Privacy policy

 

Overview 

The protection of personal data and the responsible handling of information you entrust to us are of great importance and special concern to us. PAConsult processes personal data only in compliance with legal regulations.

This privacy policy informs you about the processing of personal data when

• of the use of our website (see 2)
• the use of our contact form (see section 3)
• application for a position (see item 4).

Furthermore, this privacy policy contains information about recipients of personal data within the EEA (see Section 5), in third countries (see Section 6), the erasure of your personal data and retention periods (see Section 7), your rights as data subject (see Section 8), and automated decision-making (see Section 9).

1. Controller and Data Protection Officer 

PAConsult GmbH, Birkenau 3, 22087 Hamburg

Phone: 040 / 229 48 79-0
E-Mail: info@paconsult.de

Further information can also be found in the Legal Notice.

You can reach our company data protection officer at datenschutz@paconsult.de

2. Use of our Website 

When you visit our website, we process personal data to enable your use of it (usage data), as described in Section 2.1. We also process personal data for web analytics and other purposes as described in Section 2.2 et seq. Below you will find information about the legal basis, the purposes, and, where applicable, legitimate interests and the necessity of processing your personal data.

2.1 Data Processing to Enable Website Use

Usage data includes your IP address and data about the start, end, and subject matter of your use of the website. It also includes technical data transmitted by your browser, such as browser type/version, the previously visited website (referrer URL), monitor resolution, operating system, and, if applicable, device information (e.g., device type), etc. We process this data to provide and tailor this website to your needs in our legitimate interest (Art. 6 sec. 1 lit. f GDPR). If you would like detailed information about the balancing of interests, please contact one of the addresses listed in section 1.

2.2 Cookies and Web Analysis 

When you visit our website, information can be stored on your device in the form of cookies. A cookie is a small text file sent by a web server to your browser and stored on your device. When you visit our website again, cookie data is transmitted back to our web server. This allows us, for example, to recognize you and take your individual settings into account when displaying the website. Cookies can be divided into first-party cookies (set by PAConsult) and third-party cookies (set by third parties). Third-party cookies can be used as part of web analytics. They can be combined with further information about your activities on our website and are processed in pseudonymized usage profiles. This helps us analyze information about web traffic and improve our website to adapt it to the needs of users. We use this information solely for statistical evaluations. In addition to cookie-based web analytics, there are non-cookie-based web analytics using other means, such as your individual device settings, to recognize you when you visit our website again.

The legal basis for the use of first-party cookies is our legitimate interest in the provision of our website in accordance with Art. 6 para. 1 lit. f GDPR. The legal basis for the use of third-party cookies and web analytics is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) TDDDG. When you visit our website for the first time or when you visit it again, we use a cookie banner to inform you about the use of cookies and web analysis and ask for your consent. If you click on „Allow all“, you declare your consent. You can revoke your consent at any time with effect for the future. You can also make settings directly in our cookie banner, which lists the cookies used on our website and describes their function and storage duration.

You can find more information about cookies on this website here:

2.3 Google Analytics 

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand and thus anonymized. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting the settings in our cookie banner. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:https://tools.google.com/dlpage/gaoptout?hl=de).

Google is certified under the EU-U.S. Privacy Framework, which ensures that the level of protection for natural persons guaranteed by the GDPR is not compromised by data transfers. For more information about Google Analytics' privacy, please visit: https://www.Google.de/intl/en/policies/.

2.4 Google AdWords Conversion, Google Dynamic Remarketing, and Google Tag Manager 

We also use Google Analytics to analyze data from Google AdWords services for statistical purposes. This allows us to analyze what happens after a user clicks on our ad to improve our offerings. Furthermore, these services provide you with interest-based advertising. Your consent is required for this. If you do not wish to do so, you can indicate this in the cookie banner and also prevent it via Google's Ad Preferences Manager: https://myadcenter.google.com/personalizationoff?hl=de .

Furthermore, we use Google Tag Manager to manage website tags. A tag is a JavaScript snippet that sends information from a website to recipients, especially in the context of web tracking. The Google Tag Manager tool itself does not collect personal data. The tool ensures that other tags are triggered, which in turn may collect data (e.g., the Google Analytics tag). Google Tag Manager does not access this data. If an opt-out has been made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager.

Google is certified under the EU-U.S. Privacy Framework, which ensures that the level of protection for natural persons guaranteed by the GDPR is not compromised by data transfers. For more information about Google Analytics' privacy, please visit: https://www.google.de/intl/de/policies/.

2.5 Leadinfo

We use the lead generation service of Leadinfo B.V., Rotterdam, The Netherlands. This service identifies company visits to our website using IP addresses and provides us with publicly available information, such as company names or addresses. Additionally, Leadinfo uses two first-party cookies to analyze user behavior on our website and processes domains from form entries (e.g., „leadinfo.com“) to correlate IP addresses with companies and improve its services. For more information, please visit www.leadinfo.com.

If you do not wish for this, you can specify this in the cookie banner and also prevent it via Leadinfo's Ad Preference Manager: www.leadinfo.com/en/unsubscribe. In case of an opt-out, your data will no longer be collected by Leadinfo.

2.6 LinkedIn

Our website contains a link to the social network LinkedIn. If you follow the link, information may be transmitted to the provider. For the purpose and scope of data collection and further processing and use of the data by the provider, as well as your rights and settings options for protecting your privacy, please refer to LinkedIn's privacy policy:

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
https://www.linkedin.com/legal/privacy-policy/.

3. Contact form and inquiries by email, phone, or fax 

We process your personal data when you use our contact form, as well as when you contact us by email, phone, or fax. Your data will be stored to answer your inquiry. The legal basis is either the performance of a contract or our legitimate interest in providing a contact form (Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR) or based on your consent (Art. 6 (1) (a) GDPR) if requested; consent can be withdrawn at any time. You are neither obligated to contact us via the contact form or otherwise, nor to provide personal data. If you do not provide your personal data, we may not be able to process your inquiry. Otherwise, there will be no consequences for you. If you would like more detailed information on the balancing of interests, please contact one of the addresses listed under number 1. 

4. Job Application 

Within the application process, regardless of whether the application is submitted via the online module, by email, or by post, we process your personal data. Below you will find information about the legal basis, the purposes, and, if applicable, the legitimate interests and the necessity of processing your personal data.

The legal basis for processing your personal data is Article 6(1)(b) of the GDPR. The processing is carried out for the purpose of contacting you and assessing your suitability for the position you are applying for.

It is not possible to apply to us without providing personal data. You are not obligated to apply to us, nor are you obligated to provide personal data. If you do not provide us with personal data, we will not be able to consider your application. Otherwise, there will be no consequences for you.

5. Transfer to recipients of personal data within the EEA

We only transmit personal data to third parties insofar as this is necessary for the provision of our service or is legally required within this framework. Within the scope of the purposes mentioned herein, personal data will be passed on to service providers who act on our behalf and in particular support us in providing our services. In addition to their legal obligation to comply with all data protection regulations, these service providers are also bound by further contractual provisions on data protection. This includes, in particular, an obligation as a processor within the meaning of Art. 28 GDPR. In particular, we have passed on personal data to the following categories of service providers:

• Accounting, financial institutions, tax and legal advice;
• IT services and infrastructure, e.g., for the application process;
• IT Support and Maintenance;
• Data destruction and facility services.

In addition to the categories already mentioned, other categories of service providers may exist or be added.

Furthermore, we transfer personal data to other recipients only if there is a legal basis for doing so or if you have given your prior consent. You can revoke any consent you have given at any time with effect for the future. We will only disclose your data to state authorities within the scope of legal obligations or based on an official order or court decision, and only to the extent that this is permissible under data protection law.

6. Transfer of personal data to recipients in countries outside the EEA 

To the extent required for our purposes, we may also transmit your data to recipients outside the EU. This is particularly the case when we have to transmit this data to recipients in third countries as part of contract processing or due to legal regulations. Otherwise, we only transmit data to third countries if it is ensured that the recipient of the data has implemented an adequate level of data protection within the meaning of Art. 45 GDPR or appropriate safeguards within the meaning of Art. 46 (2) and (3) GDPR, and no other interests worthy of protection oppose the data transmission.

We may transmit your data to the following categories of service providers:

• IT services and infrastructure, e.g., for customer communication;
• IT Support and Maintenance;
• Web analytics;

In addition to the categories already mentioned, other categories of service providers may exist or can be added at any time.

7. Deletion 

We delete your personal data as soon as it is no longer required for the aforementioned purposes of processing, if there are no compelling legitimate interests of PAConsult to the contrary in the event of an objection, or if there is no other legal basis for processing in the event of a revocation. In certain cases, e.g. if there is a legal retention obligation, your personal data will be temporarily blocked and deleted upon expiry of the retention period.

Position-related data will be retained until a decision is made and will then be deleted at the latest six months later or, in the case of a successful application, transferred to your personnel file.

8. Your Rights

As a data subject, you have the right to Confirmation, whether data related to you is processed by PAConsult, and if so, the right to Information about these personal data (Art. 15 GDPR), a right to Correction your incorrect data (Art. 16 GDPR), a right to Deletion (Art. 17 GDPR) and a right to Limitation (Blocking) Of Your Data (Art. 18 GDPR).

Furthermore, in the event of processing based on Art. 6 para. 1 lit. e or f GDPR Objection object to the processing (Art. 21 GDPR), whereby you must provide a special reason, except in the case of direct marketing. If you have provided this data, you can Transmission request the data (Art. 20 GDPR). Whether and to what extent these rights exist in individual cases and under what conditions they apply is legally established in the named provisions.

If the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, you can revoke it at any time with future effect revoke (Art. 7(3) GDPR). You also have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR).

If you have any questions or complaints regarding data privacy at [Company Name], we recommend that you first contact our Data Protection Officer (see contact details in section 1).

9. No automated individual decision-making

We do not use your personal data for automated individual decision-making within the meaning of Article 22(1) GDPR.

10. Amendment of the Data Protection Declaration 

New legal requirements, corporate decisions, or technological developments may necessitate changes to our Privacy Policy. The Privacy Policy will be adjusted accordingly. You can always find the most current version on our website.

11. Friendly Captcha

We use Friendly Captcha (hereinafter „Friendly Captcha“) on this website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

Friendly Captcha is used to verify whether data input on this website (e.g., in a contact form) is performed by a human or an automated program. To do this, Friendly Captcha analyzes the website visitor's behavior based on various characteristics. For the analysis, Friendly Captcha evaluates various pieces of information (e.g., anonymized IP address, referrer, visit time, etc.). Further information can be found at: https://friendlycaptcha.com/legal/privacy-end-users/.

The storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Sec. 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Order processing

We have entered into a Data Processing Agreement (DPA) for the use of the service mentioned above. This is a contract required by data protection law, which ensures that the service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

April 2025