Responsible body
DEDO Consulting GmbH as the operator of this website (www.dedo-consulting.de) is the responsible body within the meaning of the European General Data Protection Regulation (GDPR) and other national data protection laws of the member states.
I. General information about data processing
1. Scope of the processing of personal data
In principle, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent can not be obtained for reasons of fact and the processing of the data is permitted by law.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as legal basis.
In the processing of personal data necessary for the performance of a contract to which the data subject is a party, serves Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR serves as legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f GDPR serves as legal basis for processing.
3. Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is omitted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
II. Provision of the website and creation of logfiles
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data is collected here:
- The operating system of the user
- Information about the browser type and version used
- The IP address of the user
- Date and time of access
- Websites from which the user's system accesses our website the data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.
2. Legal basis for data processing
The legal basis for the temporary storage of data and logfiles is Art. 6 (1) (f) GDPR.
3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. For these purposes, our legitimate interest lies in the processing of data in accordance with Article 6 (1) (f) GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
5. Opposition and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.
6. Cookies
When you visit one of our websites, we may store information in the form of a (session) cookie on your computer. Cookies are small text files sent from a web server to your browser and stored on your computer's hard drive. Besides the internet protocol address no personal data of the user are stored. This information is used to automatically recognize you on your next visit to our website and to facilitate navigation. For example, cookies allow us to customize a website to suit your interests or save your password so you do not have to re-enter it each time. Of course, you can also view our websites without cookies. If you do not want us to recognize your computer, you can prevent cookies from being stored on your hard drive by selecting "Do not accept cookies" in your browser settings. How this works in detail, please refer to the instructions of your browser manufacturer.
7. Use of Google Maps
This website uses the Google Maps product of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Maps gives you information about places you're interested in based on your recent searches and the map area you've visited. By using this website, you agree to the processing of the data collected by Google Inc., its agents and third parties. Please note that Google automatically processes data when we use Maps, which we have no control over. For more information, please visit http://www.google.com/intl/en/policies/privacy/ Google Maps Terms of Service can be found at https://www.google.com/intl/en_uk/help/terms_maps. html.
III. Contact form and e-mail contact
1. Description and scope of data processing
On our website is a contact form available, which can be used for electronic contact. If a user realizes this option, the data entered in the input mask will be transmitted to us and saved. These data are:
• The IP address of the user
• First name
• Last name
• E-mail address
For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement. Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored. In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
2. Legal basis for data processing
Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
3. Purpose of the data processing
The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified.
5. Opposition and removal possibility
The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue. The following is a description of how the revocation of consent and the contradiction of storage is made possible. All personal data stored in the course of contacting will be deleted in this case.
IV. Security
We have taken technical and organizational security measures in accordance with legal requirements to protect your data from loss, destruction, manipulation and unauthorized access. All our employees and all persons involved in data processing are obliged to comply with the General Data Protection Regulation, the Federal Data Protection Act in its currently valid version and other data protection-relevant laws as well as the confidential handling of data. Our hedging measures are regularly reviewed and continuously revised in line with technological developments.
V. Change of our privacy policy
We reserve the right to change our security and privacy practices as required by technical developments. In these cases, we will also adjust our privacy policy accordingly. Please note the current version of our privacy policy.
VI. Consent
If we require your consent to the processing of your data, we will collect it from you and use your data for the purposes stated in the consent. Your consent will be logged digitally. You can revoke your consent at any time with effect for the future. Please write to the data protection officer or send an e-mail to datenschutz@dedo-consulting.de.
VII. Affected rights
If we process your data, you have extensive rights as Affected, which are listed below in detail:
1. Right to information
You can always get information about your processed data according to Art. 15 GDPR. In particular, you may request information about the purposes of the processing, the categories of data processed, categories of possible recipients and the planned duration of storage. If you want information, send an e-mail to datenschutz@dedo-consulting.de.
2. Right to rectification
In the case of incorrect data in accordance with Art. 16 GDPR, you are entitled to request a correction or completion of your data stored by us. You can assert your right under the above contact details.
3. Cancellation rights
According to Art. 17 GDPR, they may request the deletion of the data if the storage of the data is no longer necessary and no other legal basis for the processing is available. You may also request deletion if you have objected to processing and there are no prior, legitimate grounds for further processing your data and if your data has been improperly processed or if there is a legal obligation to delete it under EU or national law. You can assert your right under the above contact details.
4. Right to restriction
Furthermore, if you contest the accuracy of the data for a period of time that enables the controller to verify the accuracy of the data, you have a right to restriction of processing under Art. 18 GDPR; if the processing is illegal, but you reject the deletion of the data; the purpose of the processing has been completed, but the data are necessary to assert your legal claims or if you have objected to Art. 21 GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your interests. You can assert your right under the above contact details.
5. Right to Data Portability
According to Art. 20 GDPR you have the right to receive the data concerning you in a common, structured and machine-readable format (data portability). In addition, under certain circumstances, you may obtain that your data will be transmitted directly by a responsible party, as far as technically possible. You can assert your right under the above contact details.
6. Withdrawal
The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.
Please call us (07231 418 5544) or send us an email to datenschutz@dedo-consulting.de. All personal data stored in the course of contacting will be deleted in this case.