I. Responsibility and data protection contact
We, Consulting4Drive GmbH (“C4D”), Hallerstraße 6, 10587 Berlin, are responsible under data protection law for the processing of personal data described here. You can reach our data protection officer at datenschutzbeauftragter@iav.de.
II. Visit our website
Insofar as the Telecommunications Telemedia Data Protection Act (“TTDSG”) applies to the technologies and cookies used on our website, we will obtain consent from you unless the data processing is necessary to comply with legal requirements or for the technical operation of the website, the functionality and security of the website and our IT systems.
A. Log files
Data processing: When you visit our website, your browser automatically transmits the following data:
- Your IP – address, which is anonymized once a day
- Date and time of access
- The website from which the access is made (referrer URL)
- Browser used and its version (if transmitted by the browser).
Purposes: The temporary storage of this data is necessary for the delivery of the website to your device, to ensure the functionality of the website, to be able to trace and prevent unauthorized access to the web server and misuse of the website, and to secure our IT systems.
Legal basis: Legitimate interests (Art. 6 Sec. 1 f of the General Data Protection Regulation (“GDPR”))
Storage period: The data is deleted when it is no longer necessary for achieving the purposes. Log files are generally deleted after 7 days.
B. Cookies and plug-ins
We use cookies. Cookies are small text files that are stored on your device when you visit the website. Cookies usually contain a characteristic string of characters (cookieID), with which your browser can be identified when you return to the website.
Among other things, we use session cookies to control navigation within a session after language selection.
III. Contact
Data processing: We collect and process the data you provide (e.g., contact details, name, request) when you contact us by e-mail.
Purposes: The data processing is carried out to process your request.
Legal basis: Implementation of (pre-)contractual measures (Art. 6 Sec. 1 b GDPR) or legitimate interests (Art. 6 Sec. 1 f GDPR).
Storage period: We store your data for as long as we need it to process your request. If necessary, we store data for the duration of statutory limitation periods (usually 3 years, in individual cases up to 30 years) and as long as required by legal retention periods (e.g., from the German Commercial Code, the German Fiscal Code) (usually a maximum of 10 years).
IV. Job Applications
Data processing:
You can send us your documents via the IAV applicant portal.
We and IAV GmbH Ingenieurgesellschaft Auto und Verkehr as the operator of the applicant portal process the application documents submitted. You can find the data protection notice of the applicant portal here.
Purposes: The purpose of the processing is the selection of applicants and filling of open positions. The provision of data is required for participation in the application procedure.
Legal basis: legitimate interests (Art. 6 Sec. 1 f GDPR).
Storage period: If we reject your application, we will store your application documents for a maximum of 6 months from the date of notification of rejection.
V. Social media (LinkedIn, Instagram)
A. Social media icons on our website
Data processing: We use icons that allow you to share pages on social networks. These icons are designed as external links. Eine Übertragung Ihrer Nutzerdaten erfolgt nur und erst dann, wenn Sie auf ein Icon klicken. A transfer of your user data occurs only and only when you click on an icon. Information about the data processing on the social media platforms, the purposes and legal bases of the data processing and about your rights vis-à-vis the platform operators can be found here:
| Platform | Address | Privacy information |
| Instagram
|
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland | https://privacycenter.instagram.com/ |
| LinkedIn
|
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland | https://de.linkedin.com/legal/privacy-policy?_l=de_DE |
B. Instagram
Data Processing by Meta and Us: We have an Instagram page As described in this section, we and Meta Platforms Ireland Limited, 4 Grande Canal Square, Dublin 2, Ireland (“Meta”) are partly joint responsible in part for the processing of your data on Instagram and have entered into a corresponding Agreement concluded.
We use the following Instagram features.
Insights
With the “Insights” function, we receive anonymized statistical analyses provided by Meta about the interaction of Instagram users with our Instagram pages. We can filter these according to certain parameters and time periods. The statistical evaluations contain, for example, the following information:
- Activities and interactions (e.g., clicks, page views, commenting, sharing), “likes”, reach of the page, of promotional activities, posts and events,
- Number and usage times of our subscribers and visitors, statistical information on age, gender and location,
- Video statistics,
- Received and sent messages.
To create the insights, Meta collects, among others, the following information: Viewing of a page/post/video, subscribing/unsubscribing to a page, tagging a page or post with “like” or “no longer like,” recommending a page in a post or comment, commenting on, sharing, or responding to a page post (including the type of response), hiding a page post, or reporting it as spam, click on a link from another page on Instagram or from a website outside of Instagram that leads to the page, hover over the name or profile picture of a page to preview page content, click on the webpage, phone number, “plan route” button or other button on a page, the information whether logged in via a computer or mobile device.
Instagram notifications
When you interact with our Instagram page, any of our posts or events (e.g., share, “like,” comment), subscribe to our Instagram page, or follow us, we receive a notification from Meta with your name, profile picture, and interaction.
Contact
When you send us a message via Instagram, we receive from Meta and process the information you provide, such as your username, profile picture, request, and contact information.
Purposes: Through Insights, we learn how our Instagram page is used and can tailor the activities, design, and content of our page, posts, and events to the interests of Instagram users. We use the information contained in Instagram notifications to see how you interact with our page and to respond to your interactions (e.g., comments, “likes”). If you contact us via Instagram, we process your data to handle your request.
Legal basis: legitimate interests (Art. 6 para. 1 f GDPR)
Retention period: We cannot delete Instagram notifications, your contacts, your posts or other interactions from the meta servers.
Data processing by META: When you visit our Instagram page, Meta processes the data previously shown and other data collected by cookies and other tracking technologies or provided by you and third parties, e.g., to provide evaluations and analyses for advertisers, for market research and for the personalization of features and content. Meta shares this data with other Meta Group companies and third parties and transfers data to third countries outside the European Union, such as the United States. For more information in Meta’s Privacy Policy and Cookie Policy, and to contact Meta, see Privacy Center of Meta.
C. LinkedIn
Data processing by LinkedIn and us: We have a company profile on LinkedIn. As described in this section, we and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn“) are partially responsible for the processing of your data on LinkedIn and have entered into an agreement to that effect.
We use the following LinkedIn features:
Page statistics
We receive information from LinkedIn about LinkedIn users and updates to our LinkedIn page. This data is provided to us without personal reference as page statistics.
For this purpose, LinkedIn evaluates the following information in particular: Information about how you interact with a profile; data you provide in your profile, e.g., your field of activity, your country, your industry, your seniority, your company size and your employment status.
Notifications
When you interact (e.g., “Like”, comment) with our LinkedIn profile, any of our posts or events, or follow us, we receive a notification from LinkedIn with your name, profile picture, and interaction.
Contact
When you send us a message via LinkedIn, we receive from LinkedIn and process the information you provide, such as your username, profile picture, request, and contact information.
Purposes: Through the analytics function, we learn who is viewing our LinkedIn profile or following us. This allows us to better understand trends and demographic backgrounds of people interacting with our page and to tailor the design of our LinkedIn page, posts and events to the interests of LinkedIn users.
We use the information in LinkedIn notifications to see how you interact in relation to our LinkedIn page and to respond to your interactions (e.g., comments, “likes”).
If you contact us via LinkedIn, we process your data to handle your request.
Legal basis: legitimate interests (Art. 6 para. 1 f GDPR)
Retention Period: We may not delete LinkedIn notifications, your contacts, your posts, or other interactions.
Data processing by LinkedIn: When you visit our LinkedIn page, LinkedIn processes various data collected through cookies and other tracking technologies or provided by you and third parties, e.g., to improve LinkedIn services, measure and optimize advertising, create statistics. LinkedIn shares this data with other companies and third parties and transfers data to third countries outside the European Union, e.g., to the USA. For more information on the scope and purpose as well as the legal basis of LinkedIn’s data processing and your rights, please refer to the Privacy Policy of LinkedIn.
VI. Data recipients
Within C4D: Within C4D, access to your data is limited to the appropriate individuals.
Service providers: We transmit your data to service providers who support us, e.g. in the areas of
- IT services,
- Hosting
- Applicant Management
- Operation and maintenance of our websites.
These service providers are contractually obligated to comply with data protection requirements and to maintain confidentiality. Service providers who are processors have signed a contract that ensures that data is only processed according to our instructions.
VII. Your data protection rights
A. Withdrawal of consent
You can withdraw any consent you have granted to the processing of your Data at any time and with effect for the future.
B. Other Rights of Data
According to Articles 15 to 21 and 77 of the GDPR, you have the following additional data subject’s rights if the legal requirements are met:
Information: You can request at any time that we provide you with information about which of your data we process and how, and a copy of the data we have stored about you. Further copies of the data stored about you may be subject to a charge.
Correction: You can request the correction of inaccurate data and the completion of incomplete data.
Deletion: You can request the deletion of your data. This does not apply to data that we require for the execution and processing of contracts and for the assertion, exercise and defense of legal claims, as well as data for which there are legal, regulatory or contractual retention obligations.
Restriction of processing: You may request the restriction of processing under certain circumstances, e.g., if you believe that your data is inaccurate, if the processing is unlawful or if you have objected to the data processing. This means that your data may only be processed in a very restricted manner without your consent, e.g., for the assertion, exercise and defense of legal claims or to protect the rights of other natural and legal persons.
Objection to data processing: You may object at any time to data processing for direct marketing purposes. If there are special reasons, you may object at any time to data processing based on legitimate interests.
Data portability: You have the right to receive the data that you have provided to us and that we process based on your consent or for the performance of the contract in a common, machine-readable format and to request, to the extent technically feasible, direct transfer of this data to third parties.
D. Right to complain to a supervisory authority
If you, for example, consider that the processing of your Data is illegal or that your rights described above are not granted to you to the required extent, you have the right to file a complaint to the competent data protection supervisory authority.
Stand: April 2023