Privacy Policy

1. Controller

Tobias Dunken

BRIEFANTEC IT SERVICE

Am Kornberg 54

57076 Siegen

Germany

Email: kontakt-aufnehmen[at]nmc-it-service.de

2. Principles of data processing

Personal data is processed only where this is necessary to provide the website technically, operate it securely or comply with legal obligations.

This website does not use analytics or marketing services, advertising trackers or social-media tracking technologies. No usage profiles are created for advertising or analytics purposes.

3. Hosting

The website is operated on server infrastructure provided by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Server administration is carried out in a KeyHelp-based hosting environment.

Technically required data such as IP addresses and server log data may be processed on this infrastructure. Where the hosting provider processes personal data on behalf of the controller, this is based on a data processing agreement under Article 28 GDPR.

4. Server log files

When the website is accessed, the web server automatically processes technical connection data. This may include the IP address, date and time, requested resource, HTTP method, status code, transferred data volume, referrer URL, browser identifier and operating-system information.

Processing is based on Article 6(1)(f) GDPR. The legitimate interest is the secure, stable and technically correct operation of the website and the detection and analysis of errors or abusive access.

Server log files are regularly deleted or overwritten as part of the configured log rotation. In the currently intended hosting environment, log data may be retained for up to approximately 35 days. Longer storage occurs only where required to investigate a specific security incident or to comply with legal obligations.

5. Cookies and device access

This website does not use analytics, marketing or tracking cookies. In its current form, the website does not require consent for non-essential cookies.

If features requiring consent under applicable law are added in the future, the technical implementation and this privacy policy will be updated accordingly.

6. Analytics and tracking

No web analytics, reach measurement, marketing or tracking services are used. In particular, Google Analytics or a comparable analytics service is not integrated.

7. Fonts and external content

The website does not load fonts from external providers. No external maps, videos, social-media plugins or comparable third-party content is embedded that would automatically transfer data to third parties when the page is opened.

8. Contact via the email address stated in the legal notice

The website does not provide a contact form or a general contact page. An email address is stated in the legal notice because of statutory information requirements.

If a message is sent to this address, the data provided is processed in order to handle the message. Contract-related enquiries are processed on the basis of Article 6(1)(b) GDPR; other messages are processed on the basis of Article 6(1)(f) GDPR. The legitimate interest is the proper handling of incoming messages.

• Sender email address
• Name or other voluntarily provided sender information
• Message content and attachments
• Time and technical email metadata

9. Recipients

Personal data may be processed by Hetzner Online GmbH as part of the technically necessary hosting. Further disclosure takes place only where required by law, necessary for contractual performance or supported by another legal basis under data protection law.

10. Transfers to third countries

No planned transfer of personal data to recipients outside the European Union or the European Economic Area is intended for the basic functions described on this website.

11. Retention

Personal data is stored only for as long as required for the respective purpose. Statutory retention and evidence obligations remain unaffected. The retention period described under “Server log files” applies to server logs.

12. Legal bases

Depending on the processing activity, processing is based in particular on Article 6(1)(b) GDPR for contractual or pre-contractual measures, Article 6(1)(c) GDPR for compliance with legal obligations, or Article 6(1)(f) GDPR for legitimate interests. If consent becomes necessary in the future, processing will be based on Article 6(1)(a) GDPR.

13. Rights of data subjects

Subject to the statutory requirements, data subjects have rights including access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection (Article 21 GDPR). Any consent granted can be withdrawn at any time with effect for the future.

14. Right to lodge a complaint

Under Article 77 GDPR, data subjects may lodge a complaint with a data protection supervisory authority. For the controller’s place of establishment, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, is one competent authority.

15. TLS encryption

The website is provided via HTTPS. TLS encryption protects data in transit between the browser and web server against simple interception during transmission.

16. Automated decisions

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place on this website.

17. Changes to this privacy policy

Technical, legal or organizational changes may require this privacy policy to be updated. The current version is published on this website.