Menü
Privacy policy for the use of our websites
§ 1 Information on the collection of personal data
In the following, we provide information about the collection of personal data when
using our websites. Personal data is all data that can be related to you
personally, e.g. name, address, e-mail address, user behavior.
The responsible party pursuant to Art. 4 No. 7 of the General Data Protection
Regulation (GDPR) is:
Plutoneo Consulting GmbH
Represented by the Management Board
Westendstraße 28
60325 Frankfurt am Main
Phone: +49 (0)69 87009700
E-mail: info@plutoneo.com
(see also our imprint)
You can reach our data protection officer Karsten Böhm, PRIVACY ONE GmbH at boehm@privacy.one or at our postal address with the addition “Data protection”.
§ 2 Collection of personal data when visiting our website
1. When using the website for information purposes only, i.e. if you do not register or
otherwise provide us with information, we only collect the personal data that
your browser transmits to our server. If you wish to browse our website, we
collect the following data, which is technically necessary for us to display
our website to you and to ensure and improve stability and security:
The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.
2. We use cookies on our website, i.e. in addition to the aforementioned data, cookies
are stored on your computer when you use our website. Cookies are small text
files that are stored on your hard disk assigned to the browser you are using
and through which certain information flows to the place that sets the cookie
(here by us). Cookies cannot execute programs or transfer viruses to your
computer. They are used to make the website more user-friendly and effective
overall.
You can change the settings for cookies yourself at any time. In most cases, you can
restrict or prevent the setting of cookies. You can also set the automatic
deletion after closing the browser yourself. Please contact the provider of
your browser software for more information.
Mozilla
Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
Microsoft
Internet Explorer: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d
Google
Chrome: https://support.google.com/chrome/answer/95647?hl=en&sjid=17610491027611916896-EU
Apple
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
You can also adjust the settings in the cookie banner on our website. Please note that
you cannot restrict or prevent the use of technically necessary cookies. When
using tools that transfer data to the provider of the tool, we obtain your
consent via the cookie banner.
We also obtain your consent for cookies for analysis and marketing purposes by means of
a cookie banner from CookieYes, Limited, 3 Warren Yard Warren Park, Wolverton
Mill, Milton Keynes, MK12 5NW, United Kingdom. We use marketing cookies to show
you interest-based advertising. We use analysis cookies to measure the reach of
our website. You can find information on the individual cookies in the privacy
settings of our CookieYes cookie banner. Here you can also select, activate and
deactivate the various tags / trackers / analysis tools on this website.
Further information on data processing by CookieYes can be found at:
https://www.cookieyes.com/privacy-policy/
You give your consent to the use of cookies for analysis and/or marketing purposes by
actively confirming their use in the cookie banner. You can revoke this consent
at any time in the cookie banner with effect for the future by deactivating the
confirmation. Withdrawing your consent does not affect the lawfulness of the
processing carried out up to that point. Of course, you can renew your consent
at any time.
The legal basis for the use of technically necessary cookies is Art. 6 para. 1 sentence 1 lit. f) GDPR. As described above, we will rely on your consent for the processing of cookies and
tools that are not technically necessary and for which data is transferred to
the provider when they are used. The legal basis here is Art. 6 para. 1
sentence 1 lit. a) GDPR. Further information on essential (=
technically necessary) cookies and functional (= technically unnecessary)
cookies can be found in the Cookiebot cookie banner from CookieYes.
3. When you contact us by e-mail or via one of our contact forms on this website, the
data you provide (name, telephone number, e-mail address, message) will be
stored by us in order to answer your questions about existing contracts or to
prepare an offer; the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR.
If you send us a general inquiry, we process your data on the legal basis of Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest lies in responding to your request.
Please send us documents containing personal data, ideally in a sealed letter. If you wish to send us documents containing personal data by email, please note that this data could be viewed by third parties during transmission. You can also, for example, create a zip
file containing a password and send us the documents in this way.
4. We are subject to various legal obligations, e.g. under tax laws and the German
Commercial Code, which make it necessary to process your data in order to
comply with the law. These are data processing operations based on legal
requirements pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR.
5. You can also give us your consent to send you information and other offers by e-mail
for advertising purposes. You can revoke this consent at any time. The legal
basis for this processing of personal data is Art. 6 para. 1 sentence 1 lit. a)
GDPR. If we obtain consent from you, you will receive a separate consent form
that you can complete voluntarily.
If you have provided us with your e-mail address in connection with the purchase of
advice or services or at the beginning of an existing customer relationship
(existing customers), we will use this e-mail address for e-mail advertising
for our own similar products and services (Section 7 (3) UWG, Art. 6 (1)
sentence 1 lit. f) GDPR. We only use the e-mail address for advertising unless
you have objected to this use. You can also object to this use at any time
without incurring any costs other than the transmission costs according to the
basic rates. You can find the contact details under § 1 of this privacy policy.
6. To the extent that we process data in order to assert legal claims and for the defense in legal disputes, the processing is based on Art. 6 para. 1 sentence 1 lit. f) GDPR.
7. If you apply for a position at our company, possibly via the contact form or by
e-mail, we process data that you send us in connection with your application in
order to check your suitability for the position (or possibly other open
positions in our company) and to carry out the application process. The
following categories of personal data are included: Contact data (first and
last name, address), Communication data (telephone number, mobile number, fax
number, email address, language of communication), Personal data (date of
birth, place of birth, nationality, marital status, gender), Job-related and
personal data (desired place of work and working hours availability, desired
salary, willingness to relocate and travel, work permit), qualification data
(school leaving certificate, training/studies, language skills and professional
skills), data on the assessment and evaluation in the application process, data
on previous career, CV, training and work references, proof of qualifications),
application photo and application history (consent to data storage). The legal
basis is Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with. Art. 88
GDPR, § 26 BDSG.
Personal data is processed in applicant management to initiate employment contracts, in
particular for the following purposes: comparison of job requirements and
skills as well as the applicant’s expectations, defense against legal action,
communication with the applicant.
We store your data for the above-mentioned purposes. We will delete your personal data 6
months after completion of the application process. In the event that you have
consented to further storage of your personal data, we will delete the data
after the agreed period has expired.
Further information can be found in our data protection information on applicant
management.
Please send us documents containing personal data, ideally in a sealed letter. If you wish to send us documents containing personal data by email, please note that this data could be viewed by third parties during transmission. You can also, for example, create a zip
file containing a password and send us the documents in this way.
8. In some cases, we use external service providers to process your data as part of order
processing. These have been carefully selected and commissioned by us, are
bound by our instructions and are regularly checked with regard to the
technical and organizational measures to be taken. Processors may therefore
only process your personal data in the way that we have explicitly instructed
them.
The processor must have technical and organizational measures in place to process
your data securely.
Furthermore, we may pass on your personal data to third parties if contracts or similar
services are offered by us together with partners. You will receive more
detailed information on this when you provide your personal data or in the
description of the offer.
If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in this privacy policy or in the description of the offer.
§ 3 Duration of storage
Your data will be processed for the first time from the time of collection, insofar as it
is recorded by the system or you provide it to us. We delete your personal data
as soon as the purpose of the processing no longer applies, all mutual claims
have been fulfilled and there are no other statutory retention obligations or
legal justifications for the storage. Data records with personal data are
sometimes stored for different purposes, as mentioned above. Depending on the
purpose, different retention periods may apply. If a purpose no longer applies,
the data may no longer be processed for this purpose. If this data must be
available for a further purpose, the data will no longer be used for the
purpose that has ceased to apply and will be blocked. They are then only
available for the permitted purpose.
Personal data that is subject to the provisions of the German Commercial Code (§ 257
HGB), such as business letters, will be destroyed or deleted after 6 years.
Personal data subject to the provisions of the German Fiscal Code (§ 147 AO),
such as statements and accounting documents, will be destroyed or deleted after
10 years. In the event of a rejection, your application documents will be
deleted no later than 6 months after the application process has been
completed. Data from interested parties or data relating to inquiries that do
not concern an existing contractual relationship will be deleted three months
after receipt of the inquiry if no contract is concluded or after your inquiry
has been dealt with.
§ 4 Tools
This site uses so-called web fonts, which are stored locally on the server, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts from
our server into your browser cache in order to display texts and fonts correctly.
No connection is established with Google’s servers for this purpose. The use of web fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
Google Advanced Mode
We use Google Consent Mode (Advanced Mode – extended consent mode) for the use of
Google products. No cookies are set when the page is accessed, only cookieless
pings. This means that no consent is required, as the data that is transmitted
is anonymized. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.
Cookies are only set if you give your consent. In these cases, the cookies are
loaded after consent has been given. The legal basis is then Art. 6 para. 1
sentence 1 lit. a) GDPR.
According to Google, pings can generally contain the following: Function-related
information (such as headers passively added by the browser), Timestamp,
User-Agent (web only), Referrer URL, Indication of whether the current or a
previous page in the user’s website navigation history, Ad click information
contained in the URL (e.g. Boolean logic information on consent status, Random
number generated on each page load, Information on the consent management
platform used by the website owner (e.g. developer ID), Modeling for consent
mode. Pings are used in Google products to model measurement values in analysis
tools and thereby close gaps in data collection. According to Google, a certain
limit applies to data collection for data protection reasons. Further
information on Consent Mode, for example what is modeled and under what
circumstances), can be found at: https://support.google.com/google-ads/answer/10000067?hl=en-GB&sjid=10656447108205465032-EU
Google Analytics
This website uses Google Analytics. The provider is Google Ireland Limited, Gordon
House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics is a tool for
web analysis purposes. We use it to analyze the use of our website in order to
further improve our service and our website. Our website should become more and
more interesting and effective for you.
When you visit the website, Analytics places cookies on your end device. The setting of
cookies and subsequent processing will only take place with your consent. The
legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR. If you do not give your
consent, Google Analytics will not be used. You can revoke your consent at any
time and also grant new consent after revocation. Please use our cookie banner
for this purpose. Tracking methods can also be used that do not require
cookies. For website visitors who do not want their data to be used in Google
Analytics, the browser add-on for deactivating Google Analytics has been
developed. You can deactivate Google Analytics using the browser add-on. You
can download it at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
With your consent, information is collected using cookies. For example, the IP address is
collected. The IP address is shortened by the last digits. It is then no longer
possible to identify you personally. Information is transmitted to Google for
our analysis. Collected data is processed on Google servers in the EU, and IP
addresses are also truncated in the EU. However, transfers to Google in the USA
cannot be ruled out; this is only pseudonymous data. Google has undertaken to
comply with the EU-U.S. Data Privacy Framework through self-certification with
the U.S. Department of Commerce. This ensures compliance with the European
level of data protection. We have also concluded an order processing agreement
with Google.
As part of the evaluation of usage data, reports are also created on the use of the
website and your activities on the website. Visitor sources and behavior, such
as exit times and bounce rates, are recorded. Another area is conversions to
check marketing targets. All data collected is deleted after 2 months.
We also use the “demographic characteristics” function of Google Analytics on our website. Demographic data is specific information about groups of people. This function can be used to create reports that contain information about the age, gender and interests
(so-called demographic characteristics) of the users of our website. This
enables us to learn more about our target groups. The information cannot be
attributed to you or any other natural person.
If you have given Google your consent to personalized advertising and your end devices
are linked to your Google account, cross-device analyses and evaluations of
your usage behavior are possible. However, no personal data is made available
here, only statistics consisting exclusively of aggregated user data. You can
deactivate this function at any time via the ad settings in your Google
account. However, it is also possible to deactivate Google Analytics as
described above. Simply download and install the browser add-on available at
the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
We have implemented Google’s Consent Mode. Consent Mode is a consent procedure for
Google services, in particular Google Analytics. Remarketing functions of
Google Ads and Google Analytics can only be used if Consent Mode is
implemented. As described above, we use Google Advanced Mode.
Further information can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=en-GB&gl=de
You can export a copy of your content from your Google Account to back it up or use it with a service other than Google.
YouTube
We use YouTube. YouTube is a trademark of Google
Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
(“Google”). We would like to point out that Google is certified in accordance
with the EU-U.S. Data Privacy Framework. The YouTube videos will only be played
if you explicitly click on “Accept”. As long as you do not call up the video by
clicking on “Accept”, no cookies will be set and no data will be transmitted to
YouTube and the Google network.
When the video is accessed, a connection to YouTube servers is established. This
triggers further data protection processing. We have no influence on this, but
we assume that Google collects information on user behavior. According to the
provider’s own information, video statistics are created to improve
user-friendliness and prevent abuse. As soon as you are logged in to Google,
the processed data will be linked to your account when you use YouTube. If you
do not wish this to happen, please log out before using our YouTube service.
In general, Google stores data when you use this service and even if you are not
logged in. The user profiles created in this way are also analyzed. The legal
basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR, Google’s legitimate
interests in the display of personalized advertising, market research and the
needs-based design of its websites. You have the option to object to the
creation of user profiles with Google.
Further information on data protection and the processing of your data by YouTube can
be found under: https://policies.google.com/privacy?hl=en
Where legally required, we have obtained your consent to the processing of your data
as described above in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.
You can withdraw your consent at any time with effect for the future. To
exercise your revocation, deactivate this tool in the cookie banner of the
website.
§ 5 Social Media
Our website contains links to the following social media profiles of Plutoneo
Consulting GmbH.
You can find our page on XING under: https://www.xing.com/pages/plutoneo
The provider is Xing AG, Gänsemarkt 43, 20354 Hamburg. Here too, there are no
plugins. Further data protection information can be found in the currently
valid data protection declarations: https://privacy.xing.com/de/datenschutzerklaerung/druckversion
You can find our LinkedIn page at:: https://www.linkedin.com/company/plutoneo/
LinkedIn Corporation, 2029 Stierlin Court, Mountain
View, California 94043, USA; https://www.linkedin.com/legal/privacy-policy.
LinkedIn concludes a data processing agreement (DPA) with each customer for the
duration of the data processing, including EU standard contractual clauses. https://www.linkedin.com/legal/l/dpa?
To the extent required by law, we have obtained your consent to the processing of your data at LinkedIn as described above in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your
revocation, deactivate this tool in the cookie banner of the website.
§ 6 Your rights
If you have any questions or complaints about data protection, you can contact our
company. You can find the contact details under § 1 of this privacy policy
If the legal requirements are met, you also have the following rights:
– You can request confirmation from us as to
whether we are processing personal data concerning you. If this is the case,
you have the right to information about this personal data and the information
listed in Art. 15 GDPR, such as information about the processing purposes, the
category of personal data, the categories of recipients to whom your data has
been or will be disclosed, the planned storage period, the existence of a right
to rectification, erasure, restriction of processing or objection, the existence
of a right of appeal, the origin of your data if it was not collected by us;
– in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us;
– to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
– in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with
Art. 21 GDPR;
– in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another responsible party and
– to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. Generally, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. You can contact the authority responsible for us as follows:
Der Hessische Beauftragte für Datenschutz und
Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Phone: +49 (0)611-1408 0
Fax: +49 (0)611-1408 611
E-Mail: poststelle@datenschutz.hessen.de
Further German supervisory authorities can be found at:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
In addition, you have the right to object to the processing of your personal data
at any time, to the extent that we process your personal data to pursue
legitimate interests and there are grounds relating to your particular
situation. We will then no longer process your personal data unless we can demonstrate
compelling legitimate grounds for the processing which override the interests,
rights and freedoms of the data subject, or the processing serves the
establishment, exercise or defense of legal claims, Art. 21 GDPR.
§ 7 Changes
We reserve the right to make changes
and will adapt this privacy policy if necessary.
Status: 2024-09-06
