Data Protection Policy

Privacy notice in accordance with Article 13 GDPR

Responsible data controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

Pawlik Consultants GmbH
Managing director: Joachim Pawlik
Astraturm – Zirkusweg 2
20359 Hamburg
Germany
Phone: +49 40 53 28 50 0
E-mail: info@pawlik.de

Data Protection Officer

You can reach our data protection officer at:
jmh datenschutzberatung
Jörg Hermann
Freibadstr. 30
81543 München
Germany
Phone: +49 89 200033580
E-mail: datenschutz@pawlik.de

Purposes and legal basis of data processing

Data processing when registering for the Pawlik Congress
You can register yourself or other participants for the Pawlik Congress or for participation in the live video stream via our website. Insofar as data is transmitted to us by you or by third parties in this way or by other means when registering for the Pawlik Congress, we process the data for the execution of the booking/contract and for invoicing. For this purpose, we require title, name, in the case of corporate clients, the name of the company, the address data and the e-mail address. When registering third party participants, we also require the name of the third party. Without this data, we cannot execute the contract with you. In addition, we collect further data when booking or executing the contract, which is not absolutely necessary for the execution of the contract, but which promotes the purpose and is useful for it. In this case, you decide on a voluntary basis whether and which data you want to give us.

The names of the participants, the companies as well as positions voluntarily communicated will be made available to the other participants of the Pawlik Congress within the framework of a list of participants.

The basis for data processing is Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Data processing for room reservations for the Pawlik Congress
You may request us to make room reservations in connection with the Pawlik Congress in certain hotels/accommodations specified by us. Insofar as data is transmitted to us by you or by third parties in this way or by other means for room reservations in connection with the Pawlik Congress, we process the data for the purpose of making the reservation and transmitting it to the hotel in which you wish to make a reservation. In addition to the registration data, we also require the number of rooms to be reserved and the reservation period. Without this data, we cannot make the reservation.

The basis for the data processing is Art. 6 para. 1 p. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Data processing with regard to photo and film recordings within the framework of the Pawlik Congress

Within the framework of the Pawlik Congress, the event will be documented with photographs and film footage. We use the photographs and film footage for the purpose of reporting on and advertising the event. For this purpose, the photos and films may be published in our Pawlik Journals, on our website and on social media platforms such as YouTube.

If you are only to be regarded as an “accessory” in the photo and film recordings, the basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO, which permits the processing of data to safeguard the legitimate interests of the person responsible, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. Our interest lies in the promotion and reporting of the Pawlik Congress as well as in the generation of attention for it.

If you are not an “accessory” in the photo and film recordings, processing is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO, which, however, is implied when you look at the camera / smile and thus actively participate in the photo / film. You can revoke your consent to receive the emails at any time with effect for the future. A notification in text form to the contact details above (e.g. email, letter) is sufficient for this.

Data processing for the provision of other contractual services

We process personal data in order to process the contractual relationships and to be able to submit contractual offers tailored to your requirements. The collection of the data takes place in particular for the conclusion and/or for the performance of a contract.

We collect with all forms obligatorily only those personal data, which are absolutely necessary for the completion of the contractual relations and/or for your information inquiry. This information is marked with an asterisk. The collection of data, which is not absolutely necessary, but in which we are interested in order to optimize the fulfilment of the purpose, is only optional. In this case you decide on a voluntary basis if and which data you want to give us.

You can contact us via our website and our contact data to request contractual services. You can also use the contact form on our website for this purpose. If you provide us with personal data this way or in another way with this purpose, we process your data for the answer of your requests, for the performance of the order/contract as well as for invoicing. We need your name, your address data as well as your e-mail address. These data are necessary to enter into a contract with us.

In addition, we collect further data you provide within the contractual initiation or performance of the contract, which are not absolutely necessary for the performance of the contract, but which support the purpose and are useful for it, in particular to be able to provide better consulting services. For example, we may collect information about contact persons in your company (name, telephone number, e-mail address, department, position in the company) and information about your company (business sector, planned measures and budget plans, if you provide them).

Depending on the order/contract, we may require additional data; we will inform you on a case-by-case basis.

In the case of suppliers/service providers, we process the provided personal data to order and claim services and to pay for the services provided. For this we need the name, the name of your company (if different) the address data as well as the bank account data. We also use further data you provide in this way or another way for this purpose, but those data are not necessary to enter into a contract. Depending on the order/contract, we may require additional data; we will inform you on a case-by-case basis.

The basis for data processing is Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Data processing for communication with you (contact form, etc.)

In addition to the contract data, we process your communication data (names of contact persons, address, telephone number, fax number, e-mail address) in order to be able to contact you and communicate with you within the contractual relationship. Personal data that you provide to us by e-mail, the contact form on our website, by post or telephone will only be processed for correspondence with you or only for the purpose for which you have made the data available to us. For communication via the contact form on our website, we need at least your full name and your e-mail address. If you would like us to call you back, we also need your telephone number.

The basis for this data processing is also Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Newsletter

If you wish to subscribe to our newsletter, we need your first and last name, an e-mail address and information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receiving the newsletter. For this purpose, we will send a confirmation e-mail with a link (double opt-in) to the registered e-mail address. Only after clicking on this link the registration will be completed. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible abuse of your personal data. We do not collect any further data in this context. We use these data exclusively for the dispatch of the requested newsletter. If we use an order processor to send the newsletter, we will of course comply with the applicable data protection laws.
If we use an order processor to send the newsletter, we will of course comply with the applicable data protection laws.

If you subscribe, you agree that we will send e-mails containing information on our Area of Expertise and on specialist blog contributions as well as on events, products and services of our company group to the deposited e-mail address on a regular basis. You can revoke your consent to receive these e-mails at any time. A text message to the contact data mentioned under point 1 (e.g. e-mail, fax, letter) is sufficient.

We analyze our newsletter campaigns with the help of our newsletter service provider based in Germany, which acts as an order processor for us. When you open an e-mail from the newsletter, a file contained in the e-mail (so-called web beacon) connects to the servers of our service provider. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you enter your e-mail address and, if applicable, other data for the purpose of receiving the newsletter, this will be stored on the servers of our newsletter service provider.

The data that you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of our newsletter provider after you unsubscribe from the newsletter. Data, which were stored for other purposes, remains unaffected.
The data processing is based on your consent pursuant to Art. 6 para. 1 s. 1 lit. a GDPR. You can revoke your consent to the sending of a newsletter at any time and cancel the respective subscription. You can declare the revocation by clicking on the link provided in each e-mail or by sending a message to us using the contact details listed under point 1. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data processing for advertising purposes

We use the provided address data to send you product/service information, current price advantages and product/service offers of our company group by post.
The basis for data processing is Art. 6 para. 1 s. 1 f GDPR, which permits the processing of data for purposes of the legitimate interests pursued by the controller, provided that the interests or fundamental rights and freedoms of the data subject do not override. Our interest is the promotion and sale of our products and services.

In addition, we use your e-mail address for recommendations and information about our products and services of our company group by e-mail if you have already purchased products or services from us. You will receive these recommendations from us regardless of having subscribed to a newsletter. In this way we would like to provide you with information about other similar products and services that may be of interest to you based on your recent purchases/orders. Of course, we will strictly comply with legal requirements.

In addition, we use your telephone number to provide you with recommendations and information on our products and services by telephone. Of course we will also comply with legal requirements in this case.

If you no longer wish to receive any recommendations on products or services or any advertising messages from us, you can object at any time. A message in text form to the contact data (e.g. e-mail, fax, letter) mentioned above is sufficient.

The basis for data processing is Art. 6 para. 1 s.1 lit. f GDPR, which permits the processing of data for purposes of the legitimate interests pursued by the controller, provided that the interests or fundamental rights and freedoms of the data subject do not override Our interest is economic and lies in the promotion and sale of our products and services.

Data processing for the purposes of legitimate interests

We also process your data if it is necessary for purposes of legitimate interests of us or third parties. This may be the case in particular to guarantee IT security and IT operation, especially for support requests, to be able to understand and prove facts in case of legal disputes, for market and opinion surveys, to analyze the use of our website and/or to advertise other products from us or our cooperation partners.

The basis for data processing is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the data processing listed afore. Our interest is either in IT security, in ensuring support for better usability of our website or in our legal interest or in our evaluation and advertising interest.

Other data processing based on your consent

It may also happen that we ask for your consent to process personal data. Any granting of consent and the relevant data processing is voluntary and you will not suffer any disadvantages if you do not consent.

The data processing is then carried out on the basis of your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. An informal notification to us is sufficient for this purpose. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data processing for the fulfilment of legal obligations

In addition, we process your data to fulfil legal obligations (e.g. regulatory requirements, commercial and tax storage and proof obligations). For this reason we collect e.g. your VAT number for contracts, as well as the VAT ID for international contracts.

The basis for data processing is Art. 6 para. 1 s.1 lit. c GDPR, which permits processing for the fulfilment of a legal obligation.

Categories of recipients of the personal data

Your personal data will only be transferred or otherwise transmitted to third parties if this is necessary for the purpose of contract processing or billing or if you have previously consented or if there is a legal basis for the transfer.

Your contract and communication data will be forwarded to the responsible office and the responsible employees within our company for answering your inquiries, for communication, for the execution of the order or for the fulfilment of contractual obligations.

If necessary for the purpose of contract processing or for the dispatch and delivery of products or for the provision of our services, data is passed on to partner companies that have been commissioned to support the contract processing. Our partners commit themselves to comply with and observe the data protection regulations. Our partners are not permitted to use the data for any other purpose than the execution of the contract.

The basis for data processing is Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
We disclose personal data to third parties who process personal data on their own responsibility (so-called controllers, cf. Art. 4 (7) GDPR), such as postal and delivery services, house bank, tax advisor/auditor or authorities within the scope of legal permissibility and necessity.

Insofar as we make use of the services of third parties to carry out our services, we process personal data according to the provisions of the GDPR. Service providers who support us in providing our services to you are hosting providers, e-mail service providers, IT service providers, software (SaaS) providers, consulting service providers; document shredding service providers, archiving service providers.

Duration of data storage

In principle, we delete your data as soon as it is no longer required for the above-mentioned purposes, unless temporary storage is still necessary. We store your data on the basis of legal proof and storage obligations, which result among other things from the German Commercial Code and the German Tax Code, according to which the storage periods are up to ten full years. In addition, we keep data for the period during which claims can be asserted against our company (statutory limitation period of three years until the end of the year).

Rights of the data subject

As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):
Right to access (Art. 15 GDPR)

You have the right to request information about what personal data is stored about you, for what purpose it is processed, from whom it was received or to whom it is disclosed, and how long it will be stored.

Right to rectification (Art. 16 GDPR)
You can request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.

Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)
Under certain circumstances, you may request the erasure of your personal data, e.g. if it is no longer necessary for the purposes for which it was collected or if you have withdrawn your consent.

Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data, for example if you dispute the accuracy of the data or if the processing is unlawful but you request restriction instead of erasure.

Right to data portability (Art. 20 GDPR)
You can request that the personal data concerning you that you have provided to us be transmitted to you in a structured, commonly used and machine-readable format – or that we transfer this data directly to another controller.

Right to object (Art. 21 GDPR)
You have the right to object to the processing of your personal data at any time, provided that the processing is based on the legitimate interests of our company or on a task that is in the public interest. In the event of a justified objection, we will cease processing unless there are compelling legitimate grounds for the processing.

Withdrawal of consent (Art. 7 GDPR)
If you have given us your consent, you can withdraw it at any time for the future without giving reasons.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Hosting and Server Logfiles

The servers of our website https://pawlik-congress.com/ are operated by the provider Hetzner Online GmbH, Germany. We have concluded an order processing contract with the provider in accordance with Art. 28 GDPR. The legal basis for the use of external hosting is the fulfillment of a contract with our potential and existing customers in accordance with Art. 6 para. 1 lit. b GDPR and our legitimate interest in the secure and high-performance provision of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Each time our website is accessed, our system’s web server collects information from the end device used. We collect the following data:

Information about the browser type
Operating system of the user’s device
Date and time of access
The previous website from which the user accessed our websites (referrer)

We only collect IP addresses anonymously, so we do not store any personal data in our log files within the meaning of the GDPR.

Use of Local Storage Items, Session Storage Items and Cookies
Our website uses local storage items, session storage items and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your end device. This data usually includes user preferences, such as the “day” or “night” mode of a website, and is retained until you manually delete the data. Session storage is very similar to Local storage, whereas the storage duration only lasts during the current session, so until the current tab is closed. The session storage objects are then deleted from your end device. Cookies are information that a web server (server that provides web content) stores on your end device in order to be able to identify this end device. They are either temporarily deleted for the duration of a session (session cookies) and after your visit to a website or permanently (permanent cookies) on your end device until you delete them yourself or they are automatically deleted by your web browser.

These objects can also be stored on your end device by third-party companies when you visit our site (third-party requests). This allows us, as the operator, and you, as a visitor to this website, to make use of certain third-party services installed on this website. Examples are the processing payment services or displaying videos on a website.
These mechanisms have a variety of uses. They can improve the functionality of a website, control shopping cart functions, increase the security and comfort of website use and carry out analyses regarding visitor flows and behaviour. Depending on their individual functions, they must be classified in terms of data protection legislation. Are they necessary for the operation of the website and intended to provide certain features (shopping cart feature) or serve to optimize the website (e.g. cookies to measure visitor behaviour), then their use is based on Article 6(1)(f) GDPR. As a website operator, we have a legitimate interest in storing local storage items, session storage items and cookies in order to ensure the technically error-free and optimized provision of our services. In all other cases, local storage items, session storage items and cookies are only stored with your express consent (Article 6(1)(a) GDPR and § 25 Abs. 1 TDDDG).

If local storage items, session storage items and cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this privacy notice. When required, your consent will be requested and can be revoked at any time.

Borlabs Cookie
We use the ‘Borlabs Cookie’ service on our website to manage cookie consent preferences of our visitors. The provider is Borlabs GmbH Rübenkamp 32 22305 Hamburg, Deutschland. Borlabs Cookie is hosted on our own servers so that no data is passed on to third parties.

The legal basis for the use of Borlabs Cookie is the fulfillment of a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.

The data processed by Borlabs Cookie includes your consent preferences, consent status, and cookie settings, and the service sets cookies in your browser to store these preferences.

The purpose of data processing is to manage user consent for cookies and store user preferences regarding cookie usage.

Google Adsense for Youtube
We use the “Google AdSense for YouTube” service on our website as part of the “YouTube” service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Adsense for Youtube is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Google AdSense for YouTube includes your IP address, device information, viewing behavior, interaction data, and cookies are set to provide personalized advertising.

If you are logged into a Google account, Google Adsense for YouTube may link data collected to your user profile in order to display personalized advertising.
Google processes this data to display personalized advertising and analyze user interactions with advertisements.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have concluded a Data Processing Addendum with Google, which guarantees that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.

Further information on the privacy policy of Google Adsense for Youtube can be found at: https://policies.google.com/privacy

Google Analytics
We use the ‘Google Analytics’ service on our website to evaluate user behavior. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Analytics includes your IP address, browser and device information, location data, time of visit, information on website interaction, and it sets cookies.

If you are logged into a Google account, this data can be linked to a user profile.

The purpose of data processing is the statistical analysis of website usage and user interactions to optimize website performance and user experience.
The default data retention period for Google Analytics is 14 months.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.

Further information on the privacy policy of Google Analytics can be found at: https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008,3544742,2986333,&sjid=1881441919987619365-EU

Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking on this link: https://tools.google.com/dlpage/gaoptout

Google Fonts
We use the ‘Google Fonts’ service on our website to integrate external fonts for improved visual presentation. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Fonts is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Fonts includes your IP address, browser and device information, and the time of the request.

The purpose of data processing is the optimized and uniform presentation of fonts on the website.

Further information on the privacy policy of Google Fonts can be found at: https://policies.google.com/privacy
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking on this link: https://policies.google.com/privacy#infochoices

Google Recaptcha
We use the ‘Google reCAPTCHA’ service on our website to protect against spam and automated abuse. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of reCAPTCHA is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google reCAPTCHA includes your IP address, browser information, operating system, cookies set by Google, and user interactions necessary to distinguish humans from bots.

The purpose of data processing is to verify user interactions and protect the website from spam and abuse.
Further information on the privacy policy of reCAPTCHA can be found at: https://policies.google.com/privacy#infocollect
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies

Google Tag Manager
We use the ‘Google Tag Manager’ service on our website to manage website tags efficiently. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Tag Manager includes your IP address, browser and device information, and information on website interaction; Google Tag Manager itself does not set cookies but may trigger other services that do.

The purpose of data processing is the simplified integration and management of website tags and tracking codes to analyze user interactions.
Further information on the privacy policy of Google Tag Manager can be found at: https://policies.google.com/privacy
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking on this link: https://tools.google.com/dlpage/gaoptout

SalesViewer
We use the ‘SalesViewer’ service on our website to analyze and identify company visits for marketing and optimization purposes. The provider is SalesViewer GmbH (“SalesViewer”), Universitätsstraße 60, 44789 Bochum, Deutschland.

The legal basis for the use of SalesViewer is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to analyze visitor behavior on our website in order to optimize our online presence and tailor our services to the interests of our users.

The data processed by SalesViewer includes your IP address, company affiliation (if identifiable), time and duration of visit, pages viewed, and information on website interaction.

The purpose of data processing is to identify and analyze website visitors for lead generation and to create anonymized usage profiles.
Further information on the privacy policy of SalesViewer can be found at: https://www.salesviewer.com/de/datenschutzerklaerung/

YouTube
We use the video service “Youtube” on our website. The provider of the service is the company Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Youtube is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
Google collects and processes your IP address, browser and operating system information, and location data. Actions such as watching videos or creating playlists are also processed. Cookies are also set during this process. YouTube integrates other Google services, such as Google Fonts, Google Photos, and Google Ads (formerly Doubleclick).

If you are logged into a Google account, this data can be linked to a user profile. Your user behavior is recorded and analyzed for advertising purposes.
The purpose of data processing is to provide video content and integrate it on our website.

According to Google’s privacy policy, the retention period for data processed by YouTube varies depending on the type of data and user settings. By default, activity data (such as watched videos, search history, etc.) is automatically deleted after 36 months (3 years) for new accounts or users who have not previously set a retention period. Users can manually adjust this retention period to 3 months, 18 months, or choose to retain data indefinitely. Detailed information can be found at: https://policies.google.com/privacy#inforetaining

Further information on the privacy policy of Youtube can be found at: https://policies.google.com/privacy
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking on this link: https://myaccount.google.com/data-and-privacy