Source: https://www.2b-advice.com/LLC-en/privacy-notice/
Timestamp: 2019-04-23 22:48:30+00:00

Document:
2B Advice is an established group of companies that deals with all questions relating to data protection. We offer legal and technical competence in data protection consulting, data protection training, data protection software and data protection certification.
Data protection is our company philosophy and our core competence. Therefore, we commit ourselves to protect the personal data of our employees and customers in the best possible way and to comply with the applicable data protection laws. Furthermore, we continuously strive to strengthen the protection of personal data. This data protection statement explains how we process personal data.
In this privacy statement we refer to ourselves simply as 2B Advice.
2B Advice and its companies are jointly responsible for the provision of the website at 2b-advice.com (Articles 4 No. 7 and 26 GDPR).
'Personal data' means any information relating to a known or identifiable natural person ('data subject'). A person is identifiable if he can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors corresponding to his physical, physiological, mental, economic, cultural or social identity. This therefore includes IP addresses or unique identifiers stored in cookies.
'Controller' means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
'Processing' means any operation or set of operations which is carried out with or without the aid of automated processes and which is related to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or integration, qualification, erasure or destruction.
'Third country' means any country outside the European Union or outside the European Economic Area (EU/EEA).
To which processing does this data protection declaration apply?
This data protection declaration applies to all processing operations that are directly connected with the use of our website at the address www.2b-advice.com. This includes all pages of our website.
The date on which you last visited our website.
Note: The region derived from your IP address is not an accurate location, but allows us to determine the geographic region from which you accessed our Web site to provide language sensitive information.
The above personal information may include information that is necessary for you to use our site, information that is necessary to understand your preferences, such as your preferred language.
What is the name of your primary school teacher?
What was your favourite place to visit as a child?
Do we collect special types of personal data?
No, we do not collect any special types of personal data in connection with the website.
Of course, we respect your choice if you do not wish to provide us with your personal data. In this case, functions may not be available or may only be available to a limited extent. Your data will be deleted after fulfilment of the purpose of the data processing in compliance with statutory storage regulations.
You are using the US solution from 2B Advice PrIME SaaS. In this case, personal data will be stored on the US servers.
Employees in third countries or about the 2B Advice PrIME SaaS US solution.
You yourself access the website from a third country.
If we ourselves are responsible for these transfers and not you as a user of our products, we ensure an appropriate level of data protection by concluding standard contractual clauses of the EU.
To whom do we pass on your data?
Your personal data will be passed on in anonymous form to service providers who compile statistics for us on the use of our website. You will find more detailed information on this below, in the description of the concrete web analysis services.
In the case of a support request, it is possible that the data within the 2B Advice Group, in particular to 2B Advice S.R.O. will be forwarded to solve the reported problem.
When using the SaaS solution, data is stored on Microsoft's servers. 2B Advice PrIME SaaS uses the "Azure" cloud solution offered by Microsoft. If you use the EU solution, use servers located in the EU only; if you use the US solution, the servers are located in the United States of America. Between 2B Advice and Microsoft have been concluded the legally required contracts for order processing under Article 28 GDPR.
In the cases prescribed by law, we pass on data to public authorities such as tax offices, investigating authorities, courts or similar institutions if we are obliged to do so. We also pass on data to these institutions as well as to lawyers, insolvency administrators or tax consultants if the passing on is absolutely necessary for the assertion or defence of legal claims.
Below you will find information on how your personal data is collected and processed on this website and for what purposes. We will inform you about "cookies" and the options for accepting or rejecting them. A detailed section informs you about the Google Analytics used on this website, which we use to continuously improve our website. The section on Google Analytics also contains information on how you can object to data collection via Google Analytics.
Cookies are files that are placed on your computer by a web page while you are viewing the page. These files store information to help you make better use of the site.
Note: If you do not want us to recognize your computer, please set your Internet browser so that it deletes cookies from your computer hard drive or warns you before a cookie is stored.
We use the option anonymizeIP() or anonymizeIp and make sure that your IP address is shortened before the evaluation by Google to prevent a conclusion about your person.
The use of Google Analytics is based on Art. 6 para. 1 lit. a. GDPR.
Security cookie to avoid crosstracking, etc..
Sicherheitscookie zur Vermeidung von Crosstracking etc.
Security cookie to avoid crosstracking etc.
Session cookies are deleted as soon as you leave our website, or at the latest when you close your browser. Third party cookies are stored longer, the longest storage period is two years, unless you delete the cookies yourself.
What options do you have with our newsletter?
You have the possibility to register for the newsletter of 2B Advice GmbH via our website. We need your name, first name and e-mail address to send it to you. Only after successful completion of a two-stage approval procedure will you receive our newsletter on a regular basis.
You can view your declaration of consent or unsubscribe from the newsletter at any time. You will find corresponding links in every e-mail accompanying our newsletter. If you unsubscribe, we will immediately delete your contact details from our newsletter recipient list. The legislator places certain requirements on the effectiveness of an electronic consent, as it is used to register for the newsletter. This also includes the logging of your declaration of consent. We therefore record the date and time of your consent, the text of the declaration of consent, the fact whether the checkbox was selected, your e-mail address, your surname and first name. We also log the date and time of the click on the confirmation link and the link in the confirmation e-mail. We collect and store this information solely in order to comply with the legal requirements for electronic consent (Art. 7 in conjunction with Art. 6 para. 1 lit. c GDPR).
What is to be considered with links to other websites?
We protect your data through regular internal controls and a modern IT infrastructure. If we work with contract processors to process orders and inquiries, we achieve an equivalent level of data protection through binding agreements, prior verification of the respective contract processor and controls.
What rights do I have as a data subject (user of our website)?
You have the right to know which data we have stored about you and for what purpose (information pursuant to Art. 15 GDPR).
You have the right for us to correct any incorrect data about you (correction in accordance with Art. 16 GDPR).
You have the right to demand that the data be deleted if, for example, the data are not required for the purposes for which they were stored or if we are not permitted to store the data for other reasons (deletion in accordance with Art. 17 GDPR). However, if a law allows us to store data or even requires us to do so, we cannot comply with the request for deletion.
You have the right to object to the processing (objection pursuant to Art. 21 para. 1 GDPR). This objection must contain an explanation of the particular situation which makes further processing unacceptable to you. The objection is carefully examined and the data is blocked for the duration of the examination.
You have the right to object to the use of your personal data for advertising purposes at any time with effect for the future without incurring any costs other than the transmission costs according to the basic tariffs (the normal costs of your Internet or telephone connection) (advertising objection pursuant to Art. 21 para. 2 GDPR).
You have the right to have data blocked if, for example, the correctness of the data has not been established or you have lodged an objection and the examination has not yet been completed (restriction of processing in accordance with Art. 18 GDPR).
You have the right to request data which you have made available to us and which are automatically processed by us in a common, machine-readable format (data transferability in accordance with Art. 20 GDPR).
If we process your data following your consent, you have the right to withdraw your consent at any time, which prevents future processing of your data based on your consent. However, this will not effect the legality of any processing done before your withdrawal.
If you wish to exercise one or more of these rights, please contact our data protection officer.
The data protection officer is obliged to keep your identity secret if you wish to complain about the processing of your data by us. If he comes to the conclusion that your identity could be deduced in the course of clarifying a complaint, the data protection officer will inform you in advance and, if necessary, ask you to release him from his duty of confidentiality.
Should you assert your right to information, correction, blocking, deletion, data transferability or objection, the confidentiality obligation does not apply insofar as the transfer of the data is necessary to fulfil the request - for example to the database administration.
In addition, you have the right to lodge a complaint with the responsible data protection supervisory authority.
What is the data protection supervisory authority responsible for us?

References: Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 21
 Art. 21
 Art. 18
 Art. 20