Privacy Policy

Below you will find information about what types of personal data we process, to what extent, and for what purposes.

Personal data is information that can identify you as a data subject, such as your name, address, email address, or user behavior.

Data subjects are those with whom we have a relationship in the course of providing our services, visitors to our website, and users of our entire online offering.

Name and address of the data controller:
Secuvise GmbH
Nordendstr. 3
80799 Munich, Germany
Email: info@secuvise.com
Phone: +49 (0) 89-21556467

The following types of data are collected and stored by us:

  • Master data (e.g., names and addresses)
  • Contact data (e.g., phone numbers and email addresses)
  • Usage data (e.g., access times, pages visited)
  • Metadata (e.g., browser type, IP address, operating system)
  • Content data (e.g., your text entries in contact forms, etc.)

Categories of affected persons:

  • Customers
  • Contractual partners
  • Prospective customers
  • Users (website/online offerings)

Data is collected for the following purposes:

  • Information
  • Communication
  • Customer service
  • Services for contract fulfillment
  • Direct marketing / Marketing
  • (Technical) provision of online offerings
  • Security measures to protect the (online) offering

The processing of your personal data is based exclusively on the following legal grounds:

  • Consent per Art. 6(1)(a) GDPR:
    "The data subject has given consent to the processing of their personal data for one or more specific purposes."
  • Contract performance and pre-contractual inquiries per Art. 6(1)(b) GDPR:
    "Processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract."
  • Legal obligations per Art. 6(1)(c) GDPR:
    "Processing is necessary for compliance with a legal obligation to which the controller is subject."
  • Legitimate interest per Art. 6(1)(f) GDPR:
    "Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child."

Transfer to Third Parties and Third Countries

Your data generally remains within our company. Transfer or disclosure of your personal data to third parties only occurs:

  • Based on a legal permission,
  • With your consent,
  • When we are legally obligated to do so, or
  • Based on a legitimate interest per Art. 6(f) GDPR.

Our data processors are committed to maintaining necessary technical and organizational measures through data processing agreements per Art. 28 GDPR to ensure the protection of data subjects' rights.

Transfer of your personal data to third countries (outside the European Union (EU) / European Economic Area) only occurs to countries:

  • For which an adequacy decision by the EU Commission exists, or
  • Where appropriate safeguards per Art. 46 GDPR exist,
  • That provide an adequate level of protection per Art. 45 ff. GDPR,
  • That are subject to officially recognized contractual obligations such as the "Standard Contractual Clauses," or
  • Where one of the exceptions under Art. 49 GDPR applies.

Data Retention Period

Your personal data will be routinely deleted after the respective statutory retention periods expire (e.g., commercial and tax retention periods), or restricted/blocked in processing if such data is no longer necessary for contract fulfillment and/or we have no legitimate interest in continued storage.

Website Usage and Log Files

When you visit our website, the following information is automatically transmitted by your browser to our provider's server:

  • IP address of your device
  • Date and time of access
  • Name and URL of retrieved files
  • Website from which access was made or from which you were directed to our site (referrer URL)
  • Browser used and, if applicable, your device's operating system
  • Name of access provider

This data is not merged with other data sources. IP addresses are anonymized.

This data is collected to ensure proper website functionality, for website optimization, and to ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing per Art. 6(1)(f) GDPR.

This data is automatically deleted after a maximum of 7 days. In case of website misuse, relevant data whose continued storage is necessary for evidentiary purposes is retained until the matter is resolved.

Hosting by IONOS

We use the hosting service of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, to provide the website based on processing on our behalf. All data collected on our website is processed on IONOS servers.

For more information about IONOS's data protection, visit: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

Further processing on servers other than those of IONOS only occurs within the scope disclosed below.

Contact

Use of our website is generally possible without providing personal data.

If you contact us through other means, such as a contact form, comment, email, or phone, the data collected will be treated confidentially and not shared with third parties without consent.

The respective purpose of data processing derives from:

  • Voluntary provision by the data subject per Art. 6(1)(a) GDPR
  • Contract fulfillment or pre-contractual measures per Art. 6(1)(b) GDPR
  • Legitimate interest in effectively processing inquiries directed to the company per Art. 6(1)(f) GDPR

Data is deleted once it is no longer needed for its collection purpose.

For personal data transmitted via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when circumstances indicate that the matter in question has been conclusively resolved.

Users may object to or revoke the processing of personal data at any time. In such cases, the conversation cannot be continued. All personal data stored during the contact will be deleted in this case.

Contractual and Business Partners

Data of our contractual and business partners is primarily processed by us to fulfill our contractual obligations and for communication. Additionally, processing occurs for proper and economical business management and to protect our rights. Processing therefore occurs:

  • For contract fulfillment and pre-contractual inquiries per Art. 6(1)(b) GDPR,
  • Due to legal obligation per Art. 6(1)(c) GDPR, or
  • Due to legitimate interests per Art. 6(1)(f) GDPR.
Data is only shared with third parties when necessary to fulfill legal obligations or when indicated in the contract or this privacy policy.

Your Rights

As a data subject, you have the ability to exercise your rights under the General Data Protection Regulation with respect to us. These include the following rights:

  • Right of access per Article 15 GDPR:
    You may request information about your data stored with us. In particular, you can request information about processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details. A simple request via email or post is sufficient. You will receive the requested information within one month of receipt.
  • Right to rectification per Article 16 GDPR:
    If we have recorded/stored incorrect data about you, you may request correction or completion of this data through a simple request. You will receive confirmation of the change to your data within one month of receipt.
  • Right to erasure per Article 17 GDPR:
    You may request the deletion of your personal data stored with us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims. This requires that the purposes for processing have ceased, that you have objected to processing per Article 21 GDPR, that you have revoked your consent per Article 7 GDPR, or that processing is unlawful.
  • Right to restriction of processing per Article 18 GDPR:
    You have the right to request restriction of processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you refuse deletion, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing per Art. 21 GDPR. You may also notify us of this informally.
  • Right to data portability per Article 20 GDPR:
    You may receive the data you have provided to us in a structured, commonly used, and machine-readable format, or request transfer to another controller.
  • Right to withdraw consent per Art. 7(3) GDPR:
    You have the right to withdraw consent given to us at any time. This means we may not continue data processing based on this consent in the future.
  • Right to object per Article 21 GDPR:
    If your personal data is processed based on legitimate interests per Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data if there are grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without specification of a particular situation. To exercise your right of withdrawal or objection, an email to info@secuvise.com is sufficient.
  • Right to lodge a complaint per Article 77 GDPR:
    You have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority of your habitual residence, place of work, or our registered office.

Data Security

During website visits, we use the widely used SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. Typically, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether an individual page of our website is transmitted in encrypted form is indicated by the closed key or lock icon in the lower status bar of your browser.

We naturally use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.