Privacy Policy

Expertree consulting GmbH values you as a business partner, customer and interested party who is interested in expertree and our products and services. When you interact with us, we collect and process certain personal data from you. This privacy policy explains how expertree consulting uses the personal data you provide and what rights and options are available to you in this regard.

This concerns personal data that you provide to expertree as well as data that is derived from such data. Please note that where applicable legal provisions and your rights are explained in this notice, this only applies to personal data that is processed in accordance with the EU General Data Protection Regulation. If the processing of your personal data is not subject to this regulation, other rules apply, depending on the law applicable to you.

The use of information obtained during your visit to our website using cookies or other web tracking technologies is governed by our Cookie Policy, which is published on our website.

Who is responsible for your personal data?

expertree consulting GmbH
Lena-Christ-Straße 2
82031 Grünwald

Phone: +49 89 120 86 375
E-mail: [email protected]

Represented by: Manuel Köhler

Data protection officer

If you have specific questions about the protection of your data, please contact

expertree consulting GmbH
Mr. Dirk Seeliger
Lena-Christ-Straße 2
82031 Grünwald

Phone: +49 89 120 86 375
E-mail: [email protected]

Protection of your data

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Processing of personal data

a) When you visit the website

Each time you visit our website, we automatically collect data and information from your device’s system and store it in server log files. This data is information that relates to an identified or identifiable natural person (here: website visitor). The data is automatically transmitted by your browser when you visit our website. This includes the following information

Referrer (previously visited website)
Requested website or file
Browser type and browser version
Operating system used
Type of device used
Time of access
IP address in anonymized form (only used to determine the location of access)

The aforementioned data is processed by us for the following purposes:

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

The recipient of the data is our server host, who works for us as part of a contract data agreement. We use IONOS by 1&1 (IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany) to host this website.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. The data will be deleted after 8 weeks. At no time will your data be passed on to third parties.

In addition, we use analysis services that set cookies when you visit the website. You will find more detailed explanations in this privacy policy.

b) When using the contact form

If you have questions of any kind, we offer you the opportunity to contact us using a form provided on our website.

In this context, we process the following data Name, e-mail address. If you enter additional personal data in the message field, this will be collected and processed with the same care as your name and e-mail address.

This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Your data will be deleted after final processing of your request; this is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

c) Contacting us by e-mail

You have the option of contacting us by email. If you contact us by email, your email address, the time of the email and the data resulting from the message text (including attachments, if applicable) will be processed.

The purpose of processing the above-mentioned data is to process the contact request and to be able to get in touch with the enquirer to answer the request.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to respond to your inquiries.

If your contact is aimed at concluding a contract, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

Your data will be deleted after final processing of your request, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention periods to the contrary.

Additional personal data collected will be deleted regularly, but at the latest after a period of seven days.

d) Contacting us by post

You have the option of contacting us by post. If you contact us by post, we will process your address data in particular, such as your surname, first name, street, zip code, date and time of receipt as well as any data resulting from your letter itself.

The purpose of processing the above-mentioned data is to process the contact and to be able to get in touch with the enquirer to respond to the request.

If your contact is aimed at concluding a contract, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

Additional personal data collected will be deleted regularly, but at the latest after a period of seven days.

e) Contacting us by telephone

You have the option of contacting us by telephone. If you contact us by telephone, your telephone number and, if necessary, your name, e-mail address, time of the call and information about your request will be processed on request during the conversation.

The purpose of processing the above-mentioned data is to process the contact and to be able to get in touch with the enquirer to respond to the request.

If your contact is aimed at concluding a contract, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

Additional personal data collected will be deleted regularly, but at the latest after a period of seven days.

f) Newsletter subscription

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter: “CleverReach”). CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on CleverReach’s servers in Germany or Ireland.

Our newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked on. Conversion tracking can also be used to analyze whether a predefined action (e.g. purchase of a product on this website) has taken place after clicking on the link in the newsletter. Further information on data analysis by CleverReach newsletters can be found at: https://www.cleverreach.com/en-de/newsletter-tool/newsletter-reporting/.

Data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

If you do not want CleverReach to analyze your data, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest

For more information, please refer to CleverReach’s privacy policy at: https://www.cleverreach.com/en-de/privacy-policy/.

Disclosure of personal data to third parties

In order to process your request efficiently, we may disclose your personal data to the following recipients for various purposes and in various ways in accordance with local laws and regulations:

Public bodies to which the data must be transferred by law (e.g. tax authorities, supervisory authorities, law enforcement authorities if applicable)
Banks, insurance companies
Contractors (service companies, such as IT service providers, which may be located within or outside expertree consulting GmbH)
Marketing technology platforms
logistics companies

However, in cases where your personal data is passed on to third parties, the scope of the data transferred is limited to the minimum necessary.

We also only pass on your personal data to third parties if:

you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

We use cookies on our website. Cookies are small data records that are stored on your device, e.g. to make the use of a website more convenient or to recognize the user’s device and save settings or similar. Inputs and settings on a website can be saved in cookies so that you do not have to enter them again each time you visit a website. Cookies contain a so-called cookie ID, which makes it possible to assign the device in which the cookie was stored.

Cookies help us to design our online offering in a user-friendly and customized way. We use our own cookies and cookies from third-party providers. You can configure the setting of cookies at any time.

This allows you to restrict or completely prevent the setting of cookies in your browser settings. You can also arrange for cookies to be deleted automatically when you close the browser window. You can find out how to delete cookies in the most common browsers and change the cookie settings here:

Internet Explorer: https://windows.microsoft.com/en-us/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=en&sjid=573721252162687500-EU
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/

Google Analytics

We use the Google Analytics analysis tracking tool from the US company Google Inc. Responsible for the European area is Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland. The service uses “cookies” – text files that are stored on your device. The information collected through cookies is usually sent to a Google server in the USA and stored there.

What data is collected by Google Analytics?

Language
Country
Location
Browser
Operating system
Internet provider
Screen resolution

We only use Google Analytics with IP anonymization activated (“anonymize IP”). This means that your IP address is shortened by Google within EU member states or in other contracting states of the agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

Information on the types of cookies used by Google can be found here: https://policies.google.com/technologies/types

What other data may also be collected by Google?

If you are signed in to your Google account, Google may add the processed information to your account depending on your account settings and treat it as personal data. Google states the following:

“If you are not signed in to a Google account, we store the data we collect with unique identifiers linked to the browser, app, or device you are using. This allows us, for example, to ensure that your language settings are maintained across all browser sessions. If you are signed in to a Google account, we also collect data that we store in your Google account and consider it personal data.” (https://privacy.google.com/take-control.html)

You can prevent the direct addition of this data by logging out of your Google account or making the corresponding account settings in your Google account. You can also change your cookie settings (e.g., delete or block cookies, etc.).

Further information can be found in Google’s privacy policy, which you can access here: https://www.google.com/policies/privacy/
Information on Google’s privacy settings can be found at: https://privacy.google.com/take-control.html

Legal Basis

The legal basis for the processing of personal data described here within the framework of the Google Analytics analysis tracking tool is your explicit consent granted via the cookie banner according to Art. 6 para. 1 lit. a) GDPR. In addition to your consent according to Art. 6 para. 1 lit. a) GDPR, there is a legitimate interest on our part to analyze the behavior of website visitors and to improve our offering technically and economically. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. Of course, your personal data will only be collected via Google Analytics if you have previously given your consent via the cookie consent tool.

According to data processing with recipients located in third countries, there is no adequacy decision concerning the USA according to Art. 45 GDPR. However, the transfer can be based on standard contractual clauses, Art. 46 para. 2 lit. c) GDPR. Google has committed to comply with the standard contractual clauses for the transfer of personal data to third countries issued by the European Commission. We have entered into the aforementioned standard contractual clauses with Google.
Further information can be found here: https://policies.google.com/privacy/frameworks

How long is the data stored?

The retention period we have selected is 14 months. With this setting, we have chosen the shortest retention period provided by Google.

Social Media Links

Social networks (LinkedIn, XING, kununu, and Instagram) are integrated into our website merely as links to the respective services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. Only after the redirection are user information transmitted to the respective provider. Please refer to the privacy policies of the providers you use for information on how they handle your personal data when using these websites.

Your Rights

Right to Information

According to Art. 15 GDPR, you have the right to request confirmation from us as to whether your personal data is being processed by us. If this is the case, you have the right to access this personal data and to further information as specified in Art. 15 GDPR.

Right to Rectification

According to Art. 16 GDPR, you have the right to request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of processing, you also have the right to request the completion of incomplete personal data – including by means of a supplementary statement.

Right to Deletion

You have the right to request the deletion of your data if the conditions specified in Art. 17 GDPR are met. For example, you can request the deletion of your data if it is no longer necessary for the purposes for which it was collected. You can also request deletion if we process your data based on your consent and you revoke that consent.

Right to Restriction of Processing

You have the right to request the restriction of processing your data if the conditions of Art. 18 GDPR are met. This is the case, for example, if you dispute the accuracy of your data. During the verification of the accuracy of the data, you may request the restriction of processing.

Right to Data Portability

According to Art. 20 GDPR, you have the right to receive your personal data that you provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller, insofar as this is technically feasible.

Right to Object

If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time according to Art. 7 para. 3 GDPR. Please note that the withdrawal only takes effect for the future. Processing that occurred before the withdrawal is not affected. Please also note that we may need to retain certain data to comply with legal requirements for a certain period.

Right to Complain

If you believe that the processing of your personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority according to Art. 77 GDPR, in particular in the member state of your residence, your workplace, or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

The competent supervisory authority is:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18

91522 Ansbach

Email: [email protected]

Phone: 0 981 180093-0

Updates to this Privacy Policy

This privacy policy was last updated in September 2022. We reserve the right to update and change this privacy policy at any time to reflect how we use your personal data or changes in legal requirements. In the event of such changes, we will publish the updated privacy policy on our website. All modified information applies from the date it is published on our website.