Privacy Policy

Privacy Policy EC EICHHORST CONSULTING GMBH

 

Thank you for your interest in the company. We would like to inform you about the data protection information in accordance with the requirements of Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR), as personal data can be processed in the course of our business activities. You will also be informed about your data protection rights and the processing of individual data. To ensure that you are fully informed about the processing of your personal data in the context of the performance of a contract, the implementation of pre-contractual measures or for concerns of an application, please take note of the following information.

 

EC EICHHORST CONSULTING GMBH has implemented numerous technical and organizational measures to ensure the most complete protection possible for the processing of personal data. Nevertheless, data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us in alternative ways, for example by telephone.

 

1. Name and Address of the controller

EC EICHHORST CONSULTING GMBH

Havelstraße 7

16547 Birkenwerder

 

Phone: +49 (0) 3303 588 413 0

Email: pei@eichhorst-consulting.de

Website: www.eichhorst-consulting.de

 

2. Purposes and legal basis of processing

Your personal data are processed based on the following legal bases:

 

a, Based on your consent (Art. 6 (1) lit. a, GDPR)

If you have given us your consent to process personal data for certain purposes, the legality of this processing is given based on your consent. Consent given can be revoked at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.

 

b, Fulfillment of contractual obligations Art. 6 (1) lit. b, GDPR)

The processing of personal data takes place for the implementation of our contracts with you and the execution of your orders, as well as all necessary activities in connection with this and pre-contractual measures.

 

c, Necessity of a legal obligation (Art. 6 (1) lit. c, GDPR)

Our company is subject to a legal obligation that requires the processing of personal data, for example to fulfill tax obligations.

 

d, Protect vital interests (Art. 6 (1) lit.  d, GDPR

In rare cases, it may be necessary to process personal data to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party.

 

f, As part of the balancing of interests (Art. 6 (1) lit. f, GDPR)

 

If necessary, we process your data beyond the actual fulfillment of the contract to safeguard our legitimate interests or those of third parties if these do not outweigh the fundamental rights and freedoms of the person concerned. If the processing of personal data is based on the balancing of interests, our legitimate interest is the conduct of our business activities for the benefit of all our employees.

The purposes of the processing arise for:

 

- Any communication for the processing of business activities such as for a purchase process, processing of inquiries from interested parties, obtaining information from other companies to fulfill contractual obligations

 

- Agreement of appointments to fulfill contractual obligations

- Advertising and presentation of the company in the context of balancing interests

When using these general data and information, EC EICHHORST CONSULTING GMBH does not draw any conclusions about the person concerned. Rather, this information is required to correctly deliver the content of our website, to optimize the content of our website and the advertising for it, to ensure the long-term functionality of our information technology systems and the technology of our website, and to provide law enforcement authorities with the necessary criminal prosecution in the event of a cyber-attack provide information. This anonymously collected data and information is therefore statistically and further evaluated by EC EICHHORST CONSULTING GMBH with the aim of increasing data protection and data security in our company to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data in the server log files are stored separately from all personal data provided by a data subject.

- Recording of customer inquiries or initial contact with interested parties for contract initiation or general inquiries through consent by means of a clear confirmatory action or behavior

Due to legal regulations, the website of EC EICHHORST CONSULTING GMBH contains information that enables quick electronic contact to our company and direct communication with us, which also includes a general address. If a data subject contacts the person responsible for processing by email or a contact form, the personal data transmitted by the data subject will be automatically saved. Such personal data transmitted on a voluntary basis by a data subject to the person responsible for processing are stored for the purpose of processing or contacting the data subject.

- The data of applicants

For the processing of applicant data, we have § 26 BDSG as the legal basis. According to this, personal data of employees may be processed for the purposes of the employment relationship if this is necessary for the establishment, implementation or termination of the employment relationship or on the basis of collective agreements. The application process serves to establish employment relationships, so that we can process applicant´s personal data.

- Project meetings by means of video conference to fulfill contractual obligations

- Preparation of offers / billing with customers or interested parties to fulfill contractual obligations

 

3. Categories of personal data

We only process data that is related to the following purposes:

 

- Any communication to conduct business

 

General data (contact details, address, telephone number) and possibly other data in connection with the business transaction

 

- Business appointments

General data (contact details, address, telephone number)

- Advertisement and presentation of the company

IP address and location

- Recording of customer inquiries or initial contact with interested parties for contract initiation or general inquiries

General data (contact details, address, telephone number)

- The data of prospective applicants

General data (contact details, address, telephone number) and other voluntarily provided documents such as curriculum vitae, certificates and qualifications

- Project meetings by means of video conference

communication content of video or contact details

- Preparation of offers / settlements with customers or interested parties

General data (contact details, address, telephone number), bank details, billing data

 

4. Recipients or categories of recipients of the personal data

We only pass on your personal data within our company to those areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interests. Otherwise, data will only be passed on to recipients outside the company to the extent that legal provisions permit or require it, the transfer is necessary for processing and thus for the fulfillment of the contract or, at your request, for the implementation of pre-contractual measures, we have your consent, or we are authorized to provide information. Under these conditions, the recipient of personal data can e.g., be an external tax advisor.

 

5. Transfer of personal data to a third country

Depending on the service provider used, we can transmit personal data to a subcontractor of the processor based in a third country. This is only the case for video conferences. The transmission will, if necessary, e.g., based on Standard Contractual Clauses (SCC) as an appropriate guarantee.

 

6. Duration of storage of personal data

The person responsible processes and stores personal data of the data subject only for the period necessary to achieve the storage purpose or, if necessary, we process and store your personal data for the duration of our business relationship or to fulfill contractual purposes. This also includes the initiation and execution of a contract. In addition, we are subject to various retention and documentation obligations, which result from the Commercial Code (HGB) and the Tax Code (AO), among others. The periods for storage and documentation prescribed there are two to ten years. Ultimately, the storage period is also based on the statutory limitation periods according to §§ 195 ff. of the German Civil Code (BGB) as a rule three years, but in certain cases can be up to thirty years.

In the case of applications, we store your personal data if this is necessary for the decision on your application. Your personal data or application documents will be deleted no later than six months after the end of the application process (e.g., notification of the rejection decision), unless longer storage is legally required or permitted. In addition, we only save your personal data if this is required by law or in a specific case to assert, exercise or defend legal claims for the duration of a legal dispute. If you have consented to your personal data being stored for a longer period, we will save it in accordance with your declaration of consent. If the application process becomes an employment, training or internship relationship, your data will initially continue to be stored, if necessary and permissible, and then transferred to the personnel file.

7. Affected Rights

Every person concerned has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to deletion under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification according to Art. 19 GDPR and the right to data portability according to Art. 20 GDPR. If incorrect personal data is processed, you have the right to correction. If the legal requirements are met, you can request the deletion or restriction of processing and object to processing (Art. 17, 18 and 21 GDPR). In addition, you have the right to lodge a complaint with a data protection supervisory authority under Art. 77 GDPR if you are of the opinion that your personal data is not being processed lawfully. The right of appeal exists without prejudice to any other administrative or judicial remedy.

If you have any complaints about data protection law, you can contact the responsible supervisory authority:

 

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht (LDA Bbg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Phone: 033203 356 0, Email: Poststelle@LDA.Brandenburg.de, Website: www.lda.brandenburg.de 

If the processing of data takes place based on your consent, you are entitled according to Art. 7 GDPR to revoke your consent to the use of your personal data at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected. Please also note that we may have to keep certain data for a certain period to meet legal requirements.

Right to object

Insofar as your personal data is processed in accordance with Article 6 (1) (f) GDPR to safeguard legitimate interests, you have the right, under Article 21 GDPR, to object to the processing of this at any time for reasons that arise from your situation to insert data. We will then no longer process this personal data unless we can prove compelling legitimate reasons for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims.

 

8. Necessity of providing personal data

The provision of your personal data in the context of application processes or the conclusion of a contract or pre-contractual measures is voluntary. However, we can only decide to establish an employment relationship or only establish an employment relationship with you if you provide such personal data that is necessary for the conclusion of a contract, pre-contractual measures or to carry out the application.

 

9. Duty to provide information in the event of a later change in purpose

The processing takes place only for the intended purpose. If the purpose is changed at a later date, the legal basis will first be checked and we will then send you information about the change in the purpose processing.

 

10. Automated decision making or profiling

As a responsible company, we do not use automatic decision-making or profiling. Thus, there is no automated decision in individual cases within the meaning of Art. 22 GDPR. Should we use these procedures in individual cases, we will inform you about this separately or obtain your consent if this is required by law.

 

Date: 24.11.2020