This privacy policy informs you about the processing of personal data by our company and about your rights in this regard.
The controller for the processing of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) is: Neersö Management Training GmbH, Demmeringstr. 42, 04177 Leipzig, Germany, represented by the Managing Director Mr Jan-Marius Neersø. Tel. +49 341/98979897, Email: training@neersoe.com.
As a rule, we only collect personal data that you provide yourself or that arises in connection with the performance of a contract between you and us (e.g. data on services rendered). In addition, we also collect data from other sources in the following cases:
- When you visit our website or communicate with us by email: communication metadata such as your IP address, the software used, the pages visited, and the time of access/email
- When we use your data for direct marketing: contact and position data about you obtained by lawful means, e.g. from your company website, from profiles in professional online networks, or from credit agencies
- When you use our services as a customer: information about your creditworthiness obtained by lawful means on a case-by-case basis, e.g. from insolvency registers or credit agencies
- When you contact us as an applicant: publicly available information about your professional background
We process your personal data for the following purposes:
- Advertising our services;
- Initiating and performing service contracts;
- Transmitting relevant information and additional offers relating to ongoing service contracts;
- Initiating and performing employment contracts;
- Transmitting relevant information and additional offers relating to ongoing employment contracts;
- Processing your other enquiries in accordance with your specific concern;
- Public relations work (only with your explicit, separate consent);
- Cooperation with external service providers on your behalf (only with your explicit, separate consent);
- Fulfilling our legal obligations, e.g. under commercial, tax, labour and social law;
- Asserting our legal claims and defending against unjustified claims by third parties;
- Ensuring reliable and high-quality service for our customers;
- Ensuring the smooth and secure operation of our website, IT and communication systems.
The legal bases for the aforementioned purposes, with the exception of public relations work and cooperation with external service providers on your behalf, are:
- Art. 6(1)(b) GDPR (performance of contracts and implementation of pre-contractual measures);
- Art. 6(1)(c) GDPR (compliance with a legal obligation); and
- Art. 6(1)(f) GDPR (protection of our legitimate interests).
With regard to public relations work and cooperation with external service providers on your behalf, the legal basis is Art. 6(1)(a) GDPR (explicit consent).
Where special categories of personal data are involved, in particular health data, the processing is additionally based on the following legal bases:
- Art. 9(2)(b) GDPR (exercise of rights under employment and social law);
- Art. 9(2)(f) GDPR (establishment, exercise or defence of legal claims).
Our legitimate interests for processing pursuant to Art. 6(1)(f) GDPR consist in economical and customer-oriented business management, the preservation of our business assets, and ensuring the smooth and secure operation of our business.
You have the right at any time to withdraw a separate consent that you may have given us for processing pursuant to Art. 6(1)(a) GDPR. The lawfulness of processing carried out on the basis of consent prior to its withdrawal is not affected by the withdrawal.
Your data is only disclosed to other recipients insofar as we use external service providers to achieve the above-mentioned purposes and interests, or cooperation with public authorities is necessary. This concerns:
- In general: communication, delivery and payment service providers
- If you are a customer of ours: further service providers with whom we cooperate at your own request; tax advisors
- If you are employed by us: payroll service providers; your health insurance; your pension insurance; if applicable, the insurance company for your company pension plan; tax advisors
Furthermore, there may be cases in which we are legally obliged to disclose your data (in particular in the event of official orders, e.g. during an audit).
In addition, our website, email system, accounting system, payroll system including reporting obligations, and parts of our data storage system are operated by external technical service providers who, in the event of an operational disruption, may access communication metadata and (only with our consent) limited personal data.
Disclosure or access always takes place only to the extent necessary for the intended purpose.
The storage period for your personal data depends on the purpose of processing and on statutory provisions.
- Communication metadata relating to website visits and received emails will be deleted four days after the day of communication.
- Data in connection with job applications will be deleted no later than six months after a decision on the application, unless employment results from the application (in which case the data will be transferred to the personnel file) or you and we wish to retain it for longer for possible future vacancies.
- Other data will be deleted once the intended purpose has been fulfilled, unless a longer retention period applies pursuant to the following points.
- Data in commercial and business correspondence, accounting documents and other records subject to § 147 of the German Tax Code (AO) will be deleted after the expiry of the periods specified therein.
You have the following rights:
- Access to your personal data processed by us pursuant to Art. 15 GDPR
- Rectification of your personal data pursuant to Art. 16 GDPR
- Erasure of your personal data pursuant to Art. 17 GDPR
- Restriction of the processing of your personal data pursuant to Art. 18 GDPR
- Data portability pursuant to Art. 20 GDPR
To exercise your rights, please contact the controller using the contact details provided above.
Pursuant to Art. 21 GDPR, you have the right to object to the processing of data that we process on the basis of Art. 6(1)(f) GDPR (protection of our legitimate interests). Please contact the controller using the contact details provided above.
If you suspect that the processing of personal data concerning you infringes the EU General Data Protection Regulation (GDPR), you have the right pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority.
There is no legal obligation for you to provide us with your personal data. If you do not wish to provide personal data when visiting our website or submitting enquiries by email, please use your own means of anonymisation. We ask for your understanding, however, that we may not be able to respond to anonymous enquiries. We decide this on a case-by-case basis, weighing up the interests depending on the nature of the enquiry. You may, however, be able to receive anonymous advice at our office after making an appointment.
For the conclusion and performance of service and employment contracts, we require the personal data requested in each case. Without this data, we will not enter into contracts with you. This does not, however, apply to data that we process on the basis of a separate, explicit consent from you. Such consent is always voluntary and is not a condition for concluding or performing a contract.
No automated decision-making takes place.