Data Privacy Statement

1. Data privacy at a glance

General information

The following statement gives you an brief overview of how we process your personal data when you (the "data subject") visit this website. "Personal data" means any information relating to an identified or identifiable natural person. Please reffer to our full data privacy statement below the overview for detailed information.


Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website occurs through the website operator ("controller"). Please find contact details in the imprint of this website.

How do we collect your data?

On the one hand your data is collected if you explicitly provide them, e.g. via a contact form or e-mail.

Other data is collected automatically or after your consent through our IT systems when visiting this website. This is predominantly technical data (e.g. used browser, timestamp of your visit). The collection of this data takes place automatically as soon as you visit the website.

What do we use your data for?

Part of your data is used to securely and efficiently serve this website. Other data may be used for fulfillment of contract or analysis of your usage of this website.

Which rights do you have regarding your personal data?

You have the right to obtain from the controller free information about personal data stored about your person at any time. This may include origin, recipient and purpose of the storage. Furthermore you can ask for a copy of this information, its rectification or deletion. If you gave consent to the processing of your data you may at any time revoke the consent for the future. Under certain circumstances you may ask for limitation of the processing of your data. Lastly you have the right to lodge a complaint to the supervisory authority.

For further information you can contact us any time via the address stated in this website's imprint.


2. Hosting and Content Delivery Networks (CDN)
External hosting

This website is hosted by an external service provider ("hoster"). Personal data collected and processed by this website is stored on the servers of the hoster. This may be ip addresses, contact requests, meta and communication data, contractual data, name, website requests and other data generated by a website.

The use of a hoster serves the purpose of fulfillment of contract towards our (potential) customers (Article 6(1) lit. b GDPR) and the secure and efficient provision of our online presence by a professional service provider (Article 6(1) lit. f GDPR).

Our hoster will process your data solely as required by contractual obligations and is obliged to follow our instructions regarding this data.


3. General information
Data protection

The operator of this website takes the security of your data seriously. We treat your personal data confidential and according to applicable data protection regulations as well as this data privacy stetement.

Various personal data will be collected when using this website. Personal data means any information relating to an identified or identifiable natural person. This data privacy statement details which data we collect and how we use it. Furthermore it details how this data is collected for which purposes.

We inform you that data transfer on the internet (e.g. the communication via e-mail) may exhibit security vulnerabilities. Therefore complete protection of data against access by adversaries can never be guaranteed.


Name and address of controller

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

Kuessner Consulting
Beblostraße 16
81677 Munich
Germany

Telephone: +49 (0) 1577 6366860
E-Mail: info@kuessner-consulting.de

Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.


Right of confirmation

Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.


Right of access

Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information:

Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.

If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller.


Right to rectification

Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.


Right to erasure (Right to be forgotten)

Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary:

If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by Kuessner Consulting, he or she may, at any time, contact any employee of the controller. An employee of Kuessner Consulting shall promptly ensure that the erasure request is complied with immediately.

Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of Kuessner Consulting will arrange the necessary measures in individual cases.


Right of restriction of processing

Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by Kuessner Consulting, he or she may at any time contact any employee of the controller. The employee of Kuessner Consulting will arrange the restriction of the processing.


Right to data portability

Each data subject shall have the right granted by the European legislator, to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used and machine-readable format. He or she shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.

In order to assert the right to data portability, the data subject may at any time contact any employee of Kuessner Consulting.


Right to object

Each data subject shall have the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.

Kuessner Consulting shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

If Kuessner Consulting processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Kuessner Consulting to the processing for direct marketing purposes, Kuessner Consulting will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by Kuessner Consulting for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

In order to exercise the right to object, the data subject may contact any employee of Kuessner Consulting. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.


Automated individual decision-making, including profiling

Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision (1) is not is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is not based on the data subject's explicit consent.

Kuessner Consulting does not cunduct any automated individual decision-making.


Right to withdraw data protection consent

Each data subject shall have the right granted by the European legislator to withdraw his or her consent to processing of his or her personal data at any time.

If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of Kuessner Consulting.


4. Data collection on this website
Server log files

The website of Kuessner Consulting collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be

When using these general data and information, Kuessner Consulting does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, Kuessner Consulting analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.


Requests via e-mail or telephone

When contacting us via e-mail or telephone, your request including all contained personal data (name, request) will be stored and processed for the purpose of processing your request. This data will not be forwarded to thrid parties without your consent.

Processing of this personal data is based on Article 6(1) lit. b GDPR, if your request is related to the fulfillment of a contract or pre-contractual measures. In all other cases processing of your personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders or your consent (Article 6(1) lit. a GDPR) if obtained.

The criteria used to determine the period of storage of personal data obtained from your request is the respective statutory retention period. After expiration of that period, after the withdrawal of your consent or your request to delete the obtained personal data, the corresponding data is deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract. We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner).


Cookies

This website does not set or use any cookies.

Sources: eRecht24German Association for Data Protection