Privacy information for the use of HR IT Architecture Assessment
in accordance with Articles 13 and 14 of the GDPR
1. Responsible party
CLEVIS CONSULT GmbH
Erika-Mann-Str. 53
80636 München
E-Mail: contact@clevis.de
Telefon: +49 89 125 09 225
2. Data Protection Officer
You can contact our data protection officer at the above postal address, adding “Data Protection Officer” to the address, or at the following email address: datenschutz@clevis.de
3. Purpose of processing and type of personal data
CLEVIS CONSULT GmbH processes and stores various data in the course of using our HR IT Architecture Assessment. We also store the contact details (name and email address) that you have provided us with. Below you will find information about the individual processing purposes.
We process your personal data in order to provide assessment results and relevant HR insights as well as optimization recommendations. In addition, we may contact you in the course of this process to discuss a possible collaboration.
The legal basis for this is your consent in accordance with Art. 6 (1) (a) GDPR.
Furthermore, we are subject to various legal obligations that require us to process your data. These include tax law requirements and screening our customer contacts against terrorism and sanctions lists.
The legal basis for this is Art. 6 (1) (c) GDPR.
4. Origin of the data
We collect personal data directly from you when you provide it to us via our form on the website.
5. Recipients of the data
We will only transfer your personal data to third parties if we are legally obliged to do so, if it is necessary to fulfill a contractual obligation with you, to service providers with whom we have a contract processing agreement in accordance with Art. 28 GDPR, or if you have given your consent.
Data will not be transferred to third countries without your consent, unless we are legally obliged to do so or it is necessary for the performance of the contract.
6. Duration of storage
Your personal data will only be stored for as long as it is necessary for the purposes of the customer relationship or the purposes for which it was collected, or if there are legal or contractual retention requirements.
Different statutory retention periods arise from tax regulations, among other things, and can be up to ten years for documents and receipts relevant to tax law. After the retention period, the data will be deleted in accordance with data protection regulations.
7. Obligation to provide your data
Some personal data that you provide to us in connection with a contractual relationship is required by law or contract, or is necessary for the establishment or proper performance of your contract. You are therefore obliged to provide us with this personal data. If you do not provide us with this personal data, this may result in us being unable to fulfill our obligations under the contractual relationship.
8. Right of of revocation and objection
You are entitled to revoke your consent in accordance with Art. 6 (1) (a) GDPR at any time, without giving reasons and with effect for the future, either in whole or in part.
You also have the right to object to data processing in accordance with Art. 6 (1) (e), (f) GDPR.
Please address your revocation or objection to the contact options listed in sections 1 and 2.
9. Right of data subjects
You have the right to request information, correction, data portability, or restriction of processing from CLEVIS CONSULT GmbH. Please send your request to the contact details listed in section 1.
If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the competent supervisory authority.
10 Real Cookie Banner
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
Version: 1.0 / Stand: 01.09.2025
