Privacy Policy

Privacy Policy

The operator of this website and the party responsible for the collection, processing and use of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG-2018) is

Ralph Geraets
Christinastraße 11
50733 Cologne, Germany

Phone: +49 (0)221 422 903 29

Website: https://www.con-sept.com

Please note that the security notice under point 6 was taken from the website of the German Federal Office for Information Security (BSI) and reflects the current state of knowledge. The notice under point 7 reflects the legal situation currently (still) in force in North Rhine-Westphalia.

General information

We use your data in compliance with applicable data protection law. This privacy policy informs you which personal data we collect and store from you. It also provides information on how your data is used and what rights you have regarding the use of your data.

Collection and storage of personal data, and the nature and purpose of its use

You have several ways of getting in touch with us via the internet.

a) Visiting our website

Each time you visit our website, your browser automatically sends information to our website’s server, which is temporarily stored in a so-called log file.

The following data is collected without any action on your part and is stored until it is automatically deleted:

  • the IP address of the requesting computer
  • the date and time of access
  • the name and URL of the file retrieved
  • the website from which access was made (referrer URL)
  • the operating system of your computer and the browser you use
  • the name of your internet access provider.

We process the data listed above for the following purposes:

  • ensuring a smooth connection to the website
  • ensuring convenient use of our website
  • evaluating system security and stability
  • other administrative purposes.

The legal basis for this data processing is Art. 6(1)(f) GDPR, under which processing is lawful if

“… processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”

Our legitimate interest in collecting this data arises from the purposes listed above. Under no circumstances do we use the collected data to draw conclusions about your identity as a person.

In addition, we use cookies on our website (see below for further details).

 b) Using our email contact form

If you have any questions, we offer you the option of contacting us via a form provided on this website.

A valid email address is required so that we know who the request is from and so that we can answer it. Any further information may be provided voluntarily.

Data processing for the purpose of contacting us is carried out on the basis of your voluntarily given consent (Art. 6(1)(a) GDPR).

The personal data we collect for the use of the contact form is automatically deleted once your request has been dealt with.

Disclosure of data

Your personal data is only transferred to third parties if

  • you have given your explicit consent to do so (Art. 6(1)(a) GDPR)
  • the disclosure is legally permitted and is necessary for the performance of a contractual relationship with you (Art. 6(1)(b) GDPR)
  • there is a legal obligation to disclose the data (Art. 6(1)(c) GDPR)
  • the disclosure is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding, legitimate interest in not having your data disclosed (Art. 6(1)(f) GDPR).

Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (smartphone, tablet, laptop, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malicious software.

Information is stored in the cookie that results from the specific device used. This does not mean, however, that we thereby gain direct knowledge of your identity.

The use of cookies primarily serves to make using our website more pleasant for you. For example, we use so-called “session cookies” to recognise that you have already visited individual pages of our website

before. These cookies are automatically deleted when you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your device for a set period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us before, and which entries and settings you made. You then do not need to make these again.

We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offering for you. These cookies allow us to automatically recognise, when you visit our site again, that you have already visited us and which information was of particular interest to you. The relevant cookies are automatically deleted after a defined period of time.

The data processed via cookies is necessary for the purposes described in order to safeguard our legitimate interests and those of third parties (Art. 6(1)(f) GDPR).

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or so that a notice always appears before a new cookie is created.

Disabling cookies completely may mean that you are not able to use all the features of our website.

We do not otherwise use any web analytics service.

SSL encryption

To protect the security of your data during transmission, we use encryption methods that reflect the current state of the art (e.g. SSL) via HTTPS.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter: Google). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymisation on this website, however, your IP address is first shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

The purposes of this data processing are to evaluate the use of the website and to compile reports on website activity. Further, related services are then to be provided on the basis of the use of the website and the internet. This processing is based on the legitimate interest of the website operator.

You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the data generated by the cookie relating to your use of the website (including your IP address) from being collected by Google, and prevent Google from processing this data, by downloading and installing the browser plug-in available at the following link: Browser add-on for disabling Google Analytics.

In addition to, or as an alternative to, the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. This will install an opt-out cookie on your device. This will prevent Google Analytics from collecting data for this website and for this browser in future, for as long as the cookie remains installed in your browser.

Social media

We take the current discussion around data protection in social networks very seriously. It is not currently conclusively established in law whether, and to what extent, all networks offer their services in compliance with European data protection regulations.

We therefore expressly point out that services such as Facebook, Twitter, Xing, Google+ and YouTube store the data of their users (e.g. personal information, IP address) in accordance with their own data usage policies and use it for business purposes.

For this reason, we do not collect any data for social media via our website.

Protection of minors

Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians.

We do not request personal data from children or adolescents. We do not knowingly collect such data, nor do we pass it on to third parties.

Your rights as a data subject

You have the right to

  • withdraw any consent you have given to us at any time, pursuant to Art. 7(3) GDPR

Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal. The withdrawal only means that we may no longer continue the data processing based on this consent in future.

  • request information about your personal data processed by us, pursuant to Art. 15 GDPR

In particular, you can request information about

– the purposes of processing

– the categories of personal data being processed or that have been processed

– the recipients or categories of recipients to whom your data is or has been disclosed

– the planned duration of storage

– the existence of a right to rectification, erasure or restriction of processing, or a right to object

– the existence of a right to lodge a complaint with a supervisory authority

– the origin of your data, if it was not collected by us

– the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

  • request the immediate rectification of inaccurate personal data concerning you, or the completion of your personal data stored by us, pursuant to Art. 16 GDPR, insofar as it is incomplete
  • request the erasure of your personal data stored by us, pursuant to Art. 17 GDPR

This does not apply insofar as processing of your data is necessary

– to exercise the right to freedom of expression and information

– to comply with a legal obligation

– for reasons of public interest in the area of public health

– for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes

– to assert, exercise or defend legal claims.

  • request the restriction of the processing of your personal data, pursuant to Art. 18 GDPR

This applies insofar as

– the accuracy of the data is disputed by you

– the processing is unlawful, but you refuse the erasure of the data and request the restriction of its use instead

– we no longer need the data, but you need it to assert, exercise or defend legal claims

– you have objected to the processing pursuant to Art. 21(1) GDPR.

  • receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller, pursuant to Art. 20 GDPR
  • lodge a complaint with a supervisory authority, pursuant to Art. 77 GDPR

As a rule, you can contact the supervisory authority of your usual place of residence or workplace, or the authority responsible for our registered office.

Right to object

If your personal data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right, pursuant to Art. 21 GDPR, to object to the processing on grounds arising from your particular situation, or where the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to state a particular situation.

If you wish to exercise your right to object, please send an email to r.geraets@con-sept.com

Data security

During your visit to the website, we use the widely used SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption.

If your browser does not support 256-bit encryption, we instead use 128-bit v3 technology.

You can tell whether an individual page of our website is transmitted in encrypted form by the closed padlock or key symbol displayed in the lower status bar of your browser.

We otherwise employ suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Links to other websites

We link to the websites of other providers (third parties) not affiliated with us.

Once you click on these links, we no longer have any influence over which data is collected and used by these providers (third parties). More detailed information on data collection and use can be found in the respective provider’s (third party’s) privacy policy.

We accept no responsibility for the collection and processing of data by third parties.

You can recognise third-party websites by the fact that they always open in a separate window of your browser. In contrast, new pages of our own offering always open in a new tab of your browser.

How to reach us with questions

If you have any questions about data protection on our website, we would be happy to hear from you by email at r.geraets@con-sept.com

Regular updates to this privacy notice

The legal framework for data protection applicable to service providers is subject to constant change and adaptation.

These changes and adaptations make it necessary, from time to time, to update our privacy notice.

You can identify the current version by the line “Last updated: …” at the end of this privacy notice.

Last updated: 22 October 2018