"Data protection declaration" and "Information on the processing of personal data in accordance with Articles 13, 14 DSGVO".

 

 

 

iwp Consulting Group AG

 

 

 

Table of Contents

 

 

 

I.                     Data protection declaration

 

II.                   Information on the processing of personal data in accordance with Articles 13, 14 DSGVO

 

 

 

preface

 

 

 

The following "Data Protection Declaration" and the "Information on the processing of personal data according to Art. 13, 14 DSGVO" explain which data we collect about you, why we need this data and to whom we pass this data on. In addition, they also contain your rights with regard to your data and the contact persons to whom you can turn for further information or inquiries.

 

 

 

While the "Data Protection Declaration" is primarily intended to explain which data we process, store and protect about you when you use our website, the "Information on the processing of personal data pursuant to Arts. 13, 14 DSGV are essentially intended to explain the processing of your data within the scope of our services for you/our customers and within the scope of all other activities that are part of the exercise of our business activities.

 

 

 

Last updated: January, 23th 2020

 

 

 

I. Data protection declaration

 

 

 

To whom does this privacy policy apply and what does it cover?

 

 

 

This data protection declaration applies exclusively to the specific website of iwp Consulting Group AG, hereinafter also referred to as iwp, which we own or are responsible for, as well as to such applications offered by iwp Consulting Group AG.

 

 

 

The web pages "www.iwpag.com, www.iwpag.de and www.lieferantencheck24.de consist of various individual, global, country-specific, regional and service-specific web pages.

 

 

 

We are committed to protecting your privacy and processing your data in an open and transparent manner.

 

 

 

This data protection statement explains how we process, store and protect data about you when you use our website and other iwp Consulting Group AG apps. We also disclose the processing of your data when we provide services to you/our customers and in all other activities that are part of our business activities.

 

When this policy refers to "our website" or "this website", it refers to the specific web pages on www.iwpag.com, as well as web pages whose URL starts with https://www.iwpag.com, https://www.iwpag.de or https://www.lieferantencheck24.de.

 

 

 

This privacy policy also contains information about when we share your personal data with other members of the iwp Consulting Group AG network and other third parties (for example our service providers).

 

 

 

If you provide us with information via the iwp Consulting Group AG websites or in the context of the use of iwp Consulting Group AG apps, you agree pursuant to Art. 6 paragraph 1, letters a, 7 DSGVO (Basic Data Protection Regulation) that we may process your personal data within the framework of the principles laid down here.

 

 

 

To other areas of www.iwpag.com, iwpag.de and www.lieferantencheck24.de

 

 

 

The provisions of this data protection declaration do not apply to web pages to which these web pages may be linked. We encourage visitors to our website to review the privacy statements on each of these other websites before disclosing any personal information.

 

 

 

What information do we collect?

 

 

 

Although the use of our website is not conditioned by the transmission of your personal data and we do not store any personal data via the iwp Consulting Group AG website without your consent, we may process your personal data if you voluntarily make it available to us for certain purposes in the designated areas of our website.

 

 

 

As part of the provision of services for you/our customers and the performance of necessary preliminary checks in connection with our services (e.g. conflict or "know-your-client" checks) or as part of the discussion of possible services to be provided by us, we process personal data about you where necessary.

 

 

 

We may collect or receive this information because you provide it to us (for example, on a form on our website), because we have received it from other people (for example, your employer or consultant or from third parties we have engaged to assist us in the conduct of our business as permitted by law) or because it is publicly available.

 

 

 

To learn how to use our website

 

Although the use of our website is not conditioned by the transmission of your personal data and we do not store any personal data via the iwp Consulting Group AG website without your consent, we may process your personal data if you voluntarily make it available to us for certain purposes in the designated areas of our website.

 

 

 

As part of the provision of services for you/our customers and the performance of necessary preliminary checks in connection with our services (e.g. conflict or "know-your-client" checks) or as part of the discussion of possible services to be provided by us, we process personal data about you where necessary.

 

 

 

We may collect or receive this information because you provide it to us (for example, on a form on our website), because we have received it from other people (for example, your employer or consultant or from third parties we have engaged to assist us in the conduct of our business as permitted by law) or because it is publicly available.

 

 

 

In order to improve the operation of our web pages for you and to ensure their effective functionality, we use cookies (small text files that are offered/saved in the user's browser) and web beacons (small image files that allow the iwp Consulting Group AG website to determine the number of visitors to a specific area of the iwp Consulting Group AG website and to request certain stored cookies). We use these instruments to determine user data such as IP address, domain, browser type, language, access times and the pages visited on our website. This collected information is forwarded to our webmasters to ensure that our website remains a useful and effective source of information.

 

 

 

 

 

Neither our cookies nor our web beacons collect personal information such as names or e-mail addresses. To prevent your Internet browser from receiving cookies or web beacons at all, you should set your Internet browser so that it either no longer receives cookies or web beacons at all or asks you to give your consent to receive each individual cookie or web beacon. Please read our cookie notice for more information on turning off these instruments. Under certain circumstances, however, the iwp Consulting Group AG website may require the receipt of a cookie and/or web beacon and otherwise deny visitors access to certain areas.

 

 

 

You can use an opt-out to prevent your anonymized Internet activities on websites from being recorded by analysis cookies. We use the following service providers: Google Analytics & Adobe Analytics (as described below). For more information about their privacy policies, how you can use the opt-out feature and additional information about cookies, click on the links below:

 

 

 

Adobe: http://www.adobe.com/de/privacy/opt-out.html

 

 

 

iwp Consulting Group AG Cookie - Notes

 

 

 

The personal data we collect or obtain about you may include the following: Name; age, date of birth; gender; e-mail address; country of birth; information about work and education (for example, which company you work for, your job title and information about your education); financial and tax information (for example, where you are based for income and tax purposes); Your posts on blogs, forums, wikis and any other social media applications and services we provide; your IP address; your browser type and language; your access times; complaint details; details of how you use our products and services; details of how you prefer to interact with us and other similar information.

 

 

 

The personal data processed by us may also contain so-called "sensitive" or "special categories" of personal data, provided that you provide them to us voluntarily. The types of personal data we process and specific categories of personal data may vary depending on the type of services we provide to you/our customers or the way you use our website.

 

 

 

We underline the importance of protecting the private and personal sphere of minors (explicitly children under 13 years), especially with regard to a possible misuse of today's Internet communication. We would therefore like to emphasise that our website and services are not designed for children.

 

How do we process your data?

 

 

 

Processing of personal data collected via our website

 

 

 

In addition to the above-mentioned purposes in connection with the performance of our business activities, we may also process your personal data collected via our website:

 

 

 

 

 

 

 

to manage and improve our website,

 

 

 

to customize the content of our website to provide you with an individual user experience and to draw your attention to information about our products and services that may be of interest to you,

 

 

 

to manage and respond to any enquiries you make to us through our website,

 

 

 

for the purposes for which the visitor has voluntarily consented within the meaning of Art. 6 paragraph 1 letter a, 7 DSGVO, such as in the context of an application or registration to receive general or exclusive information, as well as for purposes that registered users could expect according to the circumstances of the use of the website.

 

 

 

If you as a registered visitor no longer wish to use the information offered or other areas, you can object to further processing of your personal data for the future at any time. For this purpose, please contact the iwp Consulting Group as the responsible body within the meaning of the DSGVO, Im Höhngesgarten 35, 51491 Overath or info@iwpag.com. For the contradiction no other costs arise than the transmission costs according to the basic tariffs.

 

Processing of personal data for the provision of services to our customers

 

 

 

We process your personal data for the purpose of carrying out individual contractual relationships, to provide services for you/our customers. Within this framework we can process your personal data in the course of a correspondence to the services. Such correspondence can take place with you, our customer, other members of the iwp Consulting Group AG network, our service providers or the responsible authorities. We may also process your personal data to carry out necessary preliminary checks in connection with our services (e.g. conflict or "know-your-client" checks required by regulations) or within the scope of discussing possible services to be provided by us.

 

 

 

Because we offer a wide range of services to our customers, the way in which we process personal data in relation to our services also varies.

 

 

 

We may also process your personal data in connection with the following purpose related to the original purpose (depending on necessity and professional legitimacy in individual cases):

 

 

 

applicable legal or regulatory obligations,

 

 

 

Inquiries and notifications from competent authorities within the framework of relevant professional confidentiality obligations,

 

 

 

purposes of accounting, invoicing and risk analysis,

 

 

 

purposes of the customer relationship, including contacting you to obtain feedback on our services, contacting you for other market or research purposes, provided that the specific legal requirements are met;

 

Services that we receive from our specialist consultants such as lawyers, auditors and consultants,

 

 

 

administrative purposes in connection with the specific business activity,

 

 

 

Protection of our rights and those of our customers.

 

 

 

Legal basis for processing personal data

 

 

 

We process your personal data for the above-mentioned purposes on the basis of the following legal bases: (a) because of our legitimate interest in providing our services to you and our customers; (b) because of our legitimate interest in conducting our business effectively and lawfully, provided that your interests do not outweigh this interest; (c) because of our legal and regulatory obligations, such as keeping records for tax purposes; (d) because the data is necessary to provide our services to you/our customer.

 

 

 

If we process sensitive personal data relating to you for any of the above purposes, we do so either because: (i) you have given us your express consent to process such data; (ii) we are required by law to process such data to ensure that we comply with our "know your client" and "anti-money laundering" obligations (or other legal obligations applicable to us); (iii) processing is necessary to perform our employment, social security or social protection obligations; (iv) processing is necessary to enforce, exercise or defend legal claims; or (v) you have made the data public.

 

 

 

If we are required by law to obtain your express consent to offer you certain promotional materials, we will only offer these materials to you if we have received such consent from you. If you no longer wish to receive advertising material from us, you can click on the unsubscribe function in the message or send an e-mail to info@iwpag.com and object to the processing of your personal data for these purposes at any time without giving reasons. For the contradiction no other costs arise than the transmission costs according to the basic tariffs.

 

Who do we share your information with?

 

 

 

In connection with one or more of the purposes described in the section "How do we process your data", we may disclose details about you to: other members of the iwp Consulting Group AG network; third parties providing services to us and/or the iwp Consulting Group AG network; competent authorities (including courts and us or other members of the iwp Consulting Group AG network supervising authorities); your employer and/or its consultant; your consultants; organizations that assist us in identifying fraud cases, and other third parties that support us in identifying fraud cases.

 

 

 

 

 

legitimately request access to personal data related to you for one or more of the purposes described in the section "How are your data processed by us? In any case, the data will only be passed on if this is also permissible under consideration of statutory confidentiality obligations.

 

 

 

 

 

Our website may contain various blogs, forums, wikis and other social media applications or services that enable you to share content with other users (collectively, "social media applications"). However, when using these social media applications, please be aware that the information disseminated via this information channel can (also) be read, collected, stored and/or used by other users of the application. We have little or no control over these other users and therefore cannot guarantee that all information you contribute to the social media applications will be handled in accordance with this privacy policy. We therefore assume no responsibility for these persons and their handling of your (personal) data.

 

 

 

Please note that some of the above recipients of your personal data may be located in countries outside the European Union whose data protection laws may be less comprehensive. In such cases, we will ensure that appropriate security measures are in place to protect your personal information in accordance with our legal obligations. If the recipient is not a member of the iwp Consulting Group AG network, an appropriate security measure may be a data transfer agreement with the recipient based on standard contractual clauses recognised by the European Commission for the transfer of personal data to third countries.

 

 

 

Further details on the transmissions described above and the appropriate security measures implemented by iwp Consulting Group AG with regard to these transmissions are also available from us. Please contact info@iwpag.com.

 

 

 

We may also need to disclose your personal information if we are required to do so by law, by a regulatory authority or as part of a legal process.

 

 

 

We may share non-personal, anonymized and aggregated data with third parties for various purposes, including data analysis, research, tendering and promotional purposes.

 

 

 

Please note that if you transfer data to other iwp Consulting Group AG network partners, the individual member companies are nationally independent and autonomous, are generally subject to a right deviating from the DSGVO and may have issued a different declaration for the protection of privacy and personal data. Therefore, we would like to ask you to read the privacy statements of the iwp Consulting Group AG network before forwarding your personal data to certain other member companies. This also applies if you instruct us to forward your personal data to them. The iwp Consulting Group AG does not take over any Liability for the content and/or data protection treatment of data that you or we leave on other websites at your request.

 

Protection of your personal data

 

 

 

iwp Consulting Group AG uses generally accepted technological security standards to protect visitor data on the German website from misuse, loss and falsification. In addition, only certain employees of iwp Consulting Group AG are authorized to access personally identifiable visitor data. This

 

Employees ensure that the confidentiality of this sensitive data is maintained within the framework of the purpose for which they are transferred. This principle applies according to the corresponding confidentiality declarations of the other participating companies (also for their websites and thus also for employees, representatives and affiliated companies entrusted by them, to which visitor data is passed on within the framework of the purpose of transfer. If a visitor leaves data on this website, he or she agrees in accordance with

 

 

 

All visitors to our website are also advised that links (electronic "references") on the German website lead to other websites and information of third parties. Unless expressly assured above, iwp Consulting Group AG assumes no responsibility for the content of third party websites, not even with regard to compliance with certain security standards or the basic data protection regulation.

 

 

 

Notwithstanding the above comments on visitor data on the German web pages, we use various physical, electronic and operational measures to ensure that your personal data is generally secure, accurate and up-to-date. These measures include, inter alia:

 

 

 

Education and training of the relevant employees to ensure that they are aware of data protection obligations when dealing with personal data,

 

 

 

administrative and technical controls to restrict access to personal data to persons who need to know about it ("need to know" principle),

 

 

 

technological security measures, including firewalls, encryption and anti-virus software,

 

 

 

physical security measures, such as security passes for employees to access our premises.

 

 

 

Although we take reasonable security measures once we have received your personal information, the transmission of data over the Internet (including by e-mail) is never completely secure. We make every effort to protect personal data, but cannot guarantee the security of the data transmitted to or from us. 

 

How long do we keep your data?

 

 

 

We store your personal data on our systems for the longest of the following periods: (i) for as long as it is necessary for the activity or services concerned

 

 

 

 

 

(ii) for a statutory retention period; (iii) until the end of the period during which a dispute or investigation relating to the Services may arise

 

 

 

Depending on the category of data, iwp Consulting Group AG stores your personal data in accordance with the applicable legal storage obligations.

 

 

 

your rights

 

 

 

You have various rights in connection with your personal data. In particular, you have the right:

 

 

 

update the personal information we hold about you or, if you think it is inaccurate or incomplete, request that it be corrected,

 

 

 

to demand the deletion of your personal data stored by us or a restriction of the way in which we process these data, as far as this does not conflict with legal obligations,

 

 

 

to revoke your consent to the processing of your personal data by us at any time free of charge without stating reasons at info@iwpag.com (provided such processing is based on a consent),

 

 

 

receive a copy of the personal data concerning you that you have provided to us in a structured, common and machine-readable format and transmit it to another party (if the processing is based on consent or a contract),

 

 

 

to object to the processing of your personal data by us.

 

 

 

To exercise your rights or for any other questions about how we process your personal data, please send an e-mail to info@iwpag.com or write to us at the following address:

 

 

 

iwp Consulting Group AG, Im Höhngesgarten 35, 51491 Overath

 

 

 

 

 

right of appeal

 

 

 

If you do not agree with the way we process your personal data or with any request or request for data protection that you have made to us, please contact info@iwpag.com. You are also entitled to contact the data protection supervisory authority responsible for iwp Consulting Group AG. An overview of the responsible supervisory authorities can be found in the company information.

 

 

 

Changes to this Privacy Policy

 

 

 

We may amend or supplement this privacy policy as necessary.

 

 

 

 

 

To let you know when we make changes to this Privacy Policy, we will adjust the revision date at the top of the page. The new amended or supplemented Privacy Policy will apply as of this revision date. We therefore recommend that you check this statement regularly to find out how we process and protect your data.

 

 

 

Please note that the iwp Consulting Group AG web pages including this data protection information have been made available to provide general information and notes on certain topics, but not to deal with individual topics in more detail. 

 

Questions on the protection of the private and personal sphere

 

 

 

If you have any questions about this privacy statement or feel that you have certain concerns about it that should be taken into special consideration, you are welcome to send us your questions and suggestions directly via info@iwpag.com

 

 

 

Privacy policy for the use of Google Analytics & Adobe Analytics

 

 

 

Our web pages use the web analysis service Google Analytics of Google Inc. "("Google") and Adobe Analytics from Adobe Systems, Inc. small text files called "cookies" are stored by a server on the Internet on your PC, which enable an analysis of your usage behavior on this website. The information generated and collected by the cookie is usually transferred to a Google or Adobe Analytics server in the USA where it is evaluated and stored.

 

 

 

If IP anonymization is activated on this website, the IP address of Google or Adobe will first be reduced within the member states of the European Union and in the other signatory states to the Agreement on the European Economic Area. The complete transmission of the IP address to the Google or Adobe Analytics server in the USA and a shortening of the IP address there takes place only in exceptional cases.

 

 

 

Google and Adobe Analytics use the above information on behalf of the website operator to evaluate visitor flows and interactions on this website and compile reports on website activity. Furthermore, further services related to the use of the website and the Internet are provided to the website operator.

 

 

 

You may refuse the use of cookies by selecting the appropriate settings on your browser, thereby preventing the use of Google Analytics and Adobe Analytics. However, this setting may mean that you may not be able to use all functions of this website to their full extent.

 

 

 

In addition, you have the option of preventing the transmission of your data about the use of this website and the processing of this data by Google or Adobe Analytics by downloading and installing the browser plug-ins available under the following links: http://tools.google.com/dlpage/gaoptout?hl=en or http://www.adobe.com/privacy/opt-out.html

 

II. Information on the processing of personal data in accordance with Articles 13, 14 DSGVO

 

 

 

 

 

Please make sure that, in addition to the following information, you also familiarize yourself with the above data protection declaration of iwp Consulting Group AG. For questions of understanding or other questions, please contact us at info@iwpag.com.

 

 

 

iwp Consulting Group Ag provides consulting services for companies and institutions from all sectors of the economy. We do not provide legal, tax or other professional services reserved for other professions. iwp Consulting Group AG processes personal data as part of the assignment to provide the above-mentioned services, depending on the individual order. This information supplements the above data protection declaration and represents a concrete description of how iwp Consulting Group AG processes your personal data within the scope of providing the service ordered.

 

 

 

Please note that this information relates exclusively to personal data within the meaning of Art. 4 No. 1 DSGVO, i.e. it does not include all data and information that iwp Consulting Group AG receives in connection with the respective underlying client relationship, but essentially only such information that relates to an identified or identifiable natural person. Irrespective of this, the professional secrecy and confidentiality obligations to which iwp Consulting Group AG and the employees of iwp Consulting Group AG are subject under the professional law for management consultants apply in full to all data and information that we receive from you within the scope of the mandate relationship, irrespective of whether this is personal data within the meaning of the DSGVO.

 

 

 

Responsible according to DSGVO

 

 

 

The person responsible for the processing of your personal data in connection with all services within the meaning of Art.4 para. 7 EU Data Protection Ordinance (DSGVO) is

 

 

 

iwp Consulting Group AG, Im Höhngesgarten 35, D-51491 Overath

 

 

 

Purposes of processing and legal basis for processing

 

 

 

iwp Consulting Group AG processes your personal data for the purpose of fulfilling our (pre-) contractual obligations towards our customers. In this context we process in particular your contact data such as name, address, telephone number and e-mail address to carry out pre-contractual measures (such as internal pre-contractual compliance checks or within the scope of the customer/contract creation) as well as to carry out our respective contractual service obligations including the administrative execution and billing of the respective order on the basis of Art. 6 para. 1 lit. b) DSGVO. For the management and execution of order enquiries/orders, iwp Consulting Group AG uses IT systems for the administration and storage of your personal data, however, no automated decision making and no profiling takes place.

 

 

 

Depending on the category of documents, iwp Consulting Group AG stores personal data for file management/documentation and archiving purposes in accordance with the relevant legal regulations for different periods of time.

 

 

 

 

 

 

 

As a rule, iwp Consulting Group AG receives the necessary personal data from customers. In this respect, iwp Consulting Group AG has a legitimate interest in processing this personal data pursuant to Art. 6 Para. 1 lit. f) DSGVO, as iwp Consulting Group AG is obliged to perform the commissioned service under the underlying order agreement. In this context it is essential for iwp Consulting Group AG to process any personal data of the contact persons and contact persons of our customer (also already during the preparation of the offer).

 

 

 

If you yourself have commissioned iwp Consulting Group AG to perform certain services, in addition to your contact data, such further personal data will be processed by you within the scope of order processing, insofar as this is necessary for the provision of the service agreed with you and you have transmitted it to us. In this respect, the processing of your personal data is necessary for the fulfilment of the order concluded between you and iwp Consulting Group AG and is justified pursuant to Art. 6 Para. 1 lit. b) DSGVO.

 

 

 

Please note that the General Terms and Conditions of iwp Consulting Group AG generally provide for a duty of cooperation on the part of the respective customer to provide iwp Consulting Group AG with all documents and information required for the execution of the order.

 

In this context it is essential for iwp Consulting Group AG to process any personal data of the contact persons and contact persons of our customer (also already during the preparation of the offer).

 

 

 

If you yourself have commissioned iwp Consulting Group AG to perform certain services, in addition to your contact data, such further personal data will be processed by you within the scope of order processing, insofar as this is necessary for the provision of the service agreed with you and you have transmitted it to us. In this respect, the processing of your personal data is necessary for the fulfilment of the order concluded between you and iwp Consulting Group AG and is justified pursuant to Art. 6 Para. 1 lit. b) DSGVO.

 

 

 

Please note that the General Terms and Conditions of iwp Consulting Group AG generally provide for a duty of cooperation on the part of the respective customer to provide iwp Consulting Group AG with all documents and information required for the execution of the order. In this respect, the processing of the respective order and the associated fulfilment of the contractually agreed service by iwp Consulting Group AG is not possible or only possible to a limited extent if and to the extent that the necessary information is not provided.

 

 

 

Since iwp Consulting Group AG legally requires proper file management, comprehensive documentation of its mandates and orders (also beyond the conclusion of an order) as well as compliance with further storage and documentation obligations (e.g. due to professional, accounting or commercial and company law requirements), iwp Consulting Group AG processes your personal data within the scope of documents to be documented, work results or associated customer-related correspondence also for the purposes of file management, documentation and archiving both in the form of paper files and within the scope of IT systems used for this purpose on the basis of Art. 6 Para. 1 lit. c) DSGVO to fulfil our aforementioned legal obligations.

 

 

 

Notwithstanding the above purposes, iwp Consulting Group AG processes your contact data (in particular name, address, e-mail address) for marketing and advertising purposes, i.e., for example, to send you information about our other offers or events. This is done on the basis of consents and/or a justified economic interest of iwp Consulting Group AG within the meaning of Art. 6 Para. 1 lit. f) to inform its customers about further own offers and events and thus to be able to establish and maintain a long-term customer relationship.

 

 

 

Finally, iwp Consulting Group AG also processes your contact data for the maintenance of our business contacts, if we have received them within the framework of a business event, within the framework of a business appointment (e.g. by exchanging business cards) or within the framework of an order, and transfer them into the CRM system (Customer Relationship Management System) used by us.

 

 

 

Since iwp Consulting Group AG has a legitimate economic interest in maintaining contacts established in the course of business transactions even after the initial contact has been made, in order to build up a network of contacts.

 

 

 

 

 

of a business relationship and to remain in contact with the data subjects for this purpose, the aforementioned processing of your personal data takes place on the basis of Art. 6 Para. 1 lit. f) DSGVO.

 

 

 

Categories of recipients of data and transfer to third countries

 

 

 

In connection with the performance of our commissioned services, personal data may also be transmitted to third parties, as specified below. In this respect, data may be transferred to European and non-European countries and your personal data may be stored outside the EU.

 

 

 

iwp Consulting Group AG cooperates with other companies from the global iwp Consulting Group AG network to the extent necessary to provide the commissioned service, i.e. in the case of a foreign assignment or if the expertise of a foreign colleague is required. If such a transfer to a network company outside the EU/EEA takes place, an appropriate level of data protection is guaranteed by the use of standard contractual clauses of the EU Commission within the meaning of Art. 46 para. 2 lit. c) DSGVO. The EU standard contractual clauses can be found at

 

https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:EN:PDF

 

to call it up.

 

In authorities, courts or other places

 

 

 

In connection with the performance of our services, it may also be necessary to transmit information, work results and documents to authorities, courts or other public or private bodies (also abroad in the case of foreign procurement). The same applies to cases in which iwp Consulting Group AG is obliged to issue/disclose personal data by legal, official or court order. This only takes place if there are no professional confidentiality obligations to the contrary.

 

 

 

To iwp Consulting Group AG internal service providers and external IT service providers

 

 

 

In individual cases, iwp Consulting Group AG uses other German or foreign iwp Consulting Group AG network companies as internal network IT service providers who provide services for operating, maintaining and servicing the IT systems and applications used by the iwp Consulting Group AG network companies. These companies with access rights to personal data are only used if this has been agreed in the order agreements with our customers or is legally permissible in individual cases without our consent.

 

 

 

If a network company has access outside the European Economic Area, an appropriate level of data protection is guaranteed by the use of standard contractual clauses of the EU Commission within the meaning of Art. 46 para. 2 lit. c) DSGVO.

 

 

 

Technical and client-specific IT service providers, e.g. for the processing of mandates, are only used in consultation with our customers as far as legally required.

 

 

 

 

 

 

 

 

 

Your rights in connection with data processing

 

 

 

The DSGVO essentially grants the following rights to data subjects, which you can assert at any time by contacting us at info@iwpag.com

 

 

 

You can request information from iwp Consulting Group AG at any time as to whether and which personal data about you is processed and stored by iwp Consulting Group AG. Please note that your right to information may be limited to the extent that such information would be contrary to professional secrecy and confidential information would be disclosed.

 

 

 

In addition to your right to information, you can request the correction of your data at any time. In addition, there is a right to the deletion of your data if and to the extent that the data are no longer required for the purposes for which they were collected or if the processing is based on your consent but you have revoked your consent. The aforementioned right to delete your data does not apply if your data cannot be deleted due to a statutory obligation or must be processed due to a statutory obligation or data processing is necessary to assert, exercise or defend legal claims.

 

 

 

Furthermore, you have the right to request iwp Consulting Group AG to restrict the processing of your personal data.

 

 

 

In addition, there is a right to data transferability, i.e. you can request iwp Consulting Group AG to receive the data provided by you in a structured, current and machine-readable format and/or that this data be transmitted to another person responsible. Please note that this does not apply if you have provided us with the data on the basis of your consent or on the basis of a contract concluded with you, or if the data is processed using automated procedures.

 

 

 

If iwp Consulting Group AG processes your personal data on the basis of Art. 6 Para. 1 lit. f) DSGVO (e.g. if your employer as a customer of iwp Consulting Group AG has provided us with your personal data as contact person in your company, or if we use your contact data to send you information about offers and events of iwp Consulting Group AG), you can object to this processing at any time.

 

 

 

 

 

 

 

 

 

 

 

Right of appeal to a data protection supervisory authority

 

 

 

In addition to the above-mentioned rights of data subjects, you also have the right of appeal to a data protection supervisory authority under Art. 77 DSGVO if you believe that the processing of your personal data violates data protection law. The supervisory authority of the federal state in which the responsible authority has its seat is responsible in each case.

 

 

 

Duration of data storage

 

Please note that iwp Consulting Group AG stores and processes your personal data for as long as it is necessary to fulfil the above-mentioned processing purposes. As far as personal data is the subject of legal storage obligations or part of documents which are subject to legal storage obligations, iwp Consulting Group AG will store this data for the duration of the legally stipulated storage period.

Depending on the category of documents, iwp Consulting Group AG stores personal data on the basis of applicable legal retention obligations.

The longest retention period is decisive if the data concerned are subject to different retention periods, and the legally prescribed retention period may be extended depending on the individual case if, for example, the information is required to assert, exercise or defend legal claims even after expiry of the retention period.