data
privacy
policy

Data protection and cyber security are not only part of our product portfolio – we live them. Our website does not track clicks. We host our internal services and applications ourselves.

This English version is provided for convenience only. In case of any discrepancy, the German version shall prevail.

Privacy Policy

We process personal data (hereinafter mostly referred to simply as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. In addition, we inform you below about third-party components that we use for optimisation purposes and to improve the quality of use, insofar as third parties thereby process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as the controller

The controller responsible for this website within the meaning of data protection law is:

Konsec GmbH
Im Köller 3
70794 Filderstadt
Germany

+49 711 217274-90

info@konsec.com
www.konsec.com

Data protection officer:

Mr Andreas Mack

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

  • to confirmation as to whether data concerning them is being processed, to information about the data processed, to further information about the data processing and to copies of the data (cf. also Art. 15 GDPR);
  • to rectification or completion of inaccurate or incomplete data (cf. also Art. 16 GDPR);
  • to the immediate erasure of the data concerning them (cf. also Art. 17 GDPR) or, alternatively, if further processing is necessary in accordance with Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
  • to receive the data concerning them that they have provided and to have this data transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  • to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in breach of data protection regulations (cf. also Art. 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17 (1) and 18 GDPR. However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, users have the right to information about these recipients.

Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of data concerning them, insofar as the data is processed by the provider in accordance with Art. 6 (1) (f) GDPR. In particular, objection to data processing for the purpose of direct marketing is permitted.

III. Information on data processing

Your data processed when using our website will be erased or blocked as soon as the purpose of storage no longer applies, provided that the erasure of the data does not conflict with any statutory retention obligations and no other information is provided below regarding individual processing procedures.

Server data

For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us by your web browser. These so-called server log files record, among other things, the type and version of your browser, the operating system, the website from which you came to our website (referrer URL), the page(s) of our website that you visit, the date and time of each access, and the IP address of the internet connection from which our website is being used.

The data collected in this way is stored temporarily, but not together with other data about you.

This storage is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the stability, functionality and security of our website.

The data is deleted after seven days at the latest, unless further retention is required for evidentiary purposes. In that case, all or part of the data is excluded from deletion until the incident has been finally resolved.

Contract processing

The data you submit to make use of our goods and/or services is processed by us for the purpose of performing the contract and is necessary to that extent. A contract cannot be concluded or performed without providing your data.

The legal basis for the processing is Art. 6 (1) (b) GDPR.

We delete the data once the contract has been fully performed, but must observe the retention periods under tax and commercial law.

In the course of performing the contract, we pass your data on to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as this is necessary for the delivery of goods or for payment purposes.

The legal basis for passing on the data is then Art. 6 (1) (b) GDPR.

Contact requests / means of contact

If you contact us by e-mail, the data you provide will be used to process your request. Providing the data is necessary to process and answer your request – without it, we cannot answer your request, or can only answer it to a limited extent.

The legal basis for this processing is Art. 6 (1) (b) GDPR.

Your data will be deleted once your request has been fully answered and no statutory retention obligations prevent deletion, as may be the case, for example, if a contract is subsequently concluded.

Based on the model privacy policy of the law firm Weiß & Partner