Privacy Policy

This privacy notice applies to the processing of personal data by Schicht im Schacht UG (haftungsbeschränkt), Lohengrinstraße 30, 47137 Duisburg, Germany, and Gusto Consulting FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, when you interact with us via our website, contact us by email or phone, or engage with our B2B consulting services. 

1. Definitions 

Personal Data refers to any information relating to an identified or identifiable natural person (“Data Subject”). 

Processing means any operation or set of operations performed on personal data, whether automated or not. 

Pseudonymization means processing personal data in such a way that it can no longer be attributed to a specific data subject without additional information. 

Profiling means automated processing to evaluate certain personal aspects, such as work performance, economic situation, interests, or behavior. 

Controller means the entity that determines the purposes and means of processing personal data. 

Processor means the entity that processes personal data on behalf of the Controller. 

2. Types of Processed Data 

  • Contact Data (e.g., name, email, phone number) 
  • Content Data (e.g., messages you send us) 
  • Usage Data (e.g., website visits, access times, interactions) 
  • Communication and Metadata (e.g., device information, IP addresses) 
  • Newsletter & Marketing Data (e.g., subscription status, opening rates, click-through rates) 

3. Purpose of Processing 

  • Providing our online services 
  • Handling inquiries and client communications 
  • Website security and functionality 
  • Analytics and performance optimization 
  • Newsletter distribution and performance tracking 
  • Marketing and business development 

4. Legal Bases 

We process your data based on: 

  • Your consent (Art. 6(1)(a) GDPR) 
  • Contractual obligations (Art. 6(1)(b) GDPR) 
  • Legal obligations (Art. 6(1)(c) GDPR) 
  • Legitimate interests (Art. 6(1)(f) GDPR) 

5. Security Measures 

We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to ensure data confidentiality, integrity, and availability. This includes access controls, encryption, and regular security audits. 

6. Cooperation with Processors and Third Parties 

We share data with: 

  • Web Hosting Providers 
  • Email & Newsletter Service Provider: Brevo (Sendinblue SAS, France) – tracking pixels in newsletters measure open and click rates 
  • Web Analytics Tools: Jetpack by Automattic 
  • Affiliate Networks: Amazon Partner Program 

These third parties act under data processing agreements (Art. 28 GDPR). 

7. Data Transfers to Third Countries 

Data may be processed in the EU, UAE, or other jurisdictions. Transfers are based on Art. 44 ff. GDPR with appropriate safeguards such as standard contractual clauses. 

8. Your Rights 

You have the right to: 

  • Access your data (Art. 15 GDPR) 
  • Rectify incorrect data (Art. 16 GDPR) 
  • Erase your data (Art. 17 GDPR) 
  • Restrict processing (Art. 18 GDPR) 
  • Data portability (Art. 20 GDPR) 
  • Object to processing (Art. 21 GDPR) 
  • Withdraw consent at any time (Art. 7(3) GDPR) 
  • Lodge a complaint (Art. 77 GDPR) 

9. Cookies and Consent Management 

We use cookies and similar technologies. You can manage your preferences through our Cookie Banner provided by Real Cookie Banner. Learn more here. 

10. Amazon Partner Program 

We participate in the Amazon EU Partner Program. Amazon uses cookies and similar technologies to track purchases originating from our affiliate links. 

By clicking an Amazon link on our website, you will be redirected to Amazon’s platform. From that moment, Amazon’s privacy policy applies, and Amazon may process your personal data in the United States or other third countries under Standard Contractual Clauses (SCCs) or equivalent safeguards. 

See Amazon’s Privacy Policy for more information. 

Disclaimer: Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates. 

11. Web Analytics with Jetpack 

We use Jetpack (WordPress Stats) to analyze website usage. Data may be processed by Automattic Inc. in the USA. See Automattic’s Privacy Policy. 

12. Social Media and Embedded Services 

We maintain profiles on: 

  • LinkedIn 
  • X (formerly Twitter) 

Interactions on these platforms are subject to the privacy policies of the respective providers. If you are logged in to a social network, that network may associate your visit to our profile with your user account. You can prevent this by logging out before visiting. 

We also embed content from: 

  • YouTube 
  • Vimeo 

These services may collect usage data and deploy pixel tags or web beacons for analytics and marketing. 

13. Data Retention 

We retain personal data only as long as necessary for the purposes stated in this policy or where we have another lawful basis to do so. Specifically, we retain data as required by: 

  • §§ 147 AO, 257 HGB (Germany) – up to 10 years for accounting and commercial records. 
  • UAE Commercial Transactions Law – 5 years for UAE accounting records. 
  • Newsletter analytics data (email subscription status, opening and click rates) – retained for up to 3 years to document consent and measure performance, after which it is anonymised or deleted. 
  • Contact form submissions and general inquiries – retained for up to 2 years after the last communication, unless a longer retention period is required for contractual or legal reasons. 
  • Other applicable legal or contractual obligations 

14. Contact 

For any questions about this policy: 

Schicht im Schacht UG (haftungsbeschränkt) 
Email: marcel.ruetten@recruiting-excellence.org 

Gusto Consulting FZCO 
Email: antonio.degraaf@recruiting-excellence.org