Privacy policy
1. Privacy at a Glance
General notes
The following information provides an overview of what happens to your personal data when you visit this website.
Personal data means any information by which you can be personally identified. Detailed information on data protection can be found in the privacy policy below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by IOM Advisory GmbH.
The contact details can be found in the section “Information on the Controller” in this privacy policy.
How do we collect your data?
Your data is collected, on the one hand, when you provide it to us, for example by entering information into a contact form or by contacting us by email or telephone.
Other data is collected automatically or after your consent when you visit the website by our IT systems. This includes, in particular, technical data such as your internet browser, operating system, IP address or the time at which the page was accessed.
This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is processed to ensure the error-free, secure and stable provision of the website. Other data may be used to process your enquiry or, where relevant services are used and consent is required, to display external content or to protect the website against misuse.
What rights do you have regarding your data?
You have the right at any time to obtain, free of charge, information about the personal data stored about you, its origin, recipients and the purpose of processing.
You also have the right to rectification, erasure or restriction of processing of this data.
If you have given consent to data processing, you may withdraw this consent at any time with effect for the future. In addition, under certain circumstances, you have the right to object to the processing of your personal data.
Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority.
You may contact us at any time regarding this or any other questions relating to data protection.
Third-Party Services
This website may use third-party services, in particular for the provision and design of the website, the integration of videos, the display of fonts and the protection of forms against misuse.
Details can be found in the following sections of this privacy policy.
2. Hosting
Webflow
We host the content of our website with Webflow.Provider:
Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103
USA
Webflow is a service for creating and hosting websites.
When you visit our website, Webflow processes technical data that is necessary for the provision, security and stability of the website. This may include, in particular, your IP address, browser information, operating system, date and time of page access and server log files.
Webflow may use cookies or comparable technologies where these are necessary for displaying the website, providing certain website functions or ensuring security.
The use of Webflow is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the reliable, secure and efficient provision of our website.
Where corresponding consent is requested, processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG, insofar as the consent covers the storage of information on your device or access to information on your device. Consent may be withdrawn at any time with effect for the future.Further information can be found in Webflow’s privacy policy:
https://webflow.com/legal/eu-privacy-policy
According to Webflow, data transfers to the USA are based, among other things, on the EU-US Data Privacy Framework and, where necessary, on other appropriate safeguards.
Data Processing Agreement
We have entered into a data processing agreement with Webflow where required.
This is an agreement required under data protection law which ensures that Webflow processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Notices
Data Protection
The operators of this website take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is processed. Personal data means information by which you can be personally identified. This privacy policy explains which data we process, for what purposes and on which legal basis the processing is carried out.
Please note that data transmission over the internet, in particular communication by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information on the Controller
The controller responsible for data processing on the website is:
IOM Advisory GmbH
Breite Straße 3
40213 Duesseldorf
Phone: +49 211 882 40493
Email: info@iom-advisory.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
Storage Period
Unless a more specific storage period is stated in this privacy policy, we store your personal data only for as long as is necessary for the respective processing purposes.
If you assert a legitimate request for erasure or withdraw consent previously given for data processing, your data will be deleted unless there are legally permissible reasons for further storage. Such reasons may include, in particular, statutory retention periods or the establishment, exercise or defence of legal claims. In such cases, deletion will take place once these reasons no longer apply.
General Information on the Legal Bases for Data Processing
If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR.
Where special categories of personal data are processed and you have consented to this, processing is carried out on the basis of Art. 9 para. 2 lit. a GDPR.
Where processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, it is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Where processing is necessary for compliance with a legal obligation, it is carried out on the basis of Art. 6 para. 1 lit. c GDPR.Where processing is necessary to safeguard our legitimate interests or the interests of a third party, it is carried out on the basis of Art. 6 para. 1 lit. f GDPR.
Where cookies or comparable technologies are used that are not technically necessary for the operation of the website, they are used on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Technically necessary cookies and comparable technologies are used on the basis of Section 25 para. 2 TDDDG.
We provide information on the legal bases applicable in each individual case in the following sections of this privacy policy.
Data Transfers to Third Countries
We may use services from providers that are based outside the European Union or the European Economic Area or that transfer personal data to such countries.
Where personal data is transferred to the USA or other third countries, this is done only where an appropriate legal basis exists, for example an adequacy decision of the European Commission, certification under the EU-US Data Privacy Framework, standard contractual clauses of the European Commission or explicit consent.
Please note that third countries outside the European Union and the European Economic Area may not provide a level of data protection comparable to that in the EU unless an adequacy decision or appropriate safeguards are in place.
Recipients of Personal data
In the course of our business activities, we work with external service providers and other parties. In doing so, the transfer of personal data may be necessary.
We disclose personal data only where this is necessary for the performance of a contract, where we are legally obliged to do so, where we have a legitimate interest in disclosure or where another legal basis permits disclosure.
Where processors are used, processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.In the case of joint processing, an agreement on joint controllership will be concluded.
Withdrawal of Your Consent
Many data processing operations are possible only with your consent. You may withdraw consent already given at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to Object to Data Collection in Specific Cases and to Direct Marketing
Where data processing is carried out on the basis of Art. 6 para. 1 lit. e or Art. 6 para. 1 lit. f GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling based on these provisions.
If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of your personal data for the purpose of such marketing.
This also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of infringements of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. In particular, you may contact the supervisory authority of your usual place of residence, your place of work or the place of the alleged infringement.
For IOM Advisory GmbH, the following supervisory authority is generally responsible:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Phone: +49 211 38424-0
Website: https://www.ldi.nrw.de
The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive personal data that we process automatically on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format, or to have such data transmitted to another controller.
Where you request direct transmission to another controller, this will be done only to the extent technically feasible.
Access, Rectification and Erasure
Within the scope of applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin, recipients and the purpose of processing.
You also have the right to rectification of inaccurate personal data and, subject to the statutory requirements, the right to erasure of your personal data.
You may contact us at any time regarding this or any other questions relating to data protection.
Right to Restriction of Processing
You have the right to request the restriction of processing of your personal data. This right exists in particular in the following cases:
If you contest the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you may request restriction of processing.
If the processing of your personal data is unlawful, you may request restriction of processing instead of erasure.
If we no longer need your personal data but you require it for the establishment, exercise or defence of legal claims, you may request restriction of processing instead of erasure.
If you have objected to processing, a balancing of your interests and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you may request restriction of processing.
Where processing has been restricted, the personal data concerned may, apart from being stored, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the fact that the browser address line begins with “https://” and by the lock symbol in your browser bar.
When SSL or TLS encryption is activated, the data you transmit to us generally cannot be read by third parties.
Data Collection on This Website
Cookies and Comparable Technologies
Our website uses cookies and comparable technologies. Cookies are small data packets that may be stored on your device. They may be stored temporarily for the duration of a session or permanently on your device.
Cookies and comparable technologies may be technically necessary to provide the website, enable certain functions or ensure the security of the website. Other cookies or comparable technologies may be used to integrate external content, provide usage functions or enable other services.
Technically necessary cookies and comparable technologies are used on the basis of Section 25 para. 2 TDDDG. The related processing of personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR.
Our legitimate interest lies in the secure, stable and user-friendly provision of our website.
Where cookies or comparable technologies are used that are not technically necessary, they are used exclusively on the basis of your consent pursuant to Section 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR. Consent may be withdrawn at any time with effect for the future.
You can configure your browser so that you are informed when cookies are set, allow cookies only in individual cases, exclude cookies for certain cases or generally, or activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted.
Contact Form
If you send us enquiries via a contact form, we process the information you provide in the form, including the contact details you provide, for the purpose of processing your enquiry and any follow-up questions.
Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, insofar as your enquiry is related to the implementation of pre-contractual measures or the performance of a contract.
In all other cases, processing is carried out on the basis of our legitimate interest in the effective handling of enquiries addressed to us pursuant to Art. 6 para. 1 lit. f GDPR, or on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR, where such consent has been requested.
The data you enter in the contact form will remain with us until the purpose of processing no longer applies, you request that we delete it or you withdraw consent previously given. Statutory retention periods remain unaffected.
Contact by Email or Telephone
If you contact us by email or telephone, we process the personal data you provide for the purpose of processing your enquiry and any follow-up questions.
Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, insofar as your enquiry is related to the implementation of pre-contractual measures or the performance of a contract.
In all other cases, processing is carried out on the basis of our legitimate interest in the effective handling of enquiries addressed to us pursuant to Art. 6 para. 1 lit. f GDPR, or on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR, where such consent has been requested.
The data you transmit to us will remain with us until the purpose of processing no longer applies, you request that we delete it or you withdraw consent previously given. Statutory retention periods remain unaffected.
5. Plugins and Tools
Vimeo
This website may embed videos from the provider Vimeo.
Provider:
Vimeo.com, Inc.
330 West 34th Street, 10th Floor
New York, NY 10001
USA
When you access a page with an embedded Vimeo video, a connection to Vimeo servers may be established. In doing so, Vimeo may process, in particular, your IP address, technical information about your browser and device, and information about the page you visited.
If you are logged into your Vimeo account, Vimeo may associate your user behaviour with your personal profile. You can prevent this by logging out of your Vimeo account.
Vimeo may use cookies or comparable technologies.
Vimeo is used in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Where corresponding consent is requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG, insofar as the consent covers the storage of information on your device or access to information on your device. Consent may be withdrawn at any time with effect for the future.
Further information can be found in Vimeo’s privacy policy:
https://vimeo.com/privacy
According to Vimeo, data transfers to the USA are based, among other things, on the EU-US Data Privacy Framework and, where necessary, on other appropriate safeguards.
Google Fonts, Local Hosting
This website uses Google Fonts for the uniform display of fonts, which are integrated locally on our servers or as part of our website hosting.
No connection to Google servers is established. To our knowledge, no personal data is transmitted to Google in connection with the use of locally integrated Google Fonts.
Google reCAPTCHA
We use Google reCAPTCHA on this website.
Provider:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
reCAPTCHA is used to verify whether data entered on this website, for example in a contact form, is entered by a human or by an automated program. This is intended to protect the website against abusive automated use, spam and attacks.
For this purpose, reCAPTCHA may process various information, for example IP address, technical browser and device information, length of stay, user interactions and cookies or comparable technologies. This analysis may take place in the background.
Processing is carried out, where technically necessary, on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in protecting our website against misuse, automated scraping and spam.
Where consent is required and requested, processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent may be withdrawn at any time with effect for the future.
Further information can be found in Google’s privacy policy and terms of service:
https://policies.google.com/privacy
https://policies.google.com/terms
According to Google, data transfers to the USA are based, among other things, on the EU-US Data Privacy Framework and, where necessary, on other appropriate safeguards.