Thank you for visiting our website. In this document, we would like to inform you about how we process your personal data in connection with the use of our services.
12555 Berlin, Germany
Tel. +49 (0)184.108.40.206.90
Fax: +49 (0)220.127.116.11.99
You can contact our data protection officer at:
mip Consult GmbH
Asmus Eggert, Solicitor
10829 Berlin, Germany
Questions relating to data protection and exercising your rights
If you have any questions relating to data protection or exercising data protection rights to which you are entitled, please refer to the above contact details.
When do we process personal data
We process personal data that you actively transmit to us through your input. Your personal data are also processed automatically on the basis of your use of our website. In particular, your personal data may therefore be processed in the following cases:
- If you visit our website
- If you register for the email newsletter;
- If you contact us;
- To analyse why which visitors come to our website and how they use it;
- To analyse the success of our advertising campaigns;
- To prevent attacks on the technical infrastructure;
For details, we refer you to the following information.
If you visit our website
When you visit our website, the company we have commissioned to operate the website processes and saves the public IP address of the computer with which you are visiting our website, including the date and time of access. The IP address is a unique numerical address through which your terminal sends data to and receives data from the Internet. As a rule, we or our service provider do not know who is behind an IP address, unless, during your use of our website, you provide us with data that allow us to identify you.
The IP address is used so that you can technically visit and use our website, as well as to detect and prevent attacks against our service provider or our website. Unfortunately there is always a risk of attacks intended to cause harm to the operators of websites or their users (e.g. preventing access, intercepting data, disseminating malware (e.g. viruses) or other non-legitimate purposes). Such attacks would impair the proper functionality of the data centre of the company we have commissioned, the use of our website or its functionality as well as the security of the visitors to our website. The IP address, including the time of access, is processed in order to prevent such attacks. Through our service provider, we process these data in order to safeguard our legitimate interest in maintaining the functionality of our website and to prevent unlawful attacks against us and against the visitors to our website. The legal basis for this processing is Art. 6 (1) (f) GDPR.
The stored IP data are erased (through anonymisation) when they are no longer required in order to detect or prevent an attack.
When you send us a message using one of the contact options offered, we use the data you have transmitted to us to process your enquiry. The legal basis for this is our legitimate interest in answering your enquiry, in accordance with Art. 6 (1) (f) GDPR. If the purpose of your enquiry is the conclusion of a contract with us, the further legal basis for processing your data is Art. 6 (1) (b) GDPR. The data are erased after your enquiry has been resolved. If we are legally obliged to store your data for a longer period of time, erasure will occur after the corresponding period has elapsed.
When you subscribe to our email newsletter, the data you provide are processed in order to prepare and mail the newsletter, and as proof that you have subscribed to our newsletter, until you unsubscribe. The legal basis for this processing is Art. 6 (1) (a) GDPR. For our newsletter we use Sendinblue as our service provider, to whom we, as processor, forward your personal data to the necessary extent.
To receive the newsletter, you must click the confirmation link in the verification email which we send you after you have registered to prove that you have given us your consent. When you click the link in question, we process the public IP address of the computer from which the link was accessed, together with the date and time it was clicked. We process these data in order to be able to prove that you have confirmed receipt of our email newsletter.
The legal basis for this processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is the fulfilment of our notification obligations concerning your subscription.
You can withdraw your consent at any time by unsubscribing from the newsletter. You can find the relevant link at the end of each newsletter.
We delete your data when you unsubscribe from the newsletter. We will delete the data which we require as proof that you have consented to receiving the newsletter after the limitation period for the relevant obligation to provide proof has elapsed.
Cookies are small text files that are stored on your terminal when you use your browser to visit our website. When you visit our website again later, these cookies can be read again. Cookies are stored for varying periods of time. At any time you can set your browser to decide which cookies it should accept; however, this may mean that our website no longer functions correctly. You can also delete cookies manually at any time. If you do not do this, we can specify how long a cookie is to be stored on your computer when we store it. Here we must distinguish between so-called session cookies and persistent cookies. Session cookies are deleted by your browser when you leave our website or close your browser. Persistent cookies are stored for the period we specify when storing them.
- Technically necessary cookies, which are essential for using the functions of our website (e.g. to detect whether you have logged in). Without these cookies, certain features cannot be provided.
- Functional cookies, which are used for the technical implementation of certain features you want to use.
- Analysis cookies, which are used to analyse your user behaviour. For details, please read the information on “Google Analytics”.
Most browsers that our users use allow you to set which cookies are to be stored and allow you to delete (certain) cookies. If you restrict the storage of cookies on certain websites, or if you do not permit the storage of cookies from third-party websites, this may mean that our website cannot be used to its full extent. Here you can find information about how to adjust the cookie settings for the most common browsers:
- Google Chrome (support.google.com/chrome/answer/95647?hl=en)
- Internet Explorer (https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies)
- Firefox (https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences)
- Safari (https://support.apple.com/kb/PH21411?locale=de_DE)
With your permission, additional cookies are stored in the browser you use. Which cookies are stored depends on the extent of the consent you have given.
You can withdraw your consent at any time with effect for the future by clicking here.
Please note that for technical reasons we are not able to delete all cookies in your browser if they do not originate from us. You would therefore have to delete the cookies you no longer wish to use. Your consent is not required to use our website.
oil_data - Storage period: 30 days, function: cookie consent plugin based on oil.js
_gat_gta_UA - Storage period: 1 minute, function: statistical analysis, limiting the throttle request rate of the Google Analytics service, data processor: Google Ireland Limited
_ga - Storage period: 2 years, function: statistical analysis, allocation of a random number to identify recurring visitors to the website for the Google Analytics service, data processor: Google Ireland Limited
_gid - Storage duration: 1 day, function: statistical analysis, assigning a unique number to process statistical data about the website usage behaviour of the visitor using Google Analytics, data processor: Google Ireland Limited
rc::a - Storage duration: permanent, function: identification whether the visitor of a website is a person or a so-called bot or robot to ward off spam, data processor: Google Ireland Limited
NID - Storage duration: 6 months, function: advertising, storage of a random number to identify the device, to recognise returning visitors and to display targeted advertising, data processor: Google Ireland Limited
Within the framework of processing, we use Google Analytics, a service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. As processor, Google uses a so-called “cookie” for this. This is a small text file that your browser stores on your computer. This cookie provides Google with information about which website you have visited and also in particular the following information: browser type/version, the operating system used, technical information about the operating system and browser as well as the public IP address of the computer you are using. When we use Google Analytics, your IP address is only used in an anonymised form. According to Google, this anonymisation is performed in the European Union or in a member state of the EEA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, this anonymisation is performed before the IP address is stored for the first time on a permanent data carrier. For details, we refer you to Google’s privacy statement, available at https://support.google.com/analytics/answer/6004245?hl=en.
Google Analytics allows us to create usage statistics for our website as well as demographic data about visitors and their visitor behaviour in a non-personalised form. Furthermore, statistics are prepared that help us better understand how visitors find our website, allowing us to optimise our search engine and improve our advertising measures. By processing these data, we are pursuing our legitimate interest in improving our website as well as our advertising measures. The legal basis for this processing is Art. 6 (1) (f) GDPR.
At https://tools.google.com/dlpage/gaoptout?hl=en you will find information about how to object to the use of Google Analytics.
As an alternative to the browser add-on or, on mobile devices, within browsers, please click this link(Status: Opt-Out Cookie is set) to prevent the collection of data by Google Analytics within this website in the future (this opt-out only takes effect in this browser and only for this domain). An opt-out cookie is then stored on your device. If you delete your cookies in this browser, you must click this link again.
The pseudonymous data are deleted after 26 months.
We have embedded YouTube videos on our website. YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
Embedding YouTube videos in our portal occurs solely using the “privacy-enhanced mode” provided by YouTube. According to the company’s own information, YouTube only stores information about the visitors to a website if they click and play the video. You can find more information about this at https://support.google.com/youtube/answer/171780?hl=en in the section “Activating the privacy-enhanced mode”.
Video playback involves significant quantities of data, especially when different visitors to the website watch videos at the same time. Furthermore, video playback is accelerated and reproduction quality is improved if videos are played from a server as close to the website visitor as possible. We cannot guarantee this ourselves on account of the significant technical effort involved. For this reason, we have embedded the videos using YouTube. The legal basis for this is Art. 6 (1) (f) GDPR.
We have incorporated a map by openstreetmap.org on our website. This is a service offered by the Openstreetmap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU UK. The data protection information available at https://wiki.osmfoundation.org/wiki/Privacy_Policy applies for this service. Our legitimate interest in the use of this map is as a tool to help visitors to our website find our company, making us easier to reach. The legal basis for this processing is Art. 6 (1) (f) GDPR.
Use of Google reCAPTCHA
Our website uses Google reCAPTCHA, a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The request serves to distinguish whether the input was made by a human or automatic machine processing. For this purpose, your input will be transmitted to Google and used further by Google. In addition, the IP address and any other data required by Google for the reCAPTCHA service will be transmitted to Google. This data will be processed by Google within the EU and potentially also in the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission, the "Privacy Shield". Google participates in the "Privacy Shield" and has submitted to its requirements.
Processing is carried out on the basis of Article 6 1. (f) GDPR due to the legitimate interest in protecting our website from automated spying, misuse and SPAM. You can find more detailed information on Google reCAPTCHA and the associated data protection declaration at:
Right of access to information
According to Art. 15 GDPR, you have the right to require us to confirm whether we are processing your personal data. If this is the case, you have the right to receive information about these personal data and to further information as specified in Art. 15 GDPR.
Right to rectification
According to Art. 16 GDPR, you have the right to obtain from us the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to demand the completion of incomplete personal data, including by providing a supplementary statement.
Right to erasure
You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to erase personal data without undue delay where the appropriate provisions of Art. 17 GDPR apply. For details, we refer you to Art. 17 GDPR.
Right to restriction of processing
According to Art. 18 GDPR, you have the right under certain circumstances to obtain from us the restriction of the processing of your personal data.
Right to data portability
According to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us provided processing is based on consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract pursuant to Article 6 (1) (b) GDPR and processing is carried out by automated means.
Right to object
According to Art. 21 GDPR, you have the right to object to the processing of your personal data based on Article 6 (1) (e) or (f) GDPR; this includes profiling based on these provisions.
To the extent that we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this includes profiling to the extent that it is related to such direct marketing.
If you wish to exercise the right to which you are entitled, please contact us as the controller using the above contact details, or send this message using one of the other methods we have provided. Should you have any questions, do not hesitate to contact us.
Right to lodge a complaint with a supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. This right applies in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of your personal data infringes the GDPR.