Privacy Policy

The person responsible for the processing of your personal data in accordance with articles 13 and 14 of the EU General Data Protection Regulation (GDPR) is the:
PwC Solutions GmbH
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main
E-mail: DE_Datenschutz@pwc.com
Phone: +49 69 9585-0 Fax: +49 69 9585-1000

You have the following rights vis-à-vis PwC under the applicable data protection legislation with regard to the personal data concerning you.

Right to information: You can request information from PwC at any time as to whether and what personal data PwC has stored about you. The provision of information by PwC is free of charge for you.

The right to information does not exist or exists only to a limited extent if and to the extent that the information would disclose information that requires secrecy, e.g. information that is subject to professional secrecy.

Correction right: If your personal data stored by PwC is inaccurate or incomplete, you have the right to ask PwC to rectify it at any time.

Right to deletion: You have the right to demand that PwC deletes your personal data if and to the extent that the data is no longer required for the purposes for which it was collected or, if processing is based on your consent, you have withdrawn your consent. In this case, PwC must stop processing your personal data and remove it from its IT systems and databases.

A right to deletion does not exist insofar as

• the data may not be deleted due to a legal obligation or must be processed due to a legal obligation;
• the data processing is necessary for the assertion, exercise or defense of legal claims.

Right to restrict processing: You have the right to request PwC to restrict the processing of your personal data.

Right to transfer data: You have the right to obtain from PwC the data you have provided in a structured, common and machine-readable format and the right to have this data transferred to another person responsible. This right exists only if

• You have provided us with the data on the basis of a consent or on the basis of a contract concluded with you;
• processing is performed using automated procedures.

Right to object to processing

If your data are processed by PwC Solutions GmbH on the basis of Article 6 (1) (f) GDPR, you may object to their processing at any time.

You can assert all the rights described above against PwC if you send your specific request to the following contact details:

By e-Mail: de_store@pwc.com

By post: PwC Solutions GmbH

Friedrich-Ebert-Anlage 35-37

60327 Frankfurt am Main

You have the right to complain to a data protection supervisory authority in accordance with Art. 77 GDPR if you are of the opinion that the processing of your personal data violates data protection law.

Even if an automatic transmission of data takes place in part when you call up our website, you are not legally or contractually obliged to provide data in connection with the use of our homepage.

However, in connection with the ordering of (physical) items, data is required for the conclusion of a contract with us; the provision of this data is also free in this respect, but without the data we cannot conclude a contract with you or send you the (physical) items.

In connection with the contact form and contacting us by e-mail, you are also free to provide us with data via these channels, but without contacting us in this way, we cannot process and answer any enquiries from you.

5.1. Recipient of the data

In order to fulfil the processing purposes listed below, data is also transferred to third parties. This may also include the transfer of personal data to European and non-European countries and the storage of data outside the EU or the European Economic Area (EEA).

Recipients bound by instructions
We share your data with service providers bound by instructions, both within the PwC network and with other third parties, such as IT service providers, who support us in our activities, e.g. as part of the administration and maintenance of the websites and the related systems and/or for other internal or administrative purposes.

PwC is a member of the global PwC network, which consists of the individual legally independent PwC firms. In the course of our activities, we use other German or foreign PwC network companies as network-internal IT service providers bound by instructions, which provide services for the operation, maintenance and care of the IT systems and applications used by the PwC network companies. In addition to PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft based in Germany, this includes in particular PwC IT Services Ltd. based in the United Kingdom (UK).

If we pass on data to service providers bound by instructions, we do not require a separate legal basis for this.

You can find out more about the cloud service providers used by PwC at the following link: https://www.pwc.de/en/disclaimer/cloud-services-providers.html.

Independent recipients

In addition, we share your data in individual cases both within the PwC network and with other third parties who use your data on their own responsibility. For example, in individual cases we also transfer personal data to other companies in the PwC network to support and improve the effectiveness of our business processes (including coordinated marketing activities).

Furthermore, in individual cases we also pass on your data to other third parties, such as authorities, courts or other bodies, if we are obliged by law or by official or judicial order of an EU member state to hand over personal data to these bodies. These bodies also use the data on their own responsibility.

Insofar as you have explicitly consented, Art. 6 para. 1 lit. a) GDPR is the legal basis for the data transfer. If there is a legal obligation to disclose the data, the legal basis for the data transfer is Art. 6 para. 1 lit. c) GDPR. If, on the other hand, the disclosure is required for the fulfilment of a contractual or pre-contractual measure with you as a natural person, Art. 6 (1) (b) GDPR is the legal basis. Otherwise, the transfer is based on our legitimate interests and the legal basis is Art. 6 (1) (f) GDPR, we and the other companies in the PwC network have an interest in making our work processes efficient and sharing business processes within the PwC network for this purpose.

Data transfer to recipients in third countries outside the EU/EEA

Insofar as any of the above-mentioned data transfers are made to a recipient outside the EEA (to so-called “third countries”), an appropriate level of data protection for the foreign transfer is ensured by means of suitable security measures.

For data transfers within the PwC network, the PwC network companies have, among other things, concluded an internal data protection agreement which provides for compliance with the EU standard contractual clauses of the EU Commission within the meaning of Art 46 para 2 lit c) GDPR for the transfer of personal data from EU/EEA countries to PwC network companies outside the EU/EEA.

If you have any questions about such data protection contracts based on the EU standard contractual clauses, or if you would like more information about further security mechanisms and security measures for data transfers to third countries, please feel free to contact us using the following contact details:

Per E-Mail: DE_Datenschutz@pwc.com
Per Post: PwC Solutions GmbH
Friedrich-Ebert-Anlage 35-37 60327
Frankfurt am Main. 

Data transfer to authorities, courts or other bodies
Depending on the nature of the specific engagement, the provision of the service by PwC may also require the transfer of information, work results and documents to public authorities, courts or other public or private bodies in order to process the engagement. Insofar as the commissioned service has a foreign connection, this may also include bodies abroad.

In addition, PwC will transfer personal data to authorities, courts or other bodies insofar as PwC is obliged by law or on the basis of an official or court order to hand over personal data to authorities, courts or other bodies.

5.2. Processing of personal data when accessing the website
When you visit our website, we collect the data that is technically necessary to display this website to you. This involves the following personal data which is automatically transmitted to our server by your browser:

• IP address
• Date and time of your request/call to the website (the app)
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (information about which specific webpage you have visited)
• Access status/http status code
• Transferred data volume
• Website requesting the access
• Browser (information about the browser you use)
• Operating system and its interface (operating system of the computer you use to access the website or app)
• Language and version of the browser software

The processing of this personal data is based on Art. 6 (1) lit. f) GDPR. The data is stored for the functional provision of the website and to ensure the security of the PwC IT systems by defending against attacks and recognising attack patterns and/or ensuring the proper operation of the IT systems. There is a legitimate interest in enabling the website to be called up and used in a technically secure manner. The controller has an interest in the security and availability of this website.

The aforementioned data will be stored for 180 days and then deleted.

This website is hosted by a service provider [Microsoft Corporation, Redmond, USA, location of data storage: Netherlands], the data collected on our website is therefore stored on the servers of the service provider. The server locations are in the European area. Data is transferred abroad, but only to countries in the European Union or the European Economic Area.

In order to make visiting our website attractive and to enable the use of certain functions, we and certain third parties use cookies on our website. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser the next time you visit us (so-called persistent cookies).

The following cookie categories are used:

6.1. Cookies that are technically necessary for the operation of our website:

These cookies are technically necessary for the operation and functionality of the website. They make the website technically accessible, secure and usable and provide essential and basic functionalities, such as navigation on the website, correct display of the website in the internet browser or consent management.

• Provider: www.pwc.de, Name: ppms_privacy, Cookie type: Technically required cookie, Function: Stores the visitor's consent to data collection and use. Duration: 365 days.
• Provider: store.pwc.de, Name: PHPSESSID, Cookie category: Technically required cookie, Function: Stores the PHP session, Duration: Closes the browser.
• Provider: app.powerbi.com, Name: ai_session, Cookie category: Technically required cookie, Function: Display of Microsoft Power BI interfaces, Duration: 1 days
• Provider: app.powerbi.com, Name: ai_user, Cookie category: Technically required cookie, Function: Display of Microsoft Power BI interfaces, Duration: 1 days
• Provider: store.pwc.de, Name: ds-security, Cookie category: Technically required cookie, Function: User session authentication, Duration: 12 hours
• Provider: store.pwc.de, Name: ps_auth_session, Cookie category: Technically required cookie, Function: User session authentication, Duration: 12 hours

6.2. Analytics/Analysis Cookies:

Analytics cookies allow us to collect data in an aggregated form about our website visitors and your experience on our website. We use this data to troubleshoot and improve the experience for all visitors.

• Provider: hotjar, Name: hjIncludedInPageviewSample, Cookie type: Analytics cookie, Function: Tracking website usage: Not personally identifiable, Duration: 1 day
• Provider: store.pwc.de, Name: pk_ses.., Cookie-Category: Analytics-Cookie, Function: Indicates an active session of the visitor. If the cookie is not present, the session ended more than 30 minutes ago and was counted in a pk_id cookie. Duration: 30 minutes.
• Provider: store.pwc.de, Name: pk_id.., Cookie category: Analysis cookie, Function: Used to recognise visitors and record their various characteristics. Duration: 13 months.
• Provider: store.pwc.de, Name: piwik_auth, Cookie-Category: Analysis-Cookie, Function: Stores session information for the user interface (UI) of Piwik PRO. As long as this cookie is valid and contains a login and a token_auth parameter, a visitor is considered to be logged in and a PIWIK_SESSID cookie is updated. Duration: 24 minutes.
• Provider: store.pwc.de, Name: PIWIK_SESSID, Cookie-Category: Analysis-Cookie, Function: Stores a PHP-Session-ID. Duration: 24 minutes.
• Provider: store.pwc.de, Name: stg_traffic_source_priority, Cookie-Category: Analyse-Cookie, Function: Stores the type of traffic source that explains how the visitor arrived at your website. Duration: 30 minutes.
• Provider: store.pwc.de, Name: stg_last_interaction, Cookie-Category: Analyse-Cookie, Function: Determines whether the session of the last visitor is still running or a new session has started. Duration: 365 days.
• Provider: store.pwc.de, Name: stg_returning_visitor, Cookie category: Analysis cookie, Function: Determines whether the visitor has been to your website before - these are returning visitors. Duration: 365 days.
• Provider: store.pwc.de, Name: stg_fired__, Cookie category: Analysis cookie, Function: Determines whether the combination of a tag and a trigger was triggered during the current visitor session. Duration: Closing the browser.
• Provider: store.pwc.de, Name: stg_utm_campaign, Cookie category: Analysis cookie, Function: Stores a name of the campaign that directed the visitor to your website. Duration: Closes the browser.
• Provider: store.pwc.de, Name: stg_pk_campaign n, Cookie category: Analysis cookie, Function: Stores a name of the campaign that directed the visitor to your website. Duration: Closes the browser.
• Provider: store.pwc.de, Name: stg_externalReferrer, Cookie-Category: Analyse-Cookie, Function: Stores a URL of a website that referred a visitor to your website. Duration: Closes the browser.
• Provider: store.pwc.de, Name: stg_opt_out_simulate, Cookie-Category: Analyse-Cookie, Function: Used to simulate the behaviour of the opt-out snippet in the debugger. It turns off all tracking tags in the tested domain. Duration: 365 days.
• Provider: store.pwc.de, Name: stg_optout, Cookie category: Analysis cookie, Function: Used to disable all tracking tags in the tested domain. Duration: 365 days.
• Provider: store.pwc.de, Name: stg_global_opt_out (deprecated), Cookie category: Analysis cookie, Function: Used to disable all tracking tags on websites belonging to a Piwik PRO account. Duration: 365 days.
• Provider: store.pwc.de, Name: ppms_webstorage, Cookie-Category: Analysis-Cookie, Function: A so-called stringified object that contains information about created cookies for each module. It stores data about each cookie created, such as a key, a value, an expiry date, a path, a domain and more. This is the same data that was used to create a cookie. Duration: A ppms_webstorage item is not automatically removed. However, a visitor can delete it manually. Individual entries in the item are removed after a corresponding cookie has expired.

6.3. Marketing-Cookies:

These cookies enable us to alert you to relevant PwC advertising campaigns and to show you personalised PwC content based on your interests, including on third-party websites. In addition, we can use so-called targeting to limit the frequency of appearance of an advertisement and reduce the display of the advertisement for you.

• Provider: doubleclick.net, Name: IDE, Cookie-Category: Marketing-Cookie, Function: Targeting/Advertising, Duration: 730 days
• Provider: doubleclick.net, Name: test_cookie, Cookie-Category: Marketing-Cookie, Function: Targeting/Advertising, Duration: 1 day
• Provider: doubleclick.net, Name: RUL, Cookie-Category: Marketing-Cookie, Function: Targeting/Advertising, Duration: 365 days
• Provider: google.com, Name: NID, Cookie-Category: Marketing-Cookie, Function: Targeting/Advertising, Duration: 180 days
• Provider: Sendinblue GmbH, name: sib_cuid, cookie category: marketing cookie, function: targeting/advertising, duration: 180 days
• Provider: linkedin.com, Name: UserMatchHistory, Cookie category: Marketing cookie, Function: Targeting/advertising, Duration: 30 days
• Provider: linkedin.com, Name: _guid, Cookie-Category: Marketing-Cookie, Function: Targeting/Advertising, Duration: 90 days
• Provider: linkedin.com, Name: li_fat_id, Cookie category: Marketing cookie, Function: Targeting/advertising, Duration: 30 days

The legal basis for the use of technically necessary cookies is Section 25 (2) No. 2 of the Telecommunications Telemedia Data Protection Act (TTDSG) or on the basis of Article 6 (1) f) GDPR to protect our legitimate interests. Our legitimate interests here lie in particular in being able to provide you with a technically optimised website that is user-friendly and tailored to your needs, as well as ensuring the security of our systems. The legal basis for consent with regard to the storage and reading of information is Section 25 (1) TTDSG and, with regard to the processing of personal data, Article 6 (1) a GDPR.

The consent includes all cookies selected by you and the associated storage of information on your terminal device as well as their subsequent reading out and the subsequent processing of personal data.

Insofar as we use cookies on the basis of your consent, you can revoke your consent at any time with effect for the future, e.g. by adjusting your cookie settings using the "Cookie settings" button at the bottom of the page.

Your revocation does not affect the lawfulness of the processing carried out until the revocation.

6.4. Deactivation of cookie settings

Most browsers are preset to accept cookies automatically. You can refuse the generation of cookies by deactivating cookies in the system settings of your browser. Please note, however, that some cookies are absolutely necessary for the function of our website, as otherwise the page cannot be called up and displayed. By deactivating cookies, you will not be able to use parts of the website (without restrictions).

Cookies, which are not absolutely necessary for the function of our web page, we use in principle only with their previous express consent.

In addition, you can also control the installation of cookies yourself at any time by changing your browser settings and/or deleting all cookies.

Our website contains hyperlinks to websites/services of other providers. When activating these hyperlinks, you will be redirected from our website directly to the website of the other provider. You will recognise this by the change of URL, among other things.
We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. On the website, these named social networks may collect usage and possibly user data. We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods.

Therefore, we inform you according to our state of knowledge:

Only when you call up the links does your browser possibly establish a direct connection with the servers of the services mentioned or the website called up. In this way, the information that you have visited our website indirectly (referrer) is forwarded to these services/websites. If you are already logged in to the service with your personal user account while visiting our website, you can usually "share" the document (so-called "sharing") or leave a comment etc. after clicking on the hyperlinks. If you do not wish such data transmission, we advise you not to click on the hyperlinks.

The purpose and scope of the data collection by the social services/websites, as well as the further processing and use of your data there, as well as your rights in this regard and setting options for protecting your privacy, can be found in the data protection notices of these services/websites.