We take the protection of your personal data very seriously. We always treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
Our website can be used without providing personal data. Insofar as personal data (e.g. name, address or email address) is collected on our website, this is always done on a voluntary basis. This data will not be passed on to third parties without your express consent. The legal basis for the collection of data results from Art. 6 GDPR.
We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. It is not possible to completely protect data from third-party access.

Scope
With this data protection declaration, users receive information about the type, scope and purpose of the collection and use of their data. The legal framework for data protection is provided by the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).

Contact form
If you contact us using the contact form or by e-mail, we will save the information you have provided so that we can answer your query and ask possible follow-up questions.

Data
"Personal data" is information that relates to you or which we can connect with you in other ways. The personal data that we store contains the following information: your name, postal address, email address, telephone and fax number, company, position and function as well as information on the business relationship. In the case of contractual agreements, the list of information can be expanded individually.
We store personal data that you have voluntarily submitted to us, for example if you
- communicate with us via email or post
- give us your business card
- contact us via our website
- enter into a contractual relationship with us
or communicate with us in a different way.
We need your personal data in order to fulfill contractual or legal obligations, for communication purposes and to maintain our network, for example to:
- Send invitations to events, phone calls and meetings and
- to manage our contact database.
We will not make your personal data available to third parties without your consent, with the exception of service providers who have a contractual relationship with us (see external service providers) and in cases where we are legally obliged to do so.

Letter of acceptance
I expressly consent to the use of my personal data and information in the above sense.
I am aware that I can withdraw this consent at any time.

Withdrawal
You can send the revocation informally to us by e-mail without giving reasons. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
Email: c.kroll@kroll.consulting

Right to data portability
You have the right to have data - that we process automatically based on your consent or in fulfillment of a contract - handed over to you or to third parties. It is provided in a machine-readable format. If you request the direct transfer of the data to another responsible person, this will only take place if it is technically feasible.

Right to information, correction, deletion, blocking
You have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing at any time. You also have the right to correct, block or delete this data. Exceptions: It is the prescribed data storage for business transactions or the data are subject to the statutory retention obligation.
You can contact us at any time using the contact options listed in the imprint or contact our data protection officer at office@kroll.consulting

Right of appeal
As the person concerned, you have the right to lodge a complaint with the responsible supervisory authority in the event of a data protection violation. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based.

Cookies
Some of the websites use so-called cookies. Cookies do no damage to your computer and contain no viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit.
Other cookies remain on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you (e.g. shopping cart), takes place on the basis of Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services.
If other cookies are set (e.g. for analysis functions), these are treated separately in this data protection declaration.

Server log files
The delivery and presentation of content via our website technically requires the collection of certain data. When you access our website, these so-called server log files are recorded by us or the provider of the web space. These log files do not allow any conclusions to be drawn about you and yourself.
The relevant information includes:
- Visited page and file on our domain
- Date and time of the server request
- amount of data
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Domain name of your internet provider
- IP address.
This data cannot be assigned to specific people. This data is not merged with other data sources. The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
We use this data to display and deliver our content and for statistical purposes. The information supports the provision and continuous improvement of our offer. We also reserve the right to check the mentioned data retrospectively if there is suspicion of illegal use of our offer.

SSL encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses an SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. Please make sure that SSL encryption is activated on your side for corresponding activities. The use of encryption is easy to see: the display in your browser line changes from "http: //" to "https: //".

Google Web Fonts
Our website uses web fonts from Google. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
By using these web fonts, it will be possible for us to present our website as desired, regardless of which fonts are available locally. This is done by accessing the Google Web Fonts from a Google server in the USA and the associated transfer of your data to Google. This is your IP address and which page you have visited. Google Web Fonts are used on the basis of Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website.
The company Google is certified for the US-European data protection convention "Privacy Shield". This data protection agreement is intended to ensure compliance with the data protection level applicable in the EU.
You can find details about Google Web Fonts at: https://www.google.com/fonts#AboutPlace:about and further information in Google's data protection regulations: https://policies.google.com/privacy/partners?hl=de

External serviceprovider
Third parties commissioned by us to carry out certain tasks for us and in accordance with our instructions can, as processors, have access to personal data. Examples include IT service providers who perform tasks in the areas of hosting, database management, website management, maintenance services, web analysis and the handling of incoming inquiries and data analysis. We require third parties who provide these services for us to implement and maintain security measures to guarantee the confidentiality and security of the data you have entrusted to us and that they only collect, process and use the personal data in accordance with our instructions and contractually agreed.

Die Nutzung von Dritt-Anbietern erfolgt im Interesse einer ansprechenden Darstellung unseres Online-Auftritts. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DSGVO dar.
Auch wenn wir bemüht sind, au

Integration of services and content from third parties
Our offer may include content and services from other providers. These are, for example, maps, videos, graphics and images from other websites. To make this data can be called up and displayed in the user's browser, the transmission of the IP address is absolutely necessary. The providers (hereinafter referred to as "third-party providers") perceive the IP address of the respective user.
We use third-party providers to provide an attractive presentation of our online presence. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Even if we endeavor to use only third-party providers who only use the IP address to be able to deliver content, we have no influence on whether the IP address may be saved. In this case, this process serves, among other things, statistical purposes. If we are aware that the IP address is stored, we will inform our users.
For analysis purposes, we use a tool based on Snowplow Analytics technology. The data we collect about the use of our website include, for example, how often users visit the website or which areas are accessed. The tool we use does not collect any personal data and is used by our web hosting provider and service provider only to improve our own offer.

Data security
KROLL.CONSULTING is a German company and most of your personal data is stored and processed in Germany. Some of your data can be stored on servers in other EU member states, Switzerland or in the USA. When storing your data outside the EU, we ensure that this only happens in countries that have an appropriate level of data protection according to the decision of the EU Commission.
KROLL.CONSULTING has implemented appropriate technical and organizational measures to protect your personal data against loss and unauthorized access.

Legal
References to other sites, the content of which we have no influence on, will only be made if there is a belief that the respective web pages have no illegal content. We cannot guarantee the content is correct. At no time do we endorse illegal or incorrect content on other websites. External websites can only be checked by us at irregular intervals. As soon as we become aware of violations of the law from the content of external sites or their inaccuracy, the relevant references will be removed from our sites immediately.

Objection to advertising emails
We hereby object to the use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and information material. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

Changes to our privacy policy
We reserve the right to make changes at any time to ensure that our data protection declaration always complies with current legal requirements. This also applies in the event that the data protection declaration has to be adapted due to new or revised services. The next time you visit our website, the new data protection declaration will apply.
You can find the date of the current version under "Last modified on". Your continued use of the platform after the announcement of such changes on our website constitutes your consent to such changes to the data protection regulations and is your consent to the binding of the changed regulations.

Last modified on 2020/02/27.


Source: Data protection configurator from mein-datenschutzbeauftragter.de