Source: https://www.consulting4drive.com/en/privacy-policy/
Timestamp: 2019-04-25 12:30:04+00:00

Document:
Consulting4Drive is a member of IAV Group, see also www.iav.com.
Who is the data controller and who can I contact?
What data do we process for which purposes?
Generally, you can visit our website without revealing your identity.
Access to our website is logged by our server in a so-called log file. This is done for statistical reasons and to the extent necessary for security purposes. The following data is saved in the log file of the web server: Visitor’s IP address, date and time of access, URL, referrer (if transmitted by the client), browser and version (if transmitted by the client). This data is stored for 28 days.
As far as personal data (for example your name, your address or email address) is raised on our website, this takes place on a voluntary basis.
You can send us your application documents via the Group-wide online application portal of the IAV Group, by email or by post.
An application via the IAV Group career portal is generally encrypted. However, we cannot assume any liability for the sending of emails via your respective provider.
Should you wish to take part in an application process, we may require – depending on the open position – your contact details, your email address, details on your professional qualification in the form of diplomas/certificates for your professional training and / or employment references as well as your professional CV.
By applying to us, you provide your personal data to all companies that are part of IAV Group. Generally, only those persons, who are internally involved in the application process have access to your data. In the event that we currently cannot offer you a suitable position, we store your data beyond the date of rejection for the position you originally applied for, so that your application may be considered for future vacancies. If you do not want this, you may object to the storage at any time. We store your data for nine months after the date of rejection.
The personal data provided by you during the application process will be processed by IAV GmbH for all IAV Group companies.
If you wish to withdraw a consent regarding the use of your personal data given in the course of the application process, please contact us by letter or write an email to karriere@iav.de.
For the use of any contact or order forms, it is necessary that we store your title, name and email address in order to contact you. Optionally, you can provide additional data.
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (FDPA).
We process your personal data (Art. 4 (2) GDPR) in order for us to be able to provide our services and in particular to fulfill our contracts or any pre-contractual actions and to execute your orders.
In addition, we process your personal data for the purpose of carrying out the application process.
The purposes of data processing are primarily based on the specific product. Further details on the purpose of data processing can be found in the respective contract documents.
The processing of your personal data takes place only to the extent necessary to ensure the operation of our website and the information provided thereon.
Implementation of the application process.
If you have given us consent to the processing of personal data for specific purposes (e.g. your email address for contact purposes), the lawfulness of this processing is based on your consent. A given consent can be withdrawn at any time with future effect.
Please note that the withdrawal only has effect for the future. Processing that took place before the withdrawal is not affected by this.
If your application leads to an employment, your personal data, insofar as this is necessary for the compliance with legal obligations, will be forwarded to state institutions and authorities, such as social insurance institutions. In addition, we may be required by law to provide personal information to government agencies to meet regulatory requirements.
A transfer of your personal data only takes place if you have consented to it, if the transfer is necessary to execute a contractual relationship or to safeguard legitimate interests or under for compliance with legal obligation.
When it is necessary to process your personal data, we do so only as long as necessary for the provision of our services.
Log files about the visitors of our website are deleted at regular intervals, generally every 28 days.
Application documentsIf no further activities result from an application process and no employment relationship is established, we will delete the submitted personal data after a period of nine months.
Each data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR, as well as the right to object to the processing of personal data under Art. 21 GDPR. With regard to the right to information and the right to erasure, the restrictions under §§ 34 and 35 FDPA (German Federal Data Protection Act) apply. In addition, there is a lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in connection with § 19 FDPA).
In order to have access to the information offered on our website, you only need to provide the personal data necessary for the operation of the services you specifically wish to use, or that we are required to collect by law.
Any further provision of personal data (such as your email address) is voluntary and is not required.
To what extent is there automated decision-making in individual cases?
When you visit our website, cookies are stored on your computer. These cookies serve to make our website more user-friendly. “Session cookies” are used to control both the navigation after the language selection and access to the user-protected areas after authentication. These cookies are automatically deleted as soon as you close the browser window.
For web statistics, we use stationary cookies, which enable identification beyond the browser session.
You can prevent the setting of cookies at any time. To do this, please select the setting “Cancel automatic cookie handling” in your Internet browser. If you chose to do this, please note that afterwards, you will no longer be able to access the user-protected area.
A transfer of personal data takes place only to the extent that this is necessary in individual cases or if we are legally obliged to do so. Please note that in cases where there is no comparable level of protection of personal data in third countries, we provide protective measures and guarantees under Artt. 45 et seq.. GDPR. For this purpose, we particularly use the EU standard contractual clauses of the European Commission.
On this website you will find privacy-compliant buttons that allow you to share pages on social networks. These buttons are implemented as external links (e.g. in the case of Facebook with “sharer.php”). Therefore, an actual transfer of user data only takes place after a click on one of these buttons and then takes place on the website of the social network. Consequently, the data will not be transmitted on the website www.consulting4drive.com.
The websites of Consulting4Drive may contain links to websites of third parties that are not operated by Consulting4Drive. Consulting4Drive does not endorse the websites of third parties accessible through links and is not responsible for their contents.
To what extent is my data used for profiling?
You have the opportunity to consent to us using your personal information to provide you with personalized promotional offers or notice of events that may interest you. To this end, we create pseudonymized user profiles.
Your user profiles will by no means be merged with your personal data. The pseudonyms will not be linked to your personal data (e.g. your email address or your IP address), so as to exclude any direct access to your user profile. You can object to the creation of user profiles at any time with effect for the future.
Information on your right to withdraw according to Art. 7 (3) GDPRInsofar as you have given us consent to the processing of personal data for specific purposes (e.g. for marketing purposes), the lawfulness of this processing is based on your consent. A given consent can be withdrawn at any time. Please note that the withdrawal only has effect for the future. Any processing that occurred before the withdrawal is not affected by this.
On grounds relating to your particular situation, you have the right, at any time, to object to the processing of your personal data relating, carried out on the basis of Art. 6 (1) f GDPR (data processing for purposes of legitimate interests); this also applies to any profiling based on the aforementioned provision within the purpose of Art. 4 (4) GDPR which we use for rating or advertising purposes. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing that override your interests, rights and freedoms, or if the processing is for the establishment, exercise or defence of legal claims.
In individual cases, we process your personal data for direct marketing purposes. You have the right, at any time, to object to the processing of information concerning your person for the purpose of such advertising; this also applies to profiling insofar as it involves direct advertising. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

References: Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 21
 § 19
 Art. 7
 Art. 6
 Art. 4