{"id":755,"date":"2024-01-24T14:46:48","date_gmt":"2024-01-24T14:46:48","guid":{"rendered":"https:\/\/pathdusseldorf.de\/?page_id=755"},"modified":"2026-02-18T13:50:26","modified_gmt":"2026-02-18T13:50:26","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/pathdusseldorf.de\/en\/gdpr","title":{"rendered":"GDPR"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"755\" class=\"elementor elementor-755\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-882d6f8 e-flex e-con-boxed e-con e-parent\" data-id=\"882d6f8\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a5bcd01 elementor-widget elementor-widget-heading\" data-id=\"a5bcd01\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Data Privacy Policy\u00a0<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bc6a0b5 e-flex e-con-boxed e-con e-parent\" data-id=\"bc6a0b5\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2a3dcbf elementor-widget elementor-widget-text-editor\" data-id=\"2a3dcbf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h1><strong>Data Privacy Policy <\/strong><\/h1><p>Last updated: 18.02.2026<\/p><p>Path D\u00fcsseldorf GmbH takes the protection of personal data seriously. This Data Privacy Policy explains how personal data is processed when you visit our website or interact with us in the context of our professional activities, in accordance with the General Data Protection Regulation (GDPR \/ DSGVO), the German Federal Data Protection Act (Bundesdatenschutzgesetz \u2013 BDSG), and other applicable data-protection laws.<\/p><p>\u00a0<\/p><h2><strong>1. Controller<\/strong><\/h2><p>The controller responsible for data processing pursuant to Art. 4(7) GDPR is:<\/p><p><strong>Path D\u00fcsseldorf GmbH<\/strong><br \/>Gesch\u00e4ftsf\u00fchrer:\u00a0<strong>K. Hakan Hasserbetci<\/strong><br \/>c\/o 360 Workspace<br \/>Gerresheimer Stra\u00dfe 86<br \/>40233 D\u00fcsseldorf<br \/>Germany<\/p><p>Email:\u00a0<strong>support@pathdusseldorf.com<\/strong><\/p><p>\u00a0<\/p><h2><strong>2. General Information on Data Processing<\/strong><\/h2><p>We process personal data only where permitted by law and only for specified, explicit, and legitimate purposes. Personal data is processed in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality as set out in Art. 5 GDPR.<\/p><p>\u00a0<\/p><h2><strong>3. Website Access and Hosting<\/strong><\/h2><p>When you access our website, technical data may be processed automatically by our hosting provider to ensure the secure and reliable operation of the website. This data may include:<\/p><ul><li>IP address<\/li><li>Date and time of access<\/li><li>Browser type and version<\/li><li>Operating system<\/li><li>Referrer URL<\/li><\/ul><p>This data is processed exclusively for technical, security, and operational purposes and is not used to identify individual users.<\/p><p><strong>Legal basis:<\/strong><br \/>Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation)<\/p><p>\u00a0<\/p><h2><strong>4. No Contact Forms on the Website<\/strong><\/h2><p>Our website does\u00a0<strong>not<\/strong>\u00a0provide contact forms and does\u00a0<strong>not<\/strong>\u00a0require visitors to actively enter personal data.<\/p><p>If you contact us voluntarily via email, we will process the personal data you provide (such as your email address, name, and message content) solely for the purpose of responding to your enquiry or initiating professional communication.<\/p><p><strong>Legal basis:<\/strong><br \/>Art. 6(1)(b) GDPR (pre-contractual measures)<br \/>Art. 6(1)(f) GDPR (legitimate interest in professional communication)<\/p><p>\u00a0<\/p><h2><strong>5. Cookies and Tracking Technologies<\/strong><\/h2><p>Our website does\u00a0<strong>not<\/strong>\u00a0use cookies, analytics tools, tracking technologies, or marketing services.<\/p><p>No cookie banner is displayed, as no cookies requiring consent under applicable data-protection law are used.<br \/>Further details are provided in our separate\u00a0<strong>Cookies Policy<\/strong>.<\/p><p>\u00a0<\/p><h2><strong>6. Processing of Client and Business Contact Data<\/strong><\/h2><p>In the course of our professional activities, we process personal data of business contacts, including clients, client representatives, training participants, and partners.<\/p><p>Such data may include names, professional contact details, organisational roles, and communication records. Processing is limited to what is necessary for:<\/p><ul><li>contract initiation and performance,<\/li><li>consulting, governance, and compliance services,<\/li><li>training delivery and documentation,<\/li><li>compliance with legal and regulatory obligations.<\/li><\/ul><p><strong>Legal bases:<\/strong><br \/>Art. 6(1)(b) GDPR<br \/>Art. 6(1)(c) GDPR<br \/>Art. 6(1)(f) GDPR<\/p><p>\u00a0<\/p><h2><strong>7. Processing in Consulting, DPO, and Compliance Mandates<\/strong><\/h2><p>Depending on the specific engagement, Path D\u00fcsseldorf GmbH may act as:<\/p><ul><li><strong>controller<\/strong>,<\/li><li><strong>processor<\/strong>, or<\/li><li><strong>independent professional subject to statutory secrecy obligations<\/strong>, including in the role of outsourced Data Protection Officer (DPO).<\/li><\/ul><p>Where personal data of a client\u2019s employees or end customers is processed, such processing takes place strictly within the scope of the mandate and under the responsibility of the respective client as controller, unless otherwise contractually agreed.<\/p><p>\u00a0<\/p><h2><strong>8. Freelance Consultants and Advisory Board Members<\/strong><\/h2><p>Path D\u00fcsseldorf GmbH collaborates with freelance consultants and advisory board members worldwide. These individuals are\u00a0<strong>not employees<\/strong>.<\/p><p>Personal data is processed for the purposes of contractual cooperation, coordination, communication, and compliance with legal, accounting, and tax obligations.<\/p><p><strong>Legal bases:<\/strong><br \/>Art. 6(1)(b) GDPR<br \/>Art. 6(1)(c) GDPR<br \/>Art. 6(1)(f) GDPR<\/p><p>\u00a0<\/p><h2><strong>9. Training and Events<\/strong><\/h2><p>When we organise or deliver training sessions, workshops, or professional events, we may process personal data of participants, such as names, professional contact details, attendance information, and certification-related records.<\/p><p>Processing is limited to what is necessary for training delivery, documentation, and professional follow-up.<\/p><p><strong>Legal bases:<\/strong><br \/>Art. 6(1)(b) GDPR<br \/>Art. 6(1)(f) GDPR<\/p><p>\u00a0<\/p><h2><strong>10. International Data Transfers<\/strong><\/h2><p>Due to the international scope of our consulting, governance, and training activities, personal data may be transferred to recipients located outside the European Union or the European Economic Area (EEA), including clients, partners, or consultants operating internationally.<\/p><p>Such transfers are carried out\u00a0<strong>only where permitted under Chapter V GDPR<\/strong>\u00a0and only when appropriate safeguards are in place. These safeguards may include, in particular:<\/p><ul><li>Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR),<\/li><li>contractual confidentiality and data-protection obligations,<\/li><li>internal governance, access-control, and documentation measures.<\/li><\/ul><p>Where required, transfer risk assessments are considered to evaluate the legal environment of the recipient country and the effectiveness of the implemented safeguards.<\/p><p>Path D\u00fcsseldorf GmbH does\u00a0<strong>not<\/strong>\u00a0transfer personal data to third countries for marketing, profiling, or advertising purposes.<\/p><p>\u00a0<\/p><h2><strong>11. Data Retention<\/strong><\/h2><p>Personal data is retained only for as long as necessary to fulfil the respective processing purpose or to comply with statutory retention obligations. Data is deleted or anonymised once retention is no longer required.<\/p><p>\u00a0<\/p><h2><strong>12. Data Subject Rights<\/strong><\/h2><p>Data subjects have the following rights under the GDPR:<\/p><ul><li>Right of access (Art. 15 GDPR)<\/li><li>Right to rectification (Art. 16 GDPR)<\/li><li>Right to erasure (Art. 17 GDPR)<\/li><li>Right to restriction of processing (Art. 18 GDPR)<\/li><li>Right to data portability (Art. 20 GDPR)<\/li><li>Right to object (Art. 21 GDPR)<\/li><\/ul><p>Requests may be addressed to:<br \/>\ud83d\udce7\u00a0<strong>support@pathdusseldorf.com<\/strong><\/p><p>\u00a0<\/p><h2><strong>13. Right to Lodge a Complaint<\/strong><\/h2><p>Data subjects have the right to lodge a complaint with a supervisory authority. The competent authority for Path D\u00fcsseldorf GmbH is:<\/p><p><strong>Landesbeauftragte f\u00fcr Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)<\/strong><\/p><p>\u00a0<\/p><h2><strong>14. Data Security<\/strong><\/h2><p>Path D\u00fcsseldorf GmbH implements appropriate\u00a0<strong>technical and organisational measures (TOMs)<\/strong>\u00a0in accordance with Art. 32 GDPR to ensure a level of security appropriate to the risk.<\/p><p>These measures include, in particular:<\/p><ul><li>role-based access controls and authorisation concepts,<\/li><li>confidentiality obligations for all persons involved in data processing,<\/li><li>secure communication and data-handling practices,<\/li><li>governance procedures for access, storage, and disclosure of personal data,<\/li><li>regular review of organisational and procedural safeguards.<\/li><\/ul><p>Security measures are designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure, taking into account the nature, scope, context, and purposes of processing.<\/p><p>\u00a0<\/p><h2><strong>15. Changes to This Data Privacy Policy<\/strong><\/h2><p>We reserve the right to update this Data Privacy Policy where necessary to reflect legal, regulatory, or operational changes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n    <div class=\"xs_social_share_widget xs_share_url after_content \t\tmain_content  wslu-style-1 wslu-share-box-shaped wslu-fill-colored wslu-none wslu-share-horizontal wslu-theme-font-no wslu-main_content\">\n\n\t\t\n        <ul>\n\t\t\t        <\/ul>\n    <\/div> \n","protected":false},"excerpt":{"rendered":"<p>Data Privacy Policy\u00a0 Data Privacy Policy Last updated: 18.02.2026 Path D\u00fcsseldorf GmbH takes the protection of personal data seriously. This Data Privacy Policy explains how personal data is processed when you visit our website or interact with us in the context of our professional activities, in accordance with the General Data Protection Regulation (GDPR \/ [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_canvas","meta":{"postBodyCss":"","postBodyMargin":[],"postBodyPadding":[],"postBodyBackground":{"backgroundType":"classic","gradient":""},"footnotes":""},"class_list":["post-755","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GDPR - Path Dusseldorf<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pathdusseldorf.de\/en\/gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR - Path Dusseldorf\" \/>\n<meta property=\"og:description\" content=\"Data Privacy Policy\u00a0 Data Privacy Policy Last updated: 18.02.2026 Path D\u00fcsseldorf GmbH takes the protection of personal data seriously. This Data Privacy Policy explains how personal data is processed when you visit our website or interact with us in the context of our professional activities, in accordance with the General Data Protection Regulation (GDPR \/ [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pathdusseldorf.de\/en\/gdpr\/\" \/>\n<meta property=\"og:site_name\" content=\"Path Dusseldorf\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-18T13:50:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pathdusseldorf.de\/wp-content\/uploads\/2026\/03\/Path_Dus_Logo_-e1772454326832.png\" \/>\n\t<meta property=\"og:image:width\" content=\"445\" \/>\n\t<meta property=\"og:image:height\" content=\"336\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/pathdusseldorf.de\/gdpr\",\"url\":\"https:\/\/pathdusseldorf.de\/gdpr\",\"name\":\"GDPR - Path Dusseldorf\",\"isPartOf\":{\"@id\":\"https:\/\/pathdusseldorf.de\/#website\"},\"datePublished\":\"2024-01-24T14:46:48+00:00\",\"dateModified\":\"2026-02-18T13:50:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/pathdusseldorf.de\/gdpr#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/pathdusseldorf.de\/gdpr\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/pathdusseldorf.de\/gdpr#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/pathdusseldorf.de\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/pathdusseldorf.de\/#website\",\"url\":\"https:\/\/pathdusseldorf.de\/\",\"name\":\"Path Dusseldorf\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/pathdusseldorf.de\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR - Path Dusseldorf","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pathdusseldorf.de\/en\/gdpr\/","og_locale":"en_US","og_type":"article","og_title":"GDPR - Path Dusseldorf","og_description":"Data Privacy Policy\u00a0 Data Privacy Policy Last updated: 18.02.2026 Path D\u00fcsseldorf GmbH takes the protection of personal data seriously. This Data Privacy Policy explains how personal data is processed when you visit our website or interact with us in the context of our professional activities, in accordance with the General Data Protection Regulation (GDPR \/ [&hellip;]","og_url":"https:\/\/pathdusseldorf.de\/en\/gdpr\/","og_site_name":"Path Dusseldorf","article_modified_time":"2026-02-18T13:50:26+00:00","og_image":[{"width":445,"height":336,"url":"https:\/\/pathdusseldorf.de\/wp-content\/uploads\/2026\/03\/Path_Dus_Logo_-e1772454326832.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/pathdusseldorf.de\/gdpr","url":"https:\/\/pathdusseldorf.de\/gdpr","name":"GDPR - Path Dusseldorf","isPartOf":{"@id":"https:\/\/pathdusseldorf.de\/#website"},"datePublished":"2024-01-24T14:46:48+00:00","dateModified":"2026-02-18T13:50:26+00:00","breadcrumb":{"@id":"https:\/\/pathdusseldorf.de\/gdpr#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pathdusseldorf.de\/gdpr"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/pathdusseldorf.de\/gdpr#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/pathdusseldorf.de\/"},{"@type":"ListItem","position":2,"name":"GDPR"}]},{"@type":"WebSite","@id":"https:\/\/pathdusseldorf.de\/#website","url":"https:\/\/pathdusseldorf.de\/","name":"Path Dusseldorf","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pathdusseldorf.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/pathdusseldorf.de\/en\/wp-json\/wp\/v2\/pages\/755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pathdusseldorf.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pathdusseldorf.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pathdusseldorf.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pathdusseldorf.de\/en\/wp-json\/wp\/v2\/comments?post=755"}],"version-history":[{"count":13,"href":"https:\/\/pathdusseldorf.de\/en\/wp-json\/wp\/v2\/pages\/755\/revisions"}],"predecessor-version":[{"id":1649,"href":"https:\/\/pathdusseldorf.de\/en\/wp-json\/wp\/v2\/pages\/755\/revisions\/1649"}],"wp:attachment":[{"href":"https:\/\/pathdusseldorf.de\/en\/wp-json\/wp\/v2\/media?parent=755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}