Data protection
Legal Notice
You can generally use our website without providing any personal data. However, in individual cases, the collection and processing of your personal data may be necessary in order to use certain functions of our website. In addition, we collect and process personal data to optimize our website and services, which we handle in accordance with applicable data protection regulations.
We take the protection of your personal data very seriously and would therefore like to inform you below about your rights as well as the nature and scope of the respective data collection.
schurig.consulting GmbH
Straße des 17. Juni 25, 01257 Dresden
1. Responsible person and contact for data protection inquiries
Person responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):
schurig.consulting GmbH
Straße des 17. Juni 25, 01257 Dresden
Mr. André Schurig
Phone: +49 173 885 76 82
Email: andre@schurig.consulting
2. Definitions
Personal Data
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more specific characteristics that express the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.
Data Subject
A data subject is the individual whose personal data is processed by the controller.
Processing
Processing means any operation or set of operations performed on personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements of that natural person.
Pseudonymization
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person.
Controller
The controller is the person who determines the purposes and means of processing personal data and carries out such processing accordingly.
Processor
The processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
Recipient
The recipient is a natural or legal person, public authority, agency, or another body to which personal data is disclosed.
Consent
Consent of the data subject is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, given by a statement or by a clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to them.
Personal Data Breach
A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data that has been transmitted, stored, or otherwise processed.
Biometric Data
Biometric data means personal data resulting from specific technical processing relating to the physical, physiological, or behavioral characteristics of a natural person, which allows or confirms the unique identification of that natural person, such as facial images or fingerprint data.
Health Data
Health data means personal data related to the physical or mental health of a natural person, including the provision of healthcare services, which reveal information about their health status.
Supervisory Authority
The supervisory authority is an independent public authority established by a Member State pursuant to Article 51 of the GDPR, responsible for monitoring compliance with data protection laws and regulations.
3. Information on the processing of personal data
We process your personal data using various technical methods and, where applicable, with the involvement of additional service providers. We would like to inform you about the specific details of this processing in the following sections.
Visiting Our Website
(1) When you visit our website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR, § 15 German Telemedia Act (TMG)):
-
IP address and service provider
-
Date and time of the request
-
Content of the request (specific page)
-
Access status / HTTP status code
-
Amount of data transferred in each case
-
Website from which the request originates
-
Browser including language and software version
-
Operating system and its interface
(2) The data listed in paragraph 1 is also automatically stored in the log files of our server. The log data is stored separately from other data and can only be viewed by the hosting provider. The storage period for the log data is 7 days. The legal basis for processing your data when visiting our website is Art. 6 para. 1 sentence 1 lit. f GDPR, § 15 German Telemedia Act (TMG).
Use of Cookies
-
In addition to the data mentioned above, cookies are stored on your device when you use our website. Cookies are small text files that are stored on your hard drive and associated with the browser you are using. They allow certain information to be transmitted to the party that sets the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the overall internet offering more user-friendly and effective.
-
This website uses the following types of cookies, the scope and functionality of which are explained below: transient cookies and persistent cookies.
-
Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. They store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your device to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
-
Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.
-
You can configure your browser settings according to your preferences and, for example, refuse the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all functions of this website in this case. The legal basis for the use of cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.
-
By clicking “Accept All” in the cookie banner, you also consent in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR to your data being processed in the United States. The European Court of Justice considers the USA to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without legal remedies. If you click “Functional Cookies Only,” the transfer described above will not take place.
Use of the Contact Form
-
When you contact us via the contact form on our website, the data you provide (your email address and usually your name, your phone number, and any other information you provide) will be stored by us at the time of submission in order to process your request.
-
Alternatively, you can contact us via the email address provided on our website, which can be found in the legal notice (Imprint).
-
You can object to the processing of your personal data at any time by sending an email to office@3sk.eu or by declaring your objection to the persons listed in section 1. If you contact us directly by email, you may object to the processing of your personal data at any time using the same methods.
-
We delete the data collected in this context once storage is no longer necessary, or restrict processing if there are statutory retention obligations. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.
-
If your contact is aimed at concluding a contract, the additional legal basis for processing your personal data is Art. 6 para. 1 lit. b GDPR.
4. Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). This tracking measure used by schurig.consulting is based on Art. 6 para. 1 sentence 1 lit. f GDPR.
The legitimate interests of schurig.consulting within the meaning of the aforementioned provisions serve the purpose of enabling a needs-based design and the continuous optimization of our website. In addition, by using Google Analytics, we can statistically record the use of our website and optimize our offering.
Google Analytics uses so-called “cookies,” text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or if such third parties process the data on Google’s behalf.
You can prevent the installation of cookies by adjusting your browser software accordingly. Please note that in this case you may not be able to use all functions of this website to their full extent.
By using our website, you consent to the processing of data collected about you by Google in the manner described above and for the purpose stated above.
You can object to the collection and use of your IP address by Google Analytics at any time with effect for the future. Further information can be found at: tools.google.com/dlpage/gaoptout.
We would like to point out that Google Analytics has been extended on this website with the code “gat._anonymizeIp();” to ensure anonymized collection of IP addresses.
Further information on data usage by Google Inc. can be found at: https://support.google.com/analytics/answer/6004245?hl=en
Integration of Google reCAPTCHA
To protect the contact form on our website, we use the Google service reCAPTCHA. This is used to determine whether the input in the contact form is made by a human or abusively by automated, machine processing. The legal basis for the use of Google reCAPTCHA is Art. 6 para. 1 sentence 1 lit. f GDPR.
When visiting the website, the reCAPTCHA described above is loaded from a Google server. In addition, the data mentioned in section 3, “Use of Cookies” and “Visiting Our Website,” of this declaration are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish this assignment to your Google profile, you must log out of your Google account before visiting our website. Google stores your data as user profiles and uses them for purposes of advertising, market research, and/or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Provider information: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the provider’s privacy policy. There you will also find further information about your rights in this regard and settings options to protect your privacy: https://www.google.com/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Integration of Google Web Fonts
This website uses Google Web Fonts for improved visual presentation. These are fonts that are loaded from a Google server when you access our website and stored in your browser cache to display our website. Further information can be found at https://fonts.google.com/about. The legal basis for the use of Google Web Fonts is Art. 6 para. 1 sentence 1 lit. f GDPR.
By visiting the website, Google receives the information that you have accessed it. In addition, the data mentioned in section 3, “Use of Cookies” and “Visiting Our Website,” of this declaration are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish this assignment to your Google profile, you must log out of your Google account before visiting our website. Google stores your data as user profiles and uses them for purposes of advertising, market research, and/or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Provider information: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the provider’s privacy policy. There you will also find further information about your rights and settings options to protect your privacy: https://www.google.com/policies/privacy.
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
5. Online presence in social media
schurig.consulting maintains online presences within social networks and platforms to communicate with business partners, prospective clients, and users active there and to inform them about our services. When accessing these networks and platforms, the terms and conditions and data processing policies of their respective operators apply. Unless otherwise stated in our privacy policy, we process user data when users communicate with us within these social networks and platforms, for example, by posting on our online presences and sending messages.
6. Social Media Plugins
On our website, we use plugins from the social networks Facebook and Instagram on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR in order to increase awareness of our company, as well as for analysis, optimization, and the economic operation of our online offering. The legal purpose behind this is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be ensured by the respective providers. We integrate these plugins using the so-called two-click method in order to provide the best possible protection for visitors to our website.
a) Facebook Social Plugins
Our website uses social media plugins from the social network facebook.com, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins may display interaction elements or content (e.g., videos, graphics, or text posts) and can be recognized by one of the Facebook logos (white “f” on a blue tile, the terms “Like”, “Gefällt mir”, or a “thumbs up” symbol) or are marked with the addition “Facebook Social Plugin.” The list and appearance of Facebook social plugins can be viewed here:
https://developers.facebook.com/docs/plugins/. Facebook is certified under the Privacy Shield agreement and thereby provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When you access a function of this online offering that contains such a plugin, your device establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your device and integrated into the online offering. In doing so, user profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and inform you accordingly based on our level of knowledge.
By integrating the plugins, Facebook receives the information that you have accessed the corresponding page of the online offering. If you are logged into Facebook, Facebook can associate the visit with your Facebook account. If you interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. Even if you are not a member of Facebook, there is still the possibility that Facebook obtains and stores your IP address. According to Facebook, only an anonymized IP address is stored in Germany.
The purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and settings options for protecting your privacy, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/
If you are a Facebook member and do not want Facebook to collect data about you via this online offering and link it with your stored membership data, you must log out of Facebook before using our online offering and delete your cookies. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads
or via the US site http://www.aboutads.info/choices/
or the EU site http://www.youronlinechoices.com/
These settings are platform-independent, meaning they apply to all devices such as desktop computers and mobile devices.
b) Instagram
Within our online offering, functions and content of the Instagram service may be used, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. These may include, for example, content such as images, videos, or text, and buttons that allow users to express their appreciation and subscribe to the authors of the content or our posts.
If you are a member of the Instagram platform, Instagram can assign the access to the above-mentioned content and functions to your profile there. Instagram’s privacy policy:
http://instagram.com/about/legal/privacy/
Further information on data processing and your rights can be found in the privacy policies of the providers:
-
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Privacy Policy: https://www.facebook.com/about/privacy/; Joint Controller Agreement: https://www.facebook.com/legal/terms/page_controller_addendum; Opt-out: http://www.youronlinechoices.com and via the settings in your personal Facebook profile. Facebook Ireland Ltd. is also responsible for data processing via Instagram Inc.
-
Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Privacy Policy and Opt-out: http://instagram.com/about/legal/privacy/
-
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Privacy Policy: https://policies.google.com/privacy; Opt-out: https://adssettings.google.com/authenticated
-
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Privacy Policy. https://www.linkedin.com/legal/privacy-policy; Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
7. LinkedIn Insights and Conversion Tracking
Furthermore, we use conversion tracking on our website with the LinkedIn Insights Tag, a tool provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. For this purpose, the LinkedIn Insights Tag is integrated into our pages, and LinkedIn places a cookie on your device. This informs LinkedIn that you have visited our website, and your IP address is also collected. Timestamps and events such as page views are also stored. This allows us to statistically analyze the use of our website in order to continuously optimize it. For example, we learn which LinkedIn ad or interaction on LinkedIn led you to our website. This enables us to better control the delivery of our advertising.
Further information on conversion tracking can be found at https://www.linkedin.com/help/linkedin/answer/67595/linkedin-conversion-trackingubersicht.
Please note that LinkedIn may store and process your data, allowing it to be linked to your user profile and used for its own advertising purposes. Further information can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy. You can prevent LinkedIn from analyzing your usage behavior and displaying interest-based recommendations at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .
8. Transfer to third countries
In some cases, your data may be transferred by external service providers to servers outside the EU (so-called third countries). These may include service providers in the areas of hosting, compliance with regulatory obligations, debt collection, and marketing. We carefully select these service providers and contractually obligate them to comply with data protection regulations in accordance with legal requirements. If the service providers are located in the USA, we ensure that they have committed to the EU-US Privacy Shield Framework, thus guaranteeing an adequate level of data protection. The following companies receive data in third countries outside the European Union:
-
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.de/intl/de/policies/privacy
-
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php;
-
Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, https://help.instagram.com/155833707900388
9. Your rights
You have the following rights vis-à-vis us regarding the processing of your personal data, which you can assert at any time informally to the contact person listed above in section 1.
Right to information
Upon request, we will provide you with information about which personal data we have stored about you, for what purpose, for how long, from which source and on what legal basis, and whether we have disclosed this data to third parties.
Right to rectification
Should it transpire that the personal data we have on file from you is incorrect or incomplete, we will correct or supplement it immediately upon request.
Right to erasure (right to be forgotten)
You have the right to the immediate deletion of your personal data, provided there is no legal obligation to retain it.
Right to restriction of processing
You can request that we restrict the processing of your personal data.
Right to object to processing
You can object to the processing of your personal data at any time. This applies in particular if the legal basis for the processing is Article 6(1)(f) GDPR.
Right to data portability
You have the right to receive the personal data we hold about you in a universally readable format.
Right to lodge a complaint with a supervisory authority
You also have the right to lodge a complaint with the competent data protection supervisory authority regarding our processing of your personal data. The competent authority is the data protection authority of the federal state in which we are based. Further information can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
We would like to politely point out that the exercise of your rights may, in individual cases, be subject to certain conditions.
Ensuring data security and data protection
To ensure the protection and security of your personal data, we implement a variety of technical and organizational security measures, the effectiveness of which we regularly review.
10. Protection
Communication with schurig.consulting GmbH via email is generally encrypted, provided your server supports encryption.
11. Changes to this Privacy Policy
The protection of confidential information is of the highest priority to us. Personal data is processed exclusively in accordance with applicable data protection regulations. Further details can be found in our Privacy Policy.
12. Contact/ Responsible Person
This privacy policy applies to data processing by schurig.consulting GmbH. The responsible party is:
schurig.consulting GmbH
André Schurig
Straße des 17. Juni 25,
01257 Dresden
