EN DE
Book a 30-min walkthrough
Privacy Notice - Competence Alliance
EN DE
Book a 30-min walkthrough
Legal

Privacy Notice

This is a translation for convenience. In case of discrepancies, the German version prevails.

Controller

The controller for the processing of personal data on this website is:

Promo Consulting Solutions GmbH
Villa Sander
Mainzer Landstraße 10
60325 Frankfurt am Main, Germany
Phone: +49 151 6500 5000 · +1 702 820 5000
Email: info@competence-alliance.eu

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Contact for data protection matters

For questions about data protection and to exercise your rights, please contact datenschutz@competence-alliance.eu or use the contact details above.

Overview

This is an information website. All content, including the fonts, is served from our own servers. Personal data arises in two places: when the pages are technically requested, and when you contact us yourself.

Access to the website and hosting

Our website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, and delivered through its global content delivery network. When you access our pages, Cloudflare processes technical connection data on our behalf:

  • the IP address of your device
  • the date and time of access
  • the address requested and the volume of data transferred
  • the referring page, where transmitted
  • information about your browser, operating system and device type

This processing is technically necessary in order to deliver the website, to encrypt the connection and to protect our service against overload attacks and automated abuse. No analysis of your behaviour and no profiling takes place.

For these purposes Cloudflare sets strictly necessary cookies, in particular __cf_bm to distinguish human from automated access, with a lifetime of approximately 30 minutes. Where a security check is carried out, cf_clearance may additionally be set. These cookies serve security purposes only and are not used for analytics or advertising.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient operation of our website. Access to your device is based on Section 25(2) no. 2 TDDDG, as it is strictly necessary to provide the website you have requested. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare.

Storage on your device

We store only two items in your browser's local storage: your choice between light and dark display, and the information that the notice about storage on your device has already been shown to you.

Both remain on your device, are not transmitted to us or to third parties and allow no conclusions to be drawn about you personally. They are strictly necessary for the functions you have requested (Section 25(2) no. 2 TDDDG) and can be deleted at any time through your browser settings.

Contact form

When you write to us through the contact form, we process the details you enter: name, company, email address, the target markets you state where applicable, and the content of your message. The submission is encrypted and delivered through our own infrastructure directly into our email mailbox. Delivery takes place solely through our own infrastructure.

To prevent automated submissions the form contains a field invisible to you and a check on the time taken to complete it. Neither processes personal data nor involves any third-party recognition service.

The legal basis is Art. 6(1)(b) GDPR where your enquiry is directed at entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

We delete your enquiry once it has been dealt with conclusively and no statutory retention obligations apply, at the latest six months after completion.

Obtaining specialist publications

Certain documents, such as our country briefings on prize-promotion compliance, are provided after contact details have been submitted. We process your name, business email address and company. We use these details to send you the document you requested and to answer any questions you have about it. Delivery runs through the same infrastructure as the contact form; we do not use additional service providers for this.

The legal basis for sending the document is Art. 6(1)(b) GDPR, as the processing takes place at your request. For any subsequent contact about the subject you requested, we rely on Art. 6(1)(f) GDPR and our legitimate interest in approaching prospective business customers.

You may optionally consent to receiving further specialist information about our services by email. This consent is voluntary, is not required in order to obtain the document, and may be withdrawn at any time with effect for the future, informally using the contact details for data protection matters given above. The legal basis for this is Art. 6(1)(a) GDPR; the lawfulness of processing carried out before withdrawal remains unaffected.

We delete your details once the purpose no longer applies, at the latest 24 months after the document has been provided, unless you have consented to further contact or statutory retention obligations apply. Following a withdrawal we delete the details unless they are required for other purposes.

Contact by email or telephone

If you contact us by email or telephone, we process your details in order to deal with your request. The legal basis and retention period correspond to those stated for the contact form. Please note that unencrypted email may be read by third parties in transit.

Applications

Applications reach us by email. We process the documents submitted solely in order to conduct the application procedure, on the basis of Section 26(1) BDSG and Art. 6(1)(b) GDPR. If no appointment is made, we delete the documents at the latest six months after the procedure has concluded, unless you have expressly consented to longer retention.

Recipients and processors

We disclose personal data only where this is necessary to perform a contract, where we are legally obliged to do so, or where a legitimate interest under Art. 6(1)(f) GDPR exists. Where processors are used, disclosure takes place solely on the basis of an agreement pursuant to Art. 28 GDPR.

  • Cloudflare, Inc., USA: hosting, content delivery, encryption and security of the website
  • Microsoft: provision of our email and office system, in which enquiries are received and handled

Transfers to third countries

Processing of your data in the United States cannot be excluded. Cloudflare states that it is certified under the EU-US Data Privacy Framework; for transfers to certified organisations an adequacy decision of the European Commission pursuant to Art. 45 GDPR applies. In addition, the standard contractual clauses of the European Commission pursuant to Art. 46(2)(c) GDPR have been agreed with our service providers.

Retention

We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention obligations. Technical connection data is deleted or anonymised by our host after a short period. Commercial and tax retention obligations remain unaffected.

Reach measurement (Cloudflare Web Analytics)

To understand how this website is used, we use Cloudflare Web Analytics, a privacy-focused measurement service provided by Cloudflare, Inc. It works without cookies and without cross-site tracking and does not build visitor profiles; we receive only aggregated metrics such as page views, referrer sources and load performance. The legal basis is our legitimate interest in measuring and improving this website (Art. 6(1)(f) GDPR).

Your rights

You have the right at any time to obtain information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)).

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object at any time on grounds relating to your particular situation. In the case of direct marketing you may object at any time without giving reasons.

Right to lodge a complaint: you may lodge a complaint with a data protection supervisory authority at any time. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany.

Encryption

This website uses TLS encryption for security reasons. You can recognise an encrypted connection by the “https://” prefix in your browser's address bar.

Linked services

Our website links to the platform we operate at www.fibre-platform.com and, where applicable, to profiles on social networks. Separate privacy notices apply to those services; they are reached only once you click the relevant link.

No automated decision-making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place. Our service is directed at businesses and not at children; we do not knowingly collect data from children.

Changes to this privacy notice

We update this privacy notice whenever the underlying processing changes. The version published on this page applies.

Version: 1 August 2026