Privacy Policy

TTC Tatjana Thom Consulting

Welcome

Thank you for visiting our website. In the following, we would like to inform you about the handling of your data according to Art. 13 of the General Data Protection Regulation (GDPR).

DATA CONTROLLER

Responsible for the data processing presented below is the body named in our legal notice.

USAGE DATA

When you visit our website, so-called usage data is temporarily evaluated on our web server for statistical purposes as a log in order to improve the quality of our website. This data record consists of

• the name and address of the requested content,
• the data and time of the request,
• the amount of data transferred,
• the access status (content transferred, content not found),
• the description of the web browser and operating system used,
• the referral link, which indicates the page from which you came to ours.

The legal basis of the processing of usage data is Art. 6 (1), sentence 1 (f) GDPR. The processing is carried out in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimized display.

STORAGE OF IP ADRESS FOR SECURITY PUPOSES

In addition, we store the full IP address transmitted by your web browser for a strictly specific purpose as long as it is necessary for the performance of our services, in the legitimate interest of being able to detect, limit and eliminate attacks on our websites. After this period, we delete or anonymize the IP address. The legal basis for the processing is Art. 6 (1), sentence 1 (f) GDPR.

DATA SECURITY

In order to protect your data from unwanted access as comprehensively as possible, we take technical and organizational measures. We use an encrypted procedure on our websites. Your data is transferred from your computer to our server and vice versa via the Internet using TLS/ SSL encryption. You can usually recognize this by the fact that the lock symbol is closed in the status bar of your browser and the address line begins with https://.

REQUIRED COOKIES

We use cookies on our websites, which are necessary for the use of our websites. Cookies are small text files that are stored on your terminal device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. We do not use these necessary cookies for analytics, tracking or advertising purposes.

In some cases, these cookies only contain information about certain settings and cannot be connected to a person. They may also be necessary to enable user guidance, security and implementation of the site. We use these cookies on the basis of Art. 6 (1), sentence 1 (f) GDPR You can set your browser to inform you about the placement of cookies. In addition, you can delete them at any time via the appropriate browser setting and prevent the setting of new cookies. Please note that our websites may then not be fully displayed and some functions may no longer be technically available.

CONSENT BANNER

On our websites, we use a consent-management-platform (consent or cookie banner). The processing in connection with the use of the consent-management-platform and the logging of the settings you have made is based on Art. 6 (1), sentence 1 (f) GDPR, in our legitimate interest to play out our content according to your preferences and to be able to prove your given consent(s). The settings you have made, the consent you have given and parts of your usage data are stored in a cookie. This is retained for subsequent page requests and your consents can still be traced. You can find more information on this in the section “required cookies”. The provider of the consent-management-platform acts for us as a strictly instruction-bound service provider (data processor). A data processing agreement according to Art. 28 GDPR was agreed.

GOOGLE ANALYTICS

For demand-oriented design of our websites, we use the web analysis tool “Google Analytics”. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your terminal device and read by us. Additionally, it is possible that we retrieve recognition features for your browser or terminal device (e.g. a so-called browser fingerprint). In this way, we are able to recognize returning visitors and count them as such.

As part of the service of Google Analytics, Google Ireland Limited supports us as a data processor according to Art. 28 GDPR. The data processing may also take place by Google outside the EU or the EEA (in particular in the USA). With regard to Google, no adequate level of data protection can be assumed due to processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to file an appeal. Please keep this in mind if you decide to give your consent to our use of Google Analytics.

The data processing is based on your consent, provided that you have given your consent via our banner. The transfer to a third country takes place on the basis of Art. 49 (1) (a) GDPR.

You can revoke your consent at any time. For this purpose, please use the cookie consent widget in the bottom-left corner to adjust your privacy settings. Additionally, you change your general preferences within the profile section of your personal Google account.

Embedded Videos – YouTube

On our websites, we embed videos that are not stored on our servers. However, for data protection reasons – when you call up our websites – no content from the third-party provider is yet loaded and the third-party provider does not receive any information. Content of the third-party provider will only be loaded when you give your consent via our banner or unlock the content via the video overlay.

This provides the third-party provider with the information that you have accessed our site as well as the usage data technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. Your consent includes that content of the third-party provider is loaded. The embedding is based on your consent, provided that you have given your consent via our banner. Please note that the embedding of many videos leads to your data being processed outside the EU or EEA (in particular the USA). There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having any legal recourse. If we use providers in insecure third countries and you consent, the transfer to an insecure third country is based on Art. 49 (1) (a) GDPR.

CONTACT FORM

You have the possibility to contact us via our contact form. To use our contact form, we first need the data marked as mandatory fields from you. We use this data on the basis of Art. 6 (1), sentence 1 (f) GDPR in order to answer your request. In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not mandatory for contacting us. We process your voluntary information based on your consent. Your data will only be processed to respond to your inquiry. We will delete your data if it is no longer required and there are no legal retention obligations to the contrary. 

Insofar as your data transmitted via the contact form is processed on the basis of Art. 6 (1), sentence 1 (f) GDPR, you can object to the processing at any time.

Moreover, you can revoke your consent to the processing of voluntary data at any time. To do so, please contact the e-mail address stated in the legal notice.

STORAGE TIME

Unless we have not already informed you in detail about the storage time, we delete personal data when they are no longer required for the aforementioned processing purposes and no legitimate interests or other (legal) retention reasons prevent deletion.

OTHER DATA PROCESSORS

We share your data with data providers who support us in the operation of our websites and related processes as part of order processing pursuant to Art. 28 GDPR. These are, for instance, hosting service providers. Our service providers are strictly bound by our instructions and are contractually obligated accordingly. In the following, we will name the data processors with whom we work, if we have not already done so in the preceding text of the privacy policy. If data may be processed outside the EU or EEA in this context, we will inform you about this in the following overview:

Gandi SAS | 63-65 boulevard Masséna, 75013 Paris | Webhosting and support | Processing only within EU/EWR

YOUR RIGHT AS DATA SUBJECT

When processing your personal data, the GDPR grants you certain rights as a data subject:

• Right to revocation (Art. 7 GDPR): If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
• Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 of the GDPR.
• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data concerning you and, if necessary, the completion of incomplete data without delay.
• Right to erasure (Art. 17 GDPR): You have the right to request that personal data concerning you be deleted without undue delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e. g. if you have objected to the processing, for the duration of the review by the controller.
• Right to data portability (Art. 20 GDPR): In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.
• Right to object (Art. 21 GDPR): If data is collected on the basis of Art. 6 (1), sentence 1 (f) GDPR (data processing for the protection of legitimate interests) or on the basis of Art. 6 (1), sentence 1 (e) GDPR (data processing for the protection of public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
• Right to lodge complaint with a supervisory authority (Art. 77 GDPR): Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. The right of complaint may be asserted in particular before a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
• Assertion of your rights: Unless otherwise described above, please contact the authority mentioned in our legal notice to assert your data subject rights.