Data Protection

Notes on data protection

Thank you for your interest in our company and our services. The protection of your personal data is important to Duvenbeck. We always treat your data confidentially and adhere to the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

With the notes on data protection, we would like to inform you which data we collect from you, how we use them and which rights you can assert against us.

The privacy policy applies to all processing of personal data carried out by us in relation to our website, as well as to all external online sites that are advertised by Duvenbeck and refer to them (e.g. information for visitors to social media).

Insofar as the following information on data protection does not contain any information to the contrary, data processing is carried out exclusively by Duvenbeck. Please note that our website contains references to other providers to which our information on data protection does not extend.

• I Data controller

  The data controller according to the EU General Data Protection Regulation (Article 4 para. 7 GDPR) is

  Duvenbeck Consulting GmbH & Co. KG
  Ruhrallee 7
  46395 Bocholt
  Email:  This email address is being protected from spambots. You need JavaScript enabled to view it.
  Internet: https://duvenbeck.de

• II Data protection officer

  Duvenbeck Consulting GmbH & Co. KG
  Ruhrallee 7
  46395 Bocholt

  You can reach our data protection officer at the above postal address, with the addition "To the data protection officer" or at the e-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it..

• III Data processing in general

  • 1 Personal data

    Personal data within the meaning of the GDPR are all information that relates to an identified or identifiable natural person. A natural person is identifiable if they can be identified directly or indirectly, in particular by means of assignment to an identifier (e.g. name, location, address, email address, IP address, etc.) (Article 4 para. 1 GDPR).

  • 2 Processing of data

    Data processing within the meaning of the GDPR means any process carried out with or without the help of automated processes or any series of processes in connection with personal data such as the collection, recording, organisation, ordering, storage, adaptation or changing, reading, querying, using, disclosing through transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.

  • 3 Collection of data from minors

    This offer is not aimed at children under the age of 16. Persons under 18 years of age should not send us personal data without the consent of their parents or legal guardians. Pursuant to Article 8 GDPR, children up to the age of 16 may only give such consent with the agreement of their legal guardian. We neither consciously collect nor do we process personal data from minors.

  • 4 Description of the scope of the data processing

    All data that we process are processed exclusively for specified and clear purposes.

    We process your data:

    • to fulfil our service (e.g.: transport inquiries, contractual requirements),
    • express user requests (e.g.: contact request, application process),
    • if it is technically necessary for the website (e.g. the date, time, browser and operating system, IP address),
    • and as far as legally permissible / necessary in legal or criminal investigations (also for support), or
    • based on consent, legitimate interest or a legal basis.

  • 5 Inquiries by email or contact form

    When you contact us by email or using a contact form, the data you have provided (e.g.: name, address, telephone number, email address) are stored by us in order to be able to process your inquiries.

    The data you transmit will remain with us until you ask us to delete them, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Legal provisions such as retention periods remain unaffected.

  • 6 Transfer of the data

    Your personal data will only be transmitted to third parties or to third countries if you have given us your express consent or if this is required by law.

    A transfer to third countries outside the European Union (EU), the European Economic Area (EEA) or to an international organisation does not take place unless there are appropriate guarantees or on the basis of your explicit consent.  Appropriate guarantees include the EU standard contractual clauses and an adequacy decision by the EU Commission.

  • 7 Legal basis for the data processing

    • If processing is necessary to safeguard a legitimate interest of our company and your interests, fundamental rights and freedoms do not outweigh the following, the legal basis is:
      • Article 6 para. 1 lit. f GDPR.
    • If we have obtained consent for the processing of your personal data, the following legal basis applies:
      • para. 1 lit. a GDPR
    • Insofar as the processing operations are necessary to fulfil a contract with you, this also relates to any pre-contractual measures, the legal basis applies:
      • Article 6 para. 1 lit. b GDPR
    • The legal bases apply to the application process and any employment relationship that may result from it:
      • Article 6 Para. 1 lit. b, Article 88 GDPR in connection with § 26 para. 1 S. 1 of the Federal Data Protection Act (BDSG).
    • If Duvenbeck is subject to a legal obligation that requires the processing of your personal data, the following legal basis applies:
      • Article 6 para. 1 lit. c GDPR in conjunction with the respective applicable legal obligation

  • 8 Storage duration and data deletion

    We only store your personal data for as long as they are necessary to provide our offer and there is a legitimate interest in storing them. After that, your data will be deleted, with the exception of data that must continue to be stored in order to fulfil legal obligations (retention obligations).

    Duvenbeck also adheres to the principles of data storage avoidance and data economy.

  • 9 Rights of the data subject

    You as the data subject have the following rights with regard to Duvenbeck. For this purpose, the requirements named there are absolutely necessary.

    • Right to information (Article 15 GDPR): With the right to information, the data subject receives a comprehensive insight into the data concerning him or her and some other important criteria, such as the processing purposes or the duration of storage. The exceptions to this right regulated in § 34 of the Federal Data Protection Act (BDSG) apply.
    • Right of rectification (Article 16 GDPR): You have the right to have your personal data corrected and/or completed if these data are incorrect or incomplete. We will make the correction immediately.
    • Right of deletion (Article 17 GDPR): You can ask us to delete your personal data. We are then obligated to delete the data immediately if one of the following reasons applies:
      • Your data are no longer required for the purposes for which they were collected or otherwise processed;
      • If you revoke your consent, which is the basis for the data processing, and there is no other legal basis for the processing;
      • You object to the processing of your data and there are no overriding legitimate reasons for the processing, or you object to data processing for direct marketing purposes;
      • If the data have been processed unlawfully;
      • The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States;
    • Right to have the processing restricted (Article 18 GDPR): You can request that we restrict the processing of your data if:
      • You dispute the correctness of the personal data concerning you for a period that enables us to check the correctness of the data;
      • the processing is unlawful and you reject the deletion of your data and instead request that their use be restricted;
      • we no longer need your personal data for processing purposes, but you need them to assert, exercise or defend legal claims;
      • you have lodged an objection to the processing and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons.

        If the processing of your personal data has been restricted, we may only use these data, apart from their storage, with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

        If the processing of your personal data has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.

    • Right to notification (Article 19 GDPR): If you have asserted the right to correction, deletion or restriction of processing against us, we are obligated to notify all recipients to whom the personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
    • Right of data portability (Article 20 GDPR): If you have made your personal data available to us, you can request the handing over of these data in a suitable format in order to transfer them to another company yourself or to have them transferred.
    • Right of objection (Article 21 GDPR): You have the right to object to data processing by us at any time for reasons that arise from your particular situation, insofar as this is done to safeguard our legitimate interests. If you make use of your right of objection, we will stop processing your data, unless we can, in accordance with legal requirements, prove compelling legitimate reasons for further processing that outweigh your rights.

    You also have the right to revoke a given declaration of consent under data protection law. Revoking consent does not affect the legality of any processing that took place beforehand.

    Furthermore, a right of appeal exists. If you are of the opinion that the processing of your personal data by us is inadmissible, you have the right to complain about the processing to a competent data protection supervisory authority. The responsible data protection supervisory authority is that of your place of residence or your State or the data protection supervisory authority responsible for us (NRW, https://www.ldi.nrw.de).

• Third party services

  • 1 On-apply

    For an efficient application process, we use the services of On-apply (https://onapply.de). This is a service of On-apply GmbH, Lindleystrasse 8A, 60314 Frankfurt am Main. The privacy policy can be found under the following link https://onapply.de/datenschutz.

  • 2 OpenStreetMap

    We use a map section from OpenStreetMap (https://www.openstreetmap.de) on our website to show you how to get to our company and to make it easier for you to plan your journey. This is an open source mapping tool.

    In order for the map to be displayed, your IP address will be forwarded to OpenStreetMap. You can see how OpenStreetMap stores your data in the privacy policy of OpenStreetMap https://wiki.openstreetmap.org/wiki/DE:Datenschutz and https://wiki.openstreetmap.org/wiki/DE:Legal_FAQ.

  • 3 Microsoft Teams

    We use the Microsoft Teams tool to hold online meetings. Microsoft Teams is a service from Microsoft Corporation: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, (https://teams.microsoft.com/).

    Note the data protection regulations of Microsoft Corporation: https://privacy.microsoft.com/de-de/privacystatement.

    We would like to point out that in the USA there is no comparable level of data protection within the meaning of the GDPR. It is possible that in individual cases, government agencies access personal data without a data subject knowing about it. Furthermore, it is expected that it will not be possible to enforce your rights under the GDPR in the USA.

    The participant consents to the aforementioned processing of his or her personal data by joining the online meeting.

  • 4 Cookies

    Cookies are small files that are stored on your PC. These cookies enable our server to recognise your computer and make it easier for you to navigate and use our website. A distinction is made between cookies that are absolutely necessary for the technical functions of the website and those cookies that are not absolutely necessary for the technical function of the website.
    
    We use cookies on our website. Some of them are essential for the operation of the site, while others help us to improve this website and the user experience (tracking cookies) or to integrate external content from Youtube or Google Maps. You can decide for yourself whether you want to allow the cookies. Please note that if you refuse, you may no longer be able to use all the functionalities of the site.

  • Cookies are stored on the user’s computer and are transmitted to our site from there. As a user, you therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the setting in your Internet browser. You can delete cookies that have already been saved at any time. This can also be done automatically.

  • Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain in the memory of your device until you delete them. We collect all unnecessary cookies solely on the basis of your consent, which you can give via the cookie banner and revoke at any time.

    The following cookies are currently used on the website:

    Necessary:

    • RequestVerificationToken

      This cookie is used for security.

    • CookieCheck

      This cookie saves your settings on the website, e.g. that the cookie dialogue has been displayed.

    • CookieAccept

      This cookie stores the settings, e.g. which cookie setting was accepted.

    • functionalCookieAccepted

      Indicates whether the user has allowed preferences. This cookie then controls whether the language selection is allowed to work or not

    After logging in, the following necessary cookies are also used:

    • Duvenbeck Session Cookie

      After logging in, this cookie is for session handlers so that the users' sessions can be found on the different servers.

    • DuvenbeckCookieV2

      After logging in, the user can be identified by this cookie for our server.

    Preference:

    • language

      Is only set after a language has been explicitly selected

    Statistics:

    • Currently no cookies are active

    Marketing:

    • OpenStreetMap

      This cookie is necessary for the display of the map section.

  • 5 Social media

    We also advertise sites on the social media listed below on our website. The integration takes place via a linked graphic of the respective social media. The use of these linked graphics prevents an automatic connection to the respective server of the social media from being established when you visit our website. The user is only forwarded to the service of the respective social media by clicking on the corresponding graphic.

    Our website uses the following links for the social media pages:

    LinkedIn:          LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2,

    Ireland

    Instagram:        Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour

    Dublin 2 Ireland

    Facebook:       Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour

    Dublin 2 Ireland

    After the user has been forwarded, information about the user is recorded by the respective network. It cannot be ruled out that the data will be processed in a third country that does not have an adequate level of data protection within the meaning of the GDPR.

    Initially, these are data such as: IP address, date, time and the page visited. If the user is logged into their user account of the respective social media during this time, the network operator can, if necessary, assign the information collected from the specific visit of the user to the personal account of the user. If the user wants to prevent the information collected from being directly assigned to his or her user account, he or she must log out before clicking on the graphic.

    Duvenbeck has no influence whatsoever on data transmission and processing when you visit social media pages.

    5.1    LinkedIn

    We run a company page on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

    LinkedIn is solely responsible for the processing of personal data when you visit our LinkedIn‐page. Details on how they handle your personal data can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

    5.2    Instagram

    We run a company page on Instagram. This platform is offered by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.

    Instagram alone is responsible for the processing of personal data when you visit our Instagram page. You can find more information on this in Instagram’s privacy policy: https://instagram.com/about/legal/privacy.

    5.3    Facebook

    When you visit our Facebook page, certain information about you is processed. The sole controller for the processing of your personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.

    Further information on the processing of personal data by Facebook can be found at: https://www.facebook.com/privacy.

    5.4    Xing

    We run a company page on Xing. Xing is a service from New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany.

    All further information regarding data protection from Xing can be found at: https://privacy.xing.com/de/datenschutzerklaerung.

    5.5    YouTube

    We use YouTube to present Duvenbeck. This is a service operated by Google. The operator of the site is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

    You can find further information about handling user data in the YouTube privacy policy at: https://www.google.de/intl/de/policies/privacy.

• Changes to the privacy policy

Revision of the privacy policy: 23.09.2021

Version 2.1 (1. Modification)