The protection of your personal data is important to us. This Privacy Policy informs you about which personal data is processed when you use the website
https://www.brandscape-online.com
and its subdomains, the purposes for which such processing takes place, and the rights you have under the General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, telephone number and IP address.
We treat your personal data confidentially and in accordance with the applicable data protection regulations, in particular the GDPR, the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and, where applicable, the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).
Controller
The controller within the meaning of Art. 4 No. 7 GDPR is:
brandscape GmbH
Sonnenberger Straße 82
65193 Wiesbaden
Germany
Email: info@brandscape-online.com
Telephone: +49 (0)611 17457 0
Fax: +49 (0)611 17457 10
Managing Directors: Mahesh Iyer, Christof Braetsch
Commercial Register: Local Court of Wiesbaden
Registration Number: HRB 21650
VAT Identification Number: DE 240191092
Data Protection Officer
Our Data Protection Officer is:
Examcert Deutschland GmbH
An der Dünung 48
23968 Wismar
Germany
Email: dsgvo@brandscape-online.com
Provision of the Website and Server Log Files
When you access our website, information transmitted by your browser is automatically processed by the web server and/or our hosting service provider. In particular, the following data may be processed:
- page or file accessed
- date and time of access
- amount of data transferred
- referrer URL or previously visited website
- browser used and browser version
- operating system used
- IP address of the accessing device
The processing of this data is necessary in order to provide the website technically, ensure its stability and security, and identify and investigate possible misuse or unlawful use.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our online services.
Server log files are generally stored for a maximum of seven days and subsequently deleted. Longer storage may take place in individual cases where this is necessary to investigate or document a specific security incident. In such cases, the relevant data will be deleted as soon as the purpose of the extended storage no longer applies.
Where we use external hosting or IT service providers to operate our website and such providers process personal data on our behalf, this processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Cookies and Similar Technologies
Our website may use cookies and similar technologies. Cookies are small text files or pieces of information that may be stored on or read from your device.
Where cookies or similar technologies are strictly necessary for the technical operation of the website, their use is based on Section 25(2) TDDDG. Where personal data is processed in this context, such processing is carried out in particular on the basis of Art. 6(1)(f) GDPR. Our legitimate interest consists in providing a technically error-free and secure website.
Cookies or similar technologies that are not strictly necessary – for example for analytics, statistics, marketing or external media services – are only used if you have given your prior explicit consent. The legal bases in these cases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
You may withdraw or modify your consent at any time with effect for the future via the cookie settings provided on our website. The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.
Non-essential cookies and similar technologies are not used before the relevant consent has been obtained.
Contacting Us
If you contact us by email, telephone or via other contact options provided on our website, we process the data you provide, in particular your contact details and the content of your enquiry, in order to process your request and respond to you.
Where your enquiry relates to the initiation or performance of a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR. In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the appropriate processing of and response to enquiries addressed to us.
Data processed in connection with an enquiry will be deleted once the respective matter has been finally resolved and there are no statutory retention obligations or other legitimate reasons for further storage.
Disclosure of Personal Data
We generally disclose personal data only where there is a legal basis for doing so.
Data may in particular be disclosed:
- where you have expressly consented in accordance with Art. 6(1)(a) GDPR,
- where processing is necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract or in order to take steps prior to entering into a contract,
- where there is a legal obligation to disclose the data pursuant to Art. 6(1)(c) GDPR,
- where processing is necessary pursuant to Art. 6(1)(f) GDPR for the purposes of our legitimate interests or those of a third party and your interests or fundamental rights do not override those interests, or
- where external service providers act as processors on our behalf pursuant to Art. 28 GDPR.
External Links and Social Media
Our website contains links to external websites and social media platforms. The corresponding icons and links merely provide links to the respective external services. No data is transmitted to the relevant social media providers merely by visiting our website.
Only when you click on such a link do you leave our website and establish a direct connection with the respective provider. The provider may then process your IP address and other technical information and may be able to identify the website from which you accessed its service. If you are logged into the respective service, the provider may also be able to associate your visit with your user account.
The respective provider is generally responsible for the subsequent processing of personal data on its websites and services.
Facebook and Instagram
Our website contains links to our profiles and services on Facebook and Instagram. For users within the European Union, these services are generally provided by:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4, D04 X2K5
Ireland
Further information about the processing of personal data by Meta can be found at:
- Facebook: https://www.facebook.com/privacy/policy/
- Instagram: https://privacycenter.instagram.com/policy/
Our website contains a link to our company profile on LinkedIn. For users within the European Union, the service is provided by:
LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland
Further information about the processing of personal data by LinkedIn can be found at:
https://www.linkedin.com/legal/privacy-policy.
Storage Period
Unless a more specific storage period is stated in this Privacy Policy, we store personal data only for as long as necessary for the respective purpose of processing.
Where statutory retention obligations apply, the relevant data will be stored for the duration of the applicable statutory retention periods. Once the retention period has expired, the data will be deleted unless there is another legal basis for continued processing.
Your Rights
Subject to the applicable legal requirements, you have in particular the following rights with regard to your personal data:
- Right of access pursuant to Art. 15 GDPR,
- Right to rectification pursuant to Art. 16 GDPR,
- Right to erasure pursuant to Art. 17 GDPR,
- Right to restriction of processing pursuant to Art. 18 GDPR,
- Right to data portability pursuant to Art. 20 GDPR,
- Right to object pursuant to Art. 21 GDPR, and
- Right to withdraw consent pursuant to Art. 7(3) GDPR with effect for the future.
To exercise your rights or if you have any questions regarding the processing of your personal data, you may contact us or our Data Protection Officer at:
dsgvo@brandscape-online.com.
Right to Object to the Processing of Personal Data
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object to such processing at any time on grounds relating to your particular situation.
Following an objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for our registered office is:
The Hessian Commissioner for Data Protection and Freedom of Information
Wilhelmstraße 7
65185 Wiesbaden
Germany
Telephone: +49 (0)611 1408-0
Email: poststelle@datenschutz.hessen.de
Website: https://datenschutz.hessen.de
Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. Our security measures are continuously reviewed and adapted in line with technological developments.
Please note, however, that data transmission via the internet may generally involve security risks and that complete protection against access by third parties cannot be technically guaranteed.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if legal requirements, our website or the services we use change. The version published on this website at the relevant time shall apply.
Last updated: September 2026