DATA PROTECTION INFORMATION

PRIVACY POLICY

The protection of your personal data during the collection, processing and use on the occasion of your visit to our homepage is an important concern for us.

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection notice.

We point out that data transmission over the Internet (eg communication by e-mail) security gaps. Complete protection of data against access by third parties is not possible.

In the following, you will learn when which data is collected and how it is used (type, scope and purpose of the processing of personal data) within our online offer and the associated websites, functions and content.

WHO IS RESPONSIBLE FOR PROCESSING?

PiAL Consult GmbH
ABC Straße 15
20354 Hamburg
Telefon: +49 (40) 3501884-0
E-Mail: info@pial-consult.com
represented by the managing directors Johannes Keplinger, Sebastian Schliewen

Data Protection Officer

Mauß Datenschutz GmbH, Neuer Wall 10, 20354 Hamburg, Germany, is responsible for professional data protection.
You can reach our data protection officer by post or by telephone: +49 (0) 40 999 99 52-0 and by
E-Mail: datenschutz@datenschutzbeauftragter-hamburg.de

DEFINITION OF TERMS

“Personal data” means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

“Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.

“Profiling” means any type of automated processing of personal data where such data is used to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects of that natural person’s job performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or change of location

or predict.

“Pseudonymization” means the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the addition of further information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the data cannot be attributed to a data subject.

“Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

TYPES OF DATA PROCESSED:

• browser type and version
• operating system used
• referrer URL (from which internet page you came to our homepage)
• which sub-pages of the website were accessed
• how often and for how long a sub-page was viewed
• host name of the accessing computer
• time of the server request
• IP address

We, or rather our hosting provider, collect data on accesses to the server on which this service is located on the basis of our legitimate interests within the meaning of Art. 6 (1) lit. f DSGVO for the purpose of evaluating your surfing behavior using an analysis tool.

CATEGORIES OF DATA SUBJECTS

Visitors and users of the online offer (hereinafter “users”).

PURPOSE OF PROCESSING

Provision of the online offer, its functions and content, optimization of the website, cost-benefit analysis of internet advertising.

INQUIRIES BY E-MAIL, TELEPHONE, TELEFAX, MAIL

When you contact us by e-mail, telephone, fax or mail, the data you provide will be stored by us in order to answer your questions. The legal basis for this is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f DS-GVO. If your request serves the conclusion, fulfillment or termination of a contract with us to which you are a party, the further legal basis for the processing is Art. 6 (1) lit. b DS-GVO. The data will be deleted after your request has been dealt with. Should a contractual relationship arise between you and us based on your inquiry, we will store the data beyond that for as long as it is necessary for the fulfillment of the contract. If we are legally obligated to store the data for a longer period of time, the data will be deleted after the expiration of the corresponding period of time.

HOSTING AND CONTENT DELIVERY NETWORKS (CDN)

In order to provide you with our product “Your Space”, we use a service provider (web hoster) who processes your data on our behalf and exclusively in accordance with our instructions: netcup GmbH, Daimlerstraße 25, D-76185 Karlsruhe (https://www.netcup.de/).

Cloudfront

Javascript code of the company Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States (Amazon CloudFront – Content Delivery Network (CDN)) is reloaded on our site. If you have enabled JavaScript in your browser and do not have a JavaScript blocker installed, your browser may transmit personal data to Amazon CloudFront – Content Delivery Network (CDN). We do not know what data Amazon CloudFront – Content Delivery Network (CDN) associates with the data it receives or for what purposes Amazon CloudFront – Content Delivery Network (CDN) uses that data. For more information, see the Amazon CloudFront – Content Delivery Network (CDN) privacy policy: https://aws.amazon.com/de/privacy/?nc1=f_pr. To prevent Amazon CloudFront – Content Delivery Network (CDN) from running JavaScript code altogether, you can install a JavaScript blocker.

Google Analytics

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of views of our online offering, subpages visited and the length of stay of visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity. We process data using Google Analytics for the purpose of optimizing our website and for marketing purposes based on your consent.

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics:
https://policies.google.com/privacy.

Google Fonts

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you connect to servers of Google Ireland Limited, whereby your IP address is transmitted. If your browser does not support web fonts, a standard font is used by your computer.

The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimization of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts:
https://policies.google.com/privacy.

YOUR RIGHTS

RIGHT TO INFORMATION

According to Art. 15 DSGVO, you have the right to request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have the right to be informed about this personal data and to receive further information as mentioned in Art. 15 DSGVO.

RIGHT TO RECTIFICATION

Pursuant to Art. 16 DSGVO, you have the right to request that we rectify without undue delay any inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed, including by means of a supplementary declaration.

RIGHT TO ERASURE

You have the right to request that we delete personal data concerning you without undue delay. We are obliged to delete personal data without delay, provided that the relevant requirements of Art. 17 DSGVO are met. Because of the details, we refer to Art. 17 DSGVO.

According to legal requirements, the storage takes place in particular for 10 years according to §§ 147 para. 1 AO, 257 para. 1 No. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years according to § 257 para. 1 No. 2 and 3, para. 4 HGB (commercial letters).

RIGHT TO RESTRICT PROCESSING

In accordance with Art. 18 DSGVO, you have the right, under certain conditions, to demand that we restrict the processing of your personal data.

RIGHT TO DATA PORTABILITY

Pursuant to Art. 20 DSGVO, you have the right to have us hand over to you or to a third party in a common, machine-readable format data that we process automatically on the basis of your consent or in performance of a contract.