Privacy Policy – Data protection declaration

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

PAPE Consulting Group AG

Christian Pape
Herzog-Heinrich-Straße 18
80336 Munich, Germany
Tel: +49 89 954 599 7 0
Mail: info@pape.de

Your rights as a data subject

You can exercise the following rights at any time using the contact details provided for our data protection officer

  • Information about your data stored by us and its processing (Art. 15 GDPR),
  • Correction of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing if we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR)
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority in the federal state of your place of residence or with the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

 

Collection of general information when visiting our website

Nature and purpose of processing:

When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

They are processed for the following purposes in particular:

  • Ensuring a smooth connection to the website,
  • Ensuring the smooth use of our website,
  • to analyse system security and stability and
  • to optimise our website.

We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in anonymised form in order to optimise our website and the technology behind it.

Legal basis and legitimate interest:

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Third country transfer:

The data collected is not transferred to third countries:

 

The following data protection guarantees are in place:

Storage period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.

If the data is stored in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymised so that it is no longer possible to identify the accessing client.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.

Cookies

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.

You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

 

Storage duration and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Borlabs Coockie – 1 year

Leadinfo

Technically necessary cookies

Type and purpose of processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

We require cookies for the following applications:

Saves the settings of visitors selected in the Cookie Box of Borlabs Cookie.

Legal basis and legitimate interest:

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Third country transfer:

The data collected is not transferred to third countries:

The following data protection guarantees are in place:

Provision prescribed or required:

The provision of the aforementioned personal data is not required by law or contract. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Objection

Please read the information on your right to object under Art. 21 GDPR below.

Cookies that are not technically necessary

We also use cookies in order to better customise the offer on our website to the interests of our visitors or to generally improve it on the basis of statistical analyses.

To find out which providers use cookies, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.

Legal basis:

The legal basis for this processing is your consent in each case, Art. 6 para. 1 lit. a GDPR.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

For further recipients, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.

Third country transfer:

For information on this, please refer to the lists of the individual display, tracking, remarketing and web analysis providers.

 

Provision prescribed or required:

Of course, you can also view our website without cookies. Web browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings (see Revocation of consent).

Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Revocation of consent:

You can withdraw your consent at any time via our cookie consent tool.

Profiling:

To what extent we analyse the behaviour of website visitors with pseudonymised user profiles, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.

 

Leadinfo

We use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognises visits from companies to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behaviour on our website and processes domains from form entries (e.g. “leadinfo.com”) in order to correlate IP addresses with companies and improve the services. Further information can be found at leadinfo.com. On this page: leadinfo.com/en/opt-out you have an opt-out option. If you opt-out, your data will no longer be collected by Leadinfo.

 

Provision of chargeable services

Type and purpose of processing:

To provide chargeable services, we request additional data, such as payment details, in order to fulfil your order.

Legal basis:

The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

Recipients:

Recipients of the data may be processors.

Third country transfer:

The data collected will not be transferred to third countries:

 

The following data protection guarantees are in place:

Storage period:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

 

PayPal

We offer the option of processing the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to PayPal insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. GDPR)

First name

Surname

Your address

e-mail address

Telephone number

The processing of the data provided in this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot process a payment via PayPal. [You have the option of choosing a different payment method.]

PayPal carries out a credit check for various services such as payment by direct debit to ensure your willingness and ability to pay. This corresponds to PayPal’s legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the fulfilment of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). For this purpose, your data (name, address and date of birth, bank account details) will be passed on to credit agencies. We have no influence on this process and only receive the result as to whether the payment has been made or rejected or whether a review is pending.

Further information on objection and cancellation options vis-à-vis PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Your data will be stored until payment processing has been completed. This also includes the period required for processing refunds, claims management and fraud prevention.

 

Newsletter

Type and purpose of processing:

For the delivery of our newsletter, we collect personal data that is transmitted to us via an input mask.

We require a valid e-mail address for effective registration.

Legal basis:

On the basis of your express consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your cancellation using the contact option provided at the end of this data protection notice.

Recipients:

Recipients of the data may be processors.

Third country transfer:

The data collected will not be transferred to third countries:

The following data protection guarantees are in place:

Storage period:

The data is only processed in this context for as long as the corresponding consent is available. After that, it will be deleted.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without your consent.

Revocation of consent:

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You can unsubscribe via the link contained in every e-mail or by contacting the data protection officer listed below or the person responsible for data protection.

Contact form

Type and purpose of processing:

The data you enter will be stored for the purpose of personalised communication with you. This requires you to provide a valid e-mail address and your name. This is used to allocate the enquiry and subsequently answer it. The provision of further data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipients:

Recipients of the data may be processors.

Third country transfer:

The data collected will not be transferred to third countries:

The following data protection guarantees are in place:

Storage period:

Data will be deleted no later than 6 months after the enquiry has been processed.

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, email address and the reason for the enquiry.

Embedded YouTube videos

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy).

Revocation of consent:

The provider does not currently offer the option of simply opting out or blocking data transmission. If you wish to prevent your activities on our website from being tracked, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

Social plugins

Type and purpose of processing:

We offer you the option of using so-called “social media buttons” on our website. To protect your data, we use the “Shariff” solution for implementation. This means that these buttons are only integrated on the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic, you will be redirected to the services of the respective provider. Only then will your data be sent to the respective provider. If you do not click on the graphic, there will be no exchange between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the corresponding providers. You can find more information about the Shariff solution here: https://www.heise.de/hintergrund/Ein-Shariff-fuer-mehr-Datenschutz-2467514.html

We have integrated the social media buttons of the following companies on our website

Facebook: https://www.facebook.com/

LinkedIn: https://www.linkedin.com

Xing: https://www.xing.com

Instagram: https://www.instagram.com/

Twitter: https://twitter.com/?lang=de

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

 

Information about your right to object in accordance with Art. 21 GDPR

Right to object on a case-by-case basis

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipients of an objection

PAPE Consulting Group AG

Data Protection Officer – datenschutzbeauftragter@pape.de

Herzog-Heinrich-Straße 18

80336 Munich, Germany

 

Changes to our data protection provisions

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organisation directly:

PAPE Consulting

PAPE Consulting Group AG

Data Protection Officer – datenschutzbeauftragter@pape.de

Herzog-Heinrich-Straße 18

80336 Munich, Germany

The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30).

Get in touch with us.

Trust in diversity: We don’t rely on just one method. We listen carefully and then suggest the most suitable search methodology.