Privacy Policy
Binder Consulting Management Consulting GmbH
As of April 7, 2026
Who We Are
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
Binder Consulting Unternehmensberatung GmbH
Rosenheimer Straße 116b
81669 Munich
Germany
+498941424480
office@binder-consulting.de
www.binder-consulting.de
Contacting the Data Protection Officer
The data protection officer of the controller is:
DataCo GmbH
Sandstr. 33
80335 Munich
Germany
+49 89 7400 45840
www.dataguard.de
On this page, we provide information about how we process your personal data on our website.
How we collect and use your personal data depends on how you interact with us or which services you use. We collect, use, or share your personal data only if we have a legitimate purpose and a legal basis for doing so.
What do we mean by legal basis?
Consent (Art. 6(1)(a) GDPR) You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how to withdraw your consent, please see the subsections “ ” and “Exercising Your Rights” in the following sections of this Privacy Policy.
Contract (Art. 6(1)(b) GDPR) We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or because you yourself have taken certain steps prior to entering into this contract.
Legal Obligation (Art. 6(1)(c) GDPR) We need to use your data to comply with the law.
Vital interests (Art. 6(1)(d) GDPR) The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.
Public task (Art. 6(1)(e) GDPR) The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a statutory duty, e.g., for a statutory function.
Legitimate Interests (Art. 6(1)(f) GDPR) The processing of your data is necessary to support a legitimate interest that we or another party have, provided that your own interests do not override this.
Please note that we may not be able to provide you with our website services if your data is processed to fulfill a contract or a legal obligation and you do not provide the requested data.
Data Sharing and International Transfer
As explained in this Privacy Policy, we use various service providers who help us deliver our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.
We have entered into agreements with all service providers to whom we share your data, obligating them to protect your data.
If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" data protection standard as defined by the European Commission, or by applying another safeguard, such as an enhanced contractual arrangement, i.e., the Standard Contractual Clauses (SCCs) adopted by the European Commission.
For example, when we use U.S. service providers, we rely either on the SCCs or the EU-U.S. Data Privacy Framework, depending on the provider. You may request a copy of the SCCs we have entered into with our service providers by sending an email to the email address provided in this Privacy Policy.
Your Rights
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
1. The right of access (Art. 15 GDPR)
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and to receive the following information:
• Purposes of processing
• Categories of personal data
• Recipients or categories of recipients
• Planned storage period or the criteria for determining this period
• The existence of the rights to rectification, erasure, restriction, or objection
• Right to lodge a complaint with the competent supervisory authority
• If applicable, the origin of the data (if collected from a third party)
• Where applicable, the existence of automated decision-making, including profiling, with meaningful information regarding the logic involved, the significance, and the expected consequences
• Where applicable, transfer of personal data to a third country or international organization
2. Right to rectification (Art. 16 GDPR)
If your personal data is inaccurate or incomplete, you have the right to request that the personal data be corrected or supplemented without delay.
3. Right to restriction of processing (Art. 18 GDPR)
If any of the following conditions are met, you have the right to request a restriction on the processing of your personal data:
• You contest the accuracy of your personal data, for a period that allows us to verify the accuracy of the personal data.
• In the context of unlawful processing, you object to the erasure of the personal data and instead request the restriction of the use of the personal data.
• We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise, or defend your legal claims, or
• after you have objected to the processing, for the duration of the assessment of whether our legitimate grounds override your grounds.
4. Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
If any of the following grounds apply, you have the right to request the immediate erasure of your personal data:
• Your data is no longer necessary for the purposes for which it was originally collected.
• You have withdrawn your consent and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Article 21(2) of the GDPR.
• Your personal data is being processed unlawfully.
• Erasure is necessary to comply with a legal obligation under Union law or the law of the Member State to which we are subject.
• The personal data was collected in connection with information society services offered pursuant to Article 8(1) of the GDPR.
Please note that the above grounds do not apply if the processing is necessary:
• To exercise the right to freedom of expression and information;
• To comply with a legal obligation or to perform a task carried out in the public interest to which we are subject;
• For reasons of public interest in the area of public health;
• For archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes.
• To assert, exercise, or defend legal claims.
5. Right to Data Portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request that it be transmitted to another controller.
6. Right to object to certain data processing (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
If personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
7. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint was submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
A list of the locally competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: : https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data is collected in this process:
• Information about the browser type and version used
• The user’s operating system
• Websites from which the user’s system accesses our website
• Websites accessed by the user’s system via our website
This data is stored in our system’s log files.
This data is not stored together with other personal data of the user.
2. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the website functions properly. Additionally, the data helps us optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context.
3. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.
4. Duration of storage
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session ends.
In the case of data stored in log files, this occurs after seven days at the latest. Storage beyond this period is possible. In this case, the users’ IP addresses are deleted or anonymized so that the client making the request can no longer be identified.
5. Exercising Your Rights
The collection of data for the provision of the website and the storage of data in log files is strictly necessary for the operation of the website. The user may object to this. Whether the objection is successful must be determined through a balancing of interests.
Use of Cookies
1. Description and Scope of Data Processing
When you visit our website, we use technical tools for various functions, in particular cookies, which may be stored on your device. When you access our website and at any time thereafter, you have the choice of whether to generally allow cookies or which specific additional functions you wish to select. You can make changes in your browser settings or via our Consent Manager.
Cookies are text files or information in a database that are stored on your hard drive and associated with the browser you are using, so that certain information can be transmitted to the entity that sets the cookie. Below, we describe the types of cookies we use:
We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (correctly) or the support functions will not work.
The following data is stored and transmitted by the technically necessary cookies:
• Use of website functions
• Storage of cookie consent settings configured via the “CookieYes” consent platform.
We use cookies on our website that are not technically necessary. Technically non-essential cookies are text files that do not serve solely to ensure the functionality of the website but also collect other data.
The following data is processed when technically non-essential cookies are set:
• IP address
• Location of the internet user
• Date and time of the website visit
• Tracking of browsing behavior
• Linking the website visit to other social media platforms
2. Purpose of Data Processing
The purpose of using technically necessary cookies is to ensure the functionality of our website. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after a page change.
We require technically necessary cookies for the following applications:
• Website functionality
Technically non-essential cookies are used to improve the quality of our website, its content, and thus our reach and efficiency. By setting these cookies, we learn how the website is used and can continuously optimize our offering. In particular, these cookies serve the following purposes:
To store settings related to LinkedIn, HubSpot, and Google Analytics, provided you have consented to them.
3. Legal basis for data processing
The provisions of the Telecommunications and Digital Services Data Protection Act (TDDDG) apply to the storage of information on the end user’s device and/or access to information already stored on the end user’s device. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your device at is based on Section 25(2)(2) TDDDG. This storage and access to the information on your device serve to facilitate your use of our website and to enable us to offer you our services as you have requested. Some features of our website also do not function without the use of these cookies and therefore could not be offered. Cookies are generally deleted after the session ends (e.g., logging out or closing the browser) or after a specified period has elapsed. Information regarding different storage periods for cookies can be found in the following sections of this Privacy Policy.
To the extent that cookies are used that are not technically necessary, this is based on your explicit consent, which you can provide via the cookie banner. The legal basis for the storage of and access to information in this case is Section 25(1) TDDDG in conjunction with Article 6(1)(a) and Article 7 of the GDPR. You may revoke your consent at any time with future effect or subsequently grant it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by adjusting the settings of your browser software. Please note that the browser settings you make only apply to the browser you are currently using. If personal data is processed following the storage of and access to the information on your device, the provisions of the GDPR apply. You can find information on this in the following sections of this Privacy Policy.
4. Exercising Your Rights
You can withdraw your consent to the use of cookies at any time and manage your consent preferences via the following link: www.binder-consulting.de
Email Contact
1. Description and Scope of Data Processing
You can contact us via the email address provided on our website. In this case, the user’s personal data transmitted with the email will be stored.
The data is used exclusively for the purpose of handling the correspondence.
2. Purpose of data processing
When you contact us via email, this constitutes the necessary legitimate interest in processing the data.
3. Legal basis for data processing
The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing the best possible response to your inquiry sent via email.
If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.
4. Duration of Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
The personal data additionally collected during the sending process will be deleted no later than seven days after collection.
5. Exercising Your Rights
If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of the contact will be deleted in this case.
Contact Form
1. Description and scope of data processing
Our website features a contact form that can be used to contact us electronically. If a user utilizes this option, the data entered in the form is transmitted to us and stored.
The following data is stored at the time the message is sent:
• Email address
• Last name
• First name
• Phone/cell phone number
• Company name and inquiry
• Date and time
2. Purpose of data processing
We process the personal data entered in the contact form or sent via the provided email address solely for the purpose of responding to your inquiry.
The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our IT systems.
3. Legal basis for data processing
The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing the best possible response to your inquiry submitted via the contact form. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.
4. Duration of Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form input field and data sent via email, this is the case once the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
The personal data additionally collected during the submission process will be deleted no later than seven days after submission.
5. Exercising Your Rights
If the user contacts us via the contact form, they may object to the storage of their personal data at any time in writing, by phone, or by email.
In this case, all personal data stored in the course of the contact will be deleted.
Application via email and application form
1. Description and scope of data processing
We use the JOIN recruiting platform to conduct our application process. The provider is JOIN Solutions GmbH, Schönhauser Allee 36, 10435 Berlin.
JOIN processes applicant data on our behalf based on a data processing agreement in accordance with Art. 28 of the GDPR.
The processing is carried out for the purpose of conducting the application process and deciding whether to establish an employment relationship (Art. 6(1)(b) GDPR, § 26 BDSG).
In doing so, we process, in particular, master data, contact information, application documents, and communication data.
Applicant data is generally deleted 6 months after the conclusion of the application process, unless there is a legal obligation to retain it or consent has been given for longer storage.
A transfer to third countries cannot be ruled out. In such cases, the transfer is based on appropriate safeguards, in particular standard contractual clauses pursuant to Art. 46 GDPR.”
After submitting your application, you will receive an email from us confirming receipt of your application documents.
Your data will not be disclosed to third parties. The data will be used exclusively for the processing of your application.
2. Purpose of Data Processing
We process the personal data from the application form solely for the purpose of handling your application.
The other personal data processed during the submission process is used to prevent misuse of the application form and to ensure the security of our IT systems.
3. Legal basis for data processing
The legal basis for the processing of your data is the initiation of a contract at the request of the data subject, Article 6(1)(b)(1) of the GDPR and Section 26(1)(1) of the BDSG.
4. Duration of storage
After the application process is completed, the data will be stored for up to 6 months. Your data will be deleted no later than 6 months after this period expires. In the event of a legal obligation, the data will be stored in accordance with applicable regulations.
The personal data additionally collected during the submission process will be deleted no later than seven days after submission.
Use of Company Profiles on Professional Networks
1. Scope of data processing
The company profile is used for applications, information/PR, and active sourcing. We have no information regarding the processing of your personal data by the companies jointly responsible for the company profile. Further information can be found in the privacy policy of:
On our site, we provide information and offer users the opportunity to communicate.
The company profile is used for job applications, information/PR, and active sourcing.
We have no information regarding the processing of your personal data by the companies jointly responsible for the company profile. For more information, please refer to the privacy policy of:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
XING:
https://privacy.xing.com/de
If you perform an action on our company website (e.g., comments, posts, likes, etc.), you may thereby make personal data (e.g., your real name or profile photo) public.
2. Legal basis for data processing
The legal basis for processing personal data for the purpose of communicating with customers and prospective customers is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is to respond to your inquiry in the best possible way and to provide the requested information.
If the purpose of contacting you is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.
3. Purpose of data processing
Our company website serves to inform users about our services. In doing so, every user is free to publish personal data through their activities.
4. Duration of storage
The data generated by the company website is not stored in our own systems.
5. Exercising Your Rights
You may object at any time to the processing of your personal data that we collect in connection with your use of our corporate website and exercise your rights as a data subject as set forth in the “Your Rights” section of this Privacy Policy. To do so, please send us an informal email to the email address provided in this Privacy Policy.
For more information on exercising your rights, please visit:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
XING:
https://privacy.xing.com/en
Hosting
The website is hosted on servers by a service provider commissioned by us.
Our service provider is:
Address of the provider: Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103. For more information, please refer to the provider’s privacy policy: https://webflow.com/legal/privacy#16-contact-us
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information includes:
• Information about the browser type and version used
• The user’s operating system
• The user’s Internet service provider
• Date and time of access
• Websites from which the user’s system accessed our website
• Websites accessed by the user’s system via our website
This data is not combined with other data sources. The collection of this data is based on Article 6(1)(f) of the GDPR. Our legitimate interest in processing this data is to ensure our website displays correctly and to optimize its functions.
The website server is geographically located in Germany.
Content delivery networks
Fastly, AWS, Netlify, Cloudflare, Bunny, Gcore
1. Description and scope of data processing
On our website, we use features of the content delivery networks Fastly, AWS, Netlify, Cloudflare, Bunny, and Gcore provided by Fastly, AWS, Netlify, Cloudflare, Bunny, and Gcore. A content delivery network (CDN) is a network of regionally distributed servers connected via the internet, used to deliver content—particularly large media files such as videos. Fastly, AWS, Netlify, Cloudflare, Bunny, and Gcore provide web optimization and security services that we use to improve our website’s loading times and protect it from misuse. When you visit our website, a connection is established with the servers of Fastly, AWS, Netlify, Cloudflare, Bunny, and Gcore, for example, to retrieve content. As a result, personal data may be stored and analyzed in server log files, primarily regarding user activity (specifically which pages were visited) and device and browser information (specifically the IP address and operating system).
2. Purpose of Data Processing
The use of the functions of Fastly, AWS, Netlify, Cloudflare, Bunny, and Gcore serves to deliver and accelerate online applications and content.
3. Legal basis for data processing
This data is collected on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring the technical integrity and optimization of its website—to this end, server log files must be collected.
4. Duration of Storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, but for no longer than 30 days.
5. Exercising Your Rights
Information on exercising your rights with respect to Fastly, AWS, Netlify, Cloudflare, Bunny, and Gcore can be found at: https://www.fastly.com/privacy https://www.netlify.com/privacy/ https://d1.awsstatic.com/onedam/marketing-channels/website/public/legal/privacy/AWS_Privacy_Notice_2025-10-16_DE-DE.pdf.
Integrated Third-Party Services
We use various service providers to deliver the services we offer on the website.
In general, we have a legitimate interest in sharing your data with the relevant service providers if these services are essential for providing the core service offered on the website.
If such services are required for additional services, extended features, or additional purposes, your personal data will only be shared with service providers if you give your consent.
Here you can revoke your consent to the use of integrated third-party services at any time and manage your consent settings: www.binder-consulting.de
Use of Google Analytics 4 (GA 4)
1. Scope of personal data processing
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).
Google Analytics analyzes, among other things, how website visitors use our site. In doing so, Google places cookies on your device. During your visit, user behavior is recorded in the form of “events.” This may result in the storage and analysis of personal data, including:
• First visit to the website
• Interaction with the website, usage path
• Clicks on external links
• Video usage
• File downloads
• Ad impressions and clicks
• Scrolling behavior (if scrolling to the bottom of the page)
• Searches on the website
• Language selection
• Page visits
• Location (region)
• Your IP address (in truncated form)
• Technical information about your browser and the devices you use (e.g., language settings, screen resolution)
• Your Internet service provider
• Referrer URL
We use the User ID feature. With the help of the User ID, we can assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyze user behavior across devices.
We use Google Signals. This allows Google Analytics to collect additional information about users who have enabled personalized ads (interests and demographic data), and ads can be delivered to these users in cross-device remarketing campaigns.
By default, IP address anonymization is enabled in GA 4. This means that your IP address is truncated by Google within the member states of the European Union or other signatory states to the Agreement on the European Economic Area. In exceptional cases, the full IP address is transmitted to a Google server in the United States and truncated there. Google states that the IP address transmitted by your browser is not combined with other Google data within the scope of Google Analytics.
For more information on how Google processes this data, please visit: https://policies.google.com/privacy
2. Purpose of Data Processing
We use GA 4 to evaluate the use of our online presence and to generate reports on activity on our website. The reports are used to analyze the performance of our website and to display targeted advertising to individuals who have already expressed an initial interest by visiting our site.
3. Legal basis for the processing of personal data
The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1)(a) of the GDPR.
4. Duration of storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or until you exercise your right to withdraw consent.
5. Exercising Your Rights
You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. You can withdraw your consent via our Cookie Consent Tool.
You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “"Do Not Track" feature of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.
For more information on options to object to or remove data from Google, please visit: https://policies.google.com/technologies/partner-sites
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
You can disable the use of your personal data by Google via the following link: https://adssettings.google.de
Use of HubSpot
1. Scope of Personal Data Processing
We use features provided by HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as “HubSpot”). This is an integrated software solution that we use to manage various aspects of our online marketing. These include, among other things: contact management (in particular user segmentation & CRM), and contact forms.
Further information on the processing of data by HubSpot can be found here:
https://legal.hubspot.com/de/privacy-policy
2. Purpose of Data Processing
The HubSpot plugin is used exclusively to facilitate contact with binder|consulting.
3. Legal basis for the processing of personal data
The legal basis for the processing of users’ personal data is, in principle, the user’s consent pursuant to Article 6(1)(a) of the GDPR.
4. Duration of storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.
5. Exercising Your Rights
You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of your consent prior to withdrawal.
You can prevent HubSpot from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the "Do Not Track" feature of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
For more information on options to object to or remove HubSpot, please visit:
https://legal.hubspot.com/de/privacy-policy
This privacy policy was created with the support of DataGuard.