‍

Privacy policy (translated)

Status: September 5, 2023

Responsible

Karin Peter Consulting
Executive Search
Bahnstraße 10
41515 Grevenbroich, Germany

Persons authorized to represent the company:

Karin Peter

e-mail-adress:

kp(at)karin-peter-consulting.com

Imprint:

https://www.karin-peter-consulting.com/imprint-en

Authoritative legal basis

Relevant legal bases according to the GDPR (DSGVO): Below you will find an overview of the legal bases of the GDPR, on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Furthermore, should more specific legal bases be relevant in individual cases, we will inform you of these in the data protection declaration.

• Contract performance and pre-contractual requests (Art. 6 (1) p. 1 lit. b) DSGVO) - Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures at the data subject's request.
• Legal obligation (Art. 6 (1) p. 1 lit. c) DSGVO) - Processing is necessary for compliance with a legal obligation to which the controller is subject.

• Legitimate interests (Art. 6 (1) p. 1 lit. f) DSGVO) - Processing is necessary for the purposes of the legitimate interests of the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the GDPR, national regulations on data protection apply in Germany. These include, in particular, the Act on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act - BDSG). In particular, the BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission, as well as automated decision-making in individual cases, including profiling. In addition, state data protection laws of the individual federal states may apply.

Overview of the processing operations

The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects.

Types of data processed

• Inventory data
• Payment data
• Contact data
• Contract data

Categories of persons concerned

• Interested parties
• Business and contractual partners

Purposes of processing

• Provision of contractual services and fulfillment of contractual obligations
• Contact requests and communication
• Office and organizational procedures
• Management and response to requests
• Security measures

Security measures

We take technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, specific and purposes of the processing, as well as the different probabilities of occurrence and the extent of the threat to the appropriate rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to, input of, disclosure of, assurance of availability of and segregation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data, and responses to data compromise. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software as well as procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

TLS encryption (https): To protect your data transmitted via our online offer, we use TLS encryption. You can recognize the type of encrypted connection by the prefix https:// in the address bar of your browser.

Web host(s) contracted by us: Webflow, Inc.

Service Provider: Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA
Website: https://webflow.com
Privacy policy: https://webflow.com/privacy

Business service

We process data of our contractual and business partners, e.g. customers and prospective customers (collectively referred to as "contractual partners") in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with contractual partners (or pre-contractual), e.g. to answer inquiries.

We process this data in order to fulfill our contractual obligations. These include, in particular, the obligations to provide the agreed services, any update obligations and remedies in the event of warranty and other service disruptions. In addition, we process the data to safeguard our rights and for the purpose of administrative tasks associated with these obligations as well as company organization. Furthermore, we process the data on the basis of our legitimate interests in proper and business management as well as security measures to protect our contractual partners and our business operations from misuse, endangerment of their data, secrets, information and rights (e.g. for the involvement of telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). Within the framework of applicable law, we only disclose the data of contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or to fulfill legal obligations. Contractual partners will be informed about further forms of processing, e.g. for marketing purposes, within the framework of this data protection declaration.

We inform the contractual partners which data is required for the aforementioned purposes before or during data collection, e.g. in online forms, by means of special marking (e.g. colors) or symbols (e.g. asterisks or similar), or in person.

We delete the data after expiry of legal warranty and comparable obligations, i.e., in principle after 4 years, unless the data is stored in a customer account, e.g., as long as it must be kept for legal archiving reasons. The retention periods are ten years for documents relevant under tax law as well as for commercial books, inventories, opening balances, annual financial statements, the work instructions required to understand these documents and other organizational documents and accounting records, and six years for received commercial and business letters and reproductions of sent commercial and business letters. The period begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report was prepared, the commercial or business letter was received or sent or the accounting document was created, furthermore the recording was made or the other documents were created.

Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.

• Types of data processed: inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); contact data (e.g. e-mail, telephone numbers). Contract data (e.g., subject matter of contract, term, customer category).
• Data subjects: Prospective customers. Business and contractual partners.
• Purposes of processing: provision of contractual services and fulfillment of contractual obligations; contact requests and communication; office and organizational procedures. Management and response to requests.
• Legal grounds: contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) DSGVO); legal obligation (Art. 6 para. 1 p. 1 lit. c) DSGVO). Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).

Further guidance on processing operations, procedures and services:

• Agency Services: We process our customers' data as part of our contractual services, which may include, for example, conceptual and strategic consulting and training services;
• Legal basis: contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) DSGVO).

Definitions

This section provides you with an overview of the terms used in this privacy statement. If the terms are legal, their legal definitions apply. The following explanations are primarily intended to aid understanding.

• Personal data: "Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Controller: "Controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
• Processing: "Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and includes virtually any handling of data, whether collecting, evaluating, storing, transmitting or deleting.

Created with the Datenschutz-Generator.de by Dr. Thomas Schwenke