Privacy Policy
1. Introduction
This website is operated by: The Hotel Consultants.
It is very important to us to handle the data of our website visitors with trust and to protect it as best as possible. For this reason, we make every effort to meet the requirements of the GDPR.
Below we explain how we process your data on our website. We use language that is as clear and transparent as possible so that you truly understand what happens to your data.
2. General Information
2.1 Processing of personal data and other terms
Data protection applies to the processing of personal data. Personal means any data that can be used to identify you personally. This includes, for example, the IP address of the device (PC, laptop, smartphone, etc.) you are currently using. Such data is processed when "something happens with it." For example, the IP address is transmitted from the browser to our provider and automatically stored there. This is then a processing (pursuant to Art. 4 No. 2 GDPR) of personal data (pursuant to Art. 4 No. 1 GDPR).
These and other legal definitions can be found in Art. 4 GDPR.
2.2 Applicable regulations/laws – GDPR, BDSG and TDDDG
The scope of data protection is regulated by law. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Federal Data Protection Act) as a national law.
In addition, the TDDDG supplements the provisions of the GDPR with regard to the use of cookies.
2.3 The Controller
Responsible for data processing on this website is the controller within the meaning of the GDPR. This is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
You can reach the controller at:
The Hotel Consultants
Wieker Weg 14b
18556 Breege, Germany
datenschutz@thehotelconsultants.com
2.4 How data is generally processed on this website
As already noted, some data (e.g. IP address) is collected automatically. This data is mainly required for the technical provision of the website. To the extent we use personal data or collect other data beyond this, we will inform you accordingly or request your consent.
Other personal data is shared with us by you voluntarily.
Detailed information on this can be found below.
2.5 Your rights
The GDPR provides you with extensive rights. These include, for example, free information about the origin, recipients and purpose of your stored personal data. You can also request the correction, restriction or deletion of this data, or file a complaint with the competent data protection supervisory authority. You may withdraw any consent given at any time.
Details on these rights and how to exercise them can be found in the last section of this privacy policy.
2.6 Data protection – our perspective
For us, data protection is more than just a tedious obligation! Personal data is highly valuable, and handling it carefully should be a matter of course in our digitalized world. Furthermore, as a website visitor, you should be able to decide for yourself what happens to your data, when, and by whom. We therefore commit to complying with all legal requirements, collecting only the data necessary for us, and treating it confidentially as a matter of course.
2.7 Disclosure and deletion
The disclosure and deletion of data are also important and sensitive topics. We would therefore like to briefly inform you in advance about our general approach to this.
Data is only disclosed based on a legal basis and only when unavoidable. This may particularly be the case when dealing with a so-called processor, where a data processing agreement pursuant to Art. 28 GDPR has been concluded.
We delete your data once the purpose and legal basis for processing no longer apply and provided no other legal obligations prevent deletion. A "good" overview of this is also provided by Art. 17 GDPR.
For all further information, please refer to this privacy policy and contact the controller with specific questions.
2.8 Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the host. This includes both the automatically collected and stored log files (more details below) as well as all other data provided by website visitors.
External hosting is carried out for the purpose of secure, fast and reliable provision of our website, and in this context serves to fulfil our contracts with our prospective and existing customers.
The legal basis for the processing is Art. 6(1)(a), (b) and (f) GDPR, as well as Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the website visitor's or user's terminal device within the meaning of the TDDDG.
Our host only processes such data as is necessary to fulfil its contractual obligations and acts as our processor, meaning it is subject to our instructions. We have concluded a corresponding data processing agreement with our host.
We use the following host:
WiX
Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel
support@wix.com
https://de.wix.com/about/privacy
2.9 Legal bases
The processing of personal data always requires a legal basis. Art. 6(1) sentence 1 GDPR provides the following options:
a) the data subject has given consent to the processing of their personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
d) processing is necessary to protect the vital interests of the data subject or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
In the following sections, we will specify the relevant legal basis for each respective processing activity.
3. What happens on our website
By visiting our website, we process personal data about you.
To best protect this data against unauthorized access by third parties, we use SSL or TLS encryption. You can recognize this encrypted connection by the https:// prefix or the padlock symbol in your browser's address bar.
Below you will learn what data is collected when you visit our website, for what purpose, and on what legal basis.
3.1 Data collection when visiting the website
When the website is accessed, information is automatically stored in so-called server log files. This includes the following information:
Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
This data is temporarily required to display our website to you reliably and without issues. In particular, this data serves the following purposes:
System security of the website
System stability of the website
Troubleshooting on the website
Establishing a connection to the website
Display of the website
Processing is carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in processing this data, in particular our interest in the functionality of the website and its security.
This data is, where possible, stored in pseudonymized form and deleted once the relevant purpose has been achieved.
To the extent the server log files allow identification of the data subject, the data is stored for a maximum of 14 days. An exception applies if a security-related event occurs. In this case, the server log files are retained until the security-related event has been resolved and fully investigated.
There is otherwise no merging with other data.
3.2 Cookies
3.2.1 General
This website uses so-called cookies. These are data records, or pieces of information, stored in your device's browser that relate to our website.
By setting cookies, navigation of the website can be made easier for visitors, among other things.
In our cookie consent tool you will find all information about the cookies we use on our website (where applicable, with your consent).
3.2.2 Rejecting cookies
You can directly manage all cookies that are not technically necessary via our cookie consent tool.
The setting of cookies can be prevented by adjusting your browser settings.
Here are links for commonly used browsers:
Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
Google Chrome: https://support.google.com/chrome/answer/95647
Microsoft Edge: https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Safari: https://support.apple.com/guide/safari/sfri11471/mac
If you use a different browser, we recommend entering your browser's name together with "delete and manage cookies" into a search engine and following the official link to your browser.
Alternatively, you can manage your cookie settings at www.aboutads.info/choices/ or www.youronlinechoices.com.
Please note, however, that comprehensive blocking/deletion of cookies may impair the use of the website.
3.2.3 Technically necessary cookies
We use technically necessary cookies on this website so that it functions correctly and in accordance with applicable law. They help make the website user-friendly. Some functions of our website cannot be displayed without the use of cookies.
The legal basis for this is, depending on the individual case, Art. 6(1)(b), (c) and/or (f) GDPR.
3.2.4 Technically non-necessary cookies
We also use cookies on our website that are not technically necessary. These cookies are used, among other things, to analyze the browsing behavior of website visitors or to offer website functions that are not technically essential.
The legal basis for this is your consent pursuant to Art. 6(1)(a) GDPR.
Technically non-necessary cookies are only set with your consent, which you can withdraw at any time in the cookie consent tool.
3.3 Data processing through user input
3.3.1 Our own data collection
We offer the following service(s) on our website: contact form and newsletter.
For this purpose, we collect the following data:
Name
Email address
Phone number
The legal basis for this data processing is Art. 6(1)(b) GDPR.
The data will be deleted as soon as the respective purpose no longer applies and this is permitted under applicable legal provisions.
3.3.2 Contacting us
a) Email
If you contact us by email, we process your email address and any other data contained in the email. This is stored on the mail server and, in part, on the respective end devices. Depending on the request, the legal basis is generally Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR. The data will be deleted as soon as the respective purpose no longer applies and this is permitted under applicable legal provisions.
b) Telephone
If you contact us by telephone, the call data may be stored in pseudonymized form on the respective end device and at the telecommunications provider used. Personal data collected during the call is processed exclusively to handle your request. Depending on the request, the legal basis is generally Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR. The data will be deleted as soon as the respective purpose no longer applies and this is permitted under applicable legal provisions.
c) Contact form
We offer a contact form, which serves to enable contact with our company.
In this form, we generally process your first and last name, your phone number, your email address, a postal address, and the content of your message. The data is stored on our web server and forwarded internally to the relevant email addresses.
The legal basis for this data processing is Art. 6(1)(f) GDPR, as we have a legitimate interest in responding to your request and in offering an uncomplicated way to contact us. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
We delete this data no later than 3 months after receipt, unless it is required for an existing contractual relationship.
We use the contact form provided by
Wix
Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel
https://de.wix.com/about/privacy
on our website.
d) Appointment scheduling tool
Hubspot
To enable you to schedule an appointment with us, we integrate the functions of Hubspot Inc., 25 Street, Cambridge, MA 02141 USA.
The data requested for this purpose is used to plan, conduct and follow up on the appointment, and is stored and processed on Hubspot CRM servers. Hubspot CRM enables us to manage existing and prospective customers as well as customer contacts.
Hubspot may set cookies on our website to collect and store data. These cookies are only set with your consent. You may withdraw and manage your consent at any time in our cookie consent tool. The legal basis for this is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as this consent covers access to information on the user's terminal device or the storage of cookies within the meaning of the TDDDG.
The legal basis for the data processing is Art. 6(1)(b) and (f) GDPR, as it serves to carry out (pre-)contractual measures undertaken at your request, and we have a legitimate interest in conducting our business activities.
The data is stored until the data subject requests deletion, withdraws consent to storage, or the purpose for storage no longer applies. Mandatory statutory retention periods remain unaffected.
For data transfers to the USA, the Standard Contractual Clauses (SCC) of the EU Commission apply.
Further information can be found here:
https://legal.hubspot.com/privacy-policy
3.4 Cookie consent tool
3.4.1 Wix
To ensure that only cookies for which there is a legal basis are set on our website, we use Wix's consent management tool. This service is offered by Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel.
This service is used to obtain and document, in compliance with data protection law, the consent of the website visitor to the storage of certain cookies in their browser or the use of certain technologies.
When this website is accessed, the consent given or withdrawn by the website visitor is stored as a Wix cookie in the visitor's browser. For this purpose, a connection is established to Wix's servers.
The legal basis is Art. 6(1)(c) GDPR. Wix is used to obtain the legally required consent for the use of cookies.
The collected data is stored until the website visitor requests deletion, Wix itself deletes it, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.
3.5 Website builder system
3.5.1 Wix
We use the Wix service to create our website. This is a service provided by Wix.com Ltd, Namal 40, 6350671 Tel Aviv, Israel.
Wix is a website builder system that allows users to create HTML5 websites and mobile websites. It is a cloud-based online platform. This makes it very easy to integrate functions into our own website. Using this service, we can design our website according to our wishes and meet our goal of user-friendliness.
Wix uses cookies. These cookies are only set with the consent of the website visitor and can be withdrawn at any time. The legal basis for the processing is Art. 6(1)(a) GDPR.
Beyond that, the use of this service is technically necessary for us to display our website. The legal basis for the processing is Art. 6(1)(f) GDPR.
The data is deleted as soon as it is no longer required for processing purposes.
Further information:
https://de.wix.com/about/privacy
3.6 Newsletter
3.6.1 Hubspot
We use Hubspot to provide our newsletter. This service is offered by Hubspot Inc., 25 Street, Cambridge, MA 02141 USA.
This service enables the organization and analysis of newsletter dispatch. The data entered to receive the newsletter is stored on the service's servers.
With the help of Hubspot, interactions with the newsletter can be analyzed. Furthermore, conversion rates can be determined and newsletter users categorized in order to tailor the newsletter to different target groups.
The legal basis for the processing is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time by unsubscribing from the newsletter. The lawfulness of processing carried out prior to withdrawal remains unaffected.
We also use additional email services from Hubspot to fulfil our contractual obligations and for customer management. The legal basis for this is Art. 6(1)(b) GDPR.
The data is deleted upon termination of the contract between us and Hubspot, unless the website visitor withdraws consent beforehand. In that case, the data is removed from the distribution list.
Hubspot is certified under the EU-US Data Privacy Framework.
Further details:
https://legal.hubspot.com/privacy-policy
3.7 Analytics and tracking tools
3.7.1 Google Analytics
We use Google Analytics on this website. Google Analytics is a web analytics service offered by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to recognize users and thereby analyze usage behavior. These cookies are only set with consent. Consent can be withdrawn and managed at any time in our cookie consent tool.
The legal basis for the processing is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
The information collected here is generally transmitted to a Google server in the USA and stored there. On 10 July 2023, the European Commission adopted an adequacy decision for the USA. Google LLC is certified under the EU-US Data Privacy Framework. However, since Google's servers are located worldwide and data transfer to third countries (e.g. Singapore) cannot be ruled out, the Standard Contractual Clauses (SCC) of the EU Commission apply.
Through the use of Google Analytics, IP anonymization is applied. The user's IP address is shortened within the EU member states (or the European Economic Area) on servers within the EU so that tracing back to a natural person is no longer possible. In addition, Google commits to appropriate data protection via the Google Ads data processing terms, and compiles an analysis of website usage and website activity and provides the related services. Google's Ads data processing terms apply to businesses subject to the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or similar regulations.
An additional browser plugin can prevent the collected information (such as the IP address) from being sent to and used by Google. The plugin and further information can be found at https://tools.google.com/dlpage/gaoptout.
Otherwise, the storage period depends on the type of data processed. Each customer can choose how long Google Analytics retains data before it is automatically deleted. The maximum lifespan of a Google Analytics cookie is two years.
Further information on Google's use of data can also be found at https://support.google.com/analytics/answer/6004245. For all further inquiries, you may also contact support-deutschland@google.com directly.
3.7.2 YouTube
We embed YouTube videos on this website. YouTube is an online video platform offered by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
As soon as you start a video on our website, a connection is established to YouTube's servers. After starting a video, YouTube may set cookies on the website visitor's device to store settings and preferences and subsequently display personalized advertising. The information obtained is also used for video statistics, improving usability, and preventing fraud attempts.
The legal basis for the processing is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as this consent covers access to information on the user's terminal device or the storage of cookies within the meaning of the TDDDG. This consent can be withdrawn at any time.
Further information:
https://policies.google.com/privacy
3.7.3 LinkedIn Insight Tag
We use LinkedIn Insight Tag on this website. LinkedIn Insight Tag is a web analytics service offered by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
With the help of LinkedIn Insight Tag, we obtain information about visitors to our website. If a website visitor is registered with LinkedIn, we can analyze professional data in order to target our website towards specific audiences. For the purpose of targeted advertising, cross-device conversion tracking and retargeting may also take place. LinkedIn Insight Tag also collects log files. The IP address is anonymized.
LinkedIn Insight Tag uses cookies to recognize website visitors and analyze user behavior.
The legal basis for the processing is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as this consent covers access to information on the user's terminal device or the storage of cookies within the meaning of the TDDDG.
LinkedIn members' direct identifiers are deleted after seven days, and the remaining pseudonymized data within 180 days.
The collected data is also transferred to the USA and other third countries.
For data transfers to the USA, the Standard Contractual Clauses (SCC) of the EU Commission apply.
Further details:
https://www.linkedin.com/legal/l/dpa
https://www.linkedin.com/legal/l/eu-sccs
https://www.linkedin.com/legal/l/cookie-table
3.7.4 WIX Analytics
We integrate Wix's analytics functions on our website. This service is offered by wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel.
Wix Analytics collects and stores various types of user data for optimization and marketing purposes. This data is anonymized and compiled into statistical reports. The information collected includes login data, time zone settings, operating system and platform used, details of website visits such as URL, duration of use, number of pages visited per session, search terms entered, information about interactions on the website (e.g. content searched for or viewed), page response speed, and conversion rate.
For this purpose, Wix Analytics sets cookies. The legal basis for the processing is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as this consent covers access to information on the user's terminal device or the storage of cookies within the meaning of the TDDDG.
Otherwise, the legal basis for the processing is Art. 6(1)(f) GDPR. We have a legitimate interest in this analysis to ensure the technical stability of our website.
Further information:
https://de.wix.com/about/privacy
3.7.5 HubSpot
We integrate HubSpot functions on our website, a comprehensive marketing, sales and CRM service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. HubSpot offers a variety of tools for managing customer relationships, automating marketing campaigns, analyzing user behavior, and supporting sales and customer service processes. Among other things, IP addresses, pages visited, usage data, interaction data, location information, and technical data such as browser type and operating system are processed. Data processing is carried out for the purpose of analyzing user behavior, optimizing our website, managing customer relationships, and conducting marketing campaigns. The legal basis for the processing is the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR, as well as Art. 6(1)(f) GDPR based on a legitimate interest, where processing is necessary to improve our services and optimize sales and customer service processes. HubSpot sets cookies that are used for analytics, functionality, and marketing purposes. These cookies are only set with consent, which can be withdrawn at any time. Data is transferred to a third country, in particular the USA. The Standard Contractual Clauses (SCC) of the EU Commission are used to ensure an adequate level of data protection. The data is deleted as soon as it is no longer required to achieve the purpose of its collection or when consent is withdrawn. Mandatory statutory retention periods remain unaffected. Further information on data processing by HubSpot can be found here: https://www.hubspot.com/privacy-policy
3.8 Social media plugins
3.8.1 LinkedIn
Elements of the social network LinkedIn are embedded on this website. This service is offered by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
If the social media element is activated, a direct connection is established between the website visitor and LinkedIn's servers, and the visitor's IP address is transmitted to LinkedIn. If the website visitor has a user account, the visit to this website may be assigned to the corresponding user account. The website operator gains no knowledge of the content of the transmitted data.
The legal basis for the processing is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.
For data transfers to the USA, the Standard Contractual Clauses (SCC) of the EU Commission apply.
https://www.linkedin.com/help/linkedin/answer/62538
Further information:
https://www.linkedin.com/legal/privacy-policy
3.8.2 XING
Elements of the social network XING are embedded on this website. This service is offered by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
If the social media element is activated, a direct connection is established between the website visitor and XING's servers. Personal data and the IP address are not stored in this process. User behavior is not analyzed.
The legal basis for the processing is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.
Further details:
https://privacy.xing.com/en/privacy-policy
3.9 Social media profiles
In addition to our website, we are also present on social networks with our company. Here, we aim to present our company and create the opportunity to get in touch with us.
We also use the opportunity to place advertisements and job postings on social media.
Below we inform you about what data we and the respective social network process when you visit and interact with our profile.
3.9.1 LinkedIn
We operate a LinkedIn profile at https://www.linkedin.com/. This social network is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
a) Interaction with our company profile
When you visit our LinkedIn profile and interact with us through it, we process personal data. On the one hand, this includes data publicly available on the profile. On the other hand, it also includes personal data contained in posts, comments, or direct messages sent to us. Through interactions such as likes or shares, we can see the user profile along with its public information.
The legal basis for this processing is Art. 6(1)(f) GDPR. We have a legitimate interest in providing relevant and interesting content and enabling the use and functionality of our LinkedIn profile.
To the extent a request is related to the performance of a contract or is necessary to carry out pre-contractual measures, our processing is based on Art. 6(1)(b) GDPR.
b) Page insights
LinkedIn provides us with aggregated statistics and insights (so-called Page Insights) that give us information about how people interact with our company page. This includes, among other things, information about the number of profiles that view, comment on, or otherwise interact with our posts, as well as aggregated demographic and other information that helps us understand interaction with our page or LinkedIn profile. Page Insights provided to us by LinkedIn consist of aggregated data; LinkedIn does not provide us with personal data of members in connection with Page Insights. We also have no way of linking Page Insights to individual members.
When placing advertisements, LinkedIn provides us with information about the types of people who view our ads and about the success of our ads. Personal data is only shared with us if the relevant person has consented to such processing. We also receive information from LinkedIn that helps us understand which of our ads led to a purchase or another action being taken.
Processing this data serves the purpose of analyzing our reach and adapting our content and ads to user interests. By evaluating this data, we can understand how our content, profile and advertising are being consumed. This allows us to create targeted content and run advertising to better market our company and services.
Processing is based on our legitimate interest pursuant to Art. 6(1) sentence 1(f) GDPR.
Processing of personal data in connection with so-called Page Insights takes place under joint controllership with LinkedIn pursuant to Art. 26(1) GDPR.
We have entered into a corresponding agreement with LinkedIn in this regard, which can be viewed here:
https://legal.linkedin.com/pages-joint-controller-addendum
LinkedIn's contact details are:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
You can contact LinkedIn's data protection officer via the following link:
https://www.linkedin.com/help/linkedin/ask/TSO-DPO
3.9.2 Processing by LinkedIn
In connection with your visit to our company profile, LinkedIn may also process personal data beyond this. In this case, the processing takes place under LinkedIn's sole responsibility and without our knowledge. Further information from LinkedIn on this can be found at:
https://www.linkedin.com/legal/privacy-policy
3.10 Xing
We operate a Xing page. This social media platform is offered by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.
3.10.1 Interaction with our company profile
When you visit our Xing profile and interact with us through it, we process personal data. On the one hand, this includes data publicly available on the profile. On the other hand, it also includes personal data contained in posts, comments, or direct messages sent to us. Through interactions such as likes or shares, we can see the user profile along with its public information.
There is also the option, via the company profile, to contact us as the operator through the contact channels provided.
If users are logged into their XING user account when accessing the company page, information about accessing the service may be linked to their respective user account. This information is also available to us as operator of the company profile. This can be avoided by logging out of the XING user account before visiting the company page.
The legal basis for the processing is Art. 6(1)(f) GDPR. We have a legitimate interest in providing relevant and interesting content, maintaining business contacts, drawing attention to our services and job postings, and engaging with visitors to our profile and interested parties.
To the extent a request is related to the performance of a contract or is necessary to carry out pre-contractual measures, our processing is based on Art. 6(1)(b) GDPR.
3.10.2 Processing of personal data and cookies by Xing
When our company profile is used and accessed, personal data is also processed by Xing. This processing takes place under Xing's sole responsibility. We have no influence over the processing carried out by Xing.
If consent has been given (for example, by setting the XING status to "actively job seeking"), Xing will contact you directly to suggest suitable job offers.
Processing of data can be restricted in the privacy settings.
Xing's privacy policy can be viewed here:
https://privacy.xing.com/en/privacy-policy
3.10.3 YouTube
We operate a profile on YouTube. This is a video platform of Google Ireland Limited, based at Gordon House, Barrow Street, Dublin 4, Ireland, which allows us to publish video content and interact with our audience.
3.10.4 Data processing by us
We also process data of profile visitors. We process data from your use of our profile, which is made available to us by YouTube.
This information includes statistics on visits to our profile, reports on the watch time of our videos, on user interaction (e.g. "likes" or comments), as well as information about individual people who actively interact with our page, e.g. by subscribing or using YouTube's communication features.
The data entered on YouTube, in particular the username and the content published under the account, is made visible and processed by us through interactions with our profile.
We process this data to enable communication and to optimize the reach and target audience of our content.
The legal basis for the processing is a legitimate interest pursuant to Art. 6(1)(f) GDPR for the purposes stated.
3.10.5 Data processing by YouTube
When you visit or interact with our YouTube channel, YouTube collects personal data such as IP address, device information, geographic information, as well as activities on the platform, including videos viewed and interactions such as likes, comments and subscriptions. This data may be collected through cookies and similar technologies stored on the device.
YouTube uses this information to operate and improve the platform, display personalized advertising, and carry out analyses and measurements to understand how users interact with the content. In addition, this data processing helps assess and improve the reach and effectiveness of the content.
YouTube's processing of this data is based, among other things, on your consent, expressed by accepting YouTube's cookie policies.
The data collected by YouTube may be shared within the Google corporate group as well as with third parties, which may be based in countries outside the European Union, including the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection is maintained even when data is transferred to third countries.
We have no influence over the scope of data processed by YouTube, the type of processing and use, or the disclosure of this data to third parties. Nor do we have any effective means of control in this regard.
Information on what data is processed by YouTube and for what purposes can be found in YouTube's privacy policy: https://policies.google.com/privacy
3.11 Third-party content
3.11.1 Dieter Live API
To display our privacy policy, we use the Live API of "Dieter macht den Datenschutz." This is a service of simply Legal GmbH, Burkarderstraße 36, 97082 Würzburg, Germany.
The API is a technical interface. When our privacy policy is accessed, a connection is established to the servers of simply Legal GmbH. In this process, your IP address is transmitted to simply Legal GmbH.
Further information on how simply Legal GmbH handles data:
https://www.dieter-datenschutz.de/datenschutz/
3.12 Audio and video conferencing
3.12.1 Microsoft Teams
We use Microsoft Teams to communicate with customers. Microsoft Teams is an online conferencing tool. This service is offered by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
When communicating using this tool via video or audio conferencing, personal data is processed by us and by the tool's provider. The data collected includes all information you provide when using the tool. Metadata related to the conference is also processed. Furthermore, technical information required for the operation of the online communication is processed. In addition, all files shared within the tool are stored on the provider's servers.
Microsoft Teams may also set cookies. These cookies are only set with consent. This consent can be withdrawn at any time. The legal basis for this is Art. 6(1)(a) GDPR.
Otherwise, the legal basis for processing data through Microsoft Teams is Art. 6(1)(b) GDPR. The communication is related to the performance of a contract or is necessary to fulfil pre-contractual obligations. Furthermore, this tool is used to simplify communication with our company. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
This data is stored until the data subject requests deletion, consent to storage is withdrawn, or the purpose for storage no longer applies. Cookies remain on the device until the user deletes them. Mandatory statutory retention periods remain unaffected.
Further details:
https://privacy.microsoft.com/en-us/privacystatement
3.13 CRM systems
3.14 Hubspot CRM
We use the CRM system Hubspot. This service is offered by Hubspot Inc., 25 Street, Cambridge, MA 02141 USA.
CRM (Customer Relationship Management) is a system for managing all interactions and relationships a company has with its current and prospective customers. It supports the automation and optimization of sales processes, marketing campaigns, customer service, and customer communication.
As soon as we collect your personal data on our website, it is processed by us in the Hubspot CRM system.
The legal basis for this is Art. 6(1)(b) GDPR. The data processing is carried out to fulfil (pre-)contractual obligations.
Hubspot is certified under the EU-U.S. Data Privacy Framework. Otherwise, the Standard Contractual Clauses (SCC) of the EU Commission apply.
Further information:
https://legal.hubspot.com/privacy-policy
3.15 Cloud backups
We use cloud backup functions on our website to protect website data and content from data loss, corruption, or security incidents. This ensures that in the event of server failure, a hacking attack, or other unforeseen events, the website can be quickly and fully restored.
To the extent personal data is stored on our website, this data is transferred to the respective provider's servers as part of the backup process. The legal basis for the data processing is Art. 6(1)(f) GDPR, as we have a legitimate interest in securing our data.
We use the following cloud backup service:
OneDrive
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
https://privacy.microsoft.com/en-us/privacystatement
4. Other important information
In conclusion, we would like to inform you in detail about your rights and let you know how you will be informed about changes to data protection requirements.
4.1 Your rights in detail
4.1.1 Right of access pursuant to Art. 15 GDPR
You may request information about whether personal data concerning you is being processed. If so, you may request further information about the nature of the processing. A detailed list can be found in Art. 15(1)(a) to (h) GDPR.
4.1.2 Right to rectification pursuant to Art. 16 GDPR
This right includes the correction of inaccurate data and the completion of incomplete personal data.
4.1.3 Right to erasure pursuant to Art. 17 GDPR
This so-called "right to be forgotten" gives you the right, under certain conditions, to request that the controller delete your personal data. This is generally the case when the purpose of the data processing no longer applies, when consent has been withdrawn, or when the original processing took place without a legal basis. A detailed list of grounds can be found in Art. 17(1)(a) to (f) GDPR. This "right to be forgotten" also corresponds to the controller's obligation under Art. 17(2) GDPR to take appropriate measures to bring about general deletion of the data.
4.1.4 Right to restriction of processing pursuant to Art. 18 GDPR
This right is subject to the conditions set out in Art. 18(1)(a) to (d) GDPR.
4.1.5 Right to data portability pursuant to Art. 20 GDPR
This regulates the fundamental right to receive your own data in a commonly used format and to transmit it to another controller. However, this only applies to data processed on the basis of consent or contract under Art. 20(1)(a) and (b), and only insofar as this is technically feasible.
4.1.6 Right to object pursuant to Art. 21 GDPR
You generally have the right to object to the processing of your personal data. This applies in particular when your interest in objecting outweighs the controller's legitimate interest in the processing, and when the processing relates to direct marketing and/or profiling.
4.1.7 Right regarding "automated decision-making in individual cases" pursuant to Art. 22 GDPR
You generally have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. This right is also subject to restrictions and additions set out in Art. 22(2) and (4) GDPR.
4.1.8 Other rights
The GDPR includes extensive rights regarding the notification of third parties about whether or how you have exercised your rights under Art. 16, 17, 18 GDPR. However, this only applies insofar as this is possible or can be carried out with reasonable effort.
We would also like to remind you once again of your right to withdraw any consent given, pursuant to Art. 7(3) GDPR. The lawfulness of processing carried out prior to withdrawal remains unaffected.
We would furthermore like to draw your attention to your rights under Sections 32 et seq. of the German Federal Data Protection Act (BDSG), which are largely consistent in content with the rights described above.
4.1.9 Right to lodge a complaint pursuant to Art. 77 GDPR
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you violates this regulation.
5. What happens if the GDPR is abolished tomorrow or other changes occur?
The current version of this privacy policy is dated 28 March 2025. From time to time, it may be necessary to adapt the content of this privacy policy in response to factual and legal changes. We therefore reserve the right to amend this privacy policy at any time. We will publish the amended version at the same location and recommend that you read the privacy policy regularly.
Created with the kind support of Dieter macht den Datenschutz