The following describes how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR). The controller for the data processing activities described below is Deekeling Arndt Advisors in Communications GmbH (H/Advisors Deekeling Arndt), Toulouser Allee 25, 40211 Düsseldorf, Germany [email protected]. We undertake to protect your personal data and your privacy. Please therefore read these privacy notices carefully. H/Advisors Deekeling Arndt expressly supports fundamental privacy and data protection rights, as well as the observance of national and international privacy legislation.
How we process your personal data
H/Advisors Deekeling Arndt respects the rights of every individual to protection of their privacy and their personal data. In processing your personal data, H/Advisors Deekeling Arndt observes the following principles:
- We process your personal data in a fair, lawful and transparent manner;
- Your data is gathered for specified legal purposes, and it is not processed further in any way that is incompatible with these purposes;
- The personal data that is recorded is relevant to and does not exceed the purposes for which it is gathered and used. We can anonymise personal data if this is practicable and reasonable, depending on the nature of the data and the risks associated with the intended uses;
- We maintain your personal data and ensure that it is correct and, if necessary, that it is kept up to date. We will take appropriate steps to correct or delete inaccurate or incomplete data;
- We retain your personal data only for the time required for the purposes for which it was gathered and processed;
- We process your personal data in accordance with the legal rights of the individual;
- We apply appropriate security measures at a technical and organisational level to protect your data and prevent unauthorised access, illegal processing and the unauthorised or accidental loss or destruction of or damage to personal data;
- We process your personal data only when it is legal to do so on the basis of a legal principle, including the fact that you have provided unambiguous consent to such processing.
What data is gathered?
Personal data is all information that relates to an identified or identifiable natural person. Persons are deemed to be identifiable if they can be directly or indirectly identified, particularly through attribution to an identifier or to one or more specific elements that are the expression of their physical, physiological, psychological, economic, cultural or social identity.
In general, your personal data is gathered directly from you, but it may also be obtained from third parties. The types of personal data that we process include:
- Contact information, e.g. your first name, surname, username, gender, email address, postal address and telephone number;
- Your professional data, e.g. your educational and professional background in the case of job applicants, your job title, home company or other application data, e.g. if you are applying for a programme or event;
- Your login details: your IP address;
- Your browsing data and your express preferences: Data traffic and browsing history on websites of H/Advisors Deekeling Arndt, data from cookies and trackers on websites of H/Advisors Deekeling Arndt;
- Data associated with your participation in our events and/or programmes: e.g. biographical information, your qualifications, professional experience and your employer, your image, voice and likeness (in the case of a webinar, for example, or on photos and recordings that we make of the event, and on CCTV, if the event takes place in our premises), information from social media, medical information (e.g. allergies), which may be relevant to your participation, and the viewpoints or interests that you express during your participation.
In general, and with a few exceptions, the use of the websites of H/Advisors Deekeling Arndt and the pages of H/Advisors Deekeling Arndt in social networks is restricted to adults.
Purpose, legal basis and retention of data
Purposes |
Legal basis |
Retention period |
|---|---|---|
|
Customer relationship management |
|
Term of contract plus applicable periods of prescription |
| Partner and supplier relationship management |
|
Term of contract plus applicable periods of prescription |
| Application management |
|
4 months |
| Product and institutional communication management (website and social networks) |
|
Length of communication plus applicable periods of prescription |
| B2B marketing |
|
Length of marketing activities in question plus applicable periods of prescription |
| Administrative and legal formalities and the fight against fraud |
|
Length of applicable legal requirements |
| Subscription to newsletters |
|
Length of newsletter subscription |
| Management of cookies and other website trackers |
|
Periods set down in the website’s Cookie Policy |
| Management and follow-up of contact requests |
|
The time needed to process the enquiry |
| Reporting and securing access to websites |
|
6 months to no more than 1 year |
| Exercising your personal data rights |
|
2 or 6 years following application, depending on the right exercised |
| Participation in any of our events and/or programmes |
|
Duration of event/programme and associated marketing activities plus applicable periods of prescription |
In the event of legal disputes or procedures, with particular reference to court cases, which are instituted before the end of the periods specified above and require the retention of personal details, especially for asserting, exercising or defending rights, such personal data will be retained for the duration of the procedure and until all legal recourses have been exhausted.
Recipients
We transmit your data only to third parties (e.g. service firms, suppliers, auditors or companies affiliated with us) if we have an authority to transmit under privacy law.
We may also disclose your data to external service firms which assist us with data processing on a contract basis and are strictly bound by our instructions.
We use the following service firms:
Hosting service provider:
WP Engine, Inc.
504 Lavaca, Suite 1000
Austin
TX 78701
USA
Data transmission
Your personal data, gathered and processed for the purposes described above, may in specific cases be transmitted to companies outside the European Economic Area (EEA). This includes countries that have less strict privacy legislation in place compared to the EEA, or none at all.
If we ever transmit your information as described in the previous paragraph, we will take appropriate actions to ensure that suitable protective measures are in place to protect your personal data, and that your data is processed securely and in accordance with this privacy notice. In such cases we will rely on approved data transmission mechanisms (such as standard contract clauses) to ensure that your data is also appropriately protected in the recipient country.
Your privacy rights
You have particular rights with regard to your personal data, as specified below. We will process all requests to exercise your rights in accordance with the applicable law and all relevant legal exemptions.
Right to information
You have the right to demand confirmation about whether any personal data concerning you is being processed; where that is the case, you have the right to information about that personal data and other information listed in detail under Art. 15 GDPR.
Right to rectification
If your personal data is incorrect or incomplete, you may demand that the data be corrected.
Right to object
If your personal data is processed on the basis of Art. 6 (1) (1) f GDPR (data processing on grounds of legitimate interest), you have the right to object to its being processed at any time for reasons relating to your particular situation. If you lodge an objection, your personal data will no longer be processed unless we can show evidence of compelling, legitimate reasons for processing it which outweigh your interests, rights and freedoms, or if processing the information serves to assert, exercise or defend our rights or legal claims.
If you object to processing for the purposes of direct marketing, your personal data will no longer be used for these purposes.
Right to erasure
You may demand the erasure of your personal data if this is admissible under applicable legislation and regulations.
Right to restriction of processing
You have the right to demand a restriction on processing your personal data if this is admissible under applicable legislation and regulations.
Right to data portability
In certain cases, listed in detail in Art. 20 GDPR, you have the right to receive the relevant personal data in a structured, commonly used and machine-readable format and also the right to have the data transmitted to a third party.
Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority.
All requests to exercise the above rights and all questions on this privacy policy may be directed to the following address:
Contacting the data protection officer
datenschutz süd GmbH
Wörthstrasse 15
97082 Würzburg
Germany
Email: [email protected]
Privacy Policy Social Media
When you visit our social media sites, it may be necessary for us to process data relating to you. The following therefore describes our practice of dealing with your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR) and the rights you have under that Regulation.
Responsibility
We, Deekeling Arndt Advisors in Communications GmbH, operate a social media account on:
Our contact details are listed in our Imprint.
Besides us, the operator of the social media platform in each case is also responsible for processing your personal data. In places where we are able to have an influence and set parameters for data processing, we work within the boundaries of the options available to us for ensuring the operator of the social media platform complies with data protection laws. In this connection, please also take note of the privacy policies by the social media platform in question.
Data processing by us
The data you enter on our social media sites, such as usernames, comments, videos, photos, likes or public messages, will be published via the social media platform and not processed by us at any time for any other purposes. We reserve only the right to erase content where necessary. Where appropriate, we will share your content on our site, if this is a function of the social media platform, and also communicate via the social media platform with you.
If you send a query to us via a social media platform, depending on the content, we may refer you to other, secure communication channels that guarantee confidentiality. You always have the option, for example, of sending your enquiries to us using the address or email address shown in our Imprint. The choice of the appropriate communication channel is your own responsibility.
The legal basis for processing your data is Art. 6 (1) (1) f GDPR. This data processing occurs in the legitimate interest of public relations work for our company and of being able to communicate with you.
If you wish to object to processing of specific data over which we are able to exercise an influence, please approach the contact identified in our Imprint.
Length of storage
We will delete your personal data if it is no longer needed for the processing purposes identified above and no legal archiving obligations stand in the way of their deletion.
Data processing as joint controllers
For some processing activities, we share controller status with the operator of the social media platform in question. We have concluded the appropriate agreement under Art. 26 GDPR accordingly.
See the next section for the key elements of this joint controller status.
Statistics (insights)
The social media platform we use regularly compiles statistics (insights) based on usage data that contains information about your interaction with our social media page. We have no influence over, and cannot prevent, the creation and disclosure of these statistics.
We do not, however, make use of optional statistics from the social media platform.
We process this information (statistics) on the basis of Art. 6 (1) (1) f GDPR in the legitimate interest of validating dealings with our social media pages and improving our content in accordance with our target groups.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. Such web tracking may also occur irrespective of whether you are logged on or registered with the social media platform.
Please be aware that it is not out of the question for a social media platform provider to use your profile and user behaviour data in order to assess such things as your habits, or your personal relationships or preferences. We have no influence over the processing of your data by the social media platform provider, and therefore the use of the social media platform is your own responsibility.
For more information about data processing by the social media platform provider, configuration options to protect your privacy and other opportunities to object, and also the agreement as per Art. 26 GDPR if one exists and you have entered into it, please refer to the Privacy Policy of the relevant provider:
- LinkedIn: https://www.linkedin.com/static?key=privacy_policy and https://legal.linkedin.com/pages-joint-controller-addendum
See the Privacy Policy above for details on your privacy rights.