Data Protection Notice in accordance with Art. 13 GDPR
The following information provides a simple overview of what happens to your personal data when you visit our website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about data protection, please read our Data Protection Notice below.
1. General information
The operators of this website take the protection of your personal data very seriously. This is why we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Notice.
A variety of personal data is collected whenever you use this website. Personal data is data that relates to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly (e.g. by assignment to an online ID) This includes information such as your name, address, telephone number and date of birth. This privacy notice explains, in accordance with Art. 12 et seq. of the GDPR, which data we collect and how we use it. It also explains how and for which purpose the information is collected.
We would like to use this opportunity to make you aware that the transmission of data over the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data from access by third parties.
2. Information about the responsible party (“controller”)
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
The controller responsible for data processing on this website is:
3iii GmbH, Am Ährenfeld 12 34277 Fuldabrück
Telefone: +49 561 4502201 Email: info@3iii-consulting.com
The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions about the purposes and means of processing personal data (e.g. names, e-mail addresses).
3. Data collection on our website
How do we collect your data?
We firstly collect your data when you share it with us. This may, for instance, include information you enter into our contact form. Other data is automatically collected by our IT systems when you visit our website. This data mainly consists of technical information (e.g. web browser, operating system or time the site was accessed). This information is collected automatically as soon as you access our website.
For what purposes do we use your data?
We collect your data to ensure that our website can be provided without any errors. We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).
Server log files
We automatically collect and store information in what are known as server log files, which your browser automatically transmits to us for the purpose of technically providing the website. These are: Browser type and browser version, Operating system, used Referrer URL (website from which access is made), Host name of the requesting computer, Time of request, IP address
These data are not combined with other data sources. This data is collected on the basis of Art. 6 Sect. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data is processed on the basis of Art. 6 Sect. 1 lit. f GDPR, as the website operator has a legitimate interest in the technically error free depiction and the optimization of the operator’s website.
Inquiries by e-mail, telephone, or contact form
If you contact us by e-mail, telephone or contact form, your request, including all the personal data provided (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this information without your consent.
This data is processed on the basis of Art. 6(1) (b) GDPR, if your request relates to the execution of a contract or is required to carry out pre-contractual activities. In all other cases, the processing is based on your consent (Article 6(1)(a) GDPR) and/or on our legitimate interests (Article 6(1) (f) GDPR), since we have a legitimate interest in the effective processing of requests addressed to us.
The data you send to us when you contact us in this way will continue to be stored by us until you ask us to erase your data or withdraw your consent to the storage of the data or until the purpose for which the data is being stored no longer exists (e.g. after we have finished handling your request). Any mandatory legal provisions—in particular statutory retention periods—will not be affected by this.
4. Use of cookies and third-party technologies
On our website, we use what are known as cookies. Cookies do not damage your computer and do not contain viruses. Cookies help us to make our website more user-friendly, efficient, and secure, and to enable the provision of certain functions. Cookies are small text files that are stored on your computer and saved by your browser. A cookie contains a characteristic string of characters that enables your browser to be clearly identified when you return to the website.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit or your browser session (known as transient cookies). Other cookies remain on your device for a predetermined period or until you delete them (so-called persistent cookies, e.g. language selection). These cookies enable us to recognize your browser on your next visit. This website does not use analytical cookies, marketing cookies or other personalization cookies. We are happy to provide further information on the functional cookies used upon written request. Please use the contact details given in section 2.
You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, accept cookies for specific cases or generally exclude them, and activate the automatic deletion of cookies when closing the browser. You can regularly obtain the procedure for deactivating cookies via the “Help” function of your internet browser. If you deactivate cookies, the functionality and/or the complete availability of this website may be restricted. The cookie-based data processing is carried out on the basis of Article 6(1)(1)(f) GDPR (legal basis) to safeguard our legitimate interests. Our legitimate interests are to provide you with a technically optimized, user-friendly and needs-based website and to ensure the security of our systems.
Google fonts
Our website uses WordPress themes (design templates) that integrate fonts from Google Fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google) by default. To prevent any data transfer to Google from the outset, we use the “Disable and Remove Google Fonts | GDPR & DSGVO friendly” plugin. This plugin is regularly updated and is compatible with the current WordPress versions.
The plugin removes all Google Fonts from our website. This ensures that no connection is established to the Google servers and thus no personal data, in particular IP addresses, are transmitted to Google. In this way, we ensure that your personal data is not passed on to third parties in this context and that no data transfer to third countries, such as the USA, takes place.
Further information about Google Fonts can be found at: https://fonts.google.com/ General information about data protection at Google can be found at: https://policies.google.com/privacy.
5. Data retention period
We initially process and store your personal data for the duration for which the respective purpose of use requires such storage (see above for the individual processing purposes). This may also include the periods of time during the initiation of a contract (pre-contractual legal relationship) and the execution of a contract. On this basis, personal data is regularly deleted in the context of fulfilling our contractual and/or legal obligations, unless its further processing is necessary for the following purposes:
- Compliance with statutory retention obligations, which arise, for example, from the German Commercial Code (§§ 238, 257 para. 4 HGB) and the German Fiscal Code (§ 147 para. 3, 4 AO). The periods for retention and documentation specified there are up to ten years.
- Preservation of evidence, taking into account the statutes of limitation. According to §§ 194 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.
6. Withdrawal of your consent to data processing
Many data processing operations are only possible if you provide your express consent. If you have given us your consent, you can withdraw this at any time. To do so, all you have to do is send us an informal notification by e-mail. This shall not affect the lawfulness of any data processing that occurred prior to your withdrawal.
7. Right to object to the collection of data in special cases and the right to object to direct marketing (Article 21 of the General Data Protection Regulation – GDPR)
In the event that data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right, at any time, to object to the processing of your personal data on grounds relating to your particular situation. This also applies to any profiling based on these provisions. Please consult this Data Protection Notice to determine the legal basis on which the processing of your data is based. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing of your data that override your interests, rights and freedoms or unless the data is being processed for the establishment, exercise or defense of legal claims (objection pursuant to Article 21(1) GDPR).
If your personal data is being processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Article 21(2) GDPR).
The revocation can be made informally, e.g. by emailing us.
8. Right to lodge a complaint with the competent supervisory authority according to Art. 77 GDPR
In the event of violations of the GDPR, data subjects are entitled to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or court proceedings available as legal recourses.
9. Access to, blocking, erasure and rectification of data according to Art. 15-17 GDPR
Within the scope of the applicable statutory provisions, you have the right, at any time and free of charge, to receive information about your stored personal data, its source and recipients as well as the purpose for which your data is being processed. You may also have the right to have your data rectified, blocked or erased. Please do not hesitate to contact us at any time using the address provided in the “Legal Notice” on this website if you have any questions about this or any other matters concerning your personal data.
10. Right to restriction of processing according to Art. 18 GDPR
You have the right to request that the processing of your personal data be restricted. To exercise this right, you may contact us at any time using the address provided in the “Legal Notice” on this website. You have the right to request restriction of processing in the following cases:
If you contest the accuracy of the personal data we have stored about you, we will usually need some time to verify this claim. While this investigation is ongoing, you have the right to request that we restrict the processing of your personal data. If your personal data was processed/is being processed unlawfully, you have the right to request that the processing of your personal data be restricted as opposed to this data being erased. If we no longer need your personal data but you require it for the establishment, exercise or defense of legal claims, you have the option to request that the processing of your personal data be restricted as opposed to this data being erased. If you have raised an objection pursuant to Article 21(1) GDPR, your rights and our rights must be weighed against one another. Until it is determined whose interests prevail, you have the right to demand that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, this data—with the exception of storage—may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or an EU member state.
11. Right to data portability according to Art. 20 GDPR
You have the right to request that any data that we automatically process on the basis of your consent or in order to perform a contract be handed over to you or a third party in a commonly used, machine-readable format. If you request that the data be transmitted directly from one controller to another, this will only be done if it is technically feasible.
12. Actuality and amendment of this data protection information
This Data Protection Notice is currently valid as of February 2025. It may be necessary to amend this Data Protection Notice as a result of further development of our website and our services or due to changes in legal or official requirements.
