DATA PROTECTION POLICY
All personal information will be handled confidentially. Our data protection practice is in accordance with the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (DSGVO). Below we inform you about the details of data protection:
Responsible official according to the DSGVO and BDSG
BludauPartners Executive Consultants GmbH
60486 Frankfurt am Main
Responsible contact official is
BludauPartners Executive Consultants GmbH
60486 Frankfurt am Main
1. REASONS FOR DATA COLLECTION
We collect and process your information to provision our website and to provide you with the best possible service through convenient access to our services.
2. WHAT DATA WILL BE COLLECTED, PROCESSED OR UTILISED?
2.1. VISIT OUR WEBSITE
When you access our web pages, our servers automatically collect information of a general nature, especially for the purpose of connection setup, functionality, and system security. This includes the type of browser used, the operating system used, the domain name of the Internet service provider, the connection data of the computer used (IP address), the website from which you visit us (referrer URL), the pages, you visit with us and the date and duration of the visit. Conclusions from this data on certain persons are not possible for us due to a pseudonymisation. A merge of this data with other data sources will not happen. The data will be deleted after 100 days.
The provision of our website is carried out on our behalf by our service provider. Data processed on our website is thus processed on our behalf on the servers of our service provider, with which there is a contract for the processing of orders. Processing on servers of other service providers is only carried out if this is explicitly stated in this date protection policy.
Our service provider is located within a country of the European Union or the European Economic Area.
2.2. CONTACT FORM
If you contact us via the contact form, you must provide us with your first name, surname, e-mail address, the subject and message. The mandatory information is indicated by an asterisk. All other details are optional. The data will be stored for the purpose of processing your request. We will not share this information without your consent. We delete the data accrued in this context after storage is no longer required, or restrict the processing if there are statutory retention requirements. If you contact us via the contact form, you must provide us with your first name, surname, e-mail address, the subject and message. The mandatory information is indicated by an asterisk. All other details are optional. The data will be stored for the purpose of processing your request. We will not share this information without your consent. We delete the data accrued in this context after storage is no longer required, or restrict the processing if there are statutory retention requirements.
Personal data will be deleted or blocked, as soon as the purpose of the storage lapses or you request the deletion. A deletion of the data takes place also even, if a storage period prescribed by the above-mentioned standard expires, unless there is a need for further storage of the data for contract conclusion or fulfilment of the contract or you have given your consent.
In order to make the use of the websites and preferences of website visitors attractive, cookies are used. This, for example, saves your information for selecting a language. Cookies are text files that are created on your hard disk to allow the browser to be identified when the website is re-loaded.
You can prevent the storage of cookies on your hard disk by making appropriate browser settings. Cookies already installed can be deleted at any time. For how to delete cookies or prevent their storage, please refer to the respective browser instructions. If you do not accept cookies, this may affect your use of our website. The legal basis for the processing of cookies is art. 6 para. 1 lit. f) DSGVO.he processing of cookies is Art. 6 para. 1 lit. f) DSGVO.
5. DATA SECURITY
We secure our website and other systems through technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Depending on the browser used, the data is transmitted using 128-bit to 256-bit SSL encryption. Despite regular checks and continuous improvement of our security measures, complete protection against all dangers is not possible.
We collect and process personal data of candidates for the purpose of conducting our selection procedures conducted on behalf of our clients. The processing can also be done electronically. This is always the case if the candidate submits application documents to us electronically, ie by e-mail.
7. USE OF GOOGLE ANALYTICS FOR WEB ANALYSIS
This website uses Google Analytics, a web analytics service provided by Google Inc. (www.google.de). Google Analytics uses so-called “Cookies”, text files stored on your computer which allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement in the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided to Google Analytics from your browser will not be merged with other Google data. You can prevent the storage of cookies using a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. The data will be deleted after XX months. The legal basis for the use is art. 6 para. 1 sentence 1 lit. f) DS-GMO.
In addition, you may prevent the collection by Google of the data generated by the cookie, related to your use of the website (including your IP address) and the processing of this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=en.
8. INVOLVEMENT OF GOOGLE MAPS
On this website we use the Google Maps service. This allows us to show you interactive maps directly on the website and allow you to conveniently use the map feature. By visiting the website, Google receives the information that you have accessed through the corresponding subpage of our website. In addition, the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (concrete page), access status/ HTTP status code, each amount of data transferred, the website the request comes from, browser, operating system and its interface, language and version of the browser software will be transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/ or tailor-made website design. Such analysis is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website.
You have a right of objection to the development of these user profiles, which you must address to Google.
For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the provider's data protection policy. You can also find more information about your rights and privacy protection settings here: http://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the United States and adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.
The legal basis for processing is art. 6 para. 1 lit. f) DSGVO.
9. SOCIAL MEDIA
On our websites we link our social media pages of the providers listed below. A transmission of data by us does not take place. For a visit on each page, the data protection policy of the respective provider applies. The links can be recognised by the fact that they are marked with the relevant logo. We have integrated the social media links of the following companies on our website:
Facebook Inc. (1601 S. California Ave - Palo Alto - CA 94304 - USA), http://www.facebook.com/policy.php; further information about data collection http://www.facebook.com/help/186325668085084. Facebook adheres to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.
Twitter, Inc. (1355 Market St, Suite 900, San Francisco, California 94103, USA), https://twitter.com/de/privacy#update. Twitter adheres to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.
YouTube LLC (901 Cherry Ave.,San Bruno, CA 94066 USA), https://www.google.de/intl/de/policies/privacy. Google also processes your personal information in the USA and adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Instagram LLC (1 Hacker Way, Building 14 First Floor, Mento Park, CA, USA), https://help.instagram.com/519522125107875?helpref=page_content. Responsibility for data protection rights lies with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA), https://www.linkedin.com/legal/privacy-policy. LinkedIn also processes your personal information in the USA and adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
10. RIGHTS OF THE AFFECTED PERSON
If your personal data is processed, you are the person affected according to DSGVO and you have the following rights from the responsible official:
10.1. RIGHT TO INFORMATION
You may ask the responsible official to confirm if personal data concerning you is processed by us.
If such processing is happening, you can request information from the responsible official about the following information:
- the purposes for which the personal data is processed;
- the categories of personal data that is processed;
- the recipients or categories of recipients to whom the personal data relating to you has been disclosed or is still being disclosed;
- the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
- the existence of a right to rectification or deletion of personal data concerning you, a right to restriction of processing by the responsible official or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- all available information on the source of the data if the personal data is not collected from the concerned official.
10.2. RIGHT TO RECTIFICATION
You have a right to rectification and/ or completion from the responsible official, if the personal data processed that concerns you is incorrect or incomplete. The responsible person must make the correction without delay.
10.3. RIGHT TO RESTRICTION OF PROCESSING
You may request the restriction of the processing of your personal data under the following conditions:
- if you contest the accuracy of your personal information for a period of time that enables the responsible official to verify the accuracy of your personal information;
- the processing is unjust and you reject the deletion of the personal data and instead request the restriction of the use of the personal data;
- the responsible official no longer requires personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
- • if you object to the processing in accordance with art. 21 para. 1 DSGVO and it is not yet certain whether the legitimate reasons of the responsible official for their decision prevail against your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the EU or a Member State.
If the restriction of the processing according to the conditions are restricted, you will be informed by the responsible official before the restriction is lifted.
10.4. RIGHT TO DELETION
DUTY TO DELETE
You may require the responsible official to delete your personal information without delay, and the responsible official is required to delete that information immediately if one of the following applies:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You revoke your consent to the processing acc. art. 6 para. 1 lit. a) or art. 9 para. 2 lit. (a) GDPR and there is no other legal basis for the processing.
- The apply acc. art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or applies to you acc. art. 21 para. 2 DSGVO opposition to processing.
- Your personal data has been processed unjustly.
- The deletion of personal data concerning you is required to fulfil a legal obligation under EU law or the law of the Member States to which the responsible official is subject.
- Your personal data collected relating to services by the information society provided in accordance with art. 8 para. 1 DSGVO.
INFORMATION TO THIRD PARTIES
If the responsible official who has made the personal data concerning you public and is acc. art. 17 (1) GDPR, shall take appropriate measures, including technical means, to inform the responsible data officials who process the personal data that they are responsible for the deletion of your data, taking into account available technology and implementation costs you have requested the deletion of any links to such personal data or copies or replications of such personal data.
The right to deletion does not exist if the processing is necessary
- to exercise the right to freedom of expression and information;
- - to fulfil a legal obligation required by the law of the EU or of the Member States to which the responsible person is subject, or to carry out a task of public interest or in the exercise of official authority conferred to the responsible official;
- for reasons of public interest in the field of public health, in accordance with art. 9 para. 2 lit. h) and i) as well as art. 9 para. 3 DSGVO;
- to assert, exercise or defend legal claims.
10.5. RIGHT TO INFORMATION
If you have the right of rectification, deletion or restriction of processing from the responsible official, he/ she is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort. You have a right to be informed about these recipients by the responsible official.
10.6. RIGHT TO DATA TRANSFERABILITY
You have the right to receive personally identifiable information you provide to the responsible official in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the official who is responsible for providing the personal data, provided that
- the processing is consented to acc. art. 6 para. 1 lit. a DSGVO or art. 9 para. 2 lit. a) DSGVO or in another contract acc. art. 6 para. 1 lit. b) DSGVO based on
- automated procedures.
In exercising this right, you also have the right to require that your personal data relating to you is transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
10.7. RIGHT TO OBJECT
You have the right at any time, for reasons that arise from your particular situation, to prevent the processing of your personal data, which, pursuant to art. 6 para. 1 lit. e) or f) DSGVO, objection is lodged; this also applies to profiling based on these provisions.
The responsible official will no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
If the personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
10.8. RIGHT TO REJECT THE DATA PROTECTION CONSENT DECLARATION
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
10.9. RIGHT OF COMPLAINT TO A SUPERVISORY AUTHORITY
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of where it is registered, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you violates the DSGVO.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy according to art. 78 DSGVO.