Privacy Policy
Data protection
I. Responsible
Responsible in terms of the General Data Protection Regulation (GDPR) and other data protection provisions
Kuecherer Security Consulting
Christian Kuecherer
Heinrich-Fuchs-Str. 93
D-69126 Heidelberg
Tel .: +49 6221 43 18 301
Mail: info[at]kuecherer-security.de
Web: www.kuecherer-security.de
II. Data Protection Officer
Due to our size we are not obliged to appoint a data protection officer.
III. General information about data processing
1. Scope of processing of personal data
In principle, we collect and use personal data of our customers only insofar as this is necessary for the performance of our contracts. After fulfillment of the contractual obligations, we process data only after consent. An exception applies to cases in which prior consent is not possible for reasons of fact or where the processing of the data is permitted by law.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a GDPR as legal basis.
The processing of personal data necessary for the performance of a contract to which the data subject is a party is used
Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual measures.
Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1
lit. c GDPR as legal basis.
If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail, the first interest does not apply, then Art. 6 para. 1 lit. f GDPR as legal basis for processing.
3. Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is omitted. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
IV. Provision of the website and creation of logfiles
1. Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data is collected here:
(1) Information about the browser type and version used
(2) The operating system of the user
(3) The Internet service provider of the user
(4) The IP address of the user (shortened)
(5) Date and time of access
(6) Websites from which the user's system arrives on our internet site
(7) Web sites accessed by the user's system through our website
This data is automatically transmitted to the web server by your browser. The processing is done anonymously in all cases mentioned above, a combination of this data with other data sources or an assignment of the data to your person is excluded. The stored data is used exclusively for statistical and security-relevant evaluations (eg: number of page views, detection of attacks on the web server).
2. Legal basis for data processing
The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR.
3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.
For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.
5. Opposition and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.
V. Use of cookies
Our website does not use cookies
VI. E-mail contact
1. Description and scope of data processing
You can contact us via the provided e-mail address.
In this case, the user's personal data transmitted by e-mail will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
2. Legal basis for data processing
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
3. Purpose of the data processing
In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal e-mailed, this is the case when the conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been finally clarified and legal storage regulations do not require further storage.
5. Opposition and removal possibility
The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.
For a revocation of your consent to the processing and storage of your personal data, a message - no matter on which communication channel - is sufficient for us.
All personal data stored in the course of contacting will be deleted in this case.
VII. Rights of the data subject
You have the right:
• in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right of rectification, deletion, limitation of processing or opposition, the existence of a The right to complain, the source of their data, if not collected from us, and the existence of automated decision-making, including profiling and, where appropriate, meaningful information about their details;
• in accordance with Art. 16 GDPR, immediately demand the correction of incorrect or complete personal data stored with us;
• in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of Legal claims is required;
• to demand the restriction of the processing of your personal data according to Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you assert this, Exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• to receive, in accordance with Art. 20 GDPR, your personal data provided to us in a structured, standard and machine-readable format or to request the transfer to another person responsible (data transferability);
• according to Art. 7 para. 3 GDPR, to revoke your once given consent to us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future;
• if your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, as far as there are grounds for doing so, arising from your particular situation.
• to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.
If you would like to exercise your right of revocation or objection, a message to us is sufficient. Our contact details can be found above at the beginning of this Privacy Policy.
The status of this privacy policy is May 2018
