Privacy Notice

Person in Charge

The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

hinsch.consulting
Holger Hinsch
Eisenlohrstraße 29
76135 Karlsruhe
Phone: +49 (0) 721 8514 8412
Email: info@hinsch-consulting.com

Your Rights as a Data Subject

You may exercise the following rights at any time using the contact information provided, in accordance with the EU General Data Protection Regulation (GDPR):

• Information about the data we have stored about you and how it is processed (Art. 15 GDPR),
• Rectification of inaccurate personal data (Art. 16 of the GDPR),
• Deletion of your data stored by us (Art. 17 of the GDPR),
• Restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21 GDPR) and
• Data portability, provided that you have consented to the processing of your data or have entered into a contract with us (Art. 20 of the GDPR).

If you have given us your consent, you may revoke it at any time with future effect.

You may file a complaint with a supervisory authority at any time, such as the competent supervisory authority in the state where you reside or the authority responsible for us as the data controller.

A list of regulatory authorities (for the private sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing Activities

Collection of General Information When You Visit Our Website

Nature and Purpose of Processing

When you access our website—that is, when you do not register or otherwise submit information—information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar details.

In particular, they are processed for the following purposes:

• Ensuring that the website loads smoothly
• Ensuring the website runs smoothly
• Ensuring and evaluating system security and stability, particularly for the purpose of detecting misuse
• to ensure the website displays correctly and is optimized

We do not use your data to draw conclusions about your identity. However, we reserve the right to review the server log files retroactively if there are specific indications of unlawful use.

Legal Basis and Legitimate Interest

Processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website, as well as ensuring system security and detecting misuse.

Recipient

The recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.

Retention period

Data is stored in server log files in a form that allows for the identification of the individuals concerned for a maximum of 14 days, unless a security-related incident occurs (e.g., a DDoS attack). In the event of such an incident, server log files are retained until the security-related incident has been resolved and fully investigated.

Transfer to a Third Country

Data is not currently transferred to third countries.

Provision required or mandatory

The provision of the aforementioned personal data is not required by law or contract. However, without the IP address, the service and the functionality of our website cannot be guaranteed. In addition, certain features and services may not be available or may be limited.

Objection

Please read the information below regarding your right to object under Article 21 of the GDPR.

Contact Us

Nature and Purpose of Processing

Our website features a contact form that can be used to contact us electronically. If a user chooses this option, the data entered in the form is transmitted to us and stored.

In addition, the following data is stored at the time the message is sent:

• IP address of the requesting device
• Date and time of the request
• URL from which the request originated

You can contact us using the email addresses provided. In this case, the user’s personal data transmitted via email will be stored. This includes the date and time the email was sent, the email address, IP addresses, and information about the servers involved in the email communication.

You can contact us using the phone numbers provided. When you do so, we collect log data that includes your phone number and the duration of the call. Regardless of the method of communication you choose, we collect the content of your inquiry. Your data is stored for the purpose of communicating with you individually.

Legal Basis

The data is processed on the basis of a legitimate interest (Art. 6(1)(f) of the GDPR).

Our legitimate interest in processing your data is to make it easy for you to contact us.

If you contact us to request a quote, your data will be processed for the purpose of taking steps prior to entering into a contract (Art. 6(1)(b) of the GDPR).

Recipient

The recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.

Retention period

Data will be deleted no later than six months after the final processing of the inquiry. If a contractual relationship is established, we are subject to the statutory retention periods. These are generally 6 or 10 years for the purposes of proper bookkeeping and tax compliance.

Provision Required or Mandatory

Providing your personal information is voluntary. However, we can only process your request if you provide us with the necessary information and the reason for your request.

Objection

Please read the information below regarding your right to object under Article 21 of the GDPR.

Scheduling an Appointment with Microsoft Bookings

Nature and Purpose of Processing

To schedule appointments, we use Microsoft Bookings, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Appointments are scheduled via an external link or button.

When you schedule an appointment, the personal data you provide will be processed. This includes, in particular, your name, email address, phone number, and details regarding your desired appointment time and the nature of your inquiry or the topic of discussion.

To schedule the meeting, you can create Microsoft Teams invitations and send them to the participants.

Legal Basis

Your data is processed for the purpose of taking precontractual measures in response to your request, in accordance with Article 6(1)(b) of the GDPR.

Recipient

The recipient of the data is Microsoft Ireland Operations Limited. For more information about Microsoft’s privacy practices, visit: https://privacy.microsoft.com/de-de/privacystatement.

Retention period

Your data will be stored only as long as necessary to process your inquiry, schedule the appointment, and, if applicable, initiate and carry out a contractual relationship. Statutory retention requirements remain unaffected.

Objection

Please read the information below regarding your right to object under Article 21 of the GDPR.

Range Measurement

Nature and Purpose of Processing

Audience measurement is used to analyze visitor traffic to our online platform and may include pseudonymized data on visitor behavior, interests, or demographic information, such as age or gender. With the help of reach analysis, we can, for example, determine at what times our online offering, its features, or its content are used most frequently, or encourage repeat visits. We can also identify which areas require adjustment.

You can find out which tools we use to measure reach below.

Legal Basis

Data processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest. Measuring reach and the resulting information are useful for tailoring the website.

Recipient

We use technical service providers to operate and maintain our website; these providers act as our data processors.

Retention period

For information on retention periods, please refer to the details below regarding the tools used.

Transfer to a Third Country

The data collected may be transferred to the following third countries: the United States

The following data protection safeguards are in place: Adequacy Decision by the European Commission

Provision Required or Mandatory

The provision of the data is not required by law or by contract.

Objection

Please read the information below regarding your right to object under Article 21 of the GDPR.

Tools Used to Measure Reach

Use of the Google Analytics Tracking Tool

Nature and Purpose of the Processing

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

Google Analytics uses cookies that enable an analysis of your use of the website. The information collected is generally transmitted to a Google server in the United States and stored there.

IP address anonymization is enabled by default in Google Analytics. Because IP anonymization is enabled on this website, your IP address will be truncated by Google within EU member states or the EEA. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. According to information provided by Google, the IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

While you are visiting our website, your user behavior is tracked in the form of so-called events, such as:

• Page Views
• Starting a Session
• Length of stay
• User Engagement
• First Visit to a Website
• Scrolls (when a visitor scrolls 90% of the way to the bottom of the page)
• Clicks on external links
• Ads viewed or clicked on
• Internal Searches
• Interaction with Video Content
• Downloads
• Language Settings

In addition, the following information is collected:

• Your approximate location (region)
• Your IP address (in abbreviated form)
• Technical information such as browser, Internet service provider, device, and screen resolution
• Source (referrer URL) of your visit (i.e., which website or advertising channel you used to reach us)

For more information on the Terms of Use and Privacy Policy, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and Internet usage.

Legal Basis

The legal basis for this data processing is your consent pursuant to Article 6(1), first sentence, subparagraph (a) of the GDPR.

Recipient

We use technical service providers to operate and maintain our website and to analyze cookies; these providers act as our data processors.

Another recipient of the data is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the United States (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

Retention period

The data we send that is associated with cookies is automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is two years. Data that has reached the end of its retention period is automatically deleted once a month.

Transfer to a Third Country

Since Google’s headquarters are located in the United States, it cannot be ruled out that the data may be processed on Google’s servers in the United States. This poses the risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes without you having any legal recourse. To ensure an adequate level of data protection, we have entered into EU Standard Contractual Clauses with Google, which can be viewed here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Withdrawal of Consent

You can withdraw your consent at any time in the cookie settings, effective for the future.

You can also disable Google Analytics tracking on our website by clicking this link. Doing so will install an opt-out cookie on your device. This will prevent Google Analytics from collecting data for this website and this browser in the future, as long as the cookie remains installed in your browser.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link: Browser Add-on to Disable Google Analytics.

Cookies

A cookie is a small data file that is created when a user visits a website and is temporarily stored on the user’s system. When the user visits this website again, the user’s browser sends the previously received cookie back to the server. The server can analyze the information obtained through this process. In particular, cookies can make navigating a website easier.

You can access detailed information about cookies—including which cookies are used on this website and for what purposes—at any time in the cookie settings.

Deleting Cookies

You can delete individual cookies or all cookies. You will also find information and instructions on how to delete these cookies or block them from being stored in the first place. Depending on your browser provider, you can find the necessary information at the following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Microsoft Edge: https://support.microsoft.com/de-de/windows/managing-cookies-in-microsoft-edge-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

In addition, you can prevent so-called scripts from loading by default. NoScript allows JavaScript, Java, and other plugins to run only on trusted domains of your choice.

For information and instructions on how to manage this feature, please contact your browser’s provider (e.g., for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).

Technically Necessary Cookies

Nature and Purpose of Processing

We use cookies to make our website more user-friendly. Some elements of our website require that the browser used to access the site can be identified even after changing pages.

The purpose of using technically necessary cookies is to make it easier for users to navigate websites. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after the user navigates to another page.

We need cookies for the following applications:

You can find an overview of the cookies we use in our Cookie Consent Tool.

Legal Basis and Legitimate Interest

In this regard, data processing is based solely on our legitimate interest in ensuring our website is user-friendly and in documenting consent in accordance with Article 6(1)(f) of the GDPR, in conjunction with a balancing test under Section 25(2) of the TDDDG.

Recipient

The recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.

Retention period

Please refer to the Cookie Consent Tool for the specific retention periods of the cookies.

Transfer to a Third Country

Data is not currently being transferred to third countries

Provision Required or Mandatory

The provision of the aforementioned personal data is not required by law or by contract. However, without this data, we cannot guarantee the service or the proper functioning of our website. In addition, certain features and services may not be available or may be limited.

Objection

Please read the information below regarding your right to object under Article 21 of the GDPR.

Transfer to a Third Country

The data collected may be transferred to the following third countries: the United States

The following data protection safeguards are in place: Adequacy Decision by the European Commission

Provision required or mandatory

The provision of your data is voluntary and based solely on your consent. However, please note that in this case, you may not be able to fully use all features of this website.

Withdrawal of Consent

You can revoke your consent in the cookie consent tool for future use.

Profiling

Technically non-essential cookies allow us to evaluate the behavior of website visitors and analyze their interests. To this end, we create a pseudonymous user profile.

Information Regarding Your Right to Object Under Article 21 of the GDPR

Right to Object on a Case-by-Case Basis

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(f) of the GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Recipient of an objection

Holger Hinsch, info@hinsch-consulting.com

Changes to Our Privacy Policy

We reserve the right to amend this Privacy Policy to ensure that it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, such as when introducing new services. The new Privacy Policy will then apply to your next visit.

Questions About Data Protection

If you have any questions regarding data protection, please send an email to the data controller listed above.

Copyright Notices

This Privacy Policy was created with the assistance of activeMind AG—the experts in external data protection officers (Version #2024-10-25).