit­ted to Google Analytics. However, this does not pre­vent in­for­ma­ti­on from being trans­mit­ted to us or to other web ana­ly­tics ser­vices we may use as de­tail­ed her­ein.

Google-Maps

Our web­site uses Google Maps to dis­play our lo­ca­ti­on and to pro­vi­de di­rec­tions. This is a ser­vice pro­vi­ded by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (her­einaf­ter: Google).

Through cer­ti­fi­ca­ti­on ac­cord­ing to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google gua­ran­tees that it will fol­low the EU’s da­ta pro­tec­tion re­gu­la­ti­ons when pro­ces­sing da­ta in the United States.

To en­ab­le the dis­play of cer­tain fonts on our web­site, a con­nec­tion to the Google ser­ver in the USA is es­ta­blished whene­ver our web­site is ac­ces­sed.

If you ac­cess the Google Maps com­pon­ents in­te­gra­ted in­to our web­site, Google will store a coo­kie on your de­vice via your brow­ser. Your user set­tings and da­ta are pro­ces­sed to dis­play our lo­ca­ti­on and crea­te a rou­te de­scrip­ti­on. We can­not pre­vent Google from using ser­vers in the USA.

The le­gal ba­sis is Art. 6 Para. 1 lit. f) GDPR. Our le­gi­ti­ma­te in­te­rest lies in op­ti­mi­zing the func­tio­na­li­ty of our web­site.

By con­nec­ting to Google in this way, Google can de­ter­mi­ne from which web­site your re­quest has be­en sent and to which IP ad­dress the di­rec­tions are trans­mit­ted.

If you do not agree to this pro­ces­sing, you have the op­ti­on of pre­ven­ting the in­stal­la­ti­on of coo­kies by ma­king the ap­pro­pria­te set­tings in your brow­ser. Further de­tails can be found in the sec­tion about coo­kies above.

In ad­di­ti­on, the use of Google Maps and the in­for­ma­ti­on ob­tai­ned via Google Maps is go­ver­ned by the Google Terms of Use and the Terms and Conditions for Google Maps.

Google al­so of­fers fur­t­her in­for­ma­ti­on at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

Google Fonts

Our web­site uses Google Fonts to dis­play ex­ter­nal fonts. This is a ser­vice pro­vi­ded by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (her­einaf­ter: Google).

Through cer­ti­fi­ca­ti­on ac­cord­ing to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google gua­ran­tees that it will fol­low the EU’s da­ta pro­tec­tion re­gu­la­ti­ons when pro­ces­sing da­ta in the United States.

To en­ab­le the dis­play of cer­tain fonts on our web­site, a con­nec­tion to the Google ser­ver in the USA is es­ta­blished whene­ver our web­site is ac­ces­sed.

The le­gal ba­sis is Art. 6 Para. 1 lit. f) GDPR. Our le­gi­ti­ma­te in­te­rest lies in the op­ti­mi­za­ti­on and eco­no­mic ope­ra­ti­on of our site.

When you ac­cess our site, a con­nec­tion to Google is es­ta­blished from which Google can iden­ti­fy the site from which your re­quest has be­en sent and to which IP ad­dress the fonts are being trans­mit­ted for dis­play.

Google of­fers de­tail­ed in­for­ma­ti­on at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

in par­ti­cu­lar on op­ti­ons for pre­ven­ting the use of da­ta.

Online job ap­p­li­ca­ti­ons / pu­bli­ca­ti­on of job ad­ver­ti­se­ments

We of­fer you the op­por­tu­ni­ty to ap­p­ly for jobs with our com­pa­ny via our web­site. In the ca­se of the­se di­gi­tal ap­p­li­ca­ti­ons, we collect your ap­p­li­ca­ti­on da­ta elec­tro­ni­cal­ly in or­der to pro­cess your ap­p­li­ca­ti­on.

The le­gal ba­sis for this pro­ces­sing is §26 Para. 1 S. 1 BDSG in con­junc­tion with Art. 88 Para. 1 GDPR.

If you are hi­red as a re­sult of the ap­p­li­ca­ti­on pro­cess, we will store the da­ta you pro­vi­de du­ring the ap­p­li­ca­ti­on pro­cess in your per­son­nel file for the pur­po­se of the usu­al or­ga­ni­za­tio­nal and ad­mi­nis­tra­ti­ve pro­cess, na­tu­ral­ly in com­pli­an­ce with fur­t­her le­gal ob­li­ga­ti­ons.

The le­gal ba­sis for this pro­ces­sing is §26 Para. 1 S. 1 BDSG in con­junc­tion with Art. 88 Para. 1 GDPR.

If we do not hi­re you, we will au­to­ma­ti­cal­ly de­le­te the da­ta sub­mit­ted to us two mon­ths af­ter the fi­nal de­ci­si­on is ma­de. We will not de­le­te the da­ta, howe­ver, if we must store the da­ta for le­gal re­a­sons such as evi­dence of equal tre­at­ment of ap­p­li­cants, un­til any le­gal ac­tion is con­clu­ded, or four mon­ths.

In this ca­se, the le­gal ba­sis is Art. 6 Para. 1 lit. f) GDPR and §24 Para. 1 No. 2 BDSG. Our le­gi­ti­ma­te in­te­rest lies in any le­gal de­fen­se we may have to mount .

If you ex­press­ly con­sent to a lon­ger sto­ra­ge of your da­ta, e.g. for your in­clu­si­on in a da­ta­ba­se of ap­p­li­cants or in­te­rested par­ties, the da­ta will be pro­ces­sed fur­t­her on the ba­sis of your con­sent. The le­gal ba­sis is then Art. 6 Para. 1 lit. a) GDPR. You may wi­th­draw your con­sent at any time with fu­ture ef­fect per Art. 7 Para. 3 GDPR with fu­ture ef­fect.

Source: Model Data Protection Statement by Anwaltskanzlei Weiß & Partner