Privacy Policy – EN

Additional privacy information: Digital Solutions, accounts and monitoring

Updated: 24 September 2026. This supplement covers the four checks SCM Maturity, S&OP / IBP, Inventory & Working Capital and Production & Operations, Executive Reports and related review enquiries. It supplements the general information above. The controller is Maritime Tecnet GmbH, identified above; contact: info@interimcoo.de.

Assessments, results and optional monitoring accounts

We process your assessment answers, calculated scores, priorities, results, language, timestamps and technical identifiers linking an assessment to its session. Where supplied, this includes your name, company, industry, company size, turnover band, business model, role and other profile information. Results may also be stored on our server without a monitoring account to provide the requested result, a subsequent report purchase and protected access. “Without an account” therefore does not mean “without data processing”.

For free monitoring we process your email address, a user account, assigned company profiles and saved results. One account may contain several company profiles belonging to it. These data enable sign-in, assignment, storage and comparison of results over time. A one-off check does not require a monitoring account. Neither an account nor monitoring requires a report purchase. Access links and necessary service messages are sent by email.

The legal basis is Article 6(1)(b) GDPR insofar as processing is necessary for the service you request or pre-contractual steps. Where you act as an employee or contact for a company, we process business contact details under Article 6(1)(f) GDPR; our legitimate interest is providing and supporting the service requested by that company. Technical access protection and abuse prevention also serve this legitimate interest. The relevant function cannot be provided without information marked as required. Additional profile information and use of monitoring are optional.

The Inventory Check provides a free guest result in the session. A persistent assessment record is created if you explicitly choose company monitoring, request a management review or order a report. A review request stores your email address with that assessment; account sign-in alone is not a request to be contacted.

Executive Reports, orders and payments

For purchases we process billing and company details, names, contact and address details, the product, price, tax, order and transaction identifiers, payment status and the link to the assessment. The business-customer declaration is recorded with its text version and confirmation time. These data support contract performance, invoicing, delivery of the correct report and access verification. Orders are managed using the WooCommerce software operated on our website.

If you choose a payment method processed through Mollie, the order, contact and payment information necessary for the transaction is transmitted to Mollie B.V., Netherlands, and, where applicable, the banks or providers involved in the selected payment method. Mollie processes payment data as an independent controller, including for payment processing and its own legal duties. Details of recipients, processing and rights are available in Mollie’s privacy statement.

The legal bases are Article 6(1)(b) GDPR for the requested purchase, Article 6(1)(c) GDPR for statutory record-keeping obligations, and Article 6(1)(f) GDPR for handling business contacts and preventing abusive access. Our automated assessment evaluation provides professional orientation; we do not use it to make a solely automated decision producing legal or similarly significant effects concerning you.

Management reviews, advisory and interim enquiries

If you request a discussion from a result or report, we store your name, email address, company and, if provided, telephone number and discussion topic with the related assessment, score and priorities in our protected lead pipeline. We also maintain processing status, follow-up dates and necessary conversation notes. An internal notification may inform the responsible person. This storage differs from the general contact form described above.

Processing serves your requested contact and the preparation or performance of advisory services under Article 6(1)(b) GDPR or, for company contacts, Article 6(1)(f) GDPR. An account, assessment, purchase or review enquiry does not automatically constitute consent to newsletters or other advertising emails.

Technical storage and usage statistics

Technically necessary cookies and comparable storage support explicitly requested session, cart and access functions under section 25(2)(2) TDDDG. Monitoring uses the icoo_sop_access cookie for up to 30 days; it contains a random access credential. The single-use email access link is valid for 15 minutes. These are access lifetimes, not retention periods for company and result data. Signing out removes the access cookie. Other necessary shop cookies depend on the WooCommerce configuration.

With statistics consent, our own Digital Solutions usage statistics record events such as visits, starts, result views, report views, tool, language and campaign source. Pseudonymous session and assessment identifiers may link events to a particular assessment; these data are not necessarily anonymous. Campaign information is kept in session storage under icoo_ds_attr_v1. You can change consent through Complianz. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG. Assessments and orders necessary to provide the service are stored separately from consent-based visitor statistics.

Recipients and transfers

Authorised persons at Maritime Tecnet GmbH and necessary hosting, email and IT service providers receive access. The website is hosted through STRATO. Payment providers described above, tax advisers and competent authorities may also receive data where necessary. Service providers acting on our instructions are engaged within the applicable processing arrangements.

Payment services may involve recipients outside the European Economic Area. Mollie describes appropriate transfer mechanisms, including EU Standard Contractual Clauses. Details and information about safeguards are available in the linked provider information; you may also contact us. This supplement does not replace the separate information on Google Analytics and other services used on the website.

Retention, erasure and your rights

Accounts, company profiles and monitoring results are retained to provide the requested access and comparisons over time. Individual assessments and reports are retained insofar as needed for the requested evaluation, agreed report access or related enquiries. When use ends or erasure is requested, we assess which data are no longer required for these purposes and can be deleted. Expiry of the access cookie does not automatically delete all results.

Enquiry data are deleted after processing when no longer required for agreed follow-up, evidence of correspondence or establishing, exercising or defending claims. Invoices, accounting records and other business records subject to statutory retention remain stored for the applicable legal period, with other uses restricted. Deleting a report therefore does not automatically delete an order. Deletion in backups is addressed through the relevant backup cycle.

To request access, correction, portability or review of erasure of your account and linked data, email info@interimcoo.de. Appropriate verification of your entitlement may be necessary to protect your data. Your rights described above, including objection, withdrawal of consent and complaints to a supervisory authority, remain unaffected.