Privacy policy

Our company attaches great importance to the protection of personal data and respects your desire for privacy. In the following, we inform you about the collection of personal data when using our website. If you have any further questions regarding the handling of your personal data, please do not hesitate to contact our data protection officers.

1. contact

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions and process your requests.
The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f GDPR.

Insofar as we request input via our contact form that is not required for contacting us, we have always marked this as optional. This information is used to specify your request and to improve the processing of your request. A communication of this information is expressly on a voluntary basis and with your consent, Art. 6 para.1 S. 1 lit. a GDPR.

Insofar as this involves information on communication channels (e.g. e-mail address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to respond to your request. Of course, you can revoke this consent at any time for the future.

Your data, which we have received in the course of contacting you, will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels (e.g. our contact form) or the postal service.

2. your rights

We will gladly provide you with information as to whether personal data relating to you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 DSGVO. In addition, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR) under the respective legal conditions.

You have the right to object to the processing under the legal conditions (Art. 21 DSGVO).

To exercise your above rights, please contact us by e-mail at datenschutz@caleo.com or by post at CALEO Consulting GmbH, Lochhamer Schlag 11, 82166 Gräfelfing. The exercise of your above rights is free of charge for you.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection law (Article 77 GDPR).

The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision
PO Box 1349
91504 Ansbach

3. legal basis of our data processing

The processing of personal data may be based on various legal grounds. If we need your data to fulfill a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b GDPR. If we obtain your consent for certain data processing, the legal basis is Art. 6 para. 1. p. 1 lit. a GDPR. We carry out some data processing on the basis of our legitimate interest, always weighing your interests worthy of protection against our legitimate interests. The legal basis for this is Art. 6 para. S. 1 lit. f GDPR. Insofar as the processing is necessary for the fulfillment of a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 p. 1 lit. c GDPR.

Below we explain how we process personal data via our website.

3.1 Data processing when calling up the website

During the mere informational use of the website, i.e., if you do not register or otherwise transmit information to us (e.g., via a contact form), we collect the following technical information (log file data):

  • Operating system of the end device with which you visit our website
  • Browser (type, version & language settings)
  • The amount of data retrieved
  • the current IP address of the terminal device with which you visit our website
  • Date and time of access
  • the URL of the previously visited website (referrer)
  • the URL of the (sub)page you are accessing on the website
  • the Internet service provider of the accessing system

The collection of this data is technically necessary to display our website to you and to ensure stability and security. We regularly do not know who is behind an IP address. We do not merge the above data with any other data.

The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point

3.2 Data transmission

As a matter of principle, your personal data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously expressly consented to the transfer of your data.

External service providers and partner companies receive your data only to the extent necessary to process your order / your order. In these cases, however, the scope of the data transmitted is limited to the minimum required. Insofar as our service providers process your personal data on our behalf, we shall provide the necessary data within the scope of the commissioned processing pursuant to Art. Art. 28 GDPR ensure that they comply with the provisions of data protection laws in the same way. Please also note the data protection information of the respective providers. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of reasonableness.

We attach importance to processing your data within the EU / EEA. However, we may use service providers that process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient prior to the transfer of your personal data. This can be achieved, for example, by means of EU standard contracts or Binding Corporate Rules or special agreements to whose regulations the company can subject itself.

3.3 Cookies

3.3.1 What are cookies?

Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This avoids, for example, having to re-enter required form data each time you use it. The information stored in cookies can also be used to recognize preferences and to target content according to areas of interest.

There are different types of cookies: session cookies are sets of data that are only temporarily held in memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predefined duration, which may differ depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website is allowed to read information from these cookies. Third-party cookies are set by organizations that are not operators of the website you are visiting. These cookies are used by marketing companies, for example.

The legal basis for possible processing of personal data by means of cookies and their storage period may vary. If you have given us your consent, the legal basis is Art.6 Para.1 S.1 lit.a DSGVO. Insofar as the data processing is carried out on the basis of our overriding legitimate interests, the legal basis is Art. 6 para.1 S.1 lit.f DSGVO. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionality, to measure reach and - with your consent - to tailor our services to preferred areas of interest.

3.3.2 The cookies used on this website are:
Name Provider Purpose Storage duration
hubspotutk HubSpot Inc. Tracks the identity of a visitor after form submission (contact identification after form submission) 13 months
borlabs-cookie Borlabs Stores consent information with the cookie banner 12 months
_gid Google Used to statistically distinguish website visitors 24 hours
_ga Google Used to statistically distinguish website visitors 7 days
_gat_UA-* Google Used to anonymize the transmitted data 1 minute
__hstc HubSpot Inc. Stores the number of all sessions (statistical data collection) 13 months
__hssrc HubSpot Inc. Stores the information whether a user has started a new session
(Statistical data collection)		 Session
__hssc HubSpot Inc. Tracks the total number of page views of a user within a session (Statistical data collection). 30 minutes
messagesUtk HubSpot Inc. Used to determine if a website visitor has already interacted with the chat tool 13 months

You can delete cookies already stored on your terminal device at any time. If you want to prevent cookies from being stored, you can do so via the settings in your Internet browser. You can find instructions for popular browsers here: Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge browser, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.

When accessing our website, all users of our website are also informed by an information banner about our use of cookies and referred to this privacy policy. In doing so, you as a user will also be asked for your consent to the use of certain cookies, in particular those relevant for the personalization of services and for marketing measures. You can revoke your consent at any time with effect for the future.

[borlabs-cookie type="btn-cookie-preference" title="Personalize your cookie settings" /]

3.4 Website analysis

For the purpose of analyzing and optimizing our websites, we use various services, which are described below. We use these services to analyze how many users visit our site, what information is most in demand, or how users find the offer. We also collect data on the Internet page from which a user has come to our website (so-called referrer), which sub-pages of the website have been accessed or how often and for how long a sub-page has been viewed. This helps us to design our offers in a user-friendly way, to find errors and to improve our offers and this is also our legitimate interest in using these tools. The data collected in this process is not used to identify individual users personally. We proceed sparingly with regard to data: Anonymous or at most pseudonymous data is collected. The legal basis for this data processing is your consent pursuant to. Art. 6 para.1 lit.a, 7 DSGVO.

3.4.1 HubSpot
  • Newsletter dispatch
  • Chat service
  • Content is delivered and made available via HubSpot, which a user can obtain by filling out a form -> Data collection in HubSpot
  • Blog is made available via HubSpot

Additional personal data that HubSpot may store when someone has filled out a form:

  • IP location/country
  • Browser type
  • Duration of the visit
  • Pages called
3.4.2 Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use the function 'anonymizeIP' (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
During your visit to the website, the following data is collected, among others:

  • the pages you have called up, your "click path
  • Achievement of "website goals" (conversions, e.g. newsletter sign-ups, downloads, purchases)
  • Your user behavior (for example, clicks, dwell time, bounce rates)
  • Your approximate location (region)
  • Your IP address (in shortened form)
  • technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
  • Your Internet provider
  • the referrer URL (via which website/advertising medium you came to this website)

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

The recipient of the data is Google Ireland Limited as processor. For this purpose, we have concluded an order processing agreement with Google. Google LLC, headquartered in California, USA, and, if applicable, US authorities may access the data stored by Google. A transfer of data to the USA cannot be ruled out.

The data sent by us and linked to cookies are automatically deleted after 13 months. The deletion of data whose retention period has been reached takes place automatically once a month. You can also prevent the storage of cookies by selecting the appropriate settings on your browser software. However, if you configure your browser to reject all cookies, you may experience limited functionality on this and other websites.
In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by clicking
a. Do not give your consent to the setting of the cookie or
b. download and install the browser add-on to disable Google Analytics(https://tools.google.com/dlpage/gaoptout?hl=de).

The legal basis for this data processing is your consent pursuant to. Art.6 Para.1 S.1 lit.a DSGVO. You can revoke your consent at any time with effect for the future by visiting [borlabs-cookie type="btn-cookie-preference" title="Cookie settings" element="link" /] and changing your selection there.
For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

3.5 Contact

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f GDPR. Insofar as we request input via our contact form that is not required for contacting us, we have always marked this as optional. This information is used to specify your request and to improve the processing of your request. A communication of this information is expressly on a voluntary basis and with your consent, Art. 6 para.1 S. 1 lit. a GDPR. Insofar as this involves information on communication channels (e.g. e-mail address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to respond to your request. Of course, you can revoke this consent at any time for the future.

Your data, which we have received in the course of contacting you, will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels (e.g. our contact form) or the postal service.

4. person in charge

The controller within the meaning of the General Data Protection Regulation (GDPR) is the:
CALEO Consulting GmbH
Lochhamer Schlag 11
82166 Gräfelfing

Phone: +49 (89) 4161 7230
Mail: info@caleo.com

If you have any questions on the subject of data protection, please do not hesitate to contact our external data protection officer:

intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg

E-mail: datenschutz@caleo.com