Privacy policy for independent consultants and entrepreneurs
This privacy policy explains how we handle personal data when we approach you for a project assignment, when we place you in a project, and how we process your personal data in order to contact you in principle. This policy describes how we collect, use and process your personal data and how we comply with our legal obligations in doing so. Data protection is important to us and we assure you that we will protect and safeguard your data protection rights.
1. Who is responsible for processing your personal data?
GP+S Consulting GmbH, Schaberweg 28 a, 61348 Bad Homburg v.d.H.,
Phone: +49 6172 49556 0
E-mail:
(hereinafter referred to as “we”), is the responsible party within the meaning of the EU General Data Protection Regulation (“GDPR”).
2. Who is the responsible data protection officer?
For all questions related to the processing of your personal data and the exercise of your rights under the GDPR, you may consult our Data Protection Officer. You can reach our data protection officer at .
3. For what purposes and on what legal basis do we process personal data?
We process personal data from you in order to be able to match your professional and project experience with the requirements of the customer and to place you in suitable project assignments.
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG) for the purpose of establishing, executing and fulfilling contracts as well as for carrying out pre-contractual measures. Insofar as the provision of personal data is required for the initiation or implementation of contractual relationships or in the context of the implementation of pre-contractual measures, processing Art. 6 para. 1 lit. b DSGVO is lawful.
Insofar as you give us express consent to process personal data for specific purposes (e.g. storage of your data and referral to customers/clients, forwarding of data to potential customers/clients, evaluation of data for marketing purposes, addressing you in advertising), the lawfulness of this processing is given on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO. Consent given can be revoked at any time (see section 10 a. of this data protection information). Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
As far as necessary and legally permissible, we process your data beyond the actual contractual purposes for the fulfillment of legal obligations (Art. 6 para. 1 lit. c DSGVO). In addition, processing may be carried out to protect legitimate interests (Art. 6 (1) (f) DSGVO) of us or third parties; we will inform you of this separately, stating the legitimate interest, insofar as this is legally required.
4. What categories of personal data do we process?
We process data related to your possible placement as a freelance consultant. This may include general data about you (such as name, date of birth, gender, address and contact details), photograph, nationality, information about your professional qualifications, project experience or information about further professional training and school education. In addition, you may provide us at any time with voluntary, additional information that you deem relevant in connection with a project assignment. Furthermore, we may process job-related information that you have made publicly available, such as a profile on professional social media networks.
5. How is personal data collected?
Insofar as we do not receive the data directly from you, e.g. by sending us your resume or project profile by e-mail, we also collect personal data via social media networks, such as LinkedIn or XING.
6. How is your personal data used?
The referral of freelance, independent consultants with regard to a specific customer request for support services is one of our core business processes. Below we have described in detail how we use and process your personal data for this purpose:
Storing (and updating, if necessary) your data (submitted by you or from other sources, e.g. Xing) in our database so that we can identify project topics matching your qualifications and contact you in connection with corresponding project requests.
Only after project-specific consultation on the type and scope and your consent will your personal data be passed on to potential customers/clients in the form of a GP+S consultant profile.
7. What categories of recipients of the data are there?
We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in section 3.
In addition, we may pass on your data to potential customers/clients ( see point 6), if necessary and only with your consent.
8. is the transfer to a third country intended?
A transfer to a third country is not intended.
9. How long will your data be stored?
We will delete your personal data from our systems if we have had no contact with you for three years. After this time, your data is presumably no longer relevant for the purpose for which it was collected. Before the end of the three years, we will contact you again to update your data with your consent, if necessary, or to delete it. To the extent necessary, we process and store your personal data for the duration of our business relationship, which includes, for example, the initiation and execution of a contract or to fulfill the contractual purposes.
In addition, we may be subject to various retention and documentation obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO), among other things. The retention and documentation periods specified there range from two to ten years.
Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
10. What rights do you have?
As a freelance consultant who would like to be placed in a project assignment by GP+S, you have the following data protection rights, depending on the situation in the individual case, for the exercise of which you can contact us or our data protection officer at any time under the data specified in Sections 1 and 2:
a. Right of withdrawal
Insofar as the processing of personal data concerning you is based on consent pursuant to Art. 6(1)(a) DSGVO, you have the right to revoke your consent at any time. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.
The revocation can be addressed to:
b. Information
You have the right to obtain information about your personal data processed by us and to request access to your personal data and/ or copies of this data. This includes information about the purpose of the use, the category of data used, its recipients and authorized persons and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration.
c. Correction
You have the right to demand that we correct any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
d. Right of objection
Insofar as the processing of personal data concerning you is carried out on the basis of Art. 6 (1) (f) DSGVO, you have the right to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
The objection can be directed to:
e. Right to erasure
You have the right to request that we erase personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay, if one of the following reasons applies:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You object to the processing pursuant to Section 10.c above and there are no overriding legitimate grounds for the processing.
The personal adata have been processed unlawfully.
The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
This does not apply insofar as the processing is necessary:
for compliance with a legal obligation that requires processing under Union or Member State law to which we are subject.
For the establishment, exercise or defense of legal claims.
f. Right to restriction of processing
You have the right to request us to restrict processing if one of the following conditions is met:
the accuracy of the personal data is contested by you for a period enabling us to verify the accuracy of the personal data,
the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
we no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise or defense of legal claims; or
you have objected to the processing pursuant to point 10.c above, as long as it has not yet been determined whether our legitimate grounds override yours.
Where processing has been restricted pursuant to this point (g), such personal data may only be processed – apart from being stored – with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If you have obtained a restriction on processing, we will notify you before the restriction is lifted.
g. Right of appeal
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence or of the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
We reserve the right to adapt or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The most current version applies to your visit.
Status of this privacy policy: 04.12.2019
