Data protection

Thank you for visiting our website. Below we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

1. person responsible

ConSecur GmbH is responsible for the data processing described below in accordance with data protection regulations.

You can send contact enquiries by email to datenschutz@consecur.de.

2. processing of log files

When you visit our website, our web server saves standardised information about your end device and the browser used in a log file. We process this data in order to be able to analyse errors on our server and attempts at misuse. In detail, this data record consists of

- the name of the website accessed,
- the date and time of the request,
- the amount of data transferred,
-the notification of successful retrieval,
- the IP address of the requesting computer,
- the specific address of the page accessed on our website,
- if applicable the page from which you reached us,
- the transmitted browser identifier.

We cannot identify you from this data; the log data is only analysed in anonymised form. Log data is regularly deleted promptly, but at the latest after 7 days. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

3. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. enquiries to the controller). You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser line.

4. hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Our hoster will only process your data to the extent necessary to fulfil its service obligations and follow our instructions with regard to this data.

We use the following hoster:

Cows Online GmbH
Von-Liebig-Str.6
48432 Rheine

5. contact form to book a consultation/price calculator

There is a contact form on our website which can be used to book a consultation or calculate a price. If you contact us via our contact form or by personal message, the data entered in the input mask will be transmitted to us and stored.

The fields marked with * are mandatory fields. In order to transmit this data, you must confirm that you have read the privacy policy. We use this data on the basis of Art. 6 para. 1 lit. f GDPR to answer your enquiry.

In addition, Art. 6 para. 1 lit. b GDPR can also be considered as a legal basis if your enquiry serves to carry out pre-contractual measures. Fields that are not marked with an "*" (telephone number) are purely voluntary information. The processing of data that you enter in the form on a voluntary basis is carried out on the basis of Art. 6 para. 1 lit. a GDPR.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

6. contact by e-mail

If you contact us by email, we will store and process your enquiry, including all resulting personal data (surname, first name, enquiry, etc.) for the purpose of processing your request.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures.

In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.

7. newsletter

Our website offers you the opportunity to subscribe to our newsletter. For this purpose, the following data will be processed for the purpose of advertising delivery within the scope of the consent to be given by you: Title, surname, e-mail address. ConSecur GmbH uses the so-called double opt-in procedure to confirm your enquiry and e-mail address. This involves sending you an e-mail to the e-mail address you have provided asking you to confirm your consent. In connection with the double opt-in procedure, we document the IP address, date and time of sending the web form as well as the IP address, date and time of confirmation of the double opt-in e-mail.

We only process the voluntary information you provide to us for the purpose of sending you the newsletter. Our legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can unsubscribe from our newsletter at any time by sending an informal message to newsletter@consecur.de. Your personal data will be stored until you unsubscribe from the newsletter.

8. use of cookies & tracking tools

We use tracking technologies such as cookies on our website in order to measure and analyse our website and to continuously improve our content. To protect our users and partners, we can also recognise and ward off fraud and security risks.

Cookies are small text files that are used by websites to simplify and speed up the control of your visit to our website or are necessary to enable you to use and access secure areas of the website.

Depending on where a cookie comes from, a distinction can be made between first-party cookies and third-party cookies:

First-party cookies - cookies that are generated and stored locally by the website operator as the controller or by a processor commissioned by the operator. Only the operator has access to these cookies.
Third-party cookies - cookies that are generated, set and retrieved by third-party providers who do not act as processors on behalf of the website operator. Depending on the period of validity, a distinction can also be made between transient and persistent cookies:
Transient cookies - cookies that are automatically deleted when you close the browser. These include session cookies in particular.
Persistent cookies - cookies that remain stored on your end device for a specified period of time after you close the browser; depending on their characteristics and purpose, the user's consent may be required for the use of certain cookies. In this respect, cookies can be differentiated according to whether the user's consent is mandatory for their use:
Cookies that do not require consent - cookies that are absolutely necessary so that the website operator, which has been expressly requested by the subscriber or user, can provide this service ("strictly necessary cookies").
Cookies requiring consent - cookies that are used for all purposes other than those mentioned above.

If your consent is required, we will only use these cookies if you have given your consent in advance. The legal basis for the processing of personal data is regularly Art. 6 para. 1 lit. a GDPR. When you visit our website, we display a so-called "cookie banner" in which you can give your consent to the use of cookies on the website by clicking a button.

We use strictly necessary cookies on the basis of Art. 6 para. 1 lit. f GDPR in the legitimate interest of ensuring the functionality of our website. These cookies cannot be deactivated via the cookie banner on this website. However, you can generally manage and deactivate these cookies in your browser at any time.

You can object to data processing at any time with effect for the future by preventing the storage of cookies through the settings in your browser or by clicking on the following link and changing your currently set preferences in our Cookie Consent Manager:

Manage my cookie preferences

8.1 etracker

We use a web analysis service from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany ("etracker") on our website.

The etracker service provides us with statistical analyses to improve the quality of our website. The data is collected and analysed by etracker to analyse the reach and optimise our website and its content. This data is anonymised and is processed reliably in a system approved by the supervisory authorities. It is not possible for us or etracker to identify you personally.

The data processing takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

8.2 YouTube videos

We embed "YouTube videos" on our website. YouTube is a subsidiary of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Accessing our pages with embedded videos results in the provider's content being loaded. As a result, YouTube receives the information that you have accessed our site and the usage data technically required in this context.

We use YouTube in connection with the "extended data protection mode" function. According to YouTube, the "extended data protection mode" function means that no cookies are set and data is only transmitted to the YouTube server when you actually start a video.

The data processing takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. By clicking on a video, you give us your consent to reload the content from Google. The transfer to a third country takes place on the basis of Art. 49 para. 1 lit. a GDPR. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

8.3 DoubleClick

We use "DoubleClick" on our website, a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

DoubleClick uses cookies to present relevant adverts to website visitors. A cookie ID is assigned to your browser to record which adverts have already been sent to this browser. The DoubleClick cookie enables Google and its partner websites to serve adverts based on previous visits to those or other websites. In the same way, the cookie ID enables the DoubleClick cookie to log conversions related to ad impressions, e.g. when a user views a DoubleClick advert and later uses the same browser to visit the advertiser's website.

Data processing takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided that you have given your consent via our banner. The transfer to a third country takes place on the basis of Art. 49 para. 1 lit. a GDPR. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

8.4 Google Web Fonts

We use so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the standardised display of fonts.

When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers, which may also result in the transmission of personal data to the servers of Google LLC. in the USA.

We have therefore integrated the Google fonts locally, i.e. on our web server - not on Google's servers. This means that there is no connection to Google servers and therefore no data transfer or storage. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. Please note that this may result in functional restrictions on the website.

Further information on Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy.

8.5 Google Inc.

As part of the Google products mentioned above (8.2 - 8.4), your tracking data may be transmitted to Google LLC (USA). Data processing may therefore take place outside the EU or the EEA. With regard to Google LLC, no adequate level of data protection can be assumed due to the processing in the USA. There is therefore a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. We have no influence on whether and to what extent Google processes your data for its own purposes or links it to other user profiles of yours.

8.6 hCaptcha

We use hCaptcha (hereinafter referred to as "hCaptcha") on this website. The provider is Intuition Machines, Inc, 2211 Selig Drive, Los Angeles, CA 90026, USA (hereinafter referred to as "IMI").

The purpose of hCaptcha is to check whether the data input on this website (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, hCaptcha analyses the behaviour of the website visitor based on various characteristics.

This analysis begins automatically as soon as the website visitor enters a website with activated hCaptcha. To analyse this, hCaptcha evaluates various pieces of information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to IMI. If hCaptcha is used in "invisible mode", the analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data is stored and analysed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data processing is based on standard contractual clauses contained in the data processing addendum to IMI's General Terms and Conditions or the data processing contracts.

Further information on hCaptcha can be found in the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.

9. application

In the course of your online application, we will collect and process the following application data from you:

- First name, surname,
- address, e-mail,
- date of birth, title, telephone number, address,
- application documents (CV, certificates, qualifications, photograph, etc.), - other data associated with your application.),
- other data related to the application
(e.g. bank details for reimbursement of travel expenses, etc.)

Your data will initially be processed exclusively for the purpose of carrying out and reviewing the application process. The legal basis for this arises from Art. 88 para. 1 GDPR in conjunction with Section 26 para. 1 sentence 1 BDSG. As a rule, we do not require any special categories of personal data (e.g. information about a severe disability) within the meaning of Art. 9 GDPR for the application process. However, if you voluntarily provide us with such data, the processing is carried out on the legal basis of Art. 9 para. 2 lit. b GDPR in conjunction with § 26 para. 3 BDSG.

If there is an employment relationship between you and us, we will process your data in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG. § Section 26 BDSG for the purpose of implementing the employment relationship with you.

We store your personal data for as long as this is necessary for the decision on your application. If you are not hired, your personal data or application documents will be deleted six months after the end of the application process, unless longer storage is legally required or permitted (e.g. for the assertion, exercise or defence of legal claims for the duration of a legal dispute, travel expense accounting, etc.).

If you are not hired, you may receive an invitation to join our talent pool following the application process. This allows us to consider you for suitable vacancies in our applicant selection process in the future. If we have your consent to do so, we will store your application data in our talent pool in accordance with your consent.

If an employment relationship is established following the application process, we will store your data for the duration of the employment relationship with you. However, you will receive further information about the processing of your data in the employment relationship as soon as the employment relationship with us begins.

10. social media channels

We also advertise presences on our website on the social networks listed below.

- LinkedIn: www.linkedin.com/company/consecur-gmbh
- Xing : www.xing.com/pages/consecurgmbh
- Youtube: www.youtube.com/@consecurgmbh5890
- X: x.com/ConsecurGmbh

The integration takes place via a linked graphic of the respective network. The use of this linked graphic prevents the automatic establishment of a connection to the respective social network server when the website is accessed.

This means that you are only forwarded to the service of the respective social network when you click on the corresponding graphic. After forwarding, the respective network will collect information about you. This is initially data such as IP address, date, time and page visited. It cannot be ruled out that the data collected in this way will be processed in the USA.

If you are logged into your user account on the respective network during this time, the network operator may be able to assign the information collected to your personal account. If, for example, you interact via a "Share" button of the respective network, this information can also be stored in your personal user account and published if necessary.

If you want to prevent the collected information from being directly assigned to your user account, you must log out before clicking on the graphic or configure the respective user account accordingly.

11. your rights as a data subject

With regard to the data processing listed here, you are entitled to various data subject rights that are regulated in the GDPR.

11.1 Right to information

In accordance with Art. 15 EU GDPR, you have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this personal data and the information specified in Art. 15 Para. 1 Hs. 2 EU GDPR. This includes, in particular, the purpose of the processing, the categories of data processed, the recipients to whom data has been or will be disclosed and, where possible, the planned duration of storage or the criteria for the duration of storage.

11.2 Right to rectification

In accordance with Art. 16 EU GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

11.3 Right to erasure

In accordance with Art. 17 EU GDPR, you have the right to demand that we erase personal data concerning you without undue delay. We are obliged to erase personal data immediately if one of the reasons specified in Art. 17 para. 1 EU GDPR applies. These reasons include, for example, that the data is no longer necessary for the purposes for which it was collected or otherwise processed.

11.4 Right to restriction of processing

In accordance with Art. 18 EU GDPR, you have the right to demand that we restrict processing if one of the conditions specified in Art. 18 EU GDPR applies. This includes, for example, if you dispute the accuracy of the personal data. We may then restrict the processing of the data for as long as it takes to verify the accuracy of the personal data.

11.5 Right to data portability

In accordance with Art. 20 EU GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You have the right to transmit this data to another controller, i.e. another entity that processes data, without hindrance, provided that the original processing was based on consent or was necessary for the performance of a contract.

11.6 Right to object

In accordance with Art. 21 EU GDPR, you have the right to object at any time to the processing of personal data concerning you if this data is processed on the basis of Art. 6 para. 1 lit. e) or f) EU GDPR and there are reasons arising from your personal situation. You can object to the processing of data for the purpose of direct marketing at any time. Personal data will then no longer be processed for this purpose. The right to object can be exercised by means of an informal declaration. A written declaration or, alternatively, an email to info@consecur.de is sufficient.

11.7 Right to revoke the declaration of consent

You have the right to withdraw your consent to processing at any time in accordance with Art. 7 (3) GDPR. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. The right of cancellation can be exercised by sending an informal declaration to info@consecur.de. A written declaration or, alternatively, an email to the above contact address is sufficient. You can withdraw your consent to the use of cookies via our banner, which is displayed when you access our privacy policy.

11.8 Automated decision-making in individual cases, including profiling

In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Art. 22 para. 1 EU GDPR provides for exceptions to this, whereby Art. 22 para. 4 EU GDPR in turn provides for partial exceptions.

11.9 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation. In this case, the competent supervisory authority is

State Commissioner for Data Protection and Freedom of Information of Lower Saxony
Prinzenstraße 530159 Hannover
Phone: +49 (0511) 120 45 00
Email: poststelle@lfd.niedersachsen.de

12. data protection officer

Our data protection officer will be happy to provide you with information on the subject of data protection using the following contact details

E-mail: datenschutz@consecur.de

If you contact our data protection officer, please indicate the responsible body named in the legal notice.

13 Final provisions

ConSecur GmbH reserves the right to amend this privacy policy at any time to ensure that it always complies with current legal requirements or to implement changes to the services in the privacy policy, e.g. when introducing new services or making changes to the website. The new privacy policy will then apply the next time you visit this website.

April 2025