Data Protection

Think different. Think anew. Think ITeanova.

Privacy Policy

1 Information about the collection of personal data

(1) In the following we inform about the collection of personal data when using our website. Personal data is all data that is personally available to you, eg. name, address, e-mail addresses, user behavior. We take your privacy very seriously and treat your personal data confidentially and in accordance with legal regulations. As changes to this Privacy Policy may be made through new technologies and the continued evolution of this Site, we encourage you to review the Privacy Policy periodically. Definitions of the terms used (eg "personal data" or "processing") can be found in Art. 4 GDPR.

(2) Name and contact details of the responsible:
ITeanova Consult GmbH
Eppelheimer Str. 13
D-69115 Heidelberg
Phone: (+49) 06221 77875-00
E-Mail:info@iteanova.com
Directors: Michael Bleier, Dr. Alexander Iglesias
Registered office: 85737 Ismaning
Commercial registry : local court Munich, HRB 274 020
VAT identification no.: de 246 619 897

(3) Contact details of the data protection officer:

CL Compliance und Datenschutz GmbH & Co. KG
Directors: Jörg Schröder
Douglasstr. 11-15
76133 Karlsruhe, Germany

Phone: 0721-91250-880
Fax: 0721-91250-22
E-Mail: kontakt@compliance-datenschutz.de

2 Purpose of processing personal data, legal basis and retention period

In the following, we will inform you about the data processing (a) taking place on our site, its purpose (b), legal basis (c) as well as respective duration of storage and, where applicable, concrete possibilities of objecting and disputing (d).

(1) Logfiles
a) When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:

  • IP address
  • Data and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access Status / HTTPS status code
  • Each transferred amount of data
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software



b) The mentioned data is processed by us for the following purposes:

  • Ensuring a smooth connection of the website
  • Ensuring comfortable use of our website
  • Evaluation of system security and stability as well
  • For further administrative purposes

c) The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data processing. In no case we use the collected data for the purpose of drawing conclusions about you.

d) The data in the logfiles will be deleted after 7 days at the latest.

(2) Google maps

a) On our website we use the offer of Google Maps. We use the so-called two-click solution. That is, when you visit our site, initially, no personal information is passed on to Google. We give you the opportunity to communicate directly with Google via the button. Only by clicking on the highlighted field and activating it Google will receive the information that you have accessed our website. In addition, the data referred to in § 2 (1) of this declaration will be transmitted. We have no influence on this data transfer. The data transfer then takes place regardless of whether you have an account with Google and logged in there. When you're logged in to Google, your information we collect will be directly linked to your Google account. If you confirm the activated button and link to the site, Google also stores this information in your user account and publicly shares it with your contacts. By activating the plug-in, personal data will be transferred to Google and stored there (with US providers in the US, a country without adequate data protection levels).

Only when you activate the service, the above data will be transmitted. We have no influence on this data transfer. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account.


b) We use Google Maps to show you interactive maps directly on the website and to help you make comfortable use of the map feature.

Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or tailor-made website design. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website.


c) The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. f GDPR. The underlying purpose of interactive directions to our company is the legitimate interest in the sense of the GDPR. We recommend that you log out regularly after using your Google Account, as this will prevent you from being associated with your profile with the plug-in provider Google.

You have a right of objection to the formation of these user profiles, and you must comply with this to Google. We have no control over the collected data and data processing operations on Google Inc. The responsibility lies solely with them.

Further information on data processing, in particular the legal basis and duration of storage can be found in the privacy statements of the provider. You can also find more information about your rights and privacy settings here: https://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the United States and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework. The address of the plug-in provider is: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. "


(3) Contact form

a) On our website a contact form is available, which can be used for electronic contact. If you use this, the data entered in the input mask will be transmitted to us and saved. The mandatory information that must be filled in for electronic contact via the contact form are marked with (*). This is your e-mail address. If you provide us with additional data (name, first name, company name), this is done voluntarily.

b) The data will be processed to enable us to contact you and process your request, as well as to prevent misuse of the contact form and to ensure the security of our information technology systems.

c) The legal basis for the processing of compulsory information is Art. 6 para. 1 sentence 1 lit. f GDPR. At the same time, the legitimate interest in the processing of the data lies in the aforementioned purpose. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

The legal basis for the processing of the information voluntarily provided to us by you is Article 6 (1) sentence 1 lit. a GDPR.

d) The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. Should it come to a conclusion of the contract, the data will also be stored until the expiry of the statutory retention periods (6 years after the end of the year in which the contract was terminated) and then deleted, unless we due to tax and commercial law - and documentation obligations (from HGB, StGB or Regulation of Taxation (AO)) are obliged to a longer storage or you agreed in a beyond storage according to Art. 6 para. 1 p. 1 lit. a GDPR.

e) In addition, you have the option at any time to revoke your consent to the processing of personal data. If you contact us by e-mail, you may object to the storage of your personal data at any time. In such a case, the conversation cannot continue. To exercise the revocation, see § 6. All personal data that has been stored in the course of contacting us, will be deleted in this case.

3 Collaboration with processors and third parties

In part, to process your data we use external service providers (processors). These were carefully selected and commissioned by us, are bound by instructions and are regularly inspected. These are external service providers who support us technically (web hosts, programmer). This happens on the basis of order processing contracts acc. Art. 28 GDPR.


Incidentally, we only pass on your data to third parties, if:

  • You gave us your explicit consent according to Art. 6 para. 1 p. 1 lit. a GDPR
  • Disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest in not disclosing your data
  • Disclosure according to Art. 6 para. 1 sentence 1 lit. c GDPR is a legal obligation
  • This is legally permissible and according to Art. 6 para. 1 sentence 1 lit. b GDPR is required for the performance of contractual relationships with you

Commissioning of service providers in a third country takes place only if the special requirements of Art. 44 et seq. GDPR are met.

4 Your Legal Rights

You have the right:

  • To request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you can request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or disagreement, the existence of a right to complain, the source of your data, if not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;
  • In accordance with Art. 16 GDPR, immediately demand the correction of incorrect or complete personal data stored by us;
  • To demand, in accordance with Art. 17 GDPR, the deletion of your personal data held by us, except as far as processing for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of Legal claims is required;
  • To demand the restriction of the processing of your personal data according to Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and we no longer need the data, but you need this to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
  • In accordance with Art. 20 GDPR, to receive your personal data provided to us in a structured, standard and machine-readable format or to request transmission to another person in charge;
  • To complain to a supervisory authority pursuant to Art. 77 GDPR. In general, you can contact the supervisory authority at your usual place of residence or work or the location of the alleged infringement.

5 Right of objection

If your personal data are processed based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to appeal against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. We no longer process your personal data, unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, pursuing or defending legal claims.

Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time.

6 Right to revoke the data protection consent

According to Art. 7 (3) GDPR, you have the right to revoke your once given consent to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future. The lawfulness of the processing on the basis of the consent until the revocation is not affected.

7 Up-to-dateness and changes of this data protection explanation

This privacy statement is made as of: July 2018.

As a result of the further development of our website and offers thereof or due to changed legal or official requirements, it may be necessary to change this privacy policy. The current privacy policy can be viewed and printed by you at any time on the website at www.iteanova.de/dataprotection_en.html.