Source: https://www.web-security.com/privacy-policy/
Timestamp: 2019-04-23 02:48:23+00:00

Document:
Legal basis for our services and basic information on the use and disclosure of data.
A transfer of data to third parties takes place exclusively in accordance with legal requirements. It only takes place if this is necessary for the purpose of the contract (in accordance with Article 6 (1) (b) GDPR) or because of legitimate interests in our economic and effective business operations (pursuant to Article 6 (1) lit. GDPR). In order to comply with the legal requirements and for the protection of personal data, we also take appropriate legal, technical and organizational measures when using subcontractors. If third-party services, tools or other means are used and the named seat of this provider is located in a third country, data transfer to that country is also likely. The GDPR is an EU regulation and applies to all member states. Transmission to countries outside the EU or the European Economic Area is only permitted with legal permission, consent of the users, or at an adequate level of data protection in the respective third country.
In order to protect the data processed by us from accidental or intentional manipulation, destruction, loss or access by unauthorized persons, and to comply with the provisions of data protection laws, we make technical, organizational and contractual security arrangements according to the state of the art. The encrypted transmission of data between our server and your browser is one of the security measures used.
In order to fulfill our contractual and service obligations and to protect against misuse or unauthorized use and to protect our legitimate interests, we store the IP address and time when registering, re-registering and using online services. Basically, This data is not passed on to third parties in on a personalised level, exceptions are the pursuit of our claims or a legal obligation under Art. 6 para. 1 lit. c GDPR. For advertising purposes, we create a user profile based on the usage data (eg visits to web pages with our offer or specific product interests) in order to be able to show users interesting product hints and offers.
To process user requests (via email or contact form), the information of the user in accordance with. Art. 6 para. 1 lit. b) GDPR processed.
Any access to our servers is subject to our legitimate interest within the meaning of Art. 6 para. 1 lit. f. GDPR, corresponding data (so-called server log files), including date and time, amount of data, name of the accessed website, success report on the call, the operating system including browser type and version, the previously visited websites, the IP address and the provider. For the purpose of fraud or misuse the logfile information is stored for security reasons for a maximum of seven days and then deleted. If certain data is necessary for evidence purposes, the deletion will be postponed until the final clarification of the incident.
Our offer also includes offers from third-party providers. This is also based on our legitimate interest within the meaning of Art. 6 para. 1 lit. f. GDPR. Content and its presentation (such as videos or fonts) require that third parties recognize the users IP address. For the transmission of the contents to the browser this is unavoidable. When selecting third-party vendors, we take care to only use those vendors who use the IP address only for delivery of the content. In addition, third parties may use web beacons or pixel tags to collect data for statistics and marketing. As a result, z. B. Information about the visitors of the website will be evaluated. All data may be stored in cookies on the device used by the user, pseudonymised. These data include technical information about the operating system and browser, as well as data on the use of the offer. This data can also be linked to data from other sources. Below you will find an overview of some of the third-party providers we include, including links to the corresponding data protection statements. These also contain further information on possibilities of objection, as well as opt-out options, if these are possible.
For the integration and administration of the various analysis and marketing services we can use the Google Tag Manager.
External code of the Cookie Consent Bar, provided by the third-party Silktide Ltd., https://cookieconsent.insites.com.
Upon request, every user can obtain information about their personal data stored by us, if technically possible. In addition, users have the right to have incorrect data rectified and to limit the processing and deletion of their personal data. In addition, the right to data portability can be invoked. A complaint to the competent supervisory authority is possible at any time. Any consent given by the user can always be revoked at any time, only with future effect.
Data that is not subject to a statutory retention period will be deleted as soon as it is no longer necessary for your purpose. If the deletion is not possible due to its purpose or other provisions, its processing will be restricted. Blocking the data thus prevents processing for other purposes. The storage takes place in accordance with § 257 exp. 1 HGB (for trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) for 6 years, as well as § 147 Abs. 1 AO (for books, records, management reports, accounting documents, trading and business letters, documents relevant to taxation, etc.) for 10 years.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 257
 § 147