Use of Internet Explorer 6/7/8

You are using an old version of the Internet Explorer that is no longer supported. Please use a newer browser version. If you are missing the rights to do so, you can also enhance your Internet Explorer by installing the add-on called Google Chrome Frame. The extension allows you to display web pages that are no longer support by Internet Explorer. You can download the add-on here.


Privacy Policy

Authority Responsible

Protecting your personal data is a major concern for us,

ConVista Consulting AG
Im Zollhafen 15/17
50678 Köln

Germany

We are responsible according to the General Data Protection Regulation (hereinafter “GDPR”).

Data Protection Officer

You may contact our Data Protection Officer under the address above or under dpo@convista.com.


Processing of your Data

In the following, we would like to inform you about how we process your personal data (hereinafter also “your data“).


Access Data

Your Data

Whenever accessing a page from our web presence or retrieving a file or sending a form, your browser sends particular data to our server in the scope of his request which are used by the latter ad hoc in order to provide the demanded content and stored in protocol files among information on the server side about the (non-) fulfillment of the request.

In order to provide the demanded content, the following data are processed:

  • time (date and time) of the request
  • URL of the demanded content
  • IP-address
  • quantity of transferred data

The data mentioned above and additionally those in the following are stored in a protocol file:

  • access status (file transferred, file not found etc.)

Without providing these data using the website is not possible.

Purposes of the Processing

The data are

  • processed ad hoc in order to enable the use of the website, that is providing a content demanded, and
  • above that, stored in protocol files in order to

  • enable the operation of the website, that is, for instance, detecting and eliminating access errors, as well as
  • ensure the security of our IT-systems, that is recognizing security-relevant accesses and, if necessary, take countermeasures.

Moreover, the stored access data are evaluated for statistical purposes (see section “Piwik”).

The data are not passed on to third parties, neither for commercial nor for non-commercial purposes.

Legal Basis of the Processing

In each case the legal basis for processing access data forms Art. 6 Sec. 1 lit. f GDPR. Our justified interest in the data processing according to Art. 6 Sec. 1 lit. f GDPR lies in the purposes described in the subparagraph above.

Storage Period

The protocol files are deleted or anonymized after seven days at the latest. In case of suspecting a security-relevant access, the respective data are stored during the period of investigating the potential attack and, if necessary, taking countermeasures, and particularly asserting legal claims.

 

Input Option

Your data

In the scope of the web presence you have the possibility to enter personal or business data (e.g. e-mail address, name and/or address) at some points in order to be able to make use of services described there (e.g. requesting a callback).

The data transferred in this way are stored for performing the service described (e.g. on an e-mail server in order to send the material requested).

Entering data is optionally. However, depending on the service, certain data may be necessary in order to conduct the service. These are marked accordingly.

Purposes of the Processing

The data are exclusively used for rendering the respectively described service.

Legal Basis of the Processing

The legal basis of the processing forms Art. 6 Sec. 1 lit. b) GDRP.

If you separately consented to the processing of certain of your data, we process these data (also) on the basis of this consent according to Art. 6 Sec. 1 lit. b) GDRP.

Storage Period

The data are deleted or anonymized at the latest when they are no longer needed for rendering the service described in so far as there are no legal retention requirements and/or we do not process your data legally for other purposes.

Application

Your data

If you apply for a job at our company, we process this information we receive from you in the scope of the application procedure.

These are normally your contact data, further information provided in the letter of application and the CV as well as diplomas and other certificates on your qualifications and your professional experience.

Disclosing your data is optionally. However, in order to be able to include you in the application procedure and to evaluate your suitability to the vacancy, in any case, we need your name, your address, a phone number and your e-mail address as well as a meaningful letter of application and your CV as well as certificates on the information included, where applicable, especially diplomas on your qualifications, your professional experience and certifications.

We will only assess you according to your suitability to the respective vacancy; you do not need to send us a photo.

Normally, we do not need any special categories of personal data according to Art. 9 GDPR for the application process. With regard to the sensibility of those data, please do not provide us with such information a priori also in your own interest. If such information is exceptionally relevant for the application process, we process this with your other application data; for example, if you voluntarily indicate a severe disability.

Purposes of the Processing

Your data are exclusively processed for conducting the application procedure.

Legal Basis of the Processing

The legal basis for the processing is § 26 Sec. 1 sentence 1 BDSG in connection with Art. 88 GDPR.

If you separately consented to the processing of certain of your data, we process these data on the basis of this consent according to Art. 6 Sec. 1 lit. b) GDRP.

In the rare cases in which we process particular categories of your data, the legal basis for this processing is § 26 Sec. 3 BDSG in connection with Art. 88 GDPR.

Storage Period

If we cannot offer you an employment currently, we delete or anonymize your data at the latest six months after the application procedure has been completed.

If you get a reimbursement of costs or other tax-relevant processes are conducted, the corresponding accounting records are stored beyond that in order to fulfill the retention requirements connected therewith.

Recipient of your Data

At ConVista only the HR department, the responsible employees of the department with the vacancy and, if required, members of the management and/or the board get access to your data. If reimbursements of costs are made, also the accounting gets access to the relevant of your data.

In order to be able to manage your data efficiently, we use the recruiting tools “HR4YOU” of the HR4YOU AG, Ulbarger Straße 52, 26629 Großefehn, Germany. HR4YOU provides us with this tool as a processor on its own servers in Germany. HR4YOU processes your data strictly according to our instructions and exclusively for our and not for own purposes.

In particular cases we need to disclose your data to third parties, for instance to our bank if you receive a reimbursement of costs or to the postal office if we want to communicate with you via letter.

Subscribing to Job Advertisements

Your Data

If you want to, we inform you about interesting vacancies at our company via e-mail.

For this purpose, we need your salutation, your first name, your last name and your e-mail address as well as information about the subject areas you are interested in.

Purposes of the Processing

Your data are exclusively processed in order to send you information about vacancies at our company interesting for you via e-mail.

Legal Basis for the Processing

The legal basis for the processing is your consent (Art. 6 Sec. 1 lit. a) GDPR).

Revocation of your Consent

At any time, you can revoke your given consent in written form (e.g. via e-mail to info@convista.com). As of the revocation made we will not process your data further.

Storage Period

We delete your data when you revoke your consent.


Events

Your data

If you sign up for an event on our website or buy tickets for it, we collect certain data in order to enable your participation in the event. These are normally: salutation, first name, last name, company affiliation, position, company address, business e-mail address, payment details.

Entering your data is optionally. However, depending on the event, certain data are necessary in order to be able to make your participation in the event possible. These are marked accordingly.

Purposes of the Processing

The data are processed in order to be able to prepare, conduct and follow up the respective event and to make your participation possible, thus generally in order to

  • plan the event,
  • settle the participation fee,
  • control the access authorization,
  • create name plates,
  • render your booked services (such as a presentation stand) as well as
  • provide informational material previously and afterwards.

If you give your consent separately, we enter you to the participant list accessible for all participants with your salutation, first name, last name as well as your company affiliation and your position.

Among that, your data are processed in order to inform you about other events and other similar products or services (see also section “business contacts”).

Legal Basis of the Processing

The legal basis for the processing of your data and for conducting the event forms Art. 6 Sec. 1 lit b) GDPR.

If you additionally and separately consented to the processing of certain of your data, we process these data on the basis of this consent according to Art. 6 Sec. 1 lit. a) GDRP.

The legal basis for the processing of your data for the purposes of direct advertising is Art. 6 Sec. 1 lit f) GDPR. Concerning this, our justified interest is promoting our products and services by making use of direct advertising.

Contradiction / Revocation

At any time, you can veto the use of your data for advertising purposes with effect for the future.

At any time, you can revoke a consent made with effect for the future.

Please, make your contradiction or your revocation via e-mail to info@convista.com.

Storage Period

For the purpose of conducting the event, your data are stored until six months after the end of the event. Settlement data (invoices, etc.) are stored in accordance with the legal retention requirements.

Above that, your data are stored for the purpose of direct advertising. If you object to this, your data are deleted or anonymized to that extent.

Recipient of the Data

If necessary, providers whose tools we use for executing the registration procedure or the purchase of the corresponding tickets, e. g. “Eventbrite“, receive your data. Whenever we use such tools, we indicate that at the respective point. Please find information on the data protection of the particular providers on their homepages, in the case of Eventbrite e.g. here: https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinien-von-eventbrite?lg=de

If we make use of such a tool and you do not want to use it, you may alternatively contact us via mail under marketing@convista.com for the registration.

Business Contacts

Your data

If you provide us with your business data, e. g. your e-mail address, in the scope of a business contact, we store these in our CRM-system.

Submitting your data is optionally.

Purposes of the Processing

We use your contact data in order to provide you with business information requested by you and, if needed, further (similar) business information.

Legal Basis of the Processing

The legal basis for the processing is

  • Art. 6 Sec. 1 lit. b) Alt. 1 GDPR – provided that we process your data for fulfilling a contract, e. g. in the scope of a project 
  • Art. 6 Sec. 1 lit. b) Alt. 2 GDPR – provided that we process your data upon your request for pre-contractual measures, that is e. g. sending requested information on our service offering or an offering
  • Art. 6 Sec. 1 lit. f) GDPR – provided that we use your data for direct advertising of our products or services that are similar to the products or services which you requested or which we rendered to you. Concerning this, our justified interest is promoting our products and services by making use of direct advertising.

Art. 6 Sec. 1 lit. a) GDPR – provided that you consented to the processing of your contact data when you delivered them to us.

Contradiction / Revocation of your Consent

At any time, you can object to the use of your data for the purposes mentioned above with effect for future or revoke your consent made hereto.

Please, make your contradiction or your revocation via e-mail to info@convista.com.

Storage Period

The data are deleted or anonymized at the latest when and insofar as you objected to the use of your data or revoked your consent made, provided that this is not impeded by retention requirements and/or that we do not process your data legally for other purposes.

Cookies

Your data

Cookies are small text files which are sent from our server to your computer and stored there. These may contain various information which can be read and amplified by our server during the current and a future website visit.

On the different sites of our website we use the following cookies:

Session Cookie

When visiting our website a so-called session cookie is set on your computer. This contains a digit sequence which makes it possible to store the settings selected by you for the website on the server during the browser session and assign them to the cookie. In this way, for instance, all (sub-)page of a website can be provided in the language version chosen by you without having to select the language anew for each page.

Persistent Cookie

In order not to show you our banner hint regarding the use of cookies on our website again after having closed it, a cookie with the respective cookie is set when closing it.

Piwik

For the setting of cookies in the scope of the analysis tool Piwik please see the respective section in this privacy policy.

Of course, you also have the possibility to use our website without cookies. You can determine whether you accept the setting of cookies in the settings of the browser you use. Most of the browsers accept cookies in the default setting automatically. If you want to impede the setting of cookies, you need to select the corresponding settings in your browser, e. g. “no cookies accepted” or similar. You often find these under the menu item “data protection” or similar. In that case, we would like to point out to you that you might not be able to use every function of our website to its full extent.

Purposes of the Processing

We use cookies in order to design the visit of our website attractively and to make the use of certain functions described above possible, e. g. in order to enable you to select the language of the website and to consider this setting in the following.

Legal Basis of the Processing

The legal basis for the processing forms Art. 6 Sec. 1 lit f GDPR. Our justified interest in the data processing lies in the purposes described in the previous paragraph.

Storage Period

Session Cookie

This cookie and the data on the site of the server allocated to it are deleted after the end of the browser session.

Persistent Cookie

This cookie persists, provided that you do not delete it, until the end of the expiry period determined on your computer. This period encompasses 365 days.

Piwik

For the setting of cookies in the scope of the analysis tool Piwik please see the respective section in this privacy policy.

Piwik

Your data

In the scope of the website, visitor accesses are evaluated by means of Piwik, an open source software, in order to be able to improve the website consistently. Piwik uses cookies and the transmitted access data (see section „access data“) in order to make an evaluation of your use of the website possible.

The following 
information of your use of the website are generated:

  • your IP-address, but this is shortened by the last byteand thus anonymized directly after the processing and before its storage.
  • the country of origin of your Internet provider
  • the operating system you use and the browser you use as well as the chosen resolution of your end device
  • whether you use a mobile or stationary end device
  • the (external) website from which you accessed our website (referrer)
  • the subpages of the website you visited
  • the time spent on the (subpages of) the website
  • the quantity of accessing the (subpages of) the website

In this way, a pseudonymous user profile is created to which your visits are assigned. This information is stored on our server in Germany and not passed on to third parties. The information generated in the pseudonymous user profile are neither used in order to identify the user of this website personally nor brought together with the personal data of the pseudonym carrier.

You can impede the setting of cookies by means of a respective setting in your browser software as described in the section “cookies”.

Purposes of the Processing

We use Piwik in order to analyze the use of our website and in order to be able to optimize and further develop our website and its user-friendliness on this basis.

Legal Basis of the Processing

The legal basis for the processing forms Art. 6 Sec. 1 lit f GDPR. Our justified interest lies in the purposes described in the previous subparagraph.

Storage Period

The single visit is deleted 12 months after the elicitation.

Contradiction

If you do not agree with evaluating the data of your website visit, you have the possibility to object to it in the following. Your contradiction is implemented by setting a cookie on your computer. Please bear in mind that if you delete this or all cookies set on your computer, the contradiction needs to be made anew, if desired.

Your Rights

Insofar as we process your data, you have the following rights against us. Please send corresponding requests via mail to info@convista.com.

You are entitled to…

Information

Upon request, we inform you whether and, if so, which of your data we process in which scope.

For details on your right to information please see Art. 15 GDPR.

Rectification

If required, we correct and/or complete your data.

For information about the conditions and further details on your right to rectification please see Art. 16 GDPR.

Restriction of the Processing

You may request us to restrict the processing of your data.

For information about the conditions and further details on your right to restriction of the processing please see Art. 18 GDPR.

Deletion

You may request us to delete your data.

For information about the conditions and further details on your right to deletion please see Art. 17 GDPR.

Information in Connection with the Rectification, Restriction or Deletion

Upon request, we inform you about the recipients of your data whom we communicated a rectification, deletion or restriction of your data made.

For further details on your right to such information please see Art. 19 GDPR.

Contradiction

You may object to the processing of your data.

For information about the condition of a contradiction to the processing of your data please see Art. 21 GDPR.

Complaint to a Supervisory Authority

At any time, you may complain to a supervisory authority if you opine that the processing of your data violates the data protection law.

For instance, to the supervisory authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf, Germany.

If you have any questions or requests concerning the data protection, please contact us anytime: dpo@convista.com.