Our Data Privacy Statement

Privacy Policy

1. Data Controller

consenso Consulting GmbH
Meisenstraße 94
33607 Bielefeld
Tel.: 0521 26060
EMail: mail@consenso.de

Represented by the management as stated in the legal notice; you can contact our Data Protection Officer at datenschutzbeauftragter@consenso.de or on the telephone number given above.

2. Hosting and server log files

Our website is hosted by BITel Gesellschaft für Telekommunikation mbH in Bielefeld. When you visit the website, the hosting provider automatically collects and temporarily stores information in so-called server log files in order to ensure technical operation and to guarantee the security and stability of the website; this includes, in particular:

• IP address of the requesting computer
• Date and time of access
• Browser type and version
• Operating system used
• Website from which access is made (referrer URL)
• Pages accessed

The legal basis for data processing is the legitimate interest pursuant to Article 6(1)(f) of the GDPR. Under no circumstances will the data collected be used to draw conclusions about your identity.

3. Contact

If you contact us via the contact form or by email, we will process your details in order to deal with your enquiry and for any follow-up questions.

This processing is carried out on the basis of Article 6(1)(f) of the GDPR (legitimate interest in the efficient handling of enquiries addressed to us) – the data collected will be deleted once the purpose has been fulfilled.

4. Job applications

If you apply for a job with us, we will process the personal data you provide solely for the purpose of conducting the recruitment process; the legal basis for this is Article 88 of the GDPR in conjunction with Section 26(1) of the BDSG.

Unless you have expressly consented to your data being stored for a longer period, your data will be deleted once the recruitment process has been completed.

5. Cookies and Consent Management

Our website uses technically necessary cookies that are required for the operation of the website. Cookies are small text files that are stored on your device.
Additional cookies for anonymised statistical analyses are only used with your consent. You can withdraw your consent at any time. Your consent is managed via our consent management tool.
The legal bases are Article 6(1)(a) GDPR (consent), Article 6(1)(f) GDPR (legitimate interest in the technically error-free and secure operation of the website), and Section 25 TTDSG.

6. Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies to analyse how the website is used. The information generated in this way may be transmitted to Google’s servers and processed there.

We only use Google Analytics with IP anonymisation enabled.

This is carried out on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG – you may withdraw your consent at any time.

Further information can be found in Google’s privacy policy.

7. Social media

We maintain company profiles on the following social media platforms:

• LinkedIn
• Xing
• kununu
• Instagram
• Facebook
• YouTube
• Google Business (Google Profil)

When you visit our social media profiles, the respective platform operators may process personal data (including outside the EU).

Where the platform operators provide statistical analyses (so-called ‘Insights’), joint controller status applies in accordance with Article 26 of the GDPR.

Further information on data processing can be found in the privacy policies of the respective providers.

8. Third-party providers

• Google Maps
  Our website contains a link to Google Maps. Clicking on this link will redirect you to Google’s website; only then will a connection be established with Google’s servers. In the process, personal data – in particular your IP address – may be processed by Google Ireland Limited.
  Further information on data processing by Google can be found in Google’s Privacy Policy.
• Microsoft 365
  We use Microsoft 365, in particular Microsoft Teams and Outlook (provided by Microsoft Ireland Operations Limited), for communication and to improve collaboration. In doing so, personal data may be processed, including contact details, communication content, appointment and metadata, as well as technical connection data.
  The legal basis for the processing is either Article 6(1)(b) of the GDPR (performance of a contract/pre-contractual measures) or the legitimate interest in efficient and secure communication (Article 6(1)(f) of the GDPR).
  The data is stored on servers within the EU, although access from the USA cannot be ruled out.
  Further information on data processing can be found in Microsoft’s privacy policy.
• FP Sign
  We use FP Sign (provided by FP Digital Business Solutions GmbH) for the electronic signing, transmission and documentation of contracts and other documents. In doing so, personal data may be processed, in particular contact and signature details, document content, timestamps and technical log data.
  The legal basis for the processing is either Article 6(1)(b) of the GDPR or the legitimate interest in efficient, digital document management (Article 6(1)(f) of the GDPR).
  Further information on data processing can be found in FP Sign’s privacy policy.
• WhatsApp Business
  Students interested in work placements or part-time student roles may contact us via WhatsApp Business – provided by WhatsApp Ireland Limited.
  Contact via WhatsApp Business is initiated exclusively by the interested party. In doing so, personal data may be processed, in particular name, telephone number, communication/content data and technical metadata.
  Processing takes place for the purpose of handling the enquiry and is based on Article 6(1)(b) of the GDPR or the legitimate interest in processing an enquiry (Article 6(1)(f) of the GDPR).
  Once contact has been established, the exchange of further information is transferred to other communication channels as soon as possible, and the previous chat history and telephone number are deleted.
  Please note that when using WhatsApp, personal data may also be processed by WhatsApp and, where applicable, transferred to servers outside the EU.
  Further information on data processing can be found in WhatsApp’s Privacy Policy.

9. Whistleblower Protection Scheme

You can contact our reporting office at https://consenso.de/de/impressum.html. The confidentiality of your identity will be safeguarded. The data provided as part of the report (e.g. contact details (where provided) and the content of the report) will be processed, as well as, where applicable, details of individuals to whom the report relates.

The legal basis is Article 6(1)(c) of the GDPR in conjunction with Sections 12 et seq. of the Whistleblower Protection Act (HinSchG). The documentation is generally deleted three years after the conclusion of the proceedings (Section 11(5) of the Whistleblower Protection Act).

10. Your rights under the GDPR

In accordance with the relevant legal provisions, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing, provided that your personal data is processed on the basis of legitimate interests
• Right to withdraw consent
• Right to lodge a complaint with a data protection supervisory authority

11. Data security

This website uses SSL or TLS encryption for security reasons and to protect confidential content.

Furthermore, to protect your data as effectively as possible, we employ appropriate technical and organisational security measures; these measures are continuously improved in line with technological developments.

12. Code of Conduct

Our company is committed to acting in a responsible, lawful and morally and ethically sound manner towards customers, business partners, employees and society. This is underpinned by our internal Code of Conduct.

In particular, the Code of Conduct sets out principles regarding integrity and fair competition, the avoidance of conflicts of interest, responsible cooperation with business partners, the responsible use of technology and artificial intelligence, and the prevention of money laundering and other unlawful acts.

The Code of Conduct is available for inspection on request. Please contact us using the details provided in the legal notice or in this privacy policy.

13. Updates and amendments to this privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services in the privacy policy.