1. preface
With this privacy policy we inform you about the handling of your personal data in the management consultancy Lean Maritime GmbH. The purpose of this privacy policy is to inform you about the collection and use of your data in the course of your visit to our website and the use of the services available there, as well as the handling of your personal data in the course of the mandate granted to us, in particular about the rights to which you are entitled under data protection law.

When processing your personal data, we naturally observe the applicable data protection regulations, in particular the European Data Protection Regulation (DS-GVO), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).

We are very aware that when you give us the mandate or visit our website, the protection of your privacy is an important concern. We take your concern very seriously. Therefore, we want you to know which data and when we store which data and how we use it. With this data protection declaration, we would like not only to comply with our legal obligation, but also to inform you about our data protection measures. You can also contact our data protection officer named below at any time with questions.

Personal data is protected by the General Data Protection Regulation. According to Art. 4 (1) DS-GVO, this is any information relating to an identified or identifiable natural person, such as the name, address or date of birth, as well as the e-mail address and telephone number and IP address.

2. person responsible for data processing / contact data protection officer
Lean Group GmbH, Taunustor 1, 60310 Frankfurt, Email: info@lean-group.com

3. contacting/registering
When contacting us by calling our website, by phone, e-mail or a contact form, the information you provide will be stored by us in accordance with Art. 6 para. 1 lit. a DS-GVO in order to process your request and possible follow-up correspondence between us and you.

The contact is logged in order to be able to prove the contact in accordance with the legal requirements of the DS-GVO. Our website automatically collects general data and information with each call in accordance with Art. 6 Para. 1 lit. f DS-GVO, which is temporarily stored in a so-called log file (log file). The following information is collected automatically, i.e. without your intervention, and stored until automated deletion:

• Access to the website (date, time and frequency),

• IP address assigned to your computer by your Internet access provider,

• Name and URL of the retrieved file,

• Website from which our website was accessed,

• Amount of data sent,

• which browser and browser version you are using,

• the operating system you are using,

• which Internet service provider you use.

The collection and storage of this data is necessary for the operation of the website to ensure a smooth connection setup and a comfortable use of the website. In addition, this data is used to ensure the system security of our IT systems, to detect and correct any technical problems that may occur and to prevent or prosecute misuse or other illegal behavior on our website. The collection and storage also takes place insofar as we are legally obligated to do so, for example due to official or judicial orders, as well as for the exercise of our rights and claims and for legal defense.

We will only use your usage data in a personalized manner within the scope of the mandate and, if necessary, merge it with other information about you if you have previously given us the mandate. The legal basis for the data processing is Art. 6 para. 1 lit. b - f DS-GVO. The legitimate interest follows from the purposes listed above.

We use cookies and analysis services when you visit our website. Please refer to the following information under section 6 (cookies/analytical tools) of the data protection declaration.

4 Purpose and legal basis of data processing
We process your personal data in compliance with the EU Data Protection Regulation (DS-GVO), the German Federal Data Protection Act (BDSG), the provisions of data protection law and all other applicable laws. The data processing is carried out in accordance with Art. 6 para. 1 lit. b DS-GVO for the purposes listed there, here for the appropriate processing of your mandate and for the mutual fulfillment of obligations arising from the mandate contract as well as the implementation of pre-contractual measures.

We will only collect and use the personal data collected from you to the extent that this is necessary for the assertion and defense of your rights within the scope of the mandate assigned to us. It will only be collected in order to provide you with appropriate legal advice and representation. We also process your data in order to protect legitimate interests of us or of third parties, in particular to assert any claims against you (Art. 6 para. 1 lit. f DS-GVO). In addition, we process your personal data to fulfill legal obligations according to Art. 6 (1) lit. c DS-GVO (e.g. due to commercial and tax law retention obligations or our obligation to provide advice). The conclusion or execution of the mandate agreement is not possible without the processing of your personal data.

5. transfer of your personal data to third parties:
When transferring your personal data to third parties, we always ensure the highest possible level of security. A transfer of your personal data to third parties only takes place in the cases listed below, for example if:

• you have expressly given your consent to this in accordance with Art. 6 Para. 1 lit. a DS-GVO,

• the disclosure is necessary for the processing of the client relationship in accordance with Art. 6 (1) lit. b DSG-VO. This includes the disclosure to opposing parties and their representatives, in particular lawyers, tax advisors as well as courts and other public authorities for the purpose of correspondence as well as the assertion and defense of your rights. The third party may use the data exclusively for the purposes stated. In all other respects, the attorney-client privilege shall remain unaffected insofar as data subject to the attorney-client privilege is concerned,

• insofar as a legal obligation exists for the disclosure pursuant to Art. 6 (1) lit. c DS-GVO,

• the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 para. 1 lit. f DS-GVO and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

For the operation as well as for the optimization of our website, service companies are active for us, for example for central IT infrastructure or the hosting of our website. We have concluded an order processing agreement with the respective service provider in accordance with Art. 28 DS-GVO. They may use the data provided by us exclusively in accordance with our instructions. Both contractual partners are responsible for appropriate data protection precautions in this case. We have agreed on specific data security measures with our service providers. The employees and supervisors of the service providers are obligated to observe data secrecy and must comply with this.

6. cookies/analytics tools
This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

7. your rights
According to the GDPR, you have rights with regard to the processing of your personal data, which we would like to inform you about. If you claim one of the rights listed below, a simple message to us will suffice. Costs, with the exception of postage, will not be incurred by you for the request. An e-mail to the above-mentioned e-mail address is sufficient for the request.

You have, subject to possible legal restrictions, the following rights towards us regarding your personal data:

• According to Art. 15 (1) DS-GVO the right to information about the data stored about you.

• According to Art. 16 DS-GVO, the right to have your data corrected and/or completed without delay.

• According to Art. 17 DS-G-VO, you can demand the deletion of your data. At this point, we would like to point out that the data protection laws specify deletion obligations, but not deletion periods. These are determined by the respective national laws. For example, we are required by law to store certain data for longer periods (e.g. retention periods for accounting documents of currently 10 years (German Fiscal Code)).

• According to Art 18 DS-GVO, you have the right to restrict the processing of your data.

• According to Art. 20 DS-GVO, a right to receive the data you have provided in a structured, common and machine-readable format.

• Pursuant to Art. 21 DS-GVO, you may object to the processing of personal data, provided that this data is processed on the basis of legitimate interests pursuant to Art. 6 (1) lit. f DS-GVO and there are reasons for this based on your personal situation.

According to Art. 77 DS-GVO, you also have the right to complain to the supervisory authority for data protection responsible for you in your federal state. Responsible for Hesse:

The Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden. 

8 Duration of storage
Your personal data will be deleted after expiry of the statutory retention period for lawyers (6 years after the end of the calendar year in which the mandate was terminated), unless we are obliged to store your data for a longer period pursuant to Art. 6 (1) lit.c DS-GVO, we are obliged to store your data for a longer period of time due to tax and commercial law retention and documentation obligations from the HGB, StGB or the AO, or you have consented to a longer storage period according to Art. 6 Para. 1 S. 1 lit. a DSG-VO, or the storage is necessary to protect the legitimate interests of the responsible party or a third party according to Art. 6 Para. 1 lit. f DSG-VO.

9. security
As part of our IT security, we use technical and organizational security measures to protect the data you provide against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security measures are continuously reviewed and adapted in accordance with data protection law and the state of technological development. We protect our systems and data processing through technical and organizational measures such as data encryption, pseudo and anonymization, access controls, firewall and recovery systems, and integrity testing. Our employees are regularly trained on the appropriate confidential handling of your personal data and are obligated to comply with data protection laws and professional regulations.

10. applications
As part of the application process, we collect, process and use your personal data solely for the purpose of processing your application and carrying out the application process and solely for the purpose of assessing your professional suitability and contacting you. We only collect data that is required for the advertised position. The data you provide us with will first be forwarded to our HR department, where it will be processed and checked. The HR department then forwards your data for the purposes of the application process to the department/departments within our firm that are involved in the respective selection process. Your data will then be used accordingly. If the application procedure is successful for you and a contract has been concluded between us, we will include your data in the personnel file. It goes without saying that the confidentiality of the treatment of your data is guaranteed.

If your application was not considered, your data will be automatically deleted after 6 months following completion of the application process. With your express consent, we will store your complete application documents for a period of 12 months so that we can inform you if a suitable position arises for you in our company. This does not affect your right to request the deletion of your data at any time.

11th update:
The privacy policy is current and has the status 25.03.2020. Due to changes, e.g. the European and national legal provisions, official instructions, the further development of our website, it may become necessary to adapt the privacy policy at a later date. You can obtain an updated version at the above address.

Frankfurt, 25.03.2020