Security & Data Protection

Data protection and security are of particular importance to THE CONSULTING BRAND Hilbert GbR.

Continuously optimizing all technical security foundations, THE CONSULTING BRAND Hilbert GbR constantly improves the data security of your data.

If you voluntarily provide us with personal data, e.g., via our contact form, by email, or when using our online shop, processing will be carried out in accordance with the requirements of the General Data Protection Regulation (GDPR) or the Federal Data Protection Act (BDSG).

Data Transfer
Your data is in good hands with us; we expressly assure you: Your personal data will neither be sold nor rented to other companies for advertising purposes.

We only pass on your personal data with your consent in connection with the payment process and delivery traffic if:

• You have given your explicit consent thereto in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR (e.g., to credit institutions, postal, courier and logistics companies).
• external service providers process data on our behalf as processors. Your data there is subject to the same data protection standards as with us. The recipient of the data may only use the data for the purposes for which the data was transmitted to them. External service providers include, in particular, data centers and companies that support us in the maintenance of IT systems and applications.
• in the event that there is a legal obligation for the transfer according to Art. 6 para. 1 sentence 1 lit. c GDPR, as well as
• the transfer is necessary according to Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred.

Further details on the transfer of personal data can be found in the explanations below.

SSL Encryption
Personal data is transmitted on this website exclusively encrypted using the TLS procedure (Transport Layer Security, also known as SSL, Secure Sockets Layer). The TLS v1.2 procedure we use is one of the currently most secure methods for encrypting data.

Within the framework of this encryption procedure, it is further ensured that your data is sent exclusively to the server from which it was requested.

If you use Internet Explorer as your browser, you can recognize an encrypted data transfer by the padlock symbol in your browser's address bar.

Personal Data
According to Art. 4 No. 1 GDPR, personal data means any information relating to an identified or identifiable natural person ("data subject").

Personal data therefore includes all data that can be related to you personally, e.g., name, address, email address, telephone number or IP address.

Collection and Storage of Personal Data, and Type and Purpose of its Use

Visiting our Website
When you access our website, information is automatically sent to the server of our website by the browser used on your end device.

This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

• IP address of the requesting computer (shortened in the log file),
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

The aforementioned data is processed by us for the following purposes:

• Ensuring a smooth connection setup of the website,
• Ensuring the usability of our website,
• Evaluation of system security and stability, as well as
• for further administrative purposes. THE CONSULTING BRAND Hilbert GbR uses the IP address to protect the customer and to prevent or detect misuse of the website.
• We point out that the IP address is only used and further processed in a shortened form to exclude a direct reference to a person.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Customer Registration
Here, THE CONSULTING BRAND Hilbert GbR processes and uses the data voluntarily entered into forms and transmitted to THE CONSULTING BRAND Hilbert GbR.

These include, for example, name, address, and other contact details such as telephone number and email address, a username, and password (Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships).

You can also order from us as a guest; your data will then be used and stored for the processing of the purchase made as a contractual relationship and for the processing of the order.

Orders in the Online Shop
We collect personal data from you if you voluntarily provide it to us for the purpose of concluding a contract or opening a customer account.

This includes, for example, your name, address, telephone number, and email address.

This data is used and stored by us for contract processing and delivery of your order (Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships).

Order Processing
In order to process and deliver your online shop orders, we pass on the necessary data to the delivery company commissioned with the delivery.

The customer's name and delivery address according to (Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships).

Additionally, your email address may be passed on to the delivery company.

You will then receive an email to use package tracking and to be able to determine at any time when your package will arrive.

The data thus transmitted may only be used by the recipient to fulfill their task.

Any other use of the information is not permitted.

Newsletter Registration and Dispatch
If you have explicitly consented to our newsletter dispatch (double opt-in procedure) according to Art. 6 para. 1 sentence 1 lit. a GDPR.

We use your email address and any other personal data you provide to send you our newsletters regularly by email.

To receive the newsletter, providing your email address is sufficient.

You can unsubscribe at any time, e.g., via a link at the end of the newsletter.

Use of our contact form, contact via email
For questions of any kind, we offer you the opportunity to send them to us via our email contact form.

The provision of a name and a valid email address in the contact form is required so that we know who the request comes from and can answer it.

Further information can be voluntarily provided in the contact form.

Data processing for the purpose of contacting us via the contact form or email takes place according to Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily given consent.

Your information will be stored and used by us exclusively for processing the contact.

The personal data collected by us for the use of the contact form will be blocked or deleted after your request has been processed.

Blocking occurs when your request has been fully processed and there are statutory retention obligations.

Should your contact aim at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR (processing of contractual relationships).