Status: January 2022

1. General information on data protection

1.1. Introduction

At wollmann consulting gmbh, we take data protection very seriously. In the following, we will inform you about how your personal data is processed when visiting our website or applying for a job at wollmann consulting. Personal data means all data that can be related to you personally, e.g., name, address, e-mail addresses, user behavior.

1.2. Responsible entity

The responsible entity within the meaning of the General Data Protection Regulation is:

wollmann consulting gmbh
Maschfeld 3a
D-31319 Sehnde-Höver, Germany

Phone: +49 5132 8219122
Fax: +49 5132 8219123
E-mail: info@wollmann-consulting.de

1.3. Data protection officer

The data protection officer of the above responsible entity is:

List + Lohr Datenschutz und Informationssicherheit GmbH
Garvensstraße 4
D-30519 Hannover, Germany

E-mail: datenschutz@wollmann-consulting.de

1.4. Your rights as a data subject and right of appeal

As a data subject, you have the following rights vis-à-vis us with regard to the personal data concerning you:

• Right to information according to Art. 15 DSGVO/GDPR
• Right to rectification according to Art. 16 DSGVO/GDPR
• Right to deletion according to Art. 17 DSGVO/GDPR
• Right to restriction of processing according to Art. 18 DSGVO/GDPR
• Right to notification according to Art. 19 DSGVO/GDPR
• Right to data portability according to Art. 20 DSGVO/GDPR
• Right to object to processing according to Art. 21 DSGVO/GDPR

In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DSGVO/GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.

2. Specific information on data processing on our website

2.1. Website provided

The following information applies only to this website. It does not apply to other websites to which we merely refer by means of a hyperlink. We cannot accept any responsibility for the confidential handling of your personal data on these third-party websites.

2.2. Processing of personal data when visiting our website

In the case of merely informational use of our website, i.e., if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you, to ensure stability and security and to optimize the use of our website (legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO/GDPR):

• IP address of the user,
• Date and time of an access to our website,
• Time zone difference from Greenwich Mean Time (GMT),
• Content of the request (specific page),
• Access status/HTTP status code,
• Amount of data transferred in each case,
• Websites that are called up by the user’s system via our website,
• Websites from which the user’s system accesses our website,
• Information about the browser type and version used,
• User’s operating system and its interface,
• Internet service provider of the accessing system,
• Language and version of the browser software,
• Other similar data and information that serve to avert danger in the event of attacks on our IT systems.

The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

Legal basis for data processing:

The legal basis for the temporary storage of the data and log files is Art. 6 para. 1 lit. f DSGVO/GDPR.

Purpose of data processing:

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session. In these purposes lies our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO/GDPR.

Duration of storage: 

The data stored in the log files will be deleted after 7 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that they can no longer be traced back to the visiting clients.

Possibility of objection and removal:

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of our website. Consequently, you cannot object to processing data in this way. Further storage may take place in individual cases if required by law.

External hosting:

Our website is being operated on the server of an external service provider (hosting provider) (Provider: Hetzner Online GmbH, server location Nürnberg/Germany). The data mentioned under 2.2. is stored on the servers of the hosting provider.

The hosting provider is used for the purpose of fulfilling the contract with our interested parties and customers (Art. 6 para. 1 lit. b DSGVO/GDPR). We have chosen a professional service provider to ensure optimal provision of our online offer (Art. 6 para. 1 lit. f DSGVO/GDPR).

Our service provider will only process your data in the form required to fulfill its contractual obligations or according to our instructions.

Accordingly, we have concluded an order processing contract with our service provider.

SSL encryption:

Our website uses SSL encryption. This encryption is used, for example, for requests that you make to us via our website. Please make sure that SSL encryption is enabled for corresponding activities on your part. The use of encryption is easy to recognize: the display in your browser address bar shows “https://”. Data encrypted via SSL cannot be read by third parties.

2.3. Cookies

We do not use cookies on our website.

2.4. Contact

You can contact us via our contact form, by e-mail, mail and by calling us. When contacting us by way of our contact form, the data you enter into our entry form will be transmitted to us and stored. This data is:

Required: e-mail address, acknowledgement of our data protection statement

Optional: first name, last name, company, phone, message

The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO/GDPR if the user has given his consent. If the e-mail contact aims at the conclusion of a contract, the legal basis for the processing of data is Art. 6 (1) lit. b DSGVO/GDPR. The legal basis for the processing of data otherwise transmitted in the course of sending an e-mail or via the input mask is Art. 6 (1) lit. f DSGVO/GDPR. The processing of personal data from the e-mail or the contact form will be used exclusively for processing your contact. In the case of such contact, this also constitutes the necessary legitimate interest in processing the data. Any other personal data processed during the sending process serve to prevent misuse of the contact form and ensure the security of our information technology systems.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

Any additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Users have the option to revoke their consent to the processing of personal data at any time. If they contact us by e-mail, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

We will delete the data accrued during this process after the data storage is no longer required. Alternatively, if there are legal obligations to retain the data, we will restrict processing of the data.

2.5. Online training

To log in for our online trainings, you need to use your individual username and password that you have received from us. We will not collect any additional data on this platform, other than the data stated under item 2.2 which is transmitted by your browser. The platform only uses necessary session cookies, we do not use any kind of tracking.

3.Special information with regard to further processing

 3.1. Application procedure

We will process personal data that we have received from you by mail or e-mail in the context of contacting you or your application. This may include general personal data (name, address, contact details, etc.), information on your professional qualifications and school education, information on further professional training and, if applicable, other data that you have provided to us in connection with your application.

We will process your personal data in accordance with the provisions of the European Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 DSGVO/GDPR in conjunction with Section 26 BDSG and, if applicable, Art. 6 (1) lit. b DSGVO/GDPR for the initiation or implementation of contractual relationships. The processing may also take place electronically. Furthermore, we may process personal data from you if this is necessary for the fulfillment of legal obligations (Art. 6 para. 1 lit. c DSGVO/GDPR) or for the defense of asserted legal claims against us. The legal basis for this is Art. 6 para.1 lit. f DSGVO/GDPR. The legitimate interest is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG). If you give us express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent according to Art. 6 para.1 lit. a DSGVO/GDPR. Consent given can be revoked at any time, with effect for the future.

Since the decision on your application is not based exclusively on automated processing, an automated decision in individual cases within the meaning of Art.22 DSGVO/GDPR will not take place.

We will store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g., the announcement of the rejection decision), unless longer storage is legally required or permitted. We will store your personal data beyond this only insofar as this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute. In the event that you have consented to a longer storage of your personal data, we will store it in accordance with your declaration of consent.

In accordance with Art. 88 DSGVO/GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG), if an employment relationship, training relationship or trainee relationship arises, we may further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).