With this data protection declaration, we inform you about the scope of the processing of your personal data (hereinafter referred to as “data”) and about your rights in the context of the use of our website.
§1 Responsible for data processing
Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
areto consulting gmbh
areto consulting gmbh
Schanzenstraße 6-20
51063 Cologne
Phone: +49 221 66 95 75-0
Fax: +49 221 66 95 75-99
E-Mail: info@areto.de
§2 Contact details of our data protection officer
Philipp Krätzig
Schanzenstraße 6-20
51063 Cologne
Phone: +49 221 66 95 75-0
Fax: +49 221 66 95 75-99
E-Mail: philipp.kraetzig@areto.de
§3 General information on data processing
In the context of our business and website operations, we process personal data (hereinafter referred to as “data”).
This also includes disclosure by transfer to third parties and, if applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.
§4 Data processing
The data concerned in detail, processing purposes, legal bases, recipients and, if applicable, transfers to third countries are listed in the following list:
4a) Log file when visiting the website
We log your website visit. In doing so, we process:
- Name(s) of our accessed website(s)
- Date and time of retrieval
- The amount of data transferred
- The browser type and version
- The operating system you are using
- The referrer URL (the previously visited website)
- Your IP address
- The requesting provider.
In accordance with Article 6 (1) f) GDPR, the legal basis for data processing is our overriding, legitimate interest in the ongoing provision and security of our website.
The log file will be deleted after seven days, unless it is required to prove or clarify specific infringements that have become known within the retention period.
4b) Hosting
To provide our online presence, we use the services of web hosting providers who process the above-mentioned and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
In accordance with Article 6 (1) (f) GDPR, the legal basis for data processing is our overriding, legitimate interest in the provision of our website.
We use the service of Amazon Web Service EMEA SARL, (“AWS Europe”), a wholly-owned subsidiary of Amazon.com, Inc.
The hosting takes place on “Amazon Lightsail”, location of the server is Frankfurt, Zone A (eu-central-1a). The hosting takes place as processing on behalf of areto consulting gmbh.
4c) Contact
If you contact us, we process the following data from you for the purpose of processing and processing your request: name, contact details – if provided by you – and your message.
The data is transmitted to the servers of the following service providers as part of processing on behalf of areto consulting gmbh in the USA: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.
HubSpot, Inc.’s European office is located in Ireland: 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
An adequate level of protection is ensured by the conclusion of an EU standard contract with the service provider.
For more information about HubSpot, Inc.’s privacy practices, please visit: https://legal.hubspot.com/de/privacy-policy
The legal basis for data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations in accordance with Article 6 (1) (b) GDPR and/or our overriding legitimate interest in processing your request in accordance with Article 6 (1) (f) GDPR.
The recipient of the data is areto consulting gmbh. The visitor can object to the processing of his/her data at any time by sending an e-mail to marketing@areto.de or by using the dedicated unsubscribe function in e-mails.
4d) Contact for applications
If you contact us in order to send us your application as an employee, e.B. by e-mail or via a contact form, the data you provide (e.B. name, e-mail address, desired location, etc.), your message and the transmitted application documents will be processed exclusively for the purpose of processing and processing your application request.
Recipients of this data are:
- Providers of the applicant management software who process the data on our behalf.
- Areto consulting gmbh. The visitor can object to the processing of his/her data at any time by sending an e-mail to info@areto.de or by using the dedicated unsubscribe function in e-mails.
The legal basis for data processing is primarily § 26 BDSG. Accordingly, the processing of data necessary in connection with the decision to establish an employment relationship is permissible.
If, after completion of the application process, the data may be necessary for legal prosecution, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR, namely to assert and/or defend claims.
Should you wish further consideration and contact for suitable job offers in the future, data processing will take place on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR. This consent can be revoked at any time by sending an e-mail to marketing@areto.de.
4e) Fulfillment of contract and data management in the context of the provision of services
In the context of the provision of our services as well as for the initiation and processing of the existing contractual relationship between you and us, we process various data.
If you have commissioned us with the provision of a service, we process your data (if indicated: name, contact details, address) and all information that is necessary in the context of order fulfilment, exclusively for the purpose of processing and processing the contractual relationship.
This includes, in particular, our appropriate advice and support, correspondence with you, invoicing, fulfilment of our accounting and tax obligations.
The processing of the data takes place accordingly on the basis of Art. 6 para. 1 b) GDPR and to fulfill our legal obligations according to Art. 6 para. 1 c) GDPR.
If this is necessary for the processing of the order, your data will be passed on to third parties.
This includes, in particular, the disclosure to supervisory authorities for the purpose of correspondence as well as for the assertion and defence of your rights.
The visitor can object to the processing at any time with the help of an e-mail to marketing@areto.de or with the dedicated unsubscribe function in e-mails.
4f) Newsletter and provision of downloads
In order to provide you with regular or one-off information about our company and offers, we offer the dispatch of an e-mail newsletter. With your newsletter registration, we process the data entered by you during registration (e-mail address and other voluntary information). In order to prevent misuse, we will send you an e-mail after your registration with which we ask you to confirm the registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration will be logged. Affected are the registration and confirmation time as well as your IP address.
The legal basis for sending the newsletter is your consent in accordance with Article 6 (1) (a) GDPR. The data processing in connection with the sending of the confirmation e-mail for your registration and the associated data logging takes place in accordance with Art. 6 (1) f) GDPR on the basis of our legitimate interest in proving your proper registration.
For the dispatch of the newsletter, we use service providers to whom we transmit the named data.
The data is transmitted to the servers of the following service providers in the USA as part of processing on behalf of areto consuting gmbh: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.
HubSpot, Inc.’s European office is located in Ireland: 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
An adequate level of protection is ensured by the conclusion of an EU standard contract with the service provider.
For more information about HubSpot, Inc.’s privacy practices, please visit: https://legal.hubspot.com/de/privacy-policy.
The recipient of the data is areto consulting gmbh. The visitor can object to the processing at any time with the help of an e-mail to marketing@areto.de or with the dedicated unsubscribe function in e-mails.
4g) Chat tool
We use the chat tool of HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA (HubSpot) on our website to enable you to contact us via live chat. The integration of HubSpot takes place on our site by means of a corresponding Javascript. HubSpot uses cookies. Details on the cookies used can be found in our consent management platform, which can be accessed by clicking on the fingerprint symbol on the lower left part of the website.
When using HubSpot’s chat tool, the following data is processed: content of the chat, date and time of the call, browser type/version, operating system used, URL of the previously visited website, individual User_ID, number of visits and amount of data sent.
The data processing takes place on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR.
The data is transmitted to the servers of the following service providers as part of processing on behalf of areto consulting gmbh in the USA: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.
HubSpot Inc.’s European office is located in Ireland: 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
An adequate level of protection is ensured by the conclusion of an EU standard contract with the service provider.
For more information about HubSpot, Inc.’s privacy practices, please visit: https://legal.hubspot.com/de/privacy-policy.
More information about the cookies used by HubSpot can be found in our consent management platform, which can be accessed by clicking on the fingerprint icon on the lower left part of the website.
4h) Cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and stored by your browser.
Purposes
We use necessary cookies to ensure the optimal functionality of our website. These cookies make it possible, for example.B. to navigate the website or to offer other basic functions of the website.
In addition, we use optional cookies that provide us with additional information, for example for the analysis of data traffic or for advertising and marketing purposes.
Lifetime
The cookies used remain on your device for different periods of time:
Session cookies: These cookies are deleted from your device immediately after closing your Internet browser.
Persistent cookies: These cookies remain on your device even after you close your web browser and allow us, for .B, to recognize you the next time you visit our website.
Cookie Provider
Cookies that are set directly by us are so-called first-party cookies. Third-party cookies, on the other hand, are set by external websites, for example when displaying content (advertisement, images, tracking pixels, etc.).
Legal basis of data processing
In principle, the following applies: The legal basis for data processing by a cookie is your consent in accordance with Art. 6 para. 1 a) GDPR or our overriding legitimate interests in the optimization and production of the functionality of our website in accordance with Art. 6 para. 1 f) GDPR.
Revocation and objection
If data processing takes place on the basis of your consent, you can revoke it at any time with effect for the future (so-called “opt-out”). In the case of data processing based on our legitimate interest, you can object to further data processing with effect for the future.
You can revoke your consent via the respective opt-out link in the section of the data protection declaration for the respective service or by e-mail to marketing@areto.de.
Information on an objection to data processing can be found in section 8 of this data protection declaration.
Browser settings cookies
In addition, you can prevent or restrict future data processing by cookies by selecting the appropriate browser settings and deactivating the use of cookies there.B. Cookies that have already been stored can be deleted in the browser settings. Further information on the respective browser settings can be found under the following links:
Mozilla Firefox: https://support.mozilla.org/de/kb/
Internet Explorer: https://support.microsoft.com/de-de/topic/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Google Chrome: https://support.google.com/accounts/
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?
Our cookies
Further information on the specific cookies set, the purposes pursued and their lifetime can be found in our consent management platform, which can be accessed by clicking on the fingerprint symbol on the lower left part of the website.
4j) Analysis, Personalization, Marketing
Hubspot
We use tracking tools from HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA (HubSpot) on our website. We use HubSpot to evaluate your use of the website, to compile reports on the activities within this website and to provide other services associated with the use of the website and thus to improve user-friendliness. When using HubSpot, interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.
The legal basis for data processing is your prior consent in accordance with Article 6 (1) (a) GDPR.
You can revoke your consent at any time with effect for the future by sending an e-mail to marketing@areto.de.
The data is transmitted to the servers of the following service providers as part of processing on behalf of areto consulting gmbh in the USA: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.
HubSpot, Inc.’s European office is located in Ireland: 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
An adequate level of protection is ensured by the conclusion of an EU standard contract with the service provider.
For more information about HubSpot, Inc.’s privacy practices, please visit: https://legal.hubspot.com/de/privacy-policy.
More information about the cookies used by HubSpot can be found in our consent management platform.
4k) External content
We use dynamic content (“Content”) from third parties to optimize the presentation and offer of our website. When visiting the website, a request is automatically made to the server of the respective content provider via an interface, in which certain log data (e.B. the IP address of the users) are transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
Calendar function
We offer the possibility to make appointments with our internal contact persons directly via a calendar function on the website.
The calendar function processes the following information: first and last name, e-mail address, desired time of appointment and contact person.
To offer this function, we use a tool from HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA (HubSpot) on our website.
The data is transmitted to the servers of the following service providers as part of processing on behalf of areto consulting gmbh in the USA: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.
HubSpot, Inc.’s European office is located in Ireland: 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
An adequate level of protection is ensured by the conclusion of an EU standard contract with the service provider.
For more information about HubSpot, Inc.’s privacy practices, please visit: https://legal.hubspot.com/de/privacy-policy.
Webinars
In order to offer you information on interesting topics or our company, we offer participation in webinars. With your registration, we process the data you enter (e-mail address and other voluntary information) and information about your interests. In order to prevent misuse, we will send you an e-mail after your registration with which we ask you to confirm the registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration will be logged. Affected are the registration and confirmation time as well as your IP address.
The legal basis for sending the registration e-mail is your consent in accordance with Article 6 (1) (a) GDPR. The data processing in connection with the sending of the confirmation e-mail for your registration and the associated data logging takes place in accordance with Art. 6 (1) f) GDPR on the basis of our legitimate interest in proving your proper registration.
In order to offer the webinars, we use a service provider to whom we transmit the named data.
The data is transmitted to the servers of the following service providers in the USA: LogMeIn, Inc., 320 Summer Street Boston, MA 02210 United States.
For more information about LogMeIn, Inc.’s privacy practices, please visit: https://www.logmeininc.com/de/legal/privacy/us
LogMeIn, Inc.’s European subsidiary is LogMeIn Ireland Limited, an Irish company located at The Reflector, 10 Hanover Quay, Dublin 2, D02R573, Republic of Ireland.
Google Maps and Google Street View
We use Google Maps and Google Street View on our website to display our exact location and to display views of our premises. Google Maps and Google Street View are a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (“Google”) as part of Google Maps/Google Earth. By using Google Street View, information about the use of this website, including the IP address and the (start) address entered as part of the route planner function, can be transmitted to Google in the USA. When you visit a website of our website that contains Google Street View, your browser establishes a direct connection to Google’s servers. The map content is transmitted by Google directly to your browser and integrated by it into the website. Therefore, we have no influence on the scope of the data collected by Google in this way. According to our state of knowledge, this is at least the following data:
- The date and time of the visit to the website concerned,
- Internet address or URL of the accessed website,
- IP address
We have no influence on the further processing and use of the data by Google and can therefore assume no responsibility for this. Data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options for the protection of your privacy can be found in Google’s privacy policy, which you can access here:
http://www.google.com/intl/de_de/help/terms_maps.html
https://privacy.google.com/intl/de/businesses/mapscontrollerterms/
https://www.google.com/intl/de/streetview/policy/
Plugins
In order to offer you further relevant content, we use plugins on our website. As plugins that process personal data, we only use necessary plugins. The legal basis for data processing through a required plugin is our overriding, legitimate interest in the security, optimization and creation of the functionality of our website in accordance with Art. 6 para. 1 f) GDPR.
We use the following plugins:
Name: WP Mail SMTP
Provider / Link: WP Forms – https://wpforms.com/
Function: Allows you to send e-mails via your own SMTP server
Name: WP Mail
SMTP Provider / Link: WordPress – https://wpforms.com/
Function: Reconfigures the function wp_mail() to use Gmail/Mailgun/SendGrid/SMTP instead of the default mail() and creates an options page to manage the settings.
§5 Our social media presences
We operate the following social media channels for our corporate presentation, interaction and communication with interested parties and customers:
Linkedin:
• https://www.linkedin.com/company/areto-consulting-gmbh/
Xing:
• https://www.xing.com/companies/aretoconsultinggmbh
Twitter:
• https://twitter.com/aretoconsult
Instagram:
• https://www.instagram.com/areto_consulting_official/
Facebook:
• https://www.facebook.com/aretoconsulting/
YouTube:
• https://www.youtube.com/channel/UCwLSSjgZOTfBb85rzVrPvoA
Kununu:
• https://www.kununu.com/de/areto-consulting
The legal basis for data processing is our overriding, legitimate interest in the optimal marketing of our online offer for customer loyalty and customer acquisition in accordance with Art. 6 para. 1 f) GDPR.
§6 Duration of data storage
We only store personal data for as long as it is necessary for the purposes for which it is processed or if your consent has been revoked. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.
§7 Your rights as a data subject
a) Information
Upon request, you will receive information about all personal data that we have stored about you at any time free of charge.
b) Correction, deletion, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if it has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (as far as this is possible under applicable law) on appropriate instructions. The same applies if we are to process data only restrictively in the future. You have the right to object in particular in cases where your data is required due to the performance of a task that is in the public interest or is in our legitimate interest, as well as profiling based on it. Likewise, in the case of data processing for the purpose of direct marketing, you are entitled to such a right of objection.
c) Data portability
If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or with the help of automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transmit the data to another controller if you wish.
d) Right of revocation for consents with effect for the future
You can revoke your consent at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of the revocation.
e) Right of appeal
You also have the option of complaining to a supervisory authority about your rights as a data subject: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
f) Restrictions
Data for which we are not able to identify the data subject, e.g. if it has been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify.
§8 Exercise of your rights as a data subject
If you have any questions about the processing of your personal data, for information, correction, blocking, objection or deletion of data or if you wish to transfer the data to another company, please contact philipp.kraetzig@areto.de.
Cologne, September 2020
