Privacy policy of kobaltblau Management Consultants GmbH

Controller within the meaning of the GDPR:

kobaltblau Management Consultants GmbH
St.-Martin-Str. 114
81669 Munich

info@kobaltblau.com

For all questions relating to the processing of your personal data and the exercise of your rights under the GDPR, you can consult our data protection officer, who can be contacted at datenschutz@kobaltblau.com.

Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service or consideration, the processing is based on Art. 6 para. 1 lit. a GDPR. 6 I lit. b GDPR.

The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. f GDPR. 6 I lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and their name, age, health insurance details or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR are based.

Ultimately, processing operations could be based on Art. 6 I lit. f GDPR are based. This legal basis is used for processing operations which are not covered by any of the aforementioned legal bases if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).

The Internet pages of kobaltblau use cookies. Cookies are text files that are placed and stored on a computer system via an Internet browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.

Through the use of cookies, kobaltblau can provide the users of this website with more user-friendly services that would not be possible without setting cookies.

By means of a cookie, the information and offers on our website can be optimized for the benefit of the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is taken over by the website and the cookie stored on the user’s computer system. Another example is the cookie of a shopping cart in an online store. The online store remembers the items that a customer has placed in the virtual shopping cart via a cookie.

The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

The Internet pages of kobaltblau use cookies, text files that are placed and stored on a computer via the Internet browser. Cookies enable a unique identification of the Internet browser and the provision of user-friendly services.

The website of kobaltblau captures a series of general data and information with each call-up to the website by a data subject or an automated system. These general data and information are stored in the server’s log files.

The following can be recorded:

• Browser types and versions used
• the operating system used by the accessing system
• the website from which an accessing system reaches our website (so-called referrer)
• the sub-websites that are accessed via an accessing system on our website
• the date and time of access to the website
• an Internet Protocol address (IP address)
• the Internet service provider of the accessing system and
• other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using these general data and information, kobaltblau does not draw any conclusions about the data subject. Rather, this information is required in order to

• deliver the content of our website correctly
• optimize the content of our website and the advertising for it
• ensure the long-term functionality of our information technology systems and the technology of our website, and
• provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack.

Therefore, kobaltblau analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

Kobaltblau has integrated the component Matomo on this website. Matomo is an open-source software tool for web analysis. Web analysis is the collection, compilation, and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis tool collects data on which website a person came from to a website (so-called referrer), which sub-pages of the website were accessed or how often and for what duration a sub-page was viewed. Web analysis is predominantly used for the optimization of a website and for the cost-benefit analysis of internet advertising.

The software is operated on the server of the person responsible for processing, and the data protection-sensitive log files are stored exclusively on this server.

Matomo sets a cookie on the information technology system of the affected person. What cookies are has already been explained above. With the setting of the cookie, kobaltblau is enabled to analyze the usage of our website. With each call-up to one of the individual pages of this website, the internet browser on the information technology system of the affected person is automatically prompted by the Matomo component to transmit data for the purpose of online analysis to our server. As part of this technical process, we gain knowledge of personal data, such as the IP address of the affected person, which serves us, among other things, to understand the origin of the visitors and clicks.

Through the cookie, personal information, such as the access time, the location from which access was made, and the frequency of visits to our website, is stored. With every visit to our web pages, these personal data, including the IP address of the internet connection used by the affected person, are transmitted to our server. This personal data is stored by us. We do not pass these personal data on to third parties.

All data is stored anonymously, so no conclusions can be drawn about a specific person.

Further information and the applicable data protection regulations of Matomo can be retrieved at https://matomo.org/privacy/.

7.1 Application via the “Personio” tool

If you would like to apply for a job with us, you can enter your details in our applicant tool on our website and send us your application documents. For this purpose, we use the service provider PERSONIO with whom we have concluded an order processing agreement.

The responsible body is:

Personio SE & Co. KG
Seidlstraße 3
80335 Munich
Germany

Further information on data protection at Personio can be found here: https://www.personio.com/privacy-policy/

7.2 Application via e-mail

You can also send us your application via our contact e-mail address. As part of the application process, we store the data you provide.

The data provided by you will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. B. after your application has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

8.1 Advertising via electronic communication (e-mail)

We use your e-mail addresses that we have received in connection with the conclusion of a contract, e.g. to inform you about our range of services, portfolio, industry reports and study results carried out by us, Art. 6 I 1 f) GDPR i. V. m. § 7 III UWG.

You can prohibit this advertising use at any time without incurring any costs other than transmission costs according to the basic rates:

• By e-mail datenschutz@kobaltblau.com
• By clicking on the unsubscribe link at the end of the e-mail
• In writing to kobaltblau Management Consultants GmbH, St.-Martin-Str. 114, 81669 Munich
  (please enter your e-mail address)

8.2 Making contact for business purposes

We may exchange information and documents by telephone and in writing, but also electronically by e-mail, for the purposes of contract fulfillment, contract implementation, contract maintenance and contract analysis (e.g.B. Contract correspondence).

The data stored by us will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for which the data was stored no longer applies (e.g. B. after the contract has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

8.3 Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after your request has been processed). B. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

We process data from publicly accessible sources such as social media. We use these for the purposes of direct advertising in connection with services offered by us on the basis of Art. 6 (1) sentence 1 letter f). You can object to this use of your personal data for advertising purposes at any time in accordance with Article 21 GDPR. You can send your objection by e-mail to datenschutz@kobaltblau.com.

10.1 YouTube

This website embeds videos from the YouTube website. The responsible body for users in the EU/EEA and Switzerland is

Google Ireland Limited
Google Building Gordon House
4 Barrow St
Dublin
D04 E5W5
Ireland

You can find Google’s privacy policy at https://policies.google.com/privacy.

When you visit one of our websites on which YouTube is integrated, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. Furthermore, YouTube may store various cookies on your end device or use comparable technologies to recognize you (e.g. B. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information will be a. is used to record video statistics, improve user-friendliness and prevent fraud attempts.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR represent. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG, insofar as the consent permits the storage of cookies or access to information in the user’s terminal device (e.g. B. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

10.2 Whistleblower protection – LegalTegrity

Our whistleblower protection system is operated by

LegalTegrity GmbH
Platz der Einheit 2
60327 Frankfurt
Germany

Your browser establishes a direct connection with the LegalTegrity servers as soon as you click the button. We have no influence on the data that is then collected by Legaltegrity. The purpose and scope of the data collection and the further processing and use of the data by LegalTegrity as well as your rights in this regard and setting options to protect your privacy can be found in LegalTegrity’s data protection information: https://legaltegrity.com/en/privacy-policy/

10.3 Kununu

Kununu is operated by

New Work SE
Am Strandkai 1
20457 Hamburg
Deutschland

Your browser establishes a direct connection with the Kununu servers as soon as you click the button. We have no influence on the data that is then collected by Kununu. The purpose and scope of the data collection and the further processing and use of the data by Kununu as well as your rights in this regard and setting options to protect your privacy can be found in Kununu’s data protection information: https://privacy.xing.com/de/datenschutzerklaerung

11.1 Information
You have the right to obtain information about your personal data processed by us and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, its recipients and authorized persons and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration.

11.2 Correction
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

11.3 Right to object due to special situation
Insofar as the processing of personal data concerning you is based on Art. 6 para. 1 (f) GDPR, you have the right to object to the processing of this data at any time on grounds relating to your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

11.4 Right to object due to direct advertising
You also have the right to object to the collection, processing and storage of your personal data for direct marketing purposes at any time.

11.5 Right of withdrawal
If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can contact us or our data protection officer at any time using the details above.

11.6 Right to erasure
You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You object to the processing pursuant to point 2 c) and there are no overriding legitimate grounds for the processing.
• The personal data was processed unlawfully.
• The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.

This does not apply if the processing is necessary:

• For compliance with a legal obligation which requires processing by Union or Member State law to which we are subject.
• For the assertion, exercise or defense of legal claims.

11.7 Right to restriction of processing
You have the right to obtain from us restriction of processing where one of the following applies:

• The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
• We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or
• you have objected to processing pursuant to point 2 c) pending the verification whether our legitimate grounds override yours.

Where processing has been restricted in accordance with point 2 e), such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained a restriction of processing, we will inform you before the restriction is lifted.

11.8 Right of appeal
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Supervisory authority for the right to lodge a complaint:

Aufsichtsbehörde für Beschwerderecht
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach

Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-mail: poststelle@lda.bavaria.de