H/Advisors Gauly, owned by Havas Group, is committed to protecting your privacy and personal data.
H/Advisors Gauly (“we”, “our”) is committed to protecting your personal data and your privacy. We encourage you to carefully read this Data Protection Policy (“Policy”). This Policy informs you of our data protection and privacy practices and the way your personal data is collected and used by H/Advisors. This Policy is readily available on our home page and at the bottom of each page of this Website. H/Advisors strongly supports the fundamental rights to privacy and data protection as well as compliance with national and international privacy laws.
The data controller responsible for the processing of personal data on this website is:
Gauly Advisors GmbH
Ulmenstraße 37-39
60325 Frankfurt am Main
Contact
Tel: +49 69 767 578 0
Email: [email protected]
Data protection officer (DPO)
[email protected]
T +49 69 767 578 0
What data is collected?
In its capacity as data controller, H/Advisors Gauly collects and processes your personal data after informing you accordingly. Personal data is any information relating to an identified or identifiable natural person. An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identifier or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity.
This Policy does not cover data rendered anonymous, i.e. when individuals are no longer identifiable or are identifiable only with a disproportionately large expense in time, cost and labour. If anonymous data becomes identifiable, or if pseudonyms are used and allow individuals to be identified, then this Policy will apply.
In addition to data collected automatically when you use our website, we may receive personal data directly from you, for example when you contact us, register for an event, subscribe to our communications or submit an application. Providing personal data is generally voluntary. However, if certain information is required to process your request or provide a service, we may not be able to do so without that information.
In general, your personal data is collected directly from you. In certain circumstances, we may also obtain personal data from publicly available sources, professional networking platforms, our clients, business partners or other parties involved in the provision of our services.
The types of personal data we process include:
• contact information: for example, your first name, last name, pseudonym, gender, email address, postal address, telephone number;
• identification documents/data: for example, your passport details where we are arranging travel on your behalf, photographs, social media profiles;
• your professional data: for example, your educational and professional background for job applicants, your job title, home company, or other application data for example where you apply for a programme/event;
• your login data: your IP address
• competition data: for example, your name, contact details, location and, if applicable, proof of age;
• your browsing data and expressed preference: traffic and browsing history on H/Advisors websites, data from cookies and trackers on H/Advisors websites; and
• data related to your participation in any of our events and/or programmes: for example, biographical information, your qualifications, professional experience and employer, your image, audio and likeness (as captured on a webinar, in photographs or on recordings we make of the event, and on CCTV where the event is hosted at our premises), social media information, health data (e.g. allergy information) relevant for your participation, your views/interests expressed whilst participating.
Our websites and social media pages are primarily intended for business contacts and adult users. We do not knowingly collect personal data from children unless permitted by applicable law.
Purpose, Categories of Data, Legal Basis and Data Retention Period
PURPOSE CATEGORIES OF DATA LEGAL BASIS RETENTION PERIOD
CLIENT RELATIONSHIP Contact details, correspondence, contract-related information Performance of a contract (Art. 6(1)(b) GDPR) Duration of the contractual relationship, including the statute of limitations, beginning at the end of the year in which the contractual relationship is terminated
SUPPLIER RELATIONSHIP Contact details, contractual and billing information Performance of a contract (Art. 6(1)(b) GDPR) Duration of the contractual relationship, including the statute of limitations
HANDLING ENQUIRIES AND CONTACT REQUESTS Contact details, communication content Pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR) Until the enquiry has been fully resolved
RECRUITMENT AND APPLICANT MANAGEMENT Application documents, CV, correspondence Steps prior to entering into an employment contract (Art. 6(1)(b) GDPR and § 26(1) BDSG) Six months after completion of the recruitment process unless a longer retention period has been agreed with the applicant
SENDING NEWSLETTERS AND MARKETING COMMUNICATIONS Contact details, communication preferences Consent (Art. 6(1)(a) GDPR), for existing customers: legitimate interest (Art. 6(1)(f) GDPR) regarding email marketing in conjunction with applicable marketing laws (eg. § 7(3) UWG). Until consent is withdrawn, objection is raised, or the communication activity ends
ORGANISING AND MANAGING EVENTS Registration data, participation information, dietary requirements where applicable Performance of a contract (Art. 6(1)(b) GDPR); consent regarding health data (Art. 6 (1) lit. a, Art. 9 (2) lit. a GDPR) Duration of the event and any necessary follow-up period
PUBLICATION OF PHOTOGRAPHS, VIDEOS Image, audio and video recordings Consent (Art. 6(1)(a) GDPR) Until consent is withdrawn or the publication purpose ceases to exist
WEBSITE OPERATION AND IT SECURITY IP address, log files, device and browser information Legitimate interest in ensuring the security, integrity and functionality of the website (Art. 6(1)(f) GDPR) Up to one year
COOKIES AND WEBSITE ANALYTICS Online identifiers, usage data, cookie information (eg. Google Analytics, YouTube, Vimeo)
Consent (Art. 6(1)(a) GDPR). Where cookies are strictly necessary (Art. 6(1)(f) GDPR, § 25(2)(Nr. 2) based on our legitimate interest for providing essential requirements of the website; further details are provided in the Cookie Policy As specified in the Cookie Policy
COMPLIANCE, LEGAL CLAIMS AND FRAUD PREVENTION Relevant personal data required for compliance and dispute resolution Legal obligation (Art. 6(1)(c) GDPR); legitimate interest in establishing, exercising or defending legal claims (Art. 6(1)(f) GDPR) For the duration required by applicable law or until expiry of relevant limitation periods
RESPONDING TO DATA SUBJECT RIGHTS REQUESTS Identification and correspondence data Compliance with legal obligations (Art. 6(1)(c) GDPR) For the period required to demonstrate compliance with GDPR obligations
We retain personal data only for as long as necessary to achieve the purposes described in this Privacy Notice. Thereafter, we retain personal data for the period required by applicable statutory retention obligations and limitation periods, where necessary to establish, exercise or defend legal claims, and subsequently delete or anonymise such data.
Personal data may furthermore be retained where necessary to comply with statutory retention and documentation obligations under applicable commercial and tax laws, including the German Commercial Code (Handelsgesetzbuch – HGB), the German Fiscal Code (Abgabenordnung – AO) and the German Value Added Tax Act (Umsatzsteuergesetz – UStG). Depending on the type of record concerned, the relevant retention periods generally range from six to ten years.
Who Are the Recipients of Your Data?
We may share your personal information within our group of companies.
We may share personal data with IT service providers, hosting providers, marketing service providers, professional advisers and event partners. Where such parties process personal data on our behalf, they act as processors and are contractually bound in accordance with applicable data protection laws. Where recipients process personal data for their own purposes, they act as independent controllers.
International Data Transfers
Some of our service providers, group companies or business partners may be located, or process personal data, outside the European Economic Area (“EEA”). Where personal data is transferred to a country that is not subject to an adequacy decision by the European Commission, we rely on appropriate safeguards pursuant to Article 46 GDPR, including the European Commission’s Standard Contractual Clauses, together with any supplementary measures required by applicable law.
Where personal data is transferred to recipients in the United States, transfers may also take place on the basis of an adequacy decision, such as the EU-U.S. Data Privacy Framework, provided that the relevant recipient is certified under that framework.
Further information regarding international data transfers and the safeguards implemented can be obtained by contacting us using the details set out in this Privacy Notice.
Links to third-party websites
H/Advisors Gauly websites or services may provide links to third-party applications, products, services, or websites for your convenience and information. H/Advisors Gauly does not control those third-party websites or their privacy practices, which may differ from our practices. H/Advisors Gauly is not responsible for the processing of personal data you submit on these third-party applications.
Your data protection rights
You have certain rights in relation to your personal information, as listed below. We will handle any request to exercise your rights in accordance with applicable law and any relevant legal exemptions.
Right of access
As data subjects you may inquire as to the nature of the personal data H/Advisors Gauly holds about you (Article 15 GDPR). You will be provided access to your personal data regardless of the location of the data processing and storage.
Right to rectification
If your personal data is inaccurate or incomplete, you may request that the data is amended (Article 16 GDPR).
Right to object
Where we process your personal data on the basis of our legitimate interests (Article 6(1)(f) GDPR), you have the right to object to such processing at any time on grounds relating to your particular situation (Article 21(1) GDPR).
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling to the extent that it is related to such direct marketing (Article 21(2) GDPR).
Right to withdraw consent
Where the processing of your personal data is based on your consent (Article 6(1)(a) GDPR), you have the right to withdraw your consent at any time without providing a reason (Article 7(3) GDPR).
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to erasure
You can ask for the deletion of your personal data when it is allowed by applicable laws and regulations (Article 17 GDPR).
Right to restriction of processing
You have the right to request the processing of your personal data to be restricted when it is permitted by applicable laws and regulations (Article 18 GDPR).
Right to data portability
If you meet the conditions settled by the applicable laws and regulations, you have the right to receive your personal data in a machine readable format and to transmit it from H/Advisors Gauly to another data controller (Article 20 GDPR).
Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Article 77 GDPR).
Changes to this Policy
H/Advisors Gauly may modify this Policy as needed, for example, to comply with changes in laws, regulations, H/Advisors practices and procedures, or requirements imposed by data protection authorities.
Last update: July 2026