Privacy Policy

We take the protection of your personal data very seriously and naturally comply with the provisions of the GDPR. We treat your personal data confidentially and in accordance with the GDPR, statutory data protection regulations and this privacy policy. We voluntarily refrain from profiling and browser fingerprinting and expressly allow you to use this website anonymously via TOR or VPN.

It is generally possible to use our website without providing personal data. If personal data (e.g. name, address or e-mail addresses) is collected on our website, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your consent.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Responsible Party

Responsible for the processing of personal data on this website is

NESEC Gesellschaft für angewandte Netzwerksicherheit mbH
Fürholzener Straße 5a
85386 Eching
Phone: 089-45217100
Fax: 089-45217109
Email: welcome[at]nesec.de

Data Protection Officer

According to Art. 37 GDPR and § 38 BDSG (new), we are not obliged to appoint a data protection officer. To exercise your rights and for all other data protection issues, please contact Mr. Christian H. Gresser, E-Mail: datenschutz[at]nesec.de or by telephone or post at the address given in the legal notice.

Cookies

Some of our Internet pages use so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not damage your computer and do not contain viruses. We only use necessary session and analysis cookies on this website. The use of cookies is based on Art. 6 para. 1 sentence 1 lit. f GDPR ("legitimate interest") to make our website more user-friendly, effective and secure.

Most of the cookies we use are so-called "session cookies". These cookies are essential for the operation of the website, as otherwise the functionality of the website may be limited or parts of the website may not work without them. They are automatically deleted at the end of your visit.

Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit. They are used to analyze user behavior on the website in order to obtain information about visitor numbers and to improve the website. We only collect analysis data in anonymized form. The individual data records are not assigned to a specific visitor to the website.

You can object to the storage of cookies by setting your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name or IP address of the accessing computer
  • Time of the server request

This data is collected in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR ("legitimate interest") exclusively to protect against attacks and to identify attackers. Server log files older than 30 days are automatically deleted. The log files cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

We recommend that you use software to disguise your IP address, e.g. TOR oder AN.ON-Next. Of course, it is also possible to use our website with this software.

We do not use browser fingerprinting.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. This data is stored in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR ("consent"). We will not pass on your data without your consent and will not use it for advertising purposes.

Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter ("double opt-in procedure"). No further data is collected. This data is stored in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR ("consent"). We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Legal Basis for Data Processing

The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR on the basis of consent given to us for processing ("consent"), Art. 6 para. 1 lit. b GDPR on the basis of a contractual relationship between you and us ("performance of contract"), Art. 6 para. 1 lit. c GDPR on the basis of a legal obligation incumbent on us ("obligation") and Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests ("legitimate interest"), which do not affect your fundamental rights, in conjunction with Section 24 BDSG new.

 

Your Rights

It is important for us to clarify that we collect, process and store personal data that we collect from you exclusively within the framework of the General Data Protection Regulation (GDPR) and the associated provisions of the Federal Data Protection Act (BDSG new). You have extensive rights with regard to the data we collect, which we would like to inform you about.

Right to be Informed

In accordance with Art. 15 GDPR, you have the right to information about the personal data stored about you at any time. In particular, this right includes information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and meaningful information about the logic involved and the scope and intended effects of such processing.

Right to Rectification

If the information concerning you is not (or is no longer) accurate, you have the right under Art. 16 GDPR to request the immediate rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data.

Right to Erasure

In accordance with Art. 17 GDPR, you have the right to demand the immediate deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

Right to Restrict Processing

In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data. This applies if the accuracy of the personal data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data for the purpose of processing, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

Right to Object

If your personal data is processed by us on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

Further Rights

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to request the transfer to another controller without hindrance. In exercising your right to data portability pursuant to Art. 20 (1) GDPR, you also have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

In accordance with Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future.

To assert your rights, please use the contact details above.

Automated Decisions and Profiling

As a responsible company, we do not use automated decision-making or profiling.

Social Media Plugins

We do not use social media plugins such as Facebook, Twitter, Instagram, Xing or others.

Supervisory Authority

You have the right to lodge a complaint with the data protection supervisory authority responsible for us or for you if you believe that your personal data is being processed unlawfully or that your data has been misused.

The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Internet: https://www.lda.bayern.de/de/index.html.