Privacy policy

General information
Compliance with data protection laws is not only a legal obligation for the consultens Group, but also an important factor of trust. With the following data protection provisions, we would therefore like to inform you transparently about the type, scope and purpose of the personal data collected and processed by you within this website as well as your rights.

Contact for data protection issues: info@consultens.com

Your rights as a data subject

As a data subject, you have the following rights with regard to your personal data. You have:

-A right to information about the categories of data processed, the purposes of processing, the storage period and any recipients. (Art. 15 GDPR)
-A right to rectification or erasure of inaccurate or incomplete data. (Art. 17 GDPR)
-A right to restriction of processing where erasure is not possible or is disputed. (Art. 18 GDPR)
-A right to object to the processing if the data processing is based on a legitimate interest. (Art. 21 para. 1 GDPR)
-A right to withdraw consent given with effect for the future. (Art. 7 para. 3 GDPR)
-A right to data portability in a commonly used format. (Art. 20 GDPR)
-You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. (Art. 77 GDPR)

Data protection measures

We use technical and organizational measures to protect our website and other systems - and therefore also your data - against loss, destruction, access, modification or dissemination by unauthorized persons. In particular, your personal data is transmitted in encrypted form via the Internet. We use the TLS (Transport Layer Security) coding system for this.

However, the transmission of information via the Internet is never completely secure, which is why we cannot guarantee the security of the data transmitted from our website 100%.

Data processing

Data transfer to third countries outside the EU

All information that we receive from you or about you is generally processed on servers within the European Union. Your data will only be transferred to or processed in third countries without your express consent if this is provided for by law and an appropriate level of data protection is ensured in the third country.

Forwarding of data, commissioned data processing

In principle, we do not pass on your personal data to third parties unless,

-You have consented to the transfer of data or
-we are obliged due to
1. statutory provisions or
2. official or judicial orders

are entitled or obliged to disclose data. In particular, this may involve the provision of information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

We may also transfer your data to external service providers (processors) in order to simplify our own data processing. In this case, this processor is contractually obliged in accordance with Art. 28 GDPR, which means in particular that the processor must provide sufficient guarantees that suitable technical and organizational measures are implemented by it in such a way that the processing is carried out in accordance with the requirements of the GDPR and the protection of your rights as a data subject is guaranteed. Despite commissioning processors, we remain the controller within the meaning of the data protection laws for the processing of your personal data.

Types, purpose and storage duration of data, legal basis

Server log files

Each time you visit our website, the following general information is automatically transmitted from your browser to our server (so-called server log files): IP address, product and version information about the browser and operating system used, the website from which you accessed our website (so-called referrer), date and time of the request and, if applicable, your internet service provider. In addition, the status and the amount of data transferred as part of this request are recorded.

The IP address of your computer is only stored for the duration of your use of the website and is then immediately deleted or made partially unrecognizable by shortening it. The remaining data is stored for a limited period of time (maximum 7 days).

The legal basis for the use of server log files is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from the necessity for the operation of our website, in particular to detect and eliminate errors on the website, to determine the utilization of the website and to make adjustments or improvements and to ensure the security of the system.

There are several places on our website where you can contact us directly. By submitting the contact form or sending us an email, you consent to the processing and storage of the data you enter (in particular your email address). We process the data you transmit to us exclusively until the respective purpose of your contact has been achieved, but for a maximum of 7 days after the purpose has been achieved. You can object to this processing at any time with effect for the future. To do so, please use our contact details in the legal notice.

The legal basis for the use of the data you transmit to us via the contact form is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject).

We use so-called "cookies" to improve the user-friendliness of our website. Put very simply, a cookie is a small text file that stores data about websites visited. Cookies store a kind of "user profile", i.e. things such as your preferred language and other page settings that are required by our website in order to be able to offer you certain services. This file is stored on your computer by our website and helps us to recognize you when you return to our website. Cookies also provide us with information about your preferred activities on our website, enabling us to tailor our website to your individual interests and speed up the processing of your requests.

You can delete cookies manually at any time in the security settings of your browser. You can also prevent the storage of cookies from the outset by selecting the appropriate settings in your browser. Please note, however, that you may then not be able to use all the functions of our website to their full extent. If you only want to accept our own cookies, but not cookies from our processors, you can prevent the storage of these cookies by selecting the appropriate setting "Block third-party cookies".

The legal basis for the use of cookies is generally Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to be able to offer you a user-friendly website.

Third party services

We use third-party services on our website, such as plugins or APIs (Application Programming Interface), to extend the functionality of our website. In doing so, data may be transmitted to the provider of these services. Specifically, we use the following services:

Google services

Our website uses the following service(s) provided by Google LLC ("Google"), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google fulfills the requirements of the "EU Privacy Shield". The Privacy Shield agreement regulates the protection of personal data that is transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union. You can access the list of certified companies here: https://www.privacyshield.gov/list. You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

Our website uses the external font service "Google Fonts" from Google. This service enables us to display our website in a uniform and appealing way, even with very differently configured user devices, by loading fonts from an external server instead of from the user's device. For this purpose, the required fonts are usually requested from a Google server in the USA. This request causes the following information to be transmitted to the Google server and stored there: The one of our Internet pages that you have visited and the IP address of your end device. The legal basis for the processing of your data in relation to the "Google Fonts" service is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for an appealing and uniform presentation of our online offering.

Our website uses the external map service "Google Maps" from Google. Google Maps is used to provide an interactive map on our website that shows you how to find and reach us. This service enables us to present our website in an appealing way by loading map material from an external server. The required data is usually requested from a Google server in the USA. This request usually results in the following information being transmitted to a Google server in the USA and stored there for several months: The one of our Internet pages that you have visited and the IP address of your end device. The legal basis for the processing of your data in relation to the "Google Maps" service is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for an appealing presentation of our online offer and the ease of finding the places indicated on our homepage.

Our website uses the "Google reCAPTCHA" abuse protection service from Google. reCAPTCHA is used to prevent cyberattacks and harassment by so-called "bots" (artificial website users) by using an input field to check whether it is a real person visiting the website. This service enables us to operate our website in a stable manner and protect it from misuse. For this purpose, the data entered is usually transferred to a Google server in the USA and processed there for verification. This request usually results in the following information being transmitted and stored there for several months: The one of our Internet pages that you have visited, your entry in the input field and the IP address of your end device. The legal basis for the processing of your data in relation to the "Google reCAPTCHA" service is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to effectively protect our online offering from cyber attacks and misuse.

Status of the privacy policy: 03.12.2018

Privacy policy

​