TTE Strategy named HIDDEN CHAMPION 2024 /25 in Strategy

With this data protection information, we inform you about our handling of your personal data and about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The Team Enablers GmbH (hereinafter referred to as "we" or "us") is the controller for data processing.


General information

Contact

If you have any questions or suggestions regarding this information or would like to contact us to assert your rights, please send your enquiry to

TTE Strategy GmbH
Am Sandtorkai 77
20457 Hamburg
Phone: +49 (0) 40 69919799
Email: hello@tte-strategy.com

Legal basis

The data protection term "personal data" refers to all information that relates to an identified or identifiable natural person. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place if we have a legal basis. We only process personal data with your consent (Section 25 (1) TTDSG or Art. 6 (1) (a) GDPR), for the fulfilment of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (Art. 6 (1) (b) GDPR), for the fulfilment of a legal obligation (Art. 6 (1) (c) GDPR) or if processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6 (1) (f) GDPR).

If you apply for an open position in our company, we will also process your personal data to decide on the establishment of an employment relationship (Section 26 (1) sentence 1 BDSG or Art. 6 (1) (b) GDPR).

Duration of storage

Unless otherwise stated in the following information, we only store the data for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or legal obligations. Such statutory retention obligations may arise in particular from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will retain such personal data contained in our accounting data for ten years and retain personal data contained in commercial letters and contracts for six years. In addition, we will retain data in connection with consents requiring proof and with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.

Recipients of data

We use service providers to process your data. The processing operations carried out by such service providers include, for example, hosting, email dispatch, maintenance and support of IT systems, customer and order management, accounting and billing, marketing measures or file and data carrier destruction. These service providers are natural or legal persons, public authorities, agencies or other bodies that processes personal data on behalf of the data controller. These service providers do not use the data for their own purposes, but carry out data processing exclusively for the controller and are contractually obliged to guarantee suitable technical and organizational measures for data protection. We may also transfer your personal data to organizations such as postal and delivery services, your bank, tax consultants/auditors or the tax authorities. Further recipients may be named in the following information.

Data transfer to third countries

Our data processing may involve the transfer of certain personal data to third countries, i.e. countries in which the GDPR is not applicable law. Such a transfer is permitted if the European Commission has determined that an adequate level of data protection is ensured in such a third country. If there is no such adequacy decision by the European Commission, personal data will only be transferred to a third country if there are appropriate safeguards in accordance with Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is met.

Unless otherwise stated below, we use the EU standard data protection clauses as appropriate safeguards for the transfer of personal data to third countries. You have the option of receiving or viewing a copy of these EU standard data protection clauses. Please contact us at the address given under Contact.

If you consent to the transfer of personal data to third countries, the transfer takes place on the legal basis of Art. 49 (1) (a) GDPR.

Processing in the assertion of your rights

If you assert your rights in accordance with Art. 15 to 22 GDPR, we process the personal data transmitted for the purpose of realizing these rights and to be able to provide proof of this. We will only process data stored for the purpose of providing and preparing information for this purpose and for the purposes of data protection monitoring and will otherwise restrict processing in accordance with Art. 18 GDPR.

This processing is based on the legal basis of Art. 6 (1) (c) GDPR in conjunction with. Art. 15 to 22 GDPR and Section 34 (2) BDSG.

Your rights

As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

Right to object

In accordance with Art. 21 (1) GDPR, you have the right to object to processing based on the legal basis of Art. 6 (1) (e) or (f) GDPR on grounds relating to your particular situation. If we process personal data about you for the purpose of direct marketing, you can object to this processing in accordance with Art. 21 (2) and (3) GDPR.

Data protection officer

You can reach our data protection officer using the following contact details:

Email: dsb@tte-strategy.com

Herting Oberbeck Datenschutz GmbH

Hallerstr. 76, 20146 Hamburg

https://www.datenschutzkanzlei.de  

Data processing on our website

When you use our website, we collect information that you provide yourself. In addition, certain information about your use of our website is automatically collected by us during your visit to our website. Under data protection law, the IP address is also considered personal data. An IP address is assigned to each device connected to the internet by the internet provider so that it can send and receive data.

Processing of server log files

When using our website for informational purposes only, general information that your browser transmits to our server is initially stored automatically (not via registration). By default, this includes: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code.

The processing is carried out to pursuit our legitimate interests and is based on the legal basis of Art. 6 (1) (f) GDPR. This processing serves the technical administration and security of the website. The stored data will be deleted after seven days unless there is a justified suspicion of illegal use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject on the basis of the stored information. Art. 15 to 22 GDPR therefore do not apply in accordance with Art. 11 (2) GDPR, unless you provide additional information that enables your identification in order to assert your rights set out in these articles.

Contact options and enquiries

Our website contains contact forms that you can use to send us messages. The forms are provided by Hubspot, a service of Hubspot Germany GmbH (Germany/EU). If you send us a contact enquiry, we will forward your data to Hubspot. The transfer of your data is encrypted (recognizable by the "https" in the address line of the browser). All data fields marked as mandatory are required to process your request. If you do not provide this data, we will not be able to process your request. The provision of further data is voluntary. Alternatively, you can also send us a message via the contact email. We process the data for the purpose of answering your enquiry.

If your enquiry relates to the conclusion or performance of a contract with us, the legal basis for data processing is Art. 6 (1) (b) GDPR. Otherwise, we process the data on the basis of our legitimate interest in contacting enquiring persons. The legal basis for data processing is then Art. 6 (1) (f) GDPR.

When using Hubspot services, personal data may be transferred to the USA. Please note the information in the section “Data transfer to third countries”. Further information on data protection at Hubspot can be found at https://legal.hubspot.com/de/privacy-policy. [A1]

Job applications

You can apply for a job in our job vacancies section. For this purpose, you will be redirected to the website of our service provider Personio SE & Co KG (Germany/EU). Further information on the processing of your data when submitting an application can be found at the following link Jobs at TTE Strategy GmbH (personio.com).

Cookies

We use cookies and similar technologies ("cookies") on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or for specific cases.

The use of cookies is partly technically necessary for the operation of our website and is therefore permitted without the user's consent. We may also use cookies to offer special functions and content and for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third-party cookies). We only use such technically unnecessary cookies with your consent in accordance with Section 25 (1) TTDSG and, if applicable, Art. 6 (1) (a) GDPR. Information on the purposes, providers, technologies used, stored data and the storage duration of individual cookies can be found in the cookie settings of our consent management tool.

Consent management tool

This website uses a consent management tool to control cookies and the processing of personal data.

The consent management tool enables users of our website to give their consent to certain data processing operations or to withdraw their consent. By confirming the "Accept all cookies" button or by saving individual cookie settings, you consent to the use of the associated cookies.

The legal basis is your consent within the meaning of Art. 6 (1) (a) GDPR.

The banner also helps us to provide evidence of the declaration of consent. For this purpose, we process information about the declaration of consent and other log data relating to this declaration. Cookies are also used to collect this data. The processing of this data is necessary to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 (1) (c) in conjunction with Art. 7 (1) GDPR).

You can withdraw your consent for cookies here: Click

Google Tag Manager

We use the Google Tag Manager of the provider Google Ireland Limited (Ireland, EU) on our website. The Google Tag Manager is used to manage our website tags via an interface. The Google Tag Manager is a cookie-free domain to which the IP address is transmitted for technical reasons. The Google Tag Manager merely triggers other tags, which in turn may collect data without accessing this data themselves. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

Art. 6 (1) (f) GDPR serves as the legal basis for the transmission of the IP address. Our legitimate interest is the administration of our website services and the triggering of other tags.

Further information on data processing can be found at: https://support.google.com/tagmanager/answer/7157428

Google reCAPTCHA

We use the reCAPTCHA service of Google Ireland Limited (Ireland, EU). For such integration, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address is therefore transmitted to Google Ireland. Google Ireland also collects further data, e.g. about your browser and your click behavior. For security reasons, we use the service to check whether form entries are made by a natural person. In this way, automated access attempts and attacks can be recognized and prevented. We are legally obliged to take appropriate technical and economic measures to ensure the security of the portal.

The processing of your data takes place on the basis of Art. 6 (1) (c) GDPR in conjunction with. Art. 32 GDPR and Section 19 (4) TTDSG.

When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Google can be found in Google's privacy policy at https://www.google.com/policies/privacy

Analyzing our website

Google Analytics

We use the Google Analytics service provided by Google Ireland Limited (Ireland, EU) on our website.

Google Analytics is a web analytics service that enables us to collect and analyze data about user behavior on our website. Google Analytics enables us to measure interaction data from different devices and from different sessions. This allows us to contextualize individual user actions and analyze long-term relationships.

Google Analytics uses cookies for this purpose, which enable us to analyze the use of our website. Personal data in the form of IP addresses, device identifiers and information about interaction with our website is also processed. Some of this data is information that is stored on the device you are using. In addition, further information is also stored on your device via the cookies used.

Google Ireland will process the data collected in this way on our behalf to analyze the use of our website by users, to compile reports on the activities within our website and to provide us with further services associated with the use of our website and the use of the Internet. Pseudonymized user profiles can be created from the processed data.

The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 (1) (a) GDPR. You can withdraw this consent at any time via our Consent Management Tool with effect for the future.

We only use Google Analytics with activated IP anonymization. This means that the IP address of users is truncated by Google Ireland within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. The IP address transmitted by the user's browser is not merged with other data. The IP address is truncated on servers in the EU.

The data on user actions is stored for a period of 2 months and then automatically deleted. The deletion of data whose storage period has expired takes place automatically once a month.

We also use the Google Analytics advertising functions (remarketing). This function enables us, in conjunction with Google's cross-device functions, to display adverts in a more targeted manner and to present users with adverts tailored to their interests. Remarketing is used to show users adverts and products for which interest has been identified on other websites in the Google network. The function allows us to link advertising target groups created via Google Analytics Remarketing with the cross-device functions of Google Ads. In this way, interest-based, personalized advertising messages that have been adapted to a user depending on previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another of the user's devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you sign in with your Google account. The data collected in your Google account is summarized exclusively on the basis of your consent, which you can give or withdraw from Google. For these linked services, data is then collected for advertising purposes via Google Analytics. To support the remarketing function, Google Analytics collects the Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data. This is used to define and create target groups for cross-device adverts.

Further information on how Google uses data from websites or apps for advertising purposes can be found in Google's privacy policy at: www.google.com/policies/techno...

Hotjar

We use the Hotjar service from the provider Hotjar Ltd (Malta, EU) on our website to analyze movements on our website using so-called "heat maps". This allows us to recognize, for example, how far users scroll and which buttons users click and how often. The tool also makes it possible to obtain feedback directly from website users. This provides us with valuable information to make our website even faster and more customer-friendly. With Hotjar, we can only track which buttons are clicked, the history of the mouse, how far the user scrolls, the screen size of the device, device type and browser information. We also receive information about your geographical location (country) and the preferred language for displaying our website. Areas of the websites in which personal data about you or third parties is displayed are automatically hidden by Hotjar and can therefore not be traced by the tool at any time.

Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

Cookies are set on your end device to integrate the service. The setting of cookies and access to information stored on the device you are using takes place with your consent, which you can withdraw at any time with effect for the future via our Consent Management Tool. Further information on data protection at Hotjar can be found in Hotjar's privacy policy at https://www.hotjar.com/legal/policies/privacy/.

HubSpot Analytics

We use the HubSpot service on our website, a service provided by HubSpot Germany GmbH (Germany, EU). HubSpot uses cookies and similar technologies that enable your use of our website to be analyzed. This involves processing personal data in the form of online identifiers (including cookie identifiers), IP addresses and device identifiers. HubSpot will use this information on our behalf to analyze the use of our online offer by users and to compile reports on the activities within our website. User profiles can be created from the processed data.

Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

Cookies are set on your end device to integrate the service. Cookies are set with your consent, which you can withdraw at any time with effect for the future via our Consent Management Tool. When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at HubSpot can be found in HubSpot's privacy policy at https://legal.hubspot.com/de/privacy-policy.

Tracking & Retargeting

Microsoft Advertising

We use the Microsoft Advertising (formerly Bing Ads) service from Microsoft Ireland Operations Limited (Ireland, EU) on our website. Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us target adverts via the search engines Microsoft Bing, Yahoo, Aol, other search partners (e.g. Ecosia, DuckDuckGo) and the Microsoft Audience Network. Microsoft Advertising uses cookies for this purpose.

Microsoft Advertising collects data via UET that we can use to track target groups thanks to remarketing lists. For this purpose, a cookie is stored on the end device used when you visit our website. This enables Microsoft Advertising to recognize that our website has been visited and to display an advertisement when the above-mentioned services are used at a later date.

The information is also used to create conversion statistics, i.e. to record how many users have reached one of our websites after clicking on an advert. This tells us the total number of users who clicked on our advert and were redirected to our website. However, we do not receive any information with which users can be personally identified.

Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

Cookies are set with your consent, which you can withdraw at any time with effect for the future via our Consent management tool. When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Microsoft can be found in Microsoft's privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

LinkedIn Insight-Tag

We use the LinkedIn Insight-Tag on our website, a marketing product of LinkedIn Ireland Unlimited Company (Ireland, EU). For information on LinkedIn Ireland's contact details and the contact details of LinkedIn Ireland's data protection officer, please refer to LinkedIn's data policy at https://www.linkedin.com/legal/privacy-policy.

The LinkedIn Insight-Tag is a JavaScript code snippet that is triggered by LinkedIn when you visit our website and stores a cookie on the device you are using. Such storage of information by the LinkedIn Insight-Tag or access to information that is already stored on your device and any further processing of personal data in connection with the LinkedIn Insight-Tag will only take place with your consent. The legal basis for the collection and transmission of personal data by us to LinkedIn Ireland is therefore Art. 6 (1) (a) GDPR.

LinkedIn also uses "Licdn", a content delivery network (CDN), to display content. For this purpose, it is technically necessary for LinkedIn to process your IP address so that the content can be sent to your browser.

We can perform various functions via the LinkedIn Insight-Tag, which we describe in detail below.

LinkedIn conversion tracking is an analysis function that is supported by the LinkedIn Insight-Tag. The LinkedIn Insight-Tag enables the collection of data on visits to our website, including URL, referrer URL, IP address, device, and browser characteristics (user agent) and timestamp. The IP addresses are truncated or (if they are used to reach members across devices) hashed. LinkedIn does not provide us with any personal data, but only offers reports (in which you are not identified) about the website target group and ad performance. This allows us to measure the effectiveness of LinkedIn adverts for statistical and market research purposes.

The direct identifiers of the members are removed by LinkedIn within seven days in order to pseudonymize the data. LinkedIn then deletes this remaining pseudonymized data within 180 days.

This processing is carried out for the purpose of obtaining information about our website target group and a report on the effectiveness of LinkedIn campaigns.

We also use the "Matched Audiences" service to target our advertising campaigns to specific audiences. LinkedIn Matched Audiences and associated data integrations allow us to target advertising to specific audiences based on data we provide to LinkedIn (e.g. company lists, hashed contact information, device identifiers or event data such as websites visited).

This processing is carried out for the purpose of marketing our offers by displaying advertising to specific target groups.

We have entered into an agreement with LinkedIn on processing as joint controllers, which sets out the distribution of data protection obligations between us and LinkedIn. You can view this here: https://legal.linkedin.com/pages-joint-controller-addendum.

Please note that in accordance with the LinkedIn privacy policy, personal data is also processed by LinkedIn in the USA or other third countries. LinkedIn only transfers personal data to countries for which the European Commission has issued an adequacy decision in accordance with Art. 45 GDPR or on the basis of appropriate safeguards in accordance with Art. 46 GDPR.

Google Ads

We use the online advertising program Google Ads from Google Ireland Limited (Ireland/EU) on our website, through which we place advertisements on the Google search engine. If you reach our website via a Google advert, Google places a cookie on your end device ("conversion cookie"). A different conversion cookie is assigned to each Google Ads customer so that the cookies are not tracked across the websites of different Ads customers. The information collected with the help of the cookie is used to create conversion statistics. This tells us the total number of users who have clicked on one of our Google adverts. However, we do not receive any information that can be used to personally identify users.

Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

Cookies are set with your consent, which you can withdraw at any time with effect for the future via the Consent Management Tool. When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Google can be found in Google's privacy policy at https://policies.google.com/privacy#infocollect.[A4]

Data processing on our social media accounts

We are represented on several social media platforms with company accounts. In this way, we would like to offer additional options for information about our company and for dialogue. Our company has company accounts on the following social media platforms:

When you visit or interact with an account on a social platform, personal data about you may be processed. The information associated with a social media account used also regularly constitutes personal data. This also includes messages and statements made using the profile. In addition, certain information is often automatically collected during your visit to a social media account, which may also constitute personal data.

Data processing during the visit of a social media account

When you visit our social media accounts, which we use to present our company or products from our portfolio, certain information about you is processed. Sole controllers for this processing of personal data are the operators of the social media platforms. Further information on the processing of personal data can be found in their privacy policies, which we link to below:

The operators of the social media platforms collect and process event data and profile data and provide us with anonymized statistics and insights for our accounts, with help us to gain knowledge about the types of actions that people taken on our site (so-called “insights”). The insights are created based on certain information about people who have visited our site. This processing of personal data is carried out by the operators of the social media platforms and us as joint controllers. The processing serves our legitimate interest in analyzing the types of actions taken on our site and improving our site based on these findings. The legal basis for this processing is Art. 6 section 1 letter f) GDPR.

We cannot assign the information obtained through insights to individual user profiles that interact with our accounts. We have entered into agreements with the operators of the social media platforms on processing as joint controllers, in which the distribution of data protection obligations between us and the operators is specified. Details on the processing of personal data for the creation of insights and the agreement concluded between us and the operators can be found at the following links:

You also have the option of asserting your against the operators. You can find further information on this under the following links:

We have agreed with LinkedIn that the Irish Data Protection Commission is the lead supervisory authority for the processing for insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see https://www.dataprotection.ie/) or any other supervisory authority.

Communication via social media accounts

We also process information that you have made available to us via our company accounts on the respective social media platform. Such information may include the username used, contact details or a message to us. This processing is carried out by us as the sole controller. We process this data based on our legitimate interest in contacting enquiring persons. The legal basis for this data processing is Art. 6 section 1 letter f) GDPR. Further data processing may take place if you have given your consent (Art. 6 section 1 letter a) GDPR) or if this is necessary to fulfil a legal obligation (Art. 6 section 1 letter c) GDPR).

Further data processing

Job applications

When you apply for a position at our company, we will process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and acknowledged by the relevant contact persons. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you a position, we will retain the data you provide for up to six months after rejection for the purpose of answering questions in connection with your application and rejection. This does not apply if statutory provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage. The legal basis for data processing is Section 26 (1) sentence 1 BDSG or Art. 6 (1) (a) GDPR. If we store your applicant data for longer than six months and you have expressly consented to this, we would like to point out that this consent can be freely withdrawn at any time in accordance with Art. 7 (3) GDPR. Such a withdrawal does not affect the lawfulness of the processing, which was carried out on the basis of the consent until the withdrawal.

Contact by email

If you send us a message via the contact email provided, we will process the data provided for the purpose of responding to your enquiry. We process this data on the basis of our legitimate interest in contacting enquirers.

The legal basis for data processing is Art. 6 (1) (f) GDPR.

Customer and prospective customer data

When you contact our company as a customer or prospective customer, we process your data to the extent necessary to establish or fulfil the contractual relationship. This regularly includes the processing of the personal master data, contract data and payment data provided to us, as well as the contact and communication data of our contact persons for commercial customers and business partners. The legal basis for this processing is Art. 6 (1) (f) GDPR.

We also process customer and interested party data for evaluation and marketing purposes. This processing is carried out on the legal basis of Art. 6 (1) (f) GDPR and serves our interest in further developing our offer and informing you specifically about our offers.

Further data processing may take place if you have given your consent (Art. 6 (1) (a) GDPR) or if this is necessary to fulfil a legal obligation (Art. 6 (1) (c) GDPR).

Use of the email address for marketing purposes

We may use your email address used during communication with us to inform you about similar products and services offered by us.

The legal basis is Art. 6 (1) (f) GDPR in conjunction with Section 7 (3) UWG. You can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. To do so, you can unsubscribe by clicking on the unsubscribe link contained in each mailing or by sending an email to hello@tte-strategy.com.

TTE Strategy



IMPRINTPRIVACY