Data Privacy

We process data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as “contractual partners”) within the context of contractual and comparable legal relationships and associated actions and communication with the contractual partners or pre-contractually, e.g. to answer inquiries.

We process this data to fulfil our contractual obligations. These include, in particular, the obligations to provide the agreed services, any updated obligations, and remedies in the event of warranty and other service disruptions. In addition, we process the data to protect our rights and for administrative tasks associated with these obligations and company organisation. Furthermore, we process the data based on our legitimate interests in proper and economical business management as well as security measures to protect our contractual partners and our business operations from misuse, endangerment of their data, secrets, information and rights (e.g. for the involvement of telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). Within the framework of applicable law, we only disclose the data of contractual partners to third parties to the extent that this is necessary for the purposes above or to fulfil legal obligations. Contractual partners will be informed about further forms of processing, e.g. for marketing purposes, within the scope of this privacy policy.

Which data are necessary for the purposes above? We inform the contracting partners before or in the context of the data collection, e.g. in online forms by special marking (e.g. colours) and/or symbols (e.g. asterisks or the like) or personally.

We delete the data after the expiry of statutory warranty and comparable obligations, i.e. in principle, after the expiry of 4 years, unless the data is stored in a customer account or must be kept for legal reasons of archiving. The statutory retention period for documents relevant under tax law as well as for commercial books, inventories, opening balance sheets, annual financial statements, the instructions required to understand these documents and other organisational documents and accounting records is ten years and for received commercial and business letters and reproductions of sent commercial and business letters six years. The period begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report was prepared, and the commercial or business letter was received or sent, or the accounting document was created. Furthermore, the record was made, or the other documents were created.

• Processed data types: Inventory data (for example, the full name, residential address, contact information, customer number, etc.); Payment Data (e.g., bank details, invoices, payment history); Contact data (e.g., postal and email addresses or phone numbers); Contract data (e.g., contract object, duration, customer category).
• Data subjects: Service recipients and clients; Prospective customers. Business and contractual partners.
• Purposes of processing: Provision of contractual services and fulfilment of contractual obligations; Communication; Office and organisational procedures; Organisational and Administrative Procedures. Business processes and management procedures.
• Retention and deletion: Deletion by the information provided in the “General Information on Data Retention and Deletion” section.
• Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR); Compliance with a legal obligation (Article 6 (1) (c) GDPR). Legitimate Interests (Article 6 (1) (f) GDPR).
  Further information on processing methods, procedures and services used.

Consulting: We process the data of our clients as well as prospects and other commissioning parties or contractual partners (collectively referred to as “clients”) to be able to provide our services to them. The processes that are part of and for consulting include contacting and communicating with clients, conducting needs and requirements analyses, planning and implementing consulting projects, documenting project progress and results, capturing and managing client-specific information and data, scheduling and organising appointments, providing consulting resources and materials, invoicing and payment management, post-processing and follow-up of consulting projects, quality assurance and feedback processes. The processed data and the nature, scope, purpose, and necessity of their processing are determined by the underlying contractual relationship with the client.

If it is necessary for our contract performance, for the protection of vital interests or legally required, or if there is consent from the clients, we disclose or transmit client data in compliance with professional legal requirements to third parties or agents such as authorities, subcontractors or in the field of IT, office or similar services; Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR).

Data Analysis: We process the data of our customers and clients to enable them to perform data analysis, evaluation, and consulting, as well as related services. The required information includes the information needed for analysis, evaluation, billing, and contact information for necessary coordination. To the extent that we have access to information from end customers, employees, or other persons, we process this by legal and contractual requirements. Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR), Compliance with a legal obligation (Article 6 (1) (c) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR).

IT Services: We process the data of our clients and contractors to enable them to plan, implement, and support IT solutions and associated services. The required information is marked as such during the contract, project, or similar agreement phase. It includes details necessary for service provision and billing and contact information to facilitate any necessary consultations. Insofar as we gain access to information from end customers, employees, or other individuals, we process this by legal and contractual requirements.

Processing processes include project management and documentation, covering phases from initial requirement analysis to projection. This involves creating and managing project timelines, budgets, and resource allocations. Data processing also supports change management, where changes in the project flow are documented and tracked to ensure compliance and transparency.

Another process is customer relationship management (CRM), which involves recording and analysing customer interactions and feedback to improve service quality and efficiently address individual customer needs. The processing process also encompasses technical support and trouble-shooting, including capturing and handling support requests, error resolutions, and regular maintenance.

Furthermore, reporting and performance analysis are conducted by capturing and evaluating performance metrics to assess the effectiveness of provided IT solutions, continuously optimising them. All these processes aim to ensure high customer satisfaction and compliance with all relevant regulations. Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR), Compliance with a legal obligation (Article 6 (1) (c) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR).

Online Courses and Online Training: We process the data of participants in our online courses and training sessions (collectively referred to as “participants”) to be able to provide them with our course and training services. The data processed, as well as the type, scope, purpose, and necessity of their processing, are determined by the underlying contractual relationship. The data generally includes information on the courses and services utilised, as well as the personal preferences and results of the participants insofar as they are part of our service offering. Processing forms also include performance evaluation and the evaluation of our services and those of the course and training instructors. Additionally, depending on the equipment and structure of the respective courses or learning content, further processing operations may be implemented, such as attendance tracking for documenting participation, progress monitoring for measuring and analysing learning progress by collecting exam and test results, and analysing interactions on learning platforms, such as forum posts and assignment submissions; Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR).

Project and Development Services: We process the data of our customers and clients (from now on uniformly referred to as “customers”) to enable them to select, acquire or commission the selected services or works as well as associated activities and to pay for and make available such services or works or to perform such services or works.

The required information is indicated as such within the framework of the conclusion of the agreement, order or equivalent contract. It includes the information required for providing services, invoicing, and contact information for consultations. Insofar as we gain access to the information of end customers, employees, or other persons, we process it according to legal and contractual requirements. Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR).

Software and Platform Services: We process the data of our users, registered and any test users (from now on uniformly referred to as “users”) to provide them with our contractual services based on legitimate interests to ensure the security of our offer and develop it further. The required details are identified within the context of the conclusion of the agreement, order, or comparable contract. They include the details required for providing services, as well as invoicing and contact information to hold any further consultations. Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR).

Consulting: Insofar as it is necessary for our contractual performance or required by law, or if the consent of the customer has been obtained, we disclose or transfer the customer’s data to third parties or agents, such as authorities, courts or in the field of IT, office or comparable services, in compliance with the contractual and legal requirements; Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR).