This Privacy Policy contains information about the nature, scope and purpose of our use of your personal data with regard to the website www.tectuconsult.com or connected sub-websites (“Website”) and your respective rights. You can save and print this privacy policy at any time.
The data controller (hereinafter referred to as “tectuconsult c/o tectumedia GmbH” or “we”) in the sense of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:
tectumedida GmbH (for contact details see imprint)
Collection and Use of Personal Data
We collect personal data if you use the Website or voluntarily transfer them to us by contacting us, for example via a subscription form or email. We will only collect your personal data with your consent or as permissible under applicable data protection law (e. g. the EU General Data Protection Regulation (“GDPR”) and the German Data Protection Act (Bundesdatenschutzgesetz), “BDSG”). The type of data that will be collected in the contact form is set out on our Website in the respective contact form. Data transmitted through the contact form will be stored on servers located in Germany. We use the data you provide to us to process your inquiries. Unless specifically stated, we store personal data only as long as necessary to fulfill the purposes pursued.
Processing of Data when Browsing the Website
Every time the Website is accessed by a visitor, this Website collects general data and information in connection with your visit. This general data and information is stored in the log files of the server and concerns the following data:
browser types and versions used
the operating system used by the accessing system
the webpage from which an accessing system arrived on this Website (known as a referrer)
sub-websites that are accessed on this Website via an accessing system
date and time of an access to the Website
IP address
internet service provider of the accessing system
other similar data and information aimed at averting danger in the event of attacks directed at our IT systems
When processing this usage data, we do not draw any conclusions as to the visitor. We need this data in order to correctly deliver the content of the Website, optimize the content of and the advertising for this Website, ensure the permanent functionality of our IT systems and the technology underlying this Website as well as provide to authorities the information necessary for purposes of conducting e. g. criminal proceedings in the event of a cyberattack.
The legal basis for this processing activity is Art. 6 (1) (f) GDPR. This data in anonymized form is analyzed by us statistically and with the aim of increasing data protection and data security. The anonymous data of the server log files is stored separately from all personal data provided by a visitor.
Investor Relations subscription
If you register for our Investor Relations updates, we will use your email address to regularly inform you about tectuconsult c/o tectumedia GmbH and its companies, including but not limited to the company newsletter, corporate news, investor relations related information and invitations to events of tectuconsult c/o tectumedia GmbH and its companies. Mandatory for receiving this information is the following data: first and last name, address including street name and number, postcode, city and country, email address, job title and company. The following data can be added: voluntarily title (Mrs. or Mr.), phone number, and email address.
To ensure that you are properly registered, that is, to prevent unauthorized subscriptions on behalf of third parties, we will use a double-opt-in process and send you a confirmation email after your first Investor Relations subscription; this email will request you to confirm the subscription.
The legal basis for sending Investor Relations subscriptions is your consent in accordance with Art. 6 (1) (a) GDPR. In connection with your registration, we also store your IP address plus the date and time of registration and confirmation, so that we can trace and prove the registration at a later date. The legal basis for this storage is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR, where the legitimate interest is in being able to prove the registration. We will store your email address for sending you the regular updates by email until you unsubscribe or we stop sending these updates to you. The data collected by us during the subscription will be used exclusively for promotional and informational purposes by means of the company updates.
You may object at any time via the cancellation link in the provided emails or by sending a message to our contact address indicated above without incurring any costs. After cancellation, your email address will be removed from our distribution list, as far as you have not expressly consented to a further use of your data or we reserve the right to further data usage, which is permitted by law and about which we inform you in this Privacy Policy.
Processing of Applicants’ Data
We collect and process personal information that an applicant provides via an online recruitment platform or by email/mail directly to us. Such personal information may include data on the applicant (name, address, contact information), the applicant’s qualification and professional background as well as other data provided by the applicant (“Applicants’ Data”). We will use Applicants’ Data for purposes of an application process, a respective resulting working (or similar) contract and/or for processing in our talent pool.
Basis for the processing of Applicants’ Data for the purpose of concluding or performing contracts is Art. 88 GDPR, § 26 BDSG or Art. 6 (1) (b) GDPR. For the duration of an application process and for evidentiary purposes until deletion processing of Applicants’ Data may also be based on our legitimate interest according to Art. 6 (1) (f) GDPR. Further, we may process Applicants’ Data based on Art. 6 (1) (c) GDPR if required by law or for the purpose of defending against legal claims according to Art. 6 (1) (f) GDPR. In addition, any processing of Applicants’ Data may be based on an applicant’s consent according to Art. 6 (1) (a) GDPR.
Applicants’ Data will be deleted within six months after a removal, withdrawal, or rejection of an applicant in a recruiting process. If an applicant is hired, Applicants’ Data will be electronically stored for approximately twelve months and further stored in printed form in the applicant’s personal file for the duration of the employment relationship based on Art. 88 GDPR, § 26 BDSG and thereafter.
If an applicant grants the respective consent, we will file Applicants’ Data in our talent pool (usually for up to 24-month periods) based on Art. 6 (1) (a) GDPR. Applicants may revoke their consent at any time by sending an email to info@tectuconsult.com or through the means provided by our respective recruiting platform – upon revocation, the Applicants’ Data will be deleted within one month. Such a revocation of consent during an ongoing application process automatically constitutes a withdrawal of an application.
We may forward Applicants’ Data to a subsidiary or to another company based on the applicant’s prior consent according to Art. 6 (1) (a) GDPR. Applicants’ Data might also be processed by third party service providers in accordance with the GDPR. In such cases we remain responsible for Applicants’ Data and ensure the processing by third party providers by way of data processing agreements according to Art. 28 GDPR or other legal means. Recipients of Applicants’ Data in such cases are for example the respective software or recruitment service providers.
General Use of Cookies
In order to provide this Website and to improve its performance, we use cookies. Cookies are text files that are stored on your device. Cookies remain on your device and allow us to recognize your browser on the next visit (persistent cookies). You can set your browser to inform you about the cookie setting and disable cookies individually, or to disable cookies for specific cases or in general. Some cookies are necessary for the functions of the Website. If the usage of these cookies is not enabled on your device or in your browser, the functionality of our Website may be restricted.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, duration of visit, operating systems used, and the user’s origin. These data are summarized in a user ID and assigned to the respective device of the website visitor. Furthermore, Google Analytics enables us to record your mouse and scroll movements and clicks. Google Analytics also uses various modeling approaches to supplement the collected data sets and applies machine learning technologies in data analysis. Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.
The use of this service is based on your consent under Art. 6(1)(a) DSGVO and § 25(1) TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: Google MCCS. The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to these data protection standards. More information can be found at EU-US Data Privacy Framework.
IP Anonymization: The IP anonymization feature of Google Analytics is activated on this website. This means that your IP address is shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Browser Plugin: You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: Google Analytics Opt-out.
More information on how Google Analytics handles user data can be found in Google’s privacy policy: Google Analytics Privacy Policy.
Google Signals: We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, YouTube history, and demographic data (visitor data). These data can be used for personalized advertising with the help of Google Signals. If you have a Google account, the visitor data from Google Signals are linked to your Google account and used for personalized advertising messages. The data are also used to create anonymized statistics about user behavior on our website.
Data Processing Agreement: We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Fonts
This site uses Google Fonts for a consistent display of fonts provided by Google. When you visit a page, your browser loads the required fonts into its cache to correctly display text and fonts. To do this, your browser must connect to Google’s servers, making Google aware that your IP address accessed this website. The use of Google Fonts is based on Art. 6(1)(f) DSGVO, as the website operator has a legitimate interest in the uniform presentation of the website’s typeface. If consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25(1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per TTDSG. Consent can be revoked at any time. If your browser does not support Google Fonts, a standard font from your computer will be used. More information about Google Fonts can be found at Google Fonts FAQ and in Google’s privacy policy: Google Privacy Policy. The company is certified under the “EU-US Data Privacy Framework” (DPF), ensuring compliance with European data protection standards for data processing in the USA. More information can be found at EU-US Data Privacy Framework.
Font Awesome
This site uses Font Awesome for a consistent display of fonts and symbols. Provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA. When you visit a page, your browser loads the required fonts into its cache to correctly display text, fonts, and symbols. To do this, your browser must connect to Font Awesome’s servers, making Font Awesome aware that your IP address accessed this website. The use of Font Awesome is based on Art. 6(1)(f) DSGVO, as we have a legitimate interest in the uniform presentation of the website’s typeface. If consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25(1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per TTDSG. Consent can be revoked at any time. If your browser does not support Font Awesome, a standard font from your computer will be used. More information about Font Awesome can be found in their privacy policy: Font Awesome Privacy Policy.
Google Maps
This site uses the Google Maps service. Provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use Google Maps, your IP address must be stored. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. When Google Maps is activated, Google may use Google Fonts for a consistent display of fonts. When you access Google Maps, your browser loads the required web fonts into its cache to correctly display text and fonts. The use of Google Maps is in the interest of an appealing presentation of our online offers and easy findability of the locations specified on the website. This constitutes a legitimate interest under Art. 6(1)(f) DSGVO. If consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25(1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: Google GDPR Controller Terms and Google SCCs. More information on handling user data can be found in Google’s privacy policy: Google Privacy Policy. The company is certified under the “EU-US Data Privacy Framework” (DPF), ensuring compliance with European data protection standards for data processing in the USA. More information can be found at EU-US Data Privacy Framework.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. Provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to check whether the data entered on this website (e.g., in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information (e.g., IP address, time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. The storage and analysis of the data are based on Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and SPAM. If consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25(1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per TTDSG. Consent can be revoked at any time. More information about Google reCAPTCHA and Google’s privacy policy and terms of use can be found at the following links: Google Privacy Policy and Google Terms of Service. The company is certified under the “EU-US Data Privacy Framework” (DPF), ensuring compliance with European data protection standards for data processing in the USA. More information can be found at EU-US Data Privacy Framework.
Website Security
We use and constantly improve technical and organizational security measures to protect the information provided to us and prevent personal data from being accidentally or intentionally altered, deleted, or accessed by unauthorized persons.
Rights of the data subject
If your personal data is processed, you are considered a data subject within the meaning of the GDPR and you have the following rights against tectuconsult c/o tectumedia GmbH as data controller:
Right of Access
Right to information according to Art. 15 GDPR: You have the right to obtain information about the personal data processed by us, the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data was or are being disclosed, the planned period of storage or the criteria for determining the duration of storage, the right of correction, deletion, limitation of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if they were not collected by us, the existence of automated decision-making including profiling and possibly significant information on the logic applied and the scope and intended impact of such processing, as well as your right to be informed of what guarantees according to Art. 46 GDPR exist in case of redirection of data in third countries.
Right to Correction
Right to correction according to Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and/or completion of incomplete data.
Right to Deletion
Right to deletion according to Art. 17 DSGVO: You have the right to demand the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. This right does not apply if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the pursuit, exercise or defense of rights.
Right to Restriction of Processing
Right to restriction of processing according to Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data provided that the correctness of your data is verified, if you refuse to delete your data due to inadmissible data processing and instead restrict the processing of your data, if you need your data for the assertion, exercise, or defense of legal rights, after we no longer require these data for their purpose, or if you have objected for reasons of your particular situation, as long as it is not ascertained, whether our legitimate reasons prevail.
Information to Third Parties
Right to information in accordance with Art. 19 GDPR: If you exercise the right to correct, delete, or limit the processing towards the responsible contact, this person is obliged to inform all recipients who have been disclosed personal data about the correction, deletion, or limitation of processing of the data, unless this is impossible or requires a disproportionate effort. You have the right to be informed about the respective recipients.
Right to Data Portability
Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data provided to us in a structured, common, and machine-readable format or to request transmission to another responsible person, insofar as this is technically feasible.
Right to Withdraw the Declaration of Consent under Data-Processing Law
Right to revoke granted consent according to Art. 7 (3) GDPR: You have the right to revoke consent provided in the processing of data at any time with effect for the future. In the case of revocation, we will delete the respective data immediately, as far as further processing cannot be legally justified for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Right to file a Complaint with a Supervisory Authority
Right to file a complaint according to Art. 77 GDPR: If you consider the processing of your personal data a violation of the GDPR, you have the right to file a complaint to a supervisory authority, in particular in the member state of your location, your place of work, or the place of alleged infringement.
Right to Objection
If you have given your consent (Art. 6 (1) (a) GDPR) to the processing of your data, you can withdraw your consent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have provided it to us.
If we base the processing of your personal data on the weighing of interests (Art. 6 (1) (f) GDPR), you may object to the processing at any time. In the event of your justified objection, we will either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue (possibly limited) processing.
You can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your objection under the above-mentioned contact details.
Contact
If you want to contact tectuconsult or ask us any question with regard to your personal data, please contact us directly via the details provided in the imprint or using the contact link.