Privacy Policy

The protection of individual privacy in the processing of personal data is an important concern for us, which we consider with great attention in our business processes. Therefore, we hereby inform you about the processing of your personal data and your rights and claims under data protection law.

I. Name and contact details of the controller

The controller responsible for data processing is:
NewSteps Consulting
René Verdcheval
E: R.Verdcheval@NEWSTEPS.EU

II. Contact details of the contact person for data processing

You can reach our contact person at:
René Verdcheval
E: R.Verdcheval@NEWSTEPS.EU

III. General information on data processing

1. Purpose of processing personal data
If you have provided us with personal data, we will use it exclusively for the purpose of technical administration of our websites and to fulfill your wishes and requirements, usually to respond to your inquiry.
2. Legal basis for the processing of personal data
Where we obtain your consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. For the processing of personal data necessary for the performance of a contract to which you are a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures. Where the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party, and if your interests, fundamental rights, and freedoms do not outweigh this legitimate interest, then Article 6(1)(f) GDPR serves as the legal basis for the processing. erstgenannte Interesse nicht, so dient Art. 6 Abs. 1 lit. f DSGVO als Rechtsgrundlage für die Verarbeitung.

3. Recipients or categories of recipients of personal data
Within NewSteps Consulting, only those departments have access to your data that require it to fulfill your wishes and requirements. Service providers and agents employed by us may also receive data for these purposes.

Your personal data will not be disclosed or otherwise transferred to third parties unless:
• this is necessary for the fulfillment of a contract. For example, it may be necessary for us to pass on your address and order data to our suppliers when ordering products;
• this is necessary for billing purposes;
• you have previously consented.

4. Storage duration
Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which we are subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for a contract conclusion or contract fulfillment.

IV. Specific data processing

1. Provision of the website and creation of log files

a) Description and scope of data processing
When our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's IP address
(4) Date and time of access
(5) Websites from which the user's system accesses our website
(6) Websites accessed by the user's system through our website

The data is also stored in the log files of our system. Storage of this data together with other

b) Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
c) Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, the data is used for optimizing the website and ensuring the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also represent our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR.
d) Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of data collected for the provision of the website, this is the case when the respective session is ended. In the case of data stored in log files, this is the case after a maximum of 3 months.
e) Right to object and removal option
The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Therefore, there is no option for the user to object.

Use of Cookies

a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can also be identified after a page change.
The following data is stored and transmitted in the cookies:
(1) Searched terms
(2) Login information Additionally, we use cookies on our website that enable an analysis of users' surfing behavior.
In this way, the following data can be transmitted:
(1) Entered search terms (2) Frequency of page views
(3) Use of website functions
When our website is accessed, the user is informed about the use of cookies for analysis purposes and their consent for the processing of personal data used in this context is obtained. In this context, reference is also made to this privacy policy.

b) Legal basis for data processing
The legal basis for processing personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for processing personal data using cookies for analytical purposes, in the presence of user consent, is Art. 6 para. 1 lit. a GDPR.

c) Purpose of data processing
If the use of technically necessary cookies occurs:
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. It is necessary that the browser can be recognized even after a page change. We require cookies for the following applications:
A list of applications follows. Examples may include:
(1) Language settings
(2) Remembering search terms User data collected through technically necessary cookies is not used to create user profiles.
The use of analytical cookies is intended to improve the quality of our website and its content. Through analytical cookies, we learn how the website is used and can continuously optimize our offering.
The specific purpose of using analytical cookies should be described in more detail at this point. These purposes also represent our legitimate interest in processing personal data according to Art. 6 para. 1 lit. f GDPR.

d) Duration of storage, right to object, and removal options
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, not all functions of the website may be fully usable.

3. Newsletter

a) Description and scope of data processing
On our website, there is an option to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us.

E-Mail adresse

Optional: Name, position, and address

Additionally, the following data is collected during registration:
(1) IP address of the accessing computer
(2) Date and time of registration

For data processing, your consent is obtained during the registration process and reference is made to this privacy policy.

b) Legal basis for data processing
The legal basis for processing data after the user subscribes to the newsletter, in the presence of user consent, is Art. 6 para. 1 lit. a GDPR.

c) Purpose of data processing
The collection of the user's email address is intended for delivering the newsletter. The collection of other personal data during the registration process is aimed at preventing misuse of services or the email address used.

d) Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. Therefore, the user's email address will be stored for as long as the newsletter subscription is active. Other personal data collected during the registration process is usually deleted after a period of 3 months.

e) Right to object and removal option
The newsletter subscription can be canceled by the user at any time. For this purpose, each newsletter contains a corresponding link. This also allows for revocation of consent for storing the personal data collected during the registration process.

4. Contact Form and Email Contact

a) Description and scope of data processing
Our website has a contact form that can be used for electronic communication. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data includes:
Contact formb>

E-Mail adresse

Your Message

Your Name

At the time of sending the message, the following data is also stored:
(1) The user's IP address
(2) Date and time of registration

For data processing, your consent is obtained during the sending process and reference is made to this privacy policy. Alternatively, contact can be made via the provided email address.
In this case, the personal data of the user transmitted with the email will be stored. There is no further transfer of data to third parties in this context. The data is used exclusively for processing the conversation.

b) Legal basis for data processing
The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the email contact aims to conclude a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
c) Purpose of data processing
The processing of personal data from the input mask serves solely to process the contact request. In the case of contact via email, there is also a necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d) Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user is finished. The conversation is considered finished when it can be inferred from the circumstances that the relevant issue has been finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of 3 months.

e) Right to object and delete
You have the opportunity to revoke your consent to the processing of personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. All personal data stored as part of the contact will be deleted in this case.

5. Your Rights

You have the right to information in accordance with Article 15 of the GDPR, the right to rectification in accordance with Article 16 of the GDPR, the right to erasure in accordance with Article 17 of the GDPR, the right to restriction of processing in accordance with Article 18 of the GDPR, the right to data portability in accordance with Article 20 of the GDPR, and the right to object in accordance with Article 21 of the GDPR. You can revoke your consent to the processing of personal data at any time.
Please note that revocation only takes effect for the future. Data processing that occurred before the revocation is not affected by this. To exercise your rights, please contact one of the contact details mentioned in Sections I and II.
If you believe that the processing of your data violates data protection laws or if your data protection rights have been violated in any other way, you can also lodge a complaint with a supervisory authority.

6. Are you obligated to provide personal data?

You must provide the personal data necessary for establishing and conducting our business relationship and which we require for processing the respective order. If you do not provide us with data, we will generally have to refuse to conclude a contract or execute an order, or we may no longer be able to perform an existing contract and consequently may have to terminate it.