Data Protection

Information on data protection
This information provides you with an overview of how your personal data will be processed when you use the services available at www.lazyconsulting.com ("Website"). We also inform you of your rights under the EU General Data Protection Regulation ("GDPR") and the choices you have to manage your personal data and protect your privacy.Our Privacy Information for our Social Media (LinkedIn Business Page) can be found below at the end of this information.

Controller and Data Protection Officer
Luciano Radicce
luciano@lazyconsulting.com

Processing of personal data
Data that we process when you call up our services
This user data is processed exclusively in pseudonymised form to enable you to use the services and to ensure the functionality of the services. The data is generally not used to identify you as a person. In addition, we process the pseudonymous usage data to analyse the performance of the website, to continually improve the website and to correct errors or to personalise the content of the website for you. Finally, we process the usage data to ensure IT security and the operation of our systems and to prevent or detect misuse, in particular fraud. These server log files are deleted after a maximum of 7 days. The legal basis for the processing of this data is Article 6 (1) lit. f) of the GDPR, the protection and functionality of the services are legitimate interests in this sense.

Data we process when you interact with us and purposes
When you book an appointment with us. You will be automatically connected to your Cal.com meeting account when you click on the meeting button on our services or when you schedule a meeting through a link we send you (for example, in an email). After you select and confirm your meeting time and enter your contact details and request, Cal.com will send you a meeting confirmation email. For more information about Cal.com and Cal.com privacy policy, please visit https://cal.com/privacy The processing of personal data for the purpose of contacting you is carried out in response to your request and on the basis of Article 6 (1) lit. b) of the GDPR to carry out pre-contractual measures or to protect our legitimate interests according to Article 6 (1) lit. f) of the GDPR. Our legitimate interest is to make the process of meeting requests and discussions more efficient by responding to requests and fully automating the scheduling process. The information you provide in the Cal.com form, including the data you enter there, will be stored by us for the purpose of processing your request or for the purpose of processing a corresponding contractual relationship. Once your enquiry has been answered or the purpose no longer applies (e.g. the contractual relationship has ended), we will delete your data immediately, subject to any contractual or legal retention obligations. You may request us to delete your data or revoke your consent to storage if you wish your data to be deleted prematurely. This is without prejudice to mandatory legal provisions, in particular retention periods.

When you send us a request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your request, including all personal data resulting from it (name, subject of request), will be stored and processed by us for the purpose of dealing with your inquiry. We will not disclose this information without your consent. The processing of such data is based on Article 6 (1) lit. b) of the GDPR, if your inquiry is carried out in connection with the execution of a contract or if it is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6 para. 1 lit. f) of the GDPR) or on your consent (Article 6 para. 1 lit. a) of the GDPR), if this has been requested; the consent may be revoked at any time. The data that you send us in the context of contact enquiries will remain with us until you ask us to delete it, until you revoke your consent to storage or until the purpose for which the data was stored no longer applies (e.g. after we have completed processing your enquiry). This is without prejudice to any mandatory legal requirements, in particular statutory retention periods.

CRM
We manage information about existing and potential customers and business partners, particularly contact details, using a customer relationship management system.  This enables us to collect, sort and analyse customer interactions via email, social media or telephone across different channels. The processing is based on Article 6 par. 1 lit. f) of the GDPR. Our legitimate interests are efficient customer management and customer communication. If consent has been requested, the processing will be carried out exclusively on the basis of Article 6 para. 1 lit. a) of the GDPR and § 25 para. 1 of the German Teleservices Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information in the user's terminal equipment (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.We store data in our CRM for the duration of our contractual relationship or until you ask us to delete it, until you revoke your consent to storage or until the purpose for which the data was stored no longer applies (e.g. after we have completed processing your enquiry). This is without prejudice to any mandatory legal requirements, in particular statutory retention periods.

Data we process for other purposes
On a case-by-case basis, your personal data may also be processed for other purposes. For example, we may disclose your personal information to third parties if we are required to do so by law, but also for the purpose of asserting our or a third party's legal rights or defending ourselves in legal disputes. In these cases, the legal basis is either a legal obligation (Article 6 (1) lit. c) of the GDPR) or our legitimate interests or the legitimate interests of third parties (Article 6 (1) lit. f) of the GDPR), e.g. if we support users in enforcing their rights.

Transfer of personal data / Recipients
We treat your personal data carefully and confidentially and only pass it on to third parties in the rarest of cases.When our partners or service providers process personal data, they do so only on the basis of data protection contracts in which they undertake to comply with strict contractual obligations to protect your data (including, but not limited to, compliance with this Privacy Policy)

Data transfers outside the EEA
We do not transfer your personal data to countries outside the EEA (so-called "third countries") without taking appropriate protective measures. However, third countries do not offer a level of data protection identical to that in the EU. We only transmit your personal data if The Commission has taken a so-called adequacy decision for the third country or the recipient in that third country, appropriate safeguards are provided by the recipient in accordance with Article 46 GDPR for the protection of the personal data (including any necessary additional measures),you have expressly consented to the transfer, after we have informed you of the risks, in accordance with Article 49 (1) lit. a) of the GDPR, the transfer is necessary for the performance of contractual obligations between you and usor another exception from Article 49 of the GDPR applies.Appropriate safeguards according to Article 46 of the GDPR  can be so-called standard data protection clauses, with which the recipient assures to sufficiently protect the data and thus to ensure a level of protection comparable to the GDPR.

Recipients & Guarantees
Data Processors Website hosting and consent storage:
Recipient: Webflow, Inc. Based in the United States, but it complies with European data protection laws and uses European Commission–approved Standard Contractual Clauses as a legal mechanism for data transfers from the U.S. to a country outside the UK, EU, EEA, or Switzerland. Further information: https://webflow.com/legal/eu-privacy-policy

Appointment bookings with Cal.com
Recipient: Cal.com, LLC, 3423 Piedmont Road NE, Atlanta, GA 30305-1754, United StatesGuarantees: The transfer is based on standard data protection clauses agreed with Cal.com. Further information: https://Cal.com/privacy

Your legal rights under the GDPR
You have the following rights towards us: Your right to revoke consent granted in accordance with Article 7 (3) of the GDPR. You can revoke your consent at any time, without giving reasons, with effect for the future. Your right to access and copy in accordance with Article 15 of the GDPR, in particular you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details. Your right to rectification in accordance with Article 16 of the GDPR, e.g. if your data is incomplete or incorrect, you can ask us to correct it. Your right to erasure in accordance with Article 17 of the GDPR if this is not (any longer) necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims. Your right to restriction of processing pursuant to Article 18 of the GDPR. You may request that your data be blocked, e.g. because you believe the data to be inaccurate or the processing to be unlawful, but you object to its erasure because you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Article 21 of the GDPR. Your right to data portability pursuant to Article 20 of the GDPR. You can request that we hand over data that you have provided to us in a structured, common and machine-readable format or transfer it to another person responsible. Finally, you also have the right to lodge a complaint with the competent data protection supervisory authority (Article 77 of the GDPR ). You can file this complaint both at your place of residence, at your place of work or at the place of the data protection breach you are complaining about. You can also file a complaint with the supervisory authority at our registered offices. If you wish to exercise your rights as a data subject, you can also do so by contacting: luciano@lazyconsulting.com


Information about your right to object according to Article 21 of the GDPR
In addition to the rights already mentioned, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation, provided that such processing is based on Article 6 (1) lit. f) of the GDPR (data processing on the basis of a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate circumstances that override your interests, rights and freedoms and therefore justify the processing.You also have the right to object at any time to the processing of your personal data for the purpose of direct marketing (including subscription to our newsletter) without incurring any costs other than the transmission costs according to the base rates; this also applies to the creation of a user profile (so-called "profiling"), insofar as this is associated with direct marketing. If you object, we will no longer process your personal data in the future.Please note that you may not be able to use the website or services, or may only be able to use them to a limited extent, if you do not provide us with certain data or if you object to the use of this data. The objection can be submitted informally to luciano@lazyconsulting.com


Information on cookies
When you use our services, we process usage data using cookies. These are necessary to ensure the functionality of our website.What are cookies? Cookies are small text files containing information that are stored on your access device. They are usually used to associate a user with a particular action or preference on a website, without identifying the user as a person or revealing their identity.Cookies are not automatically good or bad, but it is worth understanding what you can do about them and making your own choices about your information. We use the following types of cookies, the scope and functionality of which is explained below: Session cookies and Persistent cookies.Session cookies are automatically deleted when you close your browser. This is particularly true of session cookies. They store what is known as a session ID, which allows various requests from your browser to be assigned to the same session. This enables us to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser. Persistent cookies are also initially stored when you close your browser and then automatically deleted after a period of time, which varies depending on the cookie. You can also delete cookies at any time through the security settings of your browser.


Purposes and legal basis
We use these technologies to make your experience with us more enjoyable and to ensure the security of our services. For example, we use session cookies to recognise that you have already visited individual pages of our service. These are automatically deleted when you leave our site.We also use temporary cookies to optimise the user experience, which are stored on your device for a fixed period of time. If you visit our site again to use our services, we will automatically recognise that you have been to our site before and which entries and settings you have made, so that you do not have to enter them again. The data processed by these cookies are necessary for the above-mentioned purposes to protect our legitimate interests and those of third parties, in accordance with Article 6 (1) lit. f) of the GDPR.Finally, subject to your consent, we use cookies and other technologies to statistically record the use of our website and to analyse it for the purpose of optimising our offer, as well as to provide you with advertising on third party websites. This requires that you have previously given us consent as specified in Article 6 (1) lit. a) of the GDPR by using our cookie management tool when accessing the website. You can revoke your consent for the future or adjust your settings at any time via the cookie management tool.

Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). Google will process this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and to tailor the website to your needs.The information generated by the cookie about your use of the website (including your IP address, time of access, referrer URL and information about your browser and operating system) will be transmitted to and processed by Google on servers in the United States.We only use Google Analytics with IP anonymisation enabled. This means that the user's IP address is shortened by Google.The user data collected via cookies is automatically deleted after 30 days.The information generated by the cookie about your use of the website is transferred to and processed by Google on servers in the United States. The data transferred are exclusively pseudonyms and cannot be traced back to you. We have entered into an agreement with Google that includes the EU standard contractual clauses. This ensures a level of protection comparable to that in the EU.We will only transfer your data to Google if you expressly consent to the processing by Google. In this case, you also consent to the transfer of your data to the USA pursuant to Article 49 (1) lit. a) of the GDPR, being aware of the risks.You can withdraw your consent at any time with effect for the future via our Consent Management Tool. You can access the tool via the link at the bottom of the website.Information about Google's use of data can be found in their privacy policy: https://policies.google.com/privacy?hl=de.

Privacy Information Social Media (LinkedIn Business Page)
We maintain social media pages on the LinkedIn network. As the operators of these pages, we are jointly with LinkedIn: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, hereinafter: LinkedIn,responsible in the sense of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) for the processing of your personal data when you access our site or contact us via our LinkedIn Business Page.

Joint Controllership
We have entered into an agreement with LinkedIn as joint controllers.
LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum from LinkedIn.In this agreement, LinkedIn acknowledges that, under the data protection joint control regime, it has the primary data protection obligations to inform data subjects and to fulfil data subjects' rights to data security and to report and inform in case of data breaches. LinkedIn, as the provider of the social network, has direct access to the necessary information and can take all necessary actions and provide information immediately. However, if you need our assistance, you can contact us at any time. In particular, you may exercise your data subject rights with us at any time.

LinkedIn Page Analytics
In operating our LinkedIn page, we use LinkedIn Page Analytics. This provides us with information about the engagement with our content. For more information about the privacy features of the LinkedIn platform, please see the LinkedIn Privacy Policy (https://www.linkedin.com/legal/privacy-policy).The network operators use cookies and similar technologies such as pixels for this purpose when you visit our pages, each creating a unique user code. This user code can be linked to the data of those users that are registered with the platform providers.The information stored in the user code is used by the platform providers, in particular when the user accesses this service. Other entities, such as partners or even third parties, may also use cookies within these services in order to provide services to the companies advertising on the platforms.Visitor statistics are only sent to us in anonymous form and we have no access to the underlying data.

Purposes and legal basis
We use our social media sites to communicate with our customers, prospects and users and to inform them about our services. In this context, we may receive further information, for example through user comments, private messages or because you follow us or share our content. The processing is solely for the purpose of communicating and interacting with you.

Legal basis and legitimate interests
We process user statistics to help us better understand how we can use our social media sites to promote our business objectives. We also operate our social media sites to present and communicate with users of these platforms and other interested parties who visit our social media sites. The processing of users' personal data is based on our legitimate interests in optimising the presentation of our company and products (Art. 6 (1) lit. f) of the GDPR).

Third country data transfer
LinkedIn:
LinkedIn transfers data to LinkedIn Corporation 1000 W Maude Ave Sunnyvale, CA, US (hereinafter: LinkedIn Corporation) on the basis of standard contractual clauses approved by the European Commission. We have no influence on these processing operations. We ourselves do not pass on any personal data that we receive via our LinkedIn profile.Objection RightsYou have the following rights of objection:

LinkedIn: The processing of LinkedIn can be objected to here. Further settings can be made via the form for objection.

Further information For further information on the handling of personal data, please refer to LinkedIn's privacy policy .