Responsibility

The responsible person in the sense of Art. 4 No. 7 GDPR is the person who, alone or together with others, decides on the purpose of, and methods used for, the processing of person-related data.

In relation to our website, responsibility lies with:

Prof. Schumann GmbH
Weender Landstraße 23
37073 Göttingen
E-mail: info@prof-schumann.de

Tel.: +49 (0) 551 - 383150
Fax: +49 (0) 551 - 3831520

Contacting the Data Protection Officer

We have appointed a Data Protection Officer according to Art. 37 GDPR. Our Data Protection Officer can be contacted using the following contact data:

Thomas Floß
Hopfengarten 10
33775 Versmold
E-mail: datenschutz@prof-schumann.de
Tel.: +49 5423 964 900
Fax: +49 5423 964 9030
Website: http://www.floss-consult.de/

Provision of the website and creation of log files

Every time our internet site is called up, our system automatically compiles data and information about the device calling up the website (e.g. computer, mobile telephone, tablet, etc.).

(1) Information about the browser type and version in use;
(2) The operating system of the device calling up the website;
(3) Host name of the device calling up the website;
(4) The IP address of the device calling up the website;
(5) Date and time of access to the website;
(6) Web pages and resources (pictures, data, further page content) that are called up from our internet site;
(7) Website from which the user's system accesses our internet site (referrer tracking);
(8) Message as to whether access was successful;
(9) Quantity of data transferred

Which person-related data is collected and to what extent is this data processed?

This data is stored in the log files of our system. Storage of this data together with person-related data about a specific user does not take place, so that the identification of individual website visitors does not happen.

Legal basis for the processing of person-related data

Art. 6 Para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in enabling the achievement of the following purposes.

Purpose of the data processing

The temporary (automated) storage of the data is necessary for the procedure of visiting the website in order to make the delivery of the website possible. The storage and processing of the person-related data also takes place in order to maintain the compatibility of our internet site for as many visitors as possible, to combat misuse and for the removal of problems. For this purpose it is necessary to log the technical data of the computer calling up the website in order to be able to react as soon as possible to presentation errors, attacks on our IT systems and/or errors in the functionality of our internet site. Furthermore, the data serves to help us with the optimization of the website and the general security of our information technology systems.

Duration of data storage

The deletion of the technical data detailed above takes place as soon as it is no longer needed to guarantee the compatibility of our internet site for all visitors, but at the latest three months after our internet site was called up.

Possibility for objections and deletion

You can object to this processing according to Art. 21 GDPR at any time and demand deletion of the data according to Art. 17 GDPR. Which rights you have and how you can assert these rights can be found in the lower area of this data protection declaration.

Special functions of the internet site

Contact form(s)

Our site offers you various functions through which, when they are used, we collect, process and store person-related data. What happens to this data is explained in the following:

  • Which person-related data is collected and processed?

The data entered by you in our contact forms, which you have entered in the entry fields of the respective contact form.

  • Legal basis for the processing of person-related data

Art. 6 Para. 1 lit. a GDPR (consent through clearly confirmatory actions or behaviour).

  • Purpose of the data processing

We will only use the data collected via our contact form or forms for the processing of the specific inquiry received via the contact form. Please note that for the fulfilment of your inquiry we may send E-mails to the address you have entered. This has the purpose that you can receive confirmation from us that your inquiry has been correctly received. The sending of this confirmation E-mail is, however, not mandatory for us and only serves to provide you with information.

  • Duration of data storage

After processing your inquiry the data collected will be deleted immediately insofar as there is no legal requirement to store the data for a particular period of time.

  • Possibility for objections and deletion

The possibilities for objections and deletion of data are regulated according to the general regulations for the right to objection and deletion according to data protection legislation that are explained in the following in this data protection declaration.

  • Necessity of providing person-related data

The use of the contact forms takes place on a voluntary basis and is neither contractually nor legally compulsory. You are not obliged to make contact with us using the contact form but can also use the other contact possibilities detailed on our website. If you wish to use our contact form, you need to fill in the fields that are designated as mandatory. If you do not fill in the necessary entries on the contact form, then either you will be unable to send the inquiry or we are unfortunately not able to process your inquiry.

Integration of external web services and processing of data outside the EU

On our internet site we use active content from external providers, so-called web services. When our internet site is called up, these external providers may receive person-related information about your visit to our internet site. Processing of data outside the EU is hereby possible. You can prevent this by installing a suitable browser plug-in or by deactivating the running of scripts in your browser. This can, however, lead to the limitation of functions on internet sites that you visit.

We use the following external web services:

  • CloudFlare

Our website loads a web service from the company Cloudflare Inc., 101 Townsend St, 94107 San Francisco, United States of America (in the following: CloudFlare). We use this data to ensure the full functionality of our website. In this connection, your browser may transmit person-related data to CloudFlare.

The legal basis for the processing of this data is Art. 6 Para. 1 lit. f GDPR. The legitimate interest lies in an error-free functioning of the internet site. Cloudflare Inc. has certified itself within the framework of the EU-US Privacy Shield agreement (see https://www.privacyshield.gov/list). The link to the adequacy resolution of the EU in relation to the EU-US Privacy Shield agreement can be found here: http://data.europa.eu/eli/dec_impl/2016/1250/oj.The deletion of the data takes place as soon as the purpose of collecting it has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of CloudFlare: https://www.cloudflare.com/privacypolicy/

You can prevent the collection and processing of your data by CloudFlare by deactivating the running of script code in your browser.

Information regarding the use of cookies

  • Extent of processing of person-related data
    On various pages we use cookies to enable the use of particular functions of our website. The so-called "cookies" are small text files that your browser can place on your computer. These text files contain a series of characters that enable clear identification of the browser when our website is called up again. The process of storing a cookie file is also known as "setting a cookie".
  • Legal basis for the processing of person-related data
    Art. 6 Para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in maintaining the full functional capability of our internet site, increasing usability as well as enabling customers to be addressed more individually. An identification of individual website visitors is only possible with the help of the cookie technology if the website visitor has previously provided us with person-related data on the basis of a specific consent.
  • Purpose of data processing
    The cookies are set by our website in order to maintain the full functional capability of our internet site and to improve its usability. In addition, the cookie technology makes it possible for us to recognise individual users through pseudonyms, e.g. an individual arbitrary ID, so that it is possible for us to offer more individual services.
  • Duration of data storage
    The storage of our cookies takes place until they are deleted in your browser or, in the case of session cookies, until the session has finished.
  • Objection and data removal possibilities
    You can adjust the settings of your browser yourself according to your wishes so that the setting of cookies is generally prevented. You can then decide on the acceptance of cookies from case to case or you can generally accept the setting of cookies. Cookies can be used for various purposes e.g. to detect that your PC has previously been connected to our website (permanent cookies) or to record recently viewed offers (session cookies). We use cookies in order to offer you increased user comfort. In order to be able to use our comfort functions, we recommend that you allow cookies for our website. The objection and data removal possibilities are otherwise arranged according to the general regulations for objections and deletion entitlements according to the data protection legislation that are described in the following in this data protection declaration.

Data security and data protection, communication via E-mail

Your person-related data is protected by technical and organizational measures in the collection, storage and processing so that it is not accessible to third parties. In the case of unencrypted communication via E-mail we cannot guarantee complete data security during transmission to our IT systems so that for information with a high necessity for secrecy we recommend encrypted communication or the use of postal services.

Automatic E-mail archiving

  • Extent of processing of person-related data
    We specifically inform you that our E-mail system disposes of an automated archiving procedure. All incoming and outgoing E-mails are archived digitally in a manner that is secure for auditing.
  • Legal basis for the processing of person-related data
    Art. 6 Para. 1 lit. c GDPR (legal obligation). The legal obligation lies in the observation of taxation and trade legislation (e.g. §§ 146, 147 AO, §§ 238, 257 HGB).
  • Purpose of the data processing
    The purpose of the archiving lies in the observation of taxation legislation (z.B. §§ 146, 147 AO – obligation to keep taxation-relevant E-mails) and trade legislation (z.B. §§ 238, 257 HGB – obligation to archive business correspondence).
  • Duration of data storage
    The storage of our E-mail communication takes place until the expiry of the storage obligations according to the taxation and trade legislation. The duration of storage can be up to 10 years.
  • Objection and data deletion possibilities
    You can object to this processing according to Art. 21 GDPR at any time and demand deletion of the data according to Art. 17 GDPR. Which rights you have and how you can assert these rights can be found in the lower area of this data protection declaration.
  • Handling of job application documents
    If you have questions relating to our E-mail archiving system, please contact our Data Protection Officer. In addition, we would like to point out that we only accept application documents in PDF file format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and are not delivered. We do not accept applications in Word file format or other file formats and delete them unread. Please note that application documents sent unencrypted by E-mail could possibly be opened by third parties before they reach our IT systems. We assume that unencrypted application E-mails may also be answered in an unencrypted manner. If you do not wish this to happen, please inform us of this in your application E-mail.

Right to information and changes – deletion and limitation of data - withdrawal of consent – right to objection

Right to information

You have the right to demand confirmation as to whether we process/store person-related data from you. If this is the case, you have the right to information as described in Art. 15 Para. 1 GDPR insofar as the rights and freedoms of other persons are not impaired (see Art. 15 Para. 4 GDPR). We would be pleased to make a copy of the data available to you.

Right to changes

According to Art. 16 GDPR you have the right to have corrections made to any person-related data stored by us that is incorrect (e.g. address, name etc.) at any time. You can also demand the completion of the data stored by us at any time. Corresponding changes will be made without delay.

Right to deletion

According to Art. 17 Para. 1 GDPR you have the right that we delete the person-related data that we have collected about you if either

  • the data is no longer needed;
  • due to the withdrawal of your consent the legal basis for processing the data has become invalid, without any replacement;
  • you have objected to the processing and there is no legitimate reason for the processing;
  • your data is being processed illegally;
  • a legal obligation makes this necessary or data collection took place according to Art. 8 Para. 1 GDPR.

According to Art. 17 Para. 3 GDPR this right does not exist if

  • the processing is necessary in order to exercise the right to freedom of speech and information;
  • your data was collected on the basis of a legal obligation;
  • processing is necessary for reasons of public interest;
  • the data is necessary for the assertion, exercise or defence of legal rights.

Right to limitation of processing

According to Art. 18 Para. 1 GDPR in individual cases you have the right to demand the limitation of the processing of your person-related data.
This is the case if

  • the correctness of the person-related data is disputed by you;
  • the processing is illegal but you do not agree to deletion;
  • the data is no longer needed for the processing purpose but the collected data serves to facilitate the assertion, exercise or defence of legal rights;
  • an objection to processing according to Art. 21 Para. 1 GDPR has been made and it is not yet clear which interests predominate.

Right to withdrawal of consent

Insofar as you have given us specific consent to the processing of your person-related data (Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit a GDPR) you can withdraw this consent at any time. Please note that this does not affect the legality of the processing that took place on the basis of this consent until it was withdrawn.

Right to objection

According to Art. 21 GDPR you have the right to object at any time to the processing of person-related data that relates to you and was collected on the basis of Art. 6 Para. 1 lit. f (in the context of a legitimate interest). You only have this right when there are special circumstances opposing the storage and processing.

How do I exert my rights?

You can exert your rights at any time using the following contact data:
Prof. Schumann GmbH
Weender Landstraße 23
37073 Göttingen
E-mail: info@prof-schumann.de
Tel.: +49 (0) 551 - 383150
Fax: +49 (0) 551 - 3831520

Right to data transfer

According to Art. 20 GDPR you have the right to the communication of your person-related data. We will make the data available in a structured, accessible and machine-readable format. You may choose whether the data is sent directly to you or to a responsible third party named by you.

Upon inquiry we will make the following data available to you according to Art. 20 Para. 1 GDPR:

  • Data collected on the basis of specific consent according to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR;
  • Data that we have obtained from you according to Art. 6 Para. 1 lit. b GDPR within the framework of existing contracts;
  • Data that was processed within the framework of an automated procedure.

We will perform the transfer of the person-related data directly to a responsible third party desired by you insofar as this is technically possible. Please note that we are not allowed to communicate data that affects the rights or freedoms of other persons according to Art. 20 Para. 4 GDPR.

Right to lodge a complaint with a regulatory authority according to Art. 77 Para. 1 GDPR

If you have the suspicion that your data has been illegally processed on our website, you can of course obtain clarification of the problem through the courts of law at any time. In addition, all other legal possibilities are open to you. Independently of this, you have the possibility to contact a regulatory authority according to Art. 77 Para. 1 GDPR. The right to lodge a complaint according to Art. 77 GDPR is available to you in the EU member state in which you are residing, in which your place of work is located and/or the location of the alleged violation, meaning that you can select the regulatory authority you wish to contact in any of the aforementioned locations. The regulatory authority to which you make the complaint will then inform you about the status and the results of your submissions, including the possibility of obtaining legal help through the courts according to Art. 78 GDPR

News & Success Stories
Events & Webinars

Follow us

Let's stay in contact! All news and events can be found here.

Contact us

Get in touch with us and tell us about your challenges. Together we will find the best solution. We are looking forward to your inquiry.

info@prof-schumann.de +49 (0) 551 383 15-0