PRIVACY NOTICE

German Design Consulting Inc. (GDC, “we”) is a U.S.-based company headquartered in Los Angeles, California. Protecting your personal data is of the utmost importance to us. As a U.S. company, we primarily serve clients within the United States and are primarily subject to U.S. laws. However, since we also have a team located in the EU and offer specialized visa services for German citizens, we are additionally subject to the provisions of the EU General Data Protection Regulation (GDPR).

This Privacy Policy describes how we process the data of website visitors, customers, partners, and applicants. It applies to all data we collect and process through our website www.g-dc-inc.com and in the context of our business relationships.

What Data We Collect

We process personal data that you provide to us directly, for example when you request our services, contact us via email, apply for a job, or use our remote support services. This includes your contact information (such as name, email address, and phone number), information about your company and position, as well as any other details you provide in the context of job applications or service inquiries. In particular, for our visa and immigration services, we may also process sensitive data that is required for official application procedures.

When you visit our website, we also automatically collect technical data transmitted by your browser. This includes your IP address, information about your device and browser, the pages you visit, and the duration of your visit.

The Purposes of Our Data Processing

We process your data for the following purposes:

• To fulfill contracts: To provide our core services such as design, clay modeling, CAD modeling, UX/UI design, and engineering, and to meet our contractual obligations to clients and partners.
• For communication and customer service: To respond to your inquiries, provide project updates, and maintain our client relationships.
• For marketing and promotional purposes: To send you information about our services, where you have opted in to receive such communications.
• For recruitment and talent management: To process your job application and assess your suitability for employment at GDC.
• For internal business operations and analytics: To analyze the usage of our website, improve our services, and manage our internal processes.
• To comply with legal obligations: To meet legal requirements such as tax laws or respond to requests from government authorities.

Furthermore, we use your data to continuously improve the quality of our services and the functionality of our website, to ensure the security of our systems, and to respond to your inquiries. This processing is carried out on the basis of our legitimate interests.

Data Storage and Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. The length of the retention period depends on the nature of the data, the purpose for which it was collected, and the applicable legal requirements.

Sharing of Your Personal Data

We may share your personal data with the following categories of third parties:

• Service Providers: We engage trusted third-party service providers to process data on our behalf and in accordance with our instructions (e.g., hosting providers, IT service providers, HR software vendors, payment processors).
• Affiliated Companies: Your data may be shared within the German Design Consulting corporate group to ensure the smooth delivery of our global services.
• Government Authorities and Law Enforcement: We may disclose your data if required to comply with applicable laws, regulations, legal processes, or governmental requests.
• In the Context of Business Transfers: In the event of a merger, acquisition, asset sale, or bankruptcy, your data may be transferred as part of the transferred assets.

Information Regarding the Contact Form

When you use our contact form, we process the personal data you provide (such as your name, email address, and message) in order to respond to your inquiry and get in touch with you. Your information is transmitted to us in encrypted form. The processing of this data is based on our legitimate interest in responding to your inquiries efficiently. If your inquiry is intended to initiate a contract, the processing is carried out as a pre-contractual measure. We store your data from the inquiry to document our correspondence and any subsequent communication.

Cookies and Tracking Technologies

Our website uses cookies, which are small text files stored on your device. We use both essential cookies for basic functionality and optional cookies for analytics and marketing purposes. We obtain your consent for all non-essential cookies through a cookie banner.

Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

Your Data Protection Rights

Your specific rights regarding your data depend on your place of residence and the laws applicable to you.

Privacy Rights for U.S. State Residents

As a U.S.-based company, we adhere to the strictest data protection laws in the United States, many of which grant comprehensive rights in various states

• For California residents (CCPA/CPRA): You have the Right to Know about the categories and specific pieces of personal information we have collected. You also have the Right to Delete personal information, as well as the Right to Correct inaccurate information. Additionally, you have the Right to Opt-Out of the Sale or Sharing of your personal information. GDC clarifies that we do not sell your personal information.
• For residents of Virginia (VCDPA), Colorado (CPA), Utah (UCPA), Texas (TDPSA), and Oregon (OCPA): These laws grant you similar rights to access, correction, deletion, and the right to opt out of the processing of your data for targeted advertising.
• Other U.S. States: We apply the principles of these comprehensive laws to residents of other states as well, in order to ensure a consistent and high standard of data protection.

Rights under the EU General Data Protection Regulation (GDPR)

Since we process data of EU citizens, this processing is subject to the GDPR. As a data subject, you have the following rights based on the legal grounds specified:

• Right of Access (Art. 15 GDPR): You have the right to request confirmation as to whether your personal data is being processed and, if so, to obtain access to such data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

• Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate or incomplete personal data. Legal basis: Art. 6(1)(f) GDPR.

• Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided that the legal requirements are met. Legal basis: Art. 6(1)(f) GDPR.

• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data. Legal basis: Art. 6(1)(f) GDPR.

• Right to Object (Art. 21 GDPR): You have the right to object to the processing of your personal data that is based on our legitimate interests. Legal basis: Art. 6(1)(f) GDPR.

• Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Data Transfer to the United States

Since GDC is a company based in the United States, your data will generally be transferred to and processed in the United States. The EU considers the U.S. to have an inadequate level of data protection. To safeguard your data, we therefore use the Standard Contractual Clauses (SCCs) approved by the European Commission. These ensure that your data is subject to a high level of security.

Disclosure, Security, and Contact

Your data will only be shared with third parties if it is absolutely necessary for the provision of our services or to fulfill legal obligations. This includes external service providers who assist us with IT services, hosting, or analytics.

We implement a variety of technical and organizational measures to protect your data from loss, misuse, unauthorized access, or disclosure. These measures include encryption, firewalls, and strict access controls. Our website uses cookies, and we obtain your consent for all non-essential cookies through a cookie banner.

If you have any questions about this Privacy Policy or the processing of your data, please contact us:

German Design Consulting Inc.

11500 W. Olympic Blvd., Ste 400

Los Angeles – CA 90064 USA

E-Mail: info@g-dc-inc.com

Changes to this Policy

This policy may be updated from time to time to reflect changes in our business practices or legal requirements. The date at the beginning of the document indicates when the policy was last revised.