We appreciate your interest in using our website. The protection of your personal data is very important to us. Below you will find all important information on the collection, processing and use of personal data that we process in accordance with the provisions of data protection law. Personal data is information that relates to an identified or identifiable natural person; a natural person is regarded as identifiable, which can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
The use of our website is possible without an indication of personal data. For the use of some functions of our website, however, deviating regulations may arise, which in this case are explained separately below.
The specification of your personal data is voluntary. However, a lack of data may limit the functionality of our services.
The legal basis of data protection can be found, inter alia. in the General Data Protection Regulation (GDPR) of the European Union and the Federal Data Protection Act (BDSG) of the Federal Republic of Germany.
The responsible body within the meaning of the GDPR, the national data protection laws and other data protection regulations is:
change2target group GmbH
Managing Director: Martin Fischer
Data protection officer:
Data sources and categories of data:
We process personally identifiable information that we receive from you when you contact us and / or when you use the features of this website and the services we provide.
Depending on the usage, the relevant personal data may be the following data categories:
- First and/or Last Name
- contact details (e.g., address, e-mail)
- Your request
- Documents submitted by you containing personal information
- Server data
1. Purposes of processing
We process the personal data for the provision and fulfillment of the services and information offered to you as part of the website as well as for establishing contact.
2. Legal Basis
Insofar as you give us consent to the processing of your personal data, this serves as the legal basis in conjunction with Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR).
When processing personal data with a contracting party which is necessary for the performance of a contract, the contract serves in conjunction with Art. 6 (1) (b) GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions. If necessary, we process your data on the basis of Art. 6 (1) (F). GDPR beyond the actual fulfillment of the contract for the protection of legitimate interests of us or a third party.
Insofar as processing of personal data is required to fulfill a legal obligation, the statutory or official obligation is in conjunction with Art. 6 (1) (c) GDPR is the legal basis.
If the data processing takes place on the basis of requirements for preserving vital interests, the legal basis results from Art. 6 (1) (d) GDPR.
In order to safeguard legitimate interests of our company or of a third party, data processing may also take place beyond the actual performance of the contract on the basis of Art. 6 (1) (f) GDPR, insofar as it is necessary and does not outweigh the interests, fundamental rights and fundamental freedoms of the person concerned.
3. Data transmission / transfer to third parties
Personal data that arise during the use of the website will not be disclosed by us to third parties. In particular, the data will not be transmitted to locations outside the EU.
Within our company, those departments and employees have access to your data, which need them for the purpose of fulfilling our services, technical tasks and legal obligations. Our service providers and processors may also receive data for these purposes if they follow our instructions under data protection law and commit to respecting data secrecy.
Disclosure to third parties will take place in exceptional cases only and only on the basis of your explicit consent.
4. Duration of Storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. If the processing purpose ceases or a legal storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the characteristics (for example IP addresses) of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. In the case of collecting the data for providing the website, this is the case when the respective session is completed.
5. Your rights as affected person
As affected person, you have the right to request information or correction of the stored personal data at any time or to revoke your consent. In addition, you have the right to delete or restrict the processing or an objection to the processing. It is also referred to the right of data portability and the possibility of complaining to a supervisory authority.
Corresponding requests by e-mail to us or our data protection officer under the aforementioned contact details.
Below you find your rights in detail:
a) Right of withdrawal, right to object
You have the right to revoke your consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You also have the right, at any time, to object to the processing of personal data concerning you pursuant to Article 6 (1) (f) GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions.
b) Right of information
You may request a statement as to whether personal information concerning you is processed by us. In the case of the processing of your personal data, you may in particular request information on the categories of data, source of the data, purposes of processing, consignees, any transfers to third countries (including guarantees pursuant to Art. 46 GDPR), planned duration or criteria for the duration of the processing and the Existence of automated decision-making. The same applies to profiling according to Art. 22 (1), 4 DSGVO (possibly with information about the logic involved as well as the scope and effects).
c) Right to rectification
You have the right to rectification and / or completion if the personal data processed is incorrect or incomplete.
d) Right of deletion
You have the right to delete the personal data concerning you, in particular if this data is no longer necessary for processing purposes or if you have revoked your consent or if it is lacking any other legal basis or if you object to the processing and no legitimate reasons for the processing acc. Article 21 paragraph 2 GDPR exist or the data were processed unlawfully or the deletion of the data to fulfill a legal obligation under Union or national law is required or the data in relation to offered information society services were collected in accordance with Article 8 paragraph 1 GDPR.
Deletion rights, amongst others, may fail to exist if and to the extent that the processing is necessary to fulfill a legal obligation, perform public interest tasks or assert, exercise or defend legal claims.
e) Right to restriction of processing
You may limit the processing of your personal information, including but not limited to: if the processing is unlawful, you deny the accuracy, you have objected, the controller no longer needs the data for processing purposes, but you need it for law enforcement, or you will be restricted in case of unlawful processing instead of deletion.
f) Data transferability
Amongst others you have the right to receive personal data concerning you in a structured, common and machine-readable format and to communicate it to another person responsible, provided that the processing is based on a consent or a contract and the processing is carried out by automated means. Hereby you have the right that the data are transmitted directly from one person responsible to another person responsible, as far as this is technically feasible and does not affect the rights of third parties. The right to data portability does not apply to processing for the exercise of a public interest mission in the exercise of official authority.
g) Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against GDPR.
6. Server Data
For technical operation, data transmitted via your Internet browser is recorded (so-called server log files). These include: - Browser type and version - Operating system used - web page from which you are visiting us (referrer URL) - web page you visit - date and time of your access - Your Internet Protocol (IP) address. The data transmitted in this way is stored anonymously and separately from personal data.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems.
This also gives rise to our legitimate interest in data processing as the legal basis in accordance with Article 6 (1) (f) GDPR.
The legal basis for the processing of personal data using technically necessary cookies is our legitimate interest in accordance with Art.6 (1) (f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is the required consent of the user in conjunction with Art. 6 (1) (a) GDPR
8. Contact Possibility
We offer you the opportunity to contact us by e-mail and / or via a contact form. The data categories specified in the contact form (name, address, e-mail, telephone) are processed. At the time of sending the message, the user's IP address, date and time are also processed.
For processing of data in the context of the sending process your consent is obtained and referred to this privacy statement.
Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.
The processing of the personal data from the input screen only serves to process the contact. In the case of contacting by e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The legal basis for processing of the data when using the contact form is your consent in conjunction with Art.6 (1) (a) GDPR. The legal basis for processing of the data transmitted in the course of sending an e-mail is Article 6 (1) (f) GDPR. If the e-mail contact aims to conclude a contract, the legal basis results from Art. 6 (1) (b) GDPR.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective communication with the user has ended. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.
As far as we offer you the possibility to subscribe to a newsletter in the context of our services, the data from the input screen (name, e-mail) will be transmitted to us when registering for the newsletter.
The newsletter and the associated data processing serve the purpose of informing you regularly about our offers.
By registering for our newsletter, we will save your IP address and the date and time of your registration. This is in the event that a third party abuses your e-mail address and subscribes to our newsletter without your knowledge, as a protection on our part.
We will check the e-mail address you entered to verify that you are the owner of the specified e-mail address or whose owner is authorized to receive the newsletter. Further data will not be collected on our part. The data collected in this way will be used exclusively to obtain our newsletter. We will not pass on your data to any third party. A comparison of the data collected with data, which may be collected by other components of our site, is also not done.
The legal basis for processing and sending the newsletter is your consent in conjunction with Article 6 (1) (a) GDPR, which you can revoke at any time, including by canceling the subscription. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.
10. Use of Google Analytics with anonymization function
We use Google Analytics (with anonymization function) on our website. Google Analytics is a web analytics service. Web analysis is the capturing, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website an affected person has come to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of stay a subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising.
The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
We use the addition "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this addendum, the IP address of the Internet access of the data subject will be shortened and anonymized by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website.
Legal basis for the data processing is our legitimate interest acc. to Art.6 (1) (f) GDPR.
Google Analytics uses a cookie on the information technology system of the person concerned. By using this cookie Google is enabled to analyze the usage of our website. Each time one of the pages of this website is accessed by the controller and a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically initiated by the respective Google Analytics component To submit data to Google for online analysis purposes. As part of this technical process, Google will be aware of personal data, such as the IP address of the person concerned, which serve, among other things, Google to track the origin of the visitors and clicks, and subsequently make commission settlements possible.
The cookie stores personally identifiable information, such as access time, the location from which access was made and the frequency of visits to our website. Each time you visit our website, your personal information, including the IP address of the Internet connection you use, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
You can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.