Pri­vacy policy

Con­trol­ler for pro­cessing accord­ing to GDPR

The con­trol­ler respons­ible within the mean­ing of the Gen­eral Data Pro­tec­tion Reg­u­la­tion and other data pro­tec­tion laws applic­able in the Mem­ber States of the European Union and other pro­vi­sions of a data pro­tec­tion nature is:

saracus con­sult­ing GmbH

Robert-Bosch-Straße 17a

48153 Mün­ster

https://synvert.com/

saracus@saracus.com

+49251987210

Pri­vacy Policy

We wel­come you to our web­site and are pleased about your interest. The pro­tec­tion of your per­sonal data is very import­ant to us. There­fore, we con­duct our busi­ness in com­pli­ance with applic­able laws on data pri­vacy pro­tec­tion and data secur­ity. We would like to inform you in the fol­low­ing about which data of your visit is used for which purposes.

Data pro­tec­tion officer

Dr. Stefan Bischoff

c/o Wolter Hop­pen­berg Recht­san­wälte Part­ner­schaft mbB

bischoff@wolter-hoppenberg.de

What are per­sonal data?

The term per­sonal data is defined in the Bundes­datens­chutzge­setz (Fed­eral Data Pro­tec­tion Act) and the GDPR. Accord­ing to these laws, these are indi­vidual details about per­sonal or fac­tual cir­cum­stances of a spe­cific or iden­ti­fi­able nat­ural per­son. This includes, for example, your civil name, your address, your tele­phone num­ber or your date of birth. Find out more about what exactly data pro­tec­tion is here.

Scope of anonym­ous data col­lec­tion and data processing

Unless oth­er­wise stated in the fol­low­ing sec­tions, no per­sonal data is col­lec­ted, pro­cessed or used when using our web­sites. How­ever, by using ana­lysis and track­ing tools, we learn cer­tain tech­nical inform­a­tion based on the data trans­mit­ted by your browser (e.g. browser type/version, oper­at­ing sys­tem used, web pages vis­ited on our web­site incl. length of stay, pre­vi­ously vis­ited web­site). We eval­u­ate this inform­a­tion for stat­ist­ical pur­poses only.

Legal basis for the pro­cessing of per­sonal data

1. Where we obtain the con­sent of the data sub­ject for pro­cessing oper­a­tions involving per­sonal data, Art. 6 (1) lit. a) EU Gener­eal Data Pro­tec­tion Reg­u­la­tion (GDPR) serves as the legal basis for the pro­cessing of per­sonal data.
2. Art. 6 (1) lit. b) GDPR serves as the legal basis for the pro­cessing of per­sonal data required for the per­form­ance of a con­tract to which the data sub­ject is a party. This also applies to pro­cessing oper­a­tions neces­sary for the per­form­ance of pre-con­trac­tual measures.
3. Inso­far as the pro­cessing of per­sonal data is neces­sary to ful­fil a legal oblig­a­tion to which our com­pany is sub­ject, Art. 6 (1) lit. c) GDPR serves as the legal basis.
4. In cases where vital interests of the data sub­ject or another nat­ural per­son make it neces­sary to pro­cess per­sonal data, Art. 6 (1) lit. d) GDPR serves as the legal basis.
5. If the pro­cessing is neces­sary to safe­guard a legit­im­ate interest of our com­pany or of a third party and if the interests, fun­da­mental rights and freedoms of the data sub­ject do not out­weigh the former interest, Art. 6 (1) lit. f) GDPR serves as the legal basis for the processing.

Cre­ation of log files

With each call of the Inter­net page the saracus con­sult­ing GmbH col­lects data and inform­a­tion by an auto­mated sys­tem. These are stored in the log files of the server. The data is also stored in the log files of our sys­tem. These data are not stored together with other per­sonal data of the user.
(1) Inform­a­tion about the type of browser and the ver­sion used
(2) The user’s oper­at­ing sys­tem
(3) The user’s Inter­net ser­vice pro­vider
(4) The user’s IP address
(5) The date and time of access
(6) Web­sites from which the user’s sys­tem accesses our web­site (refer­rer)
(7) Web­sites that are accessed by the user’s sys­tem via our website

Routine dele­tion and block­ing of per­sonal data

The con­trol­ler shall pro­cess and store per­sonal data relat­ing to the data sub­ject only for as long as neces­sary to achieve the pur­pose of stor­age. In addi­tion, data may be stored for as long as this is provided for by the European or national legis­lator in Union reg­u­la­tions, laws or other pro­vi­sions to which the con­trol­ler is sub­ject. As soon as the stor­age pur­pose ceases to apply or a stor­age period pre­scribed by the afore­men­tioned reg­u­la­tions expires, the per­sonal data is routinely blocked or deleted.

Rights of the data subject

If your per­sonal data is pro­cessed, you are the data sub­ject within the mean­ing of the GDPR and you are entitled to the fol­low­ing rights in rela­tion to the per­son responsible:

Right of access by the data sub­ject acc. to Art. 15 GDPR

You can request con­firm­a­tion from the per­son respons­ible as to whether per­sonal data con­cern­ing you is being pro­cessed by us. If such pro­cessing is car­ried out, you may ask the con­trol­ler for inform­a­tion on:

1. the pur­poses for which the per­sonal data are processed;
2. the cat­egor­ies of per­sonal data processed;
3. the recip­i­ents or cat­egor­ies of recip­i­ents to whom your per­sonal data have been or will be disclosed;
4. the planned dur­a­tion of stor­age of your per­sonal data or, if it is not pos­sible to give spe­cific details, cri­teria for determ­in­ing the dur­a­tion of storage
5. the exist­ence of a right to rec­ti­fic­a­tion or eras­ure of your per­sonal data, a right to have the pro­cessing lim­ited by the con­trol­ler or a right to object to such processing
6. the exist­ence of a right of appeal to a super­vis­ory authority;
7. all avail­able inform­a­tion on the ori­gin of the data when the per­sonal data are not col­lec­ted from the data subject;
8. the exist­ence of auto­mated decision mak­ing, includ­ing pro­fil­ing, in accord­ance with Art. 22, (1) and (4) GDPR and, at least in these cases, mean­ing­ful inform­a­tion on the logic involved and the scope and inten­ded effects of such pro­cessing on the data subject.

You have the right to request inform­a­tion whether your per­sonal data are trans­ferred to a third coun­try or to an inter­na­tional organ­iz­a­tion. In this con­text, you may request to be informed of the appro­pri­ate guar­an­tees in accord­ance with Art. 46 GDPR in con­nec­tion with the transfer.

Right to rec­ti­fic­a­tion acc. to Art. 16 GDPR

You have the right to obtain from the data con­trol­ler the rec­ti­fic­a­tion and/or integ­ra­tion of any per­sonal data pro­cessed con­cern­ing you if it is incor­rect or incom­plete. The data con­trol­ler shall make the cor­rec­tion without delay.

Right to eras­ure acc. to Art. 17 GDPR

(1) You may request the con­trol­ler to delete your per­sonal data imme­di­ately and the con­trol­ler is obliged to delete such data imme­di­ately if one of the fol­low­ing reas­ons applies:

1. The per­sonal data con­cern­ing you are no longer neces­sary for the pur­poses for which they were col­lec­ted or oth­er­wise processed.
2. You revoke your con­sent on which the pro­cessing was based in accord­ance with Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
3. You object to the pro­cessing in accord­ance with Art. 21 (1) GDPR and there are no legit­im­ate reas­ons for the pro­cessing which take pre­ced­ence, or you object to the pro­cessing in accord­ance with Art. 21 (2) GDPR.
4. The per­sonal data con­cern­ing you have been pro­cessed unlawfully
5. The dele­tion of per­sonal data con­cern­ing you is neces­sary to com­ply with a legal oblig­a­tion under Union law or the law of the Mem­ber States to which the con­trol­ler is subject.
6. The per­sonal data con­cern­ing you have been col­lec­ted in rela­tion to inform­a­tion soci­ety ser­vices offered, in accord­ance with Art. 8 (1) GDPR.

(2) If the con­trol­ler has made your per­sonal data pub­lic and is obliged to delete them in accord­ance with Art. 17 (1) GDPR, he shall take reas­on­able meas­ures, includ­ing tech­nical meas­ures, tak­ing into account the avail­able tech­no­logy and imple­ment­a­tion costs, to inform data con­trol­lers who pro­cess the per­sonal data that you, as a data sub­ject, have reques­ted them to delete all links to these per­sonal data or cop­ies or rep­lic­a­tions of these per­sonal data.

(3) The right to eras­ure shall not apply where the pro­cessing is necessary

1. for the exer­cise of the right to free­dom of expres­sion and information;
2. to com­ply with a legal oblig­a­tion to which the pro­cessing is sub­ject under Union or national law to which the con­trol­ler is sub­ject, or to carry out a task car­ried out in the pub­lic interest or in the exer­cise of offi­cial author­ity ves­ted in the controller;
3. for reas­ons of pub­lic interest relat­ing to pub­lic health pur­su­ant to Art. 9 (2) (h) and i as well as Art. 9 (3) GDPR;
4. for archiv­ing pur­poses in the pub­lic interest, for sci­entific or his­tor­ical research pur­poses or for stat­ist­ical pur­poses pur­su­ant to Art. 89 (1) GDPR, inso­far as the right referred to in para. 1 is likely to render impossible or ser­i­ously pre­ju­dice the attain­ment of the object­ives of such pro­cessing, or
5. to assert, exer­cise or defend legal claims.

Right to restric­tion of pro­cessing acc. to Art. 18 GDPR

Under the fol­low­ing con­di­tions, you may request the restric­tion of the pro­cessing of your per­sonal data:

1. if you dis­pute the accur­acy of your per­sonal data for a period of time that allows the con­trol­ler to verify the accur­acy of the per­sonal data;
2. if the pro­cessing is unlaw­ful and you refuse to delete the per­sonal data and instead request the restric­tion of the use of the per­sonal data;
3. if the con­trol­ler no longer needs the per­sonal data for the pur­poses of the pro­cessing, but you need them for the asser­tion, exer­cise or defence of legal claims; or
4. if you have lodged an objec­tion to the pro­cessing pur­su­ant to Art. 21 (1) GDPR and it is not yet clear whether the legit­im­ate reas­ons of the con­trol­ler out­weigh your reasons.

If the pro­cessing of your per­sonal data has been restric­ted, these data – apart from their stor­age – may only be pro­cessed with your con­sent or for the pur­pose of assert­ing, exer­cising or defend­ing legal claims or pro­tect­ing the rights of another nat­ural or legal per­son or for reas­ons of major pub­lic interest of the Union or a Mem­ber State. If the restric­tion on pro­cessing has been restric­ted in accord­ance with the above con­di­tions, you will be informed by the con­trol­ler before the restric­tion is lifted.

Noti­fic­a­tion oblig­a­tion regard­ing rec­ti­fic­a­tion or eras­ure of per­sonal data or restric­tion of pro­cessing acc. to Art. 19 GDPR

If you have exer­cised the right to rec­tify, erase or limit the pro­cessing, the con­trol­ler is obliged to notify all recip­i­ents to whom the per­sonal data con­cern­ing you have been dis­closed of this rec­ti­fic­a­tion, eras­ure or lim­it­a­tion of pro­cessing, unless this proves impossible or involves a dis­pro­por­tion­ate effort. You have the right to be informed of these recip­i­ents by the controller.

Right to data port­ab­il­ity acc. to Art. 20 GDPR

You have the right to receive your per­sonal data, which you have provided to the respons­ible per­son, in a struc­tured, com­mon and machine-read­able format. In addi­tion, you have the right to trans­fer this data to another respons­ible party without hindrance by the respons­ible party to whom the per­sonal data has been made avail­able, if

1. the pro­cessing is based on con­sent pur­su­ant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a con­tract pur­su­ant to Art. 6 (1) (b) GDPR and
2. the pro­cessing is car­ried out using auto­mated pro­ced­ures. In exer­cising this right, you also have the right to request that your per­sonal data be trans­ferred dir­ectly from one respons­ible party to another, inso­far as this is tech­nic­ally feas­ible. The freedoms and rights of other per­sons may not be impaired by this. The right to data trans­fer­ab­il­ity shall not apply to the pro­cessing of per­sonal data neces­sary for the per­form­ance of a task car­ried out in the pub­lic interest or in the exer­cise of offi­cial author­ity ves­ted in the controller.

Right of objec­tion acc. to Art. 21 GDPR

You have the right to object at any time, on grounds relat­ing to your par­tic­u­lar situ­ation, to the pro­cessing of your per­sonal data car­ried out on the basis of Art. 6 (1) (e) or (f) GDPR; this also applies to pro­fil­ing based on these pro­vi­sions. The con­trol­ler will no longer pro­cess your per­sonal data unless it can demon­strate com­pel­ling legit­im­ate grounds for the pro­cessing which over­ride your interests, rights and freedoms, or the pro­cessing serves to assert, exer­cise or defend legal claims. If your per­sonal data is pro­cessed for the pur­pose of dir­ect mar­ket­ing, you have the right to object at any time to pro­cessing of your per­sonal data for such mar­ket­ing; this also applies to pro­fil­ing, inso­far as it is related to such dir­ect mar­ket­ing. If you object to pro­cessing for dir­ect mar­ket­ing pur­poses, your per­sonal data will no longer be pro­cessed for these pur­poses. You have the pos­sib­il­ity, in con­nec­tion with the use of inform­a­tion soci­ety ser­vices – not­with­stand­ing Dir­ect­ive 2002/58/EC – to exer­cise your right to object by means of auto­mated pro­ced­ures using tech­nical specifications.

Auto­mated decision in indi­vidual cases includ­ing profiling

You have the right not to be sub­ject to a decision based solely on auto­mated pro­cessing – includ­ing pro­fil­ing – which pro­duces legal effects con­cern­ing you or sim­il­arly sig­ni­fic­antly affects you. This does not apply if the decision

1. is neces­sary for the con­clu­sion or per­form­ance of a con­tract between you and the controller,
2. is per­mit­ted by legal pro­vi­sions of the Union or the Mem­ber States to which the con­trol­ler is sub­ject, and these legal pro­vi­sions con­tain appro­pri­ate meas­ures to pro­tect your rights and freedoms as well as your legit­im­ate interests, or
3. is done with your expli­cit consent.

How­ever, these decisions may not be based on spe­cial cat­egor­ies of per­sonal data pur­su­ant to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) applies and appro­pri­ate meas­ures have been taken to pro­tect the rights and freedoms and your legit­im­ate interests.

With regard to the cases men­tioned in a. and c., the con­trol­ler shall take reas­on­able steps to safe­guard the rights and freedoms as well as your legit­im­ate interests, which include, at a min­imum, the right to obtain the inter­ven­tion of a per­son on the part of the con­trol­ler, to express his or her point of view and to object to the decision.

Right to lodge a com­plaint with a super­vis­ory author­ity acc. to Art. 77 GDPR

Without pre­ju­dice to any other admin­is­trat­ive or judi­cial rem­edy, you have the right to lodge a com­plaint with a super­vis­ory author­ity, in par­tic­u­lar in the Mem­ber State of your res­id­ence, place of employ­ment or place of the alleged infringe­ment, if you con­sider that the pro­cessing of your per­sonal data infringes the GDPR. The super­vis­ory author­ity to which the com­plaint has been lodged will inform the com­plain­ant of the status and out­come of the com­plaint, includ­ing the pos­sib­il­ity of a judi­cial rem­edy under Art. 78 GDPR.

Dur­a­tion of stor­age of per­sonal data

Per­sonal data is stored for the dur­a­tion of the respect­ive legal reten­tion period. After expiry of the period, the data is routinely deleted, unless it is neces­sary for the ini­ti­ation or ful­fil­ment of a contract.

Use of cookies

The inter­net pages of saracus con­sult­ing GmbH use cook­ies. Cook­ies are data that are stored by the Inter­net browser on the user’s com­puter sys­tem. The cook­ies can be trans­mit­ted to a page when it is called up and thus enable the user to be assigned to it. Cook­ies help to sim­plify the use of Inter­net pages for the user.

It is pos­sible to object to the set­ting of cook­ies at any time by chan­ging the set­ting in the Inter­net browser accord­ingly. Set cook­ies can be deleted. Please note that if cook­ies are deac­tiv­ated, it may not be pos­sible to use all func­tions of our web­site to their full extent. The user data col­lec­ted in this way is pseud­onym­ized by tech­nical pre­cau­tions. It is there­fore no longer pos­sible to assign the data to the call­ing user. The data is not stored together with other per­sonal data of the users. When access­ing our web­site, users are informed by an info ban­ner about the use of cook­ies for ana­lysis pur­poses and are referred to this data pro­tec­tion declar­a­tion. In this con­text, there is also a note on how the stor­age of cook­ies can be pre­ven­ted in the browser set­tings. The legal basis for the pro­cessing of per­sonal data using tech­nic­ally neces­sary cook­ies is Art. 6 (1) (f) GDPR. The legal basis for the pro­cessing of per­sonal data using cook­ies for ana­lysis pur­poses is Art. 6 (1) (a) GDPR if the user has given his or her con­sent. For inform­a­tion on whether and to what extent cook­ies are used on our web­site, please refer to our cookie ban­ner and our notes in this data pro­tec­tion declaration.

hel­lo­trust

Descrip­tion and purpose

We use the fea­tures of hel­lo­trust (Keyed GmbH, Siemensstr. 12, 48341 Alten­berge, Ger­many) on our web­site. hel­lo­trust provides a leg­ally required cookie notice and allows the oper­ator to man­age opt-in and opt-out via a cookie con­sent man­ager. To determ­ine which tools are used, the web­site is scanned by the hel­lo­trust crawler. Sub­sequently, the scanned inform­a­tion flows into the Cookie Note/Cookie Con­sent Manager. 

Legal basis

The legal basis for the pro­cessing of your per­sonal data is Art. 6 (1) © GDPR.

Recip­i­ent

The recip­i­ent of your per­sonal data is Keyed GmbH (Siemensstr. 12, 48341 Alten­berge, Germany).

Trans­fer to third countries

There is no trans­fer of your per­sonal data to a third coun­try. How­ever, we are aware of our respons­ib­il­ity and reg­u­larly review the frame­work con­di­tions and legal changes. Should a trans­fer to a third coun­try occur, we will update this inform­a­tion as soon as possible.

Dur­a­tion of data storage

Data is deleted as soon as it is no longer neces­sary to achieve the pur­pose for which it was col­lec­ted. In addi­tion, the data will be deleted if you exer­cise your right to eras­ure pur­su­ant to Art. 17 (1) GDPR. 

Con­trac­tual and legal obligation

There is no con­trac­tual or legal oblig­a­tion to provide the data.

Fur­ther inform­a­tion on data protection

Here you will find fur­ther inform­a­tion on pro­cessing of your per­sonal data:

https://hellotrust.de/datenschutz/

Google Ana­lyt­ics 4

Descrip­tion and purpose

This web­site uses the “Google Ana­lyt­ics 4” ser­vice, which is provided by Google LLC, to ana­lyze web­site usage by users. The ser­vice uses “cook­ies” – text files that are stored on your ter­minal device. First party cook­ies are used for this pur­pose. With a first party cookie, the user can only be recog­nized by the site from which the cookie ori­gin­ated, not across mul­tiple domains. The inform­a­tion col­lec­ted by the cook­ies is usu­ally sent to a Google server in the USA and stored there. If neces­sary, Google Ana­lyt­ics is used on this web­site with the code “gat._anonymizeIp();” to ensure anonym­ized col­lec­tion of IP addresses (so-called IP mask­ing). Please also note the fol­low­ing inform­a­tion on the use of Google Ana­lyt­ics: The IP address of users is shortened within the mem­ber states of the EU and the European Eco­nomic Area. This short­en­ing elim­in­ates the per­sonal ref­er­ence of your IP address. For EU cit­izens, the IP address is also only used to derive loc­a­tion data and then deleted again. You also have the option to activ­ate or deac­tiv­ate the col­lec­tion of detailed loc­a­tion and device data for indi­vidual regions (track­ing set­tings). In addi­tion, Google Sig­nals can be deac­tiv­ated to pre­vent asso­ci­ation with a Google account and per­son­al­ized ads can be deac­tiv­ated. As part of the order pro­cessing agree­ment that the web­site oper­at­ors have con­cluded with Google LLC, the lat­ter uses the col­lec­ted inform­a­tion to cre­ate an eval­u­ation of web­site use and web­site activ­ity and provides ser­vices asso­ci­ated with inter­net use.

Legal basis

The legal basis for the pro­cessing of your per­sonal data is Art. 6 (1) (a) GDPR.

Recip­i­ent

The recip­i­ent of your per­sonal data is Google LLC. (1600 Amphi­theatre Park­way Moun­tain View, CA 94043, USA).

Trans­fer to third countries

The per­sonal data will be trans­ferred to the United States. The trans­fer is sub­ject to appro­pri­ate safe­guards pur­su­ant to Art. 46 GDPR. We have con­cluded stand­ard con­trac­tual clauses with the data importer for this pur­pose. In addi­tion, we are aware of our respons­ib­il­ity and, where neces­sary, take fur­ther meas­ures to pro­tect the rights and freedoms of nat­ural per­sons to ensure the pro­tec­tion of per­sonal data.

Dur­a­tion of data storage

Data will be deleted as soon as it is no longer neces­sary to achieve the pur­pose for which it was col­lec­ted. In addi­tion, the data will be deleted if you assert your right to dele­tion as defined in Art. 17 (1) GDPR. The max­imum stor­age period is 14 months.

Revoc­a­tion

You have the right to revoke your con­sent at any time, cf. Art. 7 (3) p. 1 GDPR. This can be done inform­ally and without giv­ing reas­ons and is effect­ive for the future. The revoc­a­tion of con­sent does not affect the law­ful­ness of the pro­cessing car­ried out until the revoc­a­tion. Fur­ther inform­a­tion on this can be found above in our pri­vacy policy under “Rights of data subjects”.

Con­trac­tual and legal obligation

There is no con­trac­tual or legal oblig­a­tion for the pro­vi­sion of the data.

Fur­ther data pro­tec­tion information

Fur­ther inform­a­tion on the pro­cessing of your per­sonal data can be found here: 

https://support.google.com/analytics/answer/6004245?hl=de https://policies.google.com/privacy?hl=de&gl=de .

You­Tube

Descrip­tion and purpose

We use the YouTube.com plat­form to post our own videos and make them pub­licly avail­able. You­Tube is the offer of Google LLC, 1600 Amphi­theatre Park­way Moun­tain View, CA 94043, USA. Some Inter­net pages of our offer con­tain links or con­nec­tions to the You­Tube offer. In gen­eral, we are not respons­ible for the con­tent of web­sites to which links are provided. How­ever, if you fol­low a link to You­Tube, we would like to point out that You­Tube stores the data of its users (e.g. per­sonal inform­a­tion, IP address) in accord­ance with its own data usage guidelines and uses it for busi­ness pur­poses. On some of our Inter­net pages we also dir­ectly integ­rate videos stored on You­Tube. In this integ­ra­tion, con­tent from the You­Tube web­site is dis­played in parts of a browser win­dow. How­ever, the You­Tube videos are only accessed by click­ing on them sep­ar­ately. This tech­nique is also called “fram­ing”. If you call up a (sub)page of our Inter­net offer on which You­Tube videos are integ­rated in this form, a con­nec­tion to the You­Tube serv­ers is estab­lished and the con­tent is dis­played on the Inter­net page by inform­ing your browser.

Legal basis

The legal basis for the pro­cessing of your per­sonal data is Art. 6 (1) (a) GDPR.

Recip­i­ent

The recip­i­ent of your per­sonal data is Google LLC, 1600 Amphi­theatre Park­way Moun­tain View, CA 94043, USA, where applicable.

Trans­fer to a third country

The per­sonal data is trans­ferred to the United States. The trans­fer is sub­ject to appro­pri­ate safe­guards accord­ing to Art. 46 GDPR. For this pur­pose, we have con­cluded stand­ard con­tract clauses with the data importer. In addi­tion, we are aware of our respons­ib­il­it­ies and, to the extent neces­sary to pro­tect the rights and freedoms of nat­ural per­sons, we take fur­ther meas­ures to ensure the pro­tec­tion of per­sonal data. 

Dur­a­tion of data storage

Data is deleted as soon as it is no longer neces­sary to achieve the pur­pose for which it was col­lec­ted. In addi­tion, the data will be deleted if you exer­cise your right to eras­ure pur­su­ant to Art. 17 (1) GDPR. 

Revoc­a­tion

You have the right to revoke your gran­ted con­sent at any time, cf. Art. 7 (3) p. 1 GDPR. This can be done inform­ally and without giv­ing reas­ons and is effect­ive for future activ­it­ies. The revoc­a­tion of con­sent does not affect the law­ful­ness of the pro­cessing car­ried out until the revoc­a­tion was com­mu­nic­ated. Fur­ther inform­a­tion on this can be found above in our pri­vacy policy under “Rights of data subjects”.

Con­trac­tual and legal obligation

There is no con­trac­tual or legal oblig­a­tion to provide the data.

Fur­ther inform­a­tion on data protection

Here you will find fur­ther inform­a­tion on pro­cessing of your per­sonal data:

https://policies.google.com/privacy

Data trans­mis­sion to third countries

The con­trol­ler may trans­fer per­sonal data to a third coun­try. In prin­ciple, the con­trol­ler may provide vari­ous appro­pri­ate safe­guards to ensure that an adequate level of pro­tec­tion is provided for the pro­cessing oper­a­tions. It is pos­sible to trans­fer data trans­fers on the basis of an adequacy find­ing, internal data pro­tec­tion rules, approved codes of con­duct, stand­ard data pro­tec­tion clauses or an approved cer­ti­fic­a­tion mech­an­ism pur­su­ant to Art. 46 (2) (a) – (f) GDPR.

If the per­son respons­ible under­takes a trans­fer to a third coun­try on the legal basis of Art. 49 (1) (a) GDPR, you will be informed at this point about the pos­sible risks of a data trans­fer to a third country.

There is a risk that the third coun­try receiv­ing your per­sonal data may not provide an equi­val­ent level of pro­tec­tion com­pared to the pro­tec­tion of per­sonal data in the European Union. This may be the case, for example, if the EU Com­mis­sion has not issued an adequacy decision for the third coun­try in ques­tion or if cer­tain agree­ments between the European Union and the third coun­try in ques­tion are declared invalid. Spe­cific­ally, there are risks in some third coun­tries with regard to the effect­ive pro­tec­tion of EU fun­da­mental rights through the use of mon­it­or­ing laws (e.g. USA). In such a case, it is the respons­ib­il­ity of the con­trol­ler and the recip­i­ent to assess whether the rights of data sub­ject in the third coun­try enjoy a level of pro­tec­tion equi­val­ent to that in the Union and can be effect­ively enforced.

How­ever, the basic data pro­tec­tion reg­u­la­tion should not under­mine the level of pro­tec­tion of nat­ural per­sons ensured through­out the Union when per­sonal data are trans­ferred from the Union to con­trol­lers, pro­cessors or other recip­i­ents in third coun­tries or to inter­na­tional organ­iz­a­tions, even if per­sonal data are fur­ther trans­ferred from a third coun­try or from an inter­na­tional organ­iz­a­tion to con­trol­lers or pro­cessors in the same or another third coun­try or to the same or another inter­na­tional organization.

Integ­ra­tion of other third-party ser­vices and content

Descrip­tion and purpose

It can hap­pen that within this online offer con­tents of third parties, such as videos, fonts or graph­ics from other web­sites are integ­rated. This always requires that the pro­viders of these con­tents (here­in­after referred to as “third party pro­viders”) are aware of the IP address of the users. Without the IP address, they would not be able to send the con­tent to the browser of the respect­ive user. The IP address is there­fore neces­sary for the dis­play of this con­tent. We make every effort to use only such con­tent whose respect­ive pro­viders use the IP address only to deliver the con­tent. How­ever, we have no influ­ence on this if the third-party pro­viders store the IP address for stat­ist­ical pur­poses, for example. As far as we are aware of this, we inform the users about it. We would like to provide and improve our online offer through these integrations.

Legal basis

The legal basis for the integ­ra­tion of other ser­vices and con­tent of third parties is Art. 6 (1) (f) GDPR. Our over­rid­ing legit­im­ate interest lies in the inten­tion of an appro­pri­ate present­a­tion of our online pres­ence and user-friendly and eco­nom­ic­ally effi­cient ser­vices on our part. For fur­ther inform­a­tion, please refer to the respect­ive pri­vacy state­ments of the providers.

Con­trac­tual or legal oblig­a­tion to provide per­sonal data

The pro­vi­sion of per­sonal data is neither leg­ally nor con­trac­tu­ally required and is also not neces­sary for the con­clu­sion of a con­tract. You are also not obliged to provide the per­sonal data. How­ever, fail­ure to provide it may mean that you are unable to use this func­tion or can­not use it to its full extent.

Fur­ther func­tions of the website

Applic­a­tions

By sub­mit­ting their applic­a­tion to us, applic­ants agree to the pro­cessing of their data for the pur­poses of the applic­a­tion pro­ced­ure in accord­ance with the type and scope described in this data pro­tec­tion declar­a­tion. The legal basis for the pro­cessing of applic­ant data is Art. 88 GDPR, § 26 BDSG-neu (Fed­eral Data Pro­tec­tion Act) and Art. 9 (2) (b) GDPR. Insofar as spe­cial cat­egor­ies of per­sonal data within the mean­ing of Art. 9 (1) GDPR are vol­un­tar­ily com­mu­nic­ated as part of the applic­a­tion pro­ced­ure, they will also be pro­cessed in accord­ance with Art. 9 (2) (b) GDPR (e.g. health data, such as severely dis­abled status or eth­nic ori­gin). Inso­far as spe­cial cat­egor­ies of per­sonal data within the mean­ing of Art. 9 (1) GDPR are reques­ted from applic­ants within the frame­work of the applic­a­tion pro­ced­ure, their pro­cessing is addi­tion­ally car­ried out in accord­ance with Art. 9 (2) (a) GDPR (e.g. health data if these are neces­sary for the exer­cise of the pro­fes­sion). If made avail­able, applic­ants can sub­mit their applic­a­tions to us by means of an online form on our web­site. The data will be trans­mit­ted to us in encryp­ted form accord­ing to the state of the art. Applic­ants can also send us their applic­a­tions by e‑mail. Please note, how­ever, that e‑mails are gen­er­ally not encryp­ted and that applic­ants must ensure that they are encryp­ted them­selves. We can there­fore not assume any respons­ib­il­ity for the trans­mis­sion path of the applic­a­tion between the sender and the receipt on our server and there­fore recom­mend rather to use an online form or the postal dis­patch. This is because instead of apply­ing via the online form and e‑mail, applic­ants still have the option of send­ing us their applic­a­tion by post. In the event of a suc­cess­ful applic­a­tion, the data provided by the applic­ants can be pro­cessed by us for the pur­poses of the employ­ment rela­tion­ship. Oth­er­wise, if the applic­a­tion for a job offer is not suc­cess­ful, the applic­ants’ data is deleted. Applic­ants’ data is also deleted if an applic­a­tion is with­drawn, which applic­ants are entitled to do at any time. The data will be deleted after the expiry of a period of six months so that we can answer any fol­low-up ques­tions regard­ing the applic­a­tion and meet our oblig­a­tions to provide evid­ence under the Gen­eral Equal Treat­ment Act. Invoices for any reim­burse­ment of travel expenses will be archived in accord­ance with tax law requirements.

Con­tact opportunities

On the inter­net pages of saracus con­sult­ing GmbH there is a con­tact form which can be used for elec­tronic con­tact. Altern­at­ively, it is pos­sible to con­tact us via the provided e‑mail address. If the data sub­ject con­tacts the data con­trol­ler via one of these chan­nels, the per­sonal data trans­mit­ted by the data sub­ject is auto­mat­ic­ally stored. The stor­age is solely for the pur­pose of pro­cessing or con­tact­ing the data sub­ject. The data will not be passed on to third parties. The legal basis for the pro­cessing of the data is Art. 6 (1) (a) GDPR if the user has given his or her con­sent. The legal basis for the pro­cessing of data trans­mit­ted in the course of send­ing an e‑mail is Art. 6 (1) (f) GDPR. If the e‑mail con­tact is aimed at the con­clu­sion of a con­tract, the addi­tional legal basis for pro­cessing is Art. 6 (1) (b) GDPR. The data is deleted as soon as it is no longer neces­sary for the pur­pose for which it was col­lec­ted. For per­sonal data from the input mask of the con­tact form and those sent by e‑mail, this is the case when the respect­ive con­ver­sa­tion with the user has ended. The con­ver­sa­tion is ter­min­ated when it can be con­cluded from the cir­cum­stances that the mat­ter in ques­tion has been finally cla­ri­fied. The per­sonal data addi­tion­ally col­lec­ted dur­ing the send­ing pro­cess will be deleted after a period of seven days at the latest.

News­let­ter

If the news­let­ter of our com­pany is sub­scribed to, the data in the respect­ive input mask will be trans­mit­ted to the per­son respons­ible for pro­cessing. The sub­scrip­tion to our news­let­ter is car­ried out in a so-called double opt-in pro­ced­ure. This means that after regis­tra­tion you will receive an e‑mail ask­ing you to con­firm your regis­tra­tion. This con­firm­a­tion is neces­sary so that nobody can register with for­eign e‑mail addresses. When regis­ter­ing for the news­let­ter, the IP address of the user and the date and time of regis­tra­tion are stored. This serves to pre­vent abuse of the ser­vices or the e‑mail address of the per­son con­cerned. The data will not be passed on to unau­thor­ized third parties. For the pur­pose of send­ing the news­let­ter, how­ever, neces­sary data could be trans­mit­ted to appro­pri­ate ser­vice pro­viders. Fur­ther­more, an excep­tion exists if there is a legal oblig­a­tion to pass on the data. The data is used exclus­ively for send­ing the news­let­ter. The sub­scrip­tion to the news­let­ter can be can­celled by the per­son con­cerned at any time. Like­wise, the con­sent to the stor­age of per­sonal data can be revoked at any time. For this pur­pose there is a cor­res­pond­ing link in every news­let­ter. The legal basis for the pro­cessing of the data after regis­tra­tion for the news­let­ter by the user is Art. 6 (1) (a) GDPR if the user has given his con­sent. The legal basis for the dis­patch of the news­let­ter as a res­ult of the sale of goods or ser­vices is § 7 (3) Act against Unfair Com­pet­i­tion (UWG).

Data Recip­i­ents

To the extent per­mit­ted or required by law, or to the extent you have con­sen­ted, we will also share your per­sonal data with other recip­i­ents who provide ser­vices on our behalf. We limit the dis­clos­ure of your per­sonal data to the extent neces­sary. In some cases, our ser­vice pro­viders receive your per­sonal data as pro­cessors and are then strictly bound by our instruc­tions when hand­ling your per­sonal data (data pro­tec­tion agree­ments pur­su­ant to Art. 28 GDPR). In some cases, the recip­i­ents act inde­pend­ently with your data that we trans­fer to them. Sub­sequent cat­egor­ies of ser­vice providers/recipients may receive your data:

• Pro­vider of email mar­ket­ing via newsletter
• Pro­vider of host­ing ser­vices for the oper­a­tion of our servers
• Ser­vice pro­viders in the area of job applic­a­tions to assist in the selec­tion of applicants
• Ser­vice pro­viders for devel­op­ment work, includ­ing pro­gram­ming, devel­op­ment, main­ten­ance and sup­port of soft­ware applications
• Ser­vice pro­vider for postal services
• External legal services
• Mar­ket­ing agencies/ web­site support
• Other IT ser­vice pro­viders (e.g., sys­tem houses)
• Other ser­vices and tools

The ser­vice pro­viders we engage, must com­ply with strict con­fid­en­ti­al­ity require­ments. They are only given the neces­sary access to your data to per­form the assigned tasks.

In the event of a sus­pec­ted crim­inal offense, data may be dis­closed to law enforce­ment authorities.

Safety

We have taken extens­ive tech­nical and oper­a­tional pre­cau­tions to pro­tect your data from acci­dental or delib­er­ate manip­u­la­tion, loss, destruc­tion or access by unau­thor­ised per­sons. Our secur­ity pro­ced­ures are reg­u­larly reviewed and adap­ted to tech­no­lo­gical pro­gress. In addi­tion, we guar­an­tee data pro­tec­tion on an ongo­ing basis by con­stantly audit­ing and optim­iz­ing our data pro­tec­tion organization.

saracus consulting GmbH reserves all rights to make changes and updates to this pri­vacy policy. This pri­vacy policy was cre­ated by the data­pro­tec­tion­sys­tem and hel­lo­trust, a trade­mark of Keyed GmbH.