PRIVACY POLICY

1. CONTACT

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions and process your requests.

The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR.

If we request information via our contact form that is not required for contacting you, we have always marked this as optional. We use this information to specify your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 para. 1 sentence 1 lit. a GDPR.

If this involves information on communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel in order to respond to your request. You can of course revoke this consent at any time for the future.

Your data that we have received in the course of contacting you will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the data controller, our company has implemented numerous technical and organizational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, internet-based data transmissions can generally have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels (e.g. our contact form) or the postal service.

2. YOUR RIGHTS

We will be happy to provide you with information as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR. In addition, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR) under the respective legal requirements.

You have the right to object to the processing under the legal requirements (Art. 21 GDPR).

To exercise your above rights, please contact us by email at datenschutz@caleo.com or by post at CALEO Consulting GmbH, Lochhamer Schlag 11, 82166 Gräfelfing. The exercise of your above rights is free of charge for you.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection regulations (Art. 77 GDPR).

The supervisory authority responsible for us is

Bavarian State Office for Data Protection Supervision
P.O. Box 1349
91504 Ansbach

3. LEGAL BASIS OF OUR DATA PROCESSING

The processing of personal data can be based on various legal bases. If we need your data to fulfill a contract with you or to answer your inquiries regarding a contract, the legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR. If we obtain your consent for certain data processing, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. We carry out some data processing on the basis of our legitimate interest, whereby a balance is always struck between your interests worthy of protection and our legitimate interests. The legal basis for this is Art. 6 para. 1 lit. f GDPR. Insofar as the processing is necessary to fulfill a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR.

Below we explain how we process personal data via our website.

3.1 DATA PROCESSING WHEN YOU VISIT THE WEBSITE

We collect the following technical information (log file data) when you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information (e.g. via a contact form):

Operating system of the device you use to visit our website
Browser (type, version & language settings)
the amount of data retrieved
the current IP address of the device you are using to visit our website
the date and time of access
the URL of the previously visited website (referrer)
the URL of the (sub)page that you access on the website
the internet service provider of the accessing system
The collection of this data is technically necessary in order to display our website to you and to ensure stability and security. We regularly do not know who is behind an IP address. We do not combine the data listed above with other data.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Since the collection of data for the provision of the website and the storage in log files is absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point

3.2 DATA TRANSMISSION

Your personal data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the performance of the contractual relationship or you have previously expressly consented to the transfer of your data.

External service providers and partner companies will only receive your data if this is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers process your personal data on our behalf, we ensure that they comply with the provisions of the data protection laws in the same way as part of order processing in accordance with Art. 28 GDPR. Please also note the data protection notices of the respective providers. The respective service provider is responsible for the content of external services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.

We attach great importance to processing your data within the EU/EEA. However, we may use service providers who process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient before your personal data is transferred. This can be achieved, for example, by means of EU standard contracts or binding corporate rules or special agreements to which the company may be subject.

3.3 COOKIES

3.3.1 WHAT ARE COOKIES?

Cookies are data that are stored on your computer by a website that you visit and enable your browser to be reassigned. Cookies are used to transmit information to the site that uses the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you make there. This prevents you from having to re-enter required form data each time you use the website, for example. The information stored in cookies can also be used to recognize preferences and target content according to areas of interest.

There are different types of cookies: Session cookies are data sets that are only temporarily stored in the working memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. These cookies are used by marketing companies, for example.

The legal basis for possible processing of personal data using cookies and their storage duration may vary. If you have given us your consent, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionalities, to measure reach and - with your consent - to tailor our services to preferred areas of interest.

3.3.2 THE COOKIES USED ON THIS WEBSITE ARE:

You can delete cookies already stored on your device at any time. If you want to prevent cookies from being saved, you can do this via the settings in your Internet browser. You can find instructions for common browsers here: Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge Browser, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

When accessing our website, all users of our website are also informed by an info banner about the use of cookies by us and referred to this data protection information. As a user, you will also be asked for your consent to the use of certain cookies, in particular those relevant for the personalization of services and for marketing measures. Once you have given your consent, you can revoke it at any time with effect for the future.

Personalize your cookie settings

3.4 WEBSITE ANALYSIS

We use various services for the purpose of analyzing and optimizing our websites, which are described below. We use these services to analyze how many users visit our site, which information is most in demand or how users find the offer. We also collect data about the website from which a user came to our website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design our offers in a user-friendly way, to find errors and to improve our offers and this is also our legitimate interest in using these tools. The data collected is not used to personally identify individual users. We proceed in a data-saving manner: Anonymous or at most pseudonymous data is collected. The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a, 7 GDPR.

3.4.1 HUBSPOT

Newsletter dispatch
Chat service
Content is delivered and made available via HubSpot, which a user can receive via a completed form -> data collection in HubSpot
Blog is made available via HubSpot
Additional personal data that HubSpot can store when someone has filled out a form

• IP location/country

• Type of browser

• Duration of the visit

• Pages viewed

3.4.2 GOOGLE ANALYTICS

Google Analytics uses cookies to help the website analyze how users use the site. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use the 'anonymizeIP' function (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The following data is collected during your visit to the website:

• the pages you visit, your "click path"

• Achievement of "website goals" (conversions, e.g. newsletter registrations, downloads, purchases)

• Your user behavior (e.g. clicks, dwell time, bounce rates)

• Your approximate location (region)

• Your IP address (in abbreviated form)

• technical information about your browser and the end devices you use (e.g. language setting, screen resolution)

• Your internet provider

• the referrer URL (via which website/advertising medium you came to this website)

The recipient of the data is Google Ireland Limited as the processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google. A transfer of data to the USA cannot be ruled out.

The data sent by us and linked to cookies is automatically deleted after 13 months. Data that has reached the end of its retention period is automatically deleted once a month. You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by
a. Not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to deactivate Google Analytics (https://tools.google.com/dlpage/gaoptout?hl=de).

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there.
You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de .

3.5 CONTACT

When you contact us by email or via a contact form, the data you provide (your email address, possibly your name and telephone number) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR. If we request information via our contact form that is not required for contacting you, we have always marked this as optional. We use this information to specify your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 para. 1 sentence 1 lit. a GDPR. If this involves information on communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel in order to respond to your request. You can of course revoke this consent at any time for the future.

Your data that we have received in the course of contacting you will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the data controller, our company has implemented numerous technical and organizational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, internet-based data transmissions can generally have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels (e.g. our contact form) or the postal service.

4. RESPONSIBLE PERSON

The controller within the meaning of the General Data Protection Regulation (GDPR) is
CALEO Consulting GmbH
Lochhamer Schlag 11
82166 Gräfelfing

Phone: +49 (89) 4161 7230
Mail: info@caleo.com

If you have any questions about data protection, please contact our external data protection officer:

intersoft consulting services AG
At the Strohhaus 17
20097 Hamburg

E-mail: datenschutz@caleo.com