This Privacy Statement was last updated in June 2021.
It sets out the data protection practices carried out through the use of the Internet and any other electronic communications networks by BearingPoint Holding BV and its associated companies (all together “BearingPoint”; “we”, “us”) and with respect to https://www.bearingpoint.com, hcube.io, ministerialkongress.de, ps.bearingpoint.com, bearingpoint.services/ and other BearingPoint websites, applications and online services that link to this website privacy statement (together referred to as the “Site”).
We may provide a separate privacy statement in connection with certain websites and applications that we offer, and where we do so, such privacy statement will apply to our collection and use of personal information collected through such websites and applications.
A full list of our main offices can be found at https://www.bearingpoint.com/en-gb/locations/ whereas we are not responsible for our member firms in Portugal and in Russia; they are allowed to use “BearingPoint” in the name under limited license but from a data protection perspective both member firms are Controllers themselves for their processing activities.
1.1 BearingPoint collects personal information from you through the use of registration forms, for instance every time you sign up for an electronic newsletter, when you send us an application to be considered for employment, when you register for an event, when you submit a request for proposal or for information, when you request the authorization of downloading a document, when you enter an online competition or when you send us a message via an email reply mechanism provided on the BearingPoint sites.
We use a customer relation management system (the BearingPoint CRM) to store personal information about our business contacts. We collect and use business contact details for individuals associated with existing and potential BearingPoint clients to manage and maintain our relationship with those individuals.
2.1 We process personal information collected via the BearingPoint sites for the purposes of:
3.1 When you visit one of the BearingPoint sites, we collect information automatically about those visits.
3.2 In particular, your browser automatically sends us certain Internet-related information, such as the Internet Protocol (IP) address of the computer you are using.
3.4 BearingPoint uses Google Consent Mode on its websites, an interface (API) that allows the website to run Google Analytics based on your consent. Your consent determines how deeply we process your company data and set cookies.
If you do not give your consent for tracking via Google Analytics ("analytics_storage:denied"), all data will be collected anonymously. Data will only be collected in aggregated form.
Furthermore, a second functionality ("ad_storage:denied") can be used to prevent advertising cookies from being set or read. Google Consent Mode then works on the basis of consent status, e.g. displaying contextual advertising on your website without using personal data if the user has not consented to the marketing cookies.
Only anonymised aggregated data is transmitted to Google and us. We evaluate this data only for web statistics. A personal reference can no longer be made.
3.6 Google Analytics 4.
BearingPoint also uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on its websites. In order to protect your data as best as possible, the version “Google Analytics 4” (GA4, anonymized tracking, cookieless tracking) is used. Thus, only anonymized aggregated data is transmitted to us, which we evaluate for web statistics and therefore want to improve our offer. No individual profiles are created, but rather user groups. A personal reference can no longer be established.
GA4 uses IP address anonymization by default, which cannot be deactivated. Lawful cookies have a duration of 2 months.
The legal basis for the use of GA4 and the resulting coverage measurement is the legitimate interest (Art. 6 (1) lit. f GDPR).
The collected data may be transmitted to Google in Europe, or also to Google servers in the USA. BearingPoint has no influence on the data transfer to Google. Furthermore, BearingPoint has no influence on whether Google can draw conclusions about your person.
3.7 CleanTalk anti-spam check
We use the "CleanTalk" service, which protects the Site from spam when a data entry on a Site is done (for example in a contact form). The legal basis is the legitimate interest (Art. 6 (1) lit. f GDPR.
For security reasons and as protection against spam, your data is processed in the CleanTalk Cloud Service and stored in log files for a maximum of 45 days. After expiry of the aforementioned period, this data will be completely deleted. CleanTalk may use information about spam activity from IP or email addresses to provide appropriate anti-spam protection to all websites connected to its service.
4.2 This website uses Hotjar, an analysis software from der Hotjar Ltd. („Hotjar“) (https://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). Hotjar makes it possible to measure and analyse user behaviour (clicks, mouse movements, scrolling, etc.) on our website. The tracking code and cookie generate data about your visit to our website, which is then transmitted to the Hotjar server in Ireland and stored there. The tracking code collects the following data:
Hotjar will use this information to analyse your use of our website, compile reports on usage, and provide further services connected with use of the website and the internet. To this end, Hotjar also uses the services of third parties such as Google Analytics and Optimizely. These third parties may store data that is sent by your browser when you visit the website, such as cookies or IP requests. Please consult the data privacy statements of Google Analytics and Optimizely for more information about how data is stored and used.
By using this website you declare your consent to the above-mentioned processing of the data collected by Hotjar and its third-party service providers as specified in their data privacy statements.
The cookies used by Hotjar have different lifetimes. Some may remain valid for up to 365 days while others expire after the current visit.
If you do not wish data to be collected by Hotjar, please click here and follow the instructions: https://www.hotjar.com/legal/compliance/opt-out
4.3 Furthermore, when browsing the BearingPoint website you may get access to embedded media and other external sources which may store cookies. As cookies from externally embedded media may be used or modified without BearingPoint’s knowledge or consent, you are invited to consult the following links for further information.
|Media||Link to their privacy statement|
4.5 The "help" portion of the toolbar on most Internet browsers will tell you how to change your browser cookie settings, including how to have the browser notify you when you receive a new cookie, and how to disable cookies altogether. For further information about cookies and how to control their use, please visit the following third party educational resources: www.allaboutcookies.org.
5.1 We will only disclose personal information to other companies within our group of companies, business partners, government bodies and law enforcement agencies, successors in title to our business and suppliers we engage to process data on our behalf. In these circumstances we will share your personal information for purposes such as our legitimate business purposes and to comply with legal obligations.
6.1 This Privacy Statement applies only to information collected by a BearingPoint site.
6.2 BearingPoint sites contain links to other sites that are not owned or administered by BearingPoint. Please be aware that BearingPoint is not responsible for the privacy practices of such other third party sites. We encourage you to read the privacy statements of every Website you visit.
7.1 We maintain safeguards to protect against unauthorized disclosure, use, alteration, or destruction of the personal information you provide to us through the BearingPoint sites. Please note, however, that perfect security does not exist on the Internet. Therefore, while we endeavour to protect your personal data, when data is transferred over the Internet it may potentially be accessed and used by unauthorised parties.
8.1 We want to make sure that any information we hold on you is up to date and correct. You can request from BearingPoint information in particular pursuant to Art. 15 to 18, 21 GDPR, as to your personal data held by us as a controller, the purpose of the storage and obtain certain other information about how and why we process your personal data. Furthermore, and within the legal framework, you have the right to request for your personal data to be amended or rectified where it is inaccurate, the right to restrict our processing of your personal data and the right to obtain deletion of your personal data. If you have any requests concerning your personal information BearingPoint holds about you , to obtain a copy or any queries with regard to these practices please contact us at the contact listed below:
BearingPoint Data Protection Department
Group Compliance Officer
Fax: +49 30- 880041040
Design and maintenance of our websites by Electronic Minds GmbH, Feldbergstr. 80, 64293 Darmstadt, Germany. The webserver is hosted by aiticon GmbH Stephanstraße 1, 60313 Frankfurt, Germany.
10.1 Given that the Internet is a global environment, using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Therefore, by browsing the BearingPoint sites and communicating electronically with us, you acknowledge our processing of personal data in this way. However, we will endeavour to protect all personal information collected through the BearingPoint sites in accordance with strict data protection standards.
We reserve the right to amend this Statement at any time without advance notice in order to address future developments of BearingPoint, the Website or changes in industry or legal trends. We will post the revised Statement on the Website or announce the change on the home page of the Website. You can determine when the Statement was revised by referring to the "Last Updated" date on the top of this Statement. Any changes will become effective upon the posting of the revised Statement on the Website. By continuing to use the Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Statement, in whole or part, you can choose to not continue to use the Website.
If you have any general questions or concerns about how we process personal information please contact us at email@example.com