Privacy Policy

In short: This website is static. It sets no cookies, performs no tracking and embeds no analytics or social media services. Third-party content — solely the map in the contact section — is loaded only after your explicit consent.

1. Controller

The controller within the meaning of the GDPR is:
Institute For Management Excellence GmbH
Fraunhoferstrasse 22
82152 Martinsried
Germany
Phone: +49 89 3066882-0
Email: info@i-m-x.de

Using this website is generally possible without providing personal data. We have implemented technical and organisational measures to protect the data processed via this website. However, internet-based data transmissions may have security gaps, so absolute protection cannot be guaranteed.

2. No cookies, no tracking

This website sets no cookies and stores no information on your device that would require consent under Section 25(1) TDDDG. There is no audience measurement, no profiling and no disclosure to advertising networks. A consent banner is therefore not required.

If you dismiss our privacy notice, a technical marker is stored locally in your browser for that purpose alone, so the notice does not reappear. This marker contains no personal data and is not transmitted to us.

3. Server log files

On each visit, our host automatically records data transmitted by your browser: browser type and version, operating system, referrer URL, time of request, file requested and your IP address. This data does not allow us to draw conclusions about you personally, and we do not evaluate it on a personal basis.

Processing serves secure, trouble-free operation and the defence against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technical operation and security of our website. Storage is brief, after which the data is deleted automatically.

4. Contacting us

If you contact us by email, phone or via the contact form, we process your details (name, contact data, content of the message) solely to handle your request. The legal basis is Art. 6(1)(b) GDPR where the request serves the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding.

Your details remain with us until the purpose ceases to apply, you ask us to erase them or you withdraw consent. Mandatory statutory retention periods — in particular under commercial and tax law — remain unaffected.

5. Hosting

The website is hosted by DomainFactory GmbH, Oskar-Messter-Strasse 33, 85737 Ismaning, Germany. The host processes the log data described above on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany.

6. Map display (OpenStreetMap)

In the contact section we embed a map provided by OpenStreetMap. The provider is the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

The map is not loaded automatically. When you open our page, no data whatsoever is transmitted to OpenStreetMap; only a locally stored schematic preview graphic is shown. The map is loaded only once you actively click the “Load map” button. Your IP address is then transmitted to the OSMF and cookies may be set.

The legal basis for the transfer is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, given by clicking the button. Consent applies to the current page view only and can be withdrawn at any time with effect for the future by not loading the map. For details see the OSMF privacy policy: osmfoundation.org/wiki/Privacy_Policy.

Map data: © OpenStreetMap contributors, available under the Open Database License (ODbL).

7. Storage period and erasure

We process and store personal data only for the period necessary to achieve the purpose of storage, or as provided for by legislation to which we are subject. If the purpose ceases to apply or a prescribed period expires, the data is routinely blocked or erased.

8. Legal bases and legitimate interests

We base processing on Art. 6(1)(a) GDPR (consent), (b) (contract or pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests). Where we rely on (f), our legitimate interest lies in conducting our business and in the secure, functional operation of this website.

9. Provision of personal data

The provision of personal data is neither required by law nor by contract, and you are under no obligation to provide us with data. However, provision may be necessary to conclude a contract; without such data a contract could not then be concluded. You may contact us at any time before providing data.

10. No automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

11. Your rights

You have the following rights regarding your personal data:

  • Access (Art. 15 GDPR): confirmation as to whether we process data concerning you, and information about that data, the purposes, recipients, storage period and origin.
  • Rectification (Art. 16 GDPR): prompt correction of inaccurate data and completion of incomplete data.
  • Erasure (Art. 17 GDPR): erasure of your data, provided processing is not necessary and no exemption applies.
  • Restriction of processing (Art. 18 GDPR) under the conditions set out therein.
  • Data portability (Art. 20 GDPR): receipt of your data in a structured, commonly used, machine-readable format.
  • Objection (Art. 21 GDPR): objection to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation.
  • Withdrawal of consent (Art. 7(3) GDPR): at any time with effect for the future.

An informal message to info@i-m-x.de is sufficient.

12. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

13. Changes to this privacy policy

We adapt this policy whenever changes to this website or the legal situation require it. The version published here applies.