1. About this Privacy Statement


The present privacy statement applies to any and all websites, applications and tools of consalco. GmbH.


The protection of your personal data is of the utmost importance to us. This privacy statement conforms with GDPR, the German Data Protection Act and the German Telecommunications Act and will inform you about type, purpose and use of your personal data by consalco. GmbH, the operator of this website.


The numerous security measures on our website notwithstanding, a comprehensive protection of your data cannot be guaranteed for security gaps on the Internet can neither be excluded nor avoided. Feel free to contact us at any time if you have questions regarding the processing of your personal data by us. You can reach out to us using the contact details provided below.


  1. Personal Data


In order to properly communicate and provide our services, we need to rely on personal data. Personal data are particularly sensitive, i.e. all information relating to a specific natural person. GDPR requires us to comprehensively lay down the scope of these sensitive data.


The following personal data will be collected upon use of our website:


  • first and surname
  • address
  • date of birth
  • e-mail address
  • IP address


The aforementioned data will be collected during the use of the following website functions:


  • commentary
  • contact form


We hereby represent to you that these data will only be collected for the purposes of conducting and implementing the order process, personalised advertising and marketing communications as well as preparing statistics and improving our services. We will only collect, use and transmit your personal data within the applicable legal framework, within our company or with your explicit consent. According to applicable legislation, your personal data will only be collected for as long as you are using our services. However, we do reserve the right to retroactively review the server log files if there are sufficient grounds for suspecting an unlawful use of our services. All mandatory time limits for the erasure of personal data will be adhered to.

Legitimate basis for the collection of data is Article 6(1), first sentence, points (a) through (f) GDPR

Your personal data will be protected through the implementation of technical and organisational measures to mitigate the risks of data loss, misuse, unlawful access and unauthorised transfer.


  1. Data Transfer and Data Recording


To the legally permissible extent, your personal data will be disclosed to the following companies within the European Union:


-           IT service providers for maintenance and software support

-           Google Inc. (https://adssettings.google.com/authenticated?hl=en)


3.1 Log Files


A log file will be created automatically by the processing computer system, i.e. information on your device will be stored as log files on a server.


We analyse log files as well. To that end, our website provider collects the following information:


  • date, time and frequency of website access
  • how you got to our website (previous website, hyperlinks, etc.)
  • amount of data transmitted
  • your browser and browser version
  • your IP address


These data will be used to improve our services only. The aforementioned data may only be stored for a longer period of time, disclosed or accessed subsequently if so provided for by law (e.g. justified suspicion of unlawful activities).


3.2 Duration of Data Storage


We will store your data for as long as necessary for the respective purpose only:


-           data for quotations and order processing: 1 year

-           contract documents: 10 years

-           IP data: 3 years (standard limitation period)

-           bank data of PLUS CARD customers: after termination of the last PLUS CARD contract

-           legal matters: 6 years (Section 50 of the German Federal Lawyers Order)

-           damage claims: 10 years


Please note that for certain data used for order processing applicable tax legislation provides for a mandatory storage period of 6 or 10 years. However, during this period, the processing of such data will be restricted. The storage period shall commence at the end of the calendar year of either the issued quotation or the contractual performance in question.


3.3 Cookies


Our website uses cookies. Cookies are small text files that will be stored on the website user’s device to collect specific information on said user. Cookies enable us to determine the frequency of use and the number of users, to analyse user behaviour and to improve our services for you. The most commonly used cookies are called “session cookies” which will be deleted immediately after your visit. However, other cookies will be stored permanently on your device until deleted manually by you. These cookies allow us to identify you upon your next visit. However, this can be prevented by applying the corresponding browser settings to disable cookies. Please note that by disabling cookies in your browser settings you may not be able to make full use of this website’s functions.


3.4 Newsletter and Subscription


You may choose to receive our newsletter, however, there shall be no guarantee as to its publication. The newsletter informs you about our current offers and services. If you wish to subscribe to our newsletter, we ask you to provide us with a valid e‑mail address. We will store your e‑mail address for this purpose. If you no longer wish to receive our newsletter you may choose to unsubscribe by clicking on the respective link indicated in each newsletter. Your e‑mail address will be immediately erased from our mailing list upon clicking this link.


  1. Web Analysing Services


This website uses Google Analytics, a web analysing service of Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, (“Google”). Google Analytics uses cookies, i.e. text files that will be stored on your device and allow for the analysis of your use of our website. The so-collected data on your use of our website will be sent to one of Google’s servers in the United States of America and stored there.


However, if IP anonymisation is activated for this website, Google will shorten your IP address within the Member States of the European Union or in countries that are parties to the European Economic Area Agreement. Only in exceptional cases will Google transmit your full IP address to their servers in the United States to shorten it there. By shortening your IP address, it will no longer be relating specifically to you. The website operator has concluded a data processing agreement with Google under which the latter will analyse the use of our website as well as the activities on our website and to provide further services with regard to Internet usage. Google will never associate your IP address submitted by your browser with other data collected on you.


You may disable cookies on your device by applying the appropriate settings of your browser. However, please be advised that by doing so you may not be able to make full use of all our website’s functions. Moreover, you may use the following browser plug-in to prevent Google from collecting and using your data (including your IP address): https://tools.google.com/dlpage/gaoptout?hl=en.



  1. Social Bookmarks


5.1 Privacy Statement for the Use of Xing


Our website uses functions of XING AG, Dammtorstraße 29-32, D-20354 Hamburg, Germany, such as the “share button”. By accessing a page of our website containing this button, a connection to Xing’s servers will be established. To our knowledge, no data on the access to this website will be stored in this process, no IP addresses will be stored and user behaviour will not be analysed.

More information on data protection and Xing’s share button will are available under https://privacy.xing.com/en or https://www.xing.com/app/share?op=data_protection (available in German only).



5.2 Privacy Statement for the Use of LinkedIn


Our website further uses plug-ins by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as “LinkedIn”). Such plug-ins include the button with the LinkedIn logo or the “recommend” button. Please note that upon visiting our website, these plug-ins will establish a connection between your browser and the servers of LinkedIn. LinkedIn will therefore receive the information of your visit to our website as well as your IP address. If you are logged in to your LinkedIn account and click on the “recommend” button, you will be able to directly link our website contents to your LinkedIn profile page, thereby allowing LinkedIn to associate your visit to our website with your personal account. We have no control over type and scope of the data collected by the LinkedIn plug-in. However, you may prevent LinkedIn from collecting such personal data by logging out of your account before visiting our website. Further information on the collection of your data as well as your legal remedies and available settings will be available with LinkedIn under: https://www.linkedin.com/legal/privacy-policy.


5.3 Privacy Statement Google +1


We are using the button “+1” of the social media provider Google+ (Google Plus), a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043 USA, (hereinafter referred to as “Google”).


You can use the “+1” button to share content worldwide. This button will allow you and other users to receive personalised content from Google and our partners.


In order to be able to make use of the “+1” button you will need a publicly visible Google account that must contain at least a name. This name will be used for all Google services. In some cases, this name may replace other names used by you to share contents on your Google account. Your Google account will be visible to users who possess your e‑mail address or other information relating to you.


For every access to one of our pages containing the “+1” button, the latter will load its symbol from one of Google’s servers in order to be displayed by your browser. In this process, Google will be notified about the specific page accessed by you. Google will store your browser history for displaying the “+1” button for up to two weeks for system maintenance and error rectification purposes as well as to improve their services for you and other users. However, there will be no further analysis of your visit to our pages containing a “+1” button.


Using the “+1” button while being logged in to your Google+ account will allow Google to collect information on the URL recommended by you, your IP address and other browser‑related data in order to store and publish your “+1” recommendation. Your recommendations, your name and your profile picture may be used and displayed in other Google services as well, e.g. these may appear in search results, in your Google profile (as “+1” tab) or on websites and in advertisements elsewhere on the Internet. According to Google Inc., personal data will not be collected unless you click the “+1” button. In this instance, your IP address will be collected, amongst others. If you do not wish Google to collect these data and associate them with your account, please log out of your account before visiting our website.


For more information on Google’s “+1” privacy policies, the collection, transfer and use of data by Google as well as your rights and available profile settings please refer to the following URLs: 





In addition to the purposes referred to above, your submitted data will be used in accordance with Google’s Privacy Policy. Google may publish summary statistics on user’s “+1” activities or disclose such statistics to other users and partners, such as publishers, advertisers or affiliated websites.


5.4 Privacy Statement for the Use of Google AdSense


This website uses Google AdSense, a web advertising service provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, (“Google”). Google AdSense uses cookies, i.e. small text files that will be stored on your computer to analyse the use of our website. Google AdSense further uses web beacons (invisible graphics). These web beacons allow for analysing the user traffic of websites. Information on the use of our websites (including your IP address) and the display of advertisements generated by both cookies and web beacons will be sent for storage on a Google server in the United States of America.


Such information may be transferred to Google’s partners. However, Google will never associate your IP address with other data collected on you. Please note that you can disable cookies in your browser settings. However, please be also advised that in this case you may not be able to make full use of the website’s functions. By using our website, you agree to the processing of your data by Google in accordance with the procedures and purposes referred to above.


  1. Your Rights


Of course, you do have rights regarding the collection of your data. Under applicable legislation, we are obligated to inform you about these rights. Exercising your rights will be free of charge.


6.1 Right to Revoke


You may withdraw your consent for any future collection of your data at any time. However, such withdrawal shall not apply to already collected data. (Article 7 III GDPR)


  • Right to Data Portability

You have the right to demand the transfer of your personal data to another controller and you have the right to receive your data in a structured, commonly used and machine‑readable format.

(Article 20 GDPR)


6.3 Right to Object


You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1). Thereupon, we shall no longer process your personal data unless compelling legitimate grounds for the processing can be demonstrated.(Article 21 (1) GDPR)

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing. Thereupon, we will no longer process your data for this particular purpose (Article 21(2) GDPR).


6.4 Right to Rectification, Erasure or Blocking


All personal data provided by you in the contract, including but not limited to name, address, phone number and bank data, will be required for the sole purpose of the performance of said contract and will therefore be collected on a justified legal basis. Moreover, by using our website, you agree to the use and intracompany transfer of your data for additional purposes. More specifically, you agree to the following purposes as per Article 7 GDPR:


By registering with consalco. GmbH, you agree to receive advertising and product information by mail.


Moreover, you agree to receive advertising and product information by e‑mail/phone/fax/SMS*.


Pursuant to Article 15 GDPR, you have the right to obtain from consalco. GmbH comprehensive access to your personal data collected by consalco. GmbH.

Pursuant to Article 16 GDPR, you have the right to obtain from consalco. GmbH without undue delay the rectification of inaccurate personal data and you have the right to have incomplete personal data completed.



Pursuant to Article 17 GDPR, you have the right to obtain from consalco. GmbH the erasure of personal data concerning without undue delay.


Pursuant to Article 18 GDPR, you have the right to obtain from cansalco. GmbH restriction of processing where either of the conditions laid down in Article 18(1) points (a) through (d) applies.



Pursuant to Article 19 GDPR, you will be notified about rectification, erasure and restriction of processing of your personal data.


You are entitled to exercise your right to object at any time without any justification, thereby either completely withdrawing your consent or amending it according to your wishes. Any such withdrawal may be directed to us by e‑mail or fax. Besides the usual postal charges or your provider’s basic tariff, there will be no additional charges. Any query about which of your personal data are being stored shall be free of charge as well. Provided your request does not contradict our mandatory retention period (e.g. under the Data Retention Directive), you have the right to obtain from us the rectification of incorrect data, the erasure of your personal data as well as to request blocking of your personal data.



  1. Right to Lodge a Complaint


You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes applicable legislation. Should you wish to exercise this or one of the two aforementioned rights, please contact the responsible person indicated below. (Article 77 GDPR)

The authority competent in such matters for the Free State of Bavaria is:


Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27, 91522 Ansbach

Telefon: +49 (0) 981 53 1300

Fax: +49 (0) 981 53 98 1300

E-Mail: poststelle@lda.bayern.de






  1. User Obligations/Copyright


The designs, texts, images, software as well as any variations and layouts thereof on this website are the intellectual property of consalco. GmbH (Copyright © consalco. GmbH ALL RIGHTS RESERVED). Duplicates and copies (including printouts) of this website or parts thereof shall only be permissible for the purposes of order placement or purchases with consalco. GmbH.


Any other use of the materials and information provided on this website, including their duplication, distribution, modification or publication, for any other than the above-mentioned purposes shall not be permitted without express written consent given by consalco. GmbH in advance. However, this shall not apply to the company’s internal use of said materials and information.


  1. Responsible Contact


Please direct any questions, information requests, applications, complaints or criticism regarding data protection to the following address:


consalco. GmbH

Board of Directors

Berghamer Str. 14

D-85435 Erding



The implementation of our data protection measures is supervised by an external data protection officer. You may direct any issues regarding the processing of your personal data directly to our data protection officer:





  1. Amendments of the Privacy Statement


As the controller we shall reserve the right to amend this privacy statement at any time to comply with applicable data protection legislation. The current version is dated (May 2018).