Data privacy statement of io‑consultants GmbH & Co. KG

1. Standard provisions pursuant to Art. 13 GDPR

This data privacy statement serves to inform you about the type, scope, purposes and legal basis of the collection and processing of your personal data when using our website, and the rights to which you are entitled under the General Data Protection Regulation (GDPR).

All personal data collected during your visit to our website will be processed in accordance with the legal data protection provisions and in compliance with the protection-related objectives of information security.

The party responsible for the processing of your data related to your visit to our website, pursuant to Art. 4 (7) GDPR, is:

io-consultants GmbH & Co. KG
STADTTOR Speyerer Str. 14
69115 Heidelberg

If you have any questions, recommendations or complaints regarding the protection of your data, please contact our data protection officer

Secorvo Security Consulting GmbH
Ettlinger Strasse 12-14
76137 Karlsruhe

This privacy statement applies to all pages of the following domain:

Whenever you use this website, your personal data may also be processed outside the European Union. Your personal data will be forwarded to the following service providers:

  1. Shipment of requested articles (e.g. brochures, etc.): Postal services/parcel services providers
  2. Mailings: Baier Digitaldruck GmbH, Tullastraße 17, D-69126 Heidelberg
  3. Mailings: wob AG, Werner-Heisenberg-Straße 6a-10, D-68519 Viernheim


Your rights
You may request information about the private data we have stored about you at any time using the above-mentioned contact data.

You also have the right to request the correction of incorrect personal data and/or, if legally applicable, the correction, limitation of use or deletion of your data.

You are entitled to file an informal objection against the use of your personal data for the purposes of direct advertising, market research or demand-oriented design of telemedia at any time.

You may also object to the use of web analysis tools, tracking services and, in general, the collection of your usage data under the respective links of the services in this Data Privacy Statement.

Furthermore, you are entitled to informally revoke any consent given on this page by notifying the data protection officer at the above-mentioned contact details. The processing of your private data, which has been carried out on the basis of your previously given consent, remains legally unaffected hereby until revocation of such consent.

Upon request, we will send you the data provided to us for processing purposes in a common, structured, and machine-readable format, which you then can use for further processing. Please send your request to the contact address given above.

You may contact our data protection officer at the contact details given above at any time if you have any complaints about the protection of your private data. You may also send your complaint to the competent data protection supervisory authority.

2. Security of transmission

This website uses the so-called TLS protocol (Transport Layer Security) in conjunction with at least 128-bit encryption for the transfer of personal data in order to protect the data against accidental or intentional manipulation, loss, destruction or access by unauthorised parties. These security measures are continuously adapted in line with technological developments. You can recognise the encrypted data transfer by the closed key or lock symbol in the upper status bar of your browser.

3. Collection of usage data when visiting this website

When visiting a website, a series of user data is collected, which can theoretically be referred back to a specific user via the visitor’s IP address, the specific user settings, cookies or other identification options. This data is used for technical purposes to (I) display the site, (ii) optimise the site through statistical recording of user behaviour, and (iii) reload previously displayed information or entries after the user has closed a page. Information about which usage data is collected and which other services are used on this site is provided below.

In the event of third-party services being used on this site, any objection or revocation as described in Chapter 6 will be governed by the provisions stipulated for the individual services.

3.1 Transmission of browser data and settings

In the event of a purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. Whenever you view our website, we collect the following data, which is technically necessary for us to display the website and to ensure its stability and safety.

  • IP address
  • Date and time of the request
  • Content of the request (specific page)
  • Access status / https status code
  • Web page on which the request was made
  • Browser used
  • Operating system and its interface
  • Language and version of the browser software

The legal basis for this type of data processing is Article 6.1(f) of the GDPR (legitimate interest).

4. Own services (interactions)

If you use the following services on our website, we will store and process the personal data that you provided to us for the respective purposes - e.g. for registration, survey or contract execution.

Contact form
To contact us, please use the contact form on In order to process your request, your name, title (optional), a valid e-mail address and the content of your message will be collected. The data you enter is transmitted via a secure TLS connection.

The information you provided will be forwarded to the department responsible for your request and will only be used to process this request. Your data will be deleted immediately after processing unless storage is required for reasons of verifiability, customer service or legal retention periods, or unless you have provided us with a respective declaration of consent.

If your inquiry refers to other locations of our company, your data will be forwarded to these locations.

You may informally object to the storage of your personal data by using the above-mentioned contact details. In this case, we will no longer process your data unless there are reasons for further storage or processing to pursue legal claims which supersede your right of objection.

Integrated job application portal
If you are interested in applying for a job at our company, we offer you the possibility to do so via the Concludis online job application tool. Concludis is responsible for collecting the usage data for this portal. Your submitted application data will be recorded by Concludis on our behalf and only made available to selected employees. The data you enter is transmitted via a secure TLS connection.

Data that is mandatory for the acceptance of your application is marked with an asterisk.
The documents that you have submitted will be completely deleted no later than three months after completion of the application process unless an employment contract has been concluded with you.

If there is an interest in keeping your documents (e.g. for future consideration for other job offers), we will request your consent beforehand. If you agree, your data will be stored for a further three months.

If you would like to receive the newsletter offered on this website, a valid e-mail address is required. We will only use the data provided in your registration to send you the desired newsletter at regular intervals. In order to avoid newsletter subscriptions by unauthorised third parties, the so-called double opt-in procedure is used, i.e. the newsletter is only sent to you upon confirmation of the subscription request via a link sent to your e-mail address.
Each time you receive a newsletter, you will be given the opportunity to change your personal details or to unsubscribe with a mouse click. Your data will never be passed on to third parties. If our newsletter contains advertisements from affiliated companies/third parties, these will be sent to you exclusively through us.

White paper
Visitors to our website have the opportunity to request white papers. This requires filling out a contact form providing your title, surname, company and e-mail address. After mailing the contact form, the white paper will be sent to the e-mail address provided in the request.

Visitors of our website are offered the opportunity to register for events. To register for an event, you must fill out a contact form including the form of address applicable to you, your surname, company and e-mail address. After submitting the contact form, you will receive a confirmation of registration.

Automated individual decision-making, including profiling
As a company concerned with the protection of your personal data, we do not carry out any profiling; an automated processing of your data for analysing or predicting aspects relating e.g. to health or personal preferences does not take place. Therefore, Art. 22 of the GDPR on automated individual decision-making, including profiling, does not apply.

5. External links and integrated services

If this website contains links that refer to sites not operated by us, the contact person (controller) for these websites is the respective provider. In such cases, the use and processing of your personal data is subject to the data privacy statement of the respective website provider. Our website refers, in particular, to the following third party links:

  1. Concludis GmbH
  2. Userlike UG

6. Third party services

6.1 Functionality and types of cookies

Cookies are small text files that are stored on your computer and saved by your browser. They contain various information, e.g. about the duration of your website visit or the user information provided. They may originate either from us as the website provider (so-called first-party cookies) or, in the event of third-party cooperations, from any such third party (so-called third-party cookies), and may require different storage periods (the duration of your website visit, up to several weeks and years).

You can set your browser to notify you as soon as cookies are to be uploaded. You can also delete any cookies on your computer's hard drive at any time. You can prevent cookies from being stored in your browser by restricting or deactivating the storage and reading of cookies via the menu bar "Tools > Internet Options > Privacy" (Internet Explorer) or "Settings > Privacy (Firefox). In this case, however, the full functionality of the website may no longer be available to you.

First-Party Cookies
Our website uses so-called "session cookies". These cookies serve to save data relevant to your website visit or to recognise your computer during your visit (e.g. for easier password entry). They guarantee the full technical functionality of the website. The legal basis for this type of processing is Article 6.1(f) of the GDPR.

Third-Party Cookies
For links to third-party websites, information about the use of cookies and the extent of the data collected by the respective third-party service providers is provided in the following paragraphs.

6.2 Google Fonts

We use web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google").

Google is certified under the "Privacy Shield" Agreement, which was designed to ensure compliance with the data protection level applicable in the EU.

When you call up a page, your browser loads the required web fonts into your browser to display texts and fonts correctly. To do this, your browser connects to Google, and Google learns that our websites have been accessed via your IP address.

The use of Google Fonts facilitates a uniform and appealing presentation of our website. If your browser does not support Google Fonts or Web Fonts, your device will use a default font.

For more information about Google Fonts and Google's privacy policy, please visit the following websites:

The legal basis for the processing of personal data using Google Fonts is Art. 6.1 (f) of the GDPR (legitimate interest).

6.3 Tracking services: range measurement / re-targeting / usage & web analyses

We use Google Analytics for tracking purposes to facilitate a user-centred design of our website by measuring reach, analysing general usage behaviour of visitors to the website, and optimising economic operation.

6.3.1 Usage & web analysis Google Analytics

Google Analytics, a web analysis service of Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is used for the purposes of demand-oriented website design, reach measurement, analysis of general user behaviour on the website, and optimisation of website efficiency. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection laws.

Google Analytics uses so-called "cookies" to enable the analysis of your use of the website. The information generated by the cookie about your use of the website is usually transmitted to and stored on servers operated by Google in the USA. We have activated IP anonymisation on this website. This activates the truncation of your IP address by Google within member states of the European Union and all other countries party to the Agreement on the European Economic Area prior to use and further transmission. Under special circumstances only, the full IP address will be transmitted to a server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website and internet usage for the website operator.

Further information on how Google uses data, and options for settings and objection purposes can be found on the following Google websites:

Google will not associate your IP address, which has been transmitted by your browser within the scope of Google Analytics, with any other data held by Google. You may object to the use of cookies by selecting the appropriate settings on your browser, but please note that you may consequently not be able to use all functions of this website.

You may also prevent the collection and transmission of the data, which is created by the cookies and reflects your use of the website (including your IP address), to Google as well as the processing of such data by Google, by downloading and installing the browser plug-in available at the following link:

The Google marketing services we use also include the online advertising program "Google Ads". When using Google Ads, every Google Ads customer (i.e. site operators like us) receives a different "conversion cookie". These cookies cannot be tracked by the websites of Google Ads customers. We are therefore unable to evaluate the conversion cookie ourselves. The information collected with the help of this cookie is used to create so-called conversion statistics for our website. Conversion statistics are evaluation of previously defined actions that a user has carried out on the website. Google tells us the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies the user. We also use Google Analytics to evaluate data from Google Ads and the double-click cookie for statistical purposes. If you do not wish to use the Google Ads evaluation, you can deactivate the function via the Google Ads Preferences Manager. Google Maps

We use the Google Maps map service (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google") to show website users our location.
Google is certified under the Privacy Shield Agreement (, which was designed to ensure compliance with the data protection level applicable in the EU.

If you open the page where Google Maps is integrated, our website sends various information including your IP address to Google in the U.S., where it is stored on its servers. If you have a Google user account and are logged in when you visit our website, the information will be directly associated with your account. But even without a user account, Google will create a user profile about you. This happens regardless of whether Google provides a user account with which you have logged in or whether no user account exists.

The legal basis for this type of processing is Article 6.1.(f) et seq. of the GDPR. Our transmission of data to Google is based on our legitimate interest in offering you the map function of Google Maps on our website.

You can prevent the allocation of the data transmitted by us to your user account by logging out of Google before you visit our website. To stop the data transfer to Google completely, you have to switch off the JavaScript application in your browser. The map display can then no longer be used.

More information about Google and the use of Google Maps can be found here:
Google Terms of Use:

Terms of use for Google Maps:
Google's privacy policy (Google Privacy Policy):

Please contact us 

Bernadette Abel Business Unit Manager General Administration Phone: +49 (0) 62 21 / 379-294