Simonkucher : Data Privacy
Data Privacy Notice
“Simon-Kucher & Partners” means Simon-Kucher & Partners Strategy & Marketing Consultants LLC in the United States (“US”) or Simon-Kucher & Partners Strategy & Marketing Consultants Ltd. In Canada or any other global entity of Simon-Kucher & Partners.
“Personal data” means any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity.
“Activities Information” refers to information collected by so called “persistent identifiers” such as cookies. Unlike Personal data, Activities Information does not directly identify a particular person; the information, however, is or can potentially linked to a particular computer or device.
“Sensitive personal data” means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life.
Simon-Kucher & Partners (“we,” “us”) is a global management consulting firm. Our focus is on strategy, marketing, pricing and sales. We have four offices located in the US (Boston, New York, Mountain View, and San Francisco) and one in Toronto, Canada.
You can find information about all of our offices here:
We are committed to protecting the personal data of our employees and customers and to complying with applicable data protection laws. As a part of our ongoing efforts to strengthen the protection of personal data, this privacy notice explains how we process personal data and the principles that we uphold with respect to transfers of personal data from the European Economic Area (“EEA”) and Switzerland to the US. We have structured our Website so that you may visit our Site without revealing your identity or providing personal data. Please read this Privacy Notice carefully.
This Privacy Notice applies to all personal data received by our offices in the United States, and from the European Economic Area (the “EEA”) and Switzerland in any format, whether electronic or paper.
3.1 Your rights as a data subject (user of our website)
According to the EU General Data Protection Regulation (GDPR), you have the right to know which data we have stored about you for which purposes (access). You may have incorrect data corrected (rectification). You also have the right to request the deletion of data if, for example, the data is not required to achieve the purposes for which it was stored or if we are not permitted to store the data for other reasons (deletion).
However, if a law allows us to store data or even prescribes it, we are typically unable to comply with the request for deletion. You have the right to have data blocked if, for example, the correctness of data has not been determined and still needs to be checked (restriction of processing). You can object to the processing (objection). This objection must contain an explanation of the particular situation on the basis of which further processing is unacceptable to you.
The objection will be carefully examined and the data will be blocked for the duration of the examination. You have the right to request data which you have made available to us and which is processed automatically in a common, machine-readable format from us (data portability).
If you wish to exercise one or more of these rights, please use the following e-mail address:
3.1.1 Requests and complaints
If, as the data subject, you do not agree with the way in which Simon-Kucher & Partners or persons at Simon-Kucher & Partners process your personal data and wish to inform the data protection officer directly, please contact him / her directly:
Privacy Officer in Singapore
Mrs Birgitta von Dresky
Phone : +65 6408 8000
Privacy Officer of the Simon-Kucher & Partners Group
2B Advice GmbH
Telephone: +49 228 92 61 65 120
The data protection officer is obliged to keep your identity confidential. Should it come to the conclusion that your identity could be inferred in the course of clarifying a complaint, the data protection officer will point this out to you in advance and, if necessary, ask you to release him from his obligation to secrecy.
3.1.1 Data Protection Supervisory Authority
You may address questions and complaints also to the Data Protection Supervisory Authority in charge:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
3.1 THE PERSONAL DATA WE COLLECT
On our website www.simon-kucher.com/en-us (the “Site”) we may collect the following personal data:
- Email; and
- Phone number (collectively “user provided data.”)
While a visitor uses the Site, we may also collect the following information that may in certain circumstances constitute personal data:
- Name of the file accessed and the URL;
- The http response code;
- The date and time of access;
- Volume of data transferred;
- Notification of whether the data access was successful; and
- IP address (collectively “automatically collected data”)
- Number of clicks on social plugins linked to our services
- Information about the date you first visited our website and the date when you visited our website the last time
- The region derived from your IP address – this is not a precise location but enables us to determine the broad region from where you accessed our site
We may place a “cookie” on the hard drive of the device that you use to access the Site. Cookies are text files that are saved on the hard drive of your device by means of your browser, enabling us to recognize your browser for purposes such as saving your preferences and directing relevant content to you. Most of the currently available browsers give you the option of managing cookies by, for example, disabling them entirely, accepting them individually, and deleting saved cookies from your hard drive. We would like to remind you that if you completely disable cookies on your browser, you might not be able to use some features of the Site.
We may collect information about your operating system and browser we may require to operate with your computer or device.
We may send Email-messages, which use a “click-through URL” linked to content of our Website. When you click one of these URLs, you pass through our web server before arriving at the destination web page. If you prefer not to be tracked simply do not click text or graphic links in the Email
We may also collect personal data when we engage in research projects for our clients. We encourage our clients to provide as little personal data as possible but personal data are nevertheless often necessary for conducting the research assignments given to us. We make use of anonymization and pseudonymization techniques whenever possible. However, it may be necessary to process personal data for the purposes of a specific research project. In the context of these research assignments we may receive the following categories of information, which may constitute personal data in certain circumstances:
- Contact details of participants in market research projects
3.2 THE PURPOSES FOR WHICH WE USE THE DATA
3.2.1 User provided data
We use the user provided data for the following purposes:
- To communicate with users of the Site;
- To invite persons to workshops and to conduct the workshops;
- To prevent and investigate fraud and other misuses;
- To protect our rights and/or our property;
3.2.2 Automatically collected data
We use the automatically collected data on our website for the following purposes:
- To manage the Site;
- To provide features available on the Site;
- To personalize the Site;
- To develop, improve, and protect the Site;
- For market research;
- To audit and analyze the Site;
- To ensure the technical functionality and security of the Site; and
- To initiate professional business contacts based on the individual interests and fields of business of our website visitors.
3.2.3 Activity Information
We and service providers on our behalf use Activities Information about your activity with respect to our Services. The following summarizes how the Activities Information is used.
We may use “pixel-tags” – small graphic images (also known as “web beacons” or single-pixel GIFS”) – to tell us what part of our website has been visited or to measure the effectiveness of searches customers perform on our Site. Pixel tags also enable us to send email messages in a format customers can read, and the inform us whether Emails have been opened, to help ensure that our messages are of interest to our registered users.
This website uses ClickDimensions’ web tracking features. Web Tracking will give us insight on how our website is being used and records the traffic that accesses it.
We can see which pages have been clicked on, how long a user spent on a certain page, and how they got to your website, among other information.
Using ClickDimension enables us to track anonymous page visits as well as page visits which link to a specific Organization that identifies by its IP-Address.
The table below lists the cookies that are placed in a visitor’s browser when the ClickDimensions tracking script is being used on the visited web page, their use and expiration.
This cookie is typically written to the browser upon the first visit to the site from that web browser. If the cookie has been deleted by the browser operator, and the browser subsequently visits the site, a new __cuid cookie is written with a different visitor unique ID. This cookie is used to determine unique visitors to the site and it is updated with each page view. Additionally, this cookie is provided with a unique ID that the application uses to ensure both the validity and accessibility of the cookie as an extra security measure.
2 years from set/update.
This cookie is used to establish and continue a user session with the site. When a user views a page on the site, the script code attempts to update this cookie. If it does not find the cookie, a new one is written and a new session is established. Each time a user visits a different page on the site, this cookie is updated to expire in 30 minutes, thus continuing a single session for as long as user activity continues within 30-minute intervals. This cookie expires when a user pauses on a page on the site for longer than 30 minutes.
30 minutes from set/update.
Used to signal the last time a visitor viewed a page.
30 minutes from set/update
ClickDimensions will gather information in “entities” which are:
- IP Organizations
- Anonymous Visitors
- Page Views
- Posted Forms
- Posted Fields
- Posted Surveys
- Survey Answers
We use HubSpot for our online marketing activities. We contracted with HubSpot Ireland, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. Hubspot Inc. as the mother of Hubspot Ireland has a valid privacy shield certification. We use Hubspot for the following purposes:
- Content management
- Creation and management of landing pages and contact forms
- Email marketing, like newsletters and automated mailings, e.g. for supply of downloads you explicitly requested (legal basis: Article 6 para. 1 lit. a GDPR)
- Social media publishing and reporting, e.g. where does the traffic come from, number of accesses (legal basis: Article 6 para. 1 lit f GDPR, with our legitimate interest of making our services as comfortable, relevant and usable as possible.)
- Contact management, like user segmentation and Customer Relationship Management (CRM) (legal basis: Article 6 para. 1 lit. a and lit. f GDPR, with our legitimate interest of making and keeping contact with you for business purposes.)
You may use or sign-up services to learn more about our company, download relevant content and to provide your contact details and other demographic information to us. In this case you will actively provide us with information about you, such as your name and your email address. Information that you provide us with, is stored on the servers of HubSpot.
When you are using our sign-up services you provide us with your consent to use your personal data in order to inform you about our services, which may be of interest to you.
When you are visiting our website and especially landing pages hosted on HubSpot we will ask you to consent to placement of cookies on your computer. Cookies are small files that include a unique user identifier and may contain other information, such as the duration of your visit on our website, date of last visit to our website, information about the website you were coming from, your sign-in status. Please refer to the following list of cookies that we use with Hubspot:
Basic / necessary cookies
This cookie is used to request cookie consent. It is valid vor 13 month.
This cookie can be set to a value that blocks sending tracking information to HubSpot. Still anonymized data may be sent to HubSpot. It is valid for 13 months
This cookies is used ot always display the same A/B-testpage to website visitors. It is a session cookie.
We set this cookie for password protected websites, so that the user does not have to reenter his or her password when revisiting the website.The name of the cookies is unique for each password protected website.
This cookie is used to determine if the Chat-Widget shall be active for future visits. It resets to the default value after 30 minuts of inactivity so that the widget closes. The cookie is valid for 30 minutes.
Dieses Cookie sorgt dafür, dass die Willkommensnachricht nach dem Schließen einen Tag lang nicht wieder angezeigt wird.
(Gültig: 1 Tag)
This cookie is place, if a user signs in to website hosted by HubSpot. It is valid for one year.
Cookies for cookie consent banner
This is the main cookie for user tracking. It includes the domain, the user token (utk), the first time stamp of the first visit, the last time stamp (of the last visit) the current time stamp (for the current visit) and the session counter (which is increased with every following session. It is valid for 13 months.
This cookie is used to track the identity of a user. This cookie is transferred to the HubSpot software, when sending a form and is used when removing duplicates from the contacts database. It is valid for 13 months
This cookie keeps track of sessions. It is used to determine whether or not HubSpot has to increase the amount of sessions and the time stamp in the __hstc-cookie. It includes the domain, die amount of website visits(view count) and the time stamp for the begin of the session. It is valid for 30 minutes.
Everytime the HubSpot-software changes a session cookie, this cookie is placed additionally. It detects if the user as started his or her browser again. If this cookies is not present at the time of cookie management the visit qualifies as new visit. It is valid until the end of the session.
This cookie is used to recognize vistors that are chatting with us via the Message Tool. If the user leaves the website before they have been added as a contact, the cookie stays on the computer of the user. If the user returns to the website and there is already a chat history, the chat history will be displayed in the Message Tool. It is valid for 13 months.
Hubspot collects publicly available business information about companies, such as revenue, number of employees, industry. If you register for the sign-up services this company information can be linked with your e-mail address, as we may identify the company you are working for by looking at the domain of your email address (the part that follows the @ in an email address). Also we are going to link the information that we collect using the Hubspot cookie to your e-mail address in order to provide you with the content that is relevant for you. If you withdraw your consent for the sign-in service, the email will be deleted and no data can be linked to that address any more. If you do not want us to link any cookie or tracking data to your email address, you may want to withdraw your cookie consent. In the following paragraph you will learn how to do this.
We are using Google Tag Manager to manage whether or not this cookie is placed or read (if it was already on your computer). Google Tag manager itself does not process any personal data other than to determine whether or not you consented or at a later point in time opted-out from cookies, analytics or other tracking methods.
You may withdraw this consent at any time by clicking Deactivate Hubspot Tracking
If you had provided your consent and now withdraw it, it is ensured ensure that already placed cookies are no longer evaluated. Nevertheless the cookie stays on your computer as it is technically not possible for us to delete the cookie on your computer. If you want to delete the cookie from your computer, you can do this using the build in options your web-browser provides. In most cases you will find these settings or options in the extras and/or options menu of your browser.”
3.2.3 Research data
We use the research data for the following research purposes:
- Developing new products and services;
- Customer loyalty strategies and programs;
- Digital marketing (online, mobile, social media);
- Monetizing strategies and new revenue models;
- Product and brand strategies;
- Market entry and defense strategies;
- Pricing strategies for products, business units and companies;
- Launch and post-launch pricing;
- Price negotiations and key account pricing;
- Pricing organization and processes;
- Multi-channel strategies;
- New sales channels/partnering;
- Sales organization and efficiency;
- Sales force effectiveness; and
- Key Account Management.
4. HOW WE DISCLOSE DATA
4.1 User provided data
We may disclose user provided data to:
- Service providers, such as payment processors;
- Public authorities, such as law enforcement, if we are legally required to so or if we need to protect our rights or the rights of third parties; and
4.2 Automatically collected data
We use data collected for ClickDimensions Web Tracking to enhance our communication with individual users and to provide them with information that is meaningful to them. We also use this data to improve our service by analyzing the way our website and online services are used.
We may disclose automatically collected data to:
- Service providers, such as data analysis companies;
- Public authorities, such as law enforcement, if we are legally required to do so or if we need to protect our rights or the rights of third parties; and
5. DATA SECURITY AND DATA INTEGRITY
We take reasonable measures to protect personal data from loss, misuse and unauthorized access, disclosure, alteration and destruction. These measures include, but are not limited to access controls, availability controls, input controls, transfer controls, employee controls and data separation controls.
6. BINDING CORPORATE RULES
We have enacted Binding Corporate Rules which ensure an adequate level of data protection throughout our Group worldwide.
Binding Corporate Rules or "BCRs" were developed by the European Union to allow multinational corporations, international organizations, and groups of companies to make intra-organizational transfers of personal data across borders in compliance with EU Data Protection Law. They are considered to be a "Gold Standard" in privacy.
Our Binding Corporate Rules have been evaluated and approved by the Data Protection Authorities in Europe.
The Binding Corporate Rules also include regulations on your rights toward data protection concerning the way we handle your data. You can find our Binding Corporate Rules here:
7. PARTICIPATION BY CHILDREN AND TEENS; ADVISORY
YOU MUST BE AT LEAST 13 YEARS OLD TO USE OUR SITE AND SERVICES. IF YOU ARE BETWEEN 13 AND THE APPLICABLE AGE OF MAJORITY; PLEASE REVIEW THIS AGREEMENT WITH YOUR PARENT OR GUARDIAN.
By submitting your personal data through the Site, you consent to Simon-Kucher & Partners collecting, using and disclosing your personal data in accordance with this Data Privacy Notice and for the purposes set out herein.
Staying in Touch with Simon-Kucher & Partner
Protecting our clients’ data is fundamental to the trusting relationships we have with our clients and conversation partners.
Simon-Kucher & Partners was one of the first companies in Europe to achieve the “golden standard of data protection” in 2014 and fulfill the requirements of Binding Corporate Rules.
As of June 2018 however, the updated General Data Privacy Regulation of the European Union requires a documented statement of consent for the sending of information material to clients and conversation partners.
If you are interested in receiving information from us about interesting projects and upcoming events on topics relevant to the future of your industry please enter your email address below and click confirm.
Afterwards we will send a message to the email address provided and kindly ask you to confirm the permission to sending you information on relevant topics via email.
If you subscribed in the past, providing an email address in the field above will send an email containing a link to where you can manage your subscriptions or opt out of receiving future messages. You may withdraw your consent at any time without incurring any costs other than the standard rate of your internet service provider.
By submitting your personal data through the Site, you consent to Simon-Kucher & Partners collecting, using and disclosing your personal data in accordance with this Data Privacy Notice and for the purposes set out herein. You can withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal.
If the above option does not work for you, feel free to contact our data protection team to inquire reagarding your question and use the following e-mail address:
10. EFFECTIVE DATE
The effective date of this Privacy Notice is December 1st 2016.