Skip to content
BICS – Brauer-ITConsulting & Services GmbH
DE – Deutsche Version

Privacy policy

This is a courtesy translation. Only the German version (Datenschutzerklärung) is legally binding.

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website and about your rights under the General Data Protection Regulation (GDPR).

1. Controller

The controller within the meaning of Art. 4 (7) GDPR is:
Brauer-ITConsulting & Services GmbH
Haferweg 46, 22769 Hamburg, Germany
Phone: +49 (0)40 85 38 27 5 - 0
Email: info@brauer-itconsulting.com
Commercial register: Hamburg Local Court (Amtsgericht Hamburg), HRB 126107

2. Legal bases for processing

Where we obtain consent for processing operations, Art. 6 (1) (a) GDPR serves as the legal basis. Where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, the legal basis is Art. 6 (1) (b) GDPR. Processing required to comply with legal obligations is based on Art. 6 (1) (c) GDPR. Where processing is necessary for the purposes of the legitimate interests of our company or of a third party, and your interests, fundamental rights and freedoms do not override those interests, the legal basis is Art. 6 (1) (f) GDPR.

Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) additionally applies to the storage of information on your terminal device and access to such information.

3. Hosting and provision of the website

This website is operated on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (“Hetzner”). The server is located in a data centre in Nuremberg; the data does not leave the European Union. Hetzner processes data exclusively on our behalf and in accordance with our instructions. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

Server log data

When this website is accessed, the following data is processed for technical reasons:

  • IP address of the requesting device
  • date and time of access
  • name and URL of the requested file
  • amount of data transferred and status of the request
  • referrer URL
  • browser and operating system used

This data is processed to deliver the website, to ensure system security and stability, and to investigate misuse. It is not combined with other data sources. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and stable provision of our website. Log data is stored only for as long as is necessary for these purposes and is then deleted automatically.

4. Management of website content

The maintained content of this website – job advertisements, partners and articles – and the accounts of authorised editors are managed with Supabase, Inc., USA (“Supabase”). The data is stored in a data centre in Frankfurt am Main.

No visitor data is stored at Supabase. The pages are generated on our server; your browser does not connect to Supabase when you visit the website. Contact form enquiries and applications do not reach Supabase either.

For editor accounts, Supabase processes the email address and sign-in times. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in protected maintenance of the website. We have concluded a data processing agreement with Supabase pursuant to Art. 28 GDPR; any transfer to the USA is based on EU standard contractual clauses (Art. 46 (2) (c) GDPR).

5. Fonts

The font used on this website is delivered from our own server. No connection to servers operated by Google or other font providers is established when the website is accessed.

6. Cookies, analytics and tracking

No cookies are set and no analytics, tracking or marketing services are used when you visit this website. No information is stored on or read from your terminal device.

The only exception is the sign-in page for maintaining the website content (/oauth/consent), which is used exclusively by authorised employees of Brauer-ITConsulting & Services GmbH. After signing in, session information is stored in the browser (local storage or cookie) so that the sign-in persists. This storage is strictly necessary for the service expressly requested and therefore does not require consent (Section 25 (2) no. 2 TDDDG). The subsequent processing is based on Art. 6 (1) (f) GDPR; our legitimate interest lies in protected maintenance of the website.

7. Contacting us

If you contact us by email, telephone or via our contact form, we process the data you provide (name, email address, company and telephone number if provided, selected topic and the content of your message) in order to handle your request.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the initiation or performance of a contract, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries.

Transmission of form submissions

Enquiries submitted via the contact form are not stored on this website but forwarded to us directly by email. We use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) for this purpose. Emails are sent via servers in the European Union. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR; any transfer to the USA is based on EU standard contractual clauses (Art. 46 (2) (c) GDPR).

To protect against abusive mass submissions, the IP address of the sending device is held briefly in our server's memory and discarded after ten minutes at the latest (Art. 6 (1) (f) GDPR).

We delete the data collected when you contact us once your request has been fully processed, unless statutory retention obligations apply. Business correspondence is generally subject to retention periods of six or ten years under commercial and tax law (Section 257 of the German Commercial Code, Section 147 of the German Fiscal Code).

8. Applications

We process applicants' data in order to carry out the application process. This includes your contact details, information on the desired position, start date and salary expectations, your message and the documents you submit. The legal basis is Art. 6 (1) (b) GDPR (initiation of an employment relationship). Where special categories of personal data are disclosed in the course of an application, processing is additionally based on Art. 9 (2) (b) GDPR.

Online application form

If you apply via our online form, your details and documents are transmitted in encrypted form and forwarded directly to our team by email. They are not stored on this website. We use the Resend service named in section 7 for this purpose; the safeguards described there apply. To prevent misuse, the IP address is held briefly in memory and discarded after ten minutes at the latest.

Retention period and talent pool

If no employment relationship is established, we delete the application documents six months after notification of the rejection. This period serves to defend against possible claims under the German General Equal Treatment Act (AGG). If you are hired, the documents are transferred to your personnel file.

If you have expressly consented, we retain your documents for twelve months after a rejection in our talent pool so that we can contact you about other suitable positions (Art. 6 (1) (a) GDPR). You may withdraw this consent at any time with effect for the future, for example by email to info@brauer-itconsulting.com; your documents will then be deleted, provided that the AGG period has expired.

9. Links to other websites

This website contains links to external services, for example LinkedIn and our partner companies. These are simple links without embedded content or social media plug-ins. Data is only transmitted once you click a link; from then on, the privacy policy of the respective provider applies.

10. Recipients of personal data

We only disclose personal data where this is necessary to fulfil our contractual and legal obligations or where you have given your consent. Recipients may include in particular:

  • IT service providers, hosting and maintenance providers
  • providers of email and collaboration services
  • tax advisers, auditors and legal advisers
  • authorities and public bodies where there is a legal obligation

Where service providers process data on our behalf, they do so on the basis of a data processing agreement pursuant to Art. 28 GDPR.

11. Retention period

We process personal data only for as long as is necessary for the respective purposes. The data is then deleted unless statutory retention obligations apply. In such cases, we restrict processing and use the data solely to comply with the retention obligation.

12. Your rights as a data subject

You have the following rights with regard to your personal data:

  • access to the data we process (Art. 15 GDPR)
  • rectification of inaccurate or completion of incomplete data (Art. 16 GDPR)
  • erasure of the data stored by us (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability in a structured, commonly used and machine-readable format (Art. 20 GDPR)
  • withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
  • lodging a complaint with a supervisory authority (Art. 77 GDPR)

An informal message to the contact details above is sufficient to exercise your rights.

13. Right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.

14. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
Phone: +49 40 428854-040
Email: mailbox@datenschutz.hamburg.de
Web: datenschutz-hamburg.de

15. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

16. Requirement to provide data

You are neither legally nor contractually obliged to provide personal data. However, we cannot process your request without the data marked as mandatory.

17. Data security

For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.

18. Changes to this privacy policy

We will amend this privacy policy as soon as changes to our processing activities or to the legal framework make this necessary. The version available on this page applies.

Last updated: October 2026