Note: Please find here the translated version of the German data protection declaration. Please note that the German version is authoritative in its wording. With this privacy policy we would like to inform you about how we process personal data. We are aware of the importance of processing personal data for the user and accordingly observe all relevant legal requirements. In doing so, the protection of your privacy is of utmost importance to us. Therefore, compliance with the legal provisions on data protection is a matter of course for us.

1. Contact
aprile consulting GmbH
Alstertor 9
20095 Hamburg
Managing Director: Dr. Ing. (I) Nico Aprile
datenschutz (at) aprileconsulting.com

2. External data protection officer

If you have any questions regarding our data protection measures, the processing of your data or regarding the protection of your data subject rights, you can reach us and our data protection officer as follows:

ePrivacy GmbH
vertreten durch Prof. Dr. Christoph Bauer
Große Bleichen 21, 20354 Hamburg

3. Personal data

Personal data is all information about the personal and factual circumstances of an identified or identifiable person.
We collect and process the following categories of personal data about you:

• - Contact and name information, if you have provided us with your contact information in the contact form.
• Information about your request in the contact form
• - Your contact details (such as first and last name, address, email address, telephone number),
• your correspondence with us,
• Log files containing information about your visit to our website,
• Online identifiers (such as cookie IDs, IP addresses, advertising IDs).

4. Legal basis

Your data is processed on the following legal bases:

• In relation to data you provide in forms and the like, with your consent, Art. 6 para. 1 lit. a) DSGVO,
• in relation to services you use, for the performance of a contract with you, Art. 6 para. 1 lit. b) DSGVO,
• the fulfilment of legal obligations (Art. 6 para. 1 lit. c) DSGVO),
• otherwise, in particular in the case of statistical data and online identifiers, on the basis of legitimate interests, Art. 6 para. 1 lit. f) DSGVO (see below).

5. Legitimate interests

When processing your data, we pursue the following legitimate interests:

• Improvement of our offer,
• protection against misuse,
• technical necessity for the provision and delivery of the website,
• our own statistics,
• protection against theft and property infringements, and preservation of evidence.

6. Data sources

Unless otherwise stated, we obtain the data from you (including via the devices you use). If we do not collect the personal data directly from you, we will also tell you the source of the personal data and, if applicable, whether it is from publicly available sources.

7. Storage period

We store your data

• if you have consented to the processing, at most until you revoke your consent,
• if we need the data to perform a contract, at most for as long as the contractual relationship with you exists or legal retention periods run,
• if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh this.

8. Purposes of use

Personal data will only be collected by us if and to the extent and for the purpose for which you provide us with the data of your own accord, e.g. in the context of a registration.

We only use your personal information within the company and only pass it on to those companies that are involved in the fulfilment of the contracts concluded with you or otherwise in the provision of services. Otherwise, your personal information will not be disclosed to third parties unless you have given your express consent to do so or we are obliged to disclose it, for example as a result of a court or official order.

We process your data for the following purposes:

• for contacting you as requested by you,
• to process contracts with you,
• to send newsletters and invitations,
• to protect you from theft and property damage and to preserve evidence,
• for correspondence with you,
• for quality assurance and statistics,
• to provide our service,
• to consider your application,
• to improve our service.

9. Cookies

Cookies are small files that your browser stores on your device in a designated directory. These cookies can be used, for example, to determine whether you have visited a website before. Most browsers accept cookies automatically. However, you can set your browser so that no cookies are saved or explicit consent is required before a cookie is saved. You can also delete cookies that have already been set at any time. Please note that deactivating cookies may possibly lead to restrictions in the use of our website.

We set the following cookies:

PHPSESSID

• Purpose: Technically necessary
• Name of the cookie in the browser: PHPSESSID
• Lifetime of the cookie: Session
• What data is collected: Unique identifier consisting of randomised string to recognise the visit.
• For what purpose is the data collected: To maintain the session for the site visitor between visits.

Legal basis: Legitimate interest, Art. 6 para. 1 lit. f DSGVO.

Data recipient

When processing your data, we work with the following service providers who have access to your data:

• Web analytics tool providers,
• Web hosting and web development providers,
• IT development service providers,
• ticketing and customer support software providers,
• marketing and advertising agencies,
• email and newsletter providers,
• proofreading and translation service providers,
• CRM system service providers,
• Cloud services,
• conference and webinar software,
• online survey service providers,
• chat software service providers,
• social media platforms,
• accounting and billing service providers

10. Web analytics

We use analytics tools on our website in the form of tracking software to determine the frequency of use and number of users of our website.

We use the open source software Matomo, InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand, to analyse and statistically evaluate the use of the website. The information on website use obtained in this way is transmitted exclusively to our servers and summarised in pseudonymous usage profiles. We use the data to evaluate the use of the website. The data collected is not passed on to third parties.

The IP addresses are anonymised (IP masking) so that an allocation to individual users is not possible.

The processing of the data is based on our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f) DSGVO. We are thus pursuing our legitimate interest in optimising our website for our external presentation.

You can object to the processing of your data with the following opt-out.

You have the option of preventing actions you take here from being analysed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.

Your visit to this website is currently collected by Matomo web analytics. To declare your objection to this or to opt-out, you can uncheck this box.

Opt-out complete; your visits to this website will not be collected by the web analytics tool. Please note that the Matomo deactivation cookie of this website will also be deleted if you remove the cookies stored in your browser. In addition, if you use a different computer or a different web browser, you will need to complete the deactivation procedure again.

You have the option of preventing actions you take here from being analysed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.

The tracking opt-out function requires cookies to be enabled.

Google Ads

We use Google Ads, an online advertising programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"), which enables us to play ads in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting).

In addition, targeted ads can be served based on user data available on Google (audience targeting), such as your age and gender, general location, search activity, previous interactions with ads and the types of websites visited.

We can evaluate this data quantitatively with the provider Matomo without setting cookies, for example by analysing which search terms led to our ads being played and how many ads led to impressions and clicks. This also allows us to improve our keywords and add content to our website that matches what users are searching for.

The data processing is based on Art. 6 (1) lit. f DSGVO. We are thus exercising our legitimate interest in analysing user behaviour to improve our advertising and web offering.

Further information on Google Ads can be found under the following links:

Privacy Policy: https://policies.google.com/privacy

How Google uses cookies in advertising:

https://policies.google.com/technologies/ads?hl=de

https://policies.google.com/technologies/partner-sites?hl=de

11. Log Files

Every time you access our website, usage data is transmitted by the respective internet browser and stored in log files, the so-called server log files. The data records stored contain the following data: Website visited, domain from which the user accesses the website, date and time of access IP address of the accessing computer, website(s) visited by the user within the scope of the offer, amount of data transferred, browser type and version, operating system used, name of the Internet service provider, message as to whether the access was successful. These log file data records are evaluated in anonymised form in order to improve the offer and make it more user-friendly, to find and correct errors and to control the utilisation of servers. This is also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO. This data is not passed on to third parties. Access data is stored in the log file for a maximum of 7 days.

12. Third party services

We use third party services for various functions on our website.

Contact Form 7

The Contact Form 7 plugin is a service for creating contact forms. The Contact Form plugin is only used to forward entered form data to our company's email address. Additional storage, e.g. in the WordPress database, does not take place. Further information and the applicable data protection provisions of Contact Form can be found at https://de.wordpress.org/plugins/contact-form-7/ and https://rocklobster.in/ Contact Form is open source software. Communication between the browser and the server takes place exclusively via HTTPS (SSL/TLS) encryption.

13. Video surveillance of our offices Alstertor 9, Hamburg

Due to the justified interest in protecting against theft and property violations and the associated preservation of evidence, our entrance areas are video-monitored. Please note the corresponding signs when visiting our offices. The video data is recorded and automatically deleted after a period of 7 days. Please also refer to the section "Rights of the person concerned".

14. Transfer to third countries

There is a data transfer to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other suitable guarantees, such as certifications or proven compliance with international security standards, which you can view on request.

15. Rights of the data subject

Right of access, rectification, withdrawal, complaint, erasure and blocking:

• You have the right to request information about whether and which of your personal data is processed by us. You also have the right to request that your personal data be corrected or completed.
• Under certain circumstances, you have the right to request that your personal data be deleted.
• You have the right, in certain circumstances, to request that the processing of your personal data be restricted.
• You can revoke your consent to the processing and use of your data in full or in part at any time with effect for the future.
• You can object to the processing of your data.
• You have the right to receive your personal data in a common, structured and machine-readable format.
• You also have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of personal data concerning you is in breach of the law.
• You can also contact our data protection officer in writing with questions, comments and complaints as well as requests for information in connection with our data protection statement and the processing of your personal data.

16. Requirement or obligation to provide data

Unless expressly stated at the time of collection, the provision of data is not required or obligatory.

17. Status of this privacy policy

30.01.2023

This data protection declaration was prepared with great care together with our data protection officer and the experts of the company ePrivacy GmbH, as we attach particular importance to the protection of your data.

We reserve the right to change this data protection declaration at any time with effect for the future.