Privacy Protection

In the course of using this website, we process your personal data as the controller responsible for data processing and store it for as long as is necessary to fulfill the specified purposes and legal obligations. Below, we inform you about what data is involved, how it is processed, and what rights you have in this regard.

Pursuant to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), personal data means any information relating to an identified or identifiable natural person.

 

1. Name and Contact Details of the Controller and Data Protection Officer

This privacy information applies to the processing of personal data on the website www.zipcon.de by the controller:

zipcon consulting GmbH
Am Buchenhain 4
45239 Essen
Germany

E-mail: info@zipcon.de
Phone: +49-201-81175-0
Fax: +49-201-81175-22

(hereinafter: “Zipcon”)

If you have any questions regarding data protection, you may also contact the following office at any time:

Data Protection Officer
c/o zipcon consulting GmbH
Am Buchenhain 4
45239 Essen
Germany

E-mail: datenschutz@zipcon.de

 

2. Processing of Personal Data on Our Website

The following section explains the processing operations involving personal data that occur when you visit our website and use its functions.

Cookies

We use cookies on our website. These are small files that your browser automatically creates and stores on your device (e.g. laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.

The cookie stores information that arises in connection with the specific device being used. However, this does not mean that we thereby obtain direct knowledge of your identity.

On the one hand, cookies are used to make the use of our services more convenient for you. We use so-called session cookies to recognize that you have already visited individual pages of our website.

In addition, we use temporary cookies to optimize user-friendliness. These are stored on your device for a specified period of time. When you visit our website again in order to use our services, the system automatically recognizes that you have already visited us and which entries and settings you have made, so that you do not have to enter them again.

These are generally cookies that we require for the correct and secure display and functionality of our website. The data processed by these cookies is necessary for the stated purposes to safeguard our legitimate interests pursuant to Art. 6(1)(f) GDPR and is technically necessary pursuant to Section 25(2) No. 2 TDDDG.

On the other hand, we use cookies to collect statistical information about the use of our website and to evaluate such information for the purpose of optimizing our services (see the “Tracking” section of this privacy information). We use these cookies on the basis of your consent pursuant to Art. 6(1)(a) GDPR for the processing of personal data and pursuant to Section 25(1) TDDDG for their technical deployment. You can give your consent via our cookie banner when you first access the website and subsequently at any time via the cookie settings. For our cookie banner, we use the service provider Borlabs Cookie, operated by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. The legal basis for the use of the cookie banner is our legitimate interest in uniform and efficient consent management pursuant to Art. 6(1)(f) GDPR.

Most browsers automatically accept technically necessary cookies. However, you can configure your browser so that no cookies are stored on your computer or so that you are always notified before a new cookie is created. Completely disabling cookies may, however, result in you being unable to use all functions of our website.

When Visiting the Website

You can access the website www.zipcon.de without having to disclose your identity. In doing so, we process, in particular, the following data:

  • the IP address of the device making the request
  • date and time of access
  • browser type and browser version, as well as the operating system used
  • the page or resource accessed
  • the HTTP status code of the server response
  • the referrer URL, where applicable

 

The processing serves, on the one hand, to ensure the correct display of our content (e.g. the fonts used) and, on the other hand, to ensure the security and continued functionality of our website. At the same time, it enables us, where necessary, to trace any unlawful attacks on our website.

The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest arises from the aforementioned security interest as well as from the need to provide our website without disruption and to display its content correctly.

We host our website through the provider SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain. We use data centers in Frankfurt, Germany.

The data is temporarily stored in a so-called log file and is generally automatically deleted after 30 days.

In addition, we use cookies and analytics services when you visit our website. Further information is provided elsewhere in this privacy information.

General Contact

You can contact us by e-mail, telephone, fax, and via the contact form on our website.

In doing so, we process the content of your inquiry and your respective contact details in order to assign and process your inquiry.

If you request a callback, we process the data associated with this request.

This data processing is carried out in the context of responding to your contact inquiry on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. If your inquiry is related to a contract or the initiation of a contract, we process your data on the basis of Art. 6(1)(b) GDPR.

If you use our contact form, we also process your device information and use a so-called CAPTCHA to protect us against abusive inquiries (e.g. from bots). We base this processing on Art. 6(1)(f) GDPR, as we have a legitimate interest in protecting our systems. For this purpose, we use the provider Friendly Captcha, operated by Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, Germany.

The personal data collected by us through the use of the contact form will be deleted once your inquiry has been conclusively answered, provided that there are no statutory retention obligations preventing deletion. Data processed by the CAPTCHA service is generally deleted after 6 months, unless a security incident occurs.

Participation in Events as a Speaker, Workshop Bookings, etc.

If you would like us to participate in an event, for example as a speaker, or if you would like to book workshops or specialist consulting services relating to business development, you can contact us by e-mail. We process the data you provide as part of your inquiry. This includes, in particular, your contact and master data (e.g. name, address, e-mail address, telephone number) as well as booking-related information (e.g. selected event, number of participants, and other order-related information).

We process this data in order to handle your inquiry and provide the service. The legal basis is the performance of the contract concluded with you or the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

If payment is made in connection with the service, we process the payment data required for this purpose. The legal basis is likewise Art. 6(1)(b) GDPR. Where we are legally required to retain invoices and booking documents, we base the further processing on Art. 6(1)(c) GDPR.

We store your booking data for as long as necessary to provide the service. Once the service has been completed, your data will be deleted unless statutory retention obligations, in particular retention periods under commercial and tax law, prevent deletion.

Receipt of Information Material and Event Information by E-mail

You can receive information material from us. To this end, we offer a form on our website, and you can also contact us directly or register to receive such material when participating in events.

If you request information material via our website, the process is as follows: You must provide your contact information. You will then receive a download link for the information material at the e-mail address provided. We also process your device information when the PDF is downloaded.

We base this data processing on Art. 6(1)(f) GDPR. We have a legitimate interest in sending voluntarily requested information to identifiable recipients in the industry. If you participate in events at which we appear as a speaker or in a similar capacity, you may voluntarily register to receive information material and be contacted regarding the respective topics pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link at the end of each e-mail or by sending us a message.

There is also the option of subscribing to an e-mail distribution list for events relating to the subject matter of the information material. You will then receive information about events (presentations and masterclasses) by e-mail. For this purpose, your contact information is processed. In addition, after sending the e-mails, we process interaction data (e.g. opening and click behavior) in order to evaluate the performance of our e-mails and improve our content. The legal basis is your prior consent pursuant to Art. 6(1)(a) GDPR and, for the technical deployment, Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link at the end of each e-mail or by sending us a message.

Registration for receiving e-mails is carried out using the so-called double opt-in procedure. This means that after registering, you will receive an e-mail asking you to confirm your registration by clicking on a confirmation link. You will only be added to the distribution list after this confirmation. To document the proper registration, we record the time of registration and confirmation as well as the IP address used. We base this processing on our legitimate interest in being able to demonstrate your consent pursuant to Art. 6(1)(f) GDPR.

If you use the form to request information material, we also process your device information and use a so-called CAPTCHA to protect us against abusive inquiries (e.g. from bots). We base this processing on Art. 6(1)(f) GDPR, as we have a legitimate interest in protecting our systems. For this purpose, we use the provider Friendly Captcha, operated by Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, Germany.

Your device information following the download of the PDF is stored in the log file and routinely deleted after 30 days. Your contact details are stored for as long as you remain on the distribution list and provided that you interact with the e-mails received within a period of 12 months. After unsubscribing, your data will be deleted unless statutory retention periods prevent deletion. The registration and confirmation records are retained for the duration of any applicable limitation periods as evidence of your consent and are subsequently deleted. Data from the interaction analysis is aggregated and deleted.

Newsletter

You have the option of subscribing to our newsletter, which provides you with regular information about our activities.

For registration, we process your contact details, in particular your e-mail address, and, after sending the newsletter, additional interaction data (e.g. opening and click behavior) in order to evaluate the performance of our e-mails and improve our content. The legal basis is your prior consent pursuant to Art. 6(1)(a) GDPR and, for the technical deployment, Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link at the end of each e-mail or by sending us a message.

Registration takes place using the so-called double opt-in procedure. This means that after registering, you will receive an e-mail asking you to confirm your registration by clicking on a confirmation link. You will only be added to the distribution list after this confirmation. To document the proper registration, we record the time of registration and confirmation as well as the IP address used. We base this processing on our legitimate interest in being able to demonstrate your consent pursuant to Art. 6(1)(f) GDPR.

We store the data for as long as you have subscribed to the newsletter and have interacted with the e-mails received within a period of 12 months. After unsubscribing, your data will be deleted from the distribution list unless statutory retention obligations prevent deletion. The registration and confirmation records are retained for the duration of any applicable limitation periods as evidence of your consent and are subsequently deleted. Data from the interaction analysis is aggregated and deleted.

Podcast

We offer a podcast that you can listen to either via a web browser, e.g. on the beyond print website, or via common third-party platforms for which you must have your own account (e.g. Spotify, Amazon Music, Apple Podcasts). When accessing the podcast via a third-party website or platform, the respective controller processes your usage data; the privacy policies of the respective provider apply.

If you use a comment or rating function, we process the content you publish and the username displayed there in order to communicate with you. In addition, the platforms may provide us with statistical analyses (e.g. number of plays and listening duration), which are generally aggregated and cannot be attributed to individual persons. The respective legal basis is our legitimate interest in communicating with our listeners and improving our services pursuant to Art. 6(1)(f) GDPR.

The operators of the aforementioned platforms are: Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden, for Spotify; Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, for Apple Podcasts; and Amazon EU S.à r.l. and Amazon Media EU SARL, each at 38 avenue John F. Kennedy, L-1855 Luxembourg, for Amazon Music. For further information on data processing by the providers, in particular on the data collected from you and your rights, please refer to the privacy policies of the respective platforms.

When using the platforms, your data may be transferred to third countries outside the EU or EEA, in particular to the USA. The European Commission has adopted an adequacy decision for the USA, meaning that data transfers to appropriately certified companies can be considered secure. Amazon.com, Inc. is certified under the EU-U.S. Data Privacy Framework. Apple relies on intra-group safeguards and/or Standard Contractual Clauses for transfers to the USA. Spotify is operated by a company based in the EU/EEA (Sweden) and relies on the European Commission’s Standard Contractual Clauses for transfers to third countries that are not recognized as providing an adequate level of protection.

We store your comments for as long as they remain published on the respective platform. Statistical analyses are retained only for as long as necessary to analyze and improve our services.

Social Media

We maintain our own profiles on the social networks LinkedIn, Instagram, Facebook, YouTube, and X (formerly Twitter) in order to communicate with interested parties and provide information about our services. When you visit or interact with one of our profiles, the respective platform operator processes your personal data (in particular usage data) under its own responsibility; the privacy policies of the respective provider apply. We have no or only limited influence over this processing.

If you use the comment, messaging, or rating functions, we process the content you publish as well as the username displayed there in order to communicate with you and respond to your inquiries. The legal basis is our legitimate interest in communicating with our users pursuant to Art. 6(1)(f) GDPR. If your inquiry is related to a contract or the initiation of a contract, we process your data on the basis of Art. 6(1)(b) GDPR.

The platforms also provide us with statistical analyses (so-called Insights), such as the number of views and interactions with our content. These analyses are generally aggregated and do not allow direct conclusions to be drawn about individual persons. To the extent that personal data is processed in this context, we base such processing on our legitimate interest in measuring reach and improving our services pursuant to Art. 6(1)(f) GDPR.

For our Instagram and Facebook profiles, we are jointly responsible with the platform operator (Meta) for processing the data collected in connection with the Insights statistics function. In this respect, joint controllership exists pursuant to Art. 26 GDPR, which Meta explains in a separate agreement. In this case, you may exercise your rights both against us and against the platform operator. For other data processing carried out by the provider under its own responsibility – in particular for profiling and advertising purposes – the provider is solely responsible. For our YouTube and X profiles, the respective provider is responsible for the data processing carried out there; please refer to the respective provider’s privacy policy for further information.

The same applies to the operation of our LinkedIn company page. At LinkedIn, too, we are jointly responsible for the collection and compilation of Insights pursuant to Art. 26 GDPR. We accepted the joint controllership agreement by using the LinkedIn page. LinkedIn assumes the majority of the data protection obligations, including the fulfillment of data subject rights under Articles 15–22 GDPR as well as notification and reporting obligations in the event of data breaches. Requests concerning data subject rights are forwarded to LinkedIn without delay. As with Meta, the remaining data processing is carried out under the provider’s own responsibility.

The operators of the aforementioned platforms are: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, for Instagram and Facebook; Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, for YouTube; Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, for X; and LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, for LinkedIn. For further information on data processing by the providers, in particular on the data collected from you and your rights, please refer to the privacy policies of the respective platforms.

When using the platforms, your data may be transferred to the providers’ parent companies in third countries outside the EU or EEA, in particular to the USA. The European Commission has adopted an adequacy decision for the USA, meaning that data transfers to appropriately certified companies can be considered secure. The parent companies of the aforementioned providers are certified.

We store your comments and messages for as long as necessary to communicate with you or for as long as the content remains published on the respective platform. Otherwise, the storage period is determined by the requirements of the respective platform.

Video Elements

We embed videos from the YouTube platform on this website. The operator is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

We have activated YouTube’s enhanced privacy mode. This means that the content is only activated after consent has been given. If you activate an embedded video, your browser establishes a direct connection to YouTube’s and/or Google’s servers. In particular, your IP address is transmitted to the provider so that the video content can be delivered to your device. Information may also be stored on or read from your device (e.g. cookies). If you are simultaneously logged into your Google account, the provider may associate the page visit and your interaction with the video content with your account.

The purpose of the processing is the attractive presentation and provision of video content. The legal basis is your consent to the processing of personal data pursuant to Art. 6(1)(a) GDPR and to the technical deployment pursuant to Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.

As part of the processing based on your consent, your data is also transferred to Google’s servers in the USA and processed there. An adequate level of data protection applies to this transfer to a third country: by decision dated July 10, 2023, the European Commission determined that the EU-U.S. Data Privacy Framework provides an adequate level of protection. Google is certified under this framework, so the transfer may be based on this framework.

For further information on data processing and your rights, please refer to the provider’s privacy policy at https://policies.google.com/privacy.

The data is generally deleted after no more than 13 months.

Job Applications

If you apply for a position with us, we process the personal data you provide as part of the application process. This includes, in particular, your contact and master data (e.g. name, address, telephone number, e-mail address) as well as information and documents concerning you and your qualifications (e.g. cover letter, CV/resume, certificates, and other supporting documents you provide).

We process this data in order to decide whether to establish an employment relationship and to conduct the application process. The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Art. 6(1)(b) GDPR. Where we process your data in order to fulfill legal obligations, the legal basis is Art. 6(1)(c) GDPR.

If you voluntarily provide special categories of personal data within the meaning of Art. 9(1) GDPR in your application (e.g. information concerning a severe disability), we process such data exclusively for the exercise of rights and fulfillment of obligations under employment law on the basis of Section 26(3) BDSG. Otherwise, such data is only processed on the basis of your explicit consent pursuant to Art. 6(1)(a) and Art. 9(2)(a) GDPR, which you may withdraw at any time with effect for the future.

Your application data is generally accessible only to the departments and individuals within our company involved in the application process.

If an employment relationship is established, we will continue to process your data for the purpose of carrying out the employment relationship. Otherwise, we will delete your application data once a decision has been made regarding your application and provided that no statutory retention obligations prevent deletion. As a rule, we retain the data for a period of up to six months after completion of the application process in order to defend against any claims, in particular claims under the General Equal Treatment Act (AGG).

If you would like your application to be included in our applicant pool for future positions, we will store your data beyond the aforementioned period on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future.

Tracking

We use tracking services on our website to record and analyze interactions with our content. This enables us to improve our services.

Google Analytics

On this website, we use the web analytics service Google Analytics 4 on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG for access to your device. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You may withdraw your consent at any time with effect for the future.

Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. This may include, among other things, truncated IP addresses, device and browser information, referrer URLs, the date, time and duration of visits, pages viewed and click paths, as well as approximate location data. The purpose of the processing is to analyze website usage, prepare reports on website activities, and improve our services.

As part of the processing based on your consent, your data is also transferred to Google’s servers in the USA and processed there. An adequate level of data protection applies to this transfer to a third country: by decision dated July 10, 2023, the European Commission determined that the EU-U.S. Data Privacy Framework provides an adequate level of protection. Google is certified under this framework, so the transfer may be based on this framework.

The data is generally deleted after 2 months.

 

3. Other Disclosure of Personal Data

In addition to the cases already described elsewhere in this privacy information, we will only disclose your personal data to third parties if

  • you have expressly consented to such disclosure in advance (Art. 6(1)(a) GDPR), or
  • we are legally obliged to disclose the data (Art. 6(1)(c) GDPR).

 

4. Data Subject Rights

You have the right to:

  • withdraw your consent, once given, at any time pursuant to Art. 7(3) GDPR. As a consequence, we may no longer continue the data processing based on this consent for the future;
  • request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details;
  • request the immediate rectification of inaccurate or completion of incomplete personal data stored by us pursuant to Art. 16 GDPR;
  • request the erasure of your personal data stored by us pursuant to Art. 17 GDPR, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • request restriction of the processing of your personal data pursuant to Art. 18 GDPR where the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
  • receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format pursuant to Art. 20 GDPR, or request that such data be transmitted to another controller; and
  • lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you may contact the supervisory authority at your usual place of residence or workplace or at our company’s registered office. The competent supervisory authority at our company’s registered office is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Germany

Phone: 0211/38424-0
E-mail: poststelle@ldi.nrw.de

 

5. Information About Your Right to Object Pursuant to Art. 21 GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a balancing of interests); this also applies to profiling based on these provisions within the meaning of Article 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

If your objection is directed against the processing of data for the purpose of direct marketing, we will cease processing immediately. In this case, you do not need to provide reasons relating to your particular situation. This also applies to profiling insofar as it is connected with such direct marketing.

If you wish to exercise your right to object, it is sufficient to send an e-mail to datenschutz@zipcon.de.

 

6. Data Security

All data you transmit to us personally is transferred in encrypted form using the generally accepted and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard that is also used, for example, in online banking. Among other things, you can recognize a secure TLS connection by the “s” appended to “http” (i.e. “https://”) in your browser’s address bar or by the padlock symbol displayed in your browser.

In addition, we use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss or destruction, and unauthorized access by third parties. Our security measures are continuously improved in accordance with technological developments.

 

7. Currency and Amendments to This Privacy Policy

This privacy information is currently valid and was last updated in August 2026.

As our website and services continue to develop, or due to changes in statutory or regulatory requirements, it may become necessary to amend this privacy information. The current version of this privacy information can be accessed and printed at any time on the website at https://zipcon.de/datenschutzinformation/.