Privacy Policy and Consumer Dispute Resolution Act

A. Privacy Policy

1. Introduction

We, at KNAISCH CONSULTING GMBH and our service providers, take the protection of your personal data very seriously. We treat your personal information with confidentiality and in compliance with applicable data protection laws — including the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) — as well as this Privacy Policy.
You can generally use our website without providing personal data. If personal data (e.g., name, address, or email address) is collected, this is done on a voluntary basis whenever possible. We will not disclose this data to third parties without your explicit consent.
Please note that data transmitted over the internet (e.g., via email) may be susceptible to security vulnerabilities. Complete protection from third-party access is not possible. Therefore, you are welcome to submit personal data through alternative means, such as by post or telephone.
The following privacy policy provides an overview of the processing of your personal data during your visit to our website and informs you of your rights as a data subject. For additional information, please contact our data protection officer, whose contact details can be found under “Imprint.”

2. Name and Address of the Controller

The controller within the meaning of the GDPR and BDSG is:
KNAISCH CONSULTING GMBH
Am Hardtwald 4
76275 Ettlingen/Karlsruhe Germany
Phone: +49 (0)7243-652640

3. Social Media Services, Cookies, and Analytics Tools

3.1.1 Facebook-Plugins (Like-Button)
Our website includes plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can identify the Facebook plugins by the presence of the Facebook logo or the “Like” button on our website. An overview of Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/.
When you visit our website, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives information that your IP address has accessed our website. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our website to your Facebook profile. This allows Facebook to associate your visit to our website with your user account. As the provider of this website, we wish to emphasize that we have no knowledge of the content of data transmitted via the plugin, nor of how Facebook uses it. Further information can be found in Facebook’s privacy policy: http://de-de.facebook.com/policy.php.
If you do not want Facebook to associate your visit to our website with your Facebook account, please log out of your Facebook account.

3.1.2 Google AdSense
This website uses Google AdSense, a service for the integration of advertisements provided by Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google AdSense uses so-called “cookies”, which are text files stored on your computer that allow an analysis of the use of the website. Google AdSense also uses so-called “web beacons” (invisible graphics). These web beacons can be used to evaluate visitor traffic on this website.
The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a Google server in the United States and stored there. This information may also be passed on by Google to its contractual partners. However, Google will not merge your IP address with other data stored by Google.
You can prevent the installation of cookies by adjusting your browser software settings accordingly; however, please note that in this case you may not be able to fully use all functions of this website. By using this website, you consent to the processing of data collected about you by Google in the manner and for the purpose described above.

3.1.3 Google Analytics
3.1.3.a Information about Google Analytics
If you have given your consent, this website uses Google Analytics.
The providers of Google Analytics are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google Ireland”), and Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google USA”).
Google Analytics uses so-called “cookies”, which are text files stored on your computer that enable an analysis of your use of our website. For this purpose, a pseudonymized user profile is created, which is used to evaluate your use of our website. Based on this profile, we receive reports on website activity to help us further optimize the usability of our website.

Pseudonymization is ensured by shortening your IP address before transmission to Google, so that it is no longer possible to trace it back to your person. No merging of your data with other data from Google takes place. A data processing agreement ensures that Google processes this data solely according to our instructions.
Further information on how Google Analytics processes data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

3.1.3.b Transfer to Third Countries
As a rule, the data collected and processed by Google Analytics is stored by Google Ireland within the European Union (EU).
In exceptional cases—such as for technical maintenance—Google USA may temporarily access the data. This results in a data transfer to a country that does not offer a level of data protection equivalent to that of the EU or the European Economic Area (EEA) (“third-country transfer”). However, by being certified under the EU-U.S. Privacy Shield Framework, Google ensures that an appropriate level of data protection is maintained in these cases.

3.1.3.c Legal Basis and Storage Duration
The legal basis for the use of Google Analytics and the associated data processing as described under item 3.1.3.a is Article 6(1)(a) of the General Data Protection Regulation (GDPR).
Data collected and analyzed using Google Analytics is automatically deleted after 2 months. Data that has reached its retention limit is deleted once per month.

3.1.3.d Your Data Protection Rights
Your consent to the use of Google Analytics does not restrict your data protection rights, such as the rights to access, rectification, or deletion.
Further information about your rights can be found in section 5 of this privacy policy.
Please note that you can prevent the storage of cookies by adjusting your browser settings; however, some functionality of this website may then be limited.
You can also prevent the collection of data generated by cookies related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en http://tools.google.com/dlpage/gaoptout?hl=de

You can also opt out of Google Analytics tracking by setting an opt-out cookie via this link: Deactivate Google Analytics

3.1.4 LinkedIn
Our website uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access a page on our website that contains LinkedIn functions, a connection to LinkedIn servers is established. LinkedIn is thereby informed that you have visited our website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn may associate your visit to our website with your user account.
We would like to point out that, as the provider of this website, we have no knowledge of the content of the transmitted data or its use by LinkedIn.
Further information can be found in LinkedIn’s privacy policy at:
https://www.linkedin.com/legal/privacy-policy

3.1.5 XING
Our website uses features of the XING network. The provider is XING AG, Dammtorstraße 29–32, 20354 Hamburg, Germany. Each time you access a page on our website that includes XING functions, a connection to XING servers is established. To the best of our knowledge, no personal data is stored in the process. In particular, IP addresses are not stored, nor is user behavior evaluated.
Further information on data protection and the XING Share button can be found in XING’s privacy policy at:
https://www.xing.com/app/share?op=data_protection

3.1.6 YouTube
Our website uses plugins from YouTube, a platform operated by Google. The provider is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
Further information on the handling of user data can be found in YouTube’s privacy policy at:
https://www.google.de/intl/de/policies/privacy https://www.google.de/intl/de/policies/privacy

3.2 Cookies
Our website uses so-called cookies in some areas. Cookies do not cause any damage to your device and do not contain viruses. They help make our services more user-friendly, effective, and secure. Cookies are small text files that are stored on your device and saved by your browser.
Most of the cookies we use are so-called “session cookies.” These are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate automatic deletion of cookies when closing the browser. Please note that disabling cookies may limit the functionality of this website.

Want to disable cookies?

3.3 Server Log Files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request

This data cannot be assigned to specific individuals. This data is not merged with other data sources. We reserve the right to retrospectively check this data if we become aware of specific indications of unlawful use.

3.4 Contact Form
If you submit inquiries to us via the contact form, the information you provide, including the contact details you enter there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

3.5 Newsletter Data
If you would like to receive the newsletter offered on our website, you can register via our form. We use the so-called double opt-in procedure. A confirmation email will first be sent to the email address you provided, asking for your confirmation. Your registration is only complete once you click on the activation link included in the confirmation email.
We use the service provider rapidmail to distribute our newsletter. Your data is therefore transmitted to rapidmail GmbH. rapidmail GmbH is not permitted to use your data for any purpose other than sending the newsletter. It is prohibited from selling or disclosing your data to third parties. rapidmail is a German, certified newsletter software provider that has been carefully selected in accordance with the requirements of the GDPR and the BDSG.
You may revoke your consent to the storage and use of your data for the newsletter at any time, for example via the unsubscribe link included in each newsletter.

3.6 Registration on this Website
You can register on our website to use additional features on the site. The data entered for this purpose will be used only for the offer or service for which you have registered.
We use the email address provided during registration to inform you of important changes, such as changes to the scope of our services or technically necessary updates.

4. Data Retention Period
Unless a more specific retention period has been stated, we will store personal data only as long as necessary to fulfill the intended purpose. Once the purpose of storage no longer applies, the personal data will be deleted.
However, certain legal obligations may require longer retention, such as those arising from tax or commercial law. In such cases, the data will be stored exclusively for those legal purposes and deleted once the legally required retention period has expired.

5. Your Rights as a Data Subject

5.1 Right to Confirmation
You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed. If you would like to exercise this right to confirmation, you can contact our Data Protection Officer at any time.

5.2 Right of Access
As a data subject, you have the right to obtain from us, at any time and free of charge, information about the personal data we hold about you and to receive a copy of this information.
In addition, you have the right to request the following information:

• the purposes of processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data has been or will be disclosed
• where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period
• the existence of a right to rectification or erasure of your personal data
• the existence of a right to restriction of processing by the controller
• the existence of a right to object to such processing
• the existence of a right to lodge a complaint with a supervisory authority
• the source of the data, if not collected directly from you
• the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you

Furthermore, as the data subject, you have the right to be informed whether personal data has been transferred to a third country or an international organization. Where this is the case, you also have the right to be informed of the appropriate safeguards relating to the transfer.
If you wish to exercise your right of access, you may contact our Data Protection Officer at any time.

5.3 Right to Rectification
As the data subject, you have the right to request the prompt rectification of any inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If you wish to exercise this right to rectification, you may contact our Data Protection Officer at any time.

5.4 Right to Erasure (“Right to be Forgotten”)
As the data subject, you have the right to request that we erase personal data concerning you without undue delay, provided one of the following reasons applies and the processing is not necessary:

• The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
• You withdraw your consent on which the processing was based according to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
• You object to the processing pursuant to Art. 21(1) or Art. 21(2) GDPR, and there are no overriding legitimate grounds for the processing.
• Your personal data have been unlawfully processed.
• The erasure of your personal data is required to comply with a legal obligation under Union or Member State law to which we are subject.

If you wish to request the erasure of personal data stored by us, you may contact our Data Protection Officer at any time. The Data Protection Officer will ensure that the request is complied with without undue delay following a review of the requirements.

5.5 Right to Restriction of Processing
As the data subject, you have the right to request the restriction of processing of your personal data under the following conditions:

• You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.
• The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead.
• We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims.
• You have objected to processing pursuant to Article 21(1) GDPR, and it has not yet been determined whether our legitimate grounds override yours.

If one of the above conditions applies and you wish to request the restriction of personal data stored by us, you can contact our Data Protection Officer at any time. The Data Protection Officer will arrange for the restriction of processing.

5.6 Right to Data Portability
As the data subject, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format.
You also have the right to transmit those data to another controller without hindrance from us, where the processing is based on your consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means.
Furthermore, in exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided this does not adversely affect the rights and freedoms of others.
To assert the right to data portability, you may contact our Data Protection Officer at any time.

5.7 Right to Object
As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.
We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
To exercise the right to object, you may contact our Data Protection Officer directly at any time.

5.8 Right Not to Be Subject to Automated Individual Decision-Making, Including Profiling
As the data subject, you have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you, unless the decision:

• is necessary for entering into, or the performance of, a contract between you and us,
• is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests, or
• is based on your explicit consent.

If the decision is necessary for entering into or performing a contract or is based on your explicit consent, we will take reasonable measures to safeguard your rights, freedoms, and legitimate interests, which includes at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.

If you wish to exercise rights relating to automated decision-making, you may contact our Data Protection Officer at any time.

5.9 Right to Withdraw Consent under Data Protection Law
As the data subject, you have the right to withdraw consent given to us for the processing of personal data at any time.
If you wish to exercise your right to withdraw consent, you may contact our Data Protection Officer at any time.

6. Legal Basis for Processing
Article 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific purpose.
If the processing of personal data is necessary for the performance of a contract to which you are a party – such as for the delivery of our services – the processing is based on Article 6(1)(b) GDPR.
The same applies to processing operations necessary for carrying out pre-contractual measures, e.g., in cases of inquiries about our services.
If we are subject to a legal obligation that requires the processing of personal data, such as for tax obligations, the processing is based on Article 6(1)(c) GDPR.
Processing operations not covered by any of the above legal bases are based on Article 6(1)(f) GDPR if the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, provided that your interests, fundamental rights, and freedoms do not override.
Where our legitimate interest lies in conducting our business activities, the processing is based on Article 6(1)(f) GDPR.

7. Provision of Personal Data
Please note that the provision of personal data may in part be required by law (e.g., tax regulations) or may also result from contractual obligations (e.g., information about the contracting party).
As a rule, for the conclusion of a contract, you may be required to provide us with personal data, which we then need to process. Failure to provide personal data would mean that the contract could not be concluded.
Before providing personal data, you may contact our Data Protection Officer, who will explain on a case-by-case basis whether the provision of your personal data is legally or contractually required, whether there is an obligation to provide the data, and what the consequences would be of failing to provide them.

8. Existence of Automated Decision-Making
We do not use automated decision-making or profiling.

9. Reference to Legal Provisions
You can find the full text of the GDPR and further relevant legal provisions (in German) at:
https://dsgvo-gesetz.de
You can find the full text of the Federal Data Protection Act (BDSG) at:
https://dsgvo-gesetz.de/bdsg

10. Contact Details of the Data Protection Officer
KNAISCH CONSULTING GMBH
Data Protection Officer
Fully qualified lawyer (Ass. jur.) Wolfgang Spitz
Am Hardtwald 4
76275 Ettlingen/Karlsruhe, Germany
E-Mail: datenschutz@knaisch-consulting.de

11. Competent Supervisory Authority for Data Protection
The supervisory authority responsible for our company is:
State Commissioner for Data Protection and Freedom of Information
Königstraße 10a
70173 Stuttgart, Germany
E-Mail: Poststelle@lfd.bwl.de

B. Consumer Dispute Resolution Act
In fulfillment of our general duty to inform pursuant to Section 36 of the German Consumer Dispute Resolution Act (VSBG), we hereby inform you that our company does not participate in dispute resolution proceedings before a consumer arbitration board within the meaning of the VSBG. There is no legal obligation for us to do so.

C. Disclaimer
1. Liability for Content
The content of our website has been created with the greatest care. However, we cannot guarantee the accuracy, completeness, or timeliness of the content. As a service provider, we are generally responsible for our own content on these pages in accordance with Section 7(1) of the German Telemedia Act (TMG), but only pursuant to general laws.

2. Liability for Links
Insofar as our website contains links to external third-party websites, we point out that we have no influence on the content of these external sites. Therefore, we cannot assume any liability for such external content. The respective provider or operator of the linked pages is always responsible for their content.
At the time of linking, the linked pages were checked for possible legal violations. No unlawful content was apparent at the time the link was created. However, permanent monitoring of the content of the linked pages is not reasonable without specific indications of a legal violation. If we become aware of any legal infringements, we will remove such links immediately.