Eine Mitarbeiterin von Neuhaus Consulting sitzt in einer Telefonkabine im Büro.
Home Contact Privacy

Privacy

The protection of your personal data is a top priority for Neuhaus Consulting GmbH. We comply with the relevant data protection laws and inform you transparently about which data is collected, processed or used.

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Neuhaus Consulting GmbH
Joseph-Schumpeter-Allee 31
53227 Bonn

Telephone: +49 (0) 228/ 98 14 84-0
E-mail: info(at)neuhaus-consulting.de
Website: https://www.neuhaus-consulting.de

2. Contact for matters relating to data protection

For matters relating to data protection, please use the e-mail address below:

info(at)neuhaus-consulting.de

3. Your rights

As a data subject, you have various rights under the GDPR, which arise in particular from Articles 15 to 21 of the GDPR:

  • Right to information: You have the right to request confirmation as to whether the data concerning you is being processed and to obtain information about this data as well as further information and a copy of the data in accordance with the statutory requirements.
  • Right to rectification: You have the right to request the completion of the data concerning yourself or the rectification of incorrect data concerning yourself in accordance with the statutory requirements.
  • Right to erasure and restriction of processing: You have the right to request that data concerning yourself is erased immediately in accordance with the statutory requirements or alternatively to request the restriction of the processing of the data in accordance with the statutory requirements.
  • Right to data portability: You have the right to ask to receive your personal data which you have provided us in a structured, commonly used and machine-readable format in accordance with the statutory requirements or to transmit it to another controller.
  • Right to object: You have the right to object at any time for reasons relating to your particular situation to the processing of personal data concerning yourself which is performed on the basis of Article 6 (1)(e) or (f) GDPR;
  • Right to withdraw consent: You have the right to withdraw any consent that you have given at any time.

How do you exercise your rights?

You can exercise your rights at any time by contacting us using the contact details below:

Neuhaus Consulting GmbH
Joseph-Schumpeter-Allee 31
53227 Bonn

Telephone: +49 (0) 228/ 98 14 84-0
E-mail: info(at)neuhaus-consulting.de

Without prejudice to these rights and the possibility of asserting any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning yourself violates data protection regulations (Article 77 GDPR).

4. General information about data processing

4.1 Scope of the processing of personal data
We process our user’s personal data only as far as this is necessary for the provision of a functional website as well as our content and services.

4.2 Erasure of data and length of time stored
The data subject’s personal data will be erased or blocked as soon as the purpose for which it is stored no longer exists. Personal data may also be stored if this is required by the European or national legislator in EU regulations, laws or other legislation to which the controller is subject. The data will also be blocked or erased if a retention period required by the standards referred to expires, unless the continued storage of the data is necessary for entry into a contract or performance of a contract.

4.3 Transmission of data to third parties
Your data will only be transmitted to third parties via the contact form (see point 12) and in the application process (see point 11), unless we are required by law to transmit the data. Where external service providers come into contact with your personal data, we have taken legal, technical and organisational measures as well as carried out regular checks to ensure that they comply with the provisions of data protection laws. Furthermore, these service providers may only use your data in accordance with our instructions.

4.4 Security
Neuhaus-Consulting uses technical and organisational security measures to protect your personal data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are improved continuously in line with technological developments.

5. Provision of the website and creation of log files

When you visit the http://www.neuhaus-consulting.de, the web server of the provider Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp temporarily stores each access in a log file (so-called server log files).

The following data is collected:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data will not be combined with other data sources.

This data is collected on the basis of Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website and the server log files need to be collected for this purpose. The above data collected for the provision of the website will be erased when the respective session ends. The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. There is no option to opt out of this.

We have concluded a contract data processing agreement on the use of the aforementioned service. This is an agreement required by data protection law, which guarantees that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with GDPR.

6. Borlabs Cookie

Purpose
Our website uses the consent technology of Borlabs Cookie, in order to obtain your consent to the storage of certain cookies in your browser or the use of certain technologies and to document this in compliance with data protection requirements. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereafter: Borlabs).

Length of time stored
When you view our website, a Borlabs Cookie in which the consents given by you or the withdrawal of these consents is stored in your browser. This data will not be shared with the provider of Borlabs Cookie. The data collected is stored until you ask us to erase it or you erase the Borlabs Cookie yourself or the purpose for which it is stored no longer exists. Mandatory statutory retention periods are not affected. Details on the processing of data by Borlabs Cookie can be found at https://borlabs.io/kb/what-information-does-borlabs-cookie-store/.

Legal basis
The Borlabs Cookie consent technology is used in order to obtain the consent to the use of cookies required by law. The legal basis for this is provided by Art. 6 (1)(c) GDPR

Withdrawal of consent and deletion
You can adjust the cookie settings and withdraw your consent at any time with effect for the future using the cookie banner displayed when you visit the site.

You can also delete individual or all cookies in your browser settings.

Depending on your browser provider, you will find the necessary information under the following links:

7. Essential Cookies

Our website uses cookies. Cookies are text files which are stored in or by the internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system.

Purpose
The cookies used on this website are necessary for the basic functionality of our website.

The following cookies are used on the website:

  • Borlabs Cookie Stores consent information for service groups and individual services, length of time stored: 60 days
  • _icl_visitor_lang_js: Stores the redirected language, length of time stored: 1 day
  • wpml_browser_redirect_test: Tests whether cookies are activated, length of time stored: session
  • wp-wpml_current_admin_language_*: Stores the current language, length of time stored: 1 day

Legal basis
The legal basis for the use of cookies is provided by Art. 6 (1)(1)(a) GDPR. When you visit our website, you are informed about the use of cookies and your consent to the processing of your personal data used in this context will be obtained. In this connection, reference is also made to this privacy policy.

Withdrawal of consent and deletion
You can adjust the cookie settings and withdraw your consent at any time with effect for the future using the cookie banner displayed when you visit the site.

You can also delete individual or all cookies in your browser settings.

Depending on your browser provider, you will find the necessary information under the following links:

8. Social media links

We maintain publicly accessible profiles in social networks. We have listed the social networks we use for you below.

The social networks (LinkedIn and Kununu) and Google Maps are integrated into our website only as links to the corresponding services. After clicking on the integrated text/image link you will be redirected to the website of the respective provider. Only after you have been redirected is user information transferred to the respective provider.

8.1 Kununu and Google Maps
We do not have an independent presence on Kununu and Google Maps.

For information on how your personal data is handled when using these websites, please refer to the privacy policies of the respective providers.

8.3 LinkedIn
For the information service provided, Neuhaus Consulting GmbH uses the technical platform and services of LinkedIn Ireland Unlimited Community, Wilton Place, Dublin 2, Ireland.

We to point out that you use this LinkedIn page and its functions at your own risk. This applies in particular to the use of interactive functions. Information about which data is processed by LinkedIn and for what purposes can be found in the provider’s privacy policy: https://www.linkedin.com/legal/privacy-policy

When you visit our LinkedIn company page, LinkedIn collects, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the LinkedIn pages, with statistical information about the use of the LinkedIn page.

The data collected about you in this connection will be processed by the LinkedIn Ireland Unlimited Community and may be transferred to countries outside the European Union. Further information on this can be found on the LinkedIn Help page: https://www.linkedin.com/help/linkedin/answer/a1343190/

LinkedIn describes in general terms what information LinkedIn receives and how it is used in its privacy policy. Here you will also find information about how to contact LinkedIn.

How LinkedIn uses the data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are assigned to individual users, how long LinkedIn stores this data and whether data from a visit to the LinkedIn page is passed on to third parties is not conclusively and clearly stated by LinkedIn and is not known to us.

As a provider of a LinkedIn company page, we do not collect or process any data from your use of our service.

9. Use of WPML

Scope of the processing of personal data
We use WPML of OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereafter: WPML). WPML is a multilingual plugin for WordPress. We use WPML to display our online presence in different languages. When you visit our website, WPML stores a cookie on your device to save the language setting you have selected. This allows personal data to be stored and analysed, especially the user’s activity (in particular which pages were visited and which elements were clicked on) as well as device and browser information (in particular the IP address and the operating system).

Further information on how WPML processes data can be found here: https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

Purpose of the processing of personal data
The use of WPML allows us to display our online presence in multiple languages.

Legal basis for the processing of personal data
The legal basis for the data processing is provided by Art. 6 (1)(1)(f) GDPR. Our legitimate interest lies in addressing visitors to our online presence in their mother tongue.

Length of time stored
WPML stores cookies on your device. Information on the length of time the cookies are stored can be found at: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance

Opt-out and removal options
You can prevent WPML from storing third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on the opt-out and removal options for WPML can be found at: https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

10. Matomo

This website uses the open source web analysis service Matomo.

With the help of Matomo, we are able to collect data on the use of our website by website visitors. This allows us to find out which pages have been visited. When using Matomo, we use IP anonymisation. As a result, no personal data is collected.

Cookieless analysis
We have configured Matomo so that Matomo does not store cookies in your browser.

11. Application process

By submitting an application on our recruiting page, you express your interest in working for us. You provide us with personal data in this connection, which we will use and store exclusively for the purpose of your job search/application. In particular, the following data is collected:

  • Name (first and last name)
  • E-mail address
  • Telephone number
  • LinkedIn profile (optional)
  • Channel through which you found out about us

You also have the option of uploading informative documents such as a cover letter, your cv and certificates.
These may contain additional personal data such as date of birth, address, etc. Only authorised employees or employees in the personnel department involved in the application process have access to your data.

Purpose
Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied.

Legal basis
The legal basis for the processing of personal data disclosed in the application process is provided by Art. 6 (1)(1)(a) GDPR. If you apply to us by electronic means, i.e. by e-mail or via our web form, we will collect and process your personal data for the purpose of processing the application and in order to take steps prior to entering into a contract.

Transmission of data to third parties
The data transmitted when you make your application is transmitted in encrypted form using TLS and stored in a database. This database is operated by Personio GmbH, which provides personnel administration and application management software (https://www.personio.com/legal-notice/). Personio is in this connection our processor within the meaning of Art. 28 GDPR. The basis for the processing is contract data processing agreement between us as the controller and Personio.

Length of time stored
Your data will be stored for a period of 3 months after the end of the application process. This is done as a general rule in order to comply with legal obligations or to defend against possible claims arising from statutory regulations. After this, we are obliged to erase or anonymise your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical analysis (e.g. proportion of women or men in applications, number of applications per period, etc.).

If you receive an offer of employment with us in the application process and accept it, we will store the personal data collected in the application process for at least the duration of the employment relationship.

12. Contact form

There is a contact form on our website which can be used to contact us electronically. If you use this form, the data you input will be transmitted to us and stored. This data is:

  • First name, last name (mandatory field)
  • Company
  • Position
  • Telephone
  • E-mail (mandatory field)
  • Message (mandatory field)

Purpose
When you use the contact form, we save the data you input for the purpose of replying to your enquiry or to send you information material free of charge upon request. The disclosure of information is voluntary and is in these cases initiated by you. If this information concerns communication channels (e.g. e-mail address, telephone number), we will use these channels to contact you in accordance with your request.

Legal basis
The legal basis for the processing of the data which you transmit to us when you contact us is provided by Art. 6 (1)(1)(f) GDPR. Among the purposes described is the legitimate interest in processing. If the purpose of the e-mail contact is to enter into a contract, the legal basis for the processing is also provided by Art. 6 (1)(b) GDPR.

Length of time stored
We will erase your data which we obtain when you contact us as soon as it is no longer needed to achieve the purpose for which it was collected, the matter has therefore been addressed in full and no further communication with you is necessary or wished by you.

Right to object
You can object at any time to the storage of personal data (for details see the section “Your rights”).

13. Changes to the privacy policy

We reserve the right to change this privacy policy at any time taking into consideration the applicable data protection regulations. Current status is May 2025.

Responsible for the content:
Susanne Neuhaus, Michael Stockhausen and Anne-Marei List, Management Board