Privacy Statement

Thank you for visiting our website www.dorucon.de and for your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy statement is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practices are in accordance with the legal regulations of the EU’s General Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfill the information obligations resulting from the DSGVO. These can be found, for example, in Art. 13 and Art. 14 et seq. DSGVO.

Person responsible

The person responsible within the meaning of Art. 4 No. 7 DSGVO is the person who alone or jointly with others decides on the purposes and means of the processing of personal data.

With regard to our website, the responsible party is:

DORUCON – DR. RUPP CONSULTING GmbH
Saargemünder Street 39
66119 Saarbrücken
Germany
E-Mail: [email protected]
Phone: +49 68197689810
Fax: +49 32 221739475

Contact details of the data protection officer

We have appointed a data protection officer in accordance with Art. 37 DSGVO. You can reach our data protection officer under the following contact details:

Dr. Sebastian Kraska
Marienplatz 2
80331 Munich
Germany
E-mail: [email protected]
Website: http://www.iitr.de/

Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the respective retrieving device (e.g. computer, cell phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) that were accessed on our website;
(7) Websites from which the user’s system accessed our Internet site (referrer tracking);
(8) Message as to whether the retrieval was successful;
(9) Volume of data transferred

This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual site visitors cannot be identified.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.

Purpose of the data processing

The temporary (automated) storage of data is necessary for the course of a website visit to enable delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the retrieving computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.

Duration of storage

The deletion of the aforementioned technical data takes place as soon as they are no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Possibility of objection and deletion

You may object to the processing at any time in accordance with Art. 21 DSGVO and request deletion of data in accordance with Art. 17 DSGVO. You can find out which rights you are entitled to and how to assert them in the lower section of this privacy policy.

Special functions of the website

Our site offers you various functions, during the use of which personal data is collected, processed and stored by us. Below we explain what happens with this data:

Evaluation function

What personal data is collected and to what extent is it processed?
We will process the data you enter in the fields of our evaluation form to fulfill the purpose stated below.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behavior).

Purpose of data processing

The purpose of the data processing is the acceptance and publication of your rating on our website and – if you explicitly agree to this – also on the internet platforms of our rating service providers.

Duration of storage

Your rating will be stored and published for an unlimited period of time. We reserve the right to delete it without giving reasons and without prior or subsequent information.

Possibility of revocation and deletion

You can revoke your consent to the publication of the rating at any time in accordance with Art. 7 (3) DSGVO. However, the processing carried out up to the time of the revocation remains unaffected by this. With regard to further rights, we refer to the overview at the end of this privacy policy.

Necessity of providing personal data

The information provided in the evaluation function is voluntary and is neither contractually nor legally required. In addition, the information is not required for the conclusion of a contract. If you do not fill out the existing mandatory fields or do not fill them out completely, the rating you requested cannot be published on our platform.

Contact form(s)

What personal data is collected and to what extent is it processed?

We will process the data you have entered in our contact forms to fulfill the purpose stated below.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behavior).

Purpose of data processing

We will use the data recorded via our contact form or via our contact forms only for processing the specific contact request received through the contact form.

Duration of storage

After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.

Revocation and deletion options

The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.

Necessity of providing personal data

The use of the contact forms is on a voluntary basis and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our site. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required fields of the contact form with content, you will either not be able to send the request or we will unfortunately not be able to process your request.

Newsletter registration form

What personal data is collected and to what extent is it processed?

By registering for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behavior).

Purpose of data processing

The data recorded in the registration mask of our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and our news. After registration, we will send you a confirmation e-mail containing a link that you must click to complete the registration for our newsletter (double opt-in).

Duration of storage

Our newsletter can be unsubscribed at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted immediately after unsubscribing from us. Likewise, your data will be deleted by us immediately in the event that your subscription is not completed. We reserve the right to delete without giving reasons and without prior or subsequent information.

Possibility of revocation and removal

You can revoke your consent at any time in accordance with Art. 7 (3) DSGVO. However, the processing carried out up to the time of the revocation remains unaffected by this. With regard to further rights, we refer to the overview at the end of this privacy policy.

Necessity of providing personal data

If you wish to use our newsletter, you must fill in the fields marked as mandatory and confirm the e-mail address by clicking on the double opt-in link. The information provided for newsletter registration is neither necessary to enter into a contract with us nor legally binding. They are used exclusively for sending our newsletter. If you do not fill in the necessary information, we will not be able to provide you with our newsletter service.

Statistical analysis of visits to this website – Webtracker

We collect, process and store the following data when you visit this website or individual files on the website: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and report on the success of the access (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our Internet offering and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

Custom Audiences

We use the Custom Audiences service of the company Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, 2 Dublin, Ireland, e-mail: [email protected], website: http://facebook.com/ on our website. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.

The legal basis for the transmission of personal data is your consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a DSGVO, which you have given on our website.

Facebook Custom Audience is an advertising tool of the company Facebook, with which targeted advertising campaigns can be made to page visitors.

You can revoke your consent at any time. You can find more information about revoking your consent either with the consent itself or at the end of this privacy policy.

For more information on the handling of transferred data, please refer to the provider’s privacy policy at https://www.facebook.com/about/privacy.

The provider additionally offers an opt-out option at https://www.facebook.com/about/privacy.

Facebook Connect

We use the Facebook Connect service of the company Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, 2 Dublin, Ireland, e-mail: [email protected], website: http://www.facebook.com/ on our site. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.

The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, which you have given on our website.

Via Facebook Connect, users can use their Facebook profile for simplified registration with other web services.

You can revoke your consent at any time. You can find more information about revoking your consent either with the consent itself or at the end of this privacy policy.

For more information on the handling of transmitted data, please refer to the provider’s privacy policy at https://www.facebook.com/about/privacy.

The provider additionally offers an opt-out option at https://www.facebook.com/about/privacy.

Google Ads

We use the Google Ads service of the company Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: [email protected], website: http://www.google.com/ on our site. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.

The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, which you have given on our website.

Google Ads is an advertising system with which we place ads that are primarily based on the search results when using the company’s own services.

As part of the order processing, personal data may also be transmitted to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.

You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.

For more information on the handling of transferred data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.

The provider additionally offers an opt-out option at https://policies.google.com/privacy.

Google Tag Manager

What personal data is collected and to what extent is it processed?

On our site, we use the service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager). Google Tag Manager provides a technical platform for executing and bundling other web services and web tracking programs by means of so-called “tags”. In this context, Google Tag Manager stores cookies on your computer and analyzes your surfing behavior (so-called “tracking”), insofar as web tracking tools are executed by means of Google Tag Manager. This data sent by individual tags embedded in Google Tag Manager is aggregated, stored and processed by Google Tag Manager under a unified user interface. All integrated “tags” are listed separately again in this privacy policy. You can find more information on the data protection of the tools integrated in Google Tag Manager in the respective section of this data protection declaration. In the course of using our website with activated integration of tags from Google Tag Manager, data, such as in particular your IP address and your user activities, are transmitted to servers of the company Google Ireland Limited. With regard to the web services integrated by means of Google Tag Manager, the regulations in the respective section of this data protection declaration apply. The tracking tools used in Google Tag Manager ensure through IP anonymization of the source code that the IP address is anonymized by Google Tag Manager before transmission. In doing so, Google Tag Manager is only enabled to collect IP addresses anonymously (so-called IP masking).

Legal basis for the processing of personal data

The legal basis for the data processing is, in accordance with Art. 6 (1) lit. a DSGVO, your consent in our information banner regarding the use of cookies and web tracking (consent through clear confirming action or behavior).

Purpose of data processing

On our behalf, Google will use the information obtained by means of Google Tag Manager to evaluate your visit to this website, to compile reports on website activities and to provide us with further services related to website and internet usage.

Duration of storage

Google will store the data relevant to the function of Google Tag Manager for as long as is necessary to fulfill the booked web service. The data collection and storage is anonymized. If there is a reference to a person, the data will be deleted immediately, as long as it is not subject to any legal storage obligations. In any case, the data will be deleted after expiration of the retention period.

Possibility of objection and deletion

You can prevent the collection and forwarding of personal data to Google (esp. your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the “Do Not Track” setting of your browser. You can also prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. Google’s security and privacy policies can be found at https://policies.google.com/privacy.

Google Analytics

Scope of the processing of personal data

On our site, we use the web tracking service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). Within the scope of web tracking, Google-Analytics uses cookies that are stored on your computer and enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis based on the tracking service of Google Analytics in order to constantly optimize our website and make it more available. In the course of using our website, data, such as in particular your IP address and your user activities, are transmitted to servers of the company Google Ireland Limited. We carry out this analysis on the basis of Google’s tracking service in order to constantly optimize our Internet offering and make it more available. Likewise, we need the web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the web tracker enables us to take effective countermeasures and protect the personal data processed by us from these cyber attacks. By enabling IP anonymization within the Google Analytics tracking code of this website, your IP address will be anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been extended by the operator gat._anonymizeIp(); to enable only anonymized collection of IP addresses (so-called IP masking).

Legal basis for the processing of personal data

Purpose of data processing

On our behalf, Google will use this information for the purpose of evaluating your visit to this website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. Likewise, we need the web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the web tracker enables us to take effective countermeasures and protect the personal data processed by us from these cyber attacks.

Duration of storage

Google will store the data relevant to the provision of web tracking for as long as it is necessary to fulfill the booked web service. The data collection and storage is anonymized. If there is a reference to a person, the data will be deleted immediately, provided that it is not subject to any legal obligations to retain data. In any case, the data will be deleted after expiration of the retention period.

Possibilities of objection and deletion

You can prevent the collection and forwarding of personal data to Google (esp. your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser or activating the “Do Not Track” setting of your browser. You can also prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Google’s security and privacy policies can be found at https://policies.google.com/privacy?hl=de.

Hotjar

We use the service Hotjar of the company Hotjar Ltd., 20 Bisazza Street, 1640 Sliema, Malta on our website. The transmission and processing of personal data takes place exclusively on servers in the European Union. The legal basis for the transmission of personal data is your consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a DSGVO, which you have given on our website.Through Hotjar, we conduct a behavioral analysis of the use of our websites and evaluate feedback via tools such as heatmaps, session recordings and surveys.You can revoke your consent at any time. You can find more information about revoking your consent either with the consent itself or at the end of this privacy policy.For more information about the handling of transferred data, please see the provider’s privacy policy at https://www.hotjar.com/privacy.

Microsoft Advertising

We use on our site the service Microsoft Advertising of the company Microsoft Corporation, One Microsoft Way, 98052 Redmond, United States, e-mail: [email protected], website: https://www.microsoft.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the DSGVO cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 (1) lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO that you have given on our website.The Microsoft Advertising service as part of Microsoft Advertising is a service that enables pay-per-click advertising on both Bing and Yahoo! search engines and collects data on our site.You can revoke your consent at any time. You can find more information about revoking your consent either with the consent itself or at the end of this privacy statement.For more information about the handling of transferred data, please see the provider’s privacy statement at https://privacy.microsoft.com/de-de/privacystatement.

Microsoft Clarity

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, so-called web services. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plugin or disabling the execution of scripts in your browser. This may result in functional restrictions on Internet pages that you visit.

We use the following external web services:

Bing

We use on our site the service Bing of the company Microsoft Corporation, One Microsoft Way, 98052 Redmond, United States, e-mail: [email protected], website: https://www.microsoft.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.Legal basis for the transfer of personal data is your consent pursuant to. Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, which you have made on our website.The service Bing serves a faster search of our site or the Internet and links search engine content with our website.Your consent can be revoked at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.For more information on the handling of the transferred data, please refer to the provider’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

Doubleclick

We use on our site the service Doubleclick of the company Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: [email protected], website: http://www.google.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the DSGVO cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 (1) lit. a DSGVO or Art. 9 (2) lit. a DSGVO, which you have given on our website.DoubleClick is a service from Google, through which digital advertising is offered and delivered on the Internet. It is used to enable us to display individual advertising to our site visitors.As part of the order processing, personal data may also be transmitted to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.For more information on the handling of transferred data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.

Google APIs

We use on our site the Google APIs service of the company Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: [email protected], website: http://www.google.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the DSGVO cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, which you have made on our website.We use Google APIs to be able to reload further services from Google on the website. Google Apis is a collection of interfaces for communication between the various Google services used on your website.For processing itself, the service or we collect the following data: IP addressAs part of the order processing, there may also be a transfer of personal data to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.For more information on the handling of transferred data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.

Google Fonts

We use on our site the service Google Fonts of the company Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: [email protected], website: http://www.google.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the DSGVO cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 (1) lit. a DSGVO or Art. 9 (2) lit. a DSGVO, which you have given on our website. Via the Google Fonts service, fonts are reloaded on our site in order to be able to display the site to you in a visually better version.As part of the order processing, there may also be a transmission of personal data to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.For more information on the handling of transferred data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.

Gstatic

We use on our site the service Gstatic of the company Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: [email protected], website: http://www.google.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the DSGVO cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 (1) lit. a DSGVO or Art. 9 (2) lit. a DSGVO, which you have given on our website. Gstatic is a service used by Google to retrieve static content in order to reduce bandwidth usage and to preload required catalog files.As part of the order processing, there may also be a transfer of personal data to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.For more information on the handling of transferred data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.

Legal text snippet and modules

We use on our site the service legal text snippet and modules of the company Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, e-mail: [email protected], website: http://www.website-check.de/. The transmission and processing of personal data takes place exclusively on servers in the European Union.legal basis for the transmission and processing is Art. 6 para. 1 lit. c DSGVO. The use of the service supports us in meeting our legal obligations.With the help of the service, content of our legal texts are reloaded on our website. The current legal texts are reloaded via the integration on our site. This integration may also be used to reload further technical modules with regard to the legal texts or legally required elements.You will find the rights you are entitled to with regard to the processing at the end of this data protection declaration.You will find further information on the handling of the transmitted data in the data protection declaration of the provider at https://www.website-check.de/datenschutzerklaerung/.

Website-Check Siegel

We use on our site the service Website-Check Siegel of the company Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, e-mail: [email protected], website: http://www.website-check.de/. The transmission and processing of personal data takes place exclusively on servers in the European Union.Legal basis for the transmission of personal data represents our legitimate interest in the processing pursuant to Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in achieving the purpose described below.The script of Website-Check GmbH is the technical integration of the Website-Check seal. With this seal, we want to show that we take the issue of data protection very seriously. The transmission of data to Website-Check GmbH takes place for the delivery and display of the seal on our site.With regard to the processing, you have the right of objection listed in Art. 21. You can find more information at the end of this privacy policy.Further information on the handling of the transferred data can be found in the privacy policy of the provider at https://www.website-check.de/datenschutzerklaerung/.

WordPress

We use on our site the service WordPress of the company Automattic Inc, 60 29th Street #343, CA 94110 San Francisco, United States, e-mail: [email protected], website: https://automattic.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the DSGVO cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.The legal basis for the transfer of personal data is our legitimate interest in the processing pursuant to Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in achieving the purpose described below.Wordpress is the technical system behind our website for operating our WordPress website. We need the integration so that we can show you our website and edit content.With regard to the processing, you have the right of objection listed in Art. 21. You can find more information at the end of this privacy policy.For more information on the handling of the transferred data, please refer to the provider’s privacy policy at https://automattic.com/privacy/.

WordPress.com

We use on our site the service WordPress.com of the company Automattic Inc, 60 29th Street #343, CA 94110 San Francisco, United States, e-mail: [email protected], website: https://automattic.com/. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the DSGVO cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.The legal basis for the transfer of personal data is our legitimate interest in the processing pursuant to Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in achieving the purpose described below.Wordpress is the technical system behind our website for operating our website. We need the integration so that we can display our website to you and maintain content.With regard to the processing, you have the right of objection listed in Art. 21. You can find more information at the end of this privacy policy.For more information on the handling of the transferred data, please refer to the provider’s privacy policy at https://automattic.com/privacy/.

Social Plug-In – „Facebook by META“

What personal data is collected and to what extent is it processed? On our website, we have integrated a social plug-in of the social network “Facebook by META”, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, 2 Dublin, Ireland, e-mail: [email protected], website: http://www.facebook.com/ (“Facebook by META”). When you call up a page that contains such a plug-in, your browser automatically establishes a background connection to the servers of Facebook by META. The content of the plug-in is transmitted by Facebook by META directly to your browser and only integrated into our site. Through this integration, Facebook by META receives the information that your browser has loaded a specific page of our website. This also applies if you do not have a Facebook by META profile or are not currently logged in to Facebook by META. This information (including your IP address) is transmitted by your browser directly to a Facebook by META server in Ireland and stored there. If you are logged in to Facebook by META, Facebook by META can directly assign your visit to our website to your Facebook by META profile. If you interact with the plug-ins, for example by clicking the “Like” button or posting a comment, this information is also transmitted directly to a Facebook by META server and stored there. The information is also published on your Facebook by META profile and displayed to your Facebook by META contacts that you have enabled for this purpose.

Rechtsgrundlage für die Verarbeitung personenbezogener Daten

Art. 6 para. 1 lit. a DSGVO (if you have registered with “Facebook by META”) and Art. 6 para. 1 lit. f DSGVO (if you have not registered with Facebook by META). Insofar as processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f DSGVO, the legitimate interest of the page operator is to enable user interaction with the content of the page operator on Facebook by META.

Zweck der Datenverarbeitung

The primary purpose of the data collection is to offer you a possibility of social interaction linked to Facebook by META and thus to make our website interactive. The scope of data collection and the further processing and use of the data you leave behind by Facebook by META, as well as your rights in this regard and setting options for protecting your privacy, can be found in the data protection information of Facebook by META: https://www.facebook.com/about/privacy

Dauer der Speicherung

Facebook by META will store the data relevant for the provision of the web service for as long as it is necessary. Insofar as the data is subject to legal retention obligations, it will be deleted after the retention obligation has expired.

Widerspruchs- und Löschungsmöglichkeit

If you do not want the Facebook by META social plug-in to run, you can also prevent it from running by installing an appropriate addon or script blocker. If you do not want Facebook by META to assign the data collected via our website to your Facebook by META profile, you must log out of Facebook by META before visiting our website. The options for objection and removal are also based on the general regulations on the right of objection and deletion under data protection law described below in this data protection declaration.

Information on the use of cookies

What personal data is collected and to what extent is it processed?

On various pages, we integrate and use cookies to enable certain functions of our website and to integrate external web services. The so-called “cookies” are small text files that your browser can store on your access device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also referred to as “setting a cookie”. Cookies can be set here both by the website itself and by external web services. Cookies are set by our website or external web services in order to maintain the full functionality of our website, to improve the user experience or to pursue the purpose stated with your consent. Cookie technology also allows us to recognize individual visitors by pseudonyms, such as a unique or random IDs, so that we can provide more customized services. Details are listed in the following table.

Legal basis for the processing of personal data

Insofar as the cookies are processed on the basis of consent pursuant to Art. 6 para. 1 lit. a DSGVO, this consent shall also be deemed to be consent within the meaning of Section 25 para. 1 TTDSG for the setting of the cookie on the user’s terminal device. Insofar as another legal basis is mentioned according to the DSGVO (e.g. for the fulfillment of a contract or for the fulfillment of legal obligations), the storage or setting takes place on the basis of an exception according to Section 25 (2) TTDSG. This exists “if the sole purpose of storing information in the end user’s terminal equipment or the sole purpose of accessing information already stored in the end user’s terminal equipment is to carry out the transmission of a message via a public telecommunications network” or “if the storage of information in the end user’s terminal equipment or the access to information already stored in the end user’s terminal equipment is absolutely necessary in order for the provider of a telemedia service to provide a telemedia service expressly requested by the user”. Which legal basis is relevant can be seen from the cookie table listed later in this item.

Purpose of data processing

The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve the user experience or to pursue the purpose stated with your consent. Cookie technology also allows us to recognize individual visitors by pseudonyms, such as a unique or random IDs, so that we can provide more customized services. Details are listed in the following table.

Duration of storage

Our cookies are stored until deleted in your browser or, if it is a session cookie, until the session expires. Details are listed in the following table.

Possibility of objection and removal

You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to store recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that the legality of the processing carried out on the basis of the consent until the revocation is not affected.

Cookie-name	Server	Provider	Purpose	Legal basis	Storage duration	Type
ANONCHK	c.clarity.ms	Microsoft Clarity	Registers data about visitors from multiple visits and on multiple websites. This information is used to measure the effectiveness of advertising on websites.dlage	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 10 minutes	Marketing
CLID	www.clarity.ms	Webseitenbetreiber	This cookie is set so that we can store information regarding your use of the site. In particular, individual settings are determined and stored.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 12 months	Configuration
CookieLawInfoConsent	www.dorucon.de	Webseitenbetreiber	This cookie stores whether the cookie banner or the cookie notice regarding functional cookies was correctly displayed to you and how you have decided regarding the use of cookies on our website.	Art. 6 para. 1 lit. c DSGVO (fulfillment of legal obligation)	approx. 12 months	Cookie-Banner
MUID	.bing.com	Bing	This cookie is used by Microsoft to assign a unique user ID to the site visitor. The cookie enables tracking of page visitors on other websites offered by Microsoft by synchronizing the ID.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 13 months	Analytics
MUID	.clarity.ms	Microsoft Clarity	This cookie is used by Microsoft to assign a unique user ID to the site visitor. The cookie enables tracking of page visitors on other websites offered by Microsoft by synchronizing the ID.	Art. 6 Abs. 1 lit. a DSGVO bzw. Art. 9 Abs. 2 lit. a DSGVO (Einwilligung)	approx. 13 months	Analytics
SM	c.clarity.ms	Microsoft Clarity	This cookie is used by Microsoft to assign a unique user ID to the site visitor. The cookie enables tracking of page visitors on other websites offered by Microsoft by synchronizing the ID.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	Session	Analytics
SRM_B	c.bing.com	Bing	Used to track the user’s interaction with the website’s search bar function. This data can be used to offer relevant products or services to the user.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 13 months	Marketing
_clck	.dorucon.de	Quandoo (Quandoo GmbH,, KulturBrauerei, Gebäude 5, Schönhauser Allee 36, 10435 Berlin, Deutschland)	This cookie collects data about the navigation and behavior of the user on the website. From this, statistics and heat maps are created for the website operators.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 12 months	Analytics
_clsk	.dorucon.de	Microsoft Clarity	The cookie used assigns an ID to the site visitor and collects statistical data on the site visits of the site visitor. This serves to individualize the advertising displayed to the user.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 24 hours	Marketing
_fbp	.dorucon.de, .de	Facebook Connect	Facebook uses this cookie to display advertising products and to assign advertising clicks to a user.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 3 months	Marketing
_ga	dorucon.de	Google-Analytics	This cookie assigns an ID to a user so that the web tracker can summarize the user’s actions under this ID.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 24 months	Analytics
_gat_UA-*	dorucon.de	Google-Analytics	This cookie is the tracking cookie of Google Analytics. This cookie stores a unique visitor ID, the date and time of the first visit, the start time of the active visit, as well as the number of all visitors that a unique visitor has made to the website.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 70 seconds	Analytics
gat_gtag_UA*	dorucon.de	Google-Analytics	This cookie assigns an ID to a user and associates the user’s actions under this ID in connection with Google Tag Manager.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 70 seconds	Analytics
_gcl_au	dorucon.de	Google Ads	This cookie is used by Google AdSense to increase the efficiency of advertising.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 3 months	Marketing
_gid	dorucon.de	Google-Analytics	This cookie assigns an ID to a user so that the web tracker can summarize the user’s actions under this ID.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 24 hours	Analytics
_uetsid	.dorucon.de	Microsoft Advertising	This cookie assigns an ID to the page visitor. Under this ID, data on visitor behavior on several websites is collected in order to display individual advertising to the site visitor.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 24 hours	Marketing
_uetvid	.dorucon.de	Microsoft Advertising	This cookie assigns an ID to the page visitor. Under this ID, data on visitor behavior on several websites is collected in order to display individual advertising to the site visitor.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 13 months	Marketing
cf_use_ob	www.dorucon.de	Webseitenbetreiber	This cookie allows us to store individual comfort settings you have chosen and keep them for your current and future visits to the site.	Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO (consent)	approx. 3 minutes	Configuration
cli_user_preference	www.dorucon.de	Webseitenbetreiber	This cookie stores whether the cookie banner or cookie notice was correctly displayed to you and your decision regarding the use of cookies on our website.	Art. 6 para. 1 lit. f DSGVO (legitimate interests)	approx. 12 months	Cookie-Banner
cookielawinfo-checkbox-advertisement	www.dorucon.de	Webseitenbetreiber	This is a cookie that stores the user’s decision regarding the cookie banner.	Art. 6 para. 1 lit. c DSGVO (fulfillment of legal obligation)	approx. 12 months	Cookie-Banner
cookielawinfo-checkbox-necessary	www.dorucon.de	Webseitenbetreiber	Cookie that stores the user’s decision about the cookie banner.	Art. 6 para. 1 lit. c DSGVO (fulfillment of legal obligation)	approx. 12 months	Cookie-Banner
cookielawinfo-checkbox-non-necessary	www.dorucon.de	Webseitenbetreiber	cookie that stores the user’s decision about the cookie banner.	Art. 6 para. 1 lit. c DSGVO (fulfillment of legal obligation)	approx. 12 months	Cookie-Banner
viewed_cookie_policy	www.dorucon.de	Webseitenbetreiber	Cookie that stores the user’s decision about the cookie banner.	Art. 6 para. 1 lit. c DSGVO (fulfillment of legal obligation)	approx. 12 months	Cookie-Banner

Data security and data protection, communication by e-mail

Your personal data are protected by technical and organizational measures during collection, storage and processing so that they are not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.

Automatic email archiving

Scope of the processing of personal data

We expressly point out that our mail system has an automated archiving procedure. All incoming and outgoing e-mails are digitally archived in an audit-proof manner.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. c DSGVO (legal obligation). The legal obligation consists of compliance with tax and commercial law requirements (e.g. §§ 146, 147 AO, §§ 238, 257 HGB).

Purpose of data processing

The purpose of archiving is to comply with tax law requirements (e.g. §§ 146, 147 AO – obligation to retain e-mails of relevance to tax law) and commercial law requirements (e.g. §§ 238, 257 HGB – obligation to archive business correspondence).

Duration of storage

Our mail communication is stored until the expiry of tax and commercial law retention obligations. The retention period can be up to 10 years.

Possibility of objection and deletion

You can object to the processing at any time pursuant to Art. 21 DSGVO and request deletion of data pursuant to Art. 17 DSGVO. You can find out which rights you have and how to exercise them in the lower section of this privacy policy.

Dealing with application documents

If you have any questions regarding our e-mail archiving system, please contact our data protection officer. In addition, we would like to point out that we only consider application documents in PDF file format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and will not be delivered. We do not consider applications in Word file format and other file formats and delete them unread. Please note that application documents sent by e-mail without encryption may be opened by third parties before they reach our IT systems. We assume that we may also reply to unencrypted application e-mails without encryption. If you do not wish this, please inform us in your application e-mail.

Right to information and correction requests – Deletion & restriction of data – Revocation of consent – Right of objection

Right to information

You have the right to request confirmation as to whether we are processing personal data about you. If this is the case, you have the right to information on the information named in Art. 15 (1) DSGVO, provided that the rights and freedoms of other persons are not affected (cf. Art. 15 (4) DSGVO). We will also be happy to provide you with a copy of the data.

Correction claim

In accordance with Art. 16 DSGVO, you have the right to have any incorrect personal data stored with us (such as address, name, etc.) corrected at any time. You can also request a completion of the data stored by us at any time. A corresponding adjustment will be made immediately.

Right to deletion

Pursuant to Art. 17 (1) DSGVO, you have the right to demand that we delete the personal data we have collected about you if

the data is either no longer required;
due to the revocation of your consent, the legal basis for the processing has ceased to exist without substitution;
you have objected to the processing and there are no legitimate grounds for processing;
your data is processed unlawfully;
a legal obligation requires this or a collection pursuant to Art. 8 (1) DSGVO has taken place.

According to Art. 17 (3) of the GDPR, the right does not exist if

processing is necessary for the exercise of the right to freedom of expression and information;
your data has been collected on the basis of a legal obligation;
the processing is necessary for reasons of public interest;
the data are necessary for the assertion, exercise or defense of legal claims.

Right to restriction of processing

According to Art. 18 (1) DSGVO, you have the right in individual cases to request the restriction of the processing of your personal data.

This is the case when

the accuracy of the personal data is disputed by you;
the processing is unlawful and you do not consent to its erasure;
the data is no longer required for the purpose of processing, but the collected data is used for the assertion, exercise or defense of legal claims;
an objection to the processing has been lodged pursuant to Art. 21 (1) DSGVO and it is still unclear which interests prevail.

Right of revocation

If you have given us express consent to process your personal data (Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO), you may revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.

Right to object

In accordance with Art. 21 DSGVO, you have the right to object at any time to the processing of personal data relating to you that has been collected on the basis of Art. 6 (1) f (in the context of a legitimate interest). You only have this right if there are special circumstances against the storage and processing.

How do you exercise your rights?

You can exercise your rights at any time by contacting us at the contact details below:

DORUCON – DR. RUPP CONSULTING GmbH
Saargemünder Straße 39
66119 Saarbrücken
Germany
E-Mail: [email protected]
Tel.: +49 68197689810
Fax: +49 32 221739475

Right to data portability

Pursuant to Art. 20 DSGVO, you have a right to the transmission of the personal data concerning you. The data will be provided by us in a structured, common and machine-readable format. The data can be sent either to you or to a person responsible named by you.

We provide you with the following data upon request according to Art. 20 para. 1 DSGVO:

Data collected on the basis of explicit consent pursuant to Art. 6 (1) lit. a DSGVO or Art. 9 (2) lit. a DSGVO;
Data that we have received from you in accordance with Art. 6 para. 1 lit. b DSGVO in the context of existing contracts;
Data that has been processed within the framework of an automated procedure.

We will transfer the personal data directly to a controller of your choice, as far as this is technically feasible. Please note that we may not transfer data that interferes with the freedoms and rights of other persons pursuant to Art. 20 (4) DSGVO.

Right of appeal to the supervisory authority pursuant to Art. 77 (1) DSGVO

If you suspect that your data is being processed illegally on our site, you can of course bring about a judicial clarification of the issue at any time. In addition, any other legal option is open to you. Independently of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) DSGVO. The right of complaint pursuant to Art. 77 DSGVO is available to you in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn from the places mentioned above. The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your submission, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Created by: