1 Introduction and Contact Details of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The data controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Diekmann Consulting UG (limited liability), Torstraße 105-107, 10119 Berlin, Germany, Email: joern@rewards.consulting. The data controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2 Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called „server log files“). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
– Our visited website
– Date and time of access
– Amount of data sent in bytes
– Source/reference from which you accessed the page
– Browser used
– Operating system used
– IP address used (possibly in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the string „https://“ and the lock symbol in your browser line.
3 Hosting & Content Delivery Network
For the hosting of our website and the presentation of the page content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our page visitors and prohibits unauthorized disclosure to third parties.
4 Contacting Us
4.1 Calendly
For the provision of an online appointment booking function, we use the services of the following provider:
Calendly,
LLC, BB&T Tower,
271 17th St NW,
Atlanta, GA 30363,
USA
For the purpose of scheduling appointments, first and last name as well as email address (and possibly the telephone number, if a telephone appointment is desired) are collected in accordance with Art. 6 para. 1 lit. b GDPR and transmitted to the provider in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer management and efficient appointment management, and stored there for appointment organization.
After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our page visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
4.2 In the context of contacting us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of using a contact form is evident from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration.
The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal storage obligations to the contrary.
5 Rights of the Data Subject
5.1 The applicable data protection law grants you the following rights of data subjects (rights of access and intervention) vis-à-vis the data controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective exercise requirements:
– Right of access according to Art. 15 GDPR;
– Right to rectification according to Art. 16 GDPR;
– Right to erasure according to Art. 17 GDPR;
– Right to restriction of processing according to Art. 18 GDPR;
– Right to notification according to Art. 19 GDPR;
– Right to data portability according to Art. 20 GDPR;
– Right to withdraw given consents according to Art. 7 para. 3 GDPR;
– Right to lodge a complaint according to Art. 77 GDPR.
5.2 Right to object
If we process your personal data on the basis of our overriding legitimate interest within the scope of a balancing of interests, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.
If you exercise your right to object, we will stop processing the data concerned. However, further processing remains reserved if we can prove compelling legitimate reasons for the processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.
If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.
6 Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective legal retention period (e.g., commercial and tax retention periods).
When processing personal data on the basis of an express consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If legal retention periods exist for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no longer a legitimate interest on our part in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The data controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Diekmann Consulting UG (limited liability), Torstraße 105-107, 10119 Berlin, Germany, Email: joern@rewards.consulting. The data controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2 Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called „server log files“). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
– Our visited website
– Date and time of access
– Amount of data sent in bytes
– Source/reference from which you accessed the page
– Browser used
– Operating system used
– IP address used (possibly in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the string „https://“ and the lock symbol in your browser line.
3 Hosting & Content Delivery Network
For the hosting of our website and the presentation of the page content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our page visitors and prohibits unauthorized disclosure to third parties.
4 Contacting Us
4.1 Calendly
For the provision of an online appointment booking function, we use the services of the following provider:
Calendly,
LLC, BB&T Tower,
271 17th St NW,
Atlanta, GA 30363,
USA
For the purpose of scheduling appointments, first and last name as well as email address (and possibly the telephone number, if a telephone appointment is desired) are collected in accordance with Art. 6 para. 1 lit. b GDPR and transmitted to the provider in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer management and efficient appointment management, and stored there for appointment organization.
After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our page visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
4.2 In the context of contacting us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of using a contact form is evident from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration.
The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal storage obligations to the contrary.
5 Rights of the Data Subject
5.1 The applicable data protection law grants you the following rights of data subjects (rights of access and intervention) vis-à-vis the data controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective exercise requirements:
– Right of access according to Art. 15 GDPR;
– Right to rectification according to Art. 16 GDPR;
– Right to erasure according to Art. 17 GDPR;
– Right to restriction of processing according to Art. 18 GDPR;
– Right to notification according to Art. 19 GDPR;
– Right to data portability according to Art. 20 GDPR;
– Right to withdraw given consents according to Art. 7 para. 3 GDPR;
– Right to lodge a complaint according to Art. 77 GDPR.
5.2 Right to object
If we process your personal data on the basis of our overriding legitimate interest within the scope of a balancing of interests, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.
If you exercise your right to object, we will stop processing the data concerned. However, further processing remains reserved if we can prove compelling legitimate reasons for the processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.
If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.
6 Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective legal retention period (e.g., commercial and tax retention periods).
When processing personal data on the basis of an express consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If legal retention periods exist for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no longer a legitimate interest on our part in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.