1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy, which is listed below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the “Information on the Data Controller” section of this Privacy Policy.
How do we collect your data?
Your data is collected, in part, when you provide it to us. This may include, for example, data that you enter into a contact form.
Other data is collected by our IT systems automatically or with your consent when you visit the website. This primarily consists of technical data (e.g., internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated through the website, the data provided will also be processed for contract offers, orders, or other order inquiries.
What rights do you have regarding your data?
You have the right at any time to receive, free of charge, information about the source, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw that consent at any time with future effect. In addition, under certain circumstances, you have the right to request that the processing of your personal data be restricted. Furthermore, you have the right to file a complaint with the competent supervisory authority.
Please feel free to contact us at any time regarding this matter or any other questions you may have about data protection.
2. Hosting
We host the content of our website with the following provider:
External Hosting
This website is hosted externally. The personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact requests, metadata and communication data, contract data, contact information, names, website visits, and other data generated through a website.
External hosting is provided for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR). If consent has been obtained, processing is based exclusively on Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, to the extent that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
Our hosting provider(s) will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
We use the following hosting provider(s):
Blosch & Mozikov Informatik GbR
Max-Born-Straße 19
74321 Bietigheim-Bissingen
3. General Information and Mandatory Disclosures
Privacy Policy
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data are collected. Personal data is information that can be used to identify you personally. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.
Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.
Note Regarding the Responsible Party
The entity responsible for data processing on this website is:
HR Metrics Consulting GmbH
Ellen-Gottlieb-Straße 4
79106 Freiburg
Authorized Managing Director: Christian Fritz
Phone: +49 157 321 3112 7
Email: info@hr-metrics.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
Retention Period
Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which it was collected no longer applies. If you submit a valid request for erasure or revoke your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.
General Information on the Legal Basis for Data Processing on This Website
If you have consented to the processing of your data, we process your personal data on the basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, provided that special categories of data as defined in Article 9(1) of the GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing is additionally based on § 25(1) TDDDG. You may revoke your consent at any time. If your data is necessary for the performance of a contract or for the implementation of precontractual measures, we process your data pursuant to Article 6(1)(b) of the GDPR. Furthermore, we process your data, to the extent that it is necessary to comply with a legal obligation, on the basis of Article 6(1)(c) of the GDPR. Data processing may also be carried out based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The following sections of this Privacy Policy provide information on the specific legal bases applicable in each individual case.
Recipients of personal data
As part of our business operations, we collaborate with various external parties. In some cases, this requires the transfer of personal data to these external parties. We only disclose personal data to external parties if it is necessary for the performance of a contract, if we are legally required to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) of the GDPR, or if another legal basis permits the disclosure of data. When using data processors, we only disclose our customers’ personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.
Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may revoke any consent you have already given at any time. The lawfulness of the data processing carried out prior to the revocation remains unaffected by the revocation.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)( E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS RELATED TO YOUR SPECIFIC SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THIS PRIVACY POLICY FOR THE SPECIFIC LEGAL BASIS ON WHICH PROCESSING IS BASED. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) OF THE GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, THEN YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21, PAR. 2 OF THE GDPR).
Right to File a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their workplace, or the location of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to have data that we process automatically—based on your consent or in fulfillment of a contract—provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will be done only to the extent that it is technically feasible.
Access, Correction, and Deletion
In accordance with applicable legal provisions, you have the right at any time to receive, free of charge, information about your stored personal data, its origin, the recipients, and the purpose of data processing, as well as the right to have this data corrected or deleted, if applicable. You may contact us at any time regarding this matter or with any other questions about personal data.
Right to Restriction of Processing
You have the right to request that the processing of your personal data be restricted. You may contact us at any time to do so. The right to restrict processing applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request that the processing of your personal data be restricted.
- If the processing of your personal data was or is unlawful, you may request that the processing of your data be restricted instead of having it erased.
- If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of being erased.
- If you have filed an objection under Article 21(1) of the GDPR, your interests and our interests must be weighed against one another. Until it is determined whose interests prevail, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, such data—other than for storage purposes—may be processed only with your consent or for the purpose of asserting, exercise, or defense of legal claims; to protect the rights of another natural or legal person; or for reasons of a substantial public interest of the European Union or a Member State.
In accordance with legal requirements and taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
The measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as access to, input of, disclosure of, ensuring availability of, and segregation of data. Furthermore, we have established procedures to ensure the exercise of data subject rights, deletion of data, and responses to data threats.
Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software, and procedures in accordance with the principle of data protection through technology design and through data protection-friendly default settings.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar.
If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.
4. Data Collection on This Website
Cookies
Our website uses so-called “cookies.” Cookies are small data packets that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
Cookies may be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain third-party services into websites (e.g., cookies used to process payment transactions).
Cookies serve various purposes. Many cookies are technically necessary because certain website features would not work without them (e.g., the shopping cart feature or the display of videos). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies that are necessary for carrying out the electronic communication process, for providing certain functions you have requested (e.g., the shopping cart function), or for optimizing the website (e.g., cookies for measuring website traffic) (necessary cookies), are stored pursuant to Art. 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically flawless and optimized provision of its services. If consent has been requested for the storage of cookies and similar recognition technologies, processing is carried out exclusively on the basis of this consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG); consent may be revoked at any time.
You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be limited.
If other cookies and services are used on this website, you can find that information in this Privacy Policy.
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the “Real Cookie Banner” consent tool. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal bases for the processing of personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
Providing personal data is neither required by contract nor necessary for entering into a contract. You are not obligated to provide personal data. If you do not provide personal data, we will not be able to manage your consents.
Presences on Social Networks
We maintain online presences within social networks and process data of users in this context in order to communicate with users active there or to offer information about us.
Please note that this may involve the processing of user data outside the European Union. This may pose risks to users, as it could, for example, make it more difficult to enforce their rights.
Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, user profiles can be created based on usage behavior and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are generally stored on the users’ computers, in which the usage behavior and interests of the users are stored. Furthermore, data may also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
For a detailed description of the respective forms of processing and the opt-out options, we refer to the privacy policies and information provided by the operators of the respective networks.
Also in the case of requests for information and the assertion of data subject rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures directly and provide information. Should you still need assistance, you can contact us.
Link to LinkedIn
Our website contains a link (button/icon) that takes you to our company profile on LinkedIn. This is a simple hyperlink without an embedded social media plugin; visiting our page does not result in any data being transmitted to LinkedIn. Only when you actively click on the link will you leave our website and be redirected to LinkedIn. From that point on, LinkedIn’s privacy policy applies, and we have no control over its content or scope.
The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (for users within the EEA), affiliated with LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA. LinkedIn also processes data in the U.S. (see the note on the Data Privacy Framework below). Further information: https://de.linkedin.com/legal/privacy-policy
Since this is merely a link, no separate consent via our cookie consent tool is generally required.
Alternative, if you are not using a simple link but an active LinkedIn plugin (e.g., a “Share” or “Follow” button that connects to a server as soon as the page is loaded): In this case, data such as your IP address is transmitted to LinkedIn as soon as the page loads. In that case, prior consent via the cookie consent tool is required (Art. 6(1)(a) GDPR, § 25(1) TDDDG), and the paragraph above must be adjusted accordingly.Possible Redirection to Microsoft Teams
On our website, we may offer the option to join a Microsoft Teams meeting directly via a link or button, or to schedule an appointment via Microsoft Teams. When you use this feature, you will be redirected from our website to Microsoft Teams.
The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, a subsidiary of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
When you are redirected or participate in the meeting, personal data is transmitted to Microsoft, in particular your IP address and—depending on whether and how you participate—possibly your name, your email address, and video and audio data. Microsoft also processes this data in the United States.
The legal basis for the transmission and the associated data processing is, depending on the circumstances, Art. 6(1)(b) of the GDPR (initiation or performance of a contract, e.g., in the case of an agreed-upon consultation) or Art. 6(1)(f) of the GDPR (our legitimate interest in offering you a straightforward way to contact us and schedule meetings).
For more information about data processing by Microsoft Teams: https://privacy.microsoft.com/de-de/privacystatementNote on the EU-U.S. Data Privacy Framework (as of September 2026)
Both LinkedIn and Microsoft rely on their certification under the EU-U.S. Data Privacy Framework, as well as on standard contractual clauses (Art. 46(2)(c) of the GDPR), for data transfers to the United States. The European Commission’s adequacy decision regarding the Data Privacy Framework remains valid and has not been revoked. However, following a U.S. Supreme Court ruling on June 29, 2026 (Trump v. Slaughter), which calls into question the independence of the U.S. agency (FTC) jointly responsible for the Framework, the long-term stability of this basis for data transfers is currently the subject of legal debate; in addition, proceedings challenging the adequacy decision are pending before the European Court of Justice. It is advisable to keep this wording under review and to update it promptly should the legal situation change.
Inquiries by email, phone, or fax
If you contact us by email, phone, or fax, your inquiry—including all personal data contained therein (name, inquiry)—will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR) if such consent was requested; consent may be revoked at any time.
The data you send us via contact requests will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.
Amendment and Update of the Privacy Policy
We ask you to inform yourself regularly about the content of our privacy policy. We adapt the privacy policy as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g., consent) or other individual notification.
If we provide addresses and contact information of companies and organizations in this privacy policy, please note that the addresses may change over time and please check the information before contacting us.