Privacy Policy
Note: The legally binding privacy policy is the German version. This translation is provided for convenience only.
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is COD Consult GmbH, Agnes-Sapper-Str. 20, 97074 Würzburg, Germany, Phone.: +49 160 98 95 16 66, e-mail: dorsch@cod-consult.com. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Collection When You Visit Our Website
2.1 When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you: our visited website, date and time at the moment of access, amount of data sent in bytes, source/reference from which you came to the page, browser used, operating system used, IP address used (if applicable: in anonymized form). Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
Cloudflare
We use a content delivery network offered by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. This service enables us to deliver large media files such as graphics, page content or scripts faster via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 (1) point f GDPR. We have concluded an order processing agreement with the provider. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework.
4) Cookies
In order to make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted after the browser is closed (so-called "session cookies"), in other cases, these cookies remain on your end device for longer (so-called "persistent cookies"). You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance.
5) Contacting Us
5.1 Microsoft Bookings
For the provision of an online appointment booking function, we use the services of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For the purpose of making an appointment, your first name, surname and e-mail address (and telephone number, if applicable) are collected in accordance with Art. 6 (1) point b GDPR and transferred to the provider. After the appointment has been held, your data will be deleted by the provider. We have concluded an order processing agreement with the provider. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework.
5.2 Contact Form & Email
When you contact us (e.g. via contact form or e-mail), personal data is collected. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. Your data will be deleted after final processing of your enquiry, provided there are no legal storage obligations to the contrary.
6) Web Analysis Services
6.1 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). When using Google Analytics 4, so-called "cookies" are used as standard. The information collected by cookies about your use of the website is usually transmitted to a Google server and stored there. This may also result in the transmission of information to the servers of Google LLC in the USA. The IP address is always collected and processed only in an anonymized manner. Processing takes place only with your express consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework.
6.2 Google Tag Manager
This website uses the "Google Tag Manager", a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager provides a technical basis for bundling various web applications. The Google Tag Manager transmits your IP address to Google and may store it there. Processing only takes place with your express consent in accordance with Art. 6 (1) point a GDPR.
7) Site functionalities
Google reCAPTCHA
On this website, we use the CAPTCHA service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The service checks whether an input is made by a natural person or abusively by machine and automated processing, with the aim of blocking spam and similar automated attacks. The provider collects the IP address of the end device used, the recognition data of the browser, the operating system type and the date and duration of the visit. If processing is based on cookies, this will only take place if you have given your express consent in accordance with Art. 6 (1) point a GDPR.
8) Tools and Miscellaneous
8.1 Cookie consent tool
This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users in the form of an interactive user interface when they access the page. If, in individual cases, personal data is processed, this is done in accordance with Art. 6 (1) point f GDPR and Art. 6 (1) point c GDPR.
8.2 Cloudflare
For security purposes, this website uses the service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The provider protects the website and the associated IT infrastructure from unauthorised third-party access, cyber attacks and viruses and malware. The provider collects the IP addresses of users and, if necessary, further behavioural data. Processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interests. We have concluded an order processing agreement with the provider.
9) Rights of the Data Subject
You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). To exercise these rights, please contact us using the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority.
10) Duration of storage of personal data
The duration of the storage of personal data is determined on the basis of the respective legal retention period (e.g. retention periods under commercial and tax law). After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for contract performance or contract initiation.