Legal
Privacy policy
This is a translation provided for convenience. Only the German version is legally binding.
1. Privacy at a glance
General information
The following notes give a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below.
Data collection on this website
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You will find their contact details in the section "Controller".
How do we collect your data? Some data is collected because you provide it to us – for example via a contact form. Other data is collected automatically by our IT systems when you visit the website (e.g. web browser, operating system or time of the page visit).
What do we use your data for? Part of the data is collected to ensure the website is provided without errors. We process other data to handle your requests – for example when you write to us via the contact form or request a whitepaper.
What rights do you have regarding your data? You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to have this data corrected or deleted. If you have given consent to data processing, you can withdraw it at any time with effect for the future. In addition, under certain circumstances you have the right to request that the processing of your personal data be restricted, and to lodge a complaint with a supervisory authority.
Cookies, analytics and third-party tools: This website does not use cookies or any analytics or tracking tools. Your browsing behaviour is not analysed. For details, see the section "Cookies".
2. Hosting
External hosting by Vercel
This website is hosted by Vercel. The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The personal data collected on this website is processed on Vercel's servers. We have chosen Frankfurt am Main (EU) as the server location; processing on servers in the USA cannot be ruled out, however.
When the website is accessed, Vercel collects technically necessary data (e.g. IP address, date and time of access, page requested, browser type) in order to deliver the website and protect it against attacks.
Vercel is certified under the EU-US Data Privacy Framework (DPF). This means there is an adequacy decision by the European Commission within the meaning of Art. 45 GDPR.
Legal basis
Vercel is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably and securely as possible.
Data processing agreement
We have concluded a data processing agreement with Vercel in accordance with Art. 28 GDPR. Further information on data processing by Vercel can be found at:
3. General notes and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
Controller
The controller responsible for data processing on this website is:
ceon GmbH
Am Technologiezentrum 5
86159 Augsburg
Germany
Phone: +49 821 999856 10
Email: info@ceonconsulting.com
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you assert a legitimate request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it.
General information on the legal bases for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed. In the case of express consent to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If consent to the storage of cookies or to access to information on your device is required, processing is based on Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). This consent can be withdrawn at any time. If your data is required to perform a contract or to take steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. If processing is necessary to comply with a legal obligation, it is based on Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Recipients of personal data
In the course of our business, we only pass on data to third parties if there is a legal basis for doing so. Where we use external service providers, this is done within the framework of data processing on our behalf in accordance with Art. 28 GDPR.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling based on these provisions.
If your personal data is processed for direct marketing purposes, you have the right to object to this at any time. After you object, your personal data will no longer be used for direct marketing purposes.
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of data protection law, you have the right to lodge a complaint with a supervisory authority. The competent authority is the data protection authority of the German federal state in which you live, or the authority responsible for our company.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a structured, commonly used and machine-readable format.
Information, correction, deletion and restriction of processing
Within the framework of the applicable legal provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of processing and, where applicable, the right to have this data corrected, deleted or its processing restricted.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the padlock symbol in the browser bar.
4. Data collection on this website
Cookies
This website does not set any cookies and does not store any information on your device. We do not use any analytics, tracking or advertising tools and do not embed any third-party content (such as videos, maps or fonts from external providers); all fonts are loaded from our own server. That's why there is no cookie banner.
Server log files
The provider of the website automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are, for example, browser type, operating system, referrer URL, host name and IP address. This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.
Contact form
If you send us enquiries via the contact form, your details from the form, including the contact details you provide, will be stored. This data is processed either to perform a contract (Art. 6(1)(b) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR), if requested. The data remains with us until you ask us to delete it or the purpose no longer applies.
Your enquiry is delivered to us as an email via the email service Brevo (see section 5).
Download form (whitepapers, templates)
If you request a whitepaper or template via our website, we process your email address and – if provided – your first name, last name and company. We use this information to send you the download link by email and add you as a contact in our email service Brevo (see section 5) in the "Whitepaper downloads" list. We also store which download you requested. In addition, we receive an internal notification about the request.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by submitting the form and can withdraw at any time, e.g. by email to info@ceonconsulting.com. The data remains stored until you withdraw your consent or the purpose no longer applies.
The download link is valid for 14 days. The files themselves are not publicly accessible.
Spam protection for the forms
To protect our forms against automated mass submissions, we briefly process your IP address when you submit a form and limit the number of submissions per IP address or email address within a certain period. This information is only held in the server's working memory, is not stored permanently and is discarded after one hour at the latest. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).
Enquiries by email, phone or fax
If you contact us by email, phone or fax, your enquiry, including all personal data arising from it, will be stored and processed. This data is processed on the basis of Art. 6(1)(b) GDPR or your consent (Art. 6(1)(a) GDPR).
5. Sending emails and managing contacts with Brevo
We use Brevo to send the download emails and the notifications from the contact form, and to manage download contacts. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
Brevo processes the data you enter (in particular email address and, where applicable, name and company) on our behalf and stores it on servers in the EU. Brevo also analyses whether and when emails are delivered and opened in order to ensure reliable delivery.
We have concluded a data processing agreement with Brevo in accordance with Art. 28 GDPR. Further information can be found in Brevo's privacy policy: https://www.brevo.com/legal/privacypolicy/
6. Job applications
If you send us job applications, your data will only be used for the selection process. Processing is based on Section 26 BDSG (German Federal Data Protection Act), Art. 6(1)(b) GDPR or your consent pursuant to Art. 6(1)(a) GDPR.