Note: If you would like to opt-out from Google Analytics, please click on the following link:
Disable Google Analytics
Except where otherwise noted, this Policy applies to all services, including consulting services, and websites offered by 180 Degrees Consulting Hamburg. In this Policy we refer to the services and websites provided by 180 Degrees Consulting Hamburg collectively as the “Service”.
Our Data Protection Policy is based on the principles of the General Data Protection Regulation (2016/679/EU) (the GDPR).
“personal data” means any information relating to an identified or identifiable natural person, including that data described in the “What personal data we collect about you” section below.
By accepting the terms of this Policy, you agree that you understand and accept the collection, usage, storage, and disclosure of your personal data as set out in this Policy. You may withdraw this consent at any time by emailing us using the contact details in the “How to contact us” section below.
This Policy describes:
- who we are
- what personal data we collect about you
- how we obtain your personal data
- the lawful bases for processing your personal data
- how we use your personal data
- who we share your personal data with
- which countries we transfer your personal data to
- how long we keep your personal data
- how we protect your personal data
- your rights regarding your personal data
- how to contact us
Who we are
180 Degrees Consulting is an international volunteer organisation that provides consultancy services. We have a presence in a number of countries around the world and a Global Leadership Team office based in Sydney, Australia. Any information that you provide to 180 Degrees Consulting may be shared with and processed by any entity in the global network of 180 Degrees Consulting and the associated branches. The branches list can be found here: https://180dc.org/branches/.
We are one of the official 180 Degrees Consulting branches, being located in Hamburg, Germany. Any information that you provide to us may be shared with and processed by any entity in the global network of 180 Degrees Consulting and our associated branches. You can contact us at any time using the contact details in the “How to contact us” section below.
What personal data we collect about you
We may collect personal data from you in the normal course of our business. This includes our interactions with you through our mailing list, your use of our website, when you contact or request information from us, when you apply for a position within our branch or when you employ our consulting services.
The personal data we may process includes:
- basic information that you provide to us by filling in forms on our website, for example your name and email address;
- information you provide to us for the purposes of attending consultations, meetings and events, including access and dietary requirements;
- contact information, such as email address(es) and phone number(s);and
- any other information you submit to us via our website or via email.
180 Degrees Consulting Hamburg may also receive data from 180 Degrees Consulting such as:
- basic information that you provide to 180 Degrees Consulting by registering for an account or filling in forms on 180 Degrees website, for example your full name, date of birth, nationality and the university you attend;
- contact information, such as your physical or postal address, email address and phone number(s);
- financial information, such as credit card or any other billing information;
- information you provide to 180 Degrees Consulting in the course of recruitment, for example when you apply for a volunteer position at one of the associated branches, including any reference letters, transcripts or curriculum vitae, or anything of a similar nature;
- technical information, such as information from your visits to our website or applications or in relation to materials and communications we send to you electronically, including our mailing list;
- information you provide to us for the purposes of attending consultations, meetings and events, including access and dietary requirements; and
- any other information you submit via the website or email of 180 Degrees.
We only collect personal data that is necessary for us to perform our Service. Accordingly, if you choose not to provide your personal data, this may prevent us from providing our Service to you.
We do not knowingly collect or solicit personal data from anyone under the age of 16. In the event that we learn that we have collected personal data from a child under age of 16, we will delete that personal data as quickly as possible. If you believe that we might have any personal data from or about a child under 16, please contact us using the details in the “How to contact us” section below.
How we obtain your personal data
When you use our Service, we may collect and process personal data from you in two ways: directly from your input and automatically from your use.
Directly from your input
We collect and process personal data that you directly input by:
- gathering information about you when you provide it to us, or interact with us directly, for example when you engage with our volunteer consultants, you register on one of our digital platforms or another one of our applications or you apply for a position with us;
- collecting or receiving information about you from other sources, such as keeping the contact details we already hold for you accurate and up to date using publicly available sources;
- collecting information from you as part of our consulting service processes and about you and others as necessary in the course of providing those services.
Automatically from your use
We also collect certain data that tells us how you use the Service, including:
- anonymized internet protocol addresses used to connect your computer to the internet;
- computer, device and connection information, such as browser type and version, operating system, mobile platform, unique device identifier and other technical identifiers;
- uniform resource locator (URL) click stream data, including date and time stamp, referring and exit URLs, search terms you used and pages you visited or searched for on our website;
The lawful bases for processing your personal data
We will only collect and process personal data about you where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you e.g. to deliver consultancy services that you have requested) and “legitimate interests”.
“Legitimate interests” includes our legitimate interests or the legitimate interests of third parties, provided that such processing will not outweigh your rights and freedoms. Examples of legitimate interests bases for processing your personal data include processing your personal data to:
- protect you, us, or others from threats (such as security threats or fraud);
- comply with laws that apply to us;
- enable us to administer our business, such as for quality control, consolidated reporting, and customer service;
- manage corporate transactions, such as mergers or acquisitions;
- help us understand and improve our business or customer relationships generally.
Where we rely on your consent to process personal data, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object. If you have any questions about the lawful bases upon which we collect and use your personal data, please contact us using the details in the “How to contact us” section below.
How we use your personal data
We may use the personal data that we collect from you for a number of different purposes, including:
- to provide information for and to improve our website, including monitoring its use;
- to provide and improve our services to you and to our clients, including handling the personal data of others on behalf of our clients;
- to provide information requested by you, including promotional information such as newsletters, updates, publications and details of events, where you have consented to receiving this information by explicitly accepting the terms of this Policy;
- to manage and administer our relationship with you and our other clients;
- for the purposes of recruitment.
We may use and disclose personal data that does not reveal your identity or permit direct association with any specific individual, such as browser and device information, anonymous usage data and aggregated information, for any purpose, except where we are restricted by law. When we combine non-personal data with personal data, the combined data will be treated as personal data for as long as it remains combined.
We will only use, disclose, or otherwise process your personal data when there is a genuine reason to do so for a permitted purpose.
The following website does not store and recruitment-related information. All the potential candidates are redirected to https://180dc.org/apply/hamburg. The submitted data is stored by 180 Degrees Consulting and shared with us in order to assess your candidacy. This data will be used only for that purpose.
Marketing and other emails
From time to time, we may send you newsletters or other information relating to our Service. If you wish not to receive such communications, you may contact us using the details in the “How to contact us” section below. Our electronic communications also include an “unsubscribe” link which will enable you to opt out of receiving further marketing and promotion materials.
Meetings and events
We will collect and process personal data about you in relation to your attendance at meetings, conferences and other events that we organize. We will only process and use special categories of personal data about your dietary or access requirements in order to cater for your needs and to meet any other legal or regulatory obligations we may have. In order to do this, we may share your personal data with other service providers or business partners involved in organizing or hosting the relevant event.
The Service may contain features or links to web sites and services provided by third parties. Any personal data you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Service. We are not responsible for the content or privacy and security practices and policies of those third-party sites or services to which links or access are provided through the Service. We encourage you to learn about those third parties’ privacy and security policies before providing them with personal data.
Who we share your personal data with
While we do share the collected data with 180 Degrees, we and 180 Degrees do not rent, sell or otherwise make your information or personal data available to others, except with your prior permission.
While it is unlikely, we may be required to disclose personal data or other information by law or in our good-faith belief that such action is necessary to comply with applicable laws, in response to a valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies. We also reserve the right to disclose personal data or other information that we believe, in good faith, is appropriate or necessary to:
- take precautions against liability
- comply with legal or regulatory requirements
- protect ourselves or others from fraudulent, abusive, or unlawful uses or activity
- investigate and defend ourselves against any third-party claims or allegations
- protect the security or integrity of the Service and any facilities or equipment used to make the Service available
- protect our property or other legal rights, enforce our contracts, or protect the rights, property, or safety of others
We will use reasonable endeavours to notify you before we do this, unless we are legally restricted from doing so.
Which countries we transfer your personal data to
In order to provide the Service, your personal data may be transferred to and stored in servers and facilities located outside of the country in which you provide it, which may have different personal data protection rules than your country. When we transfer your personal data, we take steps to ensure that your information remains protected as required by this Policy and applicable law, including through the use of binding written contracts.
How long we keep your personal data
We will retain your personal data for as long as needed to:
- provide our Service
- comply with our legal obligations
- resolve disputes
- enforce our agreements
The periods for which this personal data is retained are based on the requirements of applicable data protection laws and the purpose for which the information is collected and used, taking into account legal and regulatory requirements to retain the information for a minimum period, limitation periods for taking legal action, good practice and 180 Degrees Consulting Hamburg’ business purposes.
How we protect your personal data
Your personal data is managed in line with international best practice. We use a variety of technical and organisational measures to help protect your personal data from unauthorized access, use, disclosure, alteration or destruction consistent with applicable data protection laws.
We may store your personal data with certain trusted third parties and in locations outside our direct control. We use third-party SaaS providers such as Google (Google Suite), Microsoft (SharePoint), and LimeSurvey GmbH (LimeSurvey). These organizations may operate independently from us and have their own privacy policies, which we strongly advise you to review.
The protection of your privacy and personal data is of the utmost concern to us. However, no method of transmission over the Internet, or method of electronic storage, is completely failsafe and secure. We cannot ensure or warrant the security of any personal data you transmit to us or store on the Service, and you do so at your own risk. We also cannot guarantee that such personal data may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. If you believe your personal data has been compromised, please contact us using the details in the “How to contact us” section below.
Your rights regarding your personal data
The GDPR and other applicable data protection laws provide you with certain rights in relation to your personal data, as follows:
- Delete personal data: you can ask us to erase or delete all or some of your personal data (e.g. if it is no longer necessary to provide the Service to you).
- Change or correct personal data: you can ask us to amend or correct any personal data, especially if it’s inaccurate.
- Object to, or limit or restrict, use of personal data: you can ask us to stop using all or some of your personal data or to limit our use of it. You can also stop transfers of your personal data to a third party.
- Right to access and/or take your personal data: you can ask us for a copy of your personal data and also a copy of all personal data that you have provided to us in machine readable form. You can also ask us for details of how we process your personal data.
- File a complaint: you can file a complaint in relation to 180 Degree Consulting Hamburg’s processing of your personal data with a local supervisory authority in the EU.
- If you object to the processing of your personal data, or if you have provided your consent to processing and you later choose to withdraw it, we will respect that choice.
- Your objection (or withdrawal of any previously given consent) could mean that we are unable to perform the actions necessary to achieve the purposes set out above or that you may not be able to make use of the Service.
How to contact us
Please contact us with any questions or comments about this Policy, your personal data, our use and disclosure practices, or your consent choices by email at firstname.lastname@example.org. We must ensure that your personal data is accurate and up to date. Therefore, please advise us of any changes to your personal data by emailing us at the address above.