Information on data processing

Information on data processing

1. Name and contact details of the party responsible for data processing

Gauly Advisors GmbH
Bockenheimer Landstra├če 2-4
60306 Frankfurt am Main

T +49 69 767 578 0

The Privacy Officer can be reached at:

T +49 69 76 75 78 21
F +49 69 76 75 78 33

2. Collection and storage of personal data as well as type and purpose, and their use

When you commission us, we collect the following information: Title, first name, last name, a valid email address, address, telephone number (landline and/or mobile phone).

Information that is necessary for providing consultancy to you. This data is collected in order to identify you as our customer; to provide you with appropriate consultation; for our correspondence with you; for invoicing; for processing any liability claims that may exist, and for asserting any claims against you. The data is processed following your request and is required for the purposes mentioned, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, for properly working on the mandate and for the mutual fulfilment of obligations arising from the mandate agreement. The personal data collected by us for the mandate will be stored until the end of the statutory retention period. 

(10 years after the end of the calendar year in which the consultancy ended) and deleted thereafter, unless we are obliged by Article 6 para. 1 sentence 1 lit. c GDPR to store if for a longer period due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO), or you have given your consent to storage going beyond this in accordance with Art. 6 para. 1 p. 1 lit. a GDPR.

3. Disclosure of data to third parties

Your personal data will not be transmitted to third parties for purposes other than those listed below.

To the extent necessary for our processing of the consulting relationship with you in accordance with art. 6 para. 1 sentence 1 lit. b GDPR, your personal data will be forwarded to third parties. This includes, in particular, the sharing of contact data with persons and companies with whom we arrange contact for you, individually and as part of the consulting contract. The data passed along may be used by the third party exclusively for the aforementioned purposes.

4. Rights of data subjects

You have the right:

in accordance with Art. 7 Para. 3 GDPR, to revoke the consent you have granted to, us at any time. As a result, we would no longer be allowed to continue the data processing based on this consent into the future;

in accordance with Art. 15 GDPR, to request information about your personal data that is processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information on the details thereof;

in accordance with Art. 16 GDPR, to immediately request the rectification of incorrect or incomplete personal data stored by us;

in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims; 

in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, or the processing is unlawful but you refuse to delete the data and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have filed an objection to the processing pursuant to Art. 21 GDPR; 

in accordance with Art. 20 GDPR, to receive your personal data, which you provided to us, in a structured, current, and machine-readable format or to request its transmittal to another responsible party; and

in accordance with Art. 77 GDPR, to file a complaint with a supervisory authority.

Usually, you can contact the supervisory authority of your usual place of residence or workplace, or of our office, for this purpose. 

5. Rights of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data provided that there are reasons for this arising from your particular situation.

To exercise your right of objection, simply send an email to

Last updated: May 2018