Privacy Policy
Certainly! Here is the revised Privacy Policy tailored for Spectrogram Consulting, a UK-based consultancy:
---
**PRIVACY NOTICE**
**I. Name and Address of the Data Controller and Contact Details of the Data Protection Officer**
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Spectrogram Consulting
180 Borough High Street
London, SE1 1LB
United Kingdom
You can contact our Data Protection Officer via email at contact@spectrogramconsulting.com or at the above address.
**II. Provision of the Website and Creation of Log Files**
1. **Description and Scope of Data Processing**
Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
(1) Information about the browser type and version used
(2) The operating system of the user
(3) The IP address of the user
(4) Date and time of access
(5) Websites that are called up by the user's system via our website
The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.
2. **Legal Basis for Data Processing**
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.
3. **Purpose of Data Processing**
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data for the technical optimization of the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR.
4. **Duration of Storage**
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized, so that an assignment of the calling client is no longer possible.
5. **Possibility of Objection and Removal**
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
6. **Analytics**
We use various analytics services to set log files on our website. Details about these services and data processing will be provided as applicable.
**III. Use of Cookies**
1. **Description and Scope of Data Processing**
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website functional. Some elements of our website require that the calling browser can be identified even after a page change.
When calling up our website, the user is informed about the use of cookies and, if necessary, their consent to the processing of personal data used in this context is obtained. In this context, there is also a reference to this privacy policy.
2. **Legal Basis for Data Processing**
The use of technically necessary cookies and similar techniques is based on Section 25 (2) No. 2 TTDSG. Subsequent data processing takes place on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR.
3. **Purpose of Data Processing**
The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
4. **Duration of Storage, Possibility of Objection and Elimination**
Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the storage of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
5. **Third-Party Cookies**
We also use third-party cookies on our website. In detail, the following cookie-based tools are used in this context:
6. **Consent Management Tool**
This website uses a consent management tool to control cookies. The consent tool enables users of our website to give consent to certain data processing procedures or to revoke consent they have given. By confirming the "Accept all" button or by saving individual cookie settings, you consent to the use of the associated cookies. This action constitutes consent within the meaning of Art. 6 para. 1 lit. a GDPR.
The consent management tool processes the following data of the website visitor: IP address, unique ID, the cookie consent text file of the respective user, and information on the user's device and browser. The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to design the consent management centrally and clearly and to offer the website visitor the website presence only insofar as they have given their consent to the processing of personal data.
Further information on data protection can be found in the data protection information provided by the consent management tool provider.
**IV. Event Registration**
1. **Description and Scope of Data Processing**
On our website, there is the possibility to register for participation in events. When registering, the data from the input mask will be transmitted to us.
In addition, the following data is collected and stored during registration:
(1) IP address of the calling computer
(2) Date and time of registration
For the processing of data, reference is made to this privacy policy during the registration process.
2. **Legal Basis for Data Processing**
The legal basis for the processing of data after registration for participation in events by the user is Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.
3. **Purpose of Data Processing**
The collection of the user's personal data as part of the registration process serves to process the contract regarding participation in the booked event. The data collection also serves us to send interest-oriented information and offers on our own similar events as well as to offer an interest-oriented design and optimize the newsletter product. The processing and storage of the additional data is necessary to ensure we are not under attack from malicious bot activity or spam responses.
4. **Duration of Storage**
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, i.e., usually at the end of the booked event or upon receipt of your objection.
The additional personal data collected during the registration process is usually deleted after a period of seven days.
5. **Possibility of Objection and Removal**
The collection and storage of data for contract initiation and execution is mandatory for event registration. Consequently, the user only has the option of objecting to the sending of interest-related information and offers for our own similar events.
**V. Newsletter**
1. **Description and Scope of Data Processing**
On our website, there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us:
(1) Business E-mail address
(2) Salutation
(3) Name
(4) Surname
(5) Company Name
(6) Job Title
(7) Job Function
(8) Country
(9) Phone number
(10) Company category
(11) Number of Employees
In addition, the following data is collected during registration:
(1) IP address of the calling computer
(2) Date and time of registration
For the processing of data beyond the user's e-mail address, your consent is obtained during the registration process and refers to this privacy policy.
If you book participation in events or other services on our website and enter your e-mail address, this may subsequently be used by us to send you a newsletter. In such a case, only direct advertising for our own similar events or services will be sent via the newsletter.
2. **Legal Basis for Data Processing**
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR if the user has given their consent. The legal basis for sending the newsletter as a result of booking participation in events or other services is Art. 6 (1) lit. f GDPR.
3. **Purpose of Data Processing**
The collection of the user's e-mail address is used to deliver the newsletter. The remaining data is used for the interest-based delivery of the content associated with the newsletter subscription.
The collection of additional personal data during the registration process serves to prevent misuse of the services or the e-mail address used.
4. **Duration of Storage**
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address will be stored as long as the subscription to the newsletter is active or upon receipt of your objection.
The other personal
data collected during the registration process is usually deleted after a period of seven days.
5. **Possibility of Objection and Elimination**
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter. The user can object at any time to the sending of interest-based information in connection with bookings for events or the use of our services.
This also enables the revocation of consent to the storage of personal data collected during the registration process.
**VI. Contact Form and Contact by E-mail**
1. **Description and Scope of Data Processing**
Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are:
(1) Salutation
(2) Business E-mail address
(3) Name, Surname
(4) Company Name
(5) Country
All other information is voluntary.
The following data is also stored at the time the message is sent:
(1) The IP address of the user
(2) Date and time of registration
For the processing of data, your consent is obtained in the context of the sending process in relation to the storage of data that is not mandatory and refers to this privacy policy.
You can also contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.
2. **Legal Basis for Data Processing**
The legal basis for the processing of the user's contact data is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of all other data is Art. 6 para. 1 lit. a GDPR if the user has given their consent.
3. **Purpose of Data Processing**
The processing of the user's contact data serves us solely to process the contact.
The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. **Duration of Storage**
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form, this is the case when it can be inferred from the circumstances that the matter concerned has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. **Possibility of Objection and Removal**
The user has the possibility to revoke their consent to the processing of their personal data at any time. This can be notified by mail to contact@spectrogramconsulting.com.
All personal data stored in the course of contacting us will be deleted in this case.
Furthermore, the user can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
**VII. Recipients of Data and Transmission**
Within Spectrogram Consulting, access to your data is granted to those offices that require it in order to fulfill our contractual and legal obligations. Service providers and vicarious agents employed by us (e.g., technical service providers) may also receive data for these purposes. We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the scope of the purposes and legal bases stated in this data protection information. We have concluded a Data Processing Agreement with our service providers in accordance with Art. 28 GDPR. Categories of recipients include providers of Internet services, customer management systems, and content management systems. Your data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus fulfilling the contract, or if we have your consent.
In the course of using our website, your personal data may be transferred outside the European Economic Area (EEA), i.e., to our affiliates. Such processing is only carried out to fulfill contractual and business obligations and to maintain your business relationship with us.
In the USA, the level of data protection may not be consistently high due to a lack of legal provisions that meet the requirements of the GDPR. However, we ensure that data protection is sufficiently guaranteed through standard contractual clauses of the European Commission for the protection of personal data.
**VIII. Rights of the Data Subject**
In accordance with Art. 15 para. 1 GDPR, you have the right to request information free of charge about the personal data we have stored about you. In addition, you have a right to correction (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data transfer (Art. 20 GDPR) of your personal data if the legal requirements are met.
If the data processing is based on Art. 6 para. 1 lit. e or f) GDPR, you have the right to object according to Art. 21 GDPR. If you object to data processing, this will not take place in the future unless the controller can demonstrate compelling legitimate grounds for further processing that outweigh the interest of the data subject in objecting. If the data processing is based on consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, you may withdraw your consent at any time with effect for the future without affecting the lawfulness of the previous processing.
In the aforementioned cases, in the event of unanswered questions, or in the event of complaints, please contact the data protection officer in writing or by e-mail using the contact details provided above. You also have the right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority of the United Kingdom is responsible.
**IX. Automated Decision Making/Profiling**
We do not use automated decision making or profiling (an automated analysis of your personal circumstances).
**X. Amendment of this Privacy Notice**
This privacy policy is currently valid and has the status of July 2024.
Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy.