The following data protection information is intended to explain to you in a clear, transparent and understandable way how we, PwC Strategy& (Germany) GmbH (hereinafter: "PwC Strategy&"), process your personal data in connection with your use of our websites, applications ("Apps") and online services. However, if you have questions of understanding or other queries about data protection at PwC, you are welcome to contact our data protection officer DE_Datenschutz@pwc.com or using the other contact details provided below.
The controller within the meaning of Art 4 No 7 Var 1 EU General Data Protection Regulation (GDPR) responsible for the processing of your personal data is:
PwC Strategy& (Germany) GmbH
Switchboard: +49-89-545 250
Fax: +49-89-545 25 500
Registered office of the company:
PwC Strategy& has designated a data protection officer pursuant to Art 37 GDPR. You can contact PwC's data protection officer, Dr Tobias Gräber, via the following channels:
Telephone: +49 69 9585-0
PwC Strategy& (Germany) GmbH
Dr. Tobias Gräber, Datenschutzbeauftragter
You have the following rights under applicable data protection law with regard to personal data concerning you.
Right of access: You may obtain information from us at any time about whether and which personal data we store about you. The provision of information is free of charge for you.
The right of access does not exist or is subject to limitations if and to the extent that confidential information, such as information that is subject to professional secrecy, is disclosed.
Right to rectification: If your personal data stored with us is inaccurate or incomplete, you have the right to obtain the rectification of this data from us at any time.
Right to erasure: You have the right to obtain from us the erasure of your personal data if and to the extent that the data are no longer needed for the purposes for which they were collected or, if processing is based on your consent, you have withdrawn your consent. In this case, we must stop processing your personal data and remove it from our IT systems and databases.
You do not have a right to erasure if
Right to restriction of processing: You have the right to obtain from us the limitation of the processing of your personal data.
Right to data portability: You have the right to receive from us the data you provide in a structured, commonly used and machine-readable format and the right to have this data transferred to another controller. This right exists only if
If the processing of your data is based on Art 6 Para 1 lit f) GDPR, you may object to the processing at any time.
You may assert all of the above-described data subject rights against PwC Strategy& by addressing your specific request to the following contact details:
By E-Mail: DE_Datenschutz@pwc.com
PwC Strategy& (Germany) GmbH
Dr. Tobias Gräber, Datenschutzbeauftragter
Categories of recipients of the data
In order to fulfill the processing purposes listed below, data transfer to third parties also takes place. This may also include the transfer of personal data to European and non-European countries and the storage of data also outside the EU or the European Economic Area (EEA).
Recipients bound by instructions
We share your data with service providers bound by instructions, both within the PwC network and with other third parties, such as IT service providers, who support us in our activities, e.g. as part of the administration and maintenance of the websites and related systems and/or for other internal or administrative purposes.
PwC Strategy& is a member of the global PwC network, which consists of the individual legally independent PwC firms. In the course of our activities, we use other German or foreign PwC network companies as network-internal IT service providers bound by instructions, which provide services of operation, maintenance and care of the IT systems and applications used by the PwC network companies. In addition to PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft based in Germany, this includes in particular PwC IT Services Ltd. based in the United Kingdom (UK).
If we pass on data to service providers bound by instructions, we do not require a separate legal basis for this.
In addition, in individual cases we share your data both within the PwC network and with other third parties who use your data on their own responsibility. For example, in individual cases we also transfer personal data to other companies in the PwC network to support and improve the effectiveness of our business processes (including coordinated marketing activities), or we upload photos/videos to an Internet portal such as YouTube or a social media platform with your consent.
In addition, in individual cases, we also disclose your data to other third parties, such as public authorities, courts or other bodies, if we are required by law or by official or court order of an EU member state to disclose personal data to these bodies. These bodies also use the data on their own responsibility.
Insofar as you have explicitly consented, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the data transfer. If there is a legal obligation to disclose the data, the legal basis for the data transfer is Art. 6 para. 1 lit. c) DSGVO. If, on the other hand, the disclosure is aimed at fulfilling a contractual or pre-contractual measure with you as a natural person, the legal basis is Art. 6 (1) lit. b) DSGVO. Otherwise, the transfer is based on our legitimate interests and the legal basis is Art. 6 para. 1 lit. f) DSGVO. We and the other companies in the PwC network have an interest in making our work processes efficient and in sharing business processes within the PwC network for this purpose.
Data transfer to recipients in third countries outside the EU/EEA
To the extent that any of the above-mentioned data transfers are made to a recipient outside the European Economic Area, an adequate level of data protection for the foreign transfer is ensured by appropriate security measures.
For data transfers within the PwC network, the PwC network companies have, among other things, concluded an internal data protection agreement which provides for compliance with the EU standard contractual clauses of the EU Commission within the meaning of Article 46 (2) c) of the GDPR for data transfers of personal data from EU/EEA countries to PwC network companies outside the EU/EEA.
To the extent that you have any questions regarding such data protection agreements based on the EU standard contractual clauses, or if you would like more information on further security mechanisms and security measures for data transfers to third countries, please feel free to contact our data protection officer, e.g. at DE_Datenschutz@pwc.com.
Processing of personal data when visiting the website
When you visit our website, we collect the data that is technically necessary to display the website to you. This involves the following personal data, which are automatically transmitted to our server by your browser:
The processing of this personal data is based on Art 6 Para 1 lit f) GDPR. The website cannot be accessed and offered to users without using such data; there is a legitimate interest in making the access and use of the website technically possible.
The log files are stored for seven days and then deleted.
This website is hosted by a service provider [Hercules Merger Parent Limited, 1 Embankment Place, London, England, WC2N6RQ - registered number 8747197], and the data collected on our website is therefore stored on the servers of that service provider. These servers are located in Germany and in other EU countries.
Data is transferred abroad, but only to countries of the European Union or the European Economic Area.
A contact form is available on our website, which you can use to contact us with questions about PwC, our website and other enquiries. You can also contact us by e-mail.
When you contact us via the contact form or by e-mail, the data you provide (in particular your e-mail address, your name and surname, the text of your enquiry and any other details you may have provided in the contact form or by e-mail) will be stored by us in order to process your enquiry and answer your questions.
The data processing is based on Art 6 Para 1 lit f) GDPR. We have an interest in contacting you via the website upon your request. Insofar as your enquiry is aimed at the fulfilment of a contractual or pre-contractual measure with you as a natural person, Art 6 Para 1 lit b) GDPR serves as legal basis for the processing of data.
We will delete the data generated in the course of your enquiry as soon as it is no longer necessary for processing that enquiry. To the extent that the data is subject to statutory retention requirements, it will be stored for the duration of the prescribed statutory retention period.
The use of the contact form is voluntary for you and is not a prerequisite for using the website.
Processing activities for marketing purposes and partially joint controllers
PwC Strategy& determines the means and purposes of some of the data processing for marketing activities described in more detail below, either on its own or together with other member firms of the German-speaking PwC Network mentioned here (hereinafter jointly referred to as "PwC DE"). PwC Strategy& and these other listed PwC DE companies of the PwC Network therefore process your data as joint controllers in accordance with Art 4 No 7 Var 2, 26 GDPR.
|PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft||Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main||DE_Kontakt@pwc.com|
|PricewaterhouseCoopers Legal AG Rechtsanwaltsgesellschaft||Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main||DE_Kontakt@pwc.com|
|Fachverlag Moderne Wirtschaft GmbH||Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Mainfirstname.lastname@example.org|
|INTES Akademie für Familienunternehmen GmbH||Kronprinzenstraße 31, 53173 Bonn-Bad Godesbergemail@example.com|
|PwC Strategy& (Germany) GmbH||Bernhard-Wicki-Straße 8, 80636 Münchenfirstname.lastname@example.org|
|PwC Strategy& (Austria) GmbH||Donau-City-Straße 7, A - 1220 Wienemail@example.com|
|PwC Cyber Security Services GmbH||Kapelle-Ufer 4, 10117 Berlin||DE_Kontakt@pwc.com|
|PwC Certification Services GmbH||Kapelle-Ufer 4, 10117 Berlin||DE_Kontakt@pwc.com|
|PwC Solutions GmbH||Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main||DE_Kontakt@pwc.com|
Individualized electronic approach by PwC DE
PwC DE companies process your personal data and will contact you by e-mail for marketing purposes if you have provided consent to direct marketing activities. To this end, we process the data you have provided in connection with your declaration of consent (in particular your first and last name, your e-mail address, if applicable the name and address of your company and, if applicable, other information you have provided with your declaration of consent).
This direct marketing by PwC DE companies includes PwC DE information on the latest consultancy advice and service information, news from your industry, notifications about upcoming events, information on PwC studies (including those of other PwC Network companies) and other marketing information.
On basis of your consent, PwC DE can tailor and individualise marketing communication to your interests. PwC DE does this by analysing your interests that you have expressly communicated (e.g. via a preference center on a PwC DE website) and your usage behaviour (e.g. retrieved content access, clicks and reading time) with regards to newsletters and similar communications and via linked PwC DE websites using cookies, web beacons and similar technologies, and may store this information in a personal profile.
Based on your consent, PwC DE may also add your personal contact details (e.g. name, title, company and role/position) to this profile, which you have entered yourself on a PwC DE website and/or which are already stored in the customer relationship management systems operated by PwC DE. Based on your consent, PwC DE may also add public information about the company you work for to this profile.
The processing is carried out on basis of your consent, which is a legal permission according to Art 6 Para 1 lit a) GDPR. You can withdraw your consent at any time with effect for the future without additional costs, e.g. by e-mail to firstname.lastname@example.org.
Your data will be stored for this purpose as long as the data is required for direct advertising and you have not revoked your consent. Insofar as there is a legal obligation to retain data, the data will be stored for the duration of the legally required retention period.
Newsletter by PwC Strategy& and/or PwC DE
If you order a newsletter via our website, depending on the scope of your consent, we and/or companies of PwC DE will store and further process your e-mail address for the purpose of sending you the newsletter which you have subscribed to.
This data processing is carried out on basis of your consent, which is a legal permission according to Art 6 Para 1 lit a) GDPR. Your data will be stored for this purpose as long as the data is necessary for sending newsletters to you and as long as you have not withdrawn your consent. Insofar as statutory storage obligations exist, the data will be stored for the duration of the legally required retention period.
You can withdraw this consent at any time without additional costs with effect for the future. We will provide a link for the withdrawal in every newsletter message.
Postal communication and marketing to existing customers
The companies of PwC DE will also use your data (in particular name and address) to send you postal marketing information on further offers or events.
We use your contact data (in particular your first and last name, e-mail address, name and address of your company, if applicable, as well as any other information you may have provided) received in connection with the sale of a service for the purpose of direct advertising for similar services via electronic mail, unless you have objected to such use. You can object to this use at any time without incurring any costs other than the transmission costs according to the basic tariffs.
This processing is carried out on basis of our legitimate interests within the meaning of Art 6 Para 1 lit f) GDPR. We have a legitimate economic interest in informing interested parties, customers and clients about further own offers and events in order to establish and maintain a long-term customer relationship.
Your data will be stored for this purpose for as long as the data is necessary for postal marketing communication as well as existing customer marketing and as long as you have not effectively objected to the data processing. Insofar as statutory retention obligations exist, the data will be stored for the duration of the legally required retention period.
We have included YouTube videos in our online services, which are stored at https://www.YouTube.com and can be played directly from our website. These are all included in "priavacy-enhanced mode", which means that no data about you as a user will be transferred to YouTube, unless you play the videos. Only when you play the videos, the data mentioned in Paragraph 2 will be communicated. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under section 6 are transmitted (except for the amount of data transmitted). This occurs regardless of whether YouTube provides a user account that you are logged in to, or whether no user account exists. When you're logged in to Google, your information will be directly associated with your account. If you do not want your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as a user profile and uses them for the purposes of advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) in order to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
Last update: 03.04.2019