Privacy statement
Privacy Statement
Drescher Consulting appreciates your visit to our website and your interest in our company. We take the protection and security of your personal data entrusted to us seriously and want you to feel safe and comfortable when visiting our website and using our services. Below you will find information on the handling of your data that is collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations.
Controller and Data Protection Officer
Controller within the meaning of data protection law:
Drescher Consulting GmbH
Jahnstr. 12
70597 Stuttgart
E-Mail: datenschutz@drescher-consulting.de
Data Protection Officer:
PROLIANCE GmbH
Leopoldstr. 21
80802 München
E-Mail: datenschutzbeauftragter@datenschutzexperte.de
Website: www.datenschutzexperte.de
When contacting our Data Protection Officer, please specify the company to which your request relates. Please refrain from enclosing sensitive information such as a copy of an identification document with your request.
Definitions
Our privacy policy should be simple and understandable for everyone. For this reason, our privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.
Access to and storage of information in terminal equipment
By using our website, access to information (e.g. IP address) or storage of information (e.g. cookies) in your terminal equipment may occur. This access or storage may involve further processing of personal data pursuant to the GDPR.
In cases where such access to information or such storage of information is strictly necessary for the technically error-free delivery of our services, this is done on the basis of § 25 para. 1 s. 1, para. 2 no. 2 TDDDG.
In cases where such a process serves other purposes (e.g. the needs-based design of our website), this will only be carried out on the basis of § 25 para. 1 TDDDG with your consent pursuant to Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future.
For more information on the processing of your personal data and the relevant legal basis in this context, please refer to the following sections on the specific processing activities on our website.
Web Hosting
This website is hosted by an external service provider (hoster). This website is hosted in Germany, by the Hetzner Online GmbH. Personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, web page accesses and other data generated by a website.
We collect the listed data to ensure a proper connection to the website and an error-free delivery of our services. The processing of this data is strictly necessary to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded a Data Processing Agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we commit him to protect the data of our customers and not to pass them on to third parties.
Server-Logfiles
Once you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status
- Web browser used and operating system used
- (Full) IP address of the requesting computer
- Transmitted amount of data
We collect the listed data to ensure a proper connection to the website and an error-free delivery of our services. The processing of this data is strictly necessary to make the website available to you. The log files are processed for the purpose of evaluating system security and stability as well as for administrative purposes. The log files serve to evaluate system security and stability as well as administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
For reasons of technical security, in particular to prevent attempts to attack our web server, we may temporarily store this data. After 28 days at the latest, the data is deleted.
Cookies
Our website uses so-called “cookies”. Cookies are small text files that are either temporarily stored on your end device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or an automatic solution is provided by your web browser.
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used to evaluate user behavior or display advertising.
The processing of data using strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the technically error-free delivery of our services. For details on the processing purposes and legitimate interests, please refer to the following explanations on the specific data processing.
The processing of personal data using other cookies is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future. Insofar as such cookies are used for analysis and optimization purposes, we will inform you separately about this in this privacy policy and obtain your consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can set your browser to:- be informed about the setting of cookies,
- only allow cookies in individual cases,
- exclude the acceptance of cookies for certain cases or generally,
- activate the automatic deletion of cookies when the browser is closed.
The cookie settings can be managed under the following links for each browser:
You can also manage cookies of many companies and functions used for advertising individually. To do so, use the appropriate user tools, available at http://www.youronlinechoices.com/uk/your-ad-choices
Most browsers also offer a so-called “do-not-track function”. When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be “tracked” for behavioral advertising and the like.
For information and instructions on how to edit this feature, please refer to the links below, depending on your browser provider:
Additionally, you can prevent the loading of so-called scripts by default. “NoScript” allows the execution of JavaScripts, Java and other plug-ins only at trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: ttps://addons.mozilla.org/en-US/firefox/addon/noscript/)
Please note that if you disable cookies, the functionality of our website may be limited.
Change cookie settings
You can revoke or change your cookie settings at any time. To do so, access the cookie settings again via this link Cookie preferences .
Google Analytics
Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies” and web beacons.
Google will use this information on behalf of the operator of this website to evaluate your use of the website and to create reports on website activity. Google will also use this information to provide the website operator with further services related to the use of the website and the internet. The IP address sent by your browser in the context of Google Analytics is not combined with other data from Google. Processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the legal basis of your given consent.
We use Google Analytics only with activated IP anonymisation. This means that your IP address will only be further processed by Google in abbreviated form.
We have concluded a Data Processing Agreement with the service provider in which we oblige him to protect the data of our customers and not to pass them on to third parties.
Since a transfer of personal data by Google to affiliates and sub-processors to countries outside the EU and EEA is possible, further appropriate safeguards are required to ensure the level of data protection under the GDPR. For the U.S., there is an adequacy decision of the EU Commission pursuant to Art. 45 (1) GDPR regarding companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to compliance with adequate data protection standards, which can be verified via the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other countries outside the EU and the EEA, for which no adequacy decision of the EU Commission exists, we have concluded standard contractual clauses with the provider in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the country outside the EU to process the data in accordance with the level of protection in Europe.
The terms of use of Google Analytics and information on data protection can be accessed via the following links:
http://www.google.com/analytics/terms/ and https://policies.google.com/privacy
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. User and event-level data associated with cookies, user IDs (e.g., User ID), and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA) will be deleted no later than 14 months after collection.
You can prevent cookies from being saved by adjusting the settings of your browser software accordingly. Please note, however, that if you do so you may not be able to use all the functions of this website without restriction. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and processing this data by Google by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout
Google Tag Manager
This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used and only the user’s IP address is transmitted to Google to establish a connection. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made on domain or cookie level, it will remain for all tracking tags as long as they are implemented with the Google Tag Manager.
We use the Google Tag Manager based on your consent pursuant to Art. 6 (1) lit. a GDPR.
Since a transfer of personal data by Google to affiliates and sub-processors to countries outside the EU and EEA is possible, further appropriate safeguards are required to ensure the level of data protection under the GDPR. For the U.S., there is an adequacy decision of the EU Commission pursuant to Art. 45 (1) GDPR regarding companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to compliance with adequate data protection standards, which can be verified via the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other countries outside the EU and the EEA, for which no adequacy decision of the EU Commission exists, we have concluded standard contractual clauses with the provider in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the country outside the EU to process the data in accordance with the level of protection in Europe.
Consent-Management-Tool
In order to be able to manage cookies in a privacy compliant manner, we use the software solution of the company CookieYes Limited.
When visiting our website, an essential cookie is stored in the user’s browser, in which the consent given or the withdrawal of consent is stored. This data is not passed on to the provider.
We provide you with a so-called cookie banner, via which you can give us your consent to the use of cookies. The cookie banner informs you about the use of cookies when you first visit our website and asks for your consent to the use of cookies. Until you give your consent, all non-essential cookies that we use on our website are automatically blocked. You have the option of rejecting unwanted cookies via the cookie banner and still continuing to use the website.
The legal basis of the processing is our legitimate interest in observing the rejection of cookies and/or the withdrawal of your consent to the use of cookies, in accordance with Art. 6 para. 1 p. 1 lit. f GDPR.
The collected data will be deleted, as soon as the purpose for data storage ceases to apply, latest at 12 months after the collection of the data.
Contact form and contact by email
If you send us requests via our contact form or email, your details from the contact form or email, including the contact data you have provided there, will be stored for the purpose of processing your request and in the event of follow-up questions. You are required to provide an email address and your name to contact us. Your telephone number is optional. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR, provided that your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f GDPR.
Job Application
If you apply for a job at our company via contact form or by email, we collect personal data. This includes, in particular, your contact details (such as first and last name, telephone number and email address of the user) as well as other data provided by you regarding your background (e.g. CV, qualifications, degrees and work experience) and your person (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. information on a severe disability).
The primary legal basis for this is § 26 para. 1 BDSG. In addition, consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 26 para. 2 BDSG can be a legal basis. If the processing of your data is based on consent, you have the right to revoke your consent at any time with effect for the future.
Within our company, only those persons and positions (e.g. human resources) have access to your personal data which absolutely need to carry out the application procedure or to fulfill our legal obligations. Your applications will be forwarded to the responsible person for examination. Under no circumstances will your personal data be passed on to third parties without authorization.
Your data for an application for a specific job advertisement will be stored and processed by us during the ongoing application process. Once the application process has been completed (e.g. in the form of an acceptance or rejection), the application process including all personal data will be deleted from the system no later than six months after the application process has been completed. The data of selected applicants will be stored securely for up to one year, provided that the applicants have given their consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 26 para. 2 BDSG.
Talentpool
By consenting to inclusion in the talent pool, you agree that if no suitable position is found for you, Drescher Consulting GmbH will store your personal data that you have provided as part of the application process for inclusion in the talent pool for 12 months and will contact you if you are considered for another position. If your application documents contain special categories of personal data in accordance with Art. 9 GDPR, your consent also applies to this data. This consent is voluntary and can be revoked at any time for the future by sending an email to datenschutz@drescher-consulting.de.
Data Transfer and Recipients
Your personal data is not transferred to third parties, unless
- we have explicitly pointed this out in the description of the respective data processing.
- you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the transfer pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and our legitimate interests are not overridden by your fundamental rights and freedoms.
- there is a legal obligation to transfer data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
- required by Art. 6 para. 1 sentence 1 lit. b GDPR for the execution of contractual relationships with you.
In addition, we use external service providers for the processing of our services, whom we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Required data processing agreements pursuant to Art. 28 GDPR are concluded before the commission. In particular, these contracts concern web hosting services, the dispatch of emails and IT updates and maintenance. Your personal data will not be transferred to third parties by our service providers.
Storage period
The period for which the personal data will be stored is determined by the relevant statutory storage periods (e.g. from commercial law and tax law). The corresponding data is deleted routinely upon expiry of the respective period. If data is required for the fulfilment of a contract or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you make use of your right of withdrawal or objection.
Your Rights
In the following, you will find information about your data subject rights, which the current data protection law grants you against the controller concerning the processing of personal data:
The right, pursuant to Art. 15 GDPR, to obtain information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure or personal data or restriction of processing of personal data concerning you or to object such processing, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved, as well as the significance and the envisaged consequences.
The right to obtain without undue delay the rectification of inaccurate personal data concerning you. in accordance with Art. 16 GDPR.
The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right of freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
The right, pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful, but you oppose the erasure and we no longer need the data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims or you have filed an objection against the processing pursuant to Art. 21 GDPR.
The right, in accordance with Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us in in a commonly used and machine-readable format and the right to transmit those data to another controller.
The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, in particular in the Member State of your habitual residence, place of work.
The right to withdraw your given consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your given consent concerning the processing of your personal data with effect for the future at any time. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to object
If your personal data is processed by us based on legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object at any time to the processing of your personal data on grounds relating to your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of stating a particular situation.
If you wish to exercise your right of withdrawal, objection or any of your other rights, simply send an e-mail to datenschutz@drescher-consulting.de
Necessity of providing personal data
The provision of personal data for the decision on the conclusion of a contract, the fulfilment of the contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision in the context of contractual measures if you provide such personal data that is required for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.
Automated decision making
Automated decision making or profiling according to Art. 22 GDPR does not take place.
Subject to change
We reserve the right to adapt or update this privacy policy, if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take account of changes to our services, e.g. the introduction of new services. The most current version applies to your visit.
Status of this privacy statement: August 2025
Privacy Information for Visitors to Our Social Media Profiles
Below you will find information on how we handle your data collected through your use of our social media profiles on social networks and platforms.
Social Media Profiles
We maintain profiles, presences, pages or fan pages on the following social media platforms:
| Platform | Profile |
|---|---|
| LinkedIn Profile | |
| Instagram Profile | |
| TikTok | TikTok Profile |
| YouTube | YouTube Channel |
Different Responsibilities and Roles
Depending on how the platform operators and we, as the page operator, are involved in the processing of your personal data, the respective responsibility or role differs.
We may either be jointly responsible together with the platform operator, or the platform operator may be solely responsible.
Joint Controllership with Platform Operators
Joint Controllers
A joint controllership exists between us and the following platform operators:
| Platform | Platform operator |
|---|---|
| LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4,5,6, Dublin 2, Ireland | |
| TikTok | TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland |
We, as the page operator, are jointly responsible together with the providers of the respective platform for the processing of your personal data in connection with your visit to the presence, profile, page or fan page on the platforms, where the platform operators provide aggregated information about visitors to our profiles, presences, pages or fan pages (e.g. so-called “Insights” or “Analytics”).
In the case of joint controllership, we have entered into agreements with the platform operators pursuant to Art. 26 GDPR regarding joint responsibility for the processing of your personal data (e.g. a Page Controller Addendum or Joint Controller Addendum).
This agreement sets out which data processing operations we, or the respective platform operator, are responsible for. You can view these agreements via the following links:
| Platform | Joint controllership agreement |
|---|---|
| https://legal.linkedin.com/pages-joint-controller-addendum | |
| TikTok | https://www.tiktok.com/legal/page/global/tiktok-analytics-joint-controller-addendum/en |
Further information on data processing by the platform operators can be found in their respective privacy policies:
| Platform | Privacy policy |
|---|---|
| https://www.linkedin.com/legal/privacy-policy | |
| TikTok | https://www.tiktok.com/legal/page/eea/privacy-policy/de |
Contacting the Data Protection Officers of the Platform Operators
You can contact the data protection officers of the platform operators here:
| Platform | Ways to get in touch |
|---|---|
| You can reach LinkedIn’s data protection officer via the contact form at the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO | |
| TikTok | You can reach TikTok’s data protection officer via the contact form at the following link: https://www.tiktok.com/legal/report/DPO//de |
Data Processing under Joint Controllership
Access to and Storage of Information on Terminal Equipment
When you visit our profiles on the aforementioned platforms, cookies and similar technologies are used by the platform operator on your device to store data on, or read data from, your device. This access or storage may be associated with further processing of personal data within the meaning of the GDPR.
In cases where such access to information or such storage of information is strictly necessary for the technically flawless provision of the services, this takes place on the basis of Section 25(1) sentence 1, (2) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TDDDG). Any subsequent processing is carried out, where applicable, on the basis of Art. 6(1) sentence 1(f) GDPR.
In cases where such a process serves other purposes (e.g. the needs-based design of our website), this takes place on the basis of Section 25(1) TDDDG only with your consent pursuant to Art. 6(1) sentence 1(a) GDPR. Consent may be withdrawn at any time with future effect. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.
Further information on the use of cookies and similar technologies, as well as their legal bases, can be found in the respective platform operator’s privacy policy. Links to the respective privacy policies can be found above. For further questions on this topic, please contact the operator of the respective social media platform directly.
Data Processing for Advertising and Market Research Purposes
As a rule, personal data on our social media profile is primarily processed for the platform operator’s market research and advertising purposes. Insofar as data collection also takes place directly on our social media profile, we contribute to the platform operator’s data processing and are therefore jointly responsible with it to that extent.
Cookies and similar technologies are used in the data processing, enabling the platform operator to recognise you when you visit a social media profile. In addition, for members of the social media platform, the platform operator carries out an extensive evaluation of your interactions on the platform (clicks, comments and likes) as well as processing information you have provided to the platform operator, such as your master data, profile picture or name. In particular, demographic information (age, gender, country, industry, occupation, etc.) from your own member profile may also be processed.
Usage profiles can be created using the collected data. These are then used by the platform operator to place advertisements, presumably matching your interests, both within and outside the platform.
Although we have no direct access to the data processed by the platform operator, we also benefit from this data processing, as we place corresponding advertisements within or outside the platforms based on the target groups identified by the platform operator.
The legal basis for the processing of your personal data in this regard is the consent you have given to the platform operator pursuant to Art. 6(1)(a) GDPR.
Please note that we have no influence over the data collection and further processing for which the platform operators are responsible. As a result, we are unable to provide information on the extent, location or duration for which the data is stored by the platform operator.
Further information on this can be found in the respective provider’s privacy information.
Data Processing in the Context of “Insights” or “Analytics”
In addition, your data is processed under joint controllership in connection with so-called “Page Insights” or “Page Analytics”.
“Page Insights” or “Page Analytics” are analytics functions provided by the platform operator, by means of which the master data processed about you – in particular demographic data as well as data on your interactions with our profile – is jointly collected by the platform operator and us.
The platform operator then analyses this data and creates summarised (so-called aggregated) data for us, from which we can determine which demographic target group has visited our profile and how our profile has been used by that group.
Here, too, we have no direct access to the data processed by the platform operator. This data is made available to us by the platform operator only in aggregated form. This means that we cannot identify individual visitors or their interactions from the aggregated data.
We subsequently use this aggregated data for the target-group-appropriate design of our social media profile and generally for its optimisation with regard to the aforementioned advertising purposes (increasing the reach and awareness of our profile and evaluating the success of marketing campaigns).
The legal basis for the processing of your personal data in this regard is the consent you have given to the platform operator pursuant to Art. 6(1)(a) GDPR.
Please note that we have no influence over the data collection and further processing for which the platform operators are responsible. As a result, we are unable to provide information on the extent, location or duration for which the data is stored by the platform operator.
Further information on this can be found in the respective provider’s privacy information.
Data Processing Based on Consent
If the respective platform operator asks you for consent to processing for a specific, joint purpose, the legal basis for the processing is Art. 6(1)(a), Art. 7 GDPR. Consent given may be withdrawn at any time with future effect.
Recipients and Data Transfers to Third Countries
Insofar as we disclose personal data to the operators of social media platforms, the latter are recipients of the data within the meaning of Art. 4 no. 9 GDPR.
| Platform | Recipient |
|---|---|
| LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4,5,6, Dublin 2, Ireland LinkedIn Corp., 1000 W. Maude Ave, Sunnyvale, CA 94085, USA | |
| TikTok | TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland TikTok Pte. Ltd., 1 Raffles Quay, Singapore 048583, Singapore TikTok Inc. 5800 Bristol Pkwy, Culver City, CA 90230, USA |
When you visit our social media profiles, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA), in third countries.
An adequacy decision by the European Commission exists for data transfers to certain third countries.
For data transfers to the USA, an adequacy decision by the European Commission exists pursuant to Art. 45(1) GDPR with regard to companies certified under the EU-U.S. Data Privacy Framework.
For data transfers to third countries for which no adequacy decision by the European Commission exists, Standard Contractual Clauses are concluded, or binding corporate rules are used, and further supplementary measures are taken to safeguard an adequate level of data protection.
| Platform | Recipient | Third country | Type of safeguard for the third-country transfer |
|---|---|---|---|
| LinkedIn Corp | USA | Adequacy decision by the European Commission and certification under the EU-U.S. Data Privacy Framework | |
| TikTok | TikTok Inc. TikTok Pte. Ltd. | USA Singapore | Standard Contractual Clauses and supplementary measures |
Exercising Your Rights in the Case of Joint Controllership
If, as a visitor to the page, you wish to exercise your rights (access, rectification, erasure, restriction, data portability, complaint to the supervisory authority, objection or withdrawal), you may contact either the platform operator or us.
| Platform | Settings in the platform account |
|---|---|
| Via LinkedIn’s settings you can restrict the visibility of your LinkedIn account (also) towards us. For further information on exercising your rights, please refer to LinkedIn’s privacy policy at the following link: https://www.linkedin.com/legal/privacy-policy | |
| TikTok | For further information on exercising your rights, please refer to TikTok’s privacy policy at the following link: https://www.tiktok.com/legal/page/eea/privacy-policy/de |
Responsibility of the Platform Operators
If your personal data is processed by one of the social media platform operators listed below, this processing takes place under the sole responsibility of the platform operator within the meaning of Art. 7 no. 4 GDPR.
| Platform | Platform operator |
|---|---|
| Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland | |
| YouTube | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland |
We have no influence over data processing carried out by the platform operators. For further information, please check the privacy policy of the respective platform operator:
| Platform | Privacy policy |
|---|---|
| http://instagram.com/about/legal/privacy | |
| YouTube | https://policies.google.com/privacy |
With regard to exercising your rights as a data subject, please note that these can most effectively be asserted with the respective providers. Only they have access to the data collected about you. Should you nevertheless need assistance, please feel free to contact us at any time.
Our Own Responsibility
We are solely responsible for the following data processing activities carried out via our social media profiles.
Data Processing through the Operation of the Social Media Profile
When you visit our social media profile, leave comments or likes, or interact with our profile in a similar way, we process personal data about you.
This may include information you actively provide (comments, likes, as well as information you have made publicly available, such as your profile picture or name). Depending on the provider and your settings on the provider’s platform, we may also be informed about who has viewed our profile within the platform.
The purpose of the data processing and our legitimate interest lie in the targeted engagement of visitors, in providing an effective means of communication and interaction with our company on the social media platform, and in optimising our external presentation.
The legal basis for the data processing is Art. 6(1) sentence 1(f) GDPR.
Data Processing When You Contact Us
We ourselves collect personal data when you contact us, for example via a contact form or through a messaging function of the respective platform.
The data collected depends on the information you provide, as well as the contact details you have given or made available. This data is stored by us for the purpose of processing your enquiry and in case of any follow-up questions.
The purpose of the data processing and your, or our, legitimate interest lies in responding to your enquiry.
The legal basis for the data processing is Art. 6(1) sentence 1(f) GDPR.
Your data will be deleted once your enquiry has been conclusively dealt with, provided no statutory retention obligations preclude this. We consider an enquiry to have been conclusively dealt with when the circumstances indicate that the matter in question has been fully resolved.
Data Processing for the Performance of a Contract
If your contact via a social network or other platform is aimed at concluding a contract for the supply of goods or the provision of services with us, we process your data for the performance of the contract or the implementation of pre-contractual measures, or for providing the requested services.
The legal basis for the data processing is Art. 6(1) sentence 1(b) GDPR.
Your data will be deleted once it is no longer required for the performance of the contract, or once it is established that the pre-contractual measures will not lead to a contract corresponding to the purpose of the contact.
Please note that, even after the conclusion of the contract, it may be necessary to store personal data of our contractual partners in order to comply with contractual or statutory obligations.
Data Processing Based on Consent
If we ask you for consent to processing for a specific purpose, the legal basis for the processing is Art. 6(1)(a), Art. 7 GDPR. Consent given may be withdrawn at any time with future effect.
Retention Period
The personal data collected by us is deleted from our system once it is no longer required for the purposes specified at the time of collection, or once you have exercised your right of withdrawal or objection. Statutory retention periods remain unaffected. We have no influence over the retention period of your data stored by the social media providers for their own purposes. For details on this, please inform yourself directly with the providers concerned.