Privacy

The protection of your personal data is a particular concern to us – confidentiality is at the heart of our work. Below we inform you about how personal data is processed when you visit this website.

Note: This English text is a courtesy translation. In the event of any discrepancy, the German version of this privacy policy is authoritative.

1. Privacy at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information can be found in the privacy policy set out below.

Data collection on this website

Who is responsible for collecting data? Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Notice on the controller” in this privacy policy.

How do we collect your data? Your data is collected, on the one hand, when you provide it to us – for example, data you enter in the contact form. Other data (in particular technical data such as your internet browser, operating system or the time the page was accessed) is collected automatically by our IT systems when you visit the website.

What do we use your data for? Part of the data is collected to ensure the website is provided without errors. There is no analysis of your user behaviour.

What rights do you have? You have the right at any time to obtain information, free of charge, about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data and, under certain conditions, the restriction of processing. A consent you have given may be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

This website is hosted by an external service provider. The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact enquiries, meta and communication data, contact details, names, website accesses and other data generated via a website. The host is used for the purpose of fulfilling our contract with our potential and existing clients (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

We use the following host: STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

Data processing agreement: We have concluded a data processing agreement (DPA) with the provider named above. This ensures that the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Notice on the controller

The controller responsible for data processing on this website is:

HPB Dr. Häupl Personalberatung GmbH & Co. KG
Dipl.-Kfm. Jan Häupl
Schloßstraße 68
12165 Berlin, Germany
Phone: +49 (30) 84 41 20 90
Email: kontakt@hpb-personalberatung.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you assert a justified request for erasure or withdraw your consent, your data will be deleted, unless we have other legally permissible grounds for storing it (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.

Legal bases for processing

Where you have consented to processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. Where your data is required to perform a contract or to carry out pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, it is carried out on the basis of Art. 6(1)(c) GDPR; otherwise on the basis of our legitimate interest under Art. 6(1)(f) GDPR. The legal basis applicable in each individual case is stated in the following sections.

Data transfer to third countries

Your personal data is not transferred to countries outside the European Union or the European Economic Area. All services used (hosting, fonts) are operated within Germany or the EU.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data. Where your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing.

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged breach.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format.

Information, erasure and rectification

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to the rectification or erasure of this data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser line.

4. Data collection on this website

Cookies and tracking

This website does not use cookies and does not employ any analysis, tracking or advertising services. No analysis of your user behaviour takes place.

Fonts

For a consistent appearance, this website uses the “Open Sans” typeface, which is hosted locally on our server. No connection to third-party servers (such as Google Fonts) is established in the process.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are: browser type and version, the operating system used, the referrer URL, the host name of the accessing computer, the time of the server request and the IP address. This data is not merged with other data sources. Collection takes place on the basis of Art. 6(1)(f) GDPR; the website operator has a legitimate interest in the technically error-free presentation and security of its website.

Contact form

If you send us enquiries via the contact form, the details you provide in the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass this data on without your consent. Processing takes place on the basis of Art. 6(1)(b) GDPR where your enquiry is connected with the performance of a contract or is necessary to carry out pre-contractual measures; in all other cases on the basis of our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR). The data remains with us until you ask us to delete it, withdraw your consent or the purpose for storage no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.

Enquiry by email or telephone

If you contact us by email or telephone, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. Processing takes place on the basis of Art. 6(1)(b) GDPR where your enquiry is connected with the performance of a contract; otherwise on the basis of our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR).

Last updated: June 2026