Privacy policy

1. Name and address of the controller

Under the General Data Protection Regulation (GDPR) and other national data protection laws of Member States as well as other data protection law provisions, the controllers are:

• CONCEPTAX Siekmann, Janell und Partner mbB
• WOELKE AG Wirtschaftsprüfungsgesellschaft

CONCEPTAX Siekmann, Janell und Partner mbB

Hellerweg 28 32052 Herford Germany

Phone +49 5221 / 9831-0 Fax +49 5221 / 9831-40 E-mail info@conceptax.de https://www.conceptax.de

Call Save contact

2. Name and address of the data protection officer

The data protection officer of CONCEPTAX Siekmann, Janell und Partner mbB controller can be reached as follows:

microPLAN IT-Systemhaus GmbH
Spatzenweg 2
48282 Emsdetten
Germany

Tel.: (0) 2572 / 93 65 - 77
Fax.: (0) 2572 / 93 65 - 97 77
E-Mail: datenschutz@micoplan.de

3. Provision of the website and creation of log files

3.1 Possibility to object or remove

The collection of data in order to deliver the website and enable data storage in log files is absolutely necessary to operate the website. Consequently there is no possibility for the user to object.

3.2 Storage period

The data are erased as soon as they are no longer needed to achieve the purpose for which they were collected. When data are collected for the provision of the website, they are erased once the corresponding session is ended.

The storage period for log files is two months.

3.3 Legal basis and purpose of data processing

The temporary storage of IP addresses and, where applicable, log files by the system each time our web pages are called up is necessary in order to enable the website pages to be loaded on your computer. This storage is needed to address communications flows between the user and our web and/or online offerings or is required for the use of our web and/or online offerings. The legal basis for this data processing – i.e. for the duration of your website visit – is article 6(1)(b) and (f) of the GDPR.

In addition to the communications flows process, the processing and storage of IP addresses and log files is used to ensure the functionality of our web and online offerings, to optimize these offerings and to ensure the security of our IT systems. The legal basis for the storage of IP addresses other than the communications flows process is article 6(1)(f) of the GDPR.

3.4 Description and scope of data processing

Whenever a data subject or automated system accesses the website, we collect a set of metadata and information. The metadata and information are saved in the server log files. The following information is collected:

• Internet protocol address (IP address);
• the date and time the website was accessed;
• the exact subpage on our website to which you were directed;
• the web page from which you accessed our website (so-called referrer);
• the browser and version used;
• the operating system used for access.

4. Newsletter data / Client letters

4.1 Description and scope of data processing

You have the ability to subscribe to our newsletter through our website. For that, you must provide us with your e-mail address and consent to subscribe to the newsletter.

Failure to provide this mandatory data means that you will not receive a newsletter from us. Regarding voluntary data, if you choose not to provide it, the only consequence is that you will not be addressed personally in the corresponding newsletter.

We use these data exclusively to send the requested information and do not transmit them to third parties.

To sign up for our newsletter, we use the so-called double-opt-in procedure. In other words, when you register to receive our newsletter, we send you a confirmation e-mail with a link to confirm the registration. If you do not confirm your registration within 24 hours, your data are automatically erased. The purpose of this process is to verify your registration to receive the newsletter and, if necessary, clarify any possible misuse of your personal data. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter.

4.2 Legal basis and purpose of data processing

The legal basis for processing the data once the user has registered to receive the newsletter/client letter is the presence of the user’s consent under Article 6(1)(a) of the GDPR.

The collection of the user’s e-mail address serves to deliver the newsletter.

The collection of other personal data in connection with the registration process serves to prevent the misuse of the services or e-mail addresses used.

4.3 Storage period

The data are erased as soon as they are no longer required to achieve the purpose for which they were collected. The user’s e-mail address is then stored only as long as the newsletter or client letter subscription is active.

4.4 Possibility to object or remove

You can withdraw your consent and unsubscribe from the newsletter at any time, without affecting the lawfulness of any data processing that occurred under the terms of consent before it was withdrawn. You can unsubscribe by clicking on the link provided in every newsletter or by sending a message to the publisher’s address listed in the contact information. We store your data only as long as the subscription is active. We do not forward these data to anyone else without your consent.

At any time and for any reason, you can withdraw your consent for the storage of data and e-mail addresses and their use to send the newsletters / client letters by writing to mandantenrundschreiben@conceptax.de. When the objection or subscription cancelation request is received, all your data will be erased.

5. Contact form and e-mail contact

5.1 Description and scope of data processing

A contact form is available on our website that can be used to contact us electronically. If a user takes advantage of this possibility, then the data entered on the input screen are transmitted to us and stored.

For the data processing, reference is made to this privacy policy as part of the submission process. Alternatively, it is possible to contact us by e-mail at info@conceptax.de. In that case, personal data submitted by the user in the e-mail may be stored.

In this context, data is not forwarded to third parties. The data are used exclusively for processing the conversation. We should note that online data submissions (e.g. e-mail communications) may be exposed to security vulnerabilities. Complete data protection against third-party attacks is not possible.

5.2 Legal basis and purpose of data processing

The legal basis for processing the data is the presence of the user’s consent under Article 6(1)(a) of the GDPR. The legal basis for processing data following the sending of an e-mail is Article 6(1)(f) of the GDPR. If the e-mail contact involves entering into a contract, then the legal basis for the data processing also includes Article 6(1)(b) of the GDPR.

The processing of personal data from the input screen is designed solely to help us handle the initial establishment of contact. In the case of an initial establishment of contact by e-mail, the requisite data processing legitimate interest also exists here. The other processed personal data during the submission process serve to prevent the misuse of the contact form and to ensure the security of our IT systems.

5.3 Storage period

The data are erased as soon as they are no longer required to achieve the purpose for which they were collected. In the case of personal data from the contact form’s input screen and those submitted by e-mail, that moment occurs when the corresponding conversation with the user ends. The conversation is ended when it can be determined from circumstances that the matter at hand is definitively resolved.

5.4 Possibility to object or remove

The user may withdraw his or her consent to process personal data at any time. The user may contact us by e-mail any time and object to the storage of his or her personal data. In that case, the conversation may not be continued. The withdrawal of consent and the objection to storage of data may be submitted by postal mail (to: CONCEPTAX Siekmann, Janell und Partner mbB, Hellerweg 28, 32052 Herford, Germany) or e-mail (to: info@conceptax.de). All personal data stored in connection with the initial establishment of contact will be erased in that case.

6. Data protection tips for online job applications

6.1 Description and scope of data processing and data categories

When supporting documents are provided for a job application using our online app, e-mail or postal mail, or through human resources consultants or recruiters or any other communications channels, personal data, and in particular personal data used in connection with the job application, will be processed. For the job application, we process your contact information and personal data along with all data that you provide to us in connection with the job application. Among other data, this includes the following personal data:

• First name, last name, date of birth;
• Address, e-mail address and telephone number;
• Nationality, sex, age;
• CV and cover letter
• Certificates, proof of qualification, references
• Bank account information for possible travel cost reimbursement

Moreover, data you provide may include personal data as defined by article 9 of the GDPR, which is subject to special protection. Insofar as an employment relationship results from the application, we will transfer all of the personal data you provided us as part of the job application to our personnel files.

6.2 Purpose of data processing and legal basis

We process your personal data in order to decide whether to enter into an employment relationship with you. Meanwhile, the personal data serve as the basis for implementing a potential employment relationship (§26(1)(1) of the Federal Data Protection Act (BDSG); article 6(1)(b) of the GDPR). In cases where the processing of your personal data goes beyond the purpose of the application process, it must be authorized through individual consent. Insofar as you have also provided us with your consent to process your personal data, the respective consent serves as the legal basis for the aforementioned processing (§26(2) of the BDSG; article 6(1)(a) of the GDPR).

You may withdraw your consent at any time, with immediate effect going forward. As long as the processing is consistent with the intended purpose, we process your personal data in an anonymized manner.

6.3 Recipients of your personal data

Your personal data is transferred only on a strictly confidential basis and to the extent allowed by law. With your application, you are providing your personal data to the appropriate technical and human resources departments. Supporting documents submitted with your application may be seen and reviewed by those persons involved in the hiring process.

6.4 Duty to provide your personal data

As part of the application process, we must process some personal data in order to verify the technical and personal compatibility of an applicant for a given job. If you do not provide us with this personal data, as a general rule we will not be able to complete the application process. This limitation does not apply to data that we process with your consent.

6.5 Consent and right to object

In order to apply with us online, you must declare that you consent to the collection, processing and use of your personal data for the purpose of the application process within the aforementioned scope. You provide this statement of consent by clicking on the corresponding control button. If you transfer unrequested data that contains information about racial or ethnic heritage, political opinions, religious or philosophical beliefs, trade union membership, your heath or sex life,  genetic information or biometric data, you also consent to the electronic processing of these personal data. We will not use or apply these specific personal data. We request that you not submit any such data to us.

You may at any time and without having to provide a reason object to the future processing of your personal data for the purpose of the application procedure. This objection can be made by e-mail. Upon receipt of your objection, the data will be erased.

6.6 Storage period and erasure of data

Your data will be stored for the duration of the application process. If you are hired, the information will be held as employee data and further stored, processed or used for the duration of the employment relationship.

If you are not hired, your personal data will be held for six months following the end of the application process, in accordance with article 6(1)(f) of the GDPR and the provisions of the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG). Insofar as you have given us your consent, we store your personal data from the application process for the period stated in the respective consent statement.

The data will only be further processed and used in an anonymized manner for statistical purposes; the data may not be linked to an individual applicant.

7. Cookies

7.1 Description and scope of data processing

We use so-called cookies on our websites. Cookies are small text files that your web browser places and stores on your computer and through which certain information flows to the website that sent the cookie. They serve to optimize our Internet appearance and our offers.

These cookies are for the most part so-called session cookies, which are erased following the end of your session. In some cases, these cookies nevertheless leave information that makes it possible to recognize you again automatically. This recognition occurs thanks to the IP address stored in the cookie, although these do not make it possible to identify a user directly.

Each use of cookies that is not technically necessary represents data processing authorized only with your expressly given consent, in accordance with article 6(1)(a) of the GDPR. That is particularly the case for the use of advertising, targeting and sharing cookies. Moreover, we transfer personal data processed by cookies to third parties only if you have provided us with your explicit consent for that purpose, in accordance with article 6(1)(a) of the GDPR.

You may block the installation of cookies using the corresponding browser settings; in that case, however, it should be noted that you may not always be able to use all of the functions of our website.

7.2 Storage period

Transient cookies are automatically erased when you close the browser. That includes session cookies in particular. They store a so-called session ID, with which various requests from your browser are assigned to the shared session. In this manner, your computer is recognized if you return to our website. These session cookies are erased when you log out or close the browser.

Persistent cookies are erased automatically after a predetermined period, which varies depending on the cookie. You can always erase the cookies in the security settings of your browser.

8. datalist_search

We use the function datalist_search to create a list of potential keywords for the search feature on the website and to store this list in your internet browser’s session storage on your device. Please note that the function does not store or otherwise process any personal information and is strictly necessary in order to provide the website‘s search feature. Any information stored on your device by the function datalist_search will be deleted at the end of the current session.

9. Rights of the data subject

If your personal data is processed, you are a data subject as defined by the GDPR and have the following  rights with respect to the controller:

9.1 Right to data portability

You have the right to receive the personal data about you that you provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller, without hindrance from the controller to whom the information was provided, as long as:

1. the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or involves a contract in accordance with Article 6(1)(b) of the GDPR, and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data about you transmitted directly from one controller to another, to the extent this transmission is technically feasible. The freedoms and rights of other persons shall not be infringed by the exercise of this right. The right to data portability does not apply to processing personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

9.2 Right of access

You may request confirmation from the controller whether personal data about you was processed by us. If such processing occurred, you can request information from the controller about the following:

• the purposes for which the personal data were processed;
• the categories of personal data that were processed;
• the recipients or categories of recipients to whom the personal data have or will be disclosed;
• the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine the period;
• the existence of the right to rectification or erasure of personal data about you, a right to restrict the processing by the controller or a right to object to this processing;
• the right to lodge a complaint with a supervisory authority;
• all available information about the origin of the data, when the personal data is not obtained from the data subject;
• the existence of automated decision-making including profiling, referred to in Article 22(1) and (4) of the GDPR and – at least in those cases – meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether the personal data were transferred to a third country or to an international organization. In that regard, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR.

9.3 Right to rectification

You have the right to obtain rectification and/or the completion of incomplete data from the controller to the extent the personal data processed about you is incorrect or incomplete. The controller must make the rectification without undue delay.

9.4 Right to restriction of processing

In the following conditions, you have the right to request from the controller that personal data about you be restricted:

• if you contest the accuracy of the personal data about you for a period that allows the controller enough time to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;
• the controller no longer needs the personal data for the purposes of the processing, but you nevertheless need the data for the establishment, exercise or defense of legal claims;
• you have objected to the processing pursuant to Article 21(1) of the GDPR, pending the verification whether the legitimate grounds of the controller override yours.

If the processing of personal data about  you was restricted, these data – apart from your storage – shall only be processed with your consent or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State. If the restriction of processing was obtained under the aforementioned conditions, you shall be informed by the controller before the restriction is lifted.

9.5 Right to erasure

a) Erasure requirement

You may request from the controller that the personal data about you be erased immediately, and the controller is required to erase these data without undue delay where one of the following grounds applies:

• the personal data about you are no longer needed for the purposes for which they were collected or otherwise processed;
• you withdraw your consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal ground for the processing;
• you object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR;
• the personal data about you were unlawfully processed;
• the erasure of the personal data about you is necessary to satisfy a legal obligation under European Union or Member State law, to which the controller is subject;
• the personal data about you were collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

b) Information to third parties

If the controller has disclosed the personal data about you and is required to erase it pursuant to Article 17(1) of the GDPR, the controller shall take reasonable steps, taking into account available technology and the cost of implementation, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested that they erase all links to these personal data or copies or replication of these personal data.

c) Exceptions

The right to erasure does not exist to the extent that processing is necessary:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation that requires processing by European Union or Member State law to which the controller is subject, or for the performance of a task in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health, in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the GDPR, to the extent the right referred to in section (a) is likely to block or seriously impede the objectives of this processing from being achieved;
• for the establishment, exercise or defense of legal claims.

9.6 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data about you infringes the GDPR. The supervisory authority receiving the complaint informs the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

9.7 Right to notification

If you have asserted the right to rectification, erasure or restriction to the controller, then the controller is required to notify all recipients to whom the personal data about you was disclosed of the rectification or erasure of the data or restriction of the processing, unless this notification is impossible or involves an unreasonable cost. You have the right to be informed by the controller about those recipients.

9.8 Right to withdraw statement of consent in connection with the data protection law

You have the right to withdraw your statement of consent in connection with the data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing that occurred prior to the withdrawal.

9.9 Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal information about you, which is based on Article 6(1)(e) or (f) of the GDPR; this right also applies to profiling based on these provisions.

The controller shall no longer process personal data about you, unless he can substantiate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If the personal data about you are processed for direct marketing purposes, you have the right to object at any time to the processing of such information about you for such marketing purposes; this right also applies to profiling to the extent it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data about you shall no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by automated means using technical specifications.

9.10 Automated individual decision-making, including profiling

You have the right not to be subject to decision based solely on automated processing – including profiling – that has legal consequences or significantly affects you in a similar manner. This right does not apply when the decision

• is necessary for entering into or performance of an agreement between you and the controller;
• is authorized by a European Union or Member State law that is binding on the controller, and this law has appropriate measures to protect your rights and freedoms as well as your legitimate interests;
• occurs with your express consent.

Nevertheless, these decisions shall not involve special categories of personal data referred to in article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures to protect your rights and freedoms as well as your legitimate interests have been taken. Regarding the situations described in (1) and (3), the controller shall take appropriate measures to protect your rights and freedoms as well as your legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and contest the decision.

10. Use of social media

General information

• Purpose of data processing: We use social media primarily to communicate with existing and new clients as well as to make information about our company available to a wide range of recipients. To that end we process contact information and communications data in particular, along with data used to measure the reach of the data we post. The operators of the respective social media platforms also process personal data for tracking (e.g. to create user profiles based on user practices or interests), remarketing (e.g. targeted advertising through cooperating partners) and to provide statistical evaluations about us regarding the use of our service.
• Data subjects: generally all profile visitors, which are persons who visit our profile on social media.
• Scope of data processing: For the aforementioned purposes we, or a third-party provider designated by us, processes personal data to identify the profile visitor (e.g. name, address), data necessary for contacting the profile visitor (e.g. e-mail address, telephone number), data on usage patterns (e.g. IP address, devices and programs used to visit the website), profile visitor content (e.g. text, photos, videos) and also, where consent has been given, data on the physical location of the profile visitor.

These personal data of the profile user are aggregated to create a user profile and stored as a file (cookie) on the profile visitor’s device. Other websites may occasionally access this user profile in order to use and enhance the embedded data for targeted advertising content. Any third-party providers that make social media and other data processing tools available for marketing purposes can also store the data embedded in the user profile on their servers.

• Legal basis for the data processing: We process personal data thanks to our legitimate interest in communications and direct marketing as defined by article 6(1)(f) of the GDPR.
• Data processing outside of the European Union: Social media operators also occasionally process data outside of the European Union.
• Rights of the data subject: Where possible, we ask our profile visitors to assert their right of access and other rights of the data subject (e.g. erasure) directly with the social media operators, since the operators are the only parties with unlimited access to the processed data. We will of course forward questions sent to us regarding data protection rights (e.g. access, rectification, erasure) to the operators of the respective social media platforms.

Further information regarding your assertion of data subject rights, in particular regarding the existing possibilities to object to data processing, can be found in the privacy policies of the respective social media operators.

• Use of cookies: The user profile is stored as a file (cookie) on the profile visitor’s device. The storage of this file is predicated on the profile visitor’s consent, which can be withdrawn at any time.

Services used

Facebook

• Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; a subsidiary of Facebook, Inc., 1 Hacker Way, Menlo Park, California, USA; Website: https://www.facebook.com.
• Data processed: data used to identify the profile visitor (e.g. name, address), data necessary for contacting the profile visitor (e.g. e-mail address, telephone number), profile visitor content (e.g. text, photos, videos), data on profile visitor’s usage patterns (e.g. visit duration, websites visited, searched content, services used), technical data (e.g. IP address, devices and programs used to call up the profile), and, where consent has been given, data on the physical location of the profile visitor.
• Data subjects: All profile visitors, i.e. persons who call up our profile on Facebook.
• Legal basis: Legitimate interest in communications and direct marketing as defined by article 6(1)(f) of the GDPR.
• Cookies: Facebook uses cookies in order to store the data of the profile visitor. For more information: https://www.facebook.com/policies/cookies
• Objection: As a rule, Facebook makes it possible to object to data processing for the aforementioned purposes (https://www.facebook.com/settings?tab=ads). The processing of your data for the aforementioned purposes may also be blocked if you do not consent to the use of the required cookies. In that case, however, individual functions of our website may not work properly. Separate from these possibilities, other general possibilities to object exist depending on the region (Europe: https://www.youronlinechoices.eu; USA: https://www.aboutads.info/choices; Canada: https://www.youradchoices.ca/choices; International: https://www.youradchoices.ca/choices).
• Data privacy information: privacy policy: https://www.facebook.com/about/privacy; Agreement on joint processing of personal data on Facebook profiles: https://www.facebook.com/legal/terms/page_controller_addendum; data privacy information for profiles on Facebook: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Twitter

• Service provider: Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, California, USA; website: https://www.twitter.com.
• Data processed: data used to identify the profile visitor (e.g. name, address), data necessary for contacting the profile visitor (e.g. e-mail address, telephone number), profile visitor content (e.g. text, photos, videos), data on profile visitor’s usage patterns (e.g. visit duration, websites visited, searched content, services used), technical data (e.g. IP address, devices and programs used to call up the profile), and, where consent has been given, data on the physical location of the profile visitor.
• Data subjects: All profile visitors, i.e. persons who call up our profile on Twitter.
• Legal basis: Legitimate interest in communications and direct marketing as defined by article 6(1)(f) of the GDPR.
• Cookies: Twitter uses cookies in order to store the data of the profile visitor. For more information: https://help.twitter.com/de/rules-and-policies/twitter-cookies
• Objection: As a rule Twitter makes it possible to object to data processing for the aforementioned purposes (https://www.twitter.com/personalization).
• Data privacy information: Privacy policy: https://www.twitter.com/de/privacy.

LinkedIn

• Service provider: LinkedIn Ireland Limited, 77 Sir John Rogerson’s Quay, Dublin 2, Ireland; website: https://www.linkedin.com.
• Data processed: data used to identify the profile visitor (e.g. name, address), data necessary for contacting the profile visitor (e.g. e-mail address, telephone number), profile visitor content (e.g. text, photos, videos), data on profile visitor’s usage patterns (e.g. visit duration, websites visited, searched content, services used), technical data (e.g. IP address, devices and programs used to call up the profile), and, where consent has been given, data on the physical location of the profile visitor.
• Data subjects: All profile visitors, i.e. persons who call up our profile on LinkedIn.
• Legal basis: Legitimate interest in communications and direct marketing as defined by article 6(1)(f) of the GDPR.
• Cookies: LinkedIn uses cookies in order to store the data of the profile visitor. For more information: https://de.linkedin.com/legal/cookie-policy?
• Objection: As a rule LinkedIn makes it possible to object to data processing for the aforementioned purposes.
• Data privacy information: Privacy policy: https://privacy.linkedin.com/de-de

Xing

• Service provider: XING AG, Gänsemarkt 43, 20354 Hamburg, Germany; website: https://www.xing.com.
• Data processed: data used to identify the profile visitor (e.g. name, address), data necessary for contacting the profile visitor (e.g. e-mail address, telephone number), profile visitor content (e.g. text, photos, videos), data on profile visitor’s usage patterns (e.g. visit duration, websites visited, searched content, services used), technical data (e.g. IP address, devices and programs used to call up the profile), and, where consent has been given, data on the physical location of the profile visitor.
• Data subjects: All profile visitors, i.e. persons who call up our profile on Xing.
• Legal basis: Legitimate interest in communications and direct marketing as defined by article 6(1)(f) of the GDPR.
• Cookies: Xing uses cookies in order to store the data of the profile visitor. For more information: https://privacy.xing.com/de/datenschutzerklaerung/druckversion
• Objection: As a rule Xing makes it possible to object to data processing for the aforementioned purposes (https://www.xing.com/support/contact).
• Data privacy information: Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.

11. Current status and changes to this privacy policy

This privacy policy is currently applicable and was last updated in September 2022.

It may become necessary to make changes to this privacy policy due to the further development of our website and related offers or to changes in statutory or regulatory provisions. You can always download and print the current privacy policy found on the website at https://www.conceptax.de.