By means of the following data protection information, we would like to inform you about which personal data, to what extent and for what purpose is collected, processed and, if applicable, transmitted during your visit to our website. This applies equally to the services and offers accessible via the website.

Insofar as this website refers to external pages of other providers (links), you will leave our website through these links. The operators of these linked sites are solely responsible for compliance with data protection regulations and not HvS-Consulting AG.

Responsible party and data security officer

The responsible body in terms of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

HvS-Consulting AG
Parkring 20
85748 Garching near Munich

Executive Board: Frank von Stetten, Michael Hochenrieder

Chairman of the Supervisory board: Peter Möllersmann

Local Court: Traunstein, HRB 20104

If you have any questions about data protection, please send us an E-mail or contact the person responsible for data protection in our organization directly. Our data security officer is:

Dr. Eddie Kohfeldt
Phone: +49 (0)89 890 63 62 - 0
E-mail: datenschutz@hvs-consulting.de

Your data subject rights

You can exercise the following rights at any time using the contact details provided by our data security officer:

• Information about your data stored by us and its processing
• Correction of incorrect personal data
• Deletion of your data stored by us
• Restriction of data processing, if we are not yet allowed to delete your data due to legal obligations
• Objection to the processing of your data by us
• Data portability, provided that you have consented to the data processing or have concluded a contract with us

If you have given us consent, you can revoke this at any time with effect for the future.

You can contact the supervisory authority responsible for you at any time with a complaint. Your competent supervisory authority depends on the federal state of your residence, your work or the alleged violation.

Purposes of data processing by the data controller and third parties

We process your personal data only for the purposes stated in this privacy notice. Your personal data will not be transferred to third parties for purposes other than those mentioned. We will only share your personal data with third parties if:

• You have given your express consent to this
• Processing is necessary for the performance of a contract with you
• Processing is necessary for compliance with a legal obligation
• Processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data

Deletion or blocking of data

We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various storage periods provided by law. After the respective purpose has ceased to exist or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

Collection of general information when visiting our website

When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. This is exclusively information that does not allow any conclusions to be drawn about your person.

This information is technically necessary in order to correctly deliver the content of web pages requested by you and is mandatory when using the Internet. In particular, they are processed for the following purposes:

• Ensuring a smooth connection setup of the website
• Ensuring the smooth use of our website
• Evaluating system security and stability
• For other administrative purposes

The processing of your personal data is based on our legitimate interest from the aforementioned data collection purposes. We do not use your data to draw conclusions about your person. Recipients of the data are only the responsible body and, if applicable, order processors.

Anonymous information of this kind is statistically evaluated by us, if necessary, in order to optimize our Internet presence and the technology behind it.

Cookies

Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. Through this, we automatically receive certain data such as IP address, browser used, operating system and your connection to the Internet.

Cookies cannot be used to run programs or deliver viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation and enable the correct display of our web pages.

In order to make the visit to our website attractive and to enable the use of certain functions, we use technical cookies. We use these essential cookies on the basis of Art. 6 para. (1) lit. f GDPR.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies in principle. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have disabled the use of cookies.

Registration on our website

When registering to use our personalized services, some personal data is collected, such as name, address, contact and communication data such as telephone number and E-mail address. If you are registered, you can access content and services that we offer only to registered users. Of course, we will provide you with information about the personal data we have stored about you at any time. We will also be happy to correct or delete this data at your request, provided that there are no legal obligations to retain data. To contact us in this context, please contact our data security officer.

Provision of chargeable services

For the provision of chargeable services, we request additional data, such as payment details, in order to be able to execute your order. We store this data in our systems until the legal retention periods have expired.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Changes to our data protection information

We reserve the right to adapt this data protection notice so that it always complies with the current legal requirements or to implement changes to our services in the data protection notice, e.g. when introducing new services. The new data protection information will then apply to your next visit.

Garching, January 2022