Privacy statement


We care about your privacy rights and therefore choose to provide the following information in the best understandable manner a legal document could be. With the following privacy statement, we would like to lay out for you which types of your personal data (hereinafter also referred to as "data") we process, for what purposes and to what extent we do this. This privacy statement therefore applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our website. Let’s start!

Controller of your Data

Controller of your Data is

Otter Advisory GmbH
Werderstraße 32
69120 Heidelberg

This means, this is the legal person, which determines the purposes and means of the processing of your personal data.

The Data we process when you visiting our website

When you access our website, the following information about you is automatically stored in the form of server log files: your web browser, your operating system, your IP address and port, the accessed website or parts thereof, the website from which you are visiting us, the access time.

This data is processed exclusively for the purpose of providing the content of our website and for the purposes of identifying and tracing unauthorized access to the web server and other criminal offenses.

The legal basis for data processing is Article 6, Paragraph 1, Sentence 1, Letter f) GDPR.

Contacting and booking meetings

We are delighted that you would like to contact us using one of the options provided. You can contact us either via our contact form, by email or phone, ask your questions and book a meeting. Your details will be processed if this is necessary to answer the contact request. For this purpose, your inventory data, such as name and address, contact data, such as e-mail addresses or telephone numbers as well as other optional data, company name, country or your question are processed by entering them in free text fields.

Legal basis: The processing of the above data takes place on the legal basis of the fulfillment of the contract as well as pre-contractual inquiries according to Art. 6 Paragraph. 1, Letter b) GDPR as well as otherwise on our legitimate interest in answering the questions according to Art. 6 Para. 1, letter f) GDPR.

Application for the HR Think Tank

We are proud that you would like to apply for our think tank. If you want to apply using the form provided, your inventory data, such as name and the name and size of your company, will be processed. You will also be asked to indicate your current position in your company. We assume that you are also allowed to provide the requested data. If you would like to submit your application by e-mail, we would like to point out that this type of communication, even if the transport encryption is in place, cannot offer the same level of security as transmission via the contact form. Your data will of course not be passed on to third parties unless you expressly ask us to do so.

Legal basis: The processing of the above data takes place on the legal basis of the fulfillment of the contract as well as pre-contractual inquiries according to Article 6 Abs. 1 letter b) GDPR.


You can register for a newsletter on our website. Unless their content is specifically described, these newsletter contain information on the latest developments in the HR tech area, our services and ourselves. The newsletter is only sent with your consent if you subscribe on our website with your e-mail address. The registration itself generally takes place in a double opt-in procedure. This means that after registration you will receive an email from us in which you will be asked to confirm your registration. In this way we ensure that no one other than you can register for the newsletter.

If you would like to unsubscribe from the newsletter, simply click on the link in the confirmation email.

After you have unsubscribed, we can save your email address for up to three years in order to be able to prove that you have previously given your consent. The processing of this data is limited to the defense of related claims. The registration process is logged for the purpose of proving that it has been carried out correctly.

Legal basis: The newsletter is sent on the legal basis of consent, Article 6 Paragraph 1, letter a) GDPR. The storage of the e-mail address for verification purposes is based on our legitimate interest, Article 6 Paragraph 1, letter f) GDPR.


Like almost all professional websites this site uses cookies, which are tiny files that are downloaded to your computer, to improve your experience. The following text describes what information they gather, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored however this may downgrade or 'break' certain elements of the sites functionality.

We use cookies for a variety of reasons detailed below. Unfortunately in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use.

You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site. Therefore it is recommended that you do not disable cookies. 

Click here to manage your consent

The Cookies We Set

Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Service.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.
  • HubSpot Cookies. We use cookies from our Service Provider HubSpot to analyse your surfing behavior.

In addition to ensuring the functionality and security of the website, the above cookies are used to evaluate your use of the website locally and thus our legitimate interest.

The legal basis for this data processing is Article 6 Paragraph 1, letter f) GDPR.

  • Third Party Cookies. Third Party Cookies are the ones, you were asked to give consent to prior to visiting our website on our cookie banner. You can revoke your consent at any time in our cookie management tool.

The legal basis for this data processing is Article 6 Paragraph 1, letter a) GDPR.

Google Maps

For a better geographical representation of our company location and so that you can visit it more easily, we have included maps from the Google Maps service from Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“Google”) via an API on our website. Since this is Google's business model, when you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In particular, your IP address is sent to a Google server. This also happens regardless of whether Google provides a user account that you are logged into or whether there is no user account. If you are also logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out of your account there after using the respective Google service. Google stores your data as a user profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

Further information on data processing by Google can be found in Google's privacy policy.

The legal basis for this data processing is Article 6 Paragraph 1, letter a) GDPR.

Blog and Social-Media-Plugins

On our website we offer articles in our blog for your information and as a service. There you have the opportunity to share and forward the posts via various social media channels or by e-mail, and to comment on the blog posts.

We have no influence on which of your data is processed by the social media providers. Please inform yourself on Facebook, Twitter or LinkedIN in their data protection regulations what happens to your data when you visit our site or click the corresponding button

If you would like to comment on the form provided for this purpose, you must provide your name and email address.

Legal basis: The processing of the data for submitting a comment takes place on the legal basis of our legitimate interest in communication in accordance with Article 6 Paragraph 1, letter f) GDPR. The processing of the data due to the integration of the social media buttons takes place on the basis of your consent in accordance with Article 6 Paragraph 1, letter a) GDPR.

Third country transfer

Unless you have expressly consented to this, or we are contractually or legally obliged to transmit your data, we will only process your data to third countries with a recognized level of data protection, a contractual obligation through so-called EU standard contractual clauses or if corresponding guarantees are in place. We are aware that the USA does currently not belong to the countries that have been assessed by the European Court of Justice as a country with an adequate level of data protection, which is why we ask for your consent for services operated from this country.

Deletion of data

But what happens to your data that is either automatically collected by us or voluntarily provided by you? As soon as the purpose of the data processed by you has been achieved, or the consent given for processing is revoked by you, the data will be deleted unless it has to be processed for other permissible purposes. This may be necessary, for example, for reasons of commercial or tax law or to defend or enforce legal claims.

Your further rights as a data subject

As the data subject, you have various rights, which we will explain below and which arise in particular, but not only, from Art. 15 - Art. 21 GDPR.

  • The right to receive information about your data stored by us at any time, Art. 15 GDPR.
  • The right to request a rectification, if your data isn’t correct or to request your data to be completed, if incomplete, Art. 16 GDPR.
  • The right to request the erasure of your personal data in accordance with Art. 17 GDPR.
  • The right to request or object to the restriction of the processing of your data in accordance with Art. 18 GDPR.
  • The right to receive your data stored with us in a machine-readable format ("data transferability"), Art. 20 GDPR.
  • The right to object , on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions, Art. 21 GDPR.
  • The right to lodge a complaint with a data protection supervisory authority, Art. 77 GDPR.

If you would like to exercise your rights, please send us an e-mail to

Effective Date and Updates

Effective Date of this Privacy Statement is March 2021. But we ask you to inform yourself regularly about any changes to the content of our privacy statement. We will of course notify you should a change make it necessary for you to take action.