Legal Notice & Data Protection

Dr. Ebeling & Assoc. GmbH takes the protection of personal data very seriously and treats them in accordance with legal regulations. In this data protection declaration, we describe which personal data are processed by us, for what purpose and to what extent. Appropriate technical and organizational measures for data security are implemented by our internal regulations.

The responsible party within the context of the GDPR is Dr. Ebeling & Assoc. GmbH. The appointed data protection officer is:

Gabriele Müller


Phone: 0049 (0) 40/548 007 – 0

1. Processing of personal data, purpose of processing and legal basis

We collect and process personal data from the following sources:

General inquiries

We usually receive general inquiries about our services via our email address. In doing so, you usually provide your email address, your name, your postal address and your telephone number. We process and store this personal data solely for the purpose of processing and responding to your inquiry and contacting you. The legal basis for the processing of your personal data is the safeguarding of our legitimate interests, which consist particularly in being able to contact you so as to be able to respond to your request appropriately (Art. 6 Para. 1 lit. f) GDPR).

General inquiries about our services that we receive via personal company email addresses are handled in the same way.

Provision of services

When we provide services it is necessary, amongst other things, that you provide your name, email address, postal address and telephone number. We process and store this personal data exclusively in order to provide you with the ordered services within the framework of the business relationship. The legal basis for the processing of your personal data is Art. 6 Para. 1 lit. b) GDPR.

Supplier qualification and business partners

As part of our supplier qualification process for initial assessments of potential suppliers, if applicable, we collect your name, email address, postal address and telephone number, among other things. We process and store this personal data solely to assess the qualifications of potential suppliers in their ability to provide the services we have requested. The legal basis for the processing of your personal data is the safeguarding of our legitimate interests, which consist, in particular, in determining a suitable supplier Art. 6 Para. 1 lit. f) GDPR.

As soon as a business relationship exists, we process and store this personal data exclusively for the purpose of obtaining from you the services commissioned by us within the framework of the business relationship. The legal basis for the processing of your personal data is Art. 6 Para. 1 lit. b) GDPR.

With regard to business partners such as suppliers or customers, such data may also be used for the following purposes:

Job applications

All data protection information about our job applicant management can be found here: “Notice to the Applicant”.


In the following section, we would like to inform you about what data we store when you visit our website, why we do this and what you can do to protect your data.

When you visit our website, general data and information are stored in the server’s log files. The following data may be recorded:

When using this general data and information, we do not draw any conclusions about the data subject. The collection of data is technically necessary in order to correctly deliver the content requested from our website and is mandatory when using the internet. The anonymous data contained in the server log files are stored separately from all other personal data (which may have been entered elsewhere by the data subject). The processing takes place on the basis of Art. 6 Para.1 lit. b) GDPR. The technical data described above is deleted as soon as you leave the website. Something different only applies if we inform you in this data protection declaration that the data may still be required for other purposes (e.g. for an analysis). The provision of this technical data is neither legally or contractually required, it is also not necessary for the conclusion of a contract and you are not obliged to provide the personal data. If your system does not provide the required information or does not provide it in full, this may mean that our website cannot be accessed, or only partially.

Cookie Policy

The internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

We use cookies on this website for the following reasons:

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

Google Analytics

Our website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users are using the site. The information generated by the cookies about your use of our website is usually transmitted to a Google server in the USA and stored there. Since we have activated IP anonymization on our website, the IP address assigned to your computer at the relevant time will be truncated beforehand by Google within the member states of the European Union or within other contracting states as part of the Agreement on the European Economic Area. On our behalf, Google will use this information to evaluate your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data or our data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) which are sent to Google, as well as the processing of this data by Google, by downloading and installing the plugin available at the following link:

For more information about the data protection practiced by Google, please visit: We would like to point out that on our website, Google Analytics has been extended to include the code “gat._anonymizeIp ();” to ensure the anonymous collection of IP addresses (so-called IP masking).

Links to other providers

Please note that our website pages may contain links to the websites of other providers to which this data privacy statement does not extend.

2. Disclosure of your personal data

Your personal data will only be passed on internally for the purposes defined in this data privacy statement.

External disclosure of your personal data may also take place when we commission support services that require access to your personal data. External service providers support us, for example, in the technical operation and support of the website, data management and data protection management. However, we remain responsible for protecting your personal data. This transfer takes place exclusively on the basis of our legitimate interests (Art. 6 Para. 1 lit. f) GDPR) or if we commission third parties with the processing of data on the basis of a so-called “data processing contract” on the basis of Art. 28 GDPR.

Your personal data may also be disclosed to third parties if we are legally obliged to do so, e.g. by court order or to comply with legal obligations.

In the event that your personal data has to be transferred to a third country or to an internationally active organization, we would inform you of this in advance and ensure all necessary measures to maintain an appropriate level of data protection.

3. Storage duration and deletion of your personal data

In principle, your personal data will be stored by us only for as long as is necessary for the implementation of the respective defined purpose or, insofar as it goes beyond that, for the duration of the legally determined retention periods.

4. Your rights

You have the right to information about which of your personal data we store and how (Art. 15 GDPR). Furthermore, you may have the right to receive the personal data concerning you, that you have provided to us, in a structured, common and machine-readable format (data portability Art. 20 GDPR). In justified cases, you can also request the correction (Art. 16 GDPR), deletion (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) of your data.

5. Right to object

You have the right to object, in justified cases, to the processing of personal data concerning you that is carried out on the basis of Art. 6 Para. 1 lit. e) or f) GDPR. We will not process your personal data after an objection, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. 

Revocation of Consent

If you have consented to the collection and processing of your personal data, you can revoke your consent at any time with future effect.

6. Contact Person

If you have any questions or complaints regarding compliance with this data privacy statement or if you want to exercise your rights, please contact:

Dr. Ebeling & Assoc. GmbH
Isestrasse 5
20144 Hamburg

Phone: 0049 (0) 40 548 007 – 0
Fax: 0049 (0) 40 548 007 – 290

You can contact our data protection officer at:

Additionally, if you have any concerns, you can also contact the data protection authority responsible for us:

The Hamburg Commissioner for Data Protection and Freedom of Information

Ludwig-Erhard-Str. 22
20459 Hamburg

Phone: 0049 (0) 40 428 54 – 4040
Fax: 0049 (0) 40 428 54 – 4000

7. Subject to change

This data privacy statement may be amended by us at any time, e.g. in order to comply with new legal provisions, in compliance with the legal requirements. We therefore recommend that you check our website at regular intervals to find out about our current data protection policy.