Last Updated: 11/2024

This Privacy Policy details how Intraunit UG (limited liability) processes and protects your personal data. We place high importance on transparency and strictly adhere to legal regulations, particularly the General Data Protection Regulation (GDPR).

1. Data Protection at a Glance

1.1 General Information

In this section, we provide an overview of how your personal data is processed when you visit our website. Personal data includes any information that can personally identify you.

1.2 Data Collection on This Website

Who is responsible for data collection on this website?

The website operator is responsible for data processing on this website. Contact information can be found in the "Responsible Entity Notice" section of this Privacy Policy.

How do we collect your data?

Some data is collected when you actively provide it to us, such as by filling out a contact form. Other data is collected automatically by our IT systems when you visit the website, including technical information like your browser, operating system, and the time of your visit. This data is collected either automatically or based on your consent.

What do we use your data for?

We primarily use your data to ensure the website’s error-free provision. Additionally, we use it to analyze your user behavior to optimize our content and improve your user experience.

What rights do you have regarding your data?

You have various rights regarding your personal data:

• Right to Access: You can request information about the origin, recipient, and purpose of your stored data at any time.
• Right to Rectification: You can request the correction of incorrect or incomplete data.
• Right to Erasure: You can request the deletion of your data unless legal obligations require retention.
• Right to Withdraw Consent: You can withdraw any consent you have given for data processing at any time.
• Right to Restrict Processing: You can request the restriction of data processing in certain cases.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.

For further information on your rights or any data protection questions, please feel free to contact us.

1.3 Analytics and Third-Party Tools

Your browsing behavior may be analyzed for analytical purposes when you visit our website. This mainly occurs through analytics programs that help us better understand and improve the use of our website. Further details on these analytics programs are provided in the detailed Privacy Policy below.

1.4 Right to Object to Data Collection in Special Cases and to Direct Marketing (Article 21 GDPR)

IF DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) OF THE GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. The specific legal basis for processing can be found in this Privacy Policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing is for the assertion, exercise, or defense of legal claims (objection according to Article 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection according to Article 21(2) GDPR).

2. Hosting

2.1 General Information on Hosting

Our website content is hosted by an external service provider. This enables us to provide a reliable and professional website experience. Personal data collected on this website is stored on the host's servers, including IP addresses, contact requests, metadata, communication data, contract data, contact data, names, website accesses, and other data generated through the website.

2.2 Purpose of External Hosting

Our website is externally hosted to fulfill contracts with our prospective and existing customers according to Article 6(1)(b) of the GDPR. Additionally, it serves our legitimate interest in secure, fast, and efficient online service provision under Article 6(1)(f) GDPR.

If consent is required for processing, it is based on Article 6(1)(a) GDPR and Section 25(1) of the TTDSG, particularly for cookie storage or access to device-specific information (e.g., device fingerprinting). You can withdraw this consent at any time.

2.3 Host's Handling of Your Data

Our host will only process your data to the extent necessary to fulfill its contractual obligations and will strictly follow our instructions regarding this data. Unauthorized processing is excluded.

2.4 Hosting Service Provider

Our hosting provider is:

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399 USA

2.5 Data Processing Agreement

To ensure that your personal data is processed in compliance with applicable data protection regulations, we have signed a Data Processing Agreement (DPA) with the host. This agreement ensures that the host only processes your data according to our instructions and in accordance with the GDPR.

The DPA requires the host to take all necessary technical and organizational measures to ensure the security of your data and to prevent unauthorized access and data disclosure.

3. Data Collection and Usage

3.1 Types of Data Collected

We collect different types of personal data, depending on the type of interaction:

• Basic Data: Name, email address, phone number.
• Technical Data: IP address, browser type, access times, visited pages.
• Voluntary Information: Information you provide in contact forms.

3.2 Purposes of Use

The collected data is used for the following purposes:

• Service Provision and Improvement: To analyze and optimize our website and services.
• Communication: To respond to inquiries and provide information.
• Security Measures: To ensure the security of our platform.

3.3 Data Storage and Protection

We store personal data only as long as necessary to fulfill the purposes mentioned in this Privacy Policy or as required by law.

• Storage Duration: Data is stored according to legal retention periods.
• Security Measures: Encryption and access restrictions are used to protect the data.

4. Legal Bases for Data Processing

The processing of personal data is based on various legal grounds:

• Consent (Article 6(1)(a) GDPR): If you provide us with explicit consent.
• Contract Fulfillment (Article 6(1)(b) GDPR): Necessary to fulfill contracts or pre-contractual actions.
• Legal Obligation (Article 6(1)(c) GDPR): If there is a legal obligation to process data.
• Legitimate Interest (Article 6(1)(f) GDPR): For purposes that preserve our legitimate interest without infringing your rights.

6. Security Measures

We prioritize the security of your data and have implemented comprehensive measures to protect it. This section outlines the various security aspects we apply:

6.1 Encryption Techniques

We use SSL and TLS encryption to ensure data security during transmission. For storage, we apply strong encryption standards like AES-256 to protect sensitive information.

6.2 Access Controls

Our data centers are secured by extensive physical and digital access controls, including biometric access systems, access restrictions, and video surveillance.

6.3 Network Security

We implement firewalls and intrusion detection and prevention systems (IDS/IPS) to protect our network from unauthorized access and cyber-attacks.

6.4 Multi-Factor Authentication (MFA)

We use MFA to access sensitive systems, adding an extra layer of security to prevent unauthorized access.

6.5 Security Audits and Reviews

We conduct regular internal and external security reviews, including penetration tests and vulnerability assessments, to identify and address potential risks early.

6.6 Employee Training

Our employees are continuously trained in IT security and data protection best practices, including social engineering, phishing prevention, and secure handling of sensitive data.

6.7 Backup Strategies

Regular, encrypted backups and data redundancy ensure quick recovery in case of data loss. These backups are regularly tested for integrity.

6.8 Data Protection Policies and Compliance

We strictly adhere to legal requirements like the GDPR and apply best practices, such as Data Protection Impact Assessments (DPIA). Our policies are continuously reviewed and adjusted to current standards.

6.9 Monitoring and Logging

Continuous monitoring and detailed logging help us detect and respond to security incidents early. Suspicious activities are analyzed to minimize risks.

6.10 Use of Modern Technologies

We invest in modern technologies like AI for threat detection and automated security solutions to proactively identify and close security gaps.

Our goal is to protect your data by continually improving our security measures to meet the highest standards.

7. Analytics and Marketing Tools

Our website uses tools to analyze browsing behavior to improve the user experience and provide personalized content. These include:

• Google Analytics: Collects anonymized usage data to analyze visitor flows and optimize content. For more information on data processing by Google, click here.
• Hotjar: Analyzes user interactions with the website to improve the user interface and identify potential issues.
• Facebook Pixel: Measures the effectiveness of our advertising on Facebook, tracks user interactions, and enables personalized advertising.
• Consent Management Platforms: Ensures that only tools and tracking methods with explicit consent are used.

You can object to the use of these analytics tools at any time by adjusting the cookie preferences in your browser or device settings.

8. Your Rights as a User

As a user, you have extensive rights regarding your personal data, including:

• Right to Access: You can request an overview of your personal data stored with us and receive detailed information on data processing.
• Right to Rectification: You have the right to correct incorrect or incomplete data to ensure data accuracy.
• Right to Erasure: You can request deletion of your data if there are no legal obligations for further storage. This also applies to removal from active databases and backup systems.
• Right to Object: You can object to the processing of your data, particularly for marketing purposes or due to legitimate interests, at any time.
• Right to Restrict Processing: You can request restriction of data processing, for example, if the data’s accuracy is contested or processing appears unlawful.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request transmission to another controller.
• Right to Withdraw Consent: You can withdraw consent for data processing at any time without affecting the legality of the processing up to the withdrawal.
• Right to Lodge a Complaint: If you believe your data is being processed unlawfully, you have the right to lodge a complaint with a competent supervisory authority.

To exercise these rights, you may contact us anytime through the contact details provided in this Privacy Policy.

9. Changes to This Privacy Policy

This Privacy Policy is regularly reviewed and updated to meet the latest legal requirements and reflect current changes in our services. The current version is always available on our website. We recommend reading the Privacy Policy regularly to stay informed about our data protection practices.