1. Information on the collection of personal data

With this privacy statement we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

Responsible person in the sense of Art. 4 Abs. 7 DS-GVO ist die Thomas Wittmann Consulting UG, Telephone +49 160 911 70 884, E-Mail: info@wittmann-consulting.net

Contact details of the data protection officer:
Thomas Wittmann, E-Mail: info@wittmann-consulting.net

If we use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you below in detail about the respective processes. We also mention the fixed criteria of the storage period.


2. Collection and use of personal data (processing purposes and legal basis)

Art. 6 I lit. A DS-GMO serves as a legal basis for our company for processing operations in which we obtain consent for a specific processing purpose. Is the processing of personal data necessary to fulfillment a contract of which the person concerned is a contracting party, as is the case, for example, with processing operations that are used to supply goods or to provide any other contract. Power or consideration are necessary, so the processing is based on Article 6 I lit. b DS-GVO. The same applies to such processing operations that are necessary to carry out pre-contractual measures, such as in cases of requests for our products or services. If our company is subject to a legal obligation by which the processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Article 6 I lit. c DS-GVO. In rare cases, the processing of personal data may be necessary to protect vital interests of the person concerned or another natural person. This would be the case, for example, if a visitor to our company were to be injured and his name, age, health insurance data or other vital information were should passed on to a doctor, hospital or other third party. Then the processing would be based on Article 6 I lit. D DS-GVO. Ultimately, processing operations could be based on Article 6 I lit. f DS-GVO. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not predominate. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the person concerned is a customer of the person responsible (recital 47 sentence 2 DS-GVO).

Automated decision making and profiling
We will inform you within the framework of this Privacy Policy as soon as we carry out procedures for automated decision-making, including profiling, and will provide you with meaningful information about the logic involved and the scope and desired effects of such processing on the data subject.

Obligation to provide personal data
We are not obliged to provide personal data.

2.1. Survey for informational use of the website

If you use our website for informational purposes only (if you do not register or otherwise provide us with information), we will only collect the personal data that your browser sends to our server. Wenn Sie unsere Website betrachten möchten, erheben wir die folgenden Daten, die für uns technisch erforderlich sind, um Ihnen unsere Website anzuzeigen und die Stabilität und Sicherheit zu gewährleisten. The storage period is 14 days.
The legal basis for their levy is Art. 6 Para. 1 S. 1 lit. f DS-GVO.

The following data are collected:

    • IP-address
    • Date and time of the request
    • Time zone difference to Greenwich Mean Time (GMT)
    • Contents of the request (concrete page)
    • Access status/HTTP status code
    • amount of data transferred in each case
    • Website from which the request originates
    • browser
    • Operating system and its interface
    • Language and version of the browser software
    • Internet service provider of the accessing system


3. further functions and offers of our website

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you will generally have to provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
To some extent, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

Personal data will not be passed on to third parties unless the offence of permission pursuant to Art. 6 DS-GVO is fulfilled. For example, we may pass on your personal data to third parties if we enter into contracts or offer similar services together with partners. You will receive further information on this when you enter your personal data or in the description of the offer below.

Transfer to third countries:
If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

Storage duration:
With regard to the storage period of the data collected, you will find more detailed information on the individual offers. If continued storage is required for legal reasons, we will restrict your data for further use until the expiry of these retention periods and delete it when these periods expire.

Other forms of use of our website

3.1 Cookies

“Cookies” are small Files that are stored on Users ‘ computers. Different Information can be stored within Cookies. A Cookie is primarily used to store the Information about a user (or the device on which the cookie is stored) during or after his visit within an online offer. Temporary cookies, or “session cookies” or “transient cookies,” are referred to as cookies that are deleted after a user leaves an online offer and closes their browser. In such a cookie, for example, the contents of a shopping basket can be stored in an online shop or a login status. Cookies are referred to as “permanent” or “persistent,” which remain stored even after the browser is closed. For example, the login status can be saved if the users visit it after several days. Similarly, such a cookie can store the interests of users used for range measurement or marketing purposes. Cookies are referred to as a “third-party cookie” offered by providers other than the person who runs the online offer (otherwise, if only its cookies are referred to as “first-party cookies”).
We may use temporary and permanent cookies and make up for this as part of our privacy policy.
If users do not want cookies to be stored on their computer, they are asked to disable the option In their browser’s system settings. Saved cookies can be deleted from the browser’s system settings. The Exclusion of Cookies can lead to Functional Limitations of this Online offer.
A general objection to the use of cookies used for the purposes of online marketing can be explained on a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. With the application of the GDPR 2018, webmasters are obliged to comply with the basic regulation published under https://eu-datenschutz.org/ and to inform their users accordingly about the collection and evaluation of data. The legality of the processing is justified in Article 6 of the GDPR. Cookies have a validity period of 14 days.


3.2 Google Analytics


Insofar as you have given your consent, Google Analytics, a web analysis service of Google Ireland Limited (“Google”) is used on this website. The usage includes the “Universal Analytics” mode. This allows data, sessions and interactions across multiple devices to be assigned to a pseudonymous user ID and thus analyze a user’s activities across devices.


Google Analytics uses so-called “Cookies,” text files that are stored on your computer and that allow you to analyze your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other Contracting States to the Agreement on the European Economic Area. Please note that on this website Google Analytics has been extended by IP anonymization in order to ensure anonymised collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. For more information on terms of use and data protection, see https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

Please click here if you do not want Analytics to track your surfing behavior.Click here to unsubscribe.

Purposes of processing

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide other services related to the use of the website and the internet to the website operator.


Legal basis

The legal basis for the use of Google Analytics is your consent in accordance with Article 6 (6). 1 P.1 lit. a GDPR.


Recipients / categories of recipients

The recipient of the collected data is Google.


Transfer to third countries

The personal data will be transferred to the US under the EU-US Privacy Shield on the basis of the European Commission’s adequacy decision. The certificate can be retrieved here.


Duration of data storage

The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs will be automatically deleted after 14 months. Data that has been stored is deleted automatically once a month.


Affected rights

You can revoke your consent at any time with effect for the future by preventing the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading the browser add-on and Install. Opt-out cookies prevent the future collection of your data when you visit this website. In order to prevent Universal Analytics from capturing across devices, you must
opt-out on all systems used. If you click here, the opt-out cookie is set: Disable Google Analytics


3.3 Redirection

Within our online offer, the technology Redirection is used on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 sec. 1 lit. f. GDPR).

When you visit our site, your browser loads the required data into its browser cache in order to enable the provision of redirect, which you need in order to be able to open our page via third-party searches, e.g. google.de or to create a page error 404 prevent a crash and provide our administrator with information to resolve the error. To do this, the browser you are using must connect to Redirection’s servers. The information generated by the data about your use of the website,

Host name of the access calculator (IP address),

transferred to Redirection’s servers and stored there. The IP address transmitted by your browser as part of Redirection will not be merged with other data. In addition, the IP address is only cached for a short period of 4 months and then deleted. You can prevent the storage of the data by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent.

For more information about the technology used, please see Redirection’s Privacy Policy:


3.4 Social Media

This website uses links on social media platforms of the following services:
– “Facebook”, operated by: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States

– “LinkedIn”, operated by: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

-“XING”, operated by: XING SE, Dammtorstraße 30, 20354 Hamburg, Germany


You can recognize the link to Facebook on the website by using the Facebook icon (white F) on a corresponding button. You can recognize the link to LinkedIn on the website by using the LinkedIn icon (white in) on a corresponding button. The link to XING on the website can be identified by the XING icon (white X) on a corresponding button. By clicking on one of these buttons, you agree to the use of this link and thus also to the transfer of personal data to the respective social media service. We have no influence on the nature and scope of the data transferred and on their further processing. According to our current state of knowledge, the respective social media service will be informed about its IP address and about the website using the link. Users have the option to refuse this exchange of data, if necessary, by changing the settings of their user account on the website of the respective social media service. If you are logged in to the corresponding social media service platform at the same time, the information can be assigned directly to your user profile. If you want to avoid such a collection of profile information, you should log out of the respective social media service platform.

For more information from Facebook about the so-called data usage policies, please visit: http://www.facebook.com/about/privacy.

For more information from LinkedIn about the so-called data usage policies, please visit: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

For more information from XING about its privacy policy, please visit: https://twitter.com/privacyhttps://privacy.xing.com/de/datenschutzerklaerung.


3.5 Wordfence Security

Within our online offer, the security technology Wordfence from DEFIANT (800 5th Ave Ste 4100, Seattle, WA 98104).

The provided GDPR compliant data processing agreement has been concluded.

WORDFENCE currently uses three cookies and below it explains what each cookie does, who set the cookie and why the cookie contributes to the protection of the site.
wfwaf-authcookie- (Hash) What it does: This cookie is used by the WORDFENCE firewall to perform a capability check on the current user before loading WordPress. Who gets this cookie: This cookie is only set for users who can log in to WordPress. How this cookie helps: With this cookie, the WORDFENCE firewall recognizes logged-in users and allows them increased access. WORDFENCE can also detect undeclared users and restrict their access to secure areas. The cookie informs the firewall of the level of access a visitor has to help the firewall make smart decisions about who can be allowed and who should be blocked.

wf_loginalerted_ (Hash) What it does: This cookie is used to notify the WORDFENCE administrator when an administrator logs on from a new device or location. Who gets this cookie: This cookie is only set for administrators. How this cookie helps: This cookie helps website operators to know if an admin login has occurred from a new device or location.

wfCBLBypass What it does: WORDFENCE allows a site visitor to bypass country blocking by accessing a hidden URL. This cookie can be used to understand who is allowed to circumvent the country’s blocking. Who gets this cookie: When a hidden URL defined by the site administrator is called, this cookie verifies that the user can access the site from a country that is restricted by the country’s blocking. This is set for anyone who knows the URL that allows you to bypass the default country blocking. This cookie is not set for someone who does not know the hidden URL to bypass country blocking. How this cookie helps: This cookie allows website owners to allow certain users to block countries even though their country has been blocked.

We store this data within the scope of the statutory obligation to provide proof on the basis of Art. c DS-GVO. Your data will be deleted after the obligation to provide proof has expired.

More information on the handling of user data can be found in defIANT’s privacy policy: https://www.WORDFENCE.com/privacy-policy/


3.6 Yoast SEO

Within our online offer, yoast SEO technology is used on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 sec. 1 lit. f. GDPR). Yoast SEO is a product of Yoast BV (Don Emanuelstraat 3, 6602 GX Wijchen, The Netherlands).

The plugin works exclusively in the backend, so it does not place cookies or collect personal data.

For more information about the technology used, please see Yoast’s Privacy Policy:



SSL or TLS encryption
This site uses an SSL or SSL system for security reasons and to protect the transfer of confidential content, such as orders or requests that you send to us as a site operator. TLS encryption. An encrypted connection can be seen by the browser’s address line switching from “http://” to “https://” and at the lock icon in your browser line.

If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.


4. Information, deletion, correction, restriction of processing, right of objection, data portability

You have the following rights towards us with respect to the personal data concerning you:
Right to information,
right to rectification or erasure,
right to restrict processing,
right to object to the processing,
right to data portability.
In this case, please contact the data processing authority:

Address: Thomas Wittmann Consulting UG
Bahnhofstraße 44, Schwindegg

Office address: Oberföhringerstraße 226, 81925 Munich

Email: info@wittmann-consulting.de


5. Objection or revocation against the processing of your data

If the processing of your personal data is based on consent, you have the right to revoke your consent at any time with effect for the future. Such a revocation affects the admissibility of the processing of your personal data after you have expressed it to us.

Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not required in particular for the performance of a contract with you, which is shown by us in the following description of the functions. In exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your reasoned objection, we will examine the situation and will either discontinue or adjust the data processing or show you our compelling reasons for continuing the processing.

You may object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us about your advertising objection under the following contact details: Thomas Wittmann Consulting UG, Oberföhringerstraße 226, 81925 Munich, e-mail info@wittmann-consulting.net, (see our imprint).


6. Right of appeal

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.


7. Modification of this Privacy Policy

Thomas Wittmann Consulting UG reserves the right to amend or adapt this Data Protection Directive to the extent that the ongoing technical development in the field of IT and the Internet so requires.


8. Image evidence

For the picture “”: Fencer angled arm, #139490943 a license was acquired – Origin: adobe stock Copyright Vladimir Badaev


The image “Security”: Is a publicly licensed graphic that has been reworked – Origin: https://de.freepik.com/vektoren-kostenlos/cyber-sicherheitskonzept_4520117.htm Copyright: rawpixel.com


All other image rights pursuant to Section 15 UrhG and Section 19a UrhG to the graphics used are the property of Thomas Wittmann Consulting UG.