Privacy policy - Koru Consulting GmbH
Thank you for visiting our website and for your interest in the topic of data protection. Please take note of the following information so that you know when we collect which personal data and how we use this data.
Responsible body
The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
Koru Consulting GmbH
Lindenstrasse 2c
81545 Munich
Tel : +49 (89) 20030426
E-mail: info@koru-bcc.de

Managing DirectorSandra Kramer-Kowalzik, Michael Kowalzik

Data Protection OfficerExempt from the obligation to appoint a data protection officer due to the size of the company

Collection, processing and use of personal data
The legal basis for the collection, storage and processing of personal data can be found in particular in the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Personal data is information that relates to an identified or identifiable natural person (Art. 4 No. 1 GDPR). This includes, in particular, names, address data, telephone numbers or e-mail addresses. However, information about preferences, memberships or, for example, previously visited websites can also constitute personal data.
Contact us
If you contact us (e.g. by email, LinkedIn or via our contact form), the data you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions. The legal basis for the processing is the necessity to carry out pre-contractual measures in accordance with Art. 6 para. 1 b) GDPR. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations.
Your rights
You have the following rights vis-à-vis us with regard to your personal data:
-Right to information,
-Right to rectification or erasure,
-Right to restriction of processing,
-Right to object to the processing,
-Right to data portability.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
Objection or revocation against the processing of your data
We would like to point out that you can revoke any consent you have given to the processing of your data at any time. The permissibility of processing your personal data will be affected from the moment you become aware of your revocation.
Insofar as we base the processing of your personal data on a balancing of interests pursuant to Art. 6 para. 1 f) GDPR, you may object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you. The legal basis for the respective data processing can be found in the following descriptions of the various processes. When exercising such an objection, we ask that you explain the respective reasons. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.
You can also object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details above.
Disclosure to third parties
We transfer your personal data to third parties if this is necessary for the processing of payments. The legal basis for the transfer is the necessity for the fulfilment of a contract in accordance with Art. 6 para. 1 b) GDPR. Personal data will not be passed on to third parties for marketing or advertising purposes without your express consent.
Newsletter
With our newsletter you can keep up to date with us and our latest news at regular intervals.
If you register to receive our newsletter, we require a valid e-mail address. After entering the e-mail address and confirming the consent text, you will receive an automated e-mail in which you confirm your consent again by clicking on a link (double opt-in). As proof of your consent, we store your e-mail address, the consent text, the confirmation e-mail, as well as the respective IP addresses, time and date of registration and confirmation.
The legal basis for the processing is your consent pursuant to Art. 6 para. 1 a) GDPR.
Our newsletter is sent by the newsletter service provider "Mail Chimp" of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. Mail Chimp stores the email addresses of our newsletter subscribers and any other data described below on servers in the USA. The data is used by Mail Chimp to send the newsletter and for statistical analysis on our behalf and to optimise its own services. However, Mail Chimp does not pass on the data of our newsletter subscribers to third parties and does not use it to write to the subscribers itself.
To the best of our knowledge, Mail Chimp fulfils the applicable standards for IT and data security and has certified itself under the US-EU data protection agreement "Privacy Shield". Mail Chimp has therefore undertaken to comply with EU data protection regulations.
We have also concluded a data processing agreement with Mail Chimp ("Data Processing Agreement" http://mailchimp.com/legal/forms/data-processing-agreement/), according to which Mail Chimp undertakes to protect the data of our newsletter subscribers, to process it on our behalf in accordance with its data protection regulations and not to pass it on to third parties. You can view Mail Chimp's privacy policy herehttp://mailchimp.com/legal/privacy/.
Our newsletters contain a so-called "web-beacon". This is a small file that is retrieved from the Mail Chimp servers when you open our newsletter. Both technical information (e.g. about your browser and the time of your retrieval) and your IP address are collected and stored. Mail Chimp uses this data for statistical analysis and to improve its own services. Mail Chimp can also analyse the reading habits of newsletter subscribers, in particular whether and when our newsletters are read and which links are clicked. This analysis is also used to tailor the newsletter offer to the interests of subscribers as far as possible. The legal basis for the processing is Art. 6 para. 1 f) GDPR.
You can revoke your consent to the storage of this data and to the use of your e-mail addresses for sending newsletters at any time. The cancellation can be declared via a link in the newsletters or by sending us an email. Your consent to the sending of the newsletter by Mail Chimp and the statistical analysis of the data by Mail Chimp will expire at the same time. Unfortunately, it is not possible to revoke your consent to the sending of the newsletter and the statistical analysis separately.
Server log files
Each time our website is accessed by a user, information is stored in a log file by our hosting provider. These so-called log files contain information about retrieved files, status codes, time stamps and system information. This data is not personalised and does not allow any conclusions to be drawn about a specific person.
In addition, IP addresses are also stored in log files. For us, these cannot be easily assigned to a specific person.
If you wish to view our website, we collect the aforementioned data, which is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for the processing is the necessity to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR.
Use of cookies
Our website uses so-called cookies. These are small files that are stored on your access device (computer, smartphone, tablet, etc.) and saved by your browser. They serve to increase the user-friendliness, effectiveness and security of our website. Cookies can also be used to collect statistical data on website usage and analyse it to improve the website. Cookies do not contain viruses and do not cause any damage to your access device.
You can block the storage of cookies in your browser. Most web browsers allow some control over most cookies via the browser settings. You can find more information about blocking cookies at http://www.allaboutCookies.org. However, we would like to point out that certain functions of our website may no longer be available to you or only to a limited extent if you block them.
In order to delete/deactivate all cookies stored on your computer, most browsers offer you the option of completely preventing the use of cookies or deleting cookies generated by specific domains/websites. You can find instructions on how to do this on the help page of your browser:

-Chrome: https://support.google.com/chrome/answer/95647?hl=de

-Internet Explorer: https://support.microsoft.com/de-de/help/278835/how-to-delete-cookie-files-in-internet-explorer

-Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

-Safari: https://support.apple.com/kb/PH21411?viewlocale=de_DE&locale=de_DE

-Safari on IOS: https://support.apple.com/de-de/HT201265

-Opera: http://help.opera.com/opera/Windows/2393/de/controlPages.html#manageCookies

Web analytics with Google (Universal) Analytics
Our website uses Google (Universal) Analytics, a web analytics service provided by Google Inc (www.google.de). Google (Universal) Analytics uses methods that enable your use of the website to be analysed, such as so-called "cookies", text files that are stored on your computer. The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be stored on your end device. If you delete your cookies, you must click the link again.
The legal basis for the processing is the necessity to safeguard our legitimate interests pursuant to Art. 6 para. 1 f) GDPR, namely our interest in the statistical evaluation of the usage behaviour of our website users and, if applicable, your consent pursuant to Art. 6 para. 1 a) GDPR in conjunction with recital 32 sentence 2 (selection of technical settings).

Conversion measurement with Google Adwords conversion tracking
We use "Google AdWords", the online advertising programme of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). As part of Google AdWords, we also use conversion tracking, the associated analysis service. When you click on a Google AdWords advert, a cookie for conversion tracking is stored on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification.
If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google AdWords customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of AdWords customers.
The information collected using the conversion cookie is used to create conversion statistics for AdWords customers like us. This provides us with information such as, in particular, the total number of users who have clicked on our adverts and been redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. The legal basis for the processing of your data is Art. 6 para. 1 f) GDPR.
If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (see above under "Cookies"). You will then not be included in the conversion tracking statistics. Further information on Google AdWords can be found at http://www.google.com/policies/technologies/ads/. You can find Google's privacy policy at http://www.google.de/policies/privacy/. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Conversion measurement with Google Double-Click
DoubleClick is a service of Google Inc. DoubleClick uses cookies to display adverts based on your interests. For this purpose, it assigns a pseudonymous identification number (ID) to your browser, which is used to check which adverts have been displayed on your browser and which adverts have been accessed. The cookies do not contain any information that could be traced back to you. The use of DoubleClick cookies enables Google and its partner websites to display adverts based on previous visits to our or other websites on the Internet. The information generated by the cookies is transmitted by Google to a server in the USA for further information and stored there. Google does not transfer any data to third parties unless this is required by law or third parties process the data on behalf of Google. Under no circumstances will Google associate your data with other data collected by Google.
By using our website, you consent to the processing of data about you by Google and the manner of data processing described above as well as the stated purpose. You can prevent the storage of cookies by changing the settings of your browser software as described above under "Cookies". You can also prevent Google from collecting the data generated by the cookies and relating to your use of the websites and from processing this data by Google by downloading and installing the browser plug-in available at the following link [insert: https://adssettings.google.com/u/0/authenticated?hl=de] under the DoubleClick deactivation extension or by deactivating the "personalised advertising" option. Alternatively, you can deactivate the DoubleClick cookies on the Digital Advertising Alliance website at the following link [insert: http://optout.aboutads.info/?c=2#!/].

Social media plugins
Plugins from social networks are integrated on some of our pages. We currently use the following plugins: Twitter, Google+, Linkedin.
The plugin establishes a direct connection between your browser and the server of the respective social network as soon as you visit our website. This provides the operator of the network with the information that you have visited our site with your IP address. Data is passed on regardless of whether you have an account with the respective network and are logged in there. If you are logged in to the network, your data collected by us will be assigned directly to your user account stored there. If you click the button and, for example, link the page, the network also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using social networks.
We use the plug-ins to offer you the opportunity to interact with social networks and other users so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 f) GDPR.
We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the respective network. Further information on this can be found in the privacy policy of the respective network.
Addresses of the respective mink or plugin providers and URL with their data protection notices:
Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy.
Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de.

Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy.
LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Integration of Google Maps
We use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis is Art. 6 para. 1 f) GDPR.
When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, further data such as your IP address is transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an analysis is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Further information on the purpose and scope of data collection and its processing by Google can be found in Google's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Google Web Fonts
We use Google Web Fonts on our website for the standardised display of fonts. The required web fonts (fonts) are loaded by your browser when you access the website server in order to display the texts and fonts correctly. Your browser establishes a connection to Google's servers, which informs Google that our website is being visited by a device with your IP address. The use of Google Web Fonts and the associated data processing serves our interest in the appealing presentation of our website. The legal basis is Art. 6 para. 1 f) GDPR.
If your browser does not support the display of web fonts, a standard font will be used instead.
Further information about Google Web Fonts can be found at https://fonts.google.com/ and in the Google privacy policy at https://policies.google.com/privacy?hl=de
Links to other websites
Our online offer may contain links to other websites. We have no influence on whether their operators comply with data protection regulations.
Status 21 July 2021