Privacy policy

 

We process personal data (below referred to usually simply as “data”) only when it is necessary and for the purpose of providing a functional, user-friendly website, including its content and the services listed there.

According to Article 4 Sentence 1 of Regulation (EU) 2016/679, the General Data Protection Regulations (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

In the following privacy policy, we will inform you of the type, scope, purpose, duration, and legal basis of personal data processing to the extent we decide, alone or with others, on the purposes and means of processing. We will also inform you below of the third-party components we use for optimization purposes and for enhancing quality of use to the extent that they involve third parties processing data under their own responsibility.
Our data protection declaration is organized as follows:

I. Information about us as a controller
II. Rights of users and data subjects
III. Information about data processing

I. Informationen about us as Controllers of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:

 

Hanselmann & Compagnie GmbH
Hohnerstraße 23
70469 Stuttgart
Germany

Phone: +49 711 80 60 90 00
Fax: +49 711 80 60 90 10
E-mail: info@hcie-consulting.de

The provider's data protection officer is:

Thomas Degen
E-Mail: datenschutz@hcie-consulting.de

II. Rights of users and data subjects

With respect to the data processing that will be explained in more detail below, users and data subjects have the right

  • to confirmation of whether their data is being processed, to access to the processed data, to further information about data processing, and to copies of the data (cf. Art. 15 of the GDPR);
  • to rectification or completion of inaccurate or incomplete data (cf. Art. 16 of the GDPR);
  • to immediate erasure of data concerning them (cf. Art. 17 of the GDPR) or, alternatively, if further processing is necessary in accordance with Art. 17 (3) of the GDPR, to restriction of processing according to Art. 18 of the GDPR;
  • to obtain the data concerning them that they have provided and to have the same transmitted to other providers/controllers (cf. Art. 20 of the GDPR);
  • to issue a complaint to the supervisory authority if they believe that the provider is processing the data concerning them in violation of data protection provisions (cf. Art. 77 of the GDPR)

The provider is also obligated to inform all recipients to whom the provider has disclosed data of any rectification or erasure of data or restriction of processing imposed based on Art. 16, Art. 17 (1), or Art. 18 of the GDPR. There is no such obligation if such notification is impossible or associated with disproportionate cost and effort. Nevertheless, the user has the right to access to the identities of these recipients.

According to Art. 21 of the GDPR, users and data subjects also have the right to object to future processing of data concerning them if the provider processes the data according to Art. 6 (1) Letter (f) of the GDPR. In particular, objection to data processing for the purposes of direct marketing is allowed.

III. Information about data processing

The data processed when you use our website will be deleted or locked as soon as the purpose of its storage no longer exists, no retention obligations prevent its erasure, and no other information about individual processing methods is given below.
 

Cookies

a) Session-Cookies

Our website uses so-called cookies. Cookies are small text files or other storage technologies that are sent from the browser you use to your terminal device and stored there. These cookies process an individual scope of certain information about you such as your browser or location data or your IP address.

This processing makes our website more secure, effective, and user-friendly, since it allows such services as the representation of our website in various languages and our shopping cart service.

The legal basis for this processing is Article 6 (1) Letter (b) of the GDPR if these cookies process data for contract initiation or contract processing.

If processing does not serve contract initiation or contract processing, our legitimate interest is in improving the functionality of our website. The legal basis for this is Art. 6 (1) Letter (f) of the GDPR.

When you close your browser, these session cookies are deleted.

b) third-party Cookies

Our website sometimes also uses cookies from partner companies with whom we collaborate for the purposes of advertisement, analysis, and website functionality.

Details about this use, especially about the purposes and legal basis of processing of such third-party cookies, can be found below.

c) Elimination Options

You can prevent or restrict cookie installation with your browser settings. You can also, at any time, delete cookies that have already been saved. The steps and measures necessary to do this depend on the specific browser you use, however. If you have questions, use your browser’s help function or documentation or contact the manufacturer or support staff. The processing of so-called flash cookies, however, cannot be prevented via browser settings. Instead, you must make appropriate changes to your flash player settings. The steps and measures necessary to do this depend on the specific flash player you use. If you have questions, use your flash player’s help function or documentation or contact the manufacturer or user support staff.

If you do choose to limit or prevent cookie installation, it may mean that you are not able to use all functions of our website to their full extent.
 

Newsletter

If you sign up for our free newsletter, the data we request from you (your e-mail address and, optionally, your name and address) are sent to us. At the same time, we save the IP address of the internet connection from which you access our website and the date and time of your access. As part of the further sign-up process, we will obtain your consent to our sending the newsletter, describe the content specifically, and make reference to this data protection declaration. The data collected in this process is exclusively for sending the newsletter and will therefore not be shared with third parties.

The legal basis here is Article 6 (1) Letter (a) of the GDPR.

You can revoke your consent to the newsletter being sent to you in the future in accordance with Art. 7 (3) of the GDPR. To do this, you need only make us aware of your revocation or click the unsubscribe link included in each newsletter.
 

Contact requests/ contact opportunities

If you contact us with the contact form or via e-mail, the data you provide will be used to process your query. Data provision is necessary to process and respond to your query – if you do not provide it, we are limited in our ability to respond.

The legal basis for this processing is Article 6 (1) Letter (b) of the GDPR.

You data will be deleted if we are able to provide a final answer to your query and no legal retention obligations (as would be present if the query led to contract processing) prevent the erasure.
 

Google Analytics

We use Google Analytics on our website. It is a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

With its certification according to the EU-US Privacy Shield,

https://www.privacyshield.gov/participant?id=a2zt0...

Google guarantees that the EU’s data protection requirements will be complied with when data is processed in the U.S.
The Google Analytics service serves to analyze usage behavior on our website. The legal basis is Art. 6 (1) Letter (f) of the GDPR. Our legitimate interest is analyzing and optimizing our website and operating it economically.

Usage-related and user-related information such as IP address, location, time, and frequency of visits to our website are transmitted to a Google server in the U.S. and stored there. However, we use Google Analytics’s anonymization function. With this function, Google truncates the IP address while it is still within the EU or EEA.

Google uses the data thus collected to provide us with an analysis of the visit to our website and the user activity on it. This data can also be used to provide other services associated with the use of our website and of the internet.

Google asserts that it will not associate your IP address with other data. Moreover, at

https://www.google.com/intl/de/policies/privacy/pa...

Google provides other data protection information for you such as the opportunity to prevent data usage.

In addition, at

https://tools.google.com/dlpage/gaoptout?hl=de

Google offers a so-call disabling add-on and other information. This add-on can be installed with commonly used browsers, and it offers you more extensive control of the data that Google collects when our website is called. The add-on tells the Google Analytics JavaScript (ga.js) that information concerning the visit to our website is not to be transmitted to Google Analytics. However, this does not prevent your information from being transmitted to other web analysis services. This data protection declaration will also tell you whether we use web analysis services and which services we use, of course.
 

Google-Maps

We use Google Maps on our website to show our location and to generate directions to it. It is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

With its certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt0...

Google guarantees that the EU’s data protection requirements will be complied with when data is processed in the U.S.

To allow the display of certain fonts on our website, a connection to the Google server in the U.S. is established when our website is accessed.

If you access the components of Google Maps integrated into our website, Google saves a cookie to your terminal device via your browser. To display our location and prepare directions to it, your user settings and data are processed. We cannot rule out the possibility that Google uses servers in the U.S.

The legal basis is Art. 6 (1) Letter (f) of the GDPR. Our legitimate interest is optimizing our website’s functionality.

The connection to Google thus established allows Google to determine from which website your request has been sent and to which IP address the directions are transmitted.

If you do not consent to this processing, you have the option of preventing cookie installation via the appropriate settings on your browser. You can find details in the “Cookies” section above.

The use of Google Maps and the information acquired via Google Maps is according to the Google Terms of Service https://policies.google.com/terms?hl=en and the Google Maps Terms of Service https://www.google.com/intl/en_en/help/terms_maps.html.

Moreover, at

 

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

Google provides further information.
 

Online Job applications/ publication of job advertisements

We offer you the opportunity of applying for a job via our website. This digital application process involves the electronic collection and processing of your application data in the interest of conducting the job application procedure.

The legal basis for this processing is § 26 (1) Sentence 1 of the BDSG in connection with Art. 88 (1) of the GDPR.

If a contract is concluded following the application procedure, we will store the data you have sent us during the application in your personnel file for the purpose of standard organizational and administrative activities. We will of course comply with other legal requirements.
The legal basis for this processing is also § 26 (1) Sentence 1 of the BDSG in conjunction with Art. 88 (1) of the GDPR.
If we decline an application, we will automatically delete the data sent to us two months after we notify you that it has been declined. There will, however, be no erasure if the data is required to be stored longer (up to four months) due to legal provisions such as duties of proof according to the General Equal Treatment Act (AGG), or until the conclusion of a legal proceeding.

The legal basis in this case is Art. 6 (1) Letter (f) of the GDPR and § 24 (1) No. 2 of the BDSG. Our legitimate interest is legal defense or enforcement.

If you explicitly consent to the storage of your data for a longer period, such as during participation in a database of interested parties or applicants, your data will be processed on the basis of your consent. The legal basis is then Article 6 (1) Letter (a) of the GDPR. You can, of course, revoke your consent to future data storage in accordance with Art. 7 (3) of the GDPR by sending us a statement.