Legal Notice & Data Protection
Dr. Ebeling & Assoc. GmbH takes the protection of personal data very seriously and treats them in accordance with legal regulations. In this data protection declaration, we describe which personal data are processed by us, for what purpose and to what extent. Appropriate technical and organizational measures for data security are implemented by our internal regulations.
The responsible party within the context of the GDPR is Dr. Ebeling & Assoc. GmbH. The appointed data protection officer is:
Phone: 0049 (0) 40/548 007 – 0
1. Processing of personal data, purpose of processing and legal basis
We collect and process personal data from the following sources:
- General inquiries and requests about our services
- Provision of services
- Supplier qualification and business partners
- Employer / employee relationships
- Job applications
We usually receive general inquiries about our services via our email@example.com email address. In doing so, you usually provide your email address, your name, your postal address and your telephone number. We process and store this personal data solely for the purpose of processing and responding to your inquiry and contacting you. The legal basis for the processing of your personal data is the safeguarding of our legitimate interests, which consist particularly in being able to contact you so as to be able to respond to your request appropriately (Art. 6 Para. 1 lit. f) GDPR).
General inquiries about our services that we receive via personal company email addresses are handled in the same way.
Provision of services
When we provide services it is necessary, amongst other things, that you provide your name, email address, postal address and telephone number. We process and store this personal data exclusively in order to provide you with the ordered services within the framework of the business relationship. The legal basis for the processing of your personal data is Art. 6 Para. 1 lit. b) GDPR.
Supplier qualification and business partners
As part of our supplier qualification process for initial assessments of potential suppliers, if applicable, we collect your name, email address, postal address and telephone number, among other things. We process and store this personal data solely to assess the qualifications of potential suppliers in their ability to provide the services we have requested. The legal basis for the processing of your personal data is the safeguarding of our legitimate interests, which consist, in particular, in determining a suitable supplier Art. 6 Para. 1 lit. f) GDPR.
As soon as a business relationship exists, we process and store this personal data exclusively for the purpose of obtaining from you the services commissioned by us within the framework of the business relationship. The legal basis for the processing of your personal data is Art. 6 Para. 1 lit. b) GDPR.
With regard to business partners such as suppliers or customers, such data may also be used for the following purposes:
- Execution of payments, invoicing and contract management
- Contractually defined compliance checks of our business partners
- Contractually defined controls (e.g. audits)
All data protection information about our job applicant management can be found here: “Notice to the Applicant”.
In the following section, we would like to inform you about what data we store when you visit our website, why we do this and what you can do to protect your data.
When you visit our website, general data and information are stored in the server’s log files. The following data may be recorded:
- Information about the browser type and the version used
- The user’s operating system
- The user’s internet service provider
- The user’s IP address
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites that are accessed by the user’s system via our website
When using this general data and information, we do not draw any conclusions about the data subject. The collection of data is technically necessary in order to correctly deliver the content requested from our website and is mandatory when using the internet. The anonymous data contained in the server log files are stored separately from all other personal data (which may have been entered elsewhere by the data subject). The processing takes place on the basis of Art. 6 Para.1 lit. b) GDPR. The technical data described above is deleted as soon as you leave the website. Something different only applies if we inform you in this data protection declaration that the data may still be required for other purposes (e.g. for an analysis). The provision of this technical data is neither legally or contractually required, it is also not necessary for the conclusion of a contract and you are not obliged to provide the personal data. If your system does not provide the required information or does not provide it in full, this may mean that our website cannot be accessed, or only partially.
The internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
- To enable an anonymous analysis of your use of the website using Google Analytics (see the following section “Google Analytics”)
- In order to save your settings on this website, this currently only affects whether you have consented to the analysis by Google Analytics or not.
- To save your selected website language.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.
You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) which are sent to Google, as well as the processing of this data by Google, by downloading and installing the plugin available at the following link: https://tools.google.com/dlpage/gaoptout
For more information about the data protection practiced by Google, please visit: https://policies.google.com/privacy?hl=en-US. We would like to point out that on our website, Google Analytics has been extended to include the code “gat._anonymizeIp ();” to ensure the anonymous collection of IP addresses (so-called IP masking).
Links to other providers
Please note that our website pages may contain links to the websites of other providers to which this data privacy statement does not extend.
2. Disclosure of your personal data
Your personal data will only be passed on internally for the purposes defined in this data privacy statement.
External disclosure of your personal data may also take place when we commission support services that require access to your personal data. External service providers support us, for example, in the technical operation and support of the website, data management and data protection management. However, we remain responsible for protecting your personal data. This transfer takes place exclusively on the basis of our legitimate interests (Art. 6 Para. 1 lit. f) GDPR) or if we commission third parties with the processing of data on the basis of a so-called “data processing contract” on the basis of Art. 28 GDPR.
Your personal data may also be disclosed to third parties if we are legally obliged to do so, e.g. by court order or to comply with legal obligations.
In the event that your personal data has to be transferred to a third country or to an internationally active organization, we would inform you of this in advance and ensure all necessary measures to maintain an appropriate level of data protection.
3. Storage duration and deletion of your personal data
In principle, your personal data will be stored by us only for as long as is necessary for the implementation of the respective defined purpose or, insofar as it goes beyond that, for the duration of the legally determined retention periods.
4. Your rights
You have the right to information about which of your personal data we store and how (Art. 15 GDPR). Furthermore, you may have the right to receive the personal data concerning you, that you have provided to us, in a structured, common and machine-readable format (data portability Art. 20 GDPR). In justified cases, you can also request the correction (Art. 16 GDPR), deletion (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) of your data.
5. Right to object
You have the right to object, in justified cases, to the processing of personal data concerning you that is carried out on the basis of Art. 6 Para. 1 lit. e) or f) GDPR. We will not process your personal data after an objection, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Revocation of Consent
If you have consented to the collection and processing of your personal data, you can revoke your consent at any time with future effect.
6. Contact Person
If you have any questions or complaints regarding compliance with this data privacy statement or if you want to exercise your rights, please contact:
Dr. Ebeling & Assoc. GmbH
Phone: 0049 (0) 40 548 007 – 0
Fax: 0049 (0) 40 548 007 – 290
You can contact our data protection officer at: firstname.lastname@example.org.
Additionally, if you have any concerns, you can also contact the data protection authority responsible for us:
The Hamburg Commissioner for Data Protection and Freedom of Information
Phone: 0049 (0) 40 428 54 – 4040
Fax: 0049 (0) 40 428 54 – 4000
7. Subject to change
This data privacy statement may be amended by us at any time, e.g. in order to comply with new legal provisions, in compliance with the legal requirements. We therefore recommend that you check our website at regular intervals to find out about our current data protection policy.