for our website www.ums-gmbh.com
With the following information we would like to give you an overview of how we handle the data we collect from you in connection with the use of our services and when you visit our website www.ums-gmbh.com. We would also like to inform you about your data protection rights. Which data is processed in detail, and how it is used, depends on the services you use.
1. Controller, Art. 4 No. 7 GDPR
The controller responsible for processing your data within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) is:
UMS Consulting GmbH & Co. KG
Hanauer Landstraße 291 B
60314 Frankfurt am Main (Germany)
2. What is “personal data”?
Personal data is information about you that allows conclusions to be drawn about your identity, for example your name, your address or your telephone number. Information that does not allow conclusions to be drawn about an identified or identifiable person is not covered.
3. Scope of data collection, processing and use
a) On our website
aa) Visiting the website
When you visit our website purely for information purposes, meaning that you do not log in or otherwise transmit information to us, we only collect the data that your browser transmits to our server. This is technically necessary in order to display our website to you and to ensure stability and security:
- IP address of the requesting computer
- Date and time of the request
- Requested access method/function
- Input values transmitted
- Access status of the web server
- Name of the requested file
- Referrer URL
- Browser type and version
- Operating system used
bb) Contacting us
You can contact us by e-mail or via our contact form. We process the data you provide in order to be able to answer your enquiry.
cc) Customer login
We provide a login for our customers. The user name and password are sent to the customer by post or e-mail. The access data is stored separately and enables anonymised use.
dd) Cookies
We use what are known as session cookies, which serve user-friendly, effective and secure use. These are deleted automatically after your visit.
You can deactivate cookies in your browser. However, it is possible that not all functions of the website will then be available.
b) Other processing of data
We collect personal data when you submit enquiries, request quotations, place orders, register for events, or when we perform contractual relationships. This includes company data as well as personal data of contact persons, applicants or participants.
4. Purpose of processing and legal basis
a) Performance of a contract (Art. 6 (1) (b) GDPR)
We process data in order to provide our contractual services or to carry out pre-contractual measures.
b) Balancing of interests (Art. 6 (1) (f) GDPR)
We also process data to safeguard legitimate interests, for example:
- Ensuring IT security
- Producing anonymised access statistics
- Asserting and defending legal claims
c) Consent (Art. 6 (1) (a) GDPR)
Data processing on the basis of your consent (for example a newsletter). Consent can be withdrawn at any time.
5. Recipients of the data
- Data from the website is not transmitted to third parties.
- Subcontractors (for example trainers) may receive participant lists.
- For certifications, data is transmitted to the relevant bodies.
- Statutory obligations may require disclosure to public authorities.
6. Transfer to third countries
As a rule, no transfer takes place outside the EU/EEA. Should this be necessary in order to provide our services, the transfer is carried out in accordance with Art. 44 et seq. GDPR.
7. Storage period
- Data is stored only for as long as necessary.
- Server log files: 3 months.
- Session cookies: end of the visit.
- Enquiries: 3 months.
- Where statutory retention obligations or limitation periods apply, no deletion takes place.
8. Security of your data
We take appropriate technical and organisational measures. Employees and service providers are obliged to comply with data protection requirements.
9. Your data protection rights
As a data subject you have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Object (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
You may also lodge a complaint with the competent supervisory authority.
10. Obligation to provide data
There is no statutory obligation to provide data. However, certain information is necessary for enquiries or contracts.
11. Automated decision-making / profiling
No automated decision-making or profiling takes place.
12. Data protection officer
If you have any questions about data protection, please contact us at: privacy@ums-gmbh.com
13. Changes to this privacy policy
We reserve the right to amend this privacy policy. Earlier versions can be requested by e-mail.
V 1.0 — Frankfurt am Main, May 2018