Legal

Privacy Policy

Information on the processing of personal data under the GDPR

1. Controller

The controller responsible for the processing of personal data on this website and in connection with our services is Asghar Consultants e.K. (AsgCon), Rondenbarg 11-17 (Haus 1), 22525 Hamburg, represented by Ali Asghar, email: office@asgcon.de. Further details can be found in our Legal Notice (Impressum).

2. General Information

We process personal data only insofar as this is necessary for the provision of the website, for communication, for the performance of our services, for the fulfilment of contractual or legal obligations, or on the basis of a valid consent. The relevant provisions are, in particular, the GDPR, the German Federal Data Protection Act (BDSG) and other applicable data protection regulations.

3. Categories of Personal Data

Depending on how the website and our services are used, the following data may in particular be processed: master data, contact data, communication data, contract and order data, application and professional data, education and qualification data, course/education data, technical usage and device data, IP address, log data, form and registration data, candidate profiles, and payment and billing data.

4. Purposes of Processing

In particular: operation and security of the website; contact enquiries; applications and candidate enquiries; job placement and recruiting; education and further-training offerings; courses and examinations; performance of contracts; communication; billing; legal obligations; evidence and documentation obligations; technical administration; and, where permitted and actually used, analytics and reach measurement.

5. Legal Bases

Depending on the purpose, processing is carried out in particular on the basis of Art. 6 (1) (a) GDPR (consent), (b) (contract/pre-contractual measures), (c) (legal obligation) or (f) GDPR (legitimate interests). Consent can be withdrawn with effect for the future.

6. Contacting Us

When you contact us by email, via a form or by any other means, we process the data you provide in order to handle your enquiry and, depending on its content, to carry out pre-contractual measures, to perform a contract, or on the basis of legitimate interests.

7. Applications and Candidate Profiles

In the case of applications or placement/consulting enquiries, the following data in particular may be processed: contact data, CV, professional experience, proof of education and qualifications, language skills and other application data provided. Data is disclosed to potential employers, cooperation partners, public authorities or other bodies only where a legal basis exists and this is necessary for the respective purpose.

8. Educational Measures and Courses

In the case of education, further-education and qualification offerings, data required for organisation, delivery, documentation and billing may be processed. In the case of funding such as the education voucher (Bildungsgutschein) or the activation and placement voucher (AVGS), data may be transmitted to the competent or participating bodies to the extent legally required.

9. Server Log Data

When the website is accessed, technically necessary information such as IP address, date/time, requested resource, data volume, browser, operating system, referrer URL and technical status information may be processed. This serves in particular the technical provision, stability and security of the website.

10. Hosting

The website is operated on the servers of a hosting/technical service provider. The specific provider, location, sub-processors and data processing agreement (DPA) status will be added following the technical review by Power Developers.

11. Cookies and Similar Technologies

Technically necessary cookies or comparable technologies may be used for required functions. Non-essential cookies or technologies are used, where legally required, only after prior consent. Details can be found in the Cookie Policy.

12. External Services and Third-Party Providers

External services may be used on the website for hosting, infrastructure, communication, forms, appointment scheduling, security, analytics, media, maps, payments or other functions. The services actually used will be fully documented following the technical review.

13. Recipients

Personal data may, where necessary and legally permissible, be disclosed to technical service providers, hosting/IT service providers, payment service providers, advisers, public authorities, public bodies, education partners, employers/potential employers, cooperation partners and other service providers engaged for the performance of contracts.

14. International Data Transfers

Transfers to countries outside the EU/EEA take place only in compliance with Art. 44 et seq. GDPR. Depending on the specific service, adequacy decisions or appropriate safeguards, in particular standard contractual clauses, may be used. Specific third-country transfers will be added following the technical audit.

15. Retention Period

Personal data is generally stored only for as long as is necessary for the respective purpose or as long as statutory retention obligations apply. Specific storage and deletion periods will be defined for the respective processing operations.

16. Your Rights

Within the framework of the statutory requirements, you have in particular the rights to access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and to lodge a complaint with a data protection supervisory authority.

17. Right to Object

Where personal data is processed on the basis of Art. 6 (1) (f) GDPR, an objection can be lodged under the statutory conditions. For direct marketing, the special statutory rights to object apply.

18. Withdrawal of Consent

Consent can be withdrawn at any time with effect for the future. In the case of cookie consents, this can be done via the cookie settings.

19. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority. The statutory rules on competence apply.

20. Data Security

We implement appropriate technical and organisational measures to protect personal data and review them regularly.

21. Changes

This privacy policy may be amended if legal, technical or organisational circumstances change. The version published on this website from time to time applies.

Last updated: 28 September 2026 · This English version is provided for convenience; the German version (Datenschutzerklärung) is authoritative.