With this data privacy statement we inform you about the processing of your personal data (hereinafter “data”).

1 Responsible for data processing

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

PETER MAY Family Business Consulting GmbH & Co. KG
Kronprinzenstraße 46
D-53173 Bonn - Bad Godesberg
Phone: +49 228 36780-11
Web: www.petermay-fbc.com
E-mail: info@petermay-fbc.com

2 General information on data processing

In the course of our business and website operations, we process data. This also includes disclosure by transmission to third parties and, where applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Where we transfer data outside the EU or EEA, we have marked this accordingly below.

3 Data processing

Concerning the individual data, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:

Log file during website visit

We log your website visit. In doing so, we process:

• Name(s) of our accessed website(s),
• date and time of access,
• the amount of data transferred,
• the browser type and version,
• the operating system you use,
• the referrer URL (the previously visited website),
• your IP address,
• the requesting provider.

The legal basis for the data processing is our overriding legitimate interest in the ongoing provision and security of our website in accordance with Art. 6 (1) f) GDPR. The log file is deleted after 10 weeks, unless it is needed to prove or clarify specific legal violations that have become known within the retention period. However, as part of this data storage, your IP address will be anonymised.

Hosting

To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf. The legal basis for data processing is our overriding legitimate interest in providing our website in accordance with Art. 6 (1) f) GDPR.

Contacting us and registering for our events

If you contact us, we will process the following data from you for the purpose of processing and handling your enquiry: Name, contact details -if provided by you- and your message. The legal basis for the data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations pursuant to Art. 6 (1) b) GDPR and/or our overriding legitimate interest in processing your enquiry pursuant to Art. 6 (1) f) GDPR.

Contacting us for applications

If you contact us to send us your application as an employee:in, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired place of employment, etc.), your message and the application documents submitted will be processed exclusively for the purpose of processing and handling your application request. The legal basis for data processing is primarily § 26 BDSG. According to this, the processing of data that is required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 Para. 1 f) GDPR, namely for the assertion and/or defence of claims.

Contract fulfilment and data management in the context of service provision

We process various data as part of the provision of our services and to initiate and manage the existing contractual relationship between you and us. If you have commissioned us to provide a service, we process your data (if provided: name, contact details, address) and all information required in the context of the performance of the contract exclusively for the purpose of processing and handling the contractual relationship. This includes in particular our appropriate advice and support, correspondence with you, invoicing, fulfilment of our accounting and tax obligations. Accordingly, the data is processed on the basis of Art. 6 (1) b) GDPR as well as for the fulfilment of our legal obligations pursuant to Art. 6 (1) c) GDPR. If this is necessary to process the order, your data will be passed on to third parties. This includes in particular the disclosure to supervisory authorities for the purpose of correspondence as well as for the assertion and defence of your rights. We take all appropriate measures to only transfer personal data to the extent necessary for the underlying purpose.

Newsletter

In order to provide you with regular information about our company and offers, we offer to send you an e-mail newsletter. With your newsletter registration, we process the data you entered during registration (e-mail address and other voluntary information). To prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration is logged. This concerns the time of registration and confirmation as well as your IP address.

The legal basis for sending the newsletter is your consent in accordance with Art. 6 Para. 1 a) GDPR. The data processing in connection with the sending of the confirmation email for your registration and the associated data logging is carried out in accordance with Art. 6 para. 1 f) GDPR based on our legitimate interest in proving your proper registration.

If you give us your consent, we also evaluate in the newsletters whether you have opened the newsletter as well as the scrolling and clicking behaviour in the newsletter. This is done for the purpose of optimally adapting our newsletter to your interests and improving the content of our newsletter. The legal basis for the analysis of the newsletter is your consent in accordance with Art. 6 Para. 1 a) GDPR.

For the dispatch of the newsletter, we use service providers to whom we transmit the aforementioned data.

Use of cookies

We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser. Information about the specific cookies we use, their providers and purposes can be found in our Consent banner. There you can give your consent to the respective services, revoke it or subsequently adjust your settings.

Our Consent Banner

In order to fulfil our obligations under data protection law, we use a consent management platform which, however, is operated exclusively by us. Through the use of the consent management platform, data of website visitors on consent given or revoked (opt-in, opt-out data, consent ID, consent number, date and time of consent, implicit or explicit consent, banner language, customer preference, template version) and device data (device information, browser information (http agent, http referrer), anonymised IP address) are processed. The data processing is carried out to fulfil our legal obligations according to Art 6 (1) c) GDPR.

Analysis / Marketing

Google services

We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) on our website. It is possible that this will also result in data transfers to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA. There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. Please contact info@petermay-fbc.com for this.

Google Analytics

We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services associated with the use of the website in order to improve user-friendliness. When Google Analytics is used, the interactions of website visitors are primarily recorded and systematically evaluated with the aid of cookies.

We use Google Analytics with the extension “anonymizeIp()”. This shortens IP addresses within the member states of the EU or EEA. If a transmission to Google servers in the USA takes place, the full IP address is only transmitted in exceptional cases and shortened there. A direct reference to a person is therefore generally excluded. In particular, it is no longer possible to assign the IP address to the computer or terminal device of the website visitor.

The following data is processed through the use of Google Analytics:

• 3 bytes of the IP address of the called system of the website visitor (anonymised IP address),
• the website called up,
• the website from which the user reached the page called up on our website (referrer),
• the sub-pages accessed from the website,
• the time spent on the website
• the frequency with which the website is accessed.

Google states that it will not associate your IP address with any other data held by Google.

Legal basis and revocation

The legal basis for data processing within the scope of the aforementioned Google services is your prior consent pursuant to Art. 6 (1) a) GDPR. You can revoke your consent at any time with effect for the future by adjusting your preferences in our Consent banner.

Podcast

We provide the option of using our podcast on our website. We use the podcast service of Podigee GmbH, Schlesische Straße 20, 10997 Berlin (“Podigee”). If you call up a podcast service, your IP address and other device information are processed in order to enable you to listen to the podcast. In doing so, Podigee is forwarded, which processes your data in accordance with your instructions. The legal basis for the data processing is our overriding legitimate interest in the optimal marketing of our online offer in accordance with Art. 6 (1) f) GDPR.

External content

We use dynamic contents (“content”) from third parties to optimise the presentation and offer of our website. When visiting the website, a request is automatically made to the server of the respective content provider via an interface, during which certain log data (e.g. the user ’s IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there. We use external content in connection with the following functionalities:

Integration of YouTube videos

We have integrated videos from the YouTube portal of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”). Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) is responsible for data processing at YouTube. When playing the videos, however, log data is transferred to YouTube's servers in the USA. The legal basis for the data processing is our overriding legitimate interest in the optimal marketing of our online offer in accordance with Art. 6 (1) a) GDPR. There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. Please contact info@petermay-fbc.com for this.

Google Maps

We use the map service “Google Maps” from Google on our website to provide you with an interactive map. When displaying the map, data including your IP address and your location are transmitted to Google servers and stored there. This processing is carried out on the basis of our overriding legitimate interest in optimal marketing of our offer in accordance with Art. 6 (1) a) GDPR. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) is responsible for data processing for Maps. It cannot be ruled out that data is transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. Please contact info@petermay-fbc.com for this.

The processing of personal data by us is based on our overriding legitimate interest in the security of our website in accordance with Art. 6 (1) f) GDPR. There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. Please contact info@petermay-fbc.com for this.

4 Duration of data storage

We only store personal data for as long as it is necessary for the purposes for which it is processed or for as long as any consent you have given us has been revoked by you. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, irrespective of the processing purposes.

5 Your data subject rights

Information

Upon request, we will provide you at any time and free of charge with information about all personal data that we have stored about you.

Correction, deletion, restriction of processing (blocking), objection

If you no longer agree with the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible according to the applicable law) on the basis of a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future. You have the right to object in particular in cases where your data is required for the performance of a task that is in the public interest or in our legitimate interest, as well as profiling based on this. You also have such a right of objection in the event of data processing for the purpose of direct advertising.

Right to revoke consent with effect for the future

You may revoke your consent at any time with effect for the future. Your revocation does not affect the lawfulness of the processing up to the time of revocation.

Data portability

If data is processed on the basis of a contract, pre-contractual negotiations, consent or with the help of automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another responsible party if you wish.

Restriction of processing

Data for which we are unable to identify the data subject, e.g. if it has been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.

Exercising your data subject rights and right of appeal

If you have any questions about the processing of your personal data, if you wish to obtain information, correct, block, object to or delete data, or if you wish to have your data transferred to another company, please contact info@petermay-fbc.com. You also have the option of complaining to a supervisory authority about your data protection rights.