Privacy policy

Overview

The protection of personal data and the responsible handling of information that you entrust to us is an important and special concern for us. PAConsult processes personal data only in accordance with the statutory regulations.

This privacy policy informs you about the processing of personal data at

• the use of our website (see 2)
• the use of our contact form (see section 3)
• the application for a job (see section 4).

This privacy policy also contains information on recipients of personal data within the EEA (see section 5), in third countries (see section 6), the deletion of your personal data and retention periods (see section 7), your rights as a data subject (see section 8) and automated decision-making (see section 9).

1. Responsible party and data protection officer

PAConsult GmbH, Birkenau 3, 22087 Hamburg

Telephone: 040 / 229 48 79-0
E-Mail: info@paconsult.de

Further information can also be found in the imprint.

You can contact our company data protection official at datenschutz@paconsult.de

2. Use of our website

When you visit our website, we process personal data to enable you to use it (usage data), as described in section 2.1 described above. We also process personal data for web analysis and other purposes as described in section 2.2 ff. described above. Below you will find information about the legal basis, the purposes and, if applicable, legitimate interests and the necessity of processing your personal data.

2.1 Data processing to enable the use of the website

Usage data includes your IP address and data about the start, end and purpose of your use of the website. This also includes technical data transmitted by your browser such as browser type / browser version, the previously visited website (referrer URL), monitor resolution, operating system, device information (e.g. device type), etc. We process this data for the provision and needs-based design of this website in our legitimate interest (Art. 6 para. 1 lit. f GDPR). If you would like detailed information on the balancing of interests, please contact one of the data protection officers listed under section 1 above.

2.2 Cookies and Web Analysis

When you visit our website, information may be stored on your device in the form of cookies. A cookie is a small text file that is sent to your browser by a web server and stored on your end device. When you visit our website again, cookie data is again transmitted to our web server. This allows us to recognize you, for example, and take your individual settings into account when displaying the website. Cookies can be divided into first-party cookies (used by PAConsult) and third-party cookies (used by third parties). Third-party cookies can be used in the context of web analysis. They can be combined with other information about your activities on our website and are processed in pseudonymized user profiles. This helps us to analyze information about web traffic and to improve our website in order to adapt it to the needs of users. We only use this information for statistical evaluations. In addition to cookie-based web analytics, there is non-cookie-based web analytics using other means, such as your individual device settings, to recognize you when you return to our website.

The legal basis for the use of first-party cookies is our legitimate interest in the provision of our website in accordance with Art. 6 para. 1 lit. f GDPR. The legal basis for the use of third-party cookies and web analytics is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) of the GDPR. When you visit our website for the first time or when you visit it again, we inform you about the use of cookies and web analysis via cookie banner and ask for your consent. If you click on "Allow all", you declare your consent. You can revoke your consent at any time with effect for the future. You can also make settings directly in our cookie banner , which lists the cookies used on our website and describes their function and storage duration.

2.3 Google Analytics 

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand and thus anonymized. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting the settings in our cookie banner . You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (tools.google.com/dlpage/gaoptout.

Google is certified under the EU-U.S. Privacy Framework, which ensures that the level of protection of natural persons guaranteed by the GDPR is not impaired by data transfers. Further information on data protection at Google Analytics can be found at: https://www.google.de/intl/de/policies/.

2.4 Google AdWords Conversion, Google Dynamic Remarketing and Google Tag Manager 

We also use Google Analytics to analyze data from the Google AdWords services for statistical purposes. This allows us to analyze what happens after a user clicks on our ad in order to improve our offers. You will also receive interest-based advertising via these services. Your consent is required for this. If you do not wish this to happen, you can store this in the cookie banner and also prevent it via Google's Ads Preferences Manager: https://myadcenter.google.com/personalizationoff?hl=de .

We also use Google Tag Manager to manage website tags. A tag is a JavaScript snippet that is used to send information from a website to recipients, particularly in the context of web tracking. The Google Tag Manager tool itself does not collect any personal data. The tool triggers other tags, which in turn may collect data (e.g. the Google Analytics tag). Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

Google is certified in accordance with the EU-U.S. Privacy Framework, which ensures that the level of protection of natural persons guaranteed by the GDPR is not impaired by data transfers. Further information on data protection at Google Analytics can be found at: https://www.google.de/intl/de/policies/.

2.5 Leadinfo

We use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognizes visits from companies to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. "leadinfo.com") in order to correlate IP addresses with companies and improve services. Further information can be found at www.leadinfo.com.

If you do not wish to do this, you can do so in the cookie banner and also prevent it via Leadinfo's Ads Preferences Manager: www.leadinfo.com/en/opt-out. If you opt out, your data will no longer be collected by Leadinfo.

2.6 LinkedIn

Our website contains a link to the social network LinkedIn. If you follow the link, information may be transmitted to the provider. The purpose and scope of the data collection and the further processing and use of the data by the provider as well as your rights in this regard and setting options to protect your privacy can be found in LinkedIn's data protection information:

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
http://www.linkedin.com/legal/privacy-policy/

3. Contact Form and Inquiries by E-mail, Telephone or Fax

We process your personal data when you use our contact form, also when you contact us by e-mail, telephone or fax. Your data will be stored in order to answer your request. The legal basis is either the fulfillment of a contractual obligation or our legitimate interest in providing a contact form (Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time. You are not obliged to contact us via the contact form or otherwise, nor are you obliged to provide personal data. If you do not provide your personal data, we may not be able to process your request. Otherwise, there will be no consequences for you. If you would like detailed information on the balancing of interests, please contact one of the contact persons listed under section 1 above .

4. Application for a position

We process your personal data as part of the application process, regardless of whether the application is made via the online module, by email or by post. Below you will find information about the legal basis, the purposes and, if applicable, the legitimate interests and the necessity of processing your personal data.

The legal basis for the processing of your personal data is § 6 para. 1 lit. b GDPR. The processing is carried out for the purpose of establishing contact and assessing your suitability for the position for which you are applying.

It is not possible to apply to us without providing personal data. You are neither obliged to apply to us nor to provide personal data. If you do not provide us with any personal data, we will not be able to consider your application. Otherwise there will be no consequences for you.

5. Transfer to recipients of personal data within the EEA

We only transfer personal data to third parties insofar as this is necessary for the provision of our service or is required by law in this context. Within the scope of the purposes mentioned here, personal data is forwarded to service providers who work for us and support us in particular in the provision of services. In addition to their legal obligation to comply with all data protection regulations, these service providers are bound by further contractual data protection requirements. In particular, this includes an obligation as a processor in accordance with Art. 28 GDPR. In particular, we have passed on personal data to the following categories of service providers

• Accounting, financial institutions, tax and legal advice;
• IT service and infrastructure, e.g. for the application process;
• IT support and maintenance;
• Data destruction and facility services.

In addition to the categories already mentioned, further categories of service providers may exist or be added.

Otherwise, we only transfer personal data to other recipients if we have legal permission to do so or if you have given your prior consent. You can revoke any consent you have given at any time with effect for the future. We only pass on your data to government agencies within the scope of legal obligations or on the basis of an official order or court decision and only insofar as this is permitted under data protection law.

6. Transfer to recipients of personal data in countries outside the EEA

If necessary for our purposes, we may also transfer your data to recipients outside the EU. This is particularly the case if we have to transfer this data to recipients in countries within the scope of contract processing or due to legal regulations. Otherwise, we only transfer data to third countries if it is ensured that the recipient of the data has implemented an adequate level of data protection within the meaning of Art. 45 GDPR or suitable guarantees within the meaning of Art. 46 (2) and (3) GDPR and no other interests worthy of protection speak against the transfer of data.

We may transfer your data to the following categories of service providers:

• IT service and infrastructure, e.g. for customer communication;
• IT support and maintenance;
• Web analysis;

In addition to the categories already mentioned, further categories of service providers can exist or be added at any time.

7. Deletion 

We delete your personal data as soon as it is no longer required for the aforementioned purposes of processing, in the event of an objection there are no compelling legitimate grounds on the part of PAConsult to the contrary or in the event of a revocation there is no other legal basis for the processing. In certain cases, e.g. if there is a legal obligation to retain data, your personal data will initially be blocked and deleted upon expiry of the retention period.

Job-related data will be stored until a decision is made and then deleted after no more than six months or, if your application is successful, transferred to your personnel file.

8. Your rights

As a data subject, you have the right to obtain confirmation as to whether or not personal data concerning you is being processed by PAConsult and, where that is the case, the right of access to the personal data (Art. 15 GDPR), the right to rectification of inaccurate personal data (Art. 16 GDPR), the right to erasure (Art. 17 GDPR) and the right to restriction (blocking) of processing (Art. 18 GDPR).

In addition, in the case of processing on the basis of Art. 6 para. 1 lit. e or f GDPR, you can object to the processing (Art. 21 GDPR), whereby you must provide a special reason, except in the case of direct advertising. If you have provided this data, you can request the transfer of the data (Art. 20 GDPR). Whether and to what extent these rights exist in individual cases and under what conditions they apply is laid down by law in the aforementioned standards.

If the processing is based on consent within the meaning of Art. 6 sentence 1 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, you can revoke this consent at any time for the future (Art. 7 para. 3 GDPR). You also have the right to contact the competent data protection supervisory authority (Art. 77 GDPR).

If you have any questions or complaints about data protection at PAConsult , we recommend that you first contact our data protection officer (see the contact details in section 1).

9. No automated decision in individual cases

We do not use your personal data for automated individual case decisions within the meaning of Art. 22 para. 1 GDPR.

10. Changes to the privacy policy

New legal requirements, business decisions or technical developments may require changes to our privacy policy. The privacy policy will then be adapted accordingly. You will always find the latest version on our website.

April 2024