Privacy policy

In the following, we would like to inform you about the processing of your personal data. We take the protection of your data very seriously and comply with the applicable provisions of the Federal Republic of Germany and the European Union.

Our data protection practices comply with the legal regulations, in particular those of the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG) and the EU's General Data Protection Regulation (DSGVO). You can find the legal regulations here: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=OJ:L:2016:119:FULL&from=DE.

Responsible

Responsible person according to Art. 4 EU-DSGVO is:

Dr. Bergmann – Dr. Rohde & consulting group GmbH
Steinring 125
D-44789 Bochum

E-Mail: kontakt@brcg.de
Phone: +49 234 77796 0
Fax: +49 234 77796 10

Name and address of the data protection office

Ronald Baranowski
SIX DATENSCHUTZ GmbH
Kasseler Str. 30
61118 Bad Vilbel

E-Mail: rb@six-datenschutz.de
Phone: 06101 982 94 22
Fax: 06101 982 94 24

Website: https://six-datenschutz.de/

Notes on the processing of personal data

We will only collect, process and store your personal data insofar as this is necessary for the functional provision of this website and our content and services, as well as for the processing of inquiries and, if applicable, for the processing of orders/contracts, but only insofar as there is a legitimate interest in this within the meaning of Art. 6 Para. 1 Sentence 1 lit. f DSGVO or another permissible circumstance. Only if you have previously given your consent separately, your data will also be used for further purposes that are precisely defined in the consent. If you do not wish to provide any data about yourself, the consequence is that a service on our part may not be possible.

Purposes

We need your personal data:

- when you visit our websites

- to analyze and optimize our website

- if you would like to be contacted by us

The purposes stated here may also change if necessary. We only collect the data that is necessary for the respective purpose ("data minimization" according to Art. 5 para. 1 lit. c EU-DSGVO). Your data will not be disclosed to third parties without your consent, unless this should be necessary for the fulfillment of contractual or legal obligations. Your data will only be stored as long as necessary for the respective purpose (Art. 5 para. 1 e EU-DSGVO). Regulations in this regard can be found in Section 257 (1) Nos. 2 and 3 and Section 257 (1) No. 1 of the German Commercial Code (HGB) as well as in Section 147 of the German Fiscal Code (Abgabenordnung). The periods are generally between 6 and 10 years (in the case of financial loss, possibly up to 30 years).

What happens to your personal data?

1. your visit to our site

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

Scope of the processing of the data:

(1) Information about the browser type and version used.

(2) The operating system of the

Polling device

(3) The IP address of the retrieval device

(4) Date and time of access

(5) Websites

and resources (images, files, other page content) that were accessed on our website

(6) Websites from which the user's system accessed our Internet site

(Referrer-Tracking)

This data is stored in the log files of our system.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to operate the website and to ensure the achievement of the purpose described below.

Purpose of data processing

This processing is used to monitor our website, e.g. to detect possible errors in our web pages. A storage of this data together with personal data of a specific user does not take place, so that an identification of individual site visitors does not take place. However, we reserve the right to access the data if, based on certain facts, we suspect that users are using our pages and/or services in a manner that is illegal or in breach of contract. This is to protect our customers and users, the data and our websites and services. Logging is done to maintain the compatibility of our website for as many visitors as possible and to combat abuse and troubleshooting. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.

Duration of storage

The deletion of the aforementioned technical data takes place as soon as they are no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Possibility of objection and removal

The options for objection and removal are based on the general regulations on the right of objection and deletion under data protection law described below in this data protection notice.

2. contact form

We offer you the possibility on our site to contact us via a contact form. In this case, the information provided by the user will be stored for the purpose of processing the contact. As a matter of principle, this information will not be passed on to third parties.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behavior).

Purpose of data processing

We will use the data recorded via our contact form or via our contact forms only for processing the specific contact request received through the contact form.

Duration of storage

After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.

Possibility of objection and removal

The options for objection and removal are based on the general regulations on the right of objection and deletion under data protection law described below in this data protection notice.

3. Newsletter

Below we describe how your personal data is processed if you wish to subscribe to a newsletter. For the subscription we need your e-mail address, you can also provide your name. To verify the subscription, we use the double opt-in procedure. You will receive an email to the address you provided, wherein you are asked to confirm the registration. The processing is based on Art. 6 para. 1 a) DSGVO (consent). The data will be stored for the duration of the newsletter subscription.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described above or via a link provided for this purpose in the newsletter.

4. Applications

Scope of the processing of personal data

The data you have entered in the form fields and uploaded, if applicable. You can also send these to us by e-mail to the respective e-mail addresses given on the website.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. b DSGVO (implementation of (pre)contractual measures)

Purpose of data processing

Processing your application and deciding on a possible employee entry.

Duration of storage

The data will be deleted as soon as the application has been processed and there is no longer a legitimate interest in storing the application data. Your application documents will therefore be deleted after 6 months at the latest plus a 2-month objection period if no employment relationship is established.

Possibility of objection and removal

The options for objection and removal are based on the general regulations on the right of objection and deletion under data protection law described below in this data protection notice.

 

Information on the use of cookies

Scope of the processing of personal data

Transfer of personal data to third countries

If we transfer data to third countries, i.e. countries outside the European Union, then the transfer takes place exclusively in compliance with the legally regulated permissibility requirements.

If the transfer of data to a third country is not for the performance of our contract with you, we do not have your consent, the transfer is not necessary for the assertion, exercise or defense of legal claims, and no other exemption under Article 49 of the GDPR applies, we will only transfer your data to a third country if an adequacy decision under Article 45 of the GDPR or appropriate safeguards under Article 46 of the GDPR are in place.

An adequate level of data protection in the third country USA cannot be guaranteed due to the discontinuation of the Privacy Shield. We have agreed to order processing contracts incl. EU standard contractual clauses with the providers. Copies of the EU standard data protection clauses are available on the website of the European Commission, available here: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32010D0087

Use of essential cookies

In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which we receive certain information. Cookies cannot execute programs or transfer viruses to your computer.

Essential cookies do not require your consent and are processed by us in accordance with Art. 6 (1) f) DSGVO. Our legitimate interest here is the smooth and optimal use and presentation of our website.

Of course, you can also view our website without cookies in principle. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have disabled the use of cookies.

Tracking to analyze and optimize our Services and their usage.

Purpose of processing

The analysis of user behavior by means of tracking helps us to check the effectiveness of our services, to optimize them and adapt them to the needs of users, and to correct errors. It is also used to statistically determine key data on the use of our services (reach, usage intensity, user surfing behavior) on the basis of uniform standard procedures and thus to obtain market-wide comparable values.

Legal basis of processing

The tracking is based on your previously provided consent (Art. 6 para. 1 a) DSGVO.

Revocation

You can revoke your consent for the use of the above purposes at any time. You can do this conveniently via the cookie settings or contact us by email: kontakt@brcg.de

The tracking methods used in detail:

Google Analytics

Google Analytics is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With Google Analytics, we collect information on user behavior in order to improve the user-friendliness of the website (so-called tracking). We perform this analysis based on the tracking service of Google Analytics in order to constantly optimize our website and make it more available. In the course of using our website, data, such as in particular your IP address and your user activities, are transmitted to servers of the Google company and processed and stored outside the European Union, e.g. in the USA. Due to the declaration of invalidity of the EU-US Privacy Shield (ECJ 16.7.2020), processing is only possible with your consent pursuant to Art. 6 (1) a DSGVO. A transfer to third countries in the sense of the European data protection level is not guaranteed with the declaration of invalidity.

By activating IP anonymization within the Google Analytics tracking code of this website, your IP address will be anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been extended by the operator gat._anonymizeIp(); to enable only anonymized collection of IP addresses (so-called IP masking).

The transferred data is deleted after 26 months. The deletion of data whose retention period has been reached takes place automatically once a month.

The transfer takes place on the basis of your previously given consent and a concluded order processing contract in accordance with Art. 28 DSGVO with EU standard contractual clauses with the provider.

Google Fonts

We use so-called web fonts for the uniform display of fonts, a service operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We have pre-installed the web fonts, which means that no data is transferred to Google.

For more information on data processing by Google, see:

  • https://developers.google.com/fonts/faq
  • https://www.google.com/policies/privacy

 

Google Maps

On our website, we also use Google Maps to display maps and to create directions. The legal basis for the use of the service is your consent, i.e. Art. 6 para. 1 p. 1 lit. a DSGVO.

Google Maps wird von Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland betrieben.

By visiting our website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under "1. Your visit to our site" of these notes will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to have your data associated with your Google profile, you must log out before accessing the subpage. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

 

For more information on the purpose and scope of data collection and processing by the service provider, please refer to the service provider's privacy policy. Extensive details on transparency and choices as well as the data protection provisions can be found in the data protection center of google.de: https://www.google.de/intl/de/policies/privacy

 

The terms of use for Google Maps can be found at the following link:

https://www.google.de/intl/de/policies/terms/regional.html

 

Google also processes your personal data in the USA. An adequate level of data protection in third countries cannot currently be guaranteed due to the discontinuation of the Privacy Shield. However, we have agreed with the provider on the so-called EU standard contractual clauses and process your data only after prior consent.

 

Data security and data protection, communication by e-mail

Your personal data are protected by technical and organizational measures during collection, storage and processing so that they are not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.

Automatic email archiving

Scope of the processing of personal data

We expressly point out that our mail system has an automated archiving procedure. All incoming and outgoing e-mails are digitally archived in an audit-proof manner.

 

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest) and Art. 6 para. 1 lit. c DSGVO (fulfillment of a legal obligation). Our legitimate interest or legal obligation is to comply with tax and commercial law requirements (e.g. §§ 146, 147 AO).

Purpose of data processing

The purpose of archiving is to comply with tax and commercial law requirements (e.g. §§ 146, 147 AO).

Duration of storage

Our mail communication is stored until the expiry of tax and commercial law retention obligations. The retention period can be up to 10 years.

Possibility of objection and removal

If you have any questions about our mail archiving system, please contact our data protection officer. In addition, we would like to point out that we only consider application documents in PDF file format. Zipped (WinZip, WinRAR, 7Zip, etc.) files are filtered out by our security systems and will not be delivered. We do not consider applications in Word file format and other file formats and delete them unread for security reasons. Please note that application documents sent by e-mail without encryption may be opened by third parties before they reach our IT systems. We assume that we may also reply to unencrypted application e-mails without encryption. If you do not wish this, please inform us in your application e-mail.

 

Your rights

You have the right:

in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the purposes of processing.  

Furthermore, you have the right to request the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as about the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;

pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;

pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;

to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent in the future, and

to complain to a supervisory authority in accordance with Art. 77 DSGVO if you suspect that your data is being processed illegally on our site. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. The contact details of the State Commissioner for Data Protection of North Rhine-Westphalia are:

The State Commissioner for Data Protection of North Rhine-Westphalia
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany

Postal address: P.O. Box 20 04 44, 40102 Düsseldorf
Phone: 0211 384240
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de

Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you wish to exercise your right of revocation or objection, an e-mail to kontakt(a)brcg.de ((replace a) with @) is sufficient.

Actuality and change of this privacy policy

This privacy policy is currently valid and has the status September 23, 2020. Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may be necessary to change this privacy policy. You can access and print out the current data protection policy at any time on the website www.brcg.de.