Certified engineers
All certificates here
Call us at
+49 228 - 97458293

Privacy Policy

Controller
Kühn Geoconsulting GmbH
Auf der Kaiserfuhr 39
D-53127 Bonn, Germany

Managing Directors: Peter Hollmann, Stefan Oesinghaus und Jörg Kimich
Phone: +49 228 – 97458293
E-Mail: info@geoconsulting.de
Complete legal information:: http://geoconsulting.pt/imprint-data-privacy
The Controller is hereinafter also referred to as „we“ or „us“.

 

Description of our services and objectives
Geotechnical surveying services (including environmental and construction surveys), consulting and expert opinions.

 

Type of processed data:

  • Inventory data (e.g., customer master data, such as names, addresses).
  • Contact details (e.g., e-mail, phone numbers).
  • Content Data (e.g., text input, photographs, videos).
  • Contract Data (e.g., subject matter of the contract).
  • Payment Data (e.g., bank details, payment history).
  • Usage Data (e.g., interests, websites visited, purchasing behaviour, access times, log Data).
  • Meta/communication Data (e.g., device IDs, IP addresses, location data).

 

Processing of special categories of Data (Art. 9 (1) GDPR)
No special categories of Data are processed.

 

Categories of data subjects

  • Customers / prospective customers / business partners.
  • Visitors and users of the online service.

In the following, we will also summarise the data subjects as „users“.

 

Purpose of Processing

  • Provision of our services, its contents and functions.
  • Server hosting, domain registration, Software-as-a-Service (SaaS) services
  • Provision of contractual services, customer care and support.
  • Response to contact requests and communication with users.
  • Marketing, advertising and market research.
  • Security measures.

 

Automated individual decision-making (Art. 22 GDPR):
We do not use exclusively automated individual decision-making.

 

As of: May 2018

 

Rights of Data Subjects
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the further information and a copy of the data in accordance with Art. 15 GDPR.

You have correspondingly. In accordance with Article 16 of the GDPR, the right to obtain from the controller the rectification of inaccurate personal data concerning you, or the completion of the data concerning you.

In accordance with Art. 17 GDPR, you have the right to demand that relevant data be erased without undue delay or, alternatively, to demand a restriction of the processing of the data in accordance with Art. 18 GDPR.

You have in accordance with Art. 20 GDPR the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

In accordance with Art. 77 GDPR, you also have the right to file a complaint with a supervisory authority.

 

Right of Withdrawal
You have the right to withdraw consents granted pursuant to Art. 7 (3 GDPR with effect for the future.

 

Right to Object
You can object to the future processing of the data concerning you in accordance with Art. 21 GDPR at any time. The objection may be lodged in particular against processing for direct marketing purposes.

 

Cookies and Right to Object in Direct Marketing
We use temporary and permanent cookies, i.e. small files that are stored on the user’s devices (for the explanation of the term and function, see last section of this Privacy Policy). In part, cookies serve security purposes or are required for the operation of our online services (e.g., for the appearance of the website) or to save the user’s decision when confirming a cookie banner. In addition, we or our technology partners use cookies to measure the reach and for marketing purposes, about which the users will be informed in the scope of the Privacy Policy.

If users do not want cookies to be stored on their computer, they are advised to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online services.

An objection to the use of cookies used for online marketing purposes can be declared for many of the services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/.

 

Solely Automated individual decision-making
In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based exclusively on automated processing – including profiling – which has legal effect concerning you or similarly significantly affects you.
We inform you that we do not use exclusively automated individual decision-making.

 

Erasure of data and archiving obligations
The data processed by us will be erased or its processing restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this Privacy Policy, the data stored by us will be erased as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it. If the data are not erased because they are necessary for other and legally permissible purposes, their processing is restricted. This means that the data is excluded and not processed for other purposes. This applies, for example, to data that must be retained for commercial or taxation reasons.

In accordance with statutory provisions in Germany, the records are kept in particular for 10 years in accordance with Sections 147 (1) German Financial Act (AO) , Sections 257 (1) No. 1 and 4, (4) German Commercial Code (HGB) (books, records, management reports, accounting documents, trading books, documents relevant to taxation, etc.) and for 6 years in accordance with Sections 257 (1) No. 2 and 3, (4) HGB (commercial letters).

 

Changes and Updates to this Privacy Policy
We ask you to keep yourself regularly informed about the contents of our Privacy Policy. We will adapt the Privacy Policy as soon as any changes in data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

 

Relevant Legal Basis for the Processing;
In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not explicitly stated in the Privacy Policy, the following applies: The legal basis for obtaining consents is Art. 6 (1)) a and Art. 7 GDPR, the legal basis for processing for the performance of our services and performance of contractual measures as well as for answering inquiries is Art. 6 (1)) b GDPR, the legal basis for processing to fulfil our legal obligations is Art. 6 (1)) c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 (1)) f GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

 

Security of Data Processing
We shall take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons; the measures include in particular ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, integrity and pseudonymity. Furthermore, we have established procedures that guarantee the assertion of data subjects‘ rights, the erasure of data and the response to data hazards. Furthermore, we already consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection by design of technology and by data protection-friendly presettings (Art. 25 GDPR).

The security measures include in particular the encrypted transmission of data between your browser and our server.

Employees are bound to confidentiality with regard to data protection, are instructed, monitored, and informed of possible liability consequences.

 

Disclosure and Transmission of Data
If we disclose data to other persons and companies (processors or third parties) within the scope of our processing, transfer the data to them or otherwise grant them access to the data, this will only be carried out on the basis of a legal permission (e.g. if a transfer of the data to third parties, such as to payment service providers, is required for contract fulfilment pursuant to Art. 6 (1),) b GDPR), if you have consented, if a legal obligation requires this or on the basis of our legitimate interests (e.g. when using agents, web hosting services, etc.).

If we commission third parties with the processing of data on the basis of a so-called “ Data Processing Agreement“, this is done on the basis of Art. 28 GDPR.

If we disclose, transfer or otherwise grant access to data to other companies in our Group of Companies (Undertakings), this is done in particular for administrative purposes as a legitimate interest and in addition on the basis of a Data Processing Agreement.

 

Transfers to Third Countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transmission of data to third parties, this only takes place if it is necessary to fulfil our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or let the data being processed in a third country only if the special requirements of Art. 44 ff. GDPR are met. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognised adequate data protection level corresponding to the EU (e.g. for the USA by the „Privacy Shield“) or compliance with officially recognised special contractual obligations (so-called „Standard Contractual Clauses“).

 

Processing of Data within the Course of the Performance of Contractual Services
We process the data of our customers within the scope of our contractual services, which include surveying services, consulting and expert activities, as well as the services associated with these services.

The processed data includes inventory data (e.g., names and addresses as well as contact data of customers) and contract data (e.g., services used, names of contact persons, payment information) of our customers for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 (1) b. GDPR.

Where we process location-based data in the course of our activities, this shall be done anonymously or only to the extent necessary for the performance of our contractual obligations, otherwise only with the consent of the data subjects concerned.

The data is deleted after the expiry of statutory warranty and comparable obligations, the necessity of data storage is reviewed every three years; in the case of statutory archiving obligations, the data is deleted after their expiry (end of commercial law (6 years) and tax law (10 years) storage obligation).

 

Administration, Financial Accounting, Office Organization, Archiving
We process data in the course of administrative tasks as well as the organisation of our company, financial accounting and compliance with legal obligations, e.g. archiving. We process the same data that we process as part of the performance of our contractual services. The processing bases are Art. 6 (1) c. GDPR, Art. 6 (1) f., Art. 28 GDPR. Data subjects are affected by the processing: customers, interested parties, business partners and website visitors. The purpose of the processing is the administration, financial accounting, office organization, archiving of data that serve the maintenance of our company and our services.

We disclose or transmit data to the tax authorities, tax consultants, auditors, other fee offices, legal advisors and payment service providers.

The deletion of the data with regard to contractual services and contractual communication corresponds to the information provided in these processing activities.

Furthermore, we store information on business partners, customers and prospects on the basis of our business interests, e.g. for the purpose of making contact at a later date. We store this data, which is mainly company-related, permanently.

 

Economic Analyses and Market research
in order to operate our business economically and to identify market trends, customer and user wishes, we analyse the data available to us on business transactions, contracts, inquiries, etc., in order to ensure that we are able to offer our customers the best possible service. We process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 (1) f. GDPR, whereby the persons concerned include customers, prospective customers, business partners, visitors and users of our online service. The analyses are carried out for the purpose of economic evaluations, marketing and market research. The analyses serve us to increase the user-friendliness, the optimization of our offer and the economic efficiency. The analyses serve us alone and are not disclosed externally, unless they are anonymous analyses with aggregated values.

If these analyses or profiles are personal, they will be deleted or made anonymous upon cancellation of the contractual relationship, otherwise after three years from the conclusion of the contract. For the rest, macroeconomic analyses and general trend determinations are prepared anonymously wherever possible.

 

Contact and Customer Service
When contacting us (via contact form or e-mail), the user’s details will be processed for processing the contact request and its handling in accordance with Art. 6 (1) b./ f. GDPR.

User information may be stored in our Customer Relationship Management System („CRM System“) or comparable request organization.

15.3 Outside of existing customer relationships, we will delete the requests if they are no longer necessary. Within customer relations we store the data for their duration; we check the necessity of the storage every three years; furthermore, the legal archiving obligations apply.

 

Collection of access data (logfiles)
For the purposes of our legitimate interests, we collect data every time the server on which the service is located is accessed. This data is collected in the form of server log files. These access logs include the name of the webpage and/or file accessed by the User, the date and time of access, the amount of data transferred, notification of successful retrieval, details of the web browser used (including the version), the User’s operating system, the referrer URL (of the previous page linking to our website), the IP address and the requesting provider.

Log file information is retained for security reasons (e.g. to detect improper use or fraud) for a maximum of seven days before being deleted. Data that is to be retained as evidence shall be excluded from deletion until the relevant case has been finalized.

 

Google Analytics
For the purposes of our legitimate interests (i.e. our interest in analysing, optimizing and running our Websites in a commercially viable manner within the meaning of Art. 6 (1) f. of the General Data Protection Regulation (GDPR), we use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by cookies concerning the use of the Websites by the User will generally be transmitted to and stored by Google on servers in the USA.

Google is certified under the Privacy Shield framework which offers a guarantee of compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf for the purpose of evaluating use of our Websites by the User, compiling reports on activity on the Websites, and providing us with other services relating to the use of the Websites and use of the Internet. This process may involve creating pseudonymized usage profiles of Users from the processed data.

We use Google Analytics to display the ads placed by Google and its partners within advertising services, only to those users who have shown an interest in our online offers or who have particular characteristics (e. g. interests in certain topics or products determined by the websites visited) that we transmit to Google (so-called Remarketing or Google Analytics audiences). With the help of remarketing audiences, we would also like to ensure that our advertisements are in line with the potential interest of the users and do not have a nuisance effect.

We only use Google Analytics with IP anonymization enabled. That means Google truncates the User’s IP address within Member States of the European Union and in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

The IP address transmitted by the User’s browser is not associated with any other data held by Google. Users can prevent cookies from being installed on their computer by adjusting their browser settings accordingly. Users can also prevent Google from collecting data generated by cookies concerning their use of the Websites and can prevent Google from processing this data by downloading and installing a browser plug-in from the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

Further information on Google’s use of data for marketing purposes can be found on the overview page: https://policies.google.com/technologies/ads Google’s data protection declaration can be accessed at https://policies.google.com/privacy.

If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated.

Personal data will be made anonymous or deleted after a period of 14 months.

 

Google Conversion und Advertising Display Services
For the purposes of our legitimate interests (i.e. our interest in analysing, optimizing and running our Websites in a commercially viable manner within the meaning of Art. 6 (1) f. of the GDPR), we use the Google’s conversion und advertising Display, marketing and remarketing services (hereinafter referred to as “Google marketing services”) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, (“Google”).

Google is certified under the Privacy Shield framework which offers a guarantee of compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google marketing services enable us to display ads for and on our website in a more targeted fashion, helping us to only show ads to Users that are potentially of interest to them. The method we use, known as remarketing, involves, for example, showing Users ads for products in which they have already shown an interest on other websites. For this purpose, our Websites – and other websites on which Google marketing services are active – contain a snippet of code, which is executed directly by Google. This integrates what are known as (re)marketing tags in the website (invisible image files or code, also known as web beacons). With the help of these tags, an individual cookie, i.e. a small file, is saved on the User’s device (comparable technologies may also be used instead). These cookies may be set from a few different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com and googleadservices.com. This file notes which sites the User visits, which content interests the User, and which offers he or she clicked, as well as technical information on the browser and operating system, referring websites, visit duration and other data on the use of the Websites. The User’s IP address is also recorded, though we wish to make it clear that, within the context of Google Analytics, the IP address is truncated within European Union Member States and in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to the US-based Google server and truncated there. The IP address is not merged with User data within other Google offerings or services. The information referred to above may also be linked to comparable information from other sources. If the User subsequently visits other websites, they may be presented with ads tailored to them according to their interests.

User data is processed in a pseudonymized manner within the context of Google marketing services, i.e. Google does not store and process details such as the name or email address of the User, but instead processes the relevant data within pseudonymized usage profiles based on cookies. This means that, from Google’s perspective, the ads are not managed for and displayed to a named or otherwise identifiable person, but rather for and to the cookie holder, regardless of who this cookie holder is. That is not, however, the case if a User has expressly granted Google permission to process their data in a non-pseudonymized manner. Information collected on Users by Google marketing services is transmitted to Google and stored on Google’s servers in the USA.

One of the Google marketing services we use is the online advertising service “Google AdWords”. In the case of Google AdWords, each AdWords client receives a different “conversion cookie”. Thus, cookies cannot be tracked across the websites of AdWords clients. The information collected by the conversion cookies is used to provide aggregate conversion statistics for AdWords clients who have opted in to conversion tracking. AdWords clients are informed of the total number of users who clicked on the ad and were forwarded to a conversion tracking tag page. However, they do not receive any information that would enable them to identify users personally.

Our Websites may contain third-party ads from the Google marketing service DoubleClick. DoubleClick uses cookies that enable Google and its partner websites to display ads based on User visits to this website and/or other websites on the Internet.

We use „Google Optimize“ a service that allows us to track the effects of various changes to a website (e. g. changes in input fields, design, etc.) within the framework of so-called „A/B tests“.

We may also use the Google Tag Manager to incorporate and manage Google analysis and marketing services in our Websites.

The data may be processed by Google for up to two years before it is anonymised or deleted.

Further information on Google’s use of data for marketing purposes can be found on the overview page: https://policies.google.com/technologies/ads Google’s data protection declaration can be accessed at https://policies.google.com/privacy.

If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated.

 

Omniconvert (A/B tests)
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 (1) f, GDPR) we use the service Omniconvert (https://www.omniconvert.com/, Marketizator Friends SRL, Strada Rondă 8, bis, București 030167, Romania) to improve the user-friendliness of our online service.

„A/B Tests“ serve to improve the user-friendliness and performance of our websites and offers. Omniconvert allows us to track the effects of various changes to our website as part of A/B tests (e.g. changes in input fields, design, etc.). For example, we present our users with different versions of a website on which the placement of content or labels on the navigation elements may differ. We can then determine which of these websites are more suited to the needs of the users on the basis of their behaviour, e.g. prolonged visits to the website or more frequent visits. Cookies can only be stored on the user’s devices for these test purposes. Only pseudonymous user data is stored and no personal data. Furthermore, all stored data will not be passed on to third parties. For more information, please see Omniconvert’s privacy policy: https://www.omniconvert.com/privacy.

If users do not want Omniconvert to record their usage behaviour, they can object to data collection by clicking on this link: https://geoconsulting.de/?mktz_optout=1.

 

Integration of third-party services and content
For the purposes of our legitimate interests (i.e. our interest in analysing, optimizing and running our Websites in a commercially viable manner within the meaning of Art. 6 (1) f. of the GDPR), we use third-party content and service delivery services on our Websites in order to incorporate content and services such as videos and fonts, for example (hereinafter jointly referred to as “content”). The third-party provider of this content always requires the User’s IP address in order to send the content to the browser of the respective User. In other words, the IP address is required to display this content. We endeavour only to use such content where the respective provider uses the IP address exclusively to deliver said content. Third-party providers may additionally use “pixel tags” (invisible image files, also known as web beacons) for statistical or marketing purposes. Pixel tags can be used to analyse information such as the number of visitors accessing the pages of this website. The pseudonymized information may additionally be stored on User devices in the form of cookies. This information includes technical information on the browser and operating system, referring websites, time spent on the website, and further details on how Users make use of our Websites, plus it can also be combined with comparable information from other sources.

The list below provides an overview of third-party providers and their content as well as links to their privacy policies, which contain further information on data processing and opt-out mechanisms, some of which have already been discussed here:



49 years
in the market

KÜHN Geoconsulting® GmbH is an independent consulting firm that has been active in the fields of subsoil consulting and remediation of contaminated sites for more than 49 years.


engineering quota
78%

With an engineering quota of 78 percent and a workforce of over 44 long-standing employees, we are in a position to serve even major projects reliably, on time and to the highest quality standards.


experience from 22.000 orders

With the experience from more than 22,000 orders, from single-family homes to high-rise office buildings, our employees develop professional, customer- and practice-oriented solutions.


Certified
engineers

Certifications and further training are an integral part of our corporate culture, so that you always receive the best state-of-the-art solutions from us.


Excellent
References

Companies for which we have already completed projects and orders and who place their trust in us are HochTief, Deutsche Leasing, Vodafon or the city of Cologne. This is only a small selection. Feel free to ask us for further references.

Geoconsulting

Geoconsulting