{"id":831,"date":"2021-01-13T01:30:04","date_gmt":"2021-01-13T01:30:04","guid":{"rendered":"http:\/\/hkm-consulting.de\/privacy-policy\/"},"modified":"2025-09-22T10:33:50","modified_gmt":"2025-09-22T10:33:50","slug":"privacy_policy","status":"publish","type":"page","link":"https:\/\/hkm-consulting.de\/en\/privacy_policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

[vc_row][vc_column][vc_column_text css=””]<\/p>\n

Data Protection<\/h3>\n

We appreciate your interest in our website. Protecting personal data is of high importance to HKM Consulting GmbH. This privacy policy explains which data is collected, processed and stored when using our website and online services.<\/p>\n

Note: This translation is provided for information purposes only. The legally binding version is the German text.<\/strong><\/p>\n

[\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

1. Controller and Scope<\/h3>\n

Controller according to GDPR:<\/strong>
HKM Consulting GmbH
Managing Director: Klaus Martin Hecht
Nelkenstra\u00dfe 44
85521 Hohenbrunn \/ Metropolitan Region of Munich
E-Mail: datenschutz@hkm-consulting.de<\/a><\/p>\n

No data protection officer has been appointed, as there is no statutory obligation under \u00a7 38 BDSG. The managing director assumes responsibility for data protection. The mailbox datenschutz@hkm-consulting.de<\/a> serves as the central contact point.<\/p>\n

This privacy policy applies to the website www.hkm-consulting.de<\/a> and its online services.<\/p>\n

[\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

2. Collection, Processing and Storage of Personal Data<\/h3>\n

[\/vc_column_text][vc_column_text css=””]2.1 Use of the Website<\/strong><\/p>\n

a. Server log files<\/strong><\/p>\n

    \n
  • Data:<\/strong> IP address, date\/time, URL and file name, referrer URL, browser type\/version, operating system, access status, transferred data volume<\/li>\n
  • Legal basis:<\/strong> Art. 6(1)(f) GDPR (IT security, stability)<\/li>\n
  • Recipient:<\/strong> Strato AG, Otto-Ostrowski-Stra\u00dfe 7, 10249 Berlin, Germany (hosting, data processing agreement)<\/li>\n
  • Retention:<\/strong> maximum 7 days, longer only in case of misuse<\/li>\n
  • Third-country transfer:<\/strong> none<\/li>\n<\/ul>\n

    [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

    b. Technically necessary cookies<\/strong>
    The following cookies are used exclusively to ensure the functionality of our website:<\/p>\n

    \n
    \n\n\n\n\n\n\n\n\n\n
    Cookie<\/th>\nPurpose<\/th>\nRetention<\/th>\nRecipient<\/th>\n<\/tr>\n<\/thead>\n
    WPML<\/td>\nStores selected language<\/td>\nSession \/ few days<\/td>\nnone<\/td>\n<\/tr>\n
    W3 Total Cache<\/td>\nOptimizes loading speed<\/td>\nSession \/ few days<\/td>\nnone<\/td>\n<\/tr>\n
    PHP-Session<\/td>\nEnsures technical functionality<\/td>\nUntil end of session<\/td>\nnone<\/td>\n<\/tr>\n
    wordpress_test_cookie<\/td>\nChecks if browser accepts cookies<\/td>\nUntil end of session<\/td>\nnone<\/td>\n<\/tr>\n
    wordpress_logged_in_*<\/td>\nStores login info (backend users only)<\/td>\nUntil end of session<\/td>\nnone<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

    Legal basis: Art. 6(1)(f) GDPR.<\/p>\n

    [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

    c. Fonts (OMGF \u2013 locally hosted Google Fonts)<\/strong><\/p>\n

      \n
    • Data:<\/strong> no personal data<\/li>\n
    • Legal basis:<\/strong> Art. 6(1)(f) GDPR<\/li>\n
    • Recipient:<\/strong> none<\/li>\n
    • Retention:<\/strong> n\/a<\/li>\n
    • Third-country transfer:<\/strong> none<\/li>\n<\/ul>\n

      [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

      d. External social media links<\/strong>
      Our website contains links to external platforms (e.g. LinkedIn, Facebook). No data is transmitted to these providers when visiting our website. Data transfer occurs only once you click on the respective link.<\/p>\n

      [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

      e. Newsletter<\/strong>
      Currently, we do not<\/strong> offer a newsletter or similar services.<\/p>\n

      [\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

      2.2 Contact and Dialogue<\/strong><\/p>\n

      a. E-mail contact<\/strong><\/p>\n

        \n
      • Data:<\/strong> Name, e-mail address, message, optional details<\/li>\n
      • Legal basis:<\/strong> Art. 6(1)(b) and (f) GDPR<\/li>\n
      • Recipient:<\/strong> internal departments of HKM Consulting GmbH<\/li>\n
      • Retention:<\/strong> 6 years (business correspondence), 10 years (tax-related retention under \u00a7\u00a7 147 AO, 257 HGB)<\/li>\n
      • Third-country transfer:<\/strong> none<\/li>\n
      • Note:<\/strong> End-to-end encryption of e-mails cannot be guaranteed in all cases. For confidential matters, we recommend postal mail or encrypted transfer.<\/li>\n<\/ul>\n

        [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

        b. Applications via e-mail<\/strong><\/p>\n

          \n
        • Data:<\/strong> Name, contact details, application documents (e.g. CV, references)<\/li>\n
        • Legal basis:<\/strong> Art. 6(1)(b) GDPR, \u00a7 26(1) BDSG; storage to defend claims under the German Equal Treatment Act (AGG)<\/li>\n
        • Recipient:<\/strong> HR staff only<\/li>\n
        • Retention:<\/strong> maximum 6 months after the recruitment process; longer storage only with express consent (e.g. applicant pool, revocable at any time)<\/li>\n
        • Third-country transfer:<\/strong> none<\/li>\n<\/ul>\n

          [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

          c. Contact forms (topic-related)<\/strong>
          Our website offers topic-related contact forms.<\/p>\n

            \n
          • Data:<\/strong> Name, e-mail address, message. Mandatory fields are marked with an asterisk (*). If a mandatory field is not completed, the user receives an on-page feedback message.<\/li>\n
          • Processing:<\/strong> Data is transmitted via a secure TLS\/SSL connection<\/strong> to our webserver and immediately forwarded as e-mail to our Strato AG mailboxes (Germany). Strato stores the e-mails exclusively in German data centers under high security standards.<\/li>\n
          • Consent:<\/strong> Before sending, users must explicitly consent to the processing of their submitted data by ticking a checkbox.<\/li>\n
          • Legal basis:<\/strong> Art. 6(1)(b) and (f) GDPR; additionally Art. 6(1)(a) GDPR (consent)<\/li>\n
          • Recipient:<\/strong> internal departments of HKM Consulting GmbH<\/li>\n
          • Retention:<\/strong> corresponds to e-mail communication (see a)<\/li>\n
          • Third-country transfer:<\/strong> none<\/li>\n<\/ul>\n

            [\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

            2.3 Other Processing<\/strong><\/p>\n

            a. Video conferences (Microsoft Teams)<\/strong><\/p>\n

              \n
            • Data:<\/strong> Name, e-mail address, communication content (chat, audio, video, files), technical data (IP, device information)<\/li>\n
            • Legal basis:<\/strong> Art. 6(1)(b),(f) GDPR; Art. 6(1)(a) GDPR for recordings<\/li>\n
            • Recipient:<\/strong> Microsoft Ireland Operations Ltd., affiliated companies<\/li>\n
            • Retention:<\/strong> no storage, except when recordings are expressly consented to<\/li>\n
            • Third-country transfer:<\/strong> USA; EU-U.S. Data Privacy Framework, Standard Contractual Clauses<\/li>\n<\/ul>\n

              [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

              b. Security (Limit Login Attempts Reloaded)<\/strong><\/p>\n

                \n
              • Data:<\/strong> IP address, username, login events<\/li>\n
              • Legal basis:<\/strong> Art. 6(1)(f) GDPR<\/li>\n
              • Recipient:<\/strong> none<\/li>\n
              • Retention:<\/strong> max. 30 days<\/li>\n
              • Third-country transfer:<\/strong> none<\/li>\n<\/ul>\n

                [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]c. User management (When Last Login)<\/strong><\/p>\n

                  \n
                • Data:<\/strong> Timestamps of user logins<\/li>\n
                • Legal basis:<\/strong> Art. 6(1)(f) GDPR<\/li>\n
                • Recipient:<\/strong> none<\/li>\n
                • Retention:<\/strong> until deletion of user account<\/li>\n
                • Third-country transfer:<\/strong> none<\/li>\n<\/ul>\n

                  [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

                  d. Backups (BackWPup)<\/strong><\/p>\n

                    \n
                  • Data:<\/strong> all WordPress data including personal data<\/li>\n
                  • Legal basis:<\/strong> Art. 6(1)(f) GDPR<\/li>\n
                  • Recipient:<\/strong> Strato AG (hosting, processing agreement)<\/li>\n
                  • Retention:<\/strong> according to internal deletion policy<\/li>\n
                  • Third-country transfer:<\/strong> none<\/li>\n<\/ul>\n

                    [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

                    e. Other plugins<\/strong>
                    Other plugins (e.g. WPBakery Page Builder, Slider Revolution, The7 Theme) are used exclusively for layout and functionality. They do not process personal data.<\/p>\n

                    [\/vc_column_text][vc_empty_space height=”16px”][vc_column_text css=””]<\/p>\n

                    f. Data processing by third parties<\/strong>
                    Aside from hosting by Strato AG, no external processors are currently engaged. All maintenance, security, and IT services are performed internally by HKM Consulting GmbH. If external processors are engaged in the future, this will only take place on the basis of a data processing agreement pursuant to Art. 28 GDPR.<\/p>\n

                    [\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

                    3. Your Rights<\/h3>\n

                    You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data portability (Art. 20 GDPR) and withdrawal of consent (Art. 7(3) GDPR).<\/p>\n

                    [\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

                    4. Right to Object<\/h3>\n

                    You may object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR, provided there are reasons arising from your particular situation (Art. 21 GDPR).<\/p>\n

                    [\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

                    5. Right to Lodge a Complaint<\/h3>\n

                    You have the right to lodge a complaint with a supervisory authority. For HKM Consulting GmbH, this is the Bavarian State Office for Data Protection Supervision (BayLDA)<\/strong>. You may also contact any other supervisory authority within the European Union.<\/p>\n

                    [\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

                    6. Data Security<\/h3>\n

                    We implement technical and organizational measures to protect personal data, including:<\/p>\n

                      \n
                    • TLS\/SSL encryption of data transmission<\/li>\n
                    • access restrictions to internal systems<\/li>\n
                    • encrypted storage of passwords<\/li>\n
                    • strict authorization management<\/li>\n
                    • regular software updates and security checks<\/li>\n
                    • regular backups and system monitoring<\/li>\n
                    • staff training on data protection<\/li>\n<\/ul>\n

                      These measures are regularly reviewed and updated to reflect the current state of the art.<\/p>\n

                      [\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

                      7. Updates and Amendments<\/h3>\n

                      This privacy policy is valid as of September 2025<\/strong>. Changes may occur due to legal requirements or technical developments. The current version is always available on our website.<\/p>\n

                      [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

                      [vc_row][vc_column][vc_column_text css=””] Data Protection We appreciate your interest in our website. Protecting personal data is of high importance to HKM Consulting GmbH. This privacy policy explains which data is collected, processed and stored when using our website and online services. Note: This translation is provided for information purposes only. The legally binding version is the…<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-831","page","type-page","status-publish","hentry","description-off"],"_links":{"self":[{"href":"https:\/\/hkm-consulting.de\/en\/wp-json\/wp\/v2\/pages\/831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hkm-consulting.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/hkm-consulting.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/hkm-consulting.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hkm-consulting.de\/en\/wp-json\/wp\/v2\/comments?post=831"}],"version-history":[{"count":35,"href":"https:\/\/hkm-consulting.de\/en\/wp-json\/wp\/v2\/pages\/831\/revisions"}],"predecessor-version":[{"id":4238,"href":"https:\/\/hkm-consulting.de\/en\/wp-json\/wp\/v2\/pages\/831\/revisions\/4238"}],"wp:attachment":[{"href":"https:\/\/hkm-consulting.de\/en\/wp-json\/wp\/v2\/media?parent=831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}