Privacy Policy

1. General and mandatory information

Privacy

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

We would like to point out that data transmission over the Internet may have security gaps. Complete protection of the data against access by third parties is not possible.

Responsible

The body responsible for data processing on this website is:

CNI Consulting & Innovation
Christoph Lücke
Borgentreicher Weg 43

33100 Paderborn

The responsible body, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, contact details, etc. Ä.).

Revocation of your consent

Many data processing operations are only possible with your express consent. You can cancel your consent at any time. The legality of the processing carried out until the cancellation remains unaffected.

Right of complaint
In the event of data protection violations, you have the right to complain to the competent supervisory authority.
Data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract in a common, machine-readable format.

SSL- resp. TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses an SSL or SSL-mail. TLS encryption.

You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

Information, blocking, deletion

You have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing as well as, if applicable, a right to rectification, cancellation or restriction of the processing.

Objection to advertising mails

The use of the contact data published within the framework of the imprint obligation for the transmission of advertising and information materials not expressly requested is contradicted.

2. Data collection on this website

Cookies

The Internet pages sometimes use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.

Most of the cookies we use are so-called ›session cookies‹. They will be automatically deleted after the end of your visit. Other cookies remain on your device until you delete them. These cookies allow us to recognise your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When disabling cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping cart function) are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. If other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these will be treated separately in this privacy policy.

Server log files

In server log files, the website provider automatically collects and stores information that your browser automatically transmits to us. These are:

  • Visited page on our domain
  • Date and time of server request
  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • IP address

This data is technically necessary for us to show you our website and to ensure stability and security. (The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO) This data is not merged with other data sources.

Contact form

Data transmitted via the contact form will be stored, including your contact details, in order to be able to process your request or to be available for follow-up questions. This data will not be passed on without your consent.

Depending on the type of request, the legal basis for this processing is Art. 6 para. 1 lit. b DSGVO for inquiries that you make yourself within the framework of a pre-contractual measure or Art. 6 para. 1 sentence 1 lit. f GDPR, if your request is of another nature. If personal data is requested that we do not need for the fulfilment of a contract or to safeguard legitimate interests, the transmission to us takes place on the basis of a consent given by you in accordance with Art. 6 para. 1 lit. a DSGVO.t unaffected by the revocation.

Data transmitted via the contact form remains with us until you ask us to delete it, revoke your consent to storage or there is no longer any need to store data. Mandatory legal provisions – in particular retention periods – remain unaffected.

Objection to advertising mails

The use of the contact data published within the framework of the imprint obligation for the transmission of advertising and information materials not expressly requested is contradicted.

3. Analysis tools and consent

Google Analytics
Type and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of views of our online offer, visited subpages and the length of stay of visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.

This information is used, among other things, to compile reports on the activity of the website.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating US companies and/or their US subcontractors are in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) is certified.

In cases where no adequacy decision of the European Commission exists (including US companies that are not EU-U.S. DPF certified) we have with the recipients of the data other suitable guarantees within the meaning of Art. 44 ff. GDPR agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4. June 2021. A copy of these standard contractual clauses can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/? uri=CELEX:32021D0914&from=EN.

In addition, before such a third-country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that there may be risks that are not known in the case of transfers to third countries in detail (e.g. the data processing by security authorities of the third country, the exact scope of which we do not know and the consequences for you, over which we have no influence and of which you may not become aware).

Storage time

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google reCaptcha

Type and scope of processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and allows us to distinguish whether a contact request comes from a natural person or is made automatically by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, transmitting your IP address and, if applicable, browser data such as your user agent. Furthermore, Google reCAPTCHA records the dwell time and mouse movements of the user to distinguish automated requests from human requests. This data will be processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.

Purpose and legal basis

The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and §25 Abs. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating US companies and/or their US subcontractors are in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) is certified.

Storage time

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy? hl=en-US.

Cookiebot
Type and scope of processing

We have integrated Cookiebot on our website. Cookiebot is a consent solution of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, with which the consent to the storage of cookies can be obtained and documented. Cookiebot uses cookies or other web technologies to recognise users and to store the given or revoked consent.

Purpose and legal basis

The use of the service is based on the legally required consent to obtain the use of cookies in accordance with Art. 6 para. 1 lit. c. GDPR.

Storage time

The specific storage period of the processed data cannot be influenced by us, but is determined by Cybot A/S. Further information can be found in the privacy policy for Cookiebot: https://www.cookiebot.com/de/privacy-policy/.

4. Multilingualism and Media

Multilingualism

This website uses systems to manage multilingual content and to translate media content.

As a rule, no independent personal data is collected.

Embedded content

If third-party content is integrated, such as YouTube, Google Maps, external fonts or social media content, personal data may be transmitted to the respective provider when loading this content.

Such integrations only take place if they are technically necessary or if you have previously consented.

5. Storage duration and end

Storage time

Personal data will only be stored for as long as this is necessary for the respective purposes or if there are statutory retention periods.

Conding determination

This privacy policy will be customised if the website, the services used or the legal requirements change.

Source: Data protection configurator of Herold Unternehmensberatung