Privacy Policy
expertree consulting GmbH values
This applies to personal data that you provide to expertree and data derived from such data. Please note that where applicable legal provisions and your rights are explained in this notice, this only applies to personal data processed in accordance with the EU General Data Protection Regulation. If the processing of your personal data is not subject to this regulation, other regulations apply depending on the law that applies to you.
The use of information obtained during your visit to our website using cookies or other web tracking technologies is subject to our Cookie Policy, which is published on our website.
Who is responsible for your personal data?
expertree consulting GmbH
Lena-Christ-Straße 2
82031 Grünwald
Tel.: +49 89 120 86 375
Email: [email protected]
Represented by: Manuel Köhler
Data Protection Officer
If you have specific questions about protecting your data, please contact:
expertree consulting GmbH
Mr. Dirk Seeliger
Lena-Christ-Straße 2
82031 Grünwald
Tel.: +49 89 120 86 375
Email: [email protected]
Protection of your data
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Processing of personal data
a) When visiting the website
Every time you access our website, we automatically collect data and information from your device’s system and store it in so-called server log files. This data is information that relates to an identified or identifiable natural person (here: website visitor). The data is automatically transmitted by your respective browser when you access our website. This includes the following information:
- Referrer (previously visited website)
- Requested web page or file
- Browser type and browser version
- Operating system used
- Device type used
- Time of access
- IP address in anonymized form (only used to determine the location of access)
The data mentioned will be processed by us for the following purposes:
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To do this, the user’s IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems. The data will not be evaluated for marketing purposes in this context.
The recipient of the data is our server host, which works for us within the framework of an order data agreement. We use IONOS by 1&1 (IONOS SE, Elgendorfer Str. 57, 56410 Montabaur) to host this website.
The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. The data will be deleted after 8 weeks. At no time will your data be passed on to third parties.
In addition, when you visit the website, we use analysis services that set cookies. You can find further explanations in this data protection declaration.
b) When using the contact form
If you have any questions, we offer you the opportunity to contact us using a form provided on our website.
In this context, we process the following data: name, email address. If you provide additional personal data in the message field, it will be collected and processed with the same care as your name and email address.
This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration.
The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the legal basis for the processing is Article 6 (1) (b) GDPR.
Your data will be deleted after your request has been finally processed; this is the case if it can be seen from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations to the contrary.
c) Contact us by email
You have the option to get in touch via email. If you contact us by email, your email address, time of the email and the data resulting from the message text (including attachments, if applicable) will be processed.
The purpose of processing the above-mentioned data is to process the contact request and to be able to contact the person making the request in order to answer the request.
The legal basis for the processing of personal data described here is Article 6 (1) (f) GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to answer your inquiries.
If your contact is aimed at concluding a contract, the legal basis for the processing is Article 6 Paragraph 1 Sentence 1 Letter b GDPR.
Your data will be deleted after your request has been processed, as long as it can be seen from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention periods to the contrary.
Any additional personal data collected will be deleted regularly, but no later than after seven days.
d) Contact by post
You have the option of contacting us by post. If you contact us by post, your address data, such as last name, first name, street, postal code, date and time of receipt, as well as the data resulting from your letter itself will be processed.
The purpose of processing the above-mentioned data is to process the contact and to be able to get in touch with the inquirer in order to answer the request.
The legal basis for the processing of personal data described here is Article 6 (1) (f) GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to answer your inquiries.
If your contact is aimed at concluding a contract, the legal basis for the processing is Article 6 Paragraph 1 Sentence 1 Letter b GDPR.
Your data will be deleted after your request has been processed, as long as it can be seen from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention periods to the contrary.
Any additional personal data collected will be deleted regularly, but no later than after seven days.
e) Contact by telephone
You have the opportunity to contact us by telephone. If you contact us by telephone, in particular your telephone number and, if necessary, your name, your email address, the time of the call and information about your request will be processed during the conversation.
The purpose of processing the above-mentioned data is to process the contact and to be able to get in touch with the inquirer in order to answer the request.
The legal basis for the processing of personal data described here is Article 6 (1) (f) GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to answer your inquiries.
If your contact is aimed at concluding a contract, the legal basis for the processing is Article 6 Paragraph 1 Sentence 1 Letter b GDPR.
Your data will be deleted after your request has been processed, as long as it can be seen from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention periods to the contrary.
Any additional personal data collected will be deleted regularly, but no later than after seven days.
f) Order newsletter
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter: “CleverReach”). CleverReach is a service that can be used to organize and analyze newsletter distribution. The data you enter to receive the newsletter (e.g. email address) is stored on CleverReach’s servers in Germany and Ireland.
Our newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. Among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a pre-defined action (e.g. purchasing a product on this website) took place after clicking on the link in the newsletter. Further information on data analysis through the CleverReach newsletter can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/ .
Data processing is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
If you do not want analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
The data you provide to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected.
After you have been unsubscribed from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interests
For more information, please see CleverReach’s data protection regulations at: https://www.cleverreach.com/de/datenschutz/ .
Transfer of personal data to third parties
In order to process your request efficiently, we may share your personal data with the following recipients for different purposes and through different ways in accordance with local laws and regulations:
- Public bodies to which the data must be transmitted due to legal regulations (e.g. financial authorities, supervisory authorities, possibly law enforcement authorities)
- Banks, insurance companies
- Contractors (service companies, such as IT service providers, which could be located within or outside of expertree consulting GmbH)
- Marketing technology platforms
- Logistics company
However, in cases where your personal data is passed on to third parties, the scope of the data transmitted is limited to the necessary minimum.
We will only pass on your personal data to third parties if:
- you have given your express consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,
- the disclosure in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- There is a legal obligation for the transfer in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR, as well as
- This is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR.
Cookies
We use cookies on our website. Cookies are small data sets that are stored on your device, for example to make the use of a website more comfortable or to recognize the user’s device and save settings, etc. Cookies can be used to store entries and settings on a website so that you do not have to enter them again each time you visit a website. Cookies contain a so-called cookie ID, which makes it possible to identify the device in which the cookie was stored.
Cookies help us to make our online offering user-friendly and tailor-made. We use our own cookies and cookies from third-party providers. You have the option to configure the setting of cookies at any time.
You can restrict the setting of cookies or prevent them entirely in your browser settings. You can also have cookies automatically deleted when you close the browser window. You can find out how to delete cookies in the most common browsers and change the cookie settings here:
- Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
- Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne
- Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
- Safari: https://support.apple.com/kb/ph21411?locale=de_DE
- Opera: https://help.opera.com/Windows/10.20/de/cookies.html
Google Analytics
We use the analysis tracking tool Google Analytics from the US company Google Inc. on our website. Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for Europe. The service uses “cookies” – text files that are stored on your device. The information collected by cookies is usually sent to a Google server in the USA and stored there
What data is collected by Google Analytics?
- Language
- country
- Location
- Browser
- operating system
- Internet provider
- Screen resolution
We only use Google Analytics with activated IP anonymization (“anonymize IP”). As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Information about the cookie types used by Google can be found at: https://policies.google.com/technologies/types
What data can Google also collect?
If you are logged into your Google Account, depending on your account settings, Google may add the processed information to your account and treat it as personal data. Google states, among other things, the following:
“If you are not signed in to a Google Account, we store the data we collect with unique identifiers associated with the browser, app or device you use. This allows us, for example, to ensure that your language settings are retained across all browser sessions. If you are logged into a Google account, we also collect data that we store in your Google account and consider to be personal data.” ( https://privacy.google.com/take-control.html )
You can prevent this data from being added directly by logging out of your Google account or by making the appropriate account settings in your Google account. You can also change your cookie settings (e.g. delete cookies, block them, etc.).
Further information can be found in Google’s data protection information, which you can access here: https://www.google.com/policies/privacy/
Information about Google’s privacy settings can be found at: https://privacy.google.com/ take-control.html
Legal basis
The legal basis for the processing of personal data described here as part of the analysis tracking tool Google Analytics is your express consent in the cookie banner in accordance with Article 6 Paragraph 1 Letter a) GDPR. In addition to the consent you have given in accordance with Article 6 Paragraph 1 Letter a) GDPR, we have a legitimate interest in analyzing the behavior of website visitors and improving our offering technically and economically. The legal basis for this is Article 6 Paragraph 1 Letter f) GDPR. Of course, your personal data will only be collected via Google Analytics if you have given us your consent in advance via the cookie consent tool.
According to data processing for recipients based in third countries, in relation to the USA, there is no adequacy decision in accordance with Art. 45 GDPR. However, the transfer can be based on standard contractual clauses, Art. 46 Para. 2 lit. c) GDPR. Google is committed to complying with the standard contractual clauses for the transfer of personal data to third countries issued by the European Commission. We have entered into the above standard contractual clauses with Google.
Further information can be found at: https://policies.google.com/privacy/frameworks?hl=de
How long is the data stored?
The retention period we selected is 14 months. With this setting we have chosen the shortest storage period provided by Google.
Social media links
Social networks (LinkedIn, XING, kununu and Instagram) are only integrated on our website as links to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the respective provider’s website. Only after forwarding is user information transferred to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective data protection regulations of the providers you use.
Your rights
Right to information
According to Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information mentioned in Art. 15 GDPR.
Right to rectification
According to Art. 16 GDPR, you have the right to immediately request that we correct incorrect personal data that concerns you. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed – including by means of a supplementary statement.
Right to deletion
You have the right to request the deletion of your data if the conditions specified in Art. 17 GDPR are met. You can then, for example, request that your data be deleted if it is no longer necessary for the purposes for which it was collected. You can also request deletion if we process your data based on your consent and you withdraw that consent.
Right to restriction of processing
You have the right to request that the processing of your data be restricted if the requirements of Article 18 GDPR are met. This is the case, for example, if you dispute the accuracy of your data. You can then request that processing be restricted for the duration of the verification of the accuracy of the data.
Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible, to the extent that this is technically feasible.
Right to object
If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 Para. 3 GDPR. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this. Please also note that we may need to retain certain data for a certain period of time to comply with legal requirements.
Right to complain
If you are of the opinion that the processing of your personal data violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR, in particular in the member state in which you reside, Your place of work or the location of the alleged violation.
The responsible supervisory authority is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Email: [email protected]
Telephone: 0 981 180093-0
Updates to this Privacy Policy
This privacy policy was last updated in September 2022. We reserve the right to update and change this privacy policy at any time to reflect how we use your personal information or changes in legal requirements. In the event of such changes, we will publish the revised privacy policy on our website. Any amended information will be effective from the date it is posted on our website.
Effective and easy-to-use IT security management system based on the latest standards and regulations — from planning and establishing the security concept to certification.
