Data protection information in connection with our surveys


In the following we would like to give you an overview of our processing of your personal data within the scope of our surveys.

1. data controller and data protection officer; contact

The data controller in the sense of the Data Protection Act is:

Kienbaum Consultants International GmbH
Edmund Rumpler Strasse 5
51149 Cologne, GERMANY
Phone: +49 (221) 801 72-0
Fax: +49 (221) 80172-172

Please contact us if you have any questions or suggestions regarding data protection. Our Data Protection Officer may be reached at the following address:

Attorney Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
53113 Bonn

2. Object of Data Protection: Personal information

Data protection covers the protection of personal information. Such data are defined as all information relating to an identified or identifiable natural person (‘data subject’). This includes information such as name, address, telephone number or email address.

3. Purpose, nature, scope and legal basis of data processing

a) Purpose of the data processing

Depending on the content of the survey, the data processing serves the purposes described below:

  • If we ask you as part of our customer satisfaction survey, data processing serves to determine the satisfaction of our customers and business partners with our services and communication with you.
  • If we ask you in connection with studies conducted by us, the survey serves to determine a representative opinion or representative statements on the content of the respective study and communication with you.

b) Legal Basis

The legal basis for the data processing is your consent in accordance with Art. 6 Par. 1 letter a) GDPR.

4. Receivers of personal information

Within Kienbaum Consultants International GmbH, access to your data is granted to those departments that need it to evaluate the survey and to fulfill any legal obligations of Kienbaum Consultants International GmbH. Processors commissioned by Kienbaum Consultants International GmbH (Art. 28 GDPR) may also receive data for these purposes.

5. Retention period

We process and store your personal data that has been collected separately in connection with the survey for as long as it is necessary to fulfill the purpose described under point 3 letter a., but for no longer than six months. Insofar as the storage of your data serves the purpose of obtaining evidence, the statutory limitation periods pursuant to section 195 et seq. of the German Civil Code (BGB) shall apply. According to these, the limitation periods can be up to thirty years, whereby the regular limitation period is three years.

6. Rights of data subjects

With respect to the processing of your personal information, you are entitled as a data subject to assert your rights against us. We outline below the rights granted to you as a data subject:

Right of information: You have the right to demand information concerning your personal data processed by us.

Right of correction: You can demand the correction and complementation of incorrect or incomplete personal information concerning you.

Right of deletion: Where legal preconditions are met, you have the right to demand deletion of your personal information.

Restriction of processing: Where legal preconditions have been met, you can demand that the processing of your personal information be restricted.

Data portability: Where legal preconditions have been met, you have the right to receive the personal information you made available to us in a structured, standard and machine-readable format, and to transmit this information to another responsible party without hindrance, or to have us transmit it to another responsible party.

Revocation of consent: If you have consented to our processing of your data, you may revoke this consent at any time for future effect. Any processing of your personal information prior to your revocation of consent remains lawful.

Right to appeal to supervisory authority: If you believe that the processing of your personal information is in violation of data protection law, you can file an appeal with the responsible supervisory authority. You should contact the supervisory authority of your place of residence, your workplace, or the place of the suspected violation.

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Postfach 20 04 44, 40102 Düsseldorf, Tel.: 0211/38424-0, Fax: 0211/38424-10, E-Mail:

7. requirement to provide your personal information

Your provision of personal data concerning you is voluntary, there is no obligation to do so.

Opposition to data processing: Where data processing is based on ‘justified interest’ in accordance with Art. 6 Par. 3 lett. f) GDPR, you can raise an objection to the processing of your personal information at any time based on your own particular situation. Where your data are processed for the purposes of direct advertising, you can object to this at any time without the need to provide a reason.