Below you will find the information required under the General Data Protection Regulation (GDPR) regarding the processing of personal data. The IFAK Institute operates in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG-neu).

Data from customers and external service providers

We store and process contact and communication data from business partners, e.g. customers and external service providers, for the purposes of project and business management and general customer communication. The data stored includes the following: surname, first name, work email address, work telephone number, work fax number, work postal address, and project- and market research-related communication content. The storage and processing of this data is based on Article 6(1), first sentence, point (b) of the GDPR: data processing for the performance of a contract or pre-contractual measures; or on Article 6(1), first sentence, point (f) of the GDPR: legitimate interests (facilitating and handling business correspondence).

Data from prospective customers and leads

We also store and process data relating to prospective customers interested in our market research services or leads. We have obtained this data either from publicly available sources or directly from the data subjects themselves. The data stored in this context includes the following: surname, first name, work email address, work telephone number, work fax number, work postal address and the content of market research-related communications. Permission to use this contact information for the purpose of establishing contact is derived from Article 6(1)(f) of the GDPR and is based on the protection of legitimate interests.