Compliance with data protection has the utmost priority at ITB Consulting GmbH. In order to ensure compliance with the data protection requirements, there is an appointed data protection officer and a data protection concept. For all services offered by ITB Consulting GmbH, there are internal procedural guidelines for compliance with data protection. The services provided by ITB Consulting are in conformity with the legal data protection regulations, the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
All of our employees who come in contact with personal data are prohibited from the unauthorized collection, processing or use of personal data. All employees have been obliged in writing in accordance with § 53 BDSG to maintain data privacy. In addition to this, our employees are regularly trained in compliance with information security and the individual requirements of data protection at ITB Consulting GmbH (information security).
The handling of your personal data should always be comprehensible and transparent for you. In the following, we inform you in accordance with Article 13 GDPR about how we collect and process your data in compliance with the law.
Pursuant to Article 4 (1) GDPR, “personal data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The use of our website is largely possible without providing personal data. We process personal data on our website only in the following cases:
You provide your personal data on a purely voluntary basis. The personal data provided by you will be used only to contact you or, as applicable, to send you our e-mail newsletter.
When you visit our websites, so-called usage data is temporarily analysed on our web server for statistical purposes as a log in order to improve the quality of our websites. This data record consists of
The aforementioned log data is only analysed in anonymised form.
The legal basis for processing the usage data is Art. 6 para. 1 sentence 1 lit. f GDPR. The processing is carried out in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimised display.
As a visitor to our website, you can send us your enquiry using the contact form. In this case, it is in our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) EU GDPR to process the personal data provided by you in the mandatory fields in order to be able to contact you in accordance with your request and, in the case of registration for a webinar or whitepaper download, additionally for organisational reasons in order to be able to guarantee the proper execution or receipt of the desired document, to provide you with the desired information and to ensure the quality of our customer service. In addition, you can decide for yourself whether you wish to provide us with further information. This information is provided voluntarily and is not mandatory for contacting us. We process your voluntary information on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) EU GDPR. Your data will only be processed to answer your enquiry and to ensure the proper implementation of the requested webinar or whitepaper download and the related follow-up and quality assurance. We will delete your data if it is no longer required and there are no legal obligations to retain it.
If your data transmitted via the contact form is processed on the basis of Art. 6 para. 1 sentence 1 lit. f EU GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of voluntary data at any time. To do so, please contact the e-mail address provided in this privacy policy.
If you are not yet our customer, you can subscribe to our newsletter after giving your consent (Art. 6 para. 1 sentence 1 lit. a) in conjunction with Art. 7 EU GDPR). Art. 7 EU GDPR) to subscribe to our newsletter. To confirm consent, an e-mail confirmation of consent is required from the data subject (‘double opt-in procedure’). In the course of this, the potential recipient is added to a mailing list. The user then receives a confirmation e-mail to confirm the registration in a legally secure manner. The address will only be actively added to the mailing list if confirmation is given. We use this data exclusively for sending the requested information and offers.
If you contact us directly by e-mail, the personal data that you voluntarily provide to us will be processed on the basis of our legitimate interest in processing your enquiry in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. This data is collected and stored exclusively for the purpose of contacting you. An internal procedural instruction regulates how the contact data sent may be used under data protection law and when it must be deleted.
Personal data that you send to us by e-mail, or that we process as described above directly on our website in the context of the use of our contact form, our blog, or the sending of our newsletter, will not be transferred by ITB Consulting to third parties without your explicit consent.
In addition, our website contains links to the websites of various test procedures developed by ITB Consulting, in particular for aptitude and suitability tests. This includes, for example, BT-WISO and TM-WISO. The evaluation of such a test enables the college or institution to which you have applied to make a qualified selection from among the applicants to the respective courses of studies. Due to a tightening of data protection law, in order to participate in such a test procedure, every participant must grant a qualified declaration of consent to the processing of their personal data in the course of online registration for the respective test procedure. This declaration of consent fulfils the requirements of Article 7 GDPR. You will be fully informed about all details of the declaration of consent during the online registration for the corresponding test procedure on the respective website. You can view your declaration of consent there, and withdraw it if you wish, at any time.
In our collaboration with other institutions, e.g. our service providers, within the framework of services we offer, we take the following precaution to ensure the protection of your personal data: personal data may generally be passed on to third parties only if those parties have the required data protection suitability according to our test and a processing contract in accordance with Article 28 GDPR has been signed.
The authority to issue instructions regarding the data protection-compliant handling of personal data provided lies with ITB Consulting GmbH.
The duration of storage depends on legal requirements and the purpose of data storage. If the purpose of the data processing is no longer given, the data will be deleted. Otherwise, personal data collected will generally be deleted if consent is withdrawn, the data is proven to be incorrect, the data was collected unlawfully or if legal requirements no longer demand data storage.
Right to information (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.
Right to rectification (Art. 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed.
Right to erasure (Art. 17 GDPR)
You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of the examination by the controller.
Right to data portability (Art. 20 GDPR)
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.
Right of cancellation (Art. 7 GDPR)
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.
Right to object (Art. 21 GDPR)
If data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR (data processing to protect legitimate interests) or on the basis of Art. 6 para. 1 sentence 1 lit. e GDPR (data processing to protect the public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Assertion of your rights
Unless otherwise described above, please contact the controller named in this privacy policy to assert your rights as a data subject.
Notwithstanding any other legal remedies, every data subject has the right to lodge a complaint with the relevant supervisory authority. (The State Data Protection and Freedom of Information Officer NRW: https://www.ldi.nrw.de/index.php).
ITB Consulting GmbH
Koblenzer Strasse 77
53177 Bonn
Telefon: +49 228 82090-0
Telefax: +49 228 82090-38
E-Mail: info@itb-consulting.de
Managing director Dr. Kristine Heilmann
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
office@datenschutz-sued.de
E-mail correspondence runs on the unsecured internet. We hereby draw attention to the fact that the internet is subject to many security risks, and it is not possible to guarantee absolutely secure transmission. We therefore request that you do not send us any confidential information by e-mail. At the current state of the art, it cannot be ruled out that third parties gain illegal access to the e-mail information sent.
In some cases, a connection to our Vimeo channel or Linkedin profiles may be established from our website. Our website also contains links to other websites for which we are not responsible. We have no influence on their content and on whether their operators comply with data protection regulations. Please contact these companies directly to find out about their data protection regulations.
ITB Consulting GmbH uses technical and organizational methods within the meaning of Article 32 EU GDPR to protect the personal data made available by you against destruction, loss, unauthorized access and deliberate or negligent manipulation. The compliance of the technical and organizational measures is documented, and is reviewed at regular intervals by ITB Consulting GmbH’s data protection officer.
As part of the registration for certain test procedures, your personal data will be collected, stored and used by us in our online booking portal edoobox. The following types of data are regularly the subject of processing:
The legal basis for the processing of the data is Article 6 (1) GDPR.
The purpose of the data processing is the registration or booking as a participant of certain test procedures of ITB-Consulting GmbH.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Storage beyond this takes place within the framework of the legal storage periods, e.g. in connection with invoicing.
The collection of data for the administration of bookings and the storage of data for invoicing is mandatory. Consequently, there is no possibility for the user to object. The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies. As a user, you have the option of changing the data stored about you at any time.
Your data will not be passed on to third parties without your consent, nor will it be used for any purpose other than the administration and invoicing of events. Here you will find the specific privacy policy of the online booking portal: Data privacy policy for the use of the ITB Booking Portal
We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. Matomo does not transmit any data to servers that are outside the control of ITB Consulting GmbH.
The protection of your data is important to us, which is why we have additionally configured Matomo in such a way that your IP address is only recorded in abbreviated form. An assignment to individual users is not possible. Furthermore, we use Matomo without the use of cookies.
Further information on the Matomo terms of use and the data protection regulations can be found at: https://matomo.org/privacy/
We use HubSpot for marketing purposes on our website. HubSpot is a software of the company of the same name from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
We have concluded a contract with HubSpot with standard contractual clauses in which HubSpot undertakes to process user data only in accordance with our instructions and to comply with the EU data protection level.
You can find out more about the data processing agreement with HubSpot here.
Information on HubSpot’s privacy policy can be found here.
The forms on our website allow visitors to download content and provide their contact information and other demographic information. This information is stored on HubSpot’s servers. We may use this information to contact visitors to our website and to find out which of our services are of interest to them. All information we collect in this context is subject to this privacy policy. We only use this information to optimise our marketing.
We hereby expressly object to any use of contact data on our internet pages by third parties for the sending of advertising information material that has not been explicitly requested. ITB Consulting GmbH explicitly reserves the right to take legal steps in the event of unsolicited sending of advertising information, for example spam.