Heinson/Associates Consulting GmbH
Berghauser Str. 43
42349 Wuppertal
Phone: +49 163 400 960 8

As a visitor to our website, you expect a high level of quality and expertise in the processing of your personal data.

We are responsible for the handling of your data, which we process according to your wishes and in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Personal data is any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR). Your personal data will only be processed by us if this is permitted by law or if you have given your prior consent.

We, i.e. Heinson/Associates Consulting GmbH, Berghauser Str. 43, 42349 Wuppertal, and our service providers, process your data on our behalf for the purposes stated below. Our service providers include, for example, agencies, printers, lettershops, logistics companies, data centres and e-mail service providers.

In addition to the above postal address, you can also reach us by e-mail at info@heinson-consulting.de.

It is important to us that you can find out at any time from the following information which personal data is collected during your visit to our website and when you use our services, and how we subsequently process this data.

1. Name and contact details of the controller and the company data protection officer

This data protection information applies to data processing by:

Responsible: Heinson/Associates Consulting GmbH, (hereinafter: Heinson/Associates), Berghauser Str. 43, 42349 Wuppertal, Am Schemmannshof 3, 58093 Hagen, Email: datenschutz@heinson-consulting.de, Phone: +49 202 978 98 28.

The company data protection officer of our management consultancy is Torsten Heinson. If you have any questions about data protection or data security, you can contact our data protection officer at the above address or at th@heinson-consulting,de.

2. Collection and storage of personal data and the nature and purpose of their use

We take technical and organisational security precautions to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons and to ensure the protection of your rights and compliance with the applicable data protection regulations of the EU and the Federal Republic of Germany (Art. 32 GDPR).

The measures taken should guarantee the confidentiality and integrity of your data and ensure the availability and resilience of the systems and services when processing your data in the long term. They are also intended to restore the availability of the data and access to it quickly in the event of a physical or technical incident.

Our security measures also include the encryption of your data. All information that you enter online is technically encrypted and only then transmitted. This means that this information cannot be viewed by unauthorised third parties at any time.

Our data processing and security measures are continuously improved in line with technological developments.

Our employees are obliged in writing to comply with the data protection requirements of the GDPR.

1. a) When visiting the website

When you visit our website heinson-consulting.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• the website from which access was made (referrer URL),
• browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring a comfortable use of our website,
• analysing system security and stability and
• for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this in sections 4 and 5 of this privacy policy.

1. b) When subscribing to our newsletter

If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your e-mail address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an e-mail address.

You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by e-mail to info@heinson-consulting.de senden.

1. c) When using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the enquiry and can answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your enquiry has been dealt with.

3. Passing on data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see section 5). These cookies enable us to automatically recognise that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created.

By prohibiting/deactivating cookies, you can also revoke your consent to the setting of cookies at any time for the future. However, completely deactivating cookies may mean that you cannot use all the functions of our website. You can use the following links to find out about this option for the most commonly used browsers:

• Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Firefox: http://support.mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computer
• Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647
• Safari: https://support.apple.com/kb/PH21411?locale=de_DE
• Opera: http://help.opera.com/Linux/12.10/de/cookies.html.

5. Analysis tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

1. a) Google Analytics¹

We use Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as ‘Google’) for the purpose of designing and continuously optimising our pages to meet your needs. In this context, pseudonymised user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as

• Browser type/version,
• Operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server enquiry

are transmitted to a Google server in the USA and stored there. The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that they cannot be assigned (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by clicking on the following link Download and install the browser add-on.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help.

1. b) Google Adwords Conversion Tracking

We also use Google Conversion Tracking to statistically record the use of our website and to evaluate it for the purpose of optimising our website for you. This involves Google Adwords placing a cookie (see section 4) on your computer if you have reached our website via a Google advert.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page.

Each Adwords customer receives a different cookie. Cookies can therefore not be tracked via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers learn the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this - for example, by using a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser so that cookies from the domain „www.googleadservices.com“ can be blocked. You can find Google's privacy policy on conversion tracking here.

1. c) Matomo

We use the open source software Matomo to analyse and statistically evaluate the use of the website. Cookies are used for this purpose (see section 4). The information generated by the cookie about website use is transmitted to our servers and summarised in pseudonymous user profiles. The information is used to analyse the use of the website and to enable a needs-based design of our website. The information is not passed on to third parties.

Under no circumstances is the IP address associated with other data relating to the user. The IP addresses are anonymised so that they cannot be assigned (IP masking).

Your visit to this website is currently recorded by Matomo web analytics. Click hereso that your visit is no longer recorded.

6. Social Media Plug-ins

We use social plug-ins from the social networks Facebook and Xing on our website on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR in order to publicise our management consultancy. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider. We integrate these plug-ins using the so-called two-click method in order to protect visitors to our website in the best possible way.

1. a) Facebook

Social media plugins from Facebook are used on our website to personalise their use. We use the ‘LIKE’ or ‘SHARE’ button for this purpose. This is an offer from Facebook.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which integrates it into the website.

By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by clicking the ‘LIKE’ or ‘SHARE’ button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and customising Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to analyse your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information.

1. b) Xing

Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing Xing functions is accessed, a connection to Xing servers is established. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored and usage behaviour is not evaluated.

Further information on data protection and the Xing Share button can be found in Xing's privacy policy at https://www.xing.com/app/share?op=data_protection

7. Rights of affected persons

You have the right

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
• in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the registered office of our law firm..

8. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you would like to exercise your right of cancellation or objection, simply send an e-mail to datenschutz@heinson-consulting.de.

9. Data protection

We use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and was last updated in May 2018.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be viewed at any time on the website heinson-consulting.de/datenschutz/ von Ihnen abgerufen und ausgedruckt werden.

You can download the AGB here