We, GSCI Services GmbH (GSCI), take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal rules of the relevant data protection laws, in particular the European Data Protection Regulation (DSGVO). This data protection notice relates to our digital offers via all internet-capable end devices. Our digital offers may contain links to other websites of third party service providers to which this data protection notice does not refer.

Person responsible

The person responsible for processing your personal data is

GSCI Services GmbH

Axel-Springer-Platz 3

20355 Hamburg

datenschutz@gsci-services.de

If you have any questions regarding data protection at our company, please write to us at the aforementioned postal address, with the addition of „Data Protection“, or contact our external company data protection officer, Mr. Malte Rheingans, directly at gsci@cogito.consulting | https://cogito.consulting.

Purpose of processing personal data
Data processing for the provision of contractual services

We process personal data in order to handle the contractual relationships as well as to be able to submit needs-based contractual offers. The data is collected in particular for the conclusion or execution of a contract. For your order we need your correct name, address and invoice data. We may ask for your e-mail address and telephone number so that we can communicate with you regarding the service you have ordered.

The basis for data processing is Art. 6 para. 1 p. 1 lit. b DSGVO, which permits the processing of data for the performance of a contract or pre-contractual measures.

Data processing for communication with you

In addition to the contractual data, we process your communication data (name, address, telephone number, e-mail address) in order to process your inquiry and/or contact you, if necessary. Personal data that you provide to us by e-mail or via another communication channel opened by us will only be processed for correspondence with you or only for the purpose for which you have provided us with the data.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this has been obtained in this regard.unaffected.

Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about current news concerning us. If you would like to receive the newsletter, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. For this purpose, we will send you an e-mail to the specified e-mail address with a confirmation link after your entry (double-opt-in). If you do not confirm your registration, your information will be blocked and automatically deleted after one month. Mandatory information for sending the newsletter is only your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. In addition, we store your IP addresses used in each case and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. We do not collect any other data in this context. We use this data exclusively for sending the requested newsletter.

The data processing is based on your consent according to Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email. The legality of the data processing operations already carried out remains unaffected by the revocation.

Cookies

We may use so-called cookies to provide you with website-specific services. Cookies are small text files that are stored on a visitor’s computer and contain data about the respective user in order to provide access to various functions.

Websites may use both session cookies and persistent cookies. A session cookie is temporarily stored on the computer you are using while you navigate through the website. A session cookie is deleted as soon as you close your Internet browser or as soon as your session has expired after a certain period of time. A persistent cookie remains on your computer until it is deleted.

We may work together with third parties on some of our offers and therefore cookies from partner companies may also be stored when you visit such a website (third-party cookies). We may inform you in advance about the use of such cookies and the scope of the data stored or retrieved in each case. Supplementary information on the cookies used in each case can be obtained from the cookie tool used by us and the explanations provided there.

We use cookies that are necessary to enable us to provide the services owed by us or to ensure the functionality of our services. The legal basis for setting these cookies is Section 25 (2) No. 2 TTDSG. The processing of personal data possibly carried out in this context is then based on Art. 6 para. 1 p. 1 lit. b DSGVO, which permits the processing of data for the performance of a contract or pre-contractual measures, or according to Art. 6 para. 1 p. 1 lit. f DSGVO, which permits data processing to safeguard the legitimate interests of the controller, unless the interests or the fundamental rights and freedoms of the data subject outweigh the interest of the controller in the data processing. Our interest then lies in ensuring the provision of the functions of our services.

For the use of other, non-required cookies, we may obtain your consent. The setting of cookies is then based on your consent in accordance with §25 para. 1 TTDSG, any processing of personal data carried out in this context in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke your consent at any time – among other things via the cookie tool integrated by us. The legality of the data processing already carried out on the basis of your consent remains unaffected by the revocation.

Matomo

We may use the web analytics service Matomo to analyze the use and optimize our website. When used, Matomo creates an internal hash value for each visitor to the respective website, which is calculated from various factors such as the anonymized IP address, resolution, browser, plugins used and operating system. Unlike other statistical programs, Matomo does not transmit any data to a third-party server. The IP address transmitted by your browser via Matomo is neither merged with other data collected by us nor passed on to third parties and is only stored anonymously. Within the scope of our web analysis with Matomo, no tracking cookies are set on your computer. If individual pages of our website are called up, the following data are processed: two bytes of the IP address of your calling system (anonymous), browser type and version, operating system used, the website called up, the website from which you are visiting us (referrer URL) – unless your browser prohibits this, the pages and files that you call up on our website, if applicable. the website you visit after ours (when clicking on an external link on our website), the date and time of your access, the time you spend on the website, the frequency of your visit to the website, your location (country).

The use of Matomo described above is based on Art. 6 (1) p. 1 lit. f DSGVO. We have a legitimate interest in analyzing user behavior in order to optimize our website and identify errors.

Data processing in the context of our LinkedIn company page

We operate a company page in the social network linkedin.com of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland („LinkedIn“) and are provided with so-called page analytics by LinkedIn with regard to our services. We are jointly responsible with LinkedIn for this operation of the LinkedIn company page within the meaning of Art. 26 DSGVO.

For the type and scope of the information provided to LinkedIn, the associated purposes of data processing by LinkedIn, its lawfulness, and information on exercising your rights, please refer to LinkedIn’s privacy policy at the URL https://www.linkedin.com/legal/privacy-policy and the joint responsibility agreement, which can be found at the URL https://legal.linkedin.com/pages-joint-controller-addendum. Page Analytics is aggregated data that allows us to learn about how people interact with our site. The generation and provision of these page analytics is the responsibility of LinkedIn, we have no influence on it. LinkedIn assumes all obligations under the GDPR with regard to the processing of insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of our data processing of the data provided by LinkedIn is the statistical evaluation of the use of our company page. This enables us, for example, to determine preferred visiting and posting times of our users and to use this data to optimize our posts and our company page. In addition, we process personal data made publicly available by you on LinkedIn (e.g., clear names in the user profile) as well as data directly related to activities on our company page (e.g., contributions, posts, likes, marks), also for the purpose of communicating with you.

The basis for the above data processing is Art. 6 para. 1 p. 1 lit. a DSGVO. Insofar as you have given corresponding consent to LinkedIn, you can revoke this consent at any time vis-à-vis LinkedIn with effect for the future. Insofar as you have given us consent in this regard, you can revoke this consent at any time vis-à-vis us with effect for the future. Otherwise, the basis for our data processing is Art. 6 (1) p. 1 lit. f DSGVO, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. Our interest lies in providing content and communication with LinkedIn users and in improving the reach and effectiveness of our posts.

Please assert your rights to information, correction, deletion, restriction of processing and data portability of your stored Insights data against LinkedIn, as LinkedIn has assumed the corresponding obligations:

LinkedIn Ireland Unlimited Company

Wilton Place

Dublin 2

Ireland

Privacy policy https://www.linkedin.com/legal/privacy-policy

Online presence in other social networks

We have established online presences in various social networks in order to be able to communicate with you, interested parties and customers via these and to inform you about our services and current offers. In addition to our interaction with you, the social networks process data of visitors to their websites for the purpose of market research and advertising, i.e. a user profile may be created by the respective operator of the social network from the respective visit or usage behavior and preferences and interests of a visitor derived therefrom.

Such user profiles can be used, among other things, to display advertisements to users individually adapted to the respective user profile within the respective social network and possibly on other websites. In the process, cookies (see above) may be stored on visitors‘ devices, which can be used to collect data on usage behavior. The collection of this data can also be realized across several browsers and/or end devices used by a user, especially in the case of logged-in members of the respective social network. Even if a visitor does not have a profile with the respective social network, it cannot be ruled out that personal data about this visitor will be stored by visiting the respective website.

Requests for information regarding the data stored via our online presences in social networks or the exercise of other relevant data subject rights (see below) can be directed to the provider of the respective service. Only the providers of the social networks have access to the respective data stored there and can provide the relevant information, etc. With regard to the purpose and scope of data processing by the various social networks, we refer additionally to their respective data protection notices and the respective contact options:

New Work SE

Am Strandkai 1

20457 Hamburg

Germany

Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

The basis for data processing is Art. 6 (1) p. 1 lit. f DSGVO, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. The processing is based on our legitimate interest in effective information and direct communication with interested parties and customers of our company.

Data processing for applications

You can send us applications for positions in our company via our websites and the contact details we have stored there. Insofar as personal data is transmitted to us by you in this way or in any other way in the case of applications, we will process your data for the purpose of reviewing, processing and responding to your application and, if necessary, for preparing the employment relationship.

The basis for the data processing is either Art. 88 (1) DSGVO, Section 26 (1) BDSG (new) which permits the processing of data for the decision on the establishment, for the establishment as well as for the implementation of employment relationships or – if you have given your consent – Art. 6 (1) p. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data processing for the protection of legitimate interests

We may also process your data if it is necessary to protect legitimate interests of us or of third parties. This may be the case in particular to ensure IT security and IT operations, especially in the case of support requests, to be able to trace and prove facts in the event of legal disputes and to statistically evaluate the use of our website. The basis for data processing is then Art. 6 para. 1 p. 1 lit. f DSGVO.

Other data processing based on your consent

It may also happen that we request your consent for the processing of personal data. Any granting of consent and the relevant data processing in each case is on a voluntary basis and in the event of non-consent, you will not suffer any disadvantages as a result.

The data processing is then based on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. An informal communication to us is sufficient for this purpose. The legality of the data processing operations already carried out remains unaffected by the revocation.

Log files

Each time our websites are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The data records stored in this process contain the following data: Browser type and browser version, operating system used, referrer URL, time of server request and (shortened) IP address.

This data cannot be assigned to specific persons. A combination of this data with other data sources is not made. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

The basis for data processing is Art. 6 (1) p. 1 lit. f DSGVO, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. We have an interest in the prosecution, prevention and punishment of unlawful use of our offer.

Data processing for the fulfillment of legal obligations

In addition, we process your data for the fulfillment of legal obligations (e.g. regulatory requirements, commercial and tax law retention and verification obligations).

The basis for data processing is Art. 6 (1) p. 1 lit. c DSGVO, which permits processing for the fulfillment of a legal obligation.

Recipients of personal data

Your personal data will only be passed on or otherwise transferred to third parties if this is necessary for the purpose of contract processing or billing, or if you have given your prior consent, or if there is a legal basis for the transfer.

Service providers that support us in providing our service to you are webgo GmbH, Wandsbeker Zollstr. 95 22041 Hamburg (website hosting), QualityHosting AG, Uferweg 40-42, 63571 Gelnhausen (exchange provider) and, if applicable, other software (SaaS) providers, IT service providers, in particular service providers for software and hardware maintenance, hosting providers and e-mail service providers.

Duration of data storage

In principle, we delete your data as soon as it is no longer required for the above-mentioned purposes, unless temporary storage is still necessary. For example, we store your data on the basis of statutory obligations to provide proof and to retain data, which result, among other things, from the German Commercial Code and the German Fiscal Code. The storage periods are then up to ten full years. In addition, we retain your data for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years).

Data security

Your personal data is transmitted securely by us using encryption. We use the SSL (Secure Socket Layer) coding system for this purpose. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in your browser line. Furthermore, we secure our websites and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

Data subject rights

Within the framework of the applicable legal provisions, you have the right at any time to free information about your personal data stored by us, its origin and recipient and the purpose of data processing and, if applicable, a right to correction or deletion of this data.

For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time using the contact details listed in section 1.

You may furthermore have a right to restrict the processing of your data as well as a right to have the data you have provided us with returned to you in a structured, common and machine-readable format.

If you have given us consent to process personal data for specific purposes, you may revoke your consent at any time with effect for the future. If we process your data to protect legitimate interests, you may object to this processing on grounds relating to your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing that override your interests, rights and freedoms, or if we process the relevant data from you for the purpose of direct marketing, we will then no longer process your data.

In addition, you have the option of contacting a data protection supervisory authority (right of complaint).