Privacy Policy

Hentschel Consulting GmbH

Rainer Hentschel
Sandmatte 2a
5712 Beinwil am See, Switzerland

Phone: +41 78 647 22 96
Email: rh@hentschel-consulting.ch
Website: https://www.hentschel-consulting.ch/

Based on Article 13 of the Swiss Federal Constitution and the data protection regulations of the Swiss Confederation (Data Protection Act, DSG), every person has the right to protection of their privacy and protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect the databases as well as possible against unauthorized access, loss, misuse, or falsification.

We point out that data transmission on the Internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

By using this website, you agree to the collection, processing, and use of data as described below. This website can generally be visited without registration. Data such as pages accessed, names of files retrieved, date and time are stored on the server for statistical purposes without this data being directly related to your person. Personal data, in particular name, address, or email address, are collected on a voluntary basis as far as possible. Without your consent, the data will not be passed on to third parties.

Personal data is any information that relates to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, storage, modification, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, we process – to the extent and insofar as the EU GDPR is applicable – personal data according to the following legal bases in connection with Art. 6 Para. 1 GDPR:

• lit. a) Processing of personal data with the consent of the data subject.
• lit. b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.
• lit. c) Processing of personal data for compliance with a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country in which the GDPR is applicable in whole or in part.
• lit. d) Processing of personal data to protect vital interests of the data subject or another natural person.
• lit. f) Processing of personal data to protect the legitimate interests of us or third parties, unless the fundamental rights and freedoms and interests of the data subject prevail. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims, and compliance with Swiss law.

We process personal data for the duration that is necessary for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.

This website uses cookies. These are small text files that make it possible to store specific information related to the user on the user's device while they use the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyze behavior patterns of page use, but also to make our offer more customer-friendly.

Consent: We use technically necessary cookies as well as – after your consent – analytics and marketing cookies. You can choose "Accept all" or "Decline all". You can revoke your consent at any time by adjusting your browser settings or deleting cookies. Please note that if you decline all cookies, not all functions of this website may be fully usable.

Cookie Overview:

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by switching them off in the browser settings.

Hosting: This website is hosted on our own infrastructure or with a German hosting provider. The hosting provider processes data on our behalf in accordance with a data processing agreement (Art. 28 GDPR).

Server Log Files: Each time this website is accessed, data is automatically stored in server log files: IP address, browser type and version, operating system, referrer URL, hostname of the accessing computer, date and time of the request. This data is used for system security, error diagnosis, and statistical evaluation. No merging with other data sources takes place. Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR). Storage period: 30 days.

This website uses SSL-/TLS-encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

This website uses various third-party services: Google Tag Manager and Google Analytics (GA4) for web analytics, HubSpot (CRM/newsletter), Google reCAPTCHA (spam protection), as well as optionally Google Maps and YouTube for embedded maps and videos.

These services use cookies and transmit data (including IP address, usage behavior) to servers in the USA and other countries.

Data Transfer to the USA: Insofar as US recipients are certified under the Swiss-U.S. Data Privacy Framework (DPF, in effect since September 15, 2024), the transfer takes place without additional guarantees, as an adequate level of data protection exists for certified US companies (Federal Council decision of August 14, 2024). We regularly verify the certification of the respective recipients: DPF List.

Data Transfer to Third Countries without Adequacy: For transfers to countries without an established adequate level of data protection, we rely on Standard Contractual Clauses (SCCs) and take additional technical/organizational measures (e.g., encryption, minimization, access restrictions) in accordance with the requirements of Schrems II.

Legal Basis: Consent (Art. 6 para. 1 lit. a GDPR) for analytics and marketing tools, legitimate interest (Art. 6 para. 1 lit. f GDPR) for technically necessary services such as reCAPTCHA.

Further information can be found in Google's Privacy Policy and HubSpot's Privacy Policy.

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. Required fields: First name, last name, email, phone, company, message. Legal basis: Pre-contractual measures (Art. 6 para. 1 lit. b GDPR) or legitimate interest (Art. 6 para. 1 lit. f GDPR). Storage period: Until revoked in Microsoft (email) and HubSpot (CRM), unless statutory retention obligations or explicit deletion requests apply. Data processors: Hosting is provided on our own infrastructure or with a German hosting provider. Google reCAPTCHA is used for spam protection (see separate section). The data is also stored in HubSpot (CRM system, USA). We do not pass on this data to third parties without your consent.

If you would like to receive the newsletter offered on this website, we need an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. Process: Double opt-in (confirmation by clicking a link in the confirmation email). Provider: We use HubSpot (HubSpot Inc., USA) as our CRM and newsletter tool. HubSpot is certified under the Swiss-U.S. Data Privacy Framework. Legal basis: Consent (Art. 6 para. 1 lit. a GDPR). Storage period: Until revoked. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to other third parties.

You can revoke your consent to the storage of the data, the email address, and their use for sending the newsletter at any time, for example via the "unsubscribe link" in the newsletter or by email to info@hentschel-consulting.ch.

This website uses the reCAPTCHA service from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; 'Google'). The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. The query includes the transmission of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address is shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Further information on the handling of user data can be found in reCAPTCHA's privacy policy at: https://policies.google.com/privacy?hl=en

Data transfer to Google is based on the Swiss-U.S. Data Privacy Framework (DPF, in effect since September 15, 2024), provided Google is certified accordingly. For more information, see: DPF List.

Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR) for spam prevention and protection against abuse. Processing is carried out to ensure the security of our website and to protect against automated attacks.

Google Tag Manager is a solution that allows us to manage so-called website tags via an interface and thus integrate Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal data of users. With regard to the processing of users' personal data, reference is made to the following information on Google services. Usage guidelines: https://www.google.com/intl/en/tagmanager/use-policy.html.

Our website uses HubSpot, a marketing automation software from HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA. HubSpot is a software company from the USA with a European branch in Ireland. HubSpot helps us analyze the use of our portal and manage contact and newsletter data. HubSpot uses cookies for this purpose.

Certain usage data is linked to your person (e.g., after registration in a registration form) and stored in our CRM. This enables us to provide you with information and offers tailored specifically to your interests.

Your personal data is also forwarded to HubSpot servers in the United States (USA). Data transfer is based on the Swiss-U.S. Data Privacy Framework (DPF, in effect since September 15, 2024). HubSpot Inc. is certified under the DPF and thus ensures an adequate level of data protection. For more information: DPF List.

We use HubSpot to provide you with needs-based information and offers as well as for newsletter dispatch and CRM management. Legal basis: Consent (Art. 6 para. 1 lit. a GDPR) for marketing purposes, legitimate interest (Art. 6 para. 1 lit. f GDPR) for contact management.

As part of the use of HubSpot, we store your personal data for as long as necessary to provide you with needs-based information and offers, or until you revoke your consent.

The provision of personal data collected via HubSpot is not required by law or contract or necessary for the conclusion of a contract. If you do not provide us with this data, we cannot provide you with needs-based information and offers.

More detailed information on data usage by HubSpot can be found in HubSpot's privacy policy at: https://legal.hubspot.com/privacy-policy.

You can object to the use of your data at any time, e.g., by email to rh@hentschel-consulting.ch.

HubSpot is certified under the conditions of the Swiss-U.S. Data Privacy Framework.

Since September 15, 2024, the Swiss-U.S. Data Privacy Framework (DPF) provides an adequacy decision by the Federal Council for data transfers to US companies certified under the DPF. An adequate level of data protection is guaranteed for these companies.

For data transfers to US companies that are not certified under the DPF, as well as for processing not covered by the DPF, we inform you that extensive surveillance measures by US authorities may exist in the USA. These occur without differentiation, limitation, or exception based on the pursued objectives. Limited legal remedies may be available for affected persons from Switzerland or the EU against such access.

Wherever possible, we rely on DPF-certified providers and supplement non-certified transfers with Standard Contractual Clauses (SCCs) as well as additional technical and organizational protective measures in accordance with the requirements from Schrems II.

You have the following rights regarding your personal data. You can submit requests at any time to rh@hentschel-consulting.ch. Processing period: We generally respond to your request within 30 days. In the case of complex requests or high request volume, this period may be extended to up to 60 days; we will inform you in good time in this case. Identity verification: To protect your data, we may require identity verification before providing information or making changes.

We may update this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of the change by email or other appropriate means in the event of an update.

If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organization directly, as listed at the beginning of this privacy policy.