Privacy Policy
Data Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is: KARENT Beratungs und Vermittlungs GmbH Große Gallusstraße 14 60315 Frankfurt am Main Germany Phone: +49 69 2722660 Email: [email protected] Managing Director: Lucas Berberich If you have any questions about data protection, you can contact us at any time using the details above.
Scope
This privacy policy is intended to inform users of this website, in accordance with the German Federal Data Protection Act (Bundesdatenschutzgesetz) and the German Telemedia Act (Telemediengesetz), about the nature, scope and purpose of the collection and use of personal data by the website operator, KARENT Beratungs und Vermittlungs GmbH. KARENT GmbH takes your data protection very seriously and treats your personal data confidentially and in accordance with statutory provisions.
General Information
Please be aware that data transmission over the internet may, as a matter of principle, be subject to security vulnerabilities. Complete protection against access by third parties cannot be guaranteed.
Your Rights as a Data Subject
Under the GDPR, you have the following rights regarding your personal data: • Right of access (Art. 15 GDPR) • Right to rectification (Art. 16 GDPR) • Right to erasure (Art. 17 GDPR) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object to processing (Art. 21 GDPR) Where you have given consent to processing, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out until withdrawal remains unaffected. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information.
Hosting and Server Log Files
This website is hosted by an external service provider (processor). Personal data collected on this website is stored on the host's servers. Each time the website is accessed, the server automatically records information in so-called server log files transmitted by your browser: • IP address • date and time of access • page or file requested • browser and operating system used • referrer URL This data is not merged with other data sources and serves the technical provision, security and stability of the website. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). Hosting provider: exciting IT, Menradstraße 10, 80634 Munich, Germany. A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host. The host in turn engages Cloudflare as a sub-processor (see the following section).
Content Delivery Network and Security (Cloudflare)
This website is operated on the infrastructure of our host, exciting IT, which manages the domain karent.de and the other country domains in its own account with the provider Cloudflare. Cloudflare provides a content delivery network (CDN) as well as security and acceleration services and acts as a sub-processor of our host in doing so. The provider is Cloudflare Germany GmbH (Rosenheimer Straße 143 C, 81671 Munich), a subsidiary of Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare sits between your browser and the server and processes technical connection data, in particular your IP address. This serves to defend against attacks (e.g. DDoS), balance load and accelerate content delivery. Cloudflare also provides the first-party path for delivering our website tag (see section "Google Ads Conversion Tracking"). The legal basis is our legitimate interest in secure and performant operation of the website (Art. 6(1)(f) GDPR). The data processing agreement with Cloudflare is held by our host; the use of Cloudflare as a sub-processor is covered by the Art. 28 GDPR agreement concluded with the host. For any transfer of data to the USA, Cloudflare relies on the EU-US Data Privacy Framework and on standard contractual clauses. Further information: https://www.cloudflare.com/privacypolicy/
Cookies and Consent
Our website uses cookies and comparable technologies (e.g. localStorage). Cookies are small text files that are stored on your device and cause no harm. We distinguish between: • Technically necessary cookies required for the operation of the website (e.g. storing your cookie choice). Legal basis: Section 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR. • Consent-requiring statistics and marketing cookies of the analytics and conversion-tracking services used (Google Ads, HubSpot, Microsoft Advertising) as well as Google Maps. On your first visit, a cookie banner informs you about the use of these technologies. Non-essential cookies and tracking technologies are only set or loaded after you have given your explicit consent via the banner. If you select "Necessary only", these services are not activated. You can change or withdraw your choice at any time with effect for the future via the "Cookie settings" link in the footer. The legal basis for the consent-requiring cookies and services is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Withdrawing your consent does not affect the lawfulness of processing carried out until then. In addition, you can restrict or prevent the storage of cookies via your browser settings.
Contact and Forms (HubSpot Forms)
If you contact us via a form on this website (e.g. the contact or feedback form) or by email, we process the data you provide (e.g. name, email address, telephone number, message) in order to handle your enquiry. The forms are provided via the HubSpot service of HubSpot Ireland Limited (2nd Floor, 30 North Wall Quay, Dublin 1, Ireland). The data is processed and stored in a data centre within the European Union (EU hosting). The parent company is HubSpot, Inc. (USA); a transfer to the USA cannot be entirely ruled out and is based on the EU-US Data Privacy Framework and on standard contractual clauses. The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling your enquiry). A data processing agreement is in place with HubSpot. We store your data until the purpose of processing no longer applies or any statutory retention periods have expired. Further information: https://legal.hubspot.com/privacy-policy
Web Analytics with HubSpot
Beyond the forms, we also use HubSpot to analyse usage behaviour and for marketing purposes. Once you have consented, a tracking code is loaded that sets cookies (including "hubspotutk") and records information about your use of the website (e.g. pages visited, time spent, truncated IP address, referrer). This information helps us improve our offering and communication. The provider, EU hosting, possible third-country transfer and data processing correspond to the details in the section "Contact and Forms". The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future; without your consent given via our cookie banner, the HubSpot tracking code is not loaded. Further information: https://legal.hubspot.com/privacy-policy
Google Ads Conversion Tracking
We use the conversion tracking and remarketing of Google Ads, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Once you have consented, the Google tag (gtag.js) is loaded, which sets a cookie as soon as you reach our website via a Google ad or perform an action relevant to us (a conversion, e.g. submitting a form). The Google tag is delivered via a first-party path on our own domain (Google Tag Gateway via Cloudflare). We receive statistical evaluations from Google and can measure the success of our advertising campaigns; we do not receive any information that could be used to personally identify users. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future; without your consent given via our cookie banner, the Google tag is not loaded. For any transfer to the USA (Google LLC), the EU-US Data Privacy Framework and standard contractual clauses apply. Further information: https://policies.google.com/privacy
Microsoft Advertising (Bing UET)
We use Universal Event Tracking (UET) from Microsoft Advertising, a service of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA); the contracting party in the European Economic Area is Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Once you have consented, UET loads a script (bat.js), sets cookies and enables us to track the behaviour of users who reach our website via an ad in the Microsoft/Bing advertising network, as well as to measure conversions. This processes, among other things, your IP address, information about your browser and device, and the pages you visit. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future; without your consent given via our cookie banner, the UET tag is not loaded. For any transfer to the USA, the EU-US Data Privacy Framework and standard contractual clauses apply. Further information: https://privacy.microsoft.com/en-us/privacystatement
Google Maps
To display our locations, we embed map material from the Google Maps service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Maps is only loaded after you have given explicit consent (by clicking "Accept all" in the cookie banner or the release control on the map). Before your consent, no connection to Google servers is established. After activation, Google processes in particular your IP address; the use of Google Maps is necessary to display the maps and calculate routes. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future via the cookie settings. For any transfer to the USA, the EU-US Data Privacy Framework and standard contractual clauses apply. Further information: https://policies.google.com/privacy
Fonts (Locally Hosted)
For the consistent display of fonts, we use exclusively fonts stored locally on our server. No connections to servers of Google Fonts or other third parties are established; no personal data is transmitted to third parties when the fonts are displayed.
Contact via WhatsApp
On our contact page, we optionally offer you the possibility to contact us via WhatsApp. If you use the corresponding link, you will be redirected to WhatsApp; the privacy policy of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) then applies. We have no influence over the data processing that takes place there. The legal basis for providing the link is our legitimate interest in enabling easy contact (Art. 6(1)(f) GDPR); the actual communication via WhatsApp takes place at your initiative. Further information: https://www.whatsapp.com/legal/privacy-policy-eea
Changes to this Privacy Policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to reflect changes to our services, e.g. when introducing new services. The current version of the privacy policy then applies to your next visit.