Privacy policy

Responsible body

The protection of your personal data is important to us. Our address is:

ConVista Consulting AG
Rheinauhafen 15/17
50678 Cologne

Our responsibility covers the general data protection regulation (hereinafter "GDPR").

Data protection officer

You can contact our data protection officer at the address above and at dpo@convista.com.

Processing of your data

The following section provides information on how we process your personal data (hereinafter also referred to as "your data").

Access data

Your details

Every time you access a page from our website and every time you call up a file or send a form, your browser sends certain data to our server as part of its request. This data is used by the server, on an ad hoc basis, to provide the requested content and is stored in log files with server-side information about the (non-) fulfilment of the request.

The following data is processed in order to provide the requested content:

  • Time (date and time) of the request
  • URL of the requested content
  • IP address
  • Amount of data transmitted

The above information is saved in a log file with:

  • Access status (file transferred, file not found, etc.)

Without the provision of this data, the use of the website is not possible.

Purposes of processing

The data are

  • processed on an ad hoc basis to enable the use of the website, i.e. to provide  requested content, and
  • stored in log files to allow:
  • the website to operate, e.g. to detect and correct access errors, and
  • to ensure the security of our IT systems, i.e. to be able to recognize security-relevant access and take countermeasures if necessary.

The access data is also evaluated for statistical purposes (see section "Matomo").

Data is not passed to third parties, either for commercial or for non-commercial purposes.

Legal basis of the processing

The legal basis for the processing of access data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR is for the purposes described above.

Storage period

After seven days, at the latest, the log files are deleted or anonymized. Insofar as there is a suspicion of a security breach, relevant data will be retained for the duration of the prosecution of the potential attack and, if necessary, countermeasures will be taken, particularly where a legal claim is enforced.

Input options

Your details

Within the framework of website, there is the option to enter personal or business data (e.g. e-mail address, name and/or address) in order to be able to use the services described (e.g. to request a callback).

The data transmitted in this way is stored for the purpose of providing the service described (e.g. on an e-mail server for sending requested material).

The provision of the data is voluntary. Depending on the service, however, certain data may be necessary to enable us to provide the service. This data is then marked accordingly.

Purposes of processing

The data is, without exception, used only to provide you with the service described in each case.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

If you have separately consented to the processing of certain of your data, we will process this data (also), on the basis of this consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Storage period

The data will be deleted or anonymized, at the latest, when you no longer require the service described in each case, provided that there are no legal retention obligations to the contrary and/or we process your data lawfully for other purposes.

Application

Your details

If you submit an application to our company, we will process the information we receive from you during the application process.

As a rule, this information includes your contact details, other information provided in your letter of application and CV, as well as certificates and other evidence of your qualifications and professional experience.

The provision of your data is voluntary. However, in order to be able to consider your application and assess your suitability for the position in question, we require in all cases your name, address, telephone number, and e-mail address, as well as an appropriate letter of application and your curriculum vitae, and, if applicable, evidence of the information provided, in particular references to your qualifications, work experience, and certifications.

We will only assess you according to your suitability for the position in question; you do not need to send us a photograph.

As a rule, we do not require any special categories of personal data as described in Art. 9 GDPR for the application process. In view of the sensitivity of such data, please do not send us this type of information. If, in exceptional cases, where such information is relevant to the application process, we will process it together with your other applicant data; for example, if you voluntarily provide us with information about a severe disability.

Purposes of processing

Your data will be processed, exclusively, for the purpose of carrying out the application procedure.

Legal basis of the processing

The legal basis for the processing is § 26 para. 1 S. 1 BDSG in conjunction with Art. 88 GDPR.

If you have separately consented to the processing of certain of your data, we process this data, on the basis of the consent pursuant to Art. 6 para. 1 lit. a) GDPR.

In the rare cases that we process special categories of your data, the legal basis for this processing is § 26 Abs. 3 BDSG in conjunction with Art. 88 GDPR.

Storage period

If we are currently unable to offer you employment, we will delete or anonymize your data no later than six months after the end of the application process.

If you receive cost reimbursements or other tax-relevant transactions, the relevant accounting documents will also be retained, to fulfil the relevant retention obligations.

Recipient of your data

At ConVista, only the human resources department, the responsible employees of the department of the vacant position and, if required, members of the management and/or the board of directors have access to your data. In case of cost reimbursements, the accounting department will also have access to your data.

So as to manage your data efficiently, we use the recruiting tool "HR4YOU" of HR4YOU AG, Ulbarger Straße 52, 26629 Großefehn, Germany. HR4YOU makes this tool available to us as an order processor on their own servers in Germany. HR4YOU processes your data strictly according to our instructions and exclusively for our purposes.

In certain cases, we must disclose your personal data to third parties, for example to our bank, if you receive a reimbursement of costs or to the post office, if we communicate with you by letter.

Subscribe to job advertisement

Your details

If you wish, we will inform you by e-mail about interesting job offers from us.

To do so, we need your title, first name, surname and e-mail address as well as information on the subject areas that interest you.

Purposes of processing

Your data will only be processed for the purposes of sending you information by e-mail about our job advertisements that may be of interest to you.

Legal basis of the processing

The legal basis for the processing is your consent (Art. 6 para. 1 lit. a) GDPR).

Revocation of your consent

You can revoke your given consent at any time in text form (e.g. by e-mail to info@convista.com). We will not process your data any further after the revocation.

Storage period

We will delete your data if you revoke your consent.

Events

Your details

When you register for or purchase tickets for an event on our website, we collect certain information to enable you to attend the event. These are usually: title, first name, last name, company affiliation, position, business address, business email address, payment details.

The provision of the data is voluntary. However, depending on the event, certain data may be necessary to enable your participation in the event. We will then mark this data accordingly.

Purpose of processing

The data is processed in order to prepare, follow up and carry out the respective event and to enable your participation, i.e. generally to

  • to plan the event,
  • to settle the participation fee,
  • to control your access authorization,
  • to display name badges,
  • to provide you with the services you have booked (such as a presentation stand) and
  • to be able to provide information material before and after the event.

If you agree to this separately, we will keep a list of participants accessible to all participants, stating your title, first name, surname, company affiliation and position.

We also process your data to inform you about other events and other similar goods and services (see also the section "Business contacts").

Legal basis of the processing

The legal basis for the processing of your data in order to carry out the event is Art. 6 para. 1 lit. b) GDPR.

If, in addition, you have separately consented to the processing of certain of your data, we will process these data based on this consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The legal basis for the processing of your data for the purposes of direct advertising is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the advertising of our goods and services for the purposes of direct advertising.

Objection / Revocation

You can object to the use of your data for advertising purposes at any time with effect for the future.

You can revoke your consent at any time with effect for the future.

You are welcome to inform us of your objection or revocation by e-mail to info@convista.com.

Storage period

Your data will be stored for the purpose of the event for up to six months after the end of the event. Billing data (invoice, etc.) will be stored in accordance with the statutory storage obligations.

Your data will also be stored for the purposes of direct advertising. If you object to this, your data will be deleted or anonymized.

Recipient of the data

If necessary, providers whose tools we use to handle the registration process or the purchase of corresponding tickets, e.g. "Eventbrite", will receive your data. If we use such tools, we will indicate this accordingly at the point. You can find information on the data protection of the respective providers on their websites; for Eventbrite, for example, here: https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinien-von-eventbrite?lg=de

If we use such a tool and you do not wish to use it, you can contact us by e-mail at marketing@convista.com.

Business contacts

Your details

If you provide us with your business contact data, e.g. your e-mail address, during the course of a business contact, we will store this data in our CRM system.

The provision of your data is voluntary.

Purposes of processing

We use your contact details to provide you with any information you request, along with any further (similar) business information.

Legal basis for data processing

The legal basis for processing your data is as follows:

  • Art. 6 para. 1 lit. b) Alt. 1 GDPR - insofar as we process your data to fulfil a contract, e.g. within the framework of a project
  • Art. 6 para. 1 lit. b) Alt. 2 GDPR - insofar as we process your data, at your request, for pre-contractual measures, e.g. for sending requested information on our range of services or for making an offer
  • Art. 6 para. 1 lit. f) GDPR - insofar as we use your data for direct advertising for our own goods or services, which are similar to the goods or services, which you have previously requested or, which we have provided to you. Our legitimate interest is to advertise our goods and services in terms of direct advertising.
  • Art. 6 para. 1 lit. a) GDPR - insofar as you have given us your consent to the processing of your contact data.

Objection / revocation of your consent

You can object to the use of your data for the aforementioned purposes at any time with future effect or revoke the consent you have given for this purpose.

Please send us your objections or revocation by e-mail to info@convista.com.

Storage period

The data will be deleted or anonymized at the latest if, and to the extent that, you have objected to the use of your data or revoked the consent you have given, unless storage obligations apply and/or we process your data for other lawful purposes.

Cookies

Your details

Cookies are small text files that are sent from our server to your computer and stored on your computer. They contain information that can be read by our server and enhanced with additional information during the current and future visits to the website.

We use the following cookies on various pages of our website:

Session cookie

When you visit the website, a so-called session cookie is stored on your computer. This contains a sequence of numbers, assigned to the cookie, which enables the settings you have selected on the website to be stored on the server for the duration of your browser session. This enables you, for example, to receive all (sub) pages of the website in the language version you have chosen without having to select the language again for each of these pages.

Persistent cookie

So you do not see our banner reference about the use of cookies, once you have closed the banner and are working within the website itself, a cookie containing the required information is stored, when the banner is closed.

Matomo

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Matomo.

Google Analytics

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Google Analytics.

There is also the option of using our website without enabling cookies. In your browser’s settings, you can determine whether you wish to accept the cookie settings.  In their default settings, most browsers automatically accept them. Should you wish to prevent the setting of cookies, you can do so by changing your browser’s settings by clicking, for example, "Do not accept cookies" or similar. These settings can often be found under a menu item "Privacy" or similar. In this case, we would like to point out that you may not be able to use all functions of our internet pages to their full extent.

Purposes of processing

We use cookies to make visiting our website appealing and simple, and to enable you to use certain functionality, e.g. the ability to select the language once and for this setting to be applied when you visit our website.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in data processing is in line with the purposes described in the previous paragraph.

Storage period

Session cookie

The session cookie, and data assigned to the server, are deleted once the browser session has ended.

Persistent cookie

This cookie remains on your computer until the expiry of the set expiry period, unless you delete it. This period is 365 days.

Matomo

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Matomo.

Google Analytics

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Google Analytics.

Matomo

Your details

Within the website’s framework, visitor access is evaluated using Matomo, an open source software, so that we can continuously improve our website. Matomo uses cookies and the transmitted access data (see "access data" section) to allow for an evaluation of your use of the website.

The following information is generated in relation to your use of the website:

  • Your IP address, whereby this is truncated by the last byte immediately after processing, and before it is saved and is thus anonymized
  • The country of origin of your internet provider
  • The operating system and browser you are using and the selected resolution of your end device
  • Whether you use a mobile or stationary device
  • The (external) website from which you reached our website (referrer)
  • The subpages of the website you have called up
  • The time spent on (the subpages of) the website
  • The frequency of accessing the (sub-pages of the) website

This creates a pseudonymous user profile, to which your visits are assigned. This information is stored on our server in Germany and is not passed to any third party. The information generated in the pseudonymous user profile is not used to personally identify the visitor of this website and is not merged with personal data about the bearer of the pseudonym.

You can prevent the setting of cookies by adjusting your browser software accordingly, as described under "Cookies".

Purposes of processing

We use Matomo to analyze the use of our website and to further optimize and develop the website and maintain its user-friendliness.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this data is based on the purposes described in the previous paragraph.

Storage period

Data gathered from the one-off visit is deleted after 12 months.

Objection

If you are not in agreement with evaluation of the data about your visit to the website, you can object. Once an objection has been raised, a cookie will be set on your computer. Please remember that if this or all cookies stored on your computer are then deleted, you would need declare a new objection if you still wish to object.

Google Analytics

Google Analytics

Your details

Within the website’s framework, visitor access is evaluated using Google Analytics, a website analysis tool from Google, so that we can continuously improve our website.

The following information, in particular, is collected:

  • (sub)pages called up
  • Your behaviour whilst using the website (for example clicks, scrolling behaviour and dwell time)
  • Your approximate location (country and city)
  • Technical information such as browser, internet provider, end device and screen resolution
  • Source of your visit (i.e. via which website or advertising medium you came to us)

You can prevent the setting of cookies by adjusting your browser software accordingly, as described under "Cookies".

Your IP address is recorded to ensure the security of the analysis service and to provide us with information about the country, region or city from which you are accessing the site. However, your IP address is truncated in the course of the recording even before it is saved and thus made anonymous.

Purposes of processing

We use Google Analytics to analyse the use of our website and to further optimize and develop the website and maintain its user-friendliness. In also helps to ensure the presentation of our website and our range of services are optimized.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this data is based the purposes described in the previous paragraph.

Storage period

Data from a one-off visit is deleted after 14 months.

Recipient of your data

Google Analytics is provided by Google LLC, USA This company receives your data in order to provide the analytics service to us.

Transfer to third countries

Your data will be transferred to the USA as described above in the section "Recipient of your data". Google LLC is certified under the EU-US Privacy Shield (see:

www.privacyshield.gov/participant; this ensures an adequate level of data protection.

Objection

If you are not in agreement with the analysis of the data gathered from your website visit, you can opt-out of this by preventing cookies, in the cookie settings within your browser, as described previously under the section "Cookies". You also have the option of using a browser add-on to deactivate Google Analytics. You can download this here: tools.google.com/dlpage/gaoptout.

Please note that you need to implement these measures separately for each browser software and/or terminal device you use, if you so wish.

Your rights

As far as we process your data, you hold the following rights, as described below. We welcome any enquires by e-mail to info@convista.com.

You have a right to ...

Information

On request, we will be pleased to inform you about any data we hold and process about you, and to what extent we process your data.

You can find out more about your right to information in Art. 15 GDPR.

Correction

If required, we will correct and/or complete your personal data.

The conditions under which this is made possible, and any other issues relating to your right to correction, can be found in Art. 16 GDPR.

Restriction of processing

You can ask us to limit the processing of your data.

The conditions under which this is made possible, and any other issues relating to your right to limit processing, can be found in Art. 18 GDPR.

Deletion

You can ask us to delete your data.

The conditions under which this is made possible, and any other issues relating to your right to have data deleted, can be found in Art. 17 GDPR.

Information in connection with the correction, restriction or deletion

On request, we would be happy to provide details on which parties receive your data and to whom we have communicated a correction, deletion or restriction of your data.

Anything else relating to your right to such information can be found in Art. 19 of the GDPR.

Objection

You can object to the processing of your data.

The conditions under which an objection is made possible can be found in Art. 21 GDPR.

Complaint to a supervisory authority

You have the right to make a complaint to a supervisory authority, if you believe that the processing of your data violates data protection law.

The supervisory authority responsible for our company is State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf.

If you have any questions or requests regarding data protection, you can contact us at any time at: dpo@convista.com.

XS
SM
MD
LG
Share