Privacy Statement

managerberater Datenschutzerklärung | Stand: 11.06.2024

The following
data protection information informs you about the type and scope of our
processing of so-called personal data in accordance with the information
obligations under Art. 13 of the EU General Data Protection Regulation
(hereinafter referred to as “GDPR”). Personal data is information
relating to an identified or identifiable natural person. If you have
any questions or comments about this Privacy Policy, you can always send them
to the e-mail address specified in Section 2. In addition to the GDPR
, the Telecommunications-Telemedia-Data Protection Act (hereinafter
referred to as “TTDSG”) and the Federal Data Protection Act
(hereinafter referred to as “BDSG”) are relevant.

1       Controller according to Art. 4 No. 7 GDPR


The controller
responsible for the processing within the scope of this website is


Michael Basmann & Nikolai Förster GbR

Zollstockgürtel 67

50969 Köln

Tel: 0221 340919-10

Fax: 0221 340919-11



2       Data protection officer of the controller

You can reach
our data protection officer at

3       Legal bases

We may process your data on the following legal bases:

§  Your consent in accordance with Art. 6 (1) (a) GDPR

§  For the fulfilment of a contract (including pre-contractual measures) in accordance with
Art. 6 (1) (b) GDPR

§  The fulfilment of a legal obligation pursuant to Art. 6 (1) (c) GDPR

§  A legitimate
pursuant to Art. 6 (1) (f) GDPR

§  The establishment, implementation or termination of an
employment relationship in
accordance with § 26 BDSG

4       Rights of the data subject

In the
following, we will explain your rights as a data subject.

§  Right to information (Art. 15 GDPR)

You have the
right to request information from us at any time as to whether and which data
about you is being processed by us. This also includes information on the
purposes of the processing, any recipients to whom we have disclosed your data,
the planned storage period and, if applicable, information on the origin of
this data, if we have not collected it directly from you.


§  Right to rectification (Art. 16 GDPR)

You have the
right to request that we correct any inaccurate information we hold about you.
includes the right to complete incomplete personal data.

§  Right to erasure (Art. 17 GDPR)

You have the
right to request that we delete data that we have stored about you.
Unless there are reasons against deletion that require further
processing, we will comply with your request.


§  Right to restriction of processing (Art. 18 GDPR)

You have the
right to request the restriction of the personal data processed by you if one
of the following circumstances applies:

§  Contesting the accuracy of your personal data stored
by the controller pending verification

To prove unlawful processing

§  To assert, exercise or defend legal claims

When examining an objection

§  Right to data portability (Art. 20 GDPR)

You have the
right to receive data about yourself that you have provided to us from us in a
structured, commonly used and machine-readable format for the purpose of
transmission to another controller, provided that the processing is based on
your consent or on a contract.


§  Right to object to processing (Art. 21 GDPR)

If we base the processing of your personal data on our
legitimate interest within the meaning of Art. 6 (1) (f) or Art. 6 (1) (e)
GDPR, you can object to the processing.


§  Right to revoke consent under data protection law
(Art. 7 GDPR)

If you have
given your consent to the processing of your data, you can revoke it at any
time in accordance with Art. 7 (3) GDPR with effect for the future.


§  Right to lodge a complaint with a supervisory
authority (Art. 77 GDPR)

You have the right to complain to the data protection
supervisory authority at any time about our processing of data about you:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Postfach 20 04 44
40102 Düsseldorf
Phone: +49 (0)211 / 38424 – 0

5       Data deletion and storage period

The personal
data of the data subject will be deleted as soon as the purpose of the
processing no longer applies.

Processing may
also take place if legal regulations oblige us to store it.

The data will
also be deleted if a storage period prescribed by the aforementioned standards
expires, unless there is a need for further storage of the data for the
conclusion or performance of a contract.

6       Data transfer to the USA

For the transfer of personal data to the USA, there is
an adequacy decision of the EU Commission. Insofar as we use service providers
who are certified under this framework (such as Google), your data will be
transferred to the USA on the basis of this decision. Otherwise, standard
contractual clauses will be entered into with the service providers in the USA
to ensure the protection of your data.

7       External Hosting

The data that is automatically transmitted to us from your web browser
when you access the website, such as time of access, user agent and IP address,
is logged in server logs.

We process this data in our legitimate interest in
accordance with Art. 6 (1) (f) GDPR in order to ensure the stability and
security of the website.

Our website is hosted on the server of a service

8       Use of cookies

Cookies and similar technologies are small files that are stored on your
hard drive associated with the browser you are using and through which certain
information flows to the place that sets the cookie. Cookies cannot run
programs or transmit viruses to your computer. They serve to make the Internet
offer more user-friendly and effective overall.

The storage of cookies that are not technically
necessary is based on the legal basis of consent in accordance with § 25 para.

Any further processing of your data with the help of a
cookie is also based on your consent in accordance with Art. 6 (1) (a) GDPR.

The storage of technically necessary cookies is
carried out in accordance with § 25 para. 2 sentence 2 TTDSG. If personal data
is processed, this is done on the basis of our legitimate interest in
accordance with Art. 6 (1) (f) GDPR in order to be able to provide the
technical functions you have requested.

settings you make using the cookie banner are stored in a cookie. The legal
basis for this processing is the legal obligation pursuant to Art. 6 (1) (c)
GDPR to obtain your consent for cookies and third-party services. We use a
service provider for this purpose.

information about the cookies we use can be found in our Cookie Policy.

9       Other uses of our website

9.1       Contact

Various forms are
integrated into our website through which you can contact us. When using the
forms, the data entered in the input mask is transmitted to us and stored. The
required fields are marked with
an asterisk. In addition,
your IP address as well as the date and time of the request are stored.

We process the data in the context of contacting us exclusively for the
purposes specified in the respective form.

In addition, it is possible to contact us via e-mail
addresses and telephone numbers provided by us. In this case, the personal data
you provide will be processed by us in order to respond to your request.

If your request is related to the performance of a contract or is
necessary for the implementation of pre-contractual measures, the processing is
carried out on the basis of Art. 6 (1) (b) GDPR. In other cases, the legal
basis for the processing of your data in the context of the contact request is
our legitimate interest in accordance with Art. 6 (1) (f) GDPR to answer your

9.2       Application

If you apply for a job offer or on your own initiative, we will process
the data you provide in order to process your application. As a rule, your
documents contain special categories of personal data (e.g. information on
marital status; health information; a photo that allows conclusions to be drawn
about your ethnic origin and, if applicable, your eyesight and/or religion;
similarly sensitive data within the meaning of Art. 9 GDPR).

Legal basis

The legal
basis for the processing of applicant data is Art. 6 (1) (b) and Art. 88 (1)
GDPR in conjunction with Section 26 BDSG, as the processing is necessary for
the decision on the establishment of an employment relationship.


9.3       Newsletter

When you send
our electronic newsletter, to which you can register, we process the data you

We process
your e-mail address in order to communicate with you for the purpose of sending
our electronic newsletter, to inform you about current events and, if
applicable, to contact you. current developments as well as the maintenance of
our contractual relationship with you. In addition, we use this information for
promotional communications via email and, if we have received your email
address in connection with our products, services, for promotions about our own
similar products and services.

9.3.1       Tracking

By subscribing
to the newsletter, the user consents to tracking for statistical purposes. A
tracking pixel is used.

When the
newsletter is delivered, the external server can then record certain data of
the recipient, for example the time of access, the IP address or information
about the e-mail program used (client). The name of the image file is
individualized for each mail recipient by appending a unique ID and can thus
determine which newsletter recipient has just opened the email when the image
is retrieved.

Such personal
data collected via the tracking pixels contained in the newsletters will be
stored and evaluated by us in order to optimise the newsletter dispatch and to
adapt the content of future newsletters even better to the interests of the
recipients. The data will not be passed on to third parties.

Legal basis

We will obtain
your consent to send our newsletter and the associated tracking to you. We use
the so-called double opt-in procedure for this purpose. After you have
registered for the newsletter, we will send you an e-mail to the e-mail address
you have provided, in which we ask you to confirm that you wish to receive the
newsletter. If you do not confirm your registration within 48 hours, your
information will be blocked and automatically deleted after one month. In
addition, we store your IP addresses and times of registration and
confirmation. The purpose of this procedure is to prove your registration and
to be able to clarify any possible misuse of your personal data.

You can withdraw your consent at any time by clicking on the link
provided in each newsletter email.

10   Third-party services

10.1    Google Analytics

This website
uses Google Analytics, a web analytics service provided by Google Ireland Ltd.,
Gordon House, Barrow Street, Dublin 4, Ireland. The service provider processes
personal data on our behalf.

Analytics uses cookies. You can find more information about the cookies used in
the cookie banner.

No individual
IP addresses are logged or stored.
The IP addresses are only used to determine
location information (country, city, latitude and longitude of the city). It is
deleted before data is stored in a data center or on a server. This is done on
servers in the EU.

Log data,
session data, device information and other data are used to evaluate your use
of the website and to compile reports on website activity.

We only use
Google Analytics after your consent. You can revoke this at any time with effect
for the future in the cookie banner.

10.2  Google Maps


Our website uses Google Maps of Google Ireland Ltd., Gordon House, Barrow Street,
Dublin 4, Ireland
to show you the locations of the controller
and, if necessary, to enable route planning. When Google Maps is called up on
this website, data (e.g. your IP address, the address entered as part of the
route planning) is transmitted to Google.

We only use
Google Maps after your consent. You can revoke this at any time with effect for
the future in the cookie banner.

For more information on data protection at Google, please visit:

A transfer to a third
country cannot be ruled out. Your consent will be obtained in this regard.
Please note the risks mentioned in Section 6 associated with a transfer of your
data to the USA.