ISEC7 Data Privacy Policy

We, ISEC7 GmbH, welcome you to our website. In the context of the use of our web offer, you entrust us with your personal data. We appreciate this trust. That's why we treat your data with particular care.

In the following, we inform you about the collection of personal data when using our website. Personal data is all data that is personally available to you (e.g. name, address, e-mail addresses, user behavior). We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

1 Data Protection Officer

Responsible acc. Article 4 (7) of the EU General Data Protection Regulation (DSGVO) is:

ISEC7 GmbH
Schellerdamm 16
21079 Hamburg
Germany

Phone: +49 40 325076 0
Email: info@isec7.com

2 Contact Details

You can reach our data protection officer at datenschutz@isec7.com or at our postal address with the addition "the data protection officer".

3 Your Rights

You have the following rights with respect to the personal data concerning you:

3.1. General rights
You have a right to information, correction, deletion, limitation of processing, opposition to processing and data portability. If processing is based on your consent, you have the right to revoke it for the future.

3.2. Rights in the processing of data after the legitimate interest
You have acc. Article 21 (1) of the GDPR, at any time, for reasons arising out of its particular situation, against the processing of personal data relating to it, pursuant to Article 6 (1) of the GDPR (Data Processing in the Public Interest) or Articles 6 para. (1) If DSGVO (data processing for the protection of a legitimate interest) takes place, an objection is raised, this also applies to a profiling based on this provision. In the event of your opposition, we will no longer process your personal Information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.

3.3. Rights in direct mail
If we process your personal data to operate direct mail, you have acc. Art. 21 para. 2 DSGVO the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling as it is connected to direct mail. In the event of your opposition to processing for the purpose of direct mail, we will no longer process your personal data for these purposes.

3.4. Right to complain to a supervisory authority
You also have the right to complain to us about the processing of your personal data via a competent data protection supervisory authority.

4 Personal Data

In the case of merely informative use of the website, ie if you do not register or otherwise provide us with information (for example via the contact form), we will only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following data that is technically necessary for us to display our website and to ensure its stability and safety:

• IP address
• Date and time of the request
• Time Zone Difference to Greenwich Mean Time (GMT)
• Content of the requirement (concrete page)
• Access Status / HTTP status code
• Website from which the request comes
• browser
• Operating system and its interface
• Language and version of the browser software

We evaluate this data solely for statistical purposes in order to resolve possible technical errors and, if necessary, to identify and ward off attacks and security risks. The data is stored for the stated purposes including the IP address for a period of 30 days and then deleted. If statutory storage requirements exist, processing will be restricted accordingly. A storage of this data together with other personal data of the user does not take place. The legal basis for this data processing is Art. 6 para. 1 lit. f DSGVO.

5 Contact Form & Email

When you contact us by email or through a contact form, the information you provide (your email address, your name and telephone number if applicable) will be stored by us to answer your questions. As far as we query personal data via our contact form, we have clearly marked the mandatory information as a mandatory field. Information that goes beyond these mandatory information is provided on a voluntary basis and with your consent, Art. 6 (1) a DSGVO. This information can serve to concretize your request and to improve the handling of your request. As far as this information about communication channels (for example, your telephone number), you also agree that we may also contact you via this communication channel to answer your request. Of course, you can revoke this consent at any time for the future.

We will delete the personal data related to contact requests after the storage is no longer required. If statutory storage requirements exist, we limit the processing.

6 Newsletter

6.1. General Information
You can subscribe to our newsletter, which will inform you about our current Enterprise Mobility offerings (such as software updates, security announcements, event information, solutions, etc.). The legal basis for sending the newsletter is then your consent in accordance with Art. 6 para. 1 a DSGVO.

To register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an email to the email address specified in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month.
In addition, we store your IP addresses and times of registration and confirmation. The purpose of this procedure is to prove your registration and, if necessary, to inform you about possible misuse of personal data.

The only requirement for sending the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter e-mail or by contacting the above mentioned data protection officer. In this case, your email address will either be deleted or, if you have provided us with the email address in another context, blocked for sending the newsletter.

6.2. Email Shipping Service
The newsletter is sent by ISEC7 GmbH, Schellerdamm 16, 21079 Hamburg, Germany.

The legal basis for the described data processing is our legitimate interest according to Art. 6 (1) sentence 1 f DSGVO in the optimization of our business processes and the promotion of our business purposes.

6.3. Newsletter Tracking
We evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent include so-called web beacons or tracking pixels, which are stored on our website. For the evaluations, we link the mentioned data and the web beacons with your e-mail address and an individual ID. The newsletter received links also contain this ID.

With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click in and conclude your personal interests. We link this data with actions you have taken on our website.

The information will be stored as long as you have subscribed to the newsletter. After logging out, we store the data purely statistically and anonymously. You can object to this tracking at any time by clicking on the separate opt-out link provided in each email.

Such tracking is not possible if you've turned off image viewing by default in your email client. In this case, the newsletter will not be displayed completely and you may not be able to use all the features. If you display the images manually, the above tracking is activated.

7 Portal & Registrations

Customers have the opportunity to register with us and create a customer account. For the registration we collect and store the following data:

• salutation
• first given name
• surname
• email (username)
• password
• address
• company

We use the so-called double-opt-in procedure for registration. Your registration is only completed if you have previously confirmed your registration via a confirmation email provided for this purpose by clicking on the link contained therein. If your confirmation is not received within 96 hours, your registration will be automatically deleted from our database. The specification of the aforementioned data is mandatory, all other information you can volunteer by using our portal.

After registration, you will receive a personal, password-protected access and can view and manage the data you have stored. Registration is voluntary, but may be required to access certain of our services.

If you use our portal, we store your data required for the fulfillment of the contract, sometimes including the details of the payment method. Furthermore, we will store the voluntary data provided by you during the time you choose to use the portal or until you delete your account. All information can be managed and changed in the protected customer area. The legal basis is Article 6 (1) (a), (b) and (f) DSGVO.

8 Applications for Employment

You can apply electronically via e-mail or by post to our company. We will only use your information to process your application and will not pass it on to third parties. Please note that unencrypted emails are not transmitted with access protection.

Your personal data will be deleted immediately after completing the application process, or after a maximum of 6 months, unless you have explicitly given us your consent for a longer storage of your data or it has come to a contract. The legal basis is Art. 6 para. 1 a, b and f DSGVO as well as § 26 BDSG.

9 Cookies & Tracking Tools

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and that provide certain information to the body that sets the cookie. Cookies can not run programs or transmit viruses to your computer. They serve to make the Internet offer more relevant and effective overall.

This website uses the following types of cookies, the scope and operation of which are explained below:

9.1. Transient cookies
Transient cookies are automatically deleted when you close the browser. These include the session cookies. These store a session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

9.2. Persistent cookies
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

9.3. Flash cookies
Flash cookies used are not detected by your browser but by your Flash plug-in. Furthermore, we use HTML5 storage objects, which are stored on your device. These objects store the required data regardless of your browser and do not have an automatic expiration date. If you do not want to process the Flash cookies, you must install a corresponding add-on, like Adobe Flash Cookie Killer for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you manually delete your cookies, browser history and web page settings on a regular basis.

9.4. Prevention of cookies
You can configure your browser setting according to your preference or decline the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all functions of this website.

9.5. Legal basis and storage duration
The legal basis for possible processing of personal data by means of cookies and their storage duration vary and are presented in the following sections

10 Google Analytics V4

If you have given your consent, Google Analytics 4, a web analysis service of Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Nature and purpose of processing
Google Analytics uses cookies that enable your use of our website to be analyzed. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your visit to the website, your user behavior is recorded in the form of "events". Events can be

Page views
First visit to the website
Start of the session
Visited web pages
Your "click path", interaction with the website
Scrolls (whenever a user scrolls to the end of the page (90%))
Clicks on external links
Internal search queries
Interaction with videos
file downloads
Viewed / clicked ads
language setting

• Your approximate location (region)
• Date and time of your visit
• Your IP address (in abbreviated form)
• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
  your internet provider
• the referrer URL (via which website/advertising medium you came to this website)

11 Data Transmission

A transfer of your data to third parties - except in the above cases - does not take place, unless we are legally obliged to do so or the data transfer is necessary for the execution of the contractual relationship or you have previously expressly consented to the disclosure of your data.

External service providers will only receive your data if this is necessary to carry out a contract with you as our customer. In these cases, however, the amount of data transmitted is limited to the minimum required. Insofar as our external service providers come in contact with your personal data, we provide in the context of order processing acc. Art. 28 DSGVO ensures that they comply with the provisions of data protection laws in the same way. Please also note the respective privacy policy of the provider. The respective service Provider is responsible for the content of third-party services, whereby we check the reasonableness of the services for compliance with legal requirements.

We attach great importance to processing your data within the EU / EEA. However, it may happen that we use service providers that process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection is provided to the recipient prior to the transmission of your personal data. By this, through EU standard contracts or an adequacy decision, such as the EU Privacy Shield, a level of data protection is achieved that is comparable to standards within the EU.

12 Data Security

We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.