Data protection

 

Data protection declaration

1. Scope and subject-matter of the data protection declaration  
The subject-matter of this Data Protection Declaration is the provision of information regarding which personal data are collected through the website available at prw-consulting.de and the purpose for which the data are processed. Where our website contains links to other websites, we have no influence or control over the linked contents and the data protection provisions which apply to them. We recommend that the privacy policies of the respective websites are read to ascertain if and to what extent personal data are collected, processed, used or made available to third parties.

2. Definitions and terms

Personal data: Any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Controller: Designates the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Recipient: Designates a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
The complete text of the General Data Protection Regulation (GDPR), including further definitions and terms, is available online through the following link.

3. Name and contact details of the Controller
PRW Consulting GmbH, Leonrodstr. 54, 80636 Munich, represented by its Chief Executive Officers Wilfried Reiners and Ralph Bösling, phone +49 89 210977-70, email info@prw-consulting.de

4. Name and contact details of the Data Protection Officer
Claudia Albrecht, +49 89 210977-60, claudia.albrecht@prw-consulting.de

5. Categories of personal data

Area: 
Access of the website
Explanation:
Use of the website
Personal data IP address, cookie ID;
Description When our website is accessed, we collect access data and store them in a log file. This includes the IP address. The log file also stores the name of the website accessed, the file accessed, date and time of access, amount of data transferred, notification about successful access, browser type and version, the operating system, referrer URL (the previously visited website) and the requesting provider. In addition, when you access our website cookies are set on your device (laptop, tablet, smartphone or PC). Please refer to the information on cookies and opt-out in the “Notice regarding possibilities to object to data processing” for details on the cookies used on the website, the specific purpose of the respective cookies and a description of how to erase cookies.
Purpose of data processing   The log file data, including the IP address, are collected in order to provide an undisrupted connection to the website and enable users to use our website smoothly. The log file also serves to analyze system security and stability and is also used for administrative purposes. The use of cookies is designed to help us render the use of our service and our website more pleasant to users, as we can use cookies to ascertain whether a particular user has already visited an individual page of our website. The cookie ID also allows us to obtain information regarding user behavior or search requests and allows us to adapt the service to the interests of the user during future visits.
Interest in data processing The log file data, including the IP address, exclusively serve the purpose of optimizing the technology and design of the website and the securing of our systems (e.g. in the event of an attack of our IT or a security event). The data in the log file, including the IP address, cannot be traced back to an identifiable person when our website is accessed. This can only take place if you simultaneously log in to our client portal. In this case, we will be able to allocate the IP address to you personally. By way of the cookie ID, we will learn if and to what extent you have already visited our websites and when you returned to them. Please refer to the information on cookies and opt-out in the “Notice regarding possibilities to object to data processing” for details and information about how to erase cookies.
Duration of data storage The IP address is erased two (2) months after collection. Please refer to the information on cookies and opt-out in the “Notice regarding possibilities to object to data processing” for further details about the cookies, their storage period and information about how to erase cookies.
Legal basis Art. 6 (1) (f) GDPR
Provision prescribed or required The provision of the aforementioned personal data is not prescribed by statute or contract. However, without an IP address and cookie ID, the service and functionality of the website may not be available, or only be available to a limited extent.
Area:
Contact form:
Explanation
Personal data Email address, first and last name, comment;
Purpose of data processing The data on your contact form, including the enquiry itself, are only used to respond to your enquiry, i.e. to communicate with you, and to provide offers.
Duration of data storage Duration of processing and responding to the enquiry, or until we are requested to erase the data. You may at any time withdraw your consent to the processing of your data without this affecting the lawfulness of the processing which has taken place on the basis of consent up to the time of the revocation;
Legal basis Art. 6 (1) (a)(b) GDPR
Provision prescribed or required The provision of the personal data is not prescribed by statute or contract. However, if this information is not provided, we will not be able to process the enquiry.

6. Your rights
You have the right to request that we confirm whether we process personal data and the right to demand information about this personal data. You also have the right to demand correction, erasure and restriction of data processing and the right at any time to object to the processing of your personal data or to withdraw your consent to the processing of the personal data, and the right to demand data transfer. You also have the right to complain to a supervisory authority in the event of a breach of data protection.

You may assert all rights against us by email to info@prw-consulting.de or through the contact details listed in the “Controller” section.

Data protection information for our website

The following information is designed to give you a quick and simple overview of the data we collect and process in connection with your use of our website. A comprehensive explanation is available in our Data Protection Declaration and in the document regarding your additional objection options (“Notice regarding possibilities to object to data processing”).

1. Who is responsible for data protection?  
PRW Consulting GmbH, Leonrodstr. 54, 80636 Munich, represented by its Chief Executive Officers Wilfried Reiners and Ralph Bösling, phone +49 89 210977-70, email info@prw-consulting.de

2. How can you contact our Data Protection Officer?  
Claudia Albrecht, +49 89 210977-60, claudia.albrecht@prw-consulting.de

3. Which data do we process through our website and for what purpose?

Area Which data do we process? For what purpose? On which legal basis?
Access of the website IP address, cookie ID (cookies) Enabling a connection with our website to be established and the smooth use of our website by the user; analysis of the system security and stability, and administrative purposes. Please refer to the information on cookies and opt-out in the “Notice regarding possibilities to object to data processing” for details on the cookies used on the website, the specific purpose of the respective cookies and a description of how to erase cookies. Art. 6 (1) (f) GDPR
Contact form First and last name, email, message Provision of the contact form itself and enabling interested parties to contact us; communication with you and processing of your enquiry. No further processing takes place. Art. 6 (1) (a)(b) GDPR

4. Do we forward data and if so, to whom?

Area Which data do we forward? Recipient and purpose of data forwarding
We do not currently forward the personal data collected through our website to third parties or other bodies.

5. Do we transfer data to so-called third countries?

Area Which data are affected? Transfer to a third country
We do not currently transfer the personal data collected through our website to third countries.

6. How long are the data stored for, and/or when are they erased?

Area Which data are affected? Duration of storage and/or erasure of the data
Access of the website IP address, cookie ID (cookies) Please refer to the information on cookies and opt-out in the “Notice regarding possibilities to object to data processing” for details on the duration of storage of cookies in connection with the creation of our log files, the use of our tracking tools and a description of how to erase cookies prematurely.
Contact form First and last name, email, message For the duration of the communication with you, but at most for one (1) year after the last contact has taken place, or until we are asked by you to erase the data.

7. Is there any obligation to provide the personal data?  
The provision of the personal data is not prescribed by statute or contract. However, without data processing taking place, some areas of the website cannot be used, or only used to a limited extent. In addition, communication with you or an evaluation of your application documents is not possible without the processing of the aforementioned data. Please refer to our Data Protection Policy for further information.

8. Does profiling take place on our website?  
Yes. The tracking tools we use create a (pseudonymous) user profile for the purpose of analyzing user behavior or search requests. You can find more details on the operation of these tracking tools and information about how to erase the associated cookies (and/or plugins) and prevent the tracking (the creation of a profile) in the information on cookies and opt-out in the “Notice regarding possibilities to object to data processing” and in our Data Protection Declaration.

9. What rights do you have in connection with the processing of these data?  
You have the right to request that we confirm whether we process personal data and the right to demand information about this personal data. You also have the right to demand correction, erasure and restriction of data processing and the right at any time to object to the processing of your personal data or to withdraw your consent to the processing of the personal data, and the right to demand data transfer. You also have the right to complain to a supervisory authority in the event of a breach of data protection.

Data protection information for our clients

In this data protection notice we inform you about our processing of your personal data and of the rights to which you are entitled.

1. Who is responsible for data protection?
PRW Consulting GmbH, Leonrodstr. 54, 80636 Munich, represented by its Chief Executive Officers Wilfried Reiners and Ralph Bösling, phone +49 89 210977-70, email info@prw-consulting.de

2. How can you contact our Data Protection Officer?
Claudia Albrecht, +49 89 210977-60, claudia.albrecht@prw-consulting.de

3. Which data do we process and where do they come from?
We process personal data which we obtain in connection with an impending transaction (e.g. enquiry, initial consultation, phone or email contact, creation of an offer) or a business relationship with you. This particularly includes the following data: Basic data (e.g. name, address and contact details, bank details), tax data (tax identification number) or correspondence data (e.g. written correspondence with you, client relations, minutes of consultation meetings, facts related to current projects or enquiries).

4. What do we process your data for (purpose of processing) and on what legal basis?
a) On the basis of your consent to data processing (Art. 6 (1) (a) GDPR)
If and to the extent that you have given your consent to the processing of personal data, that consent is the legal basis for the processing specified in the declaration of consent. This applies, for example, to the receipt of electronic customer information. You can revoke consent at any time with effect for the future. This also applies to declarations of consent which you issued to us before the GDPR came into effect, i.e. prior to May 25, 2018.
b) To perform our contractual obligations (Art. 6 (1) (b) GDPR)
Your data are processed to prepare or implement our contracts with you, i.e., for example, to perform our services (e.g. enquiries in the area of data protection law, etc.). The specific purposes of data processing in each individual case depend on the respective service and product specifications and the associated contract documents.
c) On the basis of a weighing up of interests (Art. 6 (1) (f) GDPR)
Your data may also be used by us or third parties on the basis of a weighing up of interests in order to safeguard legitimate interests. This takes place, for example, for the purpose of developing our services or systems and products, to ensure IT security and IT operations, to perform advertising, market and opinion research, to assert legal claims and carry out defense in the event of legal disputes, to prevent and investigate criminal acts and for the purpose of risk management and fraud prevention.
d) On the basis of legal requirements (Art. 6 (1) (c) GDPR)
We are subject to a number of statutory obligations which are associated with data processing. This includes, for example, taxation laws and statutory accounting, the response to enquiries and orders from national or foreign supervisory or criminal prosecution authorities and the observance of monitoring and notification obligations under taxation law.

5. Who do we forward the data to?
Any forwarding of data by us is performed within the company only to departments who require the data to fulfill their contractual or statutory obligations or to perform their respective tasks (e.g. client relations, IT, sales and marketing). Furthermore, external bodies will, without exception, only receive your data if they have been contractually committed by us to their duties as a third-party data processor (Art. 28 GDPR) and guarantee that your data are processed in accordance with our instructions. This includes, for example, service providers in the areas of client relations, accounting, IT and logistics. In all other respects, data are only forwarded to persons or bodies with respect to whom you have authorized data transfer.

6. Do we transfer data to third countries?
Your data are only processed within the European Union and states within the European Economic Area (EEA). In any other case, you will always be informed by us in advance, including notification of your right separately to object to such data transfer at any time.

7. For how long do we store the data?
We only store your personal data for as long as this is required to perform the associated contractual services. This includes, in addition to the duration of the actual commercial relationship, data processing in the context of impending and terminated contracts. In addition, we are subject to a number of retention and documentation duties, some of which result from the German Commercial Code (Handelsgesetzbuch) and taxation laws (Abgabenordnung, AO). The retention or documentation periods prescribed in these laws amount to five to ten years. Finally, the duration of storage is also determined by the statutory limitation periods, for instance those stipulated by Sections 195 ff. of the German Civil Code (Bürgerliches Gesetzbuch, BGB), which are usually three years but may be up to 30 years in certain cases.

8. Is there any obligation to provide the personal data?
In the context of our commercial relationship, you only need to provide the personal data which are required to begin, implement and end a commercial relationship. Otherwise the conclusion of the contract or the implementation of the contract become impossible.

9. To what extend does automated individual decision-making take place?
We generally do not use automated individual decision-making pursuant to Section 22 GDPR to establish and implement commercial relationships. Should we decide to use such procedures in individual cases we will specifically inform you of this fact.

10. To what extend do we use your data to create profiles?
We use your data in part by automated process with the aim of evaluating particular personal aspects (“profiling” pursuant to Art. 4 (4) GDPR). Profiling is used, for example, in order to ascertain your potential interest in products or services provided by us. This analysis is done by way of statistical processes, using current client data and past client data. We use the results in order to approach you in a more tailored and purposeful manner.

11. What are your rights with regard to data protection?
Under the applicable legal provisions, you have the right to request that we confirm whether we process personal data and the right to demand information (Art. 15 GDPR, Section 34 of the German Federal Data Protection Act (BDSG)) about this personal data. You also have the right to demand correction (Art. 16 GDPR), erasure (Art. 17 GDPR, Section 35 BDSG) and restriction of data processing (Art. 18 GDPR) and the right at any time to object to the processing (Art. 21 GDPR) of your personal data or to withdraw your consent to the processing of the personal data, and the right to demand data transfer (Art. 20 GDPR). In addition, in the event of any breaches of data protection you are entitled to complain to a supervisory authority (Art. 77 GDPR, Section 19 BDSG).

12. Separate information regarding your right to object
1. Right to object in individual cases
You have the right, for reasons resulting from your particular situation, to object at any time to the processing of personal data concerning you which takes place on the basis of Art. 6 (1) (f) GDPR (Data processing on the basis of a weighing up of interests). This also applies to any profiling in terms of Art. 4 No. 4 GDPR based on this provision which may take place e.g. for client advice and client relations and sales purposes. If you object, your personal data will no longer be processed, unless PRW Consulting GmbH proves mandatory reasons for processing which are worthy of protection and outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
2. Right to object to processing of data for the purpose of direct advertising
PRW Consulting GmbH may also process your data within the scope of the legal provisions for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising, without incurring any costs other than those charged as transmission costs according to the applicable basic rates. This also applies to profiling if it is in connection with such direct advertising. If you object to the processing for the purposes of direct advertising, we will no longer process your personal data for these purposes. No particular formalities need to be observed to object. Contact details can be found in Section 1.

Data protection information for applicants

General data protection information for applicants

Dear applicant,

We value your trust in us, so the protection of your data and your privacy rights and the observation of your right of informational self-determination with regard to the collection, processing and use of your personal data are important to us. The following information is designed to give you a quick and simple overview of the data we collect and process in connection with your application.

PRW Consulting GmbH, Leonrodstraße 54, 80636 Munich (hereinafter referred to as: "PRWC"), represented by its Chief Executive Officers Wilfried Reiners and Ralph Bösling, email: info@prw-consulting.de, is responsible for data protection. You can contact us by phone on: +49 89 210977-70 or by email: info@prw-consulting.de. You can contact our Data Protection Officer on: +49 89 210977-60 or by email: claudia.albrecht@prw-consulting.de.

PWC processes your application data exclusively in order to evaluate professional suitability and to make contact with you (Art. 6 (1)(b) GDPR, Section 26 GDPR). Your application documents are only disclosed to members of the Executive Management, who need them to evaluate the application and for recruitment purposes.

We do not process your applicant data outside the European Union or states outside the European Economic Area (EEA).

PRWC only stores your data for as long as this is required to perform the application procedure or, if you are recruited, to implement the employment relationship. In the event that you are not successful at this stage, we will delete your application documents at the latest six months after we make our decision, unless you have expressly given us permission to include you in our applicant pool in order to contact you about other jobs/positions if available.

We do not use automated decision-making processes, including profiling, in our application process. You are not under any statutory or contractual obligation to provide the data. However, you will appreciate that in the absence of complete information, we may not be able to take your application into account.

You have the right to request that we confirm whether we process personal data and the right to demand information about this personal data. You also have the right to demand correction, erasure and restriction of data processing and the right at any time to object to the processing of your personal data or to withdraw your consent to the processing of the personal data, and the right to demand data transfer. In addition, in the event of any breaches of data protection you are entitled to complain to karriere@prw-consulting.de and to a supervisory authority.

Wilfried Reiners and Ralph Bösling Executive Management

 

Information about the options to object to data processing

Find out here which tools we use on our website (web tracking, advertising, cookies, plug-ins, beacons, pixels, tags, scripts, etc.), how they work and how you can object to the processing of your personal data in individual cases, or erase the personal data collected in this way. More information can be found in our Data Protection Declaration.

General information about cookies  
A cookie is a small file which is stored in the browser of the terminal when a website is accessed. Cookies help to, for example, identify the respective terminal or ensure that our website is completely and correctly displayed. Cookies also help us to provide the services included in the website, to personalize contents and to adapt and analyze advertising content individually.

Which type of cookies are there?  
Depending on their function and their purpose, cookies can be divided into five categories: Strictly necessary cookies, performance cookies, functional cookies, analysis cookies and cookies for marketing purposes. Please note that not all of the cookies listed herein may be used if you access our website using a mobile terminal.
Strictly necessary cookies (essential cookies)  
These are cookies which are necessary for you to navigate through our website and use the basic functions of the website.
Performance cookies  
Performance cookies are used to improve the user-friendliness of a website and therefore the user experience. Performance cookies collect information about the way in which our websites are used, e.g. the internet browser and operating system used, the domain name of the website from which you access our website, number of visits, average time of access, and pages accessed.
Functional cookies  
Functional cookies enable a website to store information previously provided (e.g. user name, login, language selection or your location) and therefore provide the user with improved, more personalized functions.
Analysis cookies  
We can use these cookies to ascertain how our website is used and, for example, on the basis of what preferences and search terms it is accessed.
Cookies for marketing purposes  
Marketing cookies are used to provide targeted contents which are more relevant and adapted to the interests of the user. They are also used in order to measure and manage the effectiveness of advertising campaigns. They log whether the user has visited a particular website or not, and which contents have been used. This information may be shared with third parties, e.g. advertisers. This cookies are often linked with website functions of third parties.

Erasure of cookies and do-not-track settings  
You can use your browser settings to delete individual cookies or all cookies. Information and instructions regarding the erasure of cookies or prevention of cookies being set in the first place are available from your browser provider.

You may also individually manage the cookies of many companies and functions which are used for advertising. Please use the appropriate user tools for this purpose, available at https://www.aboutads.info/choices or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a “do not track” function which you can use to signal that you do not want to be tracked by websites. When this function is activated, your browser will inform advertising networks, websites and applications that you do not wish to be tracked for behavior-based advertising and similar purposes. Information and instructions regarding the configuration of this function are available from your browser provider.

Mozilla Firefox: https://support.mozilla.org/en-US/kb/how-do-i-turn-do-not-track-feature
Internet Explorer: https://support.microsoft.com/en-us/help/17288/windows-internet-explorer-11-use-do-not-track
Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en
Opera: https://help.opera.com/en/opera36/be-safe-and-private/#notrack
Safari: https://support.apple.com/kb/PH21416?locale=de_DE

In addition, you can prevent the loading of “scripts” by default. NoScript allows the execution of JavaScript, Java and other plug-ins only on trustworthy domains. Information and instructions regarding the configuration of this function are available from your browser provider (e.g. for Mozilla Firefox at https://addons.mozilla.org/en/firefox/addon/noscript).

Information about cookies used by us  
When you access our website, the following cookies are stored in your browser’s temporary storage.

Name Provider Purpose Expiry date
PHPSESSID PRW Consulting This cookie is used to enable us to show the cookie notification on every page of the website. Session

Name and contact details of the Controller  
PRW Consulting GmbH, Leonrodstr. 54, 80636 Munich, represented by its Chief Executive Officers Wilfried Reiners and Ralph Bösling, Phone +49 89 210977-70, Email info@prw-consulting.de

Name and contact details of the Data Protection Officer  
Claudia Albrecht, +49 89 210977-60, claudia.albrecht@prw-consulting.de

Your rights  
You have the right to request that we confirm whether we process personal data and the right to demand information about this personal data. You also have the right to demand correction, erasure and restriction of data processing and the right at any time to object to the processing of your personal data or to withdraw your consent to the processing of the personal data, and the right to demand data transfer. You also have the right to complain to a supervisory authority in the event of a breach of data protection.