Our company places a high value on the protection of personal data and respects your desire for privacy. Below we inform you about the collection of personal data when using our website or when you participate in our competitions. If you have any further questions about how we handle your personal data, please feel free to contact our data protection officer.

§ 1 Information on the collection of personal data

(1) Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior.

(2) The responsible party according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is see our imprint. You can reach our data protection officer at datenschutz@cbs-consulting.de or our postal address with the addition “the data protection officer”.

(3) When you contact us by email or through a contact form, the data you provide (your name, your (email) address, your phone number, the name and address of your company, and possibly your job title) will be stored by us to answer your questions. We delete the data arising in this context after storage is no longer required, or limit the processing if there are statutory retention requirements.

(4) If we want to use commissioned service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. We also specify the defined criteria for the storage duration.

 

§ 2 Your rights

(1) You have the following rights regarding your personal data:

  • Right to information (Art. 15 GDPR),
  • Right to rectification or deletion (Art. 16, 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to object to processing (Art. 21 GDPR),
  • Right to data portability (Art. 20 GDPR).

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 GDPR).

 

§ 3 Collection of personal data when visiting our website

(1) In the case of merely informative use of the website, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Operating system and its interface
  • Language, type and version of browser software
  • Internet service provider of the accessing system

(2) Use of cookies: In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the place that sets the cookie (here by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

(3) This website uses the following types of cookies, the scope and function of which are explained below:

  • Transient cookies (see b)
  • Persistent cookies (see c)

a) Transient cookies are automatically deleted when you close the browser. This includes, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

c) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

d) We use cookies to identify you for future visits if you have an account with us. Otherwise, you would have to log in again for each visit.

 

§ 4 Competitions

The organizer points out that all personal data of the participant will not be passed on to third parties without consent nor will it be made available for use by them and will not be transferred to third countries outside the European Union.

 

§ 5 Use of Social Media Plug-ins

(1) We currently use the following social media plug-ins: Facebook, Twitter, Xing, LinkedIn, Instagram. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. The provider of the plug-in can be identified by the marking on the box over its initial letter or the logo. We give you the opportunity to communicate directly with the provider of the plug-in by clicking on the button. Only if you click on the marked field and thereby activate it, does the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned in § 3 of this declaration will be transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is immediately anonymized after collection. By activating the plug-in, personal data is therefore transmitted from you to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider carries out the data collection in particular via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the grayed-out box.

(2) We have no control over the collected data and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, or the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as usage profiles and uses these for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly assigned to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you regularly log out after using a social network, but especially before activating the button, as this will prevent you from being assigned to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy statements provided by these providers below. There you will also find further information about your rights in this regard and setting options for the protection of your privacy.

(6) Addresses of the respective plug-in providers and URL with their privacy notices:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

d) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.

e) Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA); https://help.instagram.com/519522125107875

f) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

§ 6 Use of Google Analytics

Insofar as you have given your consent, we use Google Analytics, a web analysis service of Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.
We use the User-ID feature. With the help of the User ID, we can assign a unique, permanent ID to one or more sessions (and the activities within those sessions) and analyze user behavior across devices.

With Google Analytics 4, IP address anonymization is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. According to Google, the IP address provided by your browser will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of “events”. Events can be:

  • Page views
  • First-time visit to the website
  • Start of the session
  • Visited web pages
  • Your “click path”, interaction with the website
  • Scrolls (whenever a user scrolls to the bottom of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • File downloads
  • Viewed / clicked ads
  • Language settings

Additionally, the following is recorded:

  • Your approximate location (region)
  • Date and time of the visit
  • Your IP address (in shortened form)
  • Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
  • Your Internet provider
  • The referrer URL (via which website/ via which advertising medium you came to this website)

On behalf of the operator of this website, Google will use this information to evaluate your (pseudonymous) use of the website and to compile reports on website activities. The reports provided by Google Analytics serve to analyze the performance of our website and the success of our marketing campaigns.

Recipients of the data may be/can be

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor according to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

The European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (such as Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

The data sent by us and linked to cookies will be automatically deleted after [insert period]. The maximum lifespan of Google Analytics cookies is 2 years. Deletion of data whose retention period has been reached is carried out automatically once a month.

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TTDSG.

You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.

You can also prevent the storage of cookies in the first place by setting your browser software accordingly. However, if you configure your browser to reject all cookies, you may experience limitations in functionality on this and other websites. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by

  1. Not granting your consent to the setting of the cookie or
    b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

For more information on Google Analytics terms of use and privacy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

§7 Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, store cookies, or perform any independent analyses. It is used solely for management and delivery of the tools integrated through it. However, the Google Tag Manager does collect your IP address, which can also be transferred to the parent company of Google in the United States.

The use of the Google Tag Manager is based on Art. 6 Abs. 1 lit. f GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on his website. If a corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 Abs. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

 

§8 Matomo

Our website uses the open-source web analysis service Matomo, a tool by “InnoCraft Ltd,” located at 7 Waterloo Quay PO625 Wellington, New Zealand. The representative of InnoCraft within the EU is: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg (privacy@innocraft.com). We operate the service on-premise, which means we host Matomo exclusively on our own servers locally. Therefore, the data collected by Matomo is not transmitted to the Matomo service provider or any other servers beyond our control.

Matomo uses so-called persistent first-party cookies, which enable the analysis of website usage. For this purpose, your usage information (your truncated IP address, session recordings, mouse events, click paths, user-agent, approximate location, date, time, and duration of the visit) is transmitted to our server and stored for usage analysis purposes. Your IP address is immediately anonymized in this process, so you are not identifiable to us as a user.

We use the data collected by Matomo for statistical analysis of user behavior to improve the functionality and stability of the website and to understand which of our web contents are of interest to our users. The heatmap and session recording modules are used in this process, which record, statistically evaluate, and visually prepare the activities of our users during their visit to our website. This allows us to track, for example, how much time our users spend on which pages of our website, how quickly and how far they scroll, which links are clicked most frequently, and which areas of the website appear to be particularly interesting. Individual user sessions are recorded for this purpose. The masking mode is used, which means that possible input fields for user-related data (name, email address, etc.) on our website are not recorded.

We store the analysis data only as long as required for the purpose of data processing, but no longer than 12 months.

The legal basis for this data processing is your previously given consent, Art. 6(1)(a) GDPR, § 25(1) TTDSG. You can withdraw your consent at any time with effect for the future by accessing the cookie settings in our consent management platform (button at the bottom left) and changing your selection there. The legality of the processing carried out on the basis of the consent until the withdrawal remains unaffected.

For more information on data protection at Matomo, please visit: https://matomo.org/privacy/

§9 Salesforce Pardot

For registration to webinars, events and for contact inquiries via our WEB form, we use the service Salesforce Pardot. (Salesforce.com, Inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States, hereinafter: “Salesforce”) The following data is processed by Salesforce on our behalf. The data is also transferred to the USA. Salesforce has enacted binding corporate rules (so-called Binding Corporate Rules, available at https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/misc/Salesforce-Processor-BCR.pdf), which ensure a secure transfer of the data. For more information on privacy at “Salesforce”, please visit: https://www.salesforce.com/company/privacy/full_privacy/#nav_info

The following data is processed in this context: Email address, company (optional), title, first and last name. The legal basis for the processing of your personal data in this case is the consent you have given in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time

 

Scope of this Privacy Policy

This privacy policy is valid for our website at www.cbs-consulting.com. If you follow a hyperlink to a linked website, please note that we cannot assume any responsibility or guarantee for third-party privacy conditions. Please make sure you are aware of the applicable privacy policies before submitting personal data to these websites.

© cbs Corporate Business Solutions GmbH, Heidelberg. All rights reserved. The product names used are trademarks of their respective manufacturers.