ProContext Data Privacy and Data Protection (Website, Online Store, Online Courses, Newsletter)

Declaration on data privacy and protection of personal data

ProContext Consulting GmbH complies with protection of personal data according to GDRP (Datenschutzgrundverordnung DSGVO) and has therefore taken technical and organizational measures to protect the privacy of users of ProContext Website, ProContext Online Store and ProContext Online Courses.

ProContext Consulting GmbH does not use third party tracking or analysis services on this website and does not store cookies for such purposes.
However, in order to watch embedded videos, you must agree to the data storage and the terms of use of the respective service providers.

You can inform yourself at any time about the data storage settings you have made ("cookie settings") and the respective services and save the data:

1) Introduction and Contact Details of the Responsible Person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data that can be used to identify you personally.

1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR, in German "Datenschutz-Grundverordnung, DSGVO") is ProContext Consulting GmbH, Burgmauer 10, 50667 Cologne, Germany, Tel.: 022167789110, Email: info@procontext.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the page server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or requests to the person responsible). You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Contacting

3.1 Own function for online appointment arrangement
We process your personal data within the framework of the online appointment arrangement provided. You can see which data we collect for online appointment scheduling from the respective input form or the appointment request for appointment scheduling. If certain data is required in order to execute an online appointment, we will indicate this accordingly in the entry form or the appointment request. If we provide you with a free text field in the input form, you can describe your request in more detail there. You can then also control which additional data you would like to enter. The data you provide will be stored and used exclusively for the purpose of making an appointment. When processing personal data that is required for the fulfillment of a contract with you (this also applies to processing operations that are required for the execution of pre-contractual measures), Art. 6 (1) lit. b DSGVO serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) lit. a DSGVO. Consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this declaration.

3.2 When contacting us (e.g. via contact form or email), personal data is processed - exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

4) Use of Customer Data for Direct Marketing Purposes

4.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you information about our offers on a regular basis. Mandatory information for sending the newsletter is only your email address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. In doing so, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to track any possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for any other purpose that is permitted by law and about which we inform you in this declaration.

4.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you emails with offers for similar goods or services to those you have already purchased from our range. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f DSGVO. If you have initially objected to the use of your email address for this purpose, we will not send you any emails.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. For this, you will only incur transmission costs according to the prime rates. After receipt of your objection, the use of your email address for advertising purposes will cease immediately.

5) Data Processing for Order Processing

5.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b DSGVO.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, email address) provided by you when placing the order in order to inform you personally about upcoming updates within the legally stipulated period of time within the scope of our legal information obligations pursuant to Art. 6 (1) lit. c DSGVO by suitable means of communication (e.g. by mail or email). Your contact data will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

5.2 Use of payment service providers (payment services)

- Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method of the provider, where you make an advance payment, your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be disclosed to the provider in accordance with Art. 6 para. 1 lit. b DSGVO. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we make advance payments, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and possibly data on an alternative means of payment) during the order process.

In order to protect our legitimate interest in determining your solvency in such cases, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 (1) lit. f DSGVO. The provider checks on the basis of the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option selected by you can be granted with regard to payment and/or bad debt risks.

The credit report may contain probability values (score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

- Stripe

One or more online payment methods are available on this website from the following provider: Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you choose a payment method of the provider where you make an advance payment (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be disclosed to the provider in accordance with Art. 6 para. 1 lit. b DSGVO. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method for which the provider makes an advance payment (such as purchase on account or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data on an alternative means of payment) during the ordering process.

In order to safeguard our legitimate interest in determining the solvency of our customers, this data is forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f DSGVO. The provider checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option selected by you can be granted with regard to payment and/or bad debt risks.

6) Page Functionalities

6.1 Youtube

This website uses plugins for the display and playback of videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be directly assigned to your account when you click on a video. If you do not want the assignment to your account, you must log out before pressing the play button.

All of the aforementioned processing, in particular the setting of cookies for the reading of information on the end device used, will only take place if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the Provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

6.2 OpenStreetMap

This website uses an online map service provided by the following provider: OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK.

The online map service is a tool for displaying interactive (land) maps to visually depict geographic information. via the use of this service, our location is displayed to you and any geolocation is facilitated.

Already when calling up those sub-pages in which the map of the provider is integrated, information about your use of our website (such as your IP address) is transferred to servers of the provider and stored there.

The processing of your personal data is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the demand-oriented design of our website. If you do not agree to the future transfer of your data to the provider, you have the option to completely deactivate the provider's online map service by turning off the JavaScript application in your browser. The online map service on this website can then no longer be used.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above to make an objection.

In the case of data transfer to the provider location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

6.3 Make

This website uses the services of the following provider for the integration and synchronization of databases and web applications: Celonis, Inc., One World Trade Center, 87th Floor, New York, NY, 10007, USA.

Here, our processing operations are automated and different workflows are established in order to efficiently manage and perform internal processes in our processing system. If personal data is also processed in this process, this is done in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in optimizing our internal organization.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider refers to standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

6.4 Google Meet

We use this provider to execute online meetings, video conferences and/or webinars: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

This may also result in a transmission to the servers of Google LLC. in the USA.

The provider processes different data, whereby the scope of the processed data depends on the data you provide before or during participation in an online meeting, video conference or webinar. Your data as a communication participant is processed and stored on servers of the provider. In particular, this may be your login data (name, email address, phone number (optional) and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, image and sound contributions by participants as well as voice input in chats may be processed.
For the processing of personal data required for the performance of a contract with you (this also applies to processing operations required for the execution of pre-contractual measures), Art. 6 (1) lit. b DSGVO serves as the legal basis. If you have given us consent to process your data, the processing is based on Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future.
Otherwise, the legal basis for data processing when executing online meetings, video conferences or webinars is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO in the effective execution of the online meeting, webinar or video conference.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

6.5 Microsoft Teams

We use this provider to execute online meetings, video conferences and/or webinars: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

6.6 Zoom

We use this provider to execute online meetings, video conferences and/or webinars: Zoom Video Communications Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

6.7 Google Forms

For the execution of surveys or for online forms, we use the services of the following provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

In addition to a transfer of data to the above-mentioned provider location, data may also be transferred to: Google LLC, USA

The provider enables us to design and evaluate surveys and online forms. In addition to the respective personal data that you input into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address are also collected, transmitted to the provider and stored on servers of the provider.

The information you enter in the forms is stored under password protection to ensure that third party access is excluded and that only we can evaluate the data for the purpose specified in the form.

When processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the execution of pre-contractual measures), Art. 6 (1) lit. b DSGVO serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) lit. a DSGVO. Consent given can be revoked at any time with effect for the future.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

6.8 Applications to job advertisements via emails

On our website, we advertise current vacancies in a separate section, for which interested parties can apply by email to the contact address provided.

Applicants must provide all personal information necessary to make an informed assessment, including general information such as name, address, and contact information, as well as performance-related credentials and health-related information, if applicable. Please refer to the job announcement for application details.

After receipt of the application by email, the data is stored and evaluated exclusively for the purpose of processing the application. In the event of queries, we use either the email address or telephone number of the applicant. The processing is carried out on the basis of Art. 6 para. 1 lit. b DSGVO (or § 26 para. 1 BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO (e.g. health data such as information on the severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) lit. b. DSGVO, so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of the special categories of data may also be based on Article 9(1)(h) DSGVO if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnosis, care or treatment in the health or social sector, or for the management of systems and services in the health or social sector.

If the applicant is not selected or if an applicant withdraws his or her application prematurely, his or her transmitted data and all electronic correspondence, including the application email, will be deleted at the latest after 6 months following appropriate notification. This period is based on our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to meet our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 Para. 1 lit. b DSGVO (for processing in Germany in conjunction with § 26 Para. 1 BDSG) for the purpose of executing the employment relationship.

7) Tools and Other

7.1 DATEV

For the completion of accounting we use the service of cloud-based accounting software of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany.

The provider processes incoming and outgoing invoices, as well as our company's bank transactions where applicable, in order to automatically record invoices, match them to transactions and create financial accounting from them in a semi-automated process.

Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.

7.2 Quaderno

We use the service "Quaderno.io" of Recrea Systems, Bravo Murillo 34 - 35003 Las Palmas, Spain (hereinafter "Quaderno") to calculate taxes, validate VAT IDs and create invoices compliant with international tax laws.

In case of use of Quaderno, name, email address, address, the data of the ordered products and (optionally) information on means of payment will be processed.

Furthermore, the legal basis for data processing in the execution of invoicing in compliance with tax law is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO in the effective execution of the purchase process. For more information on the use of data by Quaderno, please see the Quaderno privacy policy at https://quaderno.io/policies/privacy/

7.3 Thinkific

We use the "Thinkific" service provided by Thinkific Labs Inc, #400 - 369 Terminal Ave, Vancouver, BC V6A 4C4, Canada (hereinafter "Thinkific") to execute online courses.

In case of using Thinkific, the name and email address of the course participants will be processed, as well as the data of the ordered products.

Furthermore, the legal basis for data processing in the execution of online courses is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO in the effective execution of online courses. For more information on data use by Thinkific, please refer to Thinkific's privacy policy at https://www.thinkific.com/privacy-policy/.

8) Rights of the Data Subject

8.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites:

Right to information according to Art. 15 DSGVO;
Right to rectification pursuant to Art. 16 DSGVO;
Right to erasure according to Art. 17 DSGVO;
Right to restriction of processing pursuant to Art. 18 DSGVO;
Right to information pursuant to Art. 19 DSGVO;
Right to data portability according to Art. 20 DSGVO;
Right to revoke consent given in accordance with Art. 7 (3) DSGVO;
Right to lodge a complaint pursuant to Art. 77 DSGVO.

8.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA IN AN INTEREST PROCESSING ACTION ON THE BASIS OF OUR OVERRIDING LEGAL INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING ON THE BASIS OF YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING WILL NOT BE PROVIDED IF WE CAN PROVIDE REASONS FOR THE PROCESSING THAT EXCEED YOUR INTERESTS, FUNDAMENTAL RIGHTS AND PRIVACIES, OR IF THE PROCESSING IS INTENDED TO ENFORCE, EXTEND OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXPRESS THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Duration of the Storage of Personal Data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) lit. a DSGVO, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b DSGVO, this data will be routinely deleted after expiry of the retention periods, insofar as it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no continued legitimate interest on our part in the continued storage.

When processing personal data on the basis of Art. 6(1)(f) DSGVO, this data will be stored until you exercise your right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 (1) lit. f DSGVO, this data will be stored until you exercise your right to object according to Art. 21 (2) DSGVO.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Data Protection Officer

If you have any unanswered questions about the processing of personal data, please contact:

ProContext Consulting GmbH
Data Protection Officer

Burgmauer 10 Cologne