Protecting your personal data is important to us. Below we inform you about how we process your data when you use our website, in accordance with Art. 13, 14 GDPR.

​

1. Controller

UNEX Management Consulting GmbH & Co. KG Bei den Mühren 1 20457 Hamburg, Germany

Phone: +49 40 808194 770 E-mail: hamburg@unex-group.com

For data protection questions, please contact: datenschutz@unex-group.com

 

2. Visiting our Website

When you visit our website, our hosting provider automatically processes technical data transmitted by your browser (including IP address, date and time of the request, page requested, browser type, operating system, and referring URL). This data is required to display the website and ensure its stability and security, and is deleted automatically after a short period. The legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR).

 

3. Contacting Us

If you contact us via our contact form, e-mail, or telephone, we process the data you provide (e.g. name, contact details, content of your inquiry) solely to process and respond to your request. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in communication) or, where the inquiry serves to initiate a contract, Art. 6(1)(b) GDPR. The data is deleted once it is no longer required for processing, unless statutory retention obligations apply.

Initial telephone outreach to prospective B2B clients is based on publicly available business contact information and our legitimate interest in business development (Art. 6(1)(f) GDPR); in such calls we merely ask whether there is general interest in a conversation.

 

4. Job Applications

Application documents you submit to us are used exclusively to process your application (Section 26 of the German Federal Data Protection Act, BDSG). Your application will only be forwarded internally to other suitable positions with your consent. Your data will be deleted no later than six months after completion of the application process, unless you have consented to longer storage.

 

5. Client and Engagement Data

Within the scope of a consulting engagement, we process contact, contract, and invoicing data to perform and administer the engagement (Art. 6(1)(b) GDPR), as well as to comply with statutory retention obligations, in particular under German commercial and tax law (Art. 6(1)(c) GDPR, typically 6–10 years).

We may occasionally send existing clients information about comparable services of our own (Art. 6(1)(f) GDPR). You may object to this at any time, informally, e.g. by e-mail to datenschutz@unex-group.com.

 

6. Newsletter

If you subscribe to our newsletter, we use your e-mail address and, where applicable, your name solely to send it. The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time via the unsubscribe link in each issue or by e-mail. Registration follows the double opt-in procedure; we store registration data (IP address, timestamp) for evidentiary purposes for the duration of the statutory limitation period (Art. 6(1)(f) GDPR).

 

7. Cookies and Tools

We use strictly necessary cookies on the basis of Section 25(2) of the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG) to operate the website. Any additional cookies or analytics tools are only used if you have given your consent via our consent banner (Art. 6(1)(a) GDPR). You may withdraw your consent at any time via the cookie settings.

 

8. Recipients

We only share your data where necessary to perform a contract, to comply with legal obligations, or with carefully selected service providers acting as processors (e.g. IT hosting, accounting) under a data processing agreement (Art. 28 GDPR). Such providers are contractually bound to confidentiality and may not use your data for their own purposes. Transfers to countries outside the EU/EEA only take place where an adequate level of data protection is ensured (e.g. through EU Standard Contractual Clauses).

 

9. Retention Period

We retain personal data only as long as necessary for the respective purpose, or as long as statutory retention periods require. Afterwards, the data is deleted or blocked.

 

10. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). To exercise these rights, please contact us using the details above. You also have the right to lodge a complaint with the competent data protection supervisory authority.

 

11. Currency

Last updated: 2026. We will amend this privacy policy as needed to reflect changes in the law or in our services.