You prefer the personal conversation?

Like us! How to reach us directly:

Privacy Policy

Privacy Policy for the website of Empalis Consulting GmbH

1. Subject of this Privacy Policy
We appreciate your interest in our website and our offers displayed on our websites.
The protection of your personal data (hereinafter referred to as "data") is a great and very important concern for us. In the following, we would like to inform you in detail in the following, which data was collected during your visit to our website and use of our local offers and how these are processed or used by us, as well as which accompanying protective measures we have additionally taken in technical and organizational terms.

2. Responsible body / service provider
Responsible body in the sense of the data protection right and at the same time service provider within the meaning of the Telemedia Act (TMG) is the Empalis Consulting GmbH, cf. our imprint.
If you have any questions or comments about this privacy policy or general data protection, please contact the following e-mail address: dsb(at)

3. Contact details of the data protection officer
Lawyer Bettina Wengert
Feldbergstrasse 120
70569 Stuttgart

4. Collection and use of your data
The extent and nature of the collection and use of your data differs depending on whether you visit our website only to retrieve information or in order to use the services offered by us:

a) Informational use
For the purely informative use of our website, it is generally not necessary for you to provide personal data. Rather, in this case, we only collect and use data that your internet browser automatically transmits to us, such as:

  • date and time of retrieval of one of our websites
  • your browser type
  • the browser settings
  • the operating system used
  • the page you visited last
  • the transferred amount of data and the access status (file transfer, file not found etc.)
  • the loading times of our website as well

Your IP address
We collect and use this data during an informative visit exclusively in non-personal form. This is done in order to enable the use of the websites you have retrieved for statistical purposes and to improve our internet presence.
The IP address is only stored for the duration of your visit, a personal evaluation does not take place.

The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free and optimal presentation of his website - for this purpose, the server log files must be recorded.

b) Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request and in case of follow-up questions. We will not share
this information without your consent.
The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 (1) lit. GDPR). You can revoke this consent at any time. An informal message by e-mail to us is sufficient.
The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The information you provide in the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or delete the purpose for data storage (for example, after your request has been processed). Mandatory legal provisions - especially retention periods - remain unaffected.

c) Newsletter data
If you would like to receive the newsletter offered on the website, we need an e-mail address from you which allows us to verify that you are the owner of the given e-mail address and that you agree to receive the newsletter. Further data is not collected. We use this data exclusively for the delivery of the requested information and do not pass it on to third parties. The processing of the data entered into the newsletter registration form takes place exclusively on the basis of your consent (Article 6 (1) a GDPR). You may revoke your consent to the storage of data, the e-mail address and its use for sending the newsletter at any time, for example, via the opt-out link contained in each newsletter. The legality of the already completed data processing operations remains unaffected by the revocation. The data deposited with us for the purpose of obtaining the newsletter will be stored by us from the newsletter until your cancellation and will be deleted after cancellation of the newsletter. Data that has been stored for other purposes with us (such as e-mail addresses for business communication) remain unaffected.

d) Contract initiation and implementation
Insofar as you wish to make use of the services offered by us on our website, it is necessary for you to provide additional data. It is the data that is required for the respective transaction, e.g. your contact details when sending an offer.
The collection or use of your data is for the purpose of providing the service you want, for example, to fulfil an order or to send you the desired offer. We collect, process and use personal data only insofar as they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or precontractual measures. We only collect, process and use personal data when using our Internet pages (user data) so far as this is necessary in order to enable or charge the user for the use of the service. The collected customer data will be deleted after completion of the order or termination of the business relationship, but not before expiry of the legal retention periods (usually 10 years).
We only transfer personal data to third parties if this is necessary in the context of contract execution; for example, to the bank responsible for payment processing. A further transmission of the data does not take place or only if you have expressly consented to the transmission. A transfer of your data to third parties without explicit consent, such as for advertising purposes, does not occur. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or precontractual measures.

e) Applications
In the following, we inform you about the scope, purpose and use of personal data collected and submitted by you within the framework of an application. We assure that the collection, processing and use of your data will be in accordance with applicable data protection law and all other legal provisions and will be kept strictly confidential. As part of your application, we will in particular record first and last name, contact information (cell phone number and / or e-mail), address, curriculum vitae and relevant certificates / training certificates as well as other information on qualification or work experience. The data collection takes place by sending us the data and your application. These personal data are used exclusively for the processing and execution of your application process. Your personal data will only be passed on within our company to persons who are involved in the processing of your application. In addition, your personal data will not be passed on to third parties unless you have given us explicit consent.
At the same time, by submitting these data, you consent to the described use of your data (Art. 6 (1) (a) GDPR). You can revoke this consent at any time for the future. You have the right at any time to request information about your data stored with us. If the application is successful, the data you submit will be stored in our data processing systems for the purpose of carrying out the employment relationship.

If we cannot offer you a job offer, if you reject a job offer or withdraw your application, we reserve the right to keep the data provided by you up to 6 months from the end of the application process (rejection or withdrawal of the application). Afterwards the data will be deleted and the physical application documents will be destroyed. The storage serves in particular proof in case of a legal dispute. If it becomes apparent that the data will be required after the expiration of the six-month period (for example, due to a pending or upcoming legal dispute), the cancellation will not take place until the data become obsolete. Other statutory storage obligations remain unaffected.

5. Use of cookies
Our websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.
You can set your browser so that you are informed about the setting of cookies and decide on a case-by-case basis whether to accept them or decide to exclude the acceptance of cookies in certain cases or generally and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Cookies that are required to carry out the electronic communication process are based on Art. 6 para. 1 lit. f GDPR saved. The website operator has a legitimate interest in the storage of cookies for the technically correct and optimal provision of its services. If other cookies (such as cookies for analyzing your browsing behavior) are stored, they will be treated separately in this privacy policy.

On our websites we use the following cookies:


Function: Identify your session on the server. It contains an alphanumeric string. This cookie is stored until the end of your session and is a so-called first-party cookie, i.e. a cookie that is controlled by our website.


Function: Saves the ad to the use of cookies. It contains the Numbers 0 or 1 (No or Yes). The cookie is stored for a year and is a so called first-party cookie, so one
Cookie, which is controlled from our website.


6. Website analysis with Matomo (formerly Piwik)
This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before saving.

Matomo cookies remain on your device until you delete them.

Matomo cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising.

The information generated by the cookie about the use of this website will not be disclosed to third parties. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full.

If you do not agree with the storage and use of your data, you can disable the storage and use here. In this case, an opt-out cookie is deposited in your browser that prevents Matomo from saving usage data. Deleting your cookies will result in deletion of the Matomo opt-out cookie as well. The opt-out must be reactivated when visiting our site again.

7. Social Media Pages
We currently do not use social media plugins. The social media buttons used on our website lead via a link to our respective social media pages. For these, in addition to our privacy policy, the privacy policy of the respective provider applies.

7.1 LinkedIn:
When you visit our LinkedIn page, we connect to LinkedIn servers. LinkedIn is informed that you have visited our pages with your IP address. If you're logged in to LinkedIn, LinkedIn will be able to associate your visit with you and your user account. We point out that we as the provider of the pages have no knowledge of the content of the transmitted data and their use by LinkedIn.
For more information, see the LinkedIn privacy statement at:
Providers of this service are LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, United States.

7.2 Twitter:
By using Twitter and the "Re-Tweet" feature, the web pages you visit will be linked to your Twitter account and shared with other users. This data is also transmitted to Twitter. We point out that we as the provider of our pages do not receive knowledge of the content of the transmitted data and their use by Twitter. For more information, see the privacy policy of Twitter at:
You can change your privacy settings on Twitter in the Account Settings at
Provider of these services is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, United States.

7.3 Instagram:
When you visit our Instagram page, you will be connected to Instagram servers. Instagram is informed that you have visited our pages with your IP address. If you are logged in to Instagram, Instagram will be able to associate your visit with you and your user account. We point out that we as the provider of the pages have no knowledge of the content of the transmitted data and their use by Instagram.
For more information, see the Instagram Privacy Policy:
Provider of the service is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

7.4 XING / kununu:
When you visit our pages of the network XING or the employer rating platform kununu, a connection is established to servers of XING SE. XING SE will be informed that you have visited our pages with your IP address. If you are logged into your account with a service of XING SE, it is possible for XING SE to assign your visit to you and your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data and their use by XING SE.
Provider of these services is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Further information on data protection can be found in the data protection declaration of XING under:

8. Use of third-party tools

Google Maps
This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this page has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy findability of the places we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
For more information about how user data is handled, please refer to the Google Privacy Policy:

Google reCAPCHA
This website uses "Google reCAPCHA" (hereafter "reCAPCHA"). Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").
With reCAPCHA we want to check if the data entry on our website (for example in a contact form) is done by a human or by an automated program. For this, reCAPCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor visits the website. For analysis, reCAPCHA evaluates various information (such as IP address, web page visitor's visit time on the web page, or user mouse movements). The data collected during the analysis will be forwarded to Google.
The reCAPCHA analyzes occur completely in the background. Website visitors are not notified that an analysis is taking place.
Data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web sites from abusive automated spying.
For more information about Google reCAPCHA and Google's privacy policy, please visit the following links:

9. Involvement of service providers and transfer to third parties
Your data will be forwarded to the provision of this website and for the purposes mentioned above, if necessary, to our supporting technical service providers (e.g. website hosting, support, quality assurance or mailing service), which we have of course carefully selected and commissioned in writing.
These service providers are bound by our instructions and are regularly monitored by us.
Otherwise, the transfer of your data to other third parties is only as far as explicitly stated in this privacy policy or in case we are legally obliged to do so.

10. Data security
We also use technical and organizational security measures to protect personal data arising or collected, in particular against accidental or intentional manipulation, loss, destruction or against the attack of unauthorized persons. Our security measures are continuously improved in line with technological developments.
Your personal data is also encrypted using SSL / TLS technology to prevent access by unauthorized third parties.

11. Your rights as a victim

11.1 Right to information
You have the right, at any time upon request, to obtain information from us about your personal data concerning you in the scope of Art. 15 GDPR. You can submit an application by post or e-mail to the above address.

11.2 Right to correct incorrect data
You have the right to request immediate correction of personal data concerning you if it is incorrect. Please contact the above mentioned contact addresses.

11.3 Right to cancellation
You have the right to demand the deletion of your personal data under the conditions described in Art. 17 GDPR. Those conditions provide, inter alia, for a right of deletion where the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an opposition or the existence of an erasure obligation under Union law or the law of the Member State to which we are subject. To claim your right to cancel, please contact the above mentioned contact addresses.

11.4 Right to restriction of processing
You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right applies in particular if the accuracy of the personal data between the user and us is controversial for the period of time required to verify correctness, and if the user requires limited processing for an existing right to delete instead of deletion; and in the event that the data is no longer required for our intended purposes, but the user requires it to assert, exercise or defend legal claims, and if the successful exercise of an objection between us and the user is still controversial. To exercise your right to restriction of processing, please contact the above contact addresses.

11.5 The right to data portability
You have the right to receive from us the personal data relating to you which you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. In order to assert your right to data portability, please contact the above mentioned contact addresses.

11.6 Right to object
You have the right at any time, for reasons arising out of your particular situation, against the processing of personal data relating to you, including but not limited to: based on Art. 6 para. 1 lit. e) or f) GDPR, to submit an objection pursuant to Art. 21 GDPR. We will cease the processing of your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purposes of asserting, exercising or defending legal claims.

11.7 Withdrawal
We would like to point out that you can revoke any data protection consent that we have been granted at any time with effect for the future. For this you should contact us informally by e-mail: dsb(at)

11.8 Right to complain
You also have the right to contact the competent supervisory authority for complaints. The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart

12. Changes to this Privacy Policy
We constantly keep this privacy policy up to date. Therefore, we reserve the right to change it from time to time and to make changes in the collection, processing or use of your data. The current version of the privacy policy is available at any time on our website at