Data Protection

 

This privacy policy is intended to inform users of this website about the nature, scope, and purpose of the collection and use of personal data by the website operator (SX Consulting Group GmbH).

The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with legal regulations, especially the EU General Data Protection Regulation (GDPR).

The following privacy policy applies to the use of the website www.alpha-one.com (hereinafter referred to as “Website”) as well as to our external online presences, such as our social media profiles.

As new technologies and the continuous development of this website may lead to changes in this privacy policy, we recommend that you reread the privacy policy at regular intervals. We will inform you as soon as the changes require an action on your part (e.g., consent) or another individual notification.

Definitions of the terms used (e.g., “personal data” or “processing”) can be found in Art. 4 GDPR.

By using this website, you agree to the collection, use, and disclosure of your data in accordance with this privacy policy.

Provider and responsible entity within the meaning of the Data Protection Act:

SX Consulting Group GmbH
Herzogstr. 23 A
80803 Munich

Phone: +49 (0) 89 28 72 460-0
Fax: +49 (0) 89 28 72 460-29
info@sx-consulting.com

Relevant Legal Bases Below
We inform you in accordance with Art. 13 GDPR, we inform you about the legal bases for our data processing.
If the legal basis is not specified in the privacy policy, the following applies:

The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR. The legal basis for
processing to fulfill our services and to carry out contractual measures as well as to answer inquiries is Art. 6 para. 1 lit. b GDPR. The legal basis for
processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR.
And the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event
that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR
serves as the legal basis.


Terms Used

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and covers virtually any processing of data.

The “controller” is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.


Integration of Third-Party Services and Content

Within our online offering, we use content or service offerings from third-party providers to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “Content”).
The basis for this is our legitimate interest (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR).

This integration always requires that the third-party providers of this content know the user’s IP address, as they would not be able to send the content to your browser without the IP address. The IP address is therefore necessary for the display of this content. We strive to use only such content whose respective providers use the IP address solely for the delivery of the content.
Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel
tags can
be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, visit time, and other information about the use of our online offering, and may be linked with such information from other sources.


Cooperation with Processors and Third Parties

If we involve third parties in the fulfillment of contracts, they receive personal data only to the extent that the transmission is necessary for the respective service.
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them, or otherwise grant them access to the data, this is done only on the basis of a legal permission (e.g., if the transmission of data to third parties, such as payment service providers, is necessary for the fulfillment of a contract
pursuant to Art. 6 para. 1 lit. b GDPR), if you have consented beforehand, if a legal obligation provides for it, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).

If we outsource certain parts of data processing and commission third parties with the processing of data on the basis of a so-called “data processing agreement,” this is done on the basis of Art. 28 GDPR.
This means that we endeavor to contractually oblige our processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.


Transfers to Third Countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this happens only if it is necessary for the fulfillment of our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation, or on the basis of our legitimate interests.

Subject to legal or contractual permissions, we process or have data processed in a third country only if the special requirements of Art. 44 et seq. GDPR are met. This means, for example, that processing takes place on the basis of special guarantees, such as the officially recognized determination of a data protection level equivalent to that of the EU (e.g., for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “Standard Contractual Clauses”).


Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services, which we use for the purpose of operating this online offering.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospective customers, and visitors to our online offering on the basis of our legitimate interests in an efficient and secure provision of this online offering in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement). Art. 28 GDPR (conclusion of a data processing agreement).


Access Data

The website operator or the website provider collects data about access to the website on the basis of our legitimate interest (see Art. 6 para. 1 lit. f. GDPR)
and stores it as “server log files” on the website server.
In doing so, we automatically record both your interaction with us and data about your computer or mobile device.

When you access our website, data is automatically transmitted from your browser to our web server.

The following data is logged in this way:
– visited website
– date and time of access
– amount of data sent in bytes
– source from which you accessed the page
– browser used
– operating system used
– IP address used

The server log files are stored for a maximum of 7 days and then deleted. The data is stored both for logging user behavior and for statistical purposes, as well as for security reasons, e.g., to be able to investigate cases of abuse.

We reserve the right to subsequently review the log data if there is a justified suspicion of unlawful use based on concrete evidence.
If data must be retained for evidentiary purposes, it is excluded from deletion until the incident has been finally clarified.


Usage Data

Where necessary, we collect and use so-called usage data from you. This is personal data that enables the use of our website and billing.

In doing so, data is collected that includes both the temporal criteria of your use of our offering, as well as the extent of use and your identification features.

We point out that for purposes of advertising, market research, and the needs-based design of our website, we may create usage profiles, i.e., aggregated data about the course of visits to our pages. These user profiles do not reveal any information about your person and are not merged with other data collected by us, so that a person cannot be identified by merging various data.
You have the right to object to such use of your data at any time.


Audience Measurement & Cookies

This website uses cookies for pseudonymized audience measurement, which are transmitted to the user’s browser either by our server or a third-party server.
Cookies are small files that are stored on your device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.

If you do not want cookies for audience measurement to be stored on your device, you can object to the use of these files here:

– Cookie deactivation page of the Network Advertising Initiative: http://optout.networkadvertising.org/?c=1#!/
– Cookie deactivation page of the US website: http://optout.aboutads.info/?c=2#!/
– Cookie deactivation page of the European website: http://optout.networkadvertising.org/?c=1#!/

Common browsers also offer the option to not allow cookies.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser’s system settings. Stored cookies can also be deleted in the browser’s system settings.
Note: There is no guarantee that you will be able to access all functions of this website without restrictions if you make the corresponding settings.


Collection and Processing of Personal Data
The use of our website
is generally possible without providing personal data. Insofar as personal data (e.g., name, address, or email addresses) is collected on our pages, this is always done, where possible, on a voluntary basis in the form of voluntary data entry by the user.

For example, we process personal data from our contact form or our newsletter registration.
The processing is carried out in accordance with the applicable data protection regulations.

The website operator collects, uses, and discloses your personal data only if legally permitted or if you consent to the data collection. Personal data is any information with which you can be personally identified and which can be traced back to you – for example, your name, email address, and phone number.

You can also visit this website without providing personal data. However, to improve our online services, we store your access data on this website (without personal reference). This access data includes, for example, the file you requested or the name of your internet provider. By anonymizing the data, it is not possible to draw conclusions about your person.
The background for this is our legitimate interest in fulfilling our contractually agreed services and optimizing our online offering.

We point out that data transmission on the internet (e.g., when communicating via email) may have security vulnerabilities. Therefore, unrestricted, complete protection of data against access by third parties is not possible.


Handling of Contact Data

If you contact us as the website operator via the offered contact options, your information will be stored to be used for processing and responding to your inquiry. This data will not be passed on to third parties without your consent.
This applies to contacting us via our contact form as well as to email messages, contact by phone, or via social media.

User data can also be stored in a Customer Relationship Management system (“CRM system”) or a comparable inquiry organization.


Handling of Comments and Posts

If you leave a post or comment on our website, your IP address will be stored. This is done on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR and serves our security as the website operator: If your comment violates applicable law, we could be prosecuted, which is why we have an interest in the identity of the author of the comment or post.


Newsletter Subscription

The website operator offers you a newsletter in which he informs you about current events and offers.
If you wish to subscribe to the newsletter, you must provide a valid email address.

By subscribing to the newsletter, you agree to receive the newsletter and to the described procedures.

Registration process: The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with the email addresses of other persons.

Logging: Newsletter registrations are logged to be able to prove the registration process in accordance with legal provisions. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Registration data: To subscribe to the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name so that we can address you personally in the newsletter.

The dispatch of the newsletter and the associated performance measurement are carried out on the basis of the recipients’ consent in accordance with Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with § 7 para. 2 no. 3 UWG or on the basis of legal permission in accordance with § 7 para. 3 UWG.

The registration process is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves both our business interests and user expectations, and also allows us to prove consent.

Revocation and Termination: You can revoke your consent to receive the newsletter at any time and thus cancel your newsletter subscription.
You will find the unsubscribe link at the end of each newsletter. Your personal data will be deleted after you have unsubscribed. Your consent to receive the newsletter expires at the same time.

However, we may store the unsubscribed email addresses based on our legitimate interests for up to three years before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims.


Newsletter – Performance Measurement

The newsletters contain a so-called “web beacon,” i.e., a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from its server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, is initially collected.

This information is used to technically improve the services based on the technical data or to analyze the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times.

The statistical surveys also include determining whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, the intention of the mailing service provider to observe individual users.
Rather, the evaluations serve to recognize the reading habits of our users and to tailor our content to them or to send other content according to the interests of our users.


Data protection information in the application process From time to time
we also offer jobs on our website
and the associated opportunity to apply for the corresponding positions.
We process the applicant data only for the purpose and within the scope of the application process in accordance with the legal requirements.
The processing of applicant data takes place to fulfill our (pre-)contractual obligations within the scope of the application process within the meaning of Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR, provided that the data processing becomes necessary for us, e.g., in the context of legal proceedings (in Germany, § 26 BDSG also applies).

The application process requires that applicants provide us with their application data.
If we offer an online form, the required applicant data is marked and can otherwise be found in the job descriptions. Personal information, postal and contact addresses, and the documents associated with the application, such as cover letters, resumes, and references, are generally required.
Applicants may also voluntarily provide us with additional information.

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the manner and scope set out in this privacy policy.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated within the scope of the application process, their processing also takes place in accordance with Art. 9 para. 2 lit. b GDPR (e.g., health data, such as severely disabled status or ethnic origin).
Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants within the scope of the application process, their processing also takes place in accordance with Art. 9 para. 2 lit. a GDPR (e.g., health data, if this is necessary for the exercise of the profession).

If available, applicants can send us their application via an online form on our website. The data is transmitted to us in encrypted form according to the state of the art.
Applicants can also send us their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and applicants themselves must ensure that they are encrypted. We can therefore not take any responsibility for
the transmission path of the application between the sender and receipt on our server and therefore recommend the use of an online form or sending by post.
Instead of applying via the online form and by e-mail, you can of course also send us your application by post.

The data provided by the applicants can be further processed by us in the event of a successful application for the purposes of the employment relationship.
Otherwise, if the application for a job offer is not successful, the applicant’s data will be deleted. Applicants who have given their consent to be included in our “talent pool” (see below) are excluded from this deletion.
The data of applicants will also be deleted if an application is withdrawn, to which the applicants are entitled at any time.

Subject to a justified revocation by the applicant, the deletion takes place after a period of six months so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equality Act. The invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.

YouTube
We integrate videos from the platform “YouTube” of the provider YouTube LLC, (901 Cherry Avenue, San Bruno, CA 94066, USA), represented by Google LLC, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Privacy policy: https://www.google.com/policies/privacy/
Opt-Out: https://adssettings.google.com/authenticated


Instagram

Functions and contents of the Instagram service can be integrated into our online offer. These are offered by Instagram LLC, (1601 Willow Road, Menlo Park, CA, 94025, USA), (short “Instagram”).

The integrated functions may include, for example, content such as images, videos or texts and buttons with which users can express their liking for the respective content or subscribe to the author of the content or our posts.

If the users are members of the Instagram platform, Instagram can assign the access to the above-mentioned contents and functions to the profiles of the users there.

Instagram’s privacy policy: http://instagram.com/about/legal/privacy/


Use of social media plugins from Facebook

We use the social plugin from Facebook on this website
, which is operated by Facebook Inc, (1 Hacker Way, Menlo Park, CA 94025, USA) or, if you are based in the EU, by Facebook Ireland Ltd, (4 Grand Canal Square, Dublin 2, Ireland), (short “Facebook”).

The basis for the use is our legitimate interest in the analysis, optimization and operation of our online offer (within the meaning of Art. 6 para. 1 lit. f. GDPR).

The plugins of the social network “Facebook” can contain both interaction elements and content (e.g. videos, graphics or text contributions).
The integrations can be recognized by the Facebook logo or the terms “Like”, “Like” or “Share” in the typical Facebook colors (blue and white).

Information about all Facebook plugins can be found under the following link: https://developers.facebook.com/docs/plugins/

Facebook complies with European data protection law and is certified under the Privacy Shield Agreement:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence whatsoever on the type and scope of the data that the plugin transmits to the Facebook servers.

Further information on this can be found at: https://www.facebook.com/help/186325668085084

The plugin informs Facebook that you as a user have visited this website. It is possible that your IP address will be stored.
If you are logged into your Facebook account while visiting this website, this information will be linked to it.

If you use the functions of the plugin – for example by sharing or “liking” a post – the corresponding information will also be transmitted to Facebook.
If you click on the “Like”, “Like”, “Share” or a corresponding button, Facebook automatically assigns your IP address to your user account.
This allows you to link our website to the pages of your Facebook profile.
This process can only take place if you are logged in to Facebook at the same time, which allows Facebook to assign the visit to our pages to your user account.

If you want to prevent Facebook from linking this data to your Facebook account, please log out of Facebook before visiting this website and delete the stored cookies.

You can make further settings for data processing for advertising purposes or object to the use of your data for advertising purposes via your Facebook profile.

You can access the settings here: –
Profile settings on Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
– Cookie deactivation page of the US website: http://optout.aboutads.info/?c=2#!/
– Cookie deactivation page of the European website: http://optout.networkadvertising.org/?c=1#!/

We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.
Which data is collected, used and processed by Facebook, for what purpose and to what extent, and what rights and setting options you have to protect your privacy, can be found in Facebook’s privacy policy. You can find these at: https://www.facebook.com/about/privacy/

Facebook Pixel, Custom Audiences and Facebook Conversion
Within our online offer, the so-called “Facebook pixel” of the social network Facebook is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes.
This is operated by Facebook Inc, (1 Hacker Way, Menlo Park, CA 94025, USA), or if you are based in the EU, by Facebook Ireland Ltd, (4 Grand Canal Square, Dublin 2, Ireland), (short “Facebook”).

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

With the help of the Facebook pixel, Facebook is able to determine the visitors of our online offer as a target group for the placement of ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads we run only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products that are determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”).

With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and are not annoying.

With the help of the Facebook pixel, we can also analyze and better understand the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

The processing of the data by Facebook takes place within the framework of Facebook’s data usage policy.
Accordingly, the general information on the display of Facebook ads, which you can find in Facebook’s data usage policy, applies: https://www.facebook.com/policy.php

Specific information and details about the Facebook pixel and how it works can be found in the help section of Facebook: https://www.facebook.com/business/help/651294705016616

You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads.
To determine which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads
The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and also via the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).


Google Analytics

This website uses “Google Analytics”, a web analysis service that
is offered by Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA), (short “Google”).

This is based on our legitimate interests in the optimization and analysis of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR.

The Google Analytics service uses “cookies” – text files that are stored on your device. The information collected by the cookie is usually transmitted to a Google server in the USA and stored there.

Google LLC has committed itself to complying with European data protection law and is certified under the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

When using Google Analytics via our website, IP anonymization is applied. The IP address of the user is shortened within the member states of the EU or the European Economic Area and in the other contracting states of the agreement.
Only in individual cases will the IP address first be transmitted to a Google server in the USA in full and shortened there.
This shortening removes the personal reference of your IP address. The user’s IP address transmitted by the browser is not combined with other data stored by Google.

Within the framework of the contract data agreement that we as a website operator have concluded with Google LLC, Google LLC uses the collected information to analyze website usage and website activities and provides services for the website operator in connection with internet usage.
Under certain circumstances, pseudonymous usage profiles can also be created from the processed data.

The data collected by Google on our behalf is used to evaluate the use of our online offer by individual users, e.g. to create reports on the activities on our website and to improve our online offer.

You have the option of preventing the storage of cookies on your device by making the appropriate settings in your browser.
However, it cannot be guaranteed that you will be able to use all functions of this website without restrictions if your browser does not allow cookies.

You can also use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to Google and used by Google. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can prevent the collection by Google Analytics within this website by clicking on this link Opt-Out-Cookie.
Click on the link above to
download an “opt-out cookie”. Your browser must therefore allow the storage of cookies. If you delete your cookies regularly, you must click on this link again each time you visit this website.

Here you can find more information about the data usage by Google LLC:
– Data collected by Google partners: https:
//policies.google.com/privacy/partners?hl=de – Settings for the advertising that is displayed to you https://adssettings.google.de/authenticated
– Use of cookies in ads https://policies.google.com/technologies/ads?hl=de

The personal data of the users will be deleted or anonymized after a maximum of 32 months.


Google (Re-)Marketing Services

Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR. GDPR) we use the marketing and remarketing services (short “Google Marketing Services”) of Google LLC, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), (short “Google”).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee for compliance with European data protection law: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google marketing services enable us to display ads for and on our website more targeted, to present users only with ads that may match their interests.
For example, if a user is shown ads for products they have shown interest in on other websites, this is referred to as “remarketing”.

For these purposes, when our and other websites where Google marketing services are active are accessed, a code is executed directly by Google, and so-called (re-)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. With their help, an individual cookie, i.e., a small text file, is stored on the user’s device (comparable technologies may also be used instead of cookies).

The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com.
This file records which websites the user has visited, what content they are interested in, and which offers they have clicked on. In addition, technical information about the browser and operating system, referring websites, time of visit, and other details about the use of the online offering may also be stored.

The user’s IP address is also collected, whereby we inform Google Analytics that the IP address is truncated within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and is only transmitted in full to a Google server in the USA and truncated there in exceptional cases.
The IP address is not merged with the user’s data in other Google offerings.

Google may also combine the aforementioned information with data from other sources. If the user subsequently visits other websites, advertising tailored to their interests may be displayed to them.

User data is processed pseudonymously within the scope of Google marketing services. This means that Google, for example, does not store and process the user’s name or email address, but processes the corresponding data in connection with cookies within pseudonymous user profiles. This means that, from Google’s perspective, ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is.
However, this does not apply if a user has explicitly allowed Google to process the data without this pseudonymization.

The information collected by Google marketing services about users is transmitted to Google and stored on Google’s servers in the USA.

The Google Marketing Services we use also include the online advertising program “Google AdWords”.
In the case of Google AdWords, each AdWords customer receives a different “conversion cookie.” Cookies therefore cannot be tracked across AdWords customer websites. The information collected with the help of the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers
learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

We may also integrate third-party ads based on the Google marketing service “AdSense.” AdSense uses cookies that enable Google and its partner websites to display ads based on users’ visits to this website or other websites on the internet.

We may also use “Google Tag Manager” to integrate and manage Google analytics and marketing services on our website.

Further information on Google’s use of data for marketing purposes can be found on the overview page: https://www.google.com/policies/technologies/ads
Google’s privacy policy can be found at https://www.google.com/policies/privacy.

If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.


Google Fonts

We integrate the fonts (“Google Fonts”) from the provider Google LLC, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), (hereinafter referred to as “Google”).

Privacy Policy: https://www.google.com/policies/privacy/
Opt-Out: https://adssettings.google.com/authenticated


Google ReCaptcha

We integrate the function for detecting bots, e.g., for entries in online forms (“ReCaptcha”) from the provider Google LLC, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), (hereinafter referred to as “Google”).

Privacy Policy: https://www.google.com/policies/privacy/
Opt-Out: https://adssettings.google.com/authenticated


Google Maps

We integrate the maps of the service “Google Maps” from the provider Google LLC, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), (hereinafter referred to as “Google”).

The use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Service and the additional terms for Google Maps.

The data processed may include, in particular, IP addresses and location data of users, which are not collected without their consent (usually within the settings of their mobile devices).
The data may be processed in the USA.

Privacy Policy: https://www.google.com/policies/privacy/
Opt-Out: https://adssettings.google.com/authenticated


Your Rights as a User of Our Services

Under applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by email or post, clearly stating your identity, to the contact details mentioned above.

Below is an overview of your rights:

You have the right to request confirmation as to whether data concerning you is being processed. If this is the case, you have the right to free information about this data, as well as further information and a copy of the data in accordance with Art. 15 GDPR.

Accordingly, you have the right, in accordance with Art. 16 GDPR, to request the completion of data concerning you or the rectification of inaccurate data concerning you.

In accordance with Art. 17 GDPR, you have the right to request that data concerning you be deleted without undue delay, or alternatively to request that the processing of data be restricted in accordance with Art. 18 GDPR.

You have the right to receive the data concerning you, which you have provided to us, in accordance with Art. 20 GDPR, and to request that it be transmitted to other controllers, where technically feasible.

In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data is unlawful.


Right of Withdrawal

You have the right to withdraw your consent to the processing of personal data in accordance with Art. 7 (3) GDPR at any time with effect for the future.


Right to Object

You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR.

The objection may, in particular, be directed against processing for direct marketing purposes. If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling, insofar as it is related to such direct marketing.

If you object, your personal data will no longer be processed, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.


Deletion of Data

If your request is not opposed by a legal or internal company obligation to retain data (e.g., data retention), you have the right to have your data deleted.

The data processed by us will be deleted or their processing will be restricted in accordance with Art. 17 and 18 GDPR.
Unless explicitly stated otherwise in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

According to legal provisions in Germany, the retention period is 6 years in accordance with Section 257 (1) HGB (Commercial Code) (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting documents, etc.) and 10 years in accordance with Section 147 (1) AO (Tax Code) (books, records, management reports, accounting documents, commercial and business letters, for tax-relevant documents, etc.).


Automated Decisions Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.


Data security

We are committed to ensuring the security of your data within the framework of applicable data protection laws and technical possibilities.

Your personal data is transmitted to us in encrypted form. This applies to your orders as well as to any login functions and similar.

We use the SSL (Secure Socket Layer) encryption system, but point out that data transmission over the internet (e.g., when communicating via email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
To protect your data, we maintain technical and organizational security measures, which we continuously adapt to the state of the art.

We also do not guarantee that our service will be available at specific times. Disruptions, interruptions, or failures cannot be ruled out. The servers we use are regularly and carefully secured.


Internal Contact Point

If you wish to correct, block, delete, or obtain information about the personal data stored about you, or if you have questions about the collection, processing, or use of your personal data, or wish to withdraw your consent, please contact the following email address: info@sx-consulting.com


Changes to the Privacy Policy

Should changes be made to our privacy policy in the future, you will always find the changes on these pages.

Privacy Policy – SX Consulting Group GmbH, Status: 2025-09-01