Data protection notice

Thank you for your interest in our website. The protection of your privacy when processing personal data and the security of all business data is an important concern for us, which we take into account in our business processes. Here we inform you in detail about how we handle your data.

 

§ 1 General information on the collection of personal data in connection with visits to our website

 

(1) In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. We would like to inform you that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

 

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

Asseco BERIT GmbH
Mundenheimer Straße 55
68219 Mannheim
Deutschland
Telefon: +49 621 87805 0
E-Mail: info@asseco-berit.de

You can reach our data protection officer at datenschutz@compliancesystems.de or by mail, addressed to “The Data Protection Officer”.

 

(3) This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 (1f) GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1a) GDPR. Consent can be revoked at any time. Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.

 

We use the following hoster:

webgo GmbH
Heidenkampsweg 81
20097 Hamburg
Germany

 

We have concluded a data processing agreement (DPA) with the website host. This is a contract prescribed by data protection law, which ensures that the host processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

(4) Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.

 

(5) If you have consented to data processing, we process your personal data on the basis of Art. 6 (1a) or Art. 9 (2a) GDPR, insofar as special categories of data are processed in accordance with Art. 9 (1) GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 (1a) GDPR. Consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6 (1b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6 (1c) GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 (1f) GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.

 

§ 2 Your rights

(1) In the following, we will inform you about your rights as a data subject in accordance with Art. 15 GDPR. You can exercise these rights at any time by contacting us directly. If you assert these rights against us, we will examine them in detail, taking into account the associated legal requirements and conditions. We may request further information from you for this purpose. We will explain the results of our review and our approach to fulfilling your request in detail. It is possible that we will not be able to fully comply with your wishes in the manner you have requested. This should not prevent you from asserting your rights against us or asking us about them. We will be happy to answer any questions you may have.

 

(2) Right of access

You have the right to request information from us at any time as to whether and which of your personal data is being processed by us. This also includes information on the purposes of the processing, any recipients to whom we have disclosed your data, the planned storage period and, if applicable, information on the origin of this data if we have not collected it directly from you. In addition, you have the right to a one-off copy of your personal data stored by us free of charge. We reserve the right to charge a reasonable administrative fee for the creation of subsequent copies.

 

(3) Right to rectification

You have the right to demand that we correct any inaccurate data that we have stored about you. This also includes the right to have incomplete personal data completed.

 

(4) Right to erasure

You have the right to request that we erase data that we have stored about you. If we have published data about you, this also includes our obligation to forward all links to this data and copies or replications of this data to other controllers responsible for processing this published personal data as part of the „right to be forgotten” in accordance with Art. 17 para. 2 GDPR, taking into account available technology and implementation costs.

 

(5) Right to restriction of processing

You have the right to request that we restrict the processing of data that we have stored about you. This data can then only be processed with your consent or for a few legally defined purposes.

 

(6) Right to object

Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

 

(7) Right to withdraw consent

If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

 

(8) Right to data portability

You have the right to receive from us the personal data that you have provided to us in a structured, commonly used and machine-readable format for the purpose of transmitting it to another controller. At your request and taking into account the available technical possibilities, this also includes the direct transfer from us to the other controller.

 

(9) Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data at any time.

 

§ 3 Collection of personal data when visiting our website

(1) Even when using our website for purely informational purposes, we collect at least the personal data listed below, which your browser transmits to our server each time you access a page. This is necessary for technical reasons in order to display our website to you and to ensure its stability and security (legal basis for this is Art. 6 (1f) GDPR):

  • IP address
  • host name
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates (referrer)
  • The specific pages of our website that you have accessed
  • Browser: Type, version and set language
  • Operating system: type and version
  • If JavaScript is activated, also:
  • Screen resolution
  • Color depth
  • Size of the browser window
  • Installed browser plugins

 

(2) Use of cookies and other storage technologies:

Cookies are small text files that are stored on your end device assigned to the browser you are using. Furthermore, websites can store so-called HTML5 storage objects on your device. In both cases, information is stored and read out again. This can be done for very different purposes, but no programs can be executed or malware transmitted.

 

a) We have made a conscious decision not to use tracking technologies that require consent or to place elements on your device that require consent on our website. For this reason, you can visit our website completely undisturbed, without first having to click away a so-called “cookie banner” or go through the hassle of giving or withholding your consent for specific trackers and cookies. Nevertheless – or perhaps precisely because of this – you can rest assured that we take your privacy seriously when you visit our website and respect data protection.

 

To the extent technically necessary, we also place a few elements on your device. While this does not affect your data protection and does not require consent, we are nevertheless obligated to inform you about it, which we are happy to do in the table below. The legal basis for the use of these elements is generally our balancing of interests regarding the operation of our website based on technical necessity pursuant to Art. 6 (1f) GDPR. If a different legal basis applies in individual cases, you will be informed of this in the description of the corresponding functionality to which an element is assigned.

 

Name Category Purpose Source /
Lifespan
wpEmojiSettingsSupports Technically necessary Ensures that graphic elements are displayed correctly. Website /
End of session

 

b) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We generally recommend that you delete cookies, the browser history and other temporary web storage objects automatically or manually on a regular basis in order to increase the protection of your privacy.

 

§ 4 Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply. Mandatory information is marked with an asterisk. Information in fields not marked in this way is voluntary.

 

(2) When you contact us by e-mail or via a contact form, your e-mail address and other data provided by you will be stored by us in order to answer your inquiry. If a business relationship exists between you and us or is established as a result of your inquiry, we will store this data for the duration of our business relationship. Otherwise, we will delete this data once it is no longer required for the complete processing of your inquiry. If statutory retention obligations prevent deletion, we will restrict the processing of the data for the duration of this period and then delete it. When contacting us via a contact form, please note the mandatory field markings as described in section 1 in order to avoid transmitting personal data that you do not wish to provide. By sending the contact form or your email, you declare your consent that we may process the data transmitted by you in the aforementioned manner (legal basis: Art. 6 (1a) GDPR).

 

(3) In some cases, we use external service providers to process your data. They have been carefully selected and commissioned by us and we have concluded agreements with them to protect your data to the extent required by data protection law. If they are based outside the European Economic Area (EEA), we have ensured that they are located in countries for which the EU Commission has determined a comparable level of data protection, or we have ensured a comparable level of data protection for this data processing through corresponding contractual agreements.

 

(4) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.

 

In the following, we will inform you in detail about the special forms of use, email-based information services, tracking and analysis tools, social media and other third-party services used on our website.

 

E-mail and messenger-based and other information services

 

  1. Newsletter

(1) You can subscribe to our newsletter, in which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. Your consent constitutes the legal basis pursuant to Art. 6 (1a) GDPR for all processing of personal data in connection with our newsletter.

 

(2) We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after one month. We also store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

 

(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we will process this data for the purpose of sending you the newsletter. The legal basis is Art. 6 (1a) GDPR.

 

(4) You can revoke your consent of receiving the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter or on our website.

 

Social media and other third-party services

 

  1. Social media

(1) We do currently not use any plug-ins from social media providers on our website, but have only set links to our presence on the following social media platforms: Facebook, LinkedIn, YouTube. The mere presence of these links does not result in the transmission of personal data to the respective provider. Only if you click on the link, which you can recognize by the respective social media icon, and thereby access our page hosted by the respective provider, will the provider become aware of this.

 

(2) Addresses of the relevant social media providers and URL with their data protection notices:

 

a) Facebook: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; https://www.facebook.com/about/privacy; further information on data collection and privacy settings: https://www.facebook.com/help/1075880512458213/, https://www.facebook.com/help/186325668085084 and https://m.facebook.com/help/238318146535333

 

b) LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland; https://www.linkedin.com/legal/privacy-policy

 

c) YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy?hl=de

 

Integration of Friendly Captcha

(1) We use Friendly Captcha on this website. We do so to protect our contact forms from being misused by bots. The legal basis for using this plugin is Article 6(1)(f) of the GDPR.

 

(2) To this end, we integrate Friendly Captcha program code into certain areas of our website. This causes the visitor’s device to establish a connection to Friendly Captcha’s servers in connection with the protected area (e.g., submitting a contact form). Additionally, the browser you are using receives a math problem from Friendly Captcha. The complexity of the computational task depends on various risk factors. The device you are using solves the computational task—which consumes certain system resources—and sends the result to our web server. Our web server contacts the Friendly Captcha server via an interface and receives a response indicating whether the task was solved correctly by the device. In addition, your browser transmits further connection data, environmental data, interaction data, and functional data to Friendly Captcha, in addition to the data specified in § 3(1) of this Privacy Notice. Friendly Captcha evaluates this data to determine the likelihood that the user is human or a bot and sends us the result. Depending on this, we may treat access to our website or individual functions as human or potentially automated.

 

(3) For further information on the purpose and scope of data collection and its processing by Friendly Captcha, please refer to their privacy policy. There you will also find further information regarding your rights in this regard and settings options for protecting your privacy: Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany; https://friendlycaptcha.com/de/privacy/gdpr/

 

Date: June 15, 2026