Innovation IP Logo
DE EN

Data protection

Who is responsible for data processing and how can I contact the Data Protection Officer?

The data controller is:

Dr Jan Gehrmann
Ballindamm 3
20095 Hamburg
Germany

Tel +49 40 380 888 42
Mobile +49 160 260 1230
Email: info@innovationip.de

We are not obliged to appoint a data protection officer.

For what purposes and on what legal basis is data processed?

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and all other relevant laws only to the extent necessary to provide the information on this website and our services on this website.

When using the website for purely informational purposes, i.e. when you access information, we do not collect any personal data, with the exception of the data transmitted by your browser to enable you to visit the website. These are:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred in each instance
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

To ensure the website functions properly, data is stored in log files. This data is also used to ensure the security of our IT systems and to optimise the website.

Article 6(1)(f) of the GDPR forms the legal basis for the temporary storage of data and log files. Our legitimate interest is limited to the purposes mentioned above.

Where our company is subject to a legal obligation for the fulfilment of which the processing of personal data is necessary, Article 6(1)(c) of the GDPR forms the legal basis.

Personal data may be passed on to our IT service providers for the provision of this website.

We only store your data for as long as we require it for the intended purpose. The law does not specify any time limits in this regard. As a rule, the data is deleted after seven days. If legal requirements permit longer storage, we may retain the data beyond these seven days. You may object to this at any time by contacting us using the contact details provided above.

Contact form

We collect your personal data when you provide it to us by completing the contact form or the enquiry form. The data provided is processed and used exclusively to provide you with the requested information. Any further processing and use of your data for advertising purposes or market research will only take place with your express consent.

The following data is stored at the time the message is sent:

  • IP address of the user
  • Registration time (date and time)
  • Name of the company (quotation requests only) or the enquirer
  • Location (quotation requests only)
  • Email address
  • Industry (quotation requests only)
  • Services requested (quotation requests only)
  • All other details in the contact form are optional

Contact can also be made via an alternatively provided email address, in which case the personal data of the user sent together with the email will be stored by our company.

The legal basis for the processing of data, where the user's consent has been given, is Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. The lawfulness of the processing carried out up to that point remains unaffected. If your contact is for the purpose of concluding a contract, the legal basis here is Article 6(1)(b) of the GDPR. The data will be deleted immediately once the purpose no longer applies.

Contacting us

You have the option of contacting us by telephone and by email.

If you contact us by telephone, we will process, in particular, your telephone number and, if requested during the conversation, your name, email address, the time of the call, and details of your enquiry. If you contact us by email, we will process, in particular, your email address, the time of the email, and any data contained in the message text (including any attachments).

The purpose of processing the above-mentioned data is to process your contact enquiry and to be able to contact you in order to respond to your enquiry.

The legal basis for the processing of personal data described here is Article 6(1)(f) of the GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to respond to your enquiries. The personal data will only be processed for as long as is necessary to handle the contact enquiry.

You may object to this at any time by sending a message to the contact details provided above. However, further communication will then no longer be possible, as all personal data stored in connection with the contact will be deleted in this case.

Online appointment booking

When you book an appointment online, we collect personal data to enable us to plan and conduct your consultation efficiently.

In this context, you are required to provide your name and email address. This information is necessary to identify you, communicate with you and confirm the appointment accordingly.

In addition, you have the option of voluntarily providing further details, namely your telephone number and your home address. This voluntary information helps us to contact you more quickly in the event of last-minute changes and to better prepare for the consultation, particularly if there is a connection to your place of residence.

The processing of your name and email address is based on Article 6(1)(b) of the GDPR. This is necessary for the preparation and arrangement of the legal consultation appointment.

If you voluntarily provide your telephone number and/or your address, we process this data on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You are not obliged to provide this information and may withdraw your consent at any time with effect for the future.

Your data will only be stored for as long as is necessary to process the consultation appointment and provided there are no conflicting statutory retention obligations.

Use of social media

We operate our social media accounts to achieve the widest possible online presence and, as part of our ongoing communication, to provide information on current topics, publish job vacancies and tailor our services to users' needs. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If you follow our company page on a professional network such as Xing or LinkedIn, or interact with it in any other way, the networks process your personal data from your profile and grant us access to statistics regarding interaction with the page. We have no influence over this. We do not receive any personal data from the platform operators and cannot draw any conclusions about specific individuals. This analysis serves to continuously adapt our services to the needs of users. Where we share or respond to your posts, we may process your username and the relevant content; we have no influence over this.

Where applicable, the analysis processes initiated by the social networks are based on different legal grounds, which must be specified by the operators of the social networks (e.g. consent within the meaning of Article 6(1)(a) of the GDPR). Social networks are generally able to analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. 'Like' buttons or advertising banners). If you are logged into your social media account and visit our social media presence, the operator of the social media portal may associate this visit with your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the respective social media portal. In this case, data is collected, for example, by recording your IP address via cookies stored on your device. Operators of social media platforms can use the data collected in this way to create user profiles containing your preferences and interests. If you have an account with the relevant social network, interest-based advertising may be displayed on all devices on which you are logged in or have been logged in.

In principle, we are jointly responsible with the operator of the respective social network for the data processing operations within the meaning of Article 26 of the GDPR. Your rights (right of access pursuant to Article 15 of the GDPR, right to rectification pursuant to Article 16 of the GDPR, right to erasure pursuant to Article 17 of the GDPR, right to restriction of processing pursuant to Article 18 of the GDPR, right to data portability pursuant to Article 20 of the GDPR and right to lodge a complaint pursuant to Article 77 of the GDPR) may generally be exercised against both us and the operator of the respective social network. Please note that, despite the joint responsibility under Article 26 of the GDPR with the operators of social networks, we do not have full control over data processing or the exercise of data subjects' rights on the individual social networks. To exercise your data subject rights, please therefore contact the respective social network operator directly. If you address your request to us, we will forward it to the respective operator.

Data collected directly by us will be deleted from our systems as soon as the purpose for its storage no longer applies, you request its deletion, or you exercise your right to object or withdraw your consent. Stored cookies remain on your device until you delete them. Legal provisions, in particular retention periods, remain unaffected. We have no knowledge of and no influence over the storage period of your data stored by the operators of social networks for their own purposes. For further details, please contact the operators of the social networks directly.

Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals, including in the USA or other third countries. The EU Commission has adopted an adequacy decision for the USA. Furthermore, the platforms we use (primarily LinkedIn) are certified under the EU-US Data Privacy Framework. You can find further details in the terms of use and privacy policies of the respective social media platforms:

Xing: New Work SE, Baumwall 7, 20459 Hamburg, Privacy Policy: http://www.xing.com/privacy.

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland; Privacy Policy: http://www.linkedin.com/legal/privacy-policy; Joint controllership: https://legal.linkedin.com/pages-joint-controller-addendum; Right to object (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

You may exercise your right to object at any time by sending a message to the contact details provided above. You may then no longer be able to make full use of the website's functions. Alternatively, you may contact us via the contact options provided on the website.

Data security

We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from access by third parties. These measures are adapted in line with the current state of the art.

Children

We do not collect personal information from minors. In the event of unintentional collection, we will delete such data immediately.

What rights can I exercise as a data subject?

You have the right to

  • withdraw your consent at any time in accordance with Article 7(3) of the GDPR. As a result, we may no longer continue processing data based on this consent in the future;
  • request information at any time regarding your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you may request information regarding the purposes of processing, the categories of personal data, as well as their origin, the categories of recipients to whom your data has been or will be disclosed, the purpose and the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and, where applicable, the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
  • to request, in accordance with Article 16 of the GDPR, the immediate rectification of inaccurate personal data or the completion of your personal data stored by us;
  • to request, in accordance with Article 17 of the GDPR, the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
  • pursuant to Article 18 of the GDPR, to request the restriction of the processing of your personal data, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer require the data, but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR;
  • in accordance with Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request the transfer of such data to another controller; and
  • in accordance with Article 21 of the GDPR, to object to the processing of your data for the purposes of legitimate interests, on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. In order to make the website available to users and to ensure its operation, the collection of data and its storage in log files is strictly necessary. Consequently, there is no possibility for the user to object. Where log files are stored, they are deleted after seven days at the latest. No further processing takes place. If personal data is processed for the purpose of direct marketing, you may object to the processing of your personal data at any time. Where applicable, this also applies to profiling insofar as it is related to such direct marketing.

Do I have the right to lodge a complaint?

If you believe that our processing of your personal data is unlawful or, where applicable, infringes data protection law for other reasons, you may lodge a complaint with the supervisory authority responsible for us. As a rule, you may contact the supervisory authority for your usual place of residence or workplace, or the place where the alleged infringement occurred.

Book an appointment