Privacy Statement

Data protection regulation according
to Art. 13 GS-GVO

 

 

Privacy statement and agreement in using personal information

concerning our website www.consulectra.de and the processing of  personal information collected from business cards, online/email contacts, contractual relations and applicants‘ data.
Data protection is a matter of confidence and providing you with the necessary security important to us. We respect your privacy and recognize the importance of protecting your personal information and we are committed to collecting, processing and using it responsibly in compliance with applicable laws. To ensure you a safe visit of our website, we process your personal information strictly in compliance with legal conditions and provide you in the following with the specific information about the collection and the use of personal information.
We are committed to complying with the EU general data protection regulations and the nationally applicable DP laws. We handle data protection as a corporate-wide subject of high priority and only operate with partners satisfying the same high level of data protection when processing personal information. We process your personal information only after having received your explicite consent referring to a service for the purpose of a contract or pre-contractual measures or if requested by the relevant laws. Below-mentioned data protection information include the actually nationally applicable legal framework as well as the standards for the general data protection having come into force in the EU since 25th May 2018. In no case we sell your personal data or disclose them to unauthorized third parties. Please find below details about our corporate practice in processing personal information.
You may print or store this document by using your normal bowser function. Our privacy statement indicates which personal data are collected on our website and which processed and used by us.

 

I.    Name and address of responsible

The responsible for the purpose of the DP regulations and other national DP laws of the EU member states and other privacy-relevant standards is:
CONSULECTRA Unternehmensberatung GmbH
Weidestraße 122 a
22083 Hamburg
Deutschland
Phone: 040-27899-0
Website: www.consulectra.de
In charge for web contents:
Stefanie Volm
Phone:    +49 40 27899-239
E-Mail:     s.volm@consulectra.de

 

II.   Name and address of officer for DP control

The officer in charge with DP control is:
Georg Kraft-Wölfel
CONSULECTRA Unternehmensberatung GmbH
Weidestraße 122 a
22083 Hamburg
Phone:    +49 40 88938500
E-Mail:     datenschutz(at)consulectra.de

 

III. Processing information - general

1. Scope of personal information

We collect and use personal information of our users principally  only to the extent as it is necessary to provide a functionable website with our contents and services. We collect and use the personal information of our users in a regular way only after users‘ agreement. Exception is in the event previous agreement was de facto not possible and the processing of such information is legally allowed.

2.   Legal basis for processing personal information

As far as we request for processing the agreement by the person concerned, Art. 6 para. 1 lit. a DP regulations is the legal basis for the processing of personal information.
In the event of processing personal data required to fulfill a contract, the contract party of which is the person concerned, the legal basis is Art. 6 para. 1 lit. b DP regulations. This also applies in the event of processing information required for pre-contract measures.
In the event of processing personal information for the fulfilling of a legal obligation our company is subject to,  Art. 6 para. 1 lit. c DP regulations is the legal basis.
In the event vital interests of the person concerned or another natural person require the processing of personal information, Art. 6 para. 1 lit. d DP regulations is legal basis.
In the event processing is required to protect the justified interest of our company or of a third party and if the interests, basic rights and liberties of the person concerned do not prevail the first-named interest, Art. 6 para. 1 lit. f DP regulations is legal basis.

3.   Deletion of information and retention period

Personal information of the person concerned are deleted or blocked as soon as the purpose of retention is omitted. Retention is also given in cases where demanded by European or national jurisdiction in EU decrees, laws or other regulations and standards the person concerned is subject to. The blocking or deleting of personal informaton is also given if a prescribed retention period expires due to one of pre-named standards, unless further retention of information is required for the  purpose of terminating or fulfilling a contract.

 

IV. Providing website and preparing logfiles

1.   Description and scope of processing information

Everytime our website is visited, our system automatically records data and information from the calling PC system.
The following information are collected:
  • Information about browser type and applied version
  • User’s service system
  • User’s Internet Service Provider
  • User’s IP address (anonymized)
  • Date and clocktime of access
  • Websites from which user’s system enters our website
  • Websites which are visited from user’s system via our website
Information are also retained in the logfiles of our system. We do not retain such information together with other personal information of the user.

2.   Legal basis for processing information

Legal basis for the temporary retention of information and logfiles is  Art. 6 para. 1 lit. f DP regulations.

3.   Purpose of processing information

The temporary retention of the IP address by our system is necessary to provide user’s PC access to our website. It is therefore necessary to retain user’s IP address for the period of visit.
The retention in logfiles is effected in order to secure the website functionability. Moreover such information serve us to optimize the website and to comply with the security standards of our information relevant systems. In this connection we do not evaluate such information for marketing purpose.
For these purposes we have a legitimate interest in the processing of information in compliance with Art. 6 para. 1 lit. f DP regulations.

4.   Retention period

The information are deleted as soon as the purpose of their collection was fullfilled. In the event of collecting the information to provide access to our website no longer than the period of the visit.
In the event of retaining information in logfiles latest after seven days. Another retention is possible. In this case users’ IP addresses are deleted or alienated such to make any allocation of the calling client impossible.

5. Possibility of objection and deletion

The collection of information to provide access to our website and to retain information in logfiles is mandatory necessary to operate the website. User’s objection is therefore not possible.

 

V.   Online contact form

1.   Description and scope of processing information

Our website includes a contact form to contact us electronically. In the event a user contacts us online, the information he entered in the input mask are transferred to us and retained. The following information are mandatory to fill-in:
First name, second name, email address, message.
Further information are optional:
Company, department, function, street/no, postal code, place, country, phone, fax.
At the time of sending the message, the following information are also recorded:
  • User’s IP address
  • Date and clocktime of recording
For the processing of the information your agreement is requested during the sending procedure with reference to our privacy statement.
Alternatively we can be contacted by our email address. In the event of contacting us by email, user’s personal information transmitted to us with his email are collected.  
In this connection the information are not disclosed to third parties. The information are only used for the purpose of communication.

2.   Legal basis for processing information

With user’s agreement, the legal basis for processing information is Art. 6 para. 1 lit. a DP regulations.
In the event of sending information by email, the legal basis for processing information is Art. 6 para. 1 lit. f DP regulations. In the event of contacting us by email with the purpose of contracting, additionally Art. 6 para. 1 lit. b DP regulations is legal basis for processing information.

3.   Purpose of processing information

We collect personal information from the input mask only to process the contact. In the event of contacting us by email, there is a legitimate interest necessary in processing such information.
Other personal information that have been processed during sending help to protect against misuse of the contact form and  to comply with the security standards regarding our information-relevant systems.

4.   Retention period

The information are deleted as soon as the purpose for their collection was fulfilled.  In the event of personal information collected from the input mask of the contact form and those which were sent by email, deleting is when the respective communication with the user was terminated. The communication is considered terminated when concerned matter is understood to be finally clarified.

5.   Possibility of objection and deletion

User can revoke his agreement for the processing of personal information at any time. In the event user contacts us by email, he can revoke the collection of his personal information at any time. In such event, communication cannot be continued.
All personal information that have been collected and retained during contacting are in this case deleted.

 

VI. Application for symposium and seminaries

1.   Description and scope of processing information

Our website includes contact forms which can be used to electronically apply for a symposium or seminaries. In the event user contacts us this way his personal information he entered in the input masks are sent to us and collected. The following information are mandatory and must be filled in:
Participant:   Address code, first name, second name, phone, email
Company:     Trade/area of business, street/POB, country, postal code/ place, address = address of invoice
Further information are optional:
Participants: Title, position, department, fax, remark.
At the time of sending the message, the following information are also recorded:
  • User‘s IP address
  • Date and clocktime of recording.
For the processing of information your agreement is requested during the sending procedure with reference to our privacy statement.
Alternatively we can be contacted by our email address. In the event of contacting us by email, user’s personal information transmitted to us with his email are collected. 
In this connection the information are not disclosed to third parties. The information are only used for the purpose of communication.

2.   Legal basis for processing information

With user’s agreement, the legal basis for processing information is Art. 6 para. 1 lit. a DP regulations.
In the event of sending information by email, the legal basis for processing information is Art. 6 para. 1 lit. f DP regulations. In the event of contacting us by email with the purpose of contracting, additionally  Art. 6 para. 1 lit. b DP regulations is legal basis for processing information.

3.   Purpose of processing information

We collect your personal information from the input mask only to process your contact and application for our symposium and our seminaries. In the event of contacting us by email, there is a legitimate interest necessary in processing such information.
Other personal information that have been processed during sending help to protect against misuse of the contact form and  to comply with the security standards regarding our information-relevant systems.

4.   Retention period

The information are deleted as soon as the purpose for their collection was fulfilled. In the event of personal information collected from the input mask of the contact form and those which were sent by email, deleting is when the symposium or seminary was executed and settled and after retention times requested by law expired.

5.   Possibility of objection and deletion

User can revoke his agreement for processing personal information at any time. In the event user contacts us by email, he can revoke the collection of his personal information at any time. In such event the application for a symposium or a seminary cannot be considered.
All personal information that have been collected and retained during contacting are in this case deleted.

 

VII.   Processing personal data on business cards

1.      Description and scope of processing information

We collect your personal information when you hand us over your business card which contains usually the following information:  
Academic title, first name, second name, company, department, function, street/no, postal code, place, country, phone, fax, email address.
Your business card may contain other information which are also collected.

2.   Legal basis for processing information

With your consent when handing over your business card, the legal basis for processing your information is Art. 6 Abs. 1 lit.a DP regulations.
In the event of sending information by email, the legal basis for processing information is Art. 6 Abs. 1 lit. f DP regulations. In the event of contacting us by email with the purpose of contracting, additionally Art. 6 Abs. 1 lit. b DP regulations is legal basis for processing information.

3.      Purpose of processing information

We collect personal information from your business card only to contact you. In the event of contacting us by email, there is a legitimate interest necessary in processing such information. In the event contacting has the purpose of concluding  a contract, we may use your personal information for offering and contract preparation.

4.      Retention period

The information are deleted as soon as the purpose for their collection was fulfilled.

5.      Possibility of objection and deletion

The contact person can revoke the agreement for processing the personal information at any time. In the event of contacting us by email, the person concerned can revoke the collection of the personal information at any time. In such event the communication cannot be continued.
All personal information that have been collected and retained during contacting are in this case deleted. 

 

VIII.  Processing information from email contact  

1.      Description and scope of processing information

In the event of contacting us by email, we collect your personal information contained in your email. Such information usually include:
Academic title, first name, second name, company, department, function, street/no., postal code, place, country, phone, fax, email address, text of message.
Your email may include more information which are also collected.

2.      Legal basis for processing information

With your acceptance when sending your email, the legal basis for processing information is Art. 6 para. 1 lit. a in connection with Art. 6 para. 1 lit. f DP regulations.
In the event of contacting us by email for the purpose of contracting, additionally Art. 6 para. 1 lit. b DP regulations is legal basis for processing information.

3.      Purpose of processing information

We collect the personal information from your email only to process contact with you. There is also a legitimate interest necessary in processing such information. In the event contacting has the purpose of concluding  a contract, we may use your personal information for offering and contract preparation.

4.      Retention period

The information are deleted as soon as the purpose for their collection was fulfilled.

5.      Possibility of objection and deletion

The person concerned contacting us by email can revoke the collection of the personal information at any time. In such event the communication cannot be considered.
All personal information that have been collected and retained during contacting are in this case deleted.

 

IX. Processing information from contractual relationships

1.    Description and scope of processing  information

In the course of initiating and executing contracts with interested parties, customers and suppliers we usually collect personal information about the contact partners of pre-named, such as:
Title, position, department, first name, second name, phone, email, fax, company, trade/business, street/postbox, country, postal code/place.

2.    Legal basis for processing information

For contacts with the purpose of concluding a contract, legal basis for processing personal information is Art. 6 para. 1 lit. b DP regulations.

3.    Purpose of processing information

Our processing of the personal information is only for the purpose of contract initiation and execution.

4.    Retention period

The data are deleted as soon as the purpose for their collection was fulfilled. That means for the personal information in cases where no contract was concluded after initiation, or the concluded contract was completed, or after the retention times requested by law expired.

5.    Possibility of objection and deletion

The contact partner can revoke acceptance to process the personal information at any time. In such case, the contract cannot be concluded. In the case of current contracts being in the process of execution, the revocation may be blocked by a legally requested retention period.
All personal information collected in the course of initiating a contract, are deleted in this connection.

 

X.    Processing candidates/applicants‘ personal information

1.    Description and scope of processing information

In the event you are sending us your application by email or postally, we collect the personal information contained in your application. Such information usually include:
Academic title, first name, second name, street/no, postal code, place, country, phone, fax, email address, curriculum vitae, certificates, data about professional career, police clearance certificate, health certificate.  
Your application may contain more information which we also collect.
During the application and employment procedure we usually prepare and collect reports or minutes of meeting.

2.    Legal basis for processing information

With your consent when submitting us your application, the legal basis for processing personal information is Art. 6 para. 1 lit. a in connection with Art. 6 para. 1 lit. f DP regulations.
In the event the purpose of your contact is the conclusion of a work contract, additionally  Art. 6 para. 1 lit. b DS-GVO is legal basis for processing information.

3.    Purpose of processing information

We process the personal information from your application only for the purpose of application and employment procedure. There is also a legitimate interest necessary to process your personal information. The purpose of your contact is to obtain a work contract. We therefore may use your personal information also to prepare the contract.  

4.    Retention period

The personal information are deleted six months after applicant’s employment was refused. In the event of an employment, applicant’s personal information are inserted in his personal file.

5.    Possibility of objection and deletion

In the event the person concerned sends us an application, the collecting of personal information can be revoked at any time. In such case the application and employment procedure cannot be continued.
All personal information collected in connection with the application and employment process are deleted.

 

XI. Disclosure of your personal information to third parties

We may use in some cases external service providers to design a most comfortable and user friendly website for your online visit. The following chapters inform you about DP regulations in concern of application and use of such services and functions, enabling you also to lodge your complaint towards such providers, if required.

1.    Google Maps

Our websites use Google maps for the presentation of maps and the preparation of direction sketches. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When using this website you accept that the information automatically registered and those which were entered by you are collected, processed and used by Google, one of their representatives or third providers. The conditions for the use of Google maps are under google.de/maps. More details you find in the data protection center under google.de: transparency and possibilities of selection as well as DP regulations.

 

XII. Rights of person concerned

According to the Art. and in connection with § 34 BDSG you have the unlimited right to be informed gratuitously about your personal information retained by us and according to § 35 BDSG the right that unallowed information are deleted or blocked and the right that incorrect information are corrected.
On request we are always prepared to inform you in writing whether and which personal information about you we retain. As far as possible we undertake appropriatee measures to update or correct your personal information retained by us. Please send  all requests for information or contradictions in concern of processing information by email with indication of your complete postal address directly to our officer in charge for DP control.
In the event your personal information are processed, you are a person concerned for the purpose of the DP regulations and  have the following rights towards the responsible.  

1.    Right to be informed

You are entitled to request a confirmation from the responsible whether personal information concerning you are processed by us.
In the event of our processing, you are entitled to request information from the responsible about:
  • For which purpose the personal information are processed
  • The categories of personal information being processed
  • The receivers or the categories of receivers to which the personal information concerning you were disclosed or shall be disclosed
  • The scheduled retention period of the personal information concerning you or if precise indication is not possible, the criterions for the determination of the retention period
  • The insisting on the right for correction or deletion of the personal information concerning you, the right for restricted processing by the responsible or the right to appeal against  processing
  • The existing of a right of appeal at a supervisory authority
  • All available information about the origin of the data  in cases the personal information are not collected from the person concerned
  • The existing of an automatic decision-making including profiling according Art. 22 para. 1 and 4 DP regulations and  – at least in these cases – valid information about involved logic as well as the significance and desired effects of such processing for the person concerned
You have the right to request information whether the personal information concerning you are transmitted to a third country or international organisation. In this connection you are entitled to request to be informed about the suitable guarantees according to Art. 46 DP regulations in relation with the transmission.

2.    Right to correction

You have the right to correction and/or completion towards the responsible as far as the personal information concerning you are incorrect or incomplete. The responsible has to execute correction without delay.

3.    Right to restriction of processing

Under the following conditions you have the right to request the restricted processing of your personal information:
  • In case you deny the correctness of the personal information concernng you for a period enabling the responsible to check the personal information to correctness
  • In case processing is unlawful and you refuse the deletion of the personal data and instead request to restrict the use of the personal data
  • In case the responsible does not longer need the personal information for the purpose of processing, however you require such information to enforce, exercise or defend legal claims or
  • In case you raised an objection according to Art. 21 para. 1 DP regulations and it is still open whether the justified reasons of the responsible prevail your own reasons.
In the event the processing of the personal information concerning you was restricted, such information – except for retention – may only be processed with your consent or  to enforce, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an essential public interest of the EU or a member state.
When the restriction of processing according to pre-named conditions was done, you shall be notified by the responsible before restriction is cancelled.

4.    Right to deletion

a)    Obligation to delete
You may request the responsible to delete the personal information concerning you without delay and the responsible is obliged to delete such information without delay as far as one of the following reasons is true:
  • The personal data concerning you are not longer necessary for the purpose they were collected or otherwise processed.
  • You revoke your acceptance on which processing according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DP regulations was based and another legal basis for processing is missing.
  • You raise an objection against processing according to Art. 21 para. 1 DP regulations and there are no justified reasons of priority for processing or you raise an objection against processing according to Art. 21 para. 2 DP regulations .
  • The personal information concerning you were processed unlawfully.
  • The deletion of the personal information concerning you is required to fulfill a legal obligation in compliance with EU right or the right of the respective member state the responsible is subject to.
  • The personal information concerning you were collected with reference to services offered by the information society according to Art. 8 para. 1 DP regulations.
b)    Information to third parties
In case the responsible disclosed the personal information concerning you and is obliged to delete them according to  Art. 17 para. 1 DP regulations, he undertakes adequate measures including the technical aspects, under consideration of available technology and implementation costs, to inform third responsibles which are processing the personal information about the fact that you as person concerned requested the deletion of  all links to such personal information or of copies or replicas of such personal information.
c)     Exceptions
The right for deletion is not given as far as processing is necessary in the event of
  • Right of free expression of opinion and information
  • Fulfillment of a legal obligation requiring the processing in compliance with the right of the EU or the member states, the responsible is subject to, or to undertake a task of public interest or in the exercise of public power that was entrusted to the responsible
  • Public interest in respect to public health according to Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 DP regulations
  • Purposes of archiving of public interest, scientifical or historical research or statistics according to. Art. 89 para. 1 DP regulations as far as the right mentioned under para a) is likely to make the realisation of the purpose of such processing  impossible or seriously affecs it or
  • Enforcing, exercising or defending legal claims.

5.    Right to be informed

In case you have enforced your right to correction, deletion or restriction in concern of processing towards the responsible, he is obliged to inform all receiving parties to which the personal information concerning you were disclosed about such correction or deletion of the personal information or the restriction of their processing, unless it turned out to be impossible or connected with an unproportional extent.
You are entitled towards the responsible to be informed about such receiving parties.

6.    Right to data transferability

You have the right to obtain your personal information you have provided to the responsible in a structurized, current and legible format. You are also entitled to transfer such information to another responsible without obstruction by the responsible to whom the information was provided, in so far as
(1)     processing is based on an acceptance according to. Art. 6 para. 1 lit. a DP regulations or Art. 9 para. 2 lit. a DP regulations or on a contract according to Art. 6 para. 1 lit. b DP regulations and
(2)     processing is effected by means of automated procedure.
In exercising this right you are further entitled to enforce that the personal information concerning you are directly transferred from one responsible to another responsible, as far as this is technically possible. Liberties and rights of other persons may not be affected  hereby.
The right for data transferability does not apply for the processing of personal information which is required to undertake a task of public interest or by exercising public power the responsible was entrusted with.

7.     Right to object

You have the right to object any time for reasons of a particular situation against the processing of your personal information carried out according to Art. 6 para. 1 lit. e or f DP regulations; this also applies for profiling based on such regulations.
The responsible no more processes your personal information, unless he testifies compulsory,  safety requiring reasons for their processing, prevailing your interests, rights and liberties or processing has the purpose of enforcing, exercising or defending legal claims.
In the event the personal information concerning you are processed for direct advertising you are entitled at any time to object against the processing of your personal information for the purpose of direct advertising; this also applies for profiling if related with such direct advertising.  
In the case you raise objection against the processing for the purpose of direct advertising, the personal information concerning you are no more processed for such purpose.  
You have the possibility in relation with the use of the services from the information society – notwithstanding the guideline  2002/58/EG – to exercise your right for objection by means of automated procedure, using technical specifications.

8.    Right to revoke DP binding acceptance

You have the right to revoke your DP binding acceptance at any time. Revoking your acceptance does not affect the legality of the processing executed so far due to your acceptance prior to revocation.

9.    Automated decision in individual cases including profiling

You have the right not to be subject to a decision that is solely based on automated processing - including profiling – developing a legal action against you or considerably influencing you in a similar way. This does not apply in cases where the decision
  • Is required for concluding or fulfilling a contract between you and the responsible,
  • Is allowed due to legal regulations of the EU or member states, the responsible is subject to, and the legal regulations include appropriate measures to secure your rights and liberties as well as your justified interests or  
  • Is done with your explicite consent.
However such decisions may not be based on special categories of personal information according to Art. 9 para. 1 DP regulations, unless Art. 9 para. 2 lit. a or g applies and adequate measures for securing the rights and liberties as well as your justified interests were undertaken.
With regard to the cases mentioned under (1) and (3) the responsible undertakes adequate measures, to secure the rights and liberties as well as your justified interests, whereby at least the right to enforce the intervention of an individual at responsible’s side to define his own position and to contest the decision is included.

10. Right to  complaint at a supervisory authority

Irrespective of any other remedies, administrative or legal appeals, you are entitled to make a complaint at a supervisory authority, especially in the member state of your place of residence, your place of work or the place of the presumptive breach, if you are of the opinion that the processing of the personal information concerning you violates the DP regulations.  
The supervisory authority where you made the complaint informs the appellant about status and results of the complaint including the possibility of a judicial remedy according to Art. 78 DP regulations.
The responsible supervisory authority at the registered office of the company is:
The Hamburg Responsible for Data Protection and Freedom of Information
Prof. Dr. Johannes Caspar
Klosterwall 6, 20095 Hamburg
Telefon:   040-42854-4040
Fax:        040-42854-4000
E-Mail:     mailbox(at)datenschutz.hamburg.de

 

XIII.        Miscellaneous

1.    Website pages in other languages

Our website offers some pages translated in other languages. This is only a service for our customers, interested parties, partners, staff members not having the necessary command of the German language.