Data protection

Privacy policy of kobaltblau Management Consultants GmbH

We, kobaltblau Management Consultants GmbH (hereinafter referred to as „kobaltblau“), are convinced that you should have control over your data. We therefore take the protection of your personal data very seriously and comply with applicable data protection law, the EU General Data Protection Regulation (hereinafter referred to as „GDPR“) and the German Federal Data Protection Act (hereinafter referred to as „BDSG“).

1. Responsible Body

Controller within the meaning of the GDPR:

kobaltblau Management Consultants GmbH
St.-Martin-Str. 114
81669 Munich

info@kobaltblau.com

2. Data Protection Officer

For all questions relating to the processing of your personal data and the exercise of your rights under the GDPR, you can consult our data protection officer, who can be contacted at datenschutz@kobaltblau.com.

3. Legal Basis for Data Processing

Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service or consideration, the processing is based on Art. 6 para. 1 lit. a GDPR. 6 I lit. b GDPR.

The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. f GDPR. 6 I lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and their name, age, health insurance details or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR are based.

Ultimately, processing operations could be based on Art. 6 I lit. f GDPR are based. This legal basis is used for processing operations which are not covered by any of the aforementioned legal bases if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).

4. Cookies

The Internet pages of kobaltblau use cookies. Cookies are text files that are placed and stored on a computer system via an Internet browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.

Through the use of cookies, kobaltblau can provide the users of this website with more user-friendly services that would not be possible without setting cookies.

By means of a cookie, the information and offers on our website can be optimized for the benefit of the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is taken over by the website and the cookie stored on the user’s computer system. Another example is the cookie of a shopping cart in an online store. The online store remembers the items that a customer has placed in the virtual shopping cart via a cookie.

The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

The Internet pages of kobaltblau use cookies, text files that are placed and stored on a computer via the Internet browser. Cookies enable a unique identification of the Internet browser and the provision of user-friendly services.

5. Collection of General Data and Information

The website of kobaltblau captures a series of general data and information with each call-up to the website by a data subject or an automated system. These general data and information are stored in the server’s log files.

The following can be recorded:

  1. Browser types and versions used
  2. the operating system used by the accessing system
  3. the website from which an accessing system reaches our website (so-called referrer)
  4. the sub-websites that are accessed via an accessing system on our website
  5. the date and time of access to the website
  6. an Internet Protocol address (IP address)
  7. the Internet service provider of the accessing system and
  8. other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using these general data and information, kobaltblau does not draw any conclusions about the data subject. Rather, this information is required in order to

  1. deliver the content of our website correctly
  2. optimize the content of our website and the advertising for it
  3. ensure the long-term functionality of our information technology systems and the technology of our website, and
  4. provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack.

Therefore, kobaltblau analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

6. Tracking: Google Analytics

If you have given your consent, Google Analytics 4, a web analysis service of Google LLC, is used on this website. The responsible body for users in the EU/EEA and Switzerland is

Google Ireland Limited
Google Building Gordon House
4 Barrow St
Dublin
D04 E5W5
Ireland

Nature and purpose of processing

Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of „events“. Events can be:

  • Page views
  • First visit to the website
  • Start of the session
  • Websites visited
  • Your „click path“, interaction with the website
  • Scrolls (whenever a user scrolls to the end of the page (90%))
  • Clicks on external links
  • internal search queries
  • Interaction with videos
  • File downloads
  • Viewed / clicked ads
  • Language setting

Also recorded:

  • Your approximate location (region)
  • Date and time of the visit
  • Your IP address (in anonymized form)
  • technical information about your browser and the end devices you use (e.g.B. Language setting, screen resolution)
  • Your Internet provider
  • the referrer URL (via which website/advertising medium you came to this website)

Purposes of the processing

On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.

Receiver

Recipients of the data are/may be

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc.1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Third country transfer

The European Commission adopted its adequacy decision for the USA on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

Storage duration

The data sent by us and linked to cookies is automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. Data that has reached the end of its retention period is automatically deleted once a month.

Legal basis

The legal basis for this data processing is your consent in accordance with. Art.6 para.1 p.1 lit.a GDPR and Section 25 Para. 1 P.1 TTDSG.

Revocation

You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit the functionality of this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address). your IP address) to Google and the processing of this data by Google by clicking

  1. do not give your consent to the setting of the cookie or
  2. download and install the browser add-on to deactivate Google Analytics HERE

You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/en/ and at https://policies.google.com/?hl=en.

7. Jobs and Applications

7.1 Application via the „Personio“ tool

If you would like to apply for a job with us, you can enter your details in our applicant tool on our website and send us your application documents. For this purpose, we use the service provider PERSONIO with whom we have concluded an order processing agreement.

The responsible body is:

Personio SE & Co. KG
Seidlstraße 3
80335 Munich
Germany

Further information on data protection at Personio can be found here: https://www.personio.com/privacy-policy/

7.2 Application via e-mail

You can also send us your application via our contact e-mail address. As part of the application process, we store the data you provide.

The data provided by you will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. B. after your application has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

8. Advertising, Newsletter & Contact

8.1 Advertising via electronic communication (e-mail)

We use your e-mail addresses that we have received in connection with the conclusion of a contract, e.g.B. to inform you about our range of services, portfolio, industry reports and study results carried out by us, Art. 6 I 1 f) GDPR i. V. m. § 7 III UWG.

You can prohibit this advertising use at any time without incurring any costs other than transmission costs according to the basic rates:

  • By e-mail to datenschutz@kobaltblau.com
  • By clicking on the unsubscribe link at the end of the e-mail
  • In writing to kobaltblau Management Consultants GmbH, St.-Martin-Str. 114, 81669 Munich (please provide your e-mail address)

8.2 Making contact for business purposes

We may exchange information and documents by telephone and in writing, but also electronically by e-mail, for the purposes of contract fulfillment, contract implementation, contract maintenance and contract analysis (e.g.B. Contract correspondence).

The data stored by us will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for which the data was stored no longer applies (e.g. B. after the contract has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

8.3 Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after your request has been processed). B. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

9. Data Processing of Publicly Accessible Data

We process data from publicly accessible sources such asB. Social media. We use these for the purposes of direct advertising in connection with services offered by us on the basis of Art. 6 (1) sentence 1 letter f). You can object to this use of your personal data for advertising purposes at any time in accordance with Article 21 GDPR. You can send your objection by e-mail to datenschutz@kobaltblau.com.

10. Other Services from Third-Party Providers

kobaltblau offers on its website the possibility to follow the social media offers of kobaltblau via so-called „Follow buttons“. Online maps and videos are also provided by third-party providers. Below you will find explanations of the individual services.

10.1 YouTube

This website embeds videos from the YouTube website. The responsible body for users in the EU/EEA and Switzerland is

Google Ireland Limited
Google Building Gordon House
4 Barrow St
Dublin
D04 E5W5
Ireland

You can find YouTube’s privacy policy at https://policies.google.com/privacy.

When you visit one of our websites on which YouTube is integrated, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. Furthermore, YouTube may store various cookies on your end device or use comparable technologies to recognize you (e.g. B. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information will be a. is used to record video statistics, improve user-friendliness and prevent fraud attempts.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR represent. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG, insofar as the consent permits the storage of cookies or access to information in the user’s terminal device (e.g. B. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

10.2 Whistleblower protection – LegalTegrity

Our whistleblower protection system is operated by

LegalTegrity GmbH
Platz der Einheit 2
60327 Frankfurt
Germany

Your browser establishes a direct connection with the LegalTegrity servers as soon as you click the button. We have no influence on the data that is then collected by Legaltegrity. The purpose and scope of the data collection and the further processing and use of the data by LegalTegrity as well as your rights in this regard and setting options to protect your privacy can be found in LegalTegrity’s data protection information: https://legaltegrity.com/en/privacy-policy/

10.3 Kununu

Kununu is operated by

New Work SE
Am Strandkai 1
20457 Hamburg
Deutschland

Your browser establishes a direct connection with the Kununu servers as soon as you click the button. We have no influence on the data that is then collected by Kununu. The purpose and scope of the data collection and the further processing and use of the data by Kununu as well as your rights in this regard and setting options to protect your privacy can be found in Kununu’s data protection information: https://privacy.xing.com/de/datenschutzerklaerung

 

11. Rights of the Users

11.1 Information

You have the right to obtain information about your personal data processed by us and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, its recipients and authorized persons and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration.

11.2 Correction

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

11.3 Right to object due to special situation

Insofar as the processing of personal data concerning you is based on Art. 6 para. 1 (f) GDPR, you have the right to object to the processing of this data at any time on grounds relating to your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

11.4 Right to object due to direct advertising

You also have the right to object to the collection, processing and storage of your personal data for direct marketing purposes at any time.

11.5 Right of withdrawal

If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can contact us or our data protection officer at any time using the details above.

11.6 Right to erasure

You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You object to the processing pursuant to point 2 c) and there are no overriding legitimate grounds for the processing.
  • The personal data was processed unlawfully.
  • The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.

This does not apply if the processing is necessary:

  • For compliance with a legal obligation which requires processing by Union or Member State law to which we are subject.
  • For the assertion, exercise or defense of legal claims.

11.7 Right to restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
  • We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or
  • you have objected to processing pursuant to point 2 c) pending the verification whether our legitimate grounds override yours.

Where processing has been restricted in accordance with point 2 e), such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained a restriction of processing, we will inform you before the restriction is lifted.

11.8 Right of appeal

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Supervisory authority for the right to lodge a complaint:

Aufsichtsbehörde für Beschwerderecht
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach

Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-mail: poststelle@lda.bavaria.de

 

12. Changes to the Privacy Policy

We will adapt the privacy policy in accordance with the current legal situation or in the event of changes to the service and data processing. Please inform yourself regularly about the content of the privacy policy.

This privacy policy is valid as of February 2024.