Privacy Statement

Controller as per the EU General Data Protection Regulation (GDPR) and the Federal German Data Protection Act (BDSG):

iC Consult GmbH
Leopoldstraße 252a
80807 München

Telefon: +49 201 616162-0

General Aspects and Your Rights as a Data Subject

You may exercise your rights as a data subject anytime by contacting

iC Consult Group GmbH 
Data Privacy Office 
Huyssenallee 99-103 
45128 Essen


As a data subject, you are entitled to the following rights:

  • Access to the data we are processing and information on how your data is processed (art. 15 GDPR)
  • Rectification of personal data (Art. 16 GDPR)
  • Deletion of your personal data (Art. 17 GDPR)
  • Restriction of the processing of personal data (Art. 18 GDPR)
  • Data Transfer (art. 20 GDPR)
  • Contradiction against a processing (Art. 21 GDPR)

Should we process your data on the basis of your consent, you can revoke this anytime with effect for the future [cookies_revoke]. You can also lodge a complaint with a data protection supervisory authority at your place of residence, your permanent place of residence or our statutory seat. An overview over the data protection supervisory authorities can be obtained here:

To exercise these rights, please turn preferably to

Collection of general Information when you visit our Website

Kind and Purpose of Processing

If you just access our website, if you neither fill out a form nor otherwise provide us any information (i.e. if you decide that only “necessary cookies” are set), general information is collected. This (server log files) contains the type of browser you are using and the browser version, the operating system you are using and the operating system version, the domain name of your Internet service provider, your IP address, the date of access, HTTP protocol and -Status code and the file size. These are used exclusively for the purpose of ensuring a trouble-free connection to the website and comfortable use of our website. Furthermore, the information is processed for the purpose of evaluating system security and stability. In addition, we can process your data anonymously for statistical purposes – in this case we cannot identify you personally.

Legal Bases of Processing

The processing of your personal data takes place on the basis of our prevailing legitimate interests (Art. 6 I 1 f GDPR) in optimizing the functionality and stability of our website, i.e. in technically secure and flawless operation of the website. Any further processing of personal data will only take place if you grant us your consent (e.g. if you decide that more than just the “necessary” cookies are set), if we are obliged to do so or are otherwise entitled to do so. This may be the case, for example, if we process your data for the purpose of initiating or fulfilling a contract, which may also include marketing, including direct advertising.

Processing of special categories of personal data pursuant to Art. 9 GDPR only takes place if this is required by legal regulations and there is no reason to assume that your legitimate interest in the exclusion of the processing prevails.

Data Recipients, Transfer of Data to Third Parties, Intent to transfer Data to third Countries

We transfer your data to third parties if this is required by legal obligations or if you have given your consent. In addition to authorities, the recipients of this data may be (technical) service providers who, for example, work on the operation and maintenance of our website. If this is required, we have concluded the necessary data protection instrument with our service providers, in particular contracts for the processing of personal data on behalf of EU standard contractual clauses on data protection.

Within our company, too, we ensure that your data is only processed by those people, functions and instances who have to do this to fulfill the tasks assigned to them. If this means data processing by other companies in our group, such is also based on a data processing agreement and/or EU standard data protection clauses.

Likewise, personal data will only be transferred outside the EU/the European Economic Area if this is required for a contractual relationship, is legally binding or if you have given your consent. In this case, too, we have created the data protection requirements.

Data Retention

Your personal data will be deleted as soon as it is no longer required for the underlying processing purpose. This is the case for data that is used exclusively to provide our website when the session has ended. In addition, we ask you to consider that there may be legal retention periods applying, e.g. according to the tax code, commercial law or other special legal regulations. In this regard, we would like to point out that statutory limitation periods apply and can be up to thirty years.

Obligation to Provide personal Data

The provision of the aforementioned personal data is not required by law or contract if you want to use our website. Without collecting your IP address, however, the service and functionality of our website cannot be guaranteed or individual services and services are not available or only available to a limited extent. However, certain personal data may be essential for contract initiation purposes (e.g. also for application procedures). Please note that we may not enter into a contract with you or be unable to offer you our services or not in full if you do not provide us with any or not all of the objectively required data.

Categories, Sources and Origin of Data

As a rule, we obtain personal data directly from you when you interact with our website and its functions. Which data this is exactly depends on the respective context. In this regard, we can provide supplementary and/or deviating data protection information in appropriate places in addition to this data protection declaration if separate data processing takes place/should take place.

Automated Decisions

We do not use fully automated processing to reach a decision. Every decision that is legally binding for you is ultimately made by people.

Newsletter – Registration on our Website

Kind and Purpose of Processing

If you want to register on our website in order to subscribe to our newsletter, we will collect your e-mail address directly from you. Optionally, you can tell us your first and last name. If necessary, you have the option of changing or deleting the data provided during registration at any time.

Legal Basis

The personal data you enter upon subscribing is processed basing on your consent, Art. 6 I 1 a GDPR).

Data Retention

We will only process your personal data in this context as long as you have given your consent. Otherwise, the data will be deleted, unless exceptionally statutory retention requirements require a longer storage period.

Requirement to provide Data

There is no mandatory requirement to collect your data. The processing of your e-mail address or optionally your first and last name takes place on a voluntary basis and only with your consent. If you do not give your consent to data processing, we cannot send you our newsletter.

Contact Request/ Appointments/ Workshops

As part of a contact request/appointment arrangement, we collect your first and last name, your organization and the content of your message and can also process other information such as your telephone number, attachments that you upload and any other data that you make available. We have declared it mandatory to provide your first and last name and an e-mail address so that we can contact you personally about your request. If you do not provide us with this data, you will not be able to use our contact form, but you will still be able to use any of the other contact channels that we currently offer. There is no obligation to provide further data, but it can be useful, for example to clearly describe complex inquiries. We only process the data that you provide us in connection with an inquiry to deal with your inquiry. The legal basis is your consent, which you declare by providing the data, Art. 6 I 1 a GDPR, or the requirement to initiate a business relationship, Art. 6 I 1 b GDPR.

In order to register for our workshops, it is required to provide your first and last name, an e-mail address, a telephone number for quick contact (e.g. in the event of unforeseen last-minute adjustments) and your organization. You cannot attend our workshops without providing this information. The legal basis for processing is your consent, which you declare by providing your data, or the requirement with regard to a contractual relationship, Art. 6 I 1 a, b GDPR.

In connection with an inquiry, you also have the option of registering for our newsletter. You can find more information on data processing in this context under the heading “Newsletter”.


Kind and Purpose of Processing

Our website uses cookies. Cookies are small text files that are stored on your device as soon as you visit our site. We use these text files to collect certain data (e.g. IP address, Internet browser used, operating system used). We cannot use these cookies to start applications on your device or to transfer malware and viruses to your device. We do not pass on the data collected this way to third parties unless we have expressly mentioned this in the description of individual cookies. Without your consent, a reference to your person will not be made on our part.

Browsers are usually preset to accept cookies. If you do not want cookies to be used, you can deactivate them via the settings in your browser. To do this, we recommend that you use the help function of your browser to find out how you can change the settings accordingly. Our website can then still be used, but only to a limited extent. You can also control your cookie preferences via our consent management and adjust them at any time.

Cookies used and Retention Period

Google Analytics

This website uses Google Analytics, an advertising analysis service provided by Google Inc. (“Google”). Google Analytics uses cookies to enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of “IP anonymization” on this website, your IP-address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP-address be sent to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.

We would like to emphasize that the processing of personal data requires the transfer to the USA. From a European point of view, there is no equivalent level of data protection in the USA. In principle, for example, US authorities are able to access the processed data without you as a European having any effective legal remedies at your disposal. Please note that your consent also extends to this aspect.

According to Google, the IP-address transferred by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; we would like to mention, however, that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of this data by Google by using the browser plug-in available under the following link. download and install in:

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the transfer of personal data to the USA is your consent, Article 6 I 1 a GDPR.

Information on the processing of personal data by Google, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001, as well as their terms of use are available from Google under the following links.

Demographic Characteristics

If you give your consent, Art. 6 I 1 a GDPR, this website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the point “Objection to data collection”.


We use HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland (“HubSpot”) for our online marketing activities.

Type and Purpose of Processing

This is an integrated software solution with which we cover the following aspects of our online marketing:

• Content management (website and blog)

• E-mail marketing (newsletter and automated mailings)

• Social Media Publishing & Reporting

• Reporting (e.g. traffic sources, access, etc.)

• Contact management (e.g. user segmentation & CRM)

• Landing pages and contact forms

Our signup service allows visitors to our site to learn more about our business, download content, and provide us with your contact information and other demographic information. On our website you have the option to provide us with your contact information and other demographic information in order to download content or register for events and webinars. This information and the content of our website are stored on the servers of our software partner HubSpot. They can be used by us to contact visitors to our website and to determine which of our company’s services are of interest to them. We use all collected information exclusively to optimize our marketing. To enable the functionality of HubSpot, so-called “web beacons” and cookies are used, which are stored on the users’ computers. The following personal data is collected here:

•IP address

• Geographic location

• Type of browser

• Duration of the visit

• Pages viewed

Furthermore, when using HubSpot, the data entered by the user is recorded if they subscribe to our newsletter. If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time using your browser settings. See above under the heading “Cookies”. HubSpot’s privacy policy can be found at

Legal Basis

The legal basis for using HubSpot is your Consent (Art. 6 I 1 a GDPR)

Transfer of Data to Third Countries

We would like to emphasize that the processing of personal data requires the transfer to the USA. From a European point of view, there is no equivalent level of data protection in the USA. In principle, for example, US authorities are able to access the processed data without you as a European having any effective legal remedies at your disposal. Please note that your consent also extends to this aspect.

LinkedIn Insight Tag

A pixel (also called a “web beacon” or “pixel tag”) is a mostly invisible electronic image, usually no larger than 1 pixel by 1 pixel, that is placed on a website or in an email and communicated with which looks at the online behavior of visitors on the website or when sending e-mails. Web beacons are provided by third parties. A cookie can also be stored on your computer for these purposes.

We use the LinkedIn conversion pixel from LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale CA 94085, USA (“LinkedIn”) on our website for marketing purposes. This allows us to track the actions of users after they have seen or clicked on a LinkedIn ad. In this way, we can record the effectiveness of the advertisements for statistical and market research purposes, optimize our advertisements and improve targeting for the benefit of our users and customers (users see more relevant advertisements). This pixel is also used to present interest-based advertisements (“ads”) to visitors to our website when they visit the social network LinkedIn or its advertising partner.

The data collected in this way is pseudonymous for us, which means that we do not see the personal data of individual users. However, this data is stored and processed by LinkedIn, about which we inform you according to our level of knowledge. LinkedIn could connect this data to your respective account on the platform and also use it for its own advertising purposes in accordance with their respective policies.

We only use the LinkedIn pixel if you consent to this, Art. 6 I 1 a GDPR. We would like to mention that this processing of personal data requires the transfer to the USA. From a European point of view, there is no equivalent level of data protection in the USA. In principle, for example, US authorities are able to access the processed data without you as a European having any effective legal remedies at your disposal. Please note that your consent also extends to this aspect.

The guidelines and options for “opting out” (disabling these functions) can be found here:

LinkedIn Privacy Policy:

You can refuse the use of cookies and similar technologies that track your behavior on other websites for third-party advertising purposes on LinkedIn: You can find the opt-out feature for visitors here:


In order to protect the security of your data during data transfer, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Information for Job Applicants

All information on handling applicant data can be found in our “Information on data protection in the application process”