Data privacy statement of io‑consultants GmbH & Co. KG

1. Standard provisions pursuant to Art. 13 GDPR

This data privacy statement serves to inform you about the type, scope, purposes and legal basis of the collection and processing of your personal data when using our website, and the rights to which you are entitled under the General Data Protection Regulation (GDPR).

All personal data collected during your visit to our website will be processed in accordance with the legal data protection provisions and in compliance with the protection-related objectives of information security.

The party responsible for the processing of your data related to your visit to our website, pursuant to Art. 4 (7) GDPR, is:

io-consultants GmbH & Co. KG
STADTTOR Speyerer Str. 14
69115 Heidelberg
Germany

If you have any questions, recommendations or complaints regarding the protection of your data, please contact our data protection officer

Secorvo Security Consulting GmbH
Ettlinger Strasse 12-14
76137 Karlsruhe
dataprotection@io-consultants.com

This privacy statement applies to all pages of the following domain: https://en.io-consultants.com/

Any personal data forwarded to a non-member state will be subject to the measures in Article 44 et seq. GDPR to ensure an appropriate level of data protection. If the recipient’s country of establishment is not subject to an adequacy decision nor the EU-US Privacy Shield Agreement, standard contractual clauses must be stipulated. Further information is available at dataprotection@io-consultants.com.

Your rights
You may request information about the private data we have stored about you at any time using the above-mentioned contact data.

You also have the right to request the correction of incorrect personal data and/or, if legally applicable, the correction, limitation of use or deletion of your data.

You are entitled to file an informal objection against the use of your personal data for the purposes of direct advertising, market research or demand-oriented design of telemedia at any time.

You may also object to the use of web analysis tools, tracking services and, in general, the collection of your usage data under the respective links of the services in this Data Privacy Statement.

Furthermore, you are entitled to informally revoke any consent given on this page by notifying the data protection officer at the above-mentioned contact details. The processing of your private data, which has been carried out on the basis of your previously given consent, remains legally unaffected hereby until revocation of such consent.

Upon request, we will send you the data provided to us for processing purposes in a common, structured, and machine-readable format, which you then can use for further processing. Please send your request to the contact address given above.

You may contact our data protection officer at the contact details given above at any time if you have any complaints about the protection of your private data. You may also send your complaint to the competent data protection supervisory authority.

2. Security of transmission

This website uses the so-called TLS protocol (Transport Layer Security) in conjunction with at least 128-bit encryption for the transfer of personal data in order to protect the data against accidental or intentional manipulation, loss, destruction or access by unauthorised parties. These security measures are continuously adapted in line with technological developments. You can recognise the encrypted data transfer by the closed key or lock symbol in the upper status bar of your browser.

3. Collection of usage data when visiting this website

When visiting a website, a series of user data is collected, which can theoretically be referred back to a specific user via the visitor’s IP address, the specific user settings, cookies or other identification options. This data is used for technical purposes to (I) display the site, (ii) optimise the site through statistical recording of user behaviour, and (iii) reload previously displayed information or entries after the user has closed a page. Information about which usage data is collected and which other services are used on this site is provided below.

If third-party services are used on this site, any objection or revocation will be subject to the provisions stipulated for the individual services of such third party.

We use Google AJAX Search API on our website. This tool helps us optimize the loading speed. It calls program libraries from Google servers and uses the Google CDN (content delivery network). This type of data processing is subject to Article 6.1.(f) et seq. GDPR. If you have already used jQuery on a different page of Google CDN, your browser can reaccess a copy thereof in your cache and does not need to download it again. If your browser has not stored a copy in your cache, the data will be transferred from your browser to Google. Further information on data processing by Google is available in Google’s data privacy policy at https://policies.google.com/privacy.

3.1 Transmission of browser data and settings

In the event of a purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. Whenever you view our website, we collect the following data, which is technically necessary for us to display the website and to ensure its stability and safety.

  • IP address
  • Date and time of the request
  • Content of the request (specific page)
  • Access status / https status code
  • Web page on which the request was made
  • Browser used
  • Operating system and its interface
  • Language and version of the browser software

The legal basis for this type of data processing is Article 6.1(f) of the GDPR (legitimate interest).

4. Own services (interactions)

If you use the following services on our website, we will store and process the personal data that you provided to us for the respective purposes - e.g. for registration, survey or contract execution.

White Paper
Visitors to our website are offered the opportunity to order white papers. To order a white paper, you must fill out a contact form giving your title (if and as applicable), last name, company and e-mail address. After submitting the contact form, the white paper will be sent to the given e-mail address. The data processing for mailing of white papers is subject to Art. 6.1(b) GDPR.

Events
Visitors of our website are offered the opportunity to register for events. To register for an event, you must fill out a contact form giving your title (if and as applicable), last name, company and e-mail address. After submitting the contact form, you will receive a confirmation of registration. The data processing for event registration is subject to Art. 6.1(b) GDPR.

Automated decision-making, including profiling
As a company concerned with the protection of your personal data, we do not carry out any profiling or automated processing of your data for analyzing or predicting aspects relating e.g. to health or personal preferences. Therefore, Art. 22 GDPR on automated individual decision-making, including profiling, does not apply.

5. External links and integrated services

Job application portal
If you are interested in applying for a job at our company, we offer you the possibility to do so via the Concludis online job application tool. Concludis is responsible for collecting the usage data relating to this portal. Concludis will record your application data on our behalf and forward it to selected employees of io-consultants only. The data you enter is transmitted via a secure TLS connection.

Data that is mandatory for the acceptance of your application is marked with an asterisk.
The documents that you have submitted will be completely deleted no later than three months after completion of the application process unless an employment contract has been concluded with you.

If we have an interest in keeping your documents (e.g. for future consideration for other job offers), we will request your consent beforehand. If you agree, your data will be stored for a further three months.
This type of data processing is subject to Article 6.1.(f) et seq. GDPR.

6. Social Media channels

io-consultants GmbH & Co. KG is active on various social media channels. It is our goal to strengthen our presence in the respective areas, e.g. for hiring purposes, reputation management, customer retention, etc.

Except for our page on Facebook (please refer to our privacy statement for our Facebook page), we do not have any control of the data collected and the data processing procedures implemented by any such third parties, nor do we have any knowledge regarding the extent of such data collection, the purpose of processing, or the storage periods. Furthermore, we do not have any information about the deletion procedures for the collected data implemented by such third parties.

io-consultants GmbH & Co. KG is only responsible for personal data that you send directly to us when using such social media platforms.

6.1 Social media channels used by io-consultants GmbH & Co. KG

Facebook (see 6.2)

LinkedIn
LinkedIn is a platform that connects professionals and executives worldwide. Registered users can interact with each other to increase business and career opportunities. Our website offers you a direct link to our LinkedIn profile. This link is not subject to consent under Art. 6.1(a) GDPR.

The responsible party for this external link is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Further information is available in their privacy policy at https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/l/dpa.

XING
XING is a social network that offers the opportunity to create private profiles as well as company profiles and to publish corporate information (e.g. description of services, contact details, photos). XING users have access to this information. In addition, users can write their own posts and share content. The functions are used at the sole responsibility of the user.

Our website offers you a direct link to our XING profile. This link is not subject to consent under Art. 6.1(a) GDPR.
The responsible party for this external link is New York SE, Dammtorstraße 30, 20354 Hamburg, Germany. Further information is available in the privacy policy of XING at https://privacy.xing.com/de/datenschutzerklaerung.

XING Talent Manager
For hiring purposes we use XING Talent Manager of New York SE, Dammtorstraße 30, 20354 Hamburg, Germany. The responsible party for this tool is New York SE, Dammtorstraße 30, 20354 Hamburg, Germany. The data processing in connection therewith is subject to Article 6.1 (f) et seq. GDPR.

Further privacy-related information regarding XING TalentManager and XING is available at
https://www.xing.com/app/user?op=tandc&what=dp_xtm, https://xing-e-recruiting.my.salesforce.com/sfc/p/#b0000000JYve/a/0Y000000mGEd/va7eIcJITixTMQeGAPDyK1_3tRqgb0ysR88Z13pXkpE and https://privacy.xing.com/de/datenschutzerklaerung.

Twitter
Twitter International Company (hereinafter referred to as Twitter) offers so called microblogging services where registered users can post short messages. The individual messages are called "tweets". io-consultants GmbH & Co. KG has a Twitter account for the purpose of publishing general corporate information, job advertisements, event invitations, etc.

Our website offers you a direct link to our Twitter page. This link is not subject to consent under Art. 6.1 (a) GDPR.

The responsible party for this external link is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Further information is available at  https://twitter.com/de/privacy.

YouTube
io-consultants GmbH & Co. Kg has a YouTube account at https://www.youtube.com/user/ioconsultants?hl=de&gl=DE. The responsible party is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose and scope of data collection, further processing and usage of data by social networks and further information regarding your respective privacy rights and possible settings to protect your data are available at https://policies.google.com/privacy and https://www.youtube.com/t/terms respectively.

kununu
kununu (kununu GmbH, Neutorgasse 4-8, Top 3.02, 1010 Vienna, Austria) is an employer rating platform which offers (i) its users various services as a so-called feedback platform (employer ratings by current and former employees), and (ii) employers the opportunity to present their company brand.

Operator of the kununu website and controller in the sense of the applicable data protection regulations is New York SE, Dammtorstraße 30, 20354 Hamburg, Germany. Further information is available in their privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.

6.2 Privacy notice for io-consultants’ Facebook page

io-consultants GmbH & Co. KG, STADTTOR Speyerer Straße 14, 69115 Heidelberg, Germany, offers  a so-called fan page on the social media platform Facebook, to be found under https://de-de.facebook.com/ioconsultants/.
When operating the Facebook fan page, io consultants GmbH & Co. KG uses the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Facebook Ireland Ltd. and io consultants GmbH & Co. KG are therefore jointly responsible for the processing of personal data when using this fan page in accordance with Article 26 of the General Data Protection Regulation (GDPR) (see ECJ, C 210/16).
This Data Privacy Statement informs about the data use for which io consultants GmbH & Co. KG is responsible and your data protection rights when using such fan page.
The responsibility for the data processed when visiting our Facebook fan page is governed by an agreement with Facebook, which can be viewed at: https://www.facebook.com/legal/terms/page_controller_addendum. Facebook Ireland assumes full responsibility under such agreement for any processing of personal data that is not the responsibility of io-consultants as listed below. Please note that you are using this Facebook page and its features based on your user agreement with Facebook. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).
When you visit our Facebook fan page, Facebook collects your IP address and other information available on your PC in the form of cookies. This information is used to provide us, the Facebook fan page operator, with statistical information about the use of our Facebook page. Further information please refer to https://www.facebook.com/help/pages/insights.
The data collected about you in this context will be processed by Facebook Ireland Ltd., and may also be transferred to countries outside the European Union. The type of information received and how it is used is described in general terms by Facebook in its Data Use guidelines. You will also find information about how to contact Facebook and advertisement setting options there. Facebook’s data use guidelines can be found here: https://www.facebook.com/about/privacy. Facebook’s complete data use policies can be found here: https://www.facebook.com/full_data_use_policy.
According to Facebook, when you access a Facebook page from a “German” IP address, the IP address assigned to your computer and transmitted to Facebook is anonymized and deleted after 90 days. Facebook also stores information about its users' devices (e.g. as part of the “registration notification” function). This may enable Facebook to assign IP addresses to individual users.
If you are currently logged on to Facebook as a user, a cookie with your Facebook identification is stored on your computer, which enables Facebook to track that you have visited this page and how you have used it. Facebook can record your visits to these websites and assign them to your Facebook profile via Facebook buttons integrated in websites. This information can be used to tailor content or advertising to you. The legal basis for this type of data processing by io consultants GmbH & Co. KG is the legitimate interest to check and optimize the effectiveness and use of the fan page, and to use the fan page and Facebook services to advertise its own offers (Article 6.1 (f) of the GDPR).
If you want to avoid the type of data processing described above, you should log off from Facebook or deactivate the “stay logged in” function, delete the cookies on your device, close your browser and reboot the device. This deletes Facebook information that immediately identifies you. It allows you to use our Facebook page without revealing your Facebook identifier. When you access interactive features of the page (such as ‘like’, comment, share, message), a Facebook login screen appears. Once you have logged in, Facebook will recognize you again as a specific user. More information about how to manage or delete existing information about you can be found here: https://www.facebook.com/about/privacy.

How io consultants GmbH & Co. KG uses data
As the provider of an information service, we collect and process the following data when you use this service:
Contact us via our Facebook fan page
The Data Privacy statement on our website – https://en.io-consultants.com/meta/privacy-statement – describes how we handle data from enquiries and contacts. The same rules on data use apply here. The legal basis for our processing of your personal data is Article 6.1.(f) of the GDPR. Our interest in data processing lies in responding to submitted enquiries, optimizing our website, and recommending our services to users.

Your rights
You may request information about the private data we have stored about you at any time using the contact data given above or by e-mailing us at: dataprotection@io consultants.com.
You also have the right to request the correction of incorrect personal data and/or, if legally applicable, the correction, limitation of use or deletion of your data.
You are entitled to file an informal objection against the use of your personal data for the purposes of direct advertising, market research or demand-oriented design of telemedia at any time.
You may contact our data protection officer at: dataprotection@io-consultants.com at any time if you have any complaints about the protection of your private data. You may also send your complaint to the competent data protection supervisory authority: https://www.baden-wuerttemberg.datenschutz.de/die-aufsichtsbehorden-der-lander/.

7. Third party services

7.1 Functionality and types of cookies

Cookies are small text files that are stored on your computer and saved by your browser. They contain various information, e.g. about the duration of your website visit or the user information provided. They may originate either from us as the website provider (so-called first-party cookies) or, in the event of third-party cooperations, from any such third party (so-called third-party cookies), and may require different storage periods (the duration of your website visit, up to several weeks and years).

You can set your browser to notify you as soon as cookies are to be uploaded. You can also delete any cookies on your computer's hard drive at any time. You can prevent cookies from being stored in your browser by restricting or deactivating the storage and reading of cookies via the menu bar "Tools > Internet Options > Privacy" (Internet Explorer) or "Settings > Privacy (Firefox). In this case, however, the full functionality of the website may no longer be available to you.

First-Party Cookies
Our website uses so-called "session cookies". These cookies serve to save data relevant to your website visit or to recognise your computer during your visit (e.g. for easier password entry). They guarantee the full technical functionality of the website. The legal basis for this type of processing is Article 6.1(f) of the GDPR.

Third-Party Cookies
For links to third-party websites, information about the use of cookies and the extent of the data collected by the respective third-party service providers is provided in the following paragraphs.

7.2 Google Fonts

We use web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google").

Google is certified under the "Privacy Shield" Agreement, which was designed to ensure compliance with the data protection level applicable in the EU.

When you call up a page, your browser loads the required web fonts into your browser to display texts and fonts correctly. To do this, your browser connects to Google, and Google learns that our websites have been accessed via your IP address.

The use of Google Fonts facilitates a uniform and appealing presentation of our website. If your browser does not support Google Fonts or Web Fonts, your device will use a default font.

For more information about Google Fonts and Google's privacy policy, please visit the following websites:

The legal basis for the processing of personal data using Google Fonts is Art. 6.1 (f) of the GDPR (legitimate interest).

7.3 Tracking and Analytics services

We use Google Analytics for tracking purposes to facilitate a user-centered design of our website by measuring reach, analyzing general usage of the website by its visitors, and optimizing economical operation.

Measuring reach
Reach measurement is used for market research and has the aim of determining the frequency of visits to websites that are at our disposal for advertising purposes. The results serve as a basis for decisions on the placement of ads and to provide you with personalized content tailored to your specific needs

7.3.1.1 Google Analytics

Google Analytics, a web analysis service of Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is used for the purposes of demand-oriented website design, reach measurement, analysis of general user behaviour on the website, and optimisation of website efficiency. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection laws.

Google Analytics uses so-called "cookies" to enable the analysis of your use of the website. The information generated by the cookie about your use of the website is usually transmitted to and stored on servers operated by Google in the USA. We have activated IP anonymisation on this website. This activates the truncation of your IP address by Google within member states of the European Union and all other countries party to the Agreement on the European Economic Area prior to use and further transmission. Under special circumstances only, the full IP address will be transmitted to a server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website and internet usage for the website operator.

Further information on how Google uses data, and options for settings and objection purposes can be found on the following Google websites:

Google will not associate your IP address, which has been transmitted by your browser within the scope of Google Analytics, with any other data held by Google. You may object to the use of cookies by selecting the appropriate settings on your browser, but please note that you may consequently not be able to use all functions of this website.

You may also prevent the collection and transmission of the data, which is created by the cookies and reflects your use of the website (including your IP address), to Google as well as the processing of such data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en

The Google marketing services we use also include the online advertising program "Google Ads". When using Google Ads, every Google Ads customer (i.e. site operators like us) receives a different "conversion cookie". These cookies cannot be tracked by the websites of Google Ads customers. We are therefore unable to evaluate the conversion cookie ourselves. The information collected with the help of this cookie is used to create so-called conversion statistics for our website. Conversion statistics are evaluation of previously defined actions that a user has carried out on the website. Google tells us the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies the user. We also use Google Analytics to evaluate data from Google Ads and the double-click cookie for statistical purposes. If you do not wish to use the Google Ads evaluation, you can deactivate the function via the Google Ads Preferences Manager.

7.3.1.2 Google Maps

We use the Google Maps map service (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google") to show website users our location.
Google is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/), which was designed to ensure compliance with the data protection level applicable in the EU.

If you open the page where Google Maps is integrated, our website sends various information including your IP address to Google in the U.S., where it is stored on its servers. If you have a Google user account and are logged in when you visit our website, the information will be directly associated with your account. But even without a user account, Google will create a user profile about you. This happens regardless of whether Google provides a user account with which you have logged in or whether no user account exists.

The legal basis for this type of processing is Article 6.1.(f) et seq. of the GDPR. Our transmission of data to Google is based on our legitimate interest in offering you the map function of Google Maps on our website.

You can prevent the allocation of the data transmitted by us to your user account by logging out of Google before you visit our website. To stop the data transfer to Google completely, you have to switch off the JavaScript application in your browser. The map display can then no longer be used.

More information about Google and the use of Google Maps can be found here:
 
Google Terms of Use:
https://policies.google.com/terms?hl=en&gl=en

Terms of use for Google Maps:
https://www.google.com/intl/en_US/help/terms_maps.html
 
Google's privacy policy (Google Privacy Policy):
https://policies.google.com/privacy?hl=en&gl=en

Please contact us 

Bernadette Abel Business Unit Manager General Administration Phone: +49 (0) 62 21 / 379-294