PRIVACY

1. DATA PROTECTION OVERVIEW

GENERAL NOTES

When you visit this website, your personal data is processed. Personal data are all data with which you can be personally identified. The following notes explain which data we collect and for what purpose. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

DATA COLLECTION ON OUR WEBSITE

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. His contact details can be found in the imprint of this website.

How do we collect your data?

On the one hand, your data is collected when you voluntarily provide us with it. This may, for example, be data that you provide to us in the context of an application.

On the other hand, data is automatically collected by our IT systems when you visit this website. These are mainly technical data, e.g. Internet browser, type and version of operating system, time of access and IP address.

What do we use your data for?

Part of the data is collected in order to ensure the error-free provision of the website and the security of our website. Another part of the data can be used to analyse your usage behaviour and for statistical evaluation of your interests.

We can transmit your personal data within the scope of the business relationship to its relevant subsidiary to the extent required for this business relationship. Our subsidiaries may also receive or have access to personal data if they perform group-internal services centrally on our behalf and on behalf of other of our subsidiaries or if personal data is transferred to them on an appropriate legal basis. In the event of onward transfer, these companies will use your personal data for the same purposes and under the same conditions as described in this privacy policy.

What rights do you have in connection with your data?

You have the right to receive information free of charge at any time about the purpose, the categories of personal data processed, the recipient, the duration of storage and the origin of the data. You also have the right to demand the correction, deletion or restriction of the processing. For this, as well as for further questions regarding data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to complain to the responsible supervisory authority.

2. GENERAL INFORMATION AND COMPULSORY INFORMATION

PRIVACY

The operator of this website takes the protection of your personal data very seriously. We treat your personal data with the utmost confidentiality and in accordance with the statutory data protection regulations and this privacy policy.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

NOTES ON THE RESPONSIBLE AUTHORITY

The responsible authority is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

The person responsible for data processing on this website is

Berylls Strategy Advisors GmbH

Maximilianstrasse 34
80539 Munich, Germany,
Commercial Register Number: HRB Munich 268558
Phone: +49 89 710410 40 0
E-Mail: info@berylls.com

DATA PROTECTION OFFICER

You can reach our data protection officer at the above address:

Martin Bastius
heyData GmbH
Schützenstraße 5
10117 Berlin
datenschutz@heydata.eu

REVOCATION OF CONSENT TO DATA PROCESSING

Many data processing operations are only possible with your explicit consent. You can revoke any consent already given at any time. For this purpose, an informal notification by e-mail to us is sufficient. Your revocation does not affect the lawfulness of the processing that has taken place on the basis of the consent until the revocation.

RIGHT OF COMPLAINT TO THE COMPETENT SUPERVISORY AUTHORITY

If you believe that the processing of your personal data concerning you is in breach of data protection regulations, you have the right to complain to the competent supervisory authority.

As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our office (State Commissioner for Data Protection and Freedom of Information in Bavaria). A list of the state data protection commissioners and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

RIGHT TO DATA PORTABILITY

You also have the right to have data, which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a structured, common and machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place to the extent that this is technically feasible.

SSL OR TLS ENCRYPTION

In compliance with the data protection regulations under Art. 32 GDPR, this site uses the following data for security reasons and to protect the transmission of confidential information, such as requests that you send to us acting as the site operator. You can recognize an encrypted connection on the one hand by the fact that the address line of the browser changes from “http://” to “https://” and on the other hand by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

ANALYSIS TOOLS AND THIRD PARTY TOOLS

By visiting our website your surfing behaviour can be statistically evaluated. This is done in particular by using cookies and with so-called analysis programs. The analysis takes place anonymously so that the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

If we transfer data to third countries, i.e. countries outside the European Economic Area (EEA), the transfer will only take place in compliance with the legal requirements.

If the transfer of the data to a third country does not serve to fulfil our contract with you, if we do not have your consent, if the transfer is not necessary for the assertion, exercise or defence of legal claims and if no other exception according to Art. 49 GDPR applies, we will only transfer your data to a third country if an adequacy decision according to Art. 45 GDPR or suitable guarantees according to Art. 46 GDPR are available. In the latter case, we use the EU Standard Contractual Clauses to contractually oblige the data importer to ensure a level of data protection equivalent to that of the EEA to protect your personal data.

INFORMATION, CORRECTION, DELETION, RESTRICTION, OBJECTION

You have the right to obtain, at any time and free of charge, information on your personal data processed and stored by us, the purposes of the data processing, the categories of personal data processed, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, where applicable, meaningful information on the details thereof. You can contact us at any time at the address given in the imprint for this purpose and for further questions on data protection.

OBJECTION AGAINST ADVERTISING MAILS

The use of the contact data published in the imprint for the transmission of not explicitly requested advertising and information material is hereby objected to. In case of unsolicited sending of advertising information, such as spam e-mails, the operator of the site reserves the right to take legal action.

3. DATA COLLECTION ON OUR WEBSITE IN DETAIL

COOKIES

Our website partly uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

On the one hand we use so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them yourself. These cookies enable us to recognize your browser the next time you visit us. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies the functionality of this website may be limited.

Cookies that are required for the electronic communication process, are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are integrated separately in this data protection declaration.

SERVER LOG FILES

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically sends to us when you visit the website. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• IP address

These files are not merged with other data sources.

The basis for data processing is Art. 6 Para. 1 lit. b, f GDPR, which permits the processing of data for the fulfilment of a contract or a pre-contractual measure, as well as for the protection of legitimate interests. The legitimate interest here lies in the technically faultless and optimised provision of our services for you.

ENQUIRIES BY E-MAIL, TELEPHONE, FAX

If you contact us directly by e-mail, telephone or fax, your inquiry including all personal data (name, contact data, inquiry itself) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing is based on the basis of Art. 6 Paragraph 1 lit. b GDPR in so far as your enquiry is connected with the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent pursuant to Art. 6 Paragraph 1 lit. a GDPR and/or on our legitimate interest pursuant to Art. 6 Paragraph 1 lit. f. GDPR, as we have a legitimate interest in the effective processing of the inquiries addressed to us. You can revoke this consent at any time. An informal notification by e-mail to us is sufficient for this purpose. Your revocation does not affect the lawfulness of the processing that has taken place on the basis of the consent until the revocation.

The data you have sent us by contact request will remain with us until you request us to delete it, revoke your consent to store it or for the purpose for which it was  stored ceases to apply, e.g. due to the completed processing of your request. Mandatory legal provisions – in particular retention periods – remain unaffected.

APPLICATIONS

If you apply to us via our website or send us applications in electronic form, we will store the data you provide (e.g. e-mail address, name, address, telephone number). In the case of an application via our website, we require the entry of certain personal data which is necessary for the application process (first and last name, address, e-mail address, telephone number, if applicable how you became aware of us). In addition, you have the possibility to upload meaningful documents which may contain further personal data (e.g. date of birth).

Your application documents will only be made available to authorized employees who are directly involved in the application process.

The purpose of the data processing is the necessary decision on the establishment of an employment relationship (Art. 88 paragraph 1 GDPR in conjunction with § 26 BDSG).

Your data will be stored by us until the application procedure is completed. If your application is rejected, your application documents will be stored with us for a further 6 months due to the possibility of legal action in accordance with the General Equal Treatment Act (§ 15 Paragraph 4 AGG) and then deleted or anonymised. In the event of anonymisation, the data is then only available to us as so-called metadata without direct personal reference for statistical analysis (e.g. proportion of women or men, number of applications in a specific period of time, etc.).

In addition, your consent allows us to add you to our “talent pool” in order to find any other interesting positions for you. This also applies to the application for a training or internship position.

By accepting the privacy policy, you agree to be included in our “Talent Pool”.

If an employment relationship with us arises following your application, we will store the personal data collected during the application process at least for the duration of the employment relationship.

The data transmitted in the context of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software. In this context Personio GmbH is our contract processor according to Art. 28 GDPR. The basis for the processing is a contract between us as the responsible authority and Personio GmbH, which acts on our behalf.

For more information about this third-party provider, please visit the following address: https://www.personio.de/impressum/.

REGISTRATION AS A USER

If you wish to register as a user on our website, the personal data you provide (e-mail address) will be processed and stored. The processing is carried out for the purpose of opening a user account. The legal basis for the processing is your express consent in accordance with Art. 6 Para. 1 lit a DSGVO. We do not pass on this data without your consent. You can revoke this consent at any time. All you need to do is send us an informal e-mail. Your revocation does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

DOWNLOAD OF PROVIDED DOCUMENTS

On our website you will also find an area which, after entering individual personal data in the contact form, unlocks documents and makes them available for download.

If you would like to access the documents made available there, you must enter your first and last name, e-mail address and employer in particular in the contact form. The legal basis for the processing is your consent pursuant to Art. Art. 6 paragraph 1 lit. a GDPR.

The purpose of this processing is the user-optimized provision of downloadable content by adapting the content to the respective interests.

In addition to the data on the provision of documents, we collect pseudonymized data on your user behavior by means of a cookie. This is done in order to be able to determine the number of views and downloads of our content, in particular how often you used our content free of charge. This data is not merged with other user data. You can object to this pseudonymized profiling at any time.

You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. Your revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

4. ANALYSIS TOOLS AND ADVERTISING

GOOGLE ANALYTICS

This website uses functions of the web analysis service Google Analytics. Google Analytics is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the website usage data on our behalf and contractually undertakes to take measures to ensure the security and confidentiality of the processed data.

Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. With Google Analytics, we collect information on user behaviour to improve the user-friendliness of the website.

IP ANONYMIZATION

https://marketingplatform.google.com/about/analytics/terms/de/

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet.

The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

OBJECTION TO DATA COLLECTION

You can revoke your consent to the storage of cookies and prevent their storage by adjusting your browser software accordingly.

BROWSER PLUGIN

An opt-out cookie is set to prevent the collection of your data during future visits to this website. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across multiple devices, you must opt-out on all systems in use.

To do this, you need to download and install the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Further information on the general terms of use of Google Analytics can be found at http://www.google.com/analytics/terms/de.html.

The privacy policy for Google Analytics is available at https://marketingplat-form.google.com/about/analytics/terms/de/

DEMOGRAPHIC CHARACTERISTICS AT GOOGLE ANALYTICS

This website uses the “Demographic Features” function of Google Analytics. This enables us to generate reports that contain information about the age, gender and interests of the site visitors. This data is derived from interest-based advertising by Google as well as from visitor data from third parties. This data cannot be assigned to a specific person. You can disable this feature at any time in the ad settings in your Google Account or generally prohibit Google Analytics from collecting your information as described in the “Opting out of data collection” section.

ORDER PROCESSING

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

GOOGLE MAPS

This site uses the map service “Google Maps” to display interactive maps and to create directions. Google Maps is a map service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

By using Google Maps, information about the use of this website, including your IP address and the (start) address entered in the route planner function, can be transmitted to Google in the USA and stored there. Therefore, we have no influence on the extent of the data collected by Google in this way. In any case, data is collected from you among other things:

• Date and time of your visit to the respective website,
• Internet address or URL of the website called up,
• IP address, (start) address entering during route planning.

For the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information of Google: https://policies.google.com/privacy?hl=de

The legal basis for the use of Google Analytics is your consent according to Art. 6 paragraph 1 lit. a GDPR.

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you cannot use the map display.

SOCIAL MEDIA

LinkedIn

We use the so-called “Retargeting Tool” from LinkedIn as well as the “Conversion Tracking” from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. For this purpose, our website incorporates the LinkedIn Insight Tag, which enables LinkedIn to collect statistical, pseudonymous information about your visit and use of our website and to provide us with statistics based on this information. Among other things, the LinkedIn user ID (cookie ID), IP address, browser type, etc. are recorded.

This information is also used to display interest-specific and relevant offers and recommendations to you after you have informed yourself about certain services, information and offers on the website. The relevant information is stored in a cookie.

The legal basis for the use of the service is your consent in accordance with Art. 6 paragraph 1 lit. a GDPR. The recipient of the data collected is LinkedIn.

Further information on data processing can be found in the privacy policy of LinkedIn. https://www.linkedin.com/legal/privacy-policy. You can opt-out of data collection by clicking on the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

5. PLUGINS AND TOOLS

CLOUDFLARE

We use the Content Delivery Network (CDN) from Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 Para. 1 lit. f GDPR). A CDN is a network of [worldwide] distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data can be processed in Cloudflare’s server log files. Please compare the explanations under “Hosting”.

Cloudflare is the recipient of your personal data and works for us as a processor. This corresponds to our legitimate interest within the meaning of Art. 6 Para. 1 S. 1 lit. f GDPR not to operate a content delivery network ourselves.

You have the right to object to the processing. Whether the objection is successful must be determined within the framework of a weighing of interests.

The processing of the data specified under this section is not required by law or contract. The functionality of the website is not guaranteed without processing.

Your personal data will be stored by Cloudflare for as long as is necessary for the purposes described.

For more information on opt-out and removal options with Cloudflare, see: Cloudflare DPA

Cloudflare has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Cloudflare processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, see: https://www.cloudflare.com/cloudflare_customer_SCCs-English.pdf

DOUBLECLICK

On this website the service “Doubleclick by Google” is used. This service uses cookies to show you advertisements that are relevant to you. This is done by means of a pseudonymous identification number (pID), which your browser receives and is assigned to. This pID enables the service to recognize which advertisements have already been displayed on your computer and which have been called up The cookies used do not contain any personal data. Rather, the cookies are used for a cross-website placement of advertisements by enabling Google to identify the pages visited. The information generated by the cookies is transferred by Google to a server in the USA for evaluation and stored there. A transfer of the data by Google to third parties only takes place due to legal regulations or within the scope of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

The legal basis for this use is your consent in accordance with Art. 6 paragraph 1 lit. a GDPR. By using our website, you agree that your data may be processed by Google in accordance with the description and purposes outlined above. You can prevent the use of cookies by making the appropriate settings in your browser. However, such a setting may mean that the website cannot be used without restrictions.

Further information on data protection at Google can be found here: https://policies.google.com/technologies/ads?hl=de

You may object to the collection of your data by Google here: https://adssettings.google.com/authenticated

GOOGLE TAG MANAGER

Among other things, this website uses the “Google Tag Manager” service. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service is used to collect data on our website which is then sent to the relevant analysis tool. No data is collected or stored in the process. The Google Tag Manager itself does not process any personal data but is only used to manage other services – e.g. Google Analytics.

Further information about the Google Tag Manager can be found at:  https://www.google.com/intl/de/tagmanager/use-policy.html

RAPIDMAIL

To receive the newsletter we offer, you can register using our application form. Thereby we use the so-called “Double-Opt-In” procedure: The specified recipient will first receive a confirmation e-mail to his specified e-mail address with the request for confirmation. The registration only becomes effective when you click on the activation link contained in the confirmation mail. We use your data transmitted to us exclusively for sending the newsletter, which may contain information or offers.

The legal basis for this processing is your consent according to Art. 6 paragraph 1 lit. a GDPR. Your data will be stored for the duration of the newsletter subscription.

Your data will be transmitted to the third party provider Rapidmail GmbH, Augustinerplatz 2, in 79098 Freiburg. Rapidmail GmbH is prohibited from using your data for any other purpose other than for sending the newsletter. Rapidmail GmbH is also not permitted to pass on or sell your data. Rapidmail is a German, certified newsletter software provider, which has been carefully selected according to the requirements of the GDPR. You can revoke your consent to the storage of your data and its use for sending the newsletter at any time via the unsubscribe link in the newsletter.

6. ACTUALITY AND CHANGE OF THIS PRIVACY POLICY

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed by you at any time on our website.