Data Protection Policy.

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

You may send data protection requests to the contact details above. Please use the subject “Data protection request” so that your enquiry can be assigned promptly.

We process personal data only where this is necessary to operate the website, respond to enquiries, provide requested services, protect our systems or send communications for which you have registered.

Where information is stored on or accessed from your device, Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) also applies. Technically necessary storage or access is based on Section 25(2) TDDDG; all other storage or access requires your consent under Section 25(1) TDDDG.

When you access this website, the web server automatically processes technical information required to deliver the requested content and maintain the security and stability of the service. This may include:

• IP address of the requesting device
• Date and time of access
• Requested page, file or resource
• Referrer URL, where transmitted
• Browser type, browser version and operating system
• Transferred data volume and HTTP status code

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interests are the secure, stable and efficient operation of the website, the detection of misuse and the investigation of security incidents.

Access logs and security monitoring

Regular web server access logs are normally deleted or anonymised after seven days. We also use technical security systems, including automated attack and misuse detection, to identify suspicious request patterns and temporarily block the source of an attack. Security events may include the IP address, request path, time, user agent, HTTP status and the reason for a security decision.

Security-event data is retained only for as long as it is needed to investigate and defend against the relevant incident. Data required as evidence or to establish, exercise or defend legal claims may be retained until the incident has been fully resolved and the relevant claims have expired.

Technical form-protection logs

To protect our forms from spam and misuse, we keep limited technical records of submission attempts. These records contain the form identifier, time, delivery or blocking status, a technical reason code and a pseudonymous request hash. They do not contain the submitted form content or a plain-text IP address. These technical records are normally deleted after 30 days.

This website uses cookies and similar technologies where they are technically necessary or where you have given consent. Necessary technologies support core functions such as security, language selection and the storage of your privacy preferences.

We use the consent management solution Complianz to request, document and manage your privacy choices. In this context, consent status, time of consent, policy version and technical information required to assign the choice may be processed. The documentation of consent and withdrawal is based on Art. 6(1)(c) GDPR. The technically necessary operation of the consent tool is additionally based on Art. 6(1)(f) GDPR and Section 25(2) TDDDG. Our legitimate interest is to provide and document legally compliant privacy choices.

You can change or withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

If you contact us by form, email, telephone or another communication channel, we process the information you provide in order to handle your enquiry. Depending on the selected form, this may include your name, company, contact details, department or topic, selected software or training courses and your message.

If your enquiry concerns a contract or steps prior to entering into a contract, processing is based on Art. 6(1)(b) GDPR. In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the efficient handling, assignment and documentation of business enquiries. Art. 6(1)(a) GDPR applies only where we request a separate, voluntary consent for an additional purpose.

The checkbox referring to this policy confirms that you have read the data protection information. It does not replace the legal bases stated above and does not constitute consent where processing is necessary to handle your enquiry.

Form submissions also include limited technical data needed to prevent abuse and ensure secure transmission, such as a security token and a pseudonymous request identifier. We do not use this data for advertising profiles or solely automated decisions about you.

Required information

Fields marked as required are needed to assign and answer your enquiry. If you do not provide this information, we may be unable to process or respond to your request. All other information is voluntary.

Enquiries are deleted when they have been conclusively resolved and no statutory retention obligation or legitimate need for further storage applies. Business correspondence may be subject to statutory retention periods.

If you subscribe to our newsletter, we process your email address and the information required to document your registration. Registration uses a double opt-in procedure: after submitting the form, you must confirm the subscription through a link sent to your email address. Without the email address and confirmation, we cannot send the newsletter. Any other requested information is voluntary.

The legal basis for sending the newsletter is your consent under Art. 6(1)(a) GDPR. The logging of the registration and confirmation process is based on Art. 6(1)(f) GDPR. Our legitimate interest is to demonstrate that the subscription was obtained properly and to prevent misuse of email addresses.

Service provider

We use Mailchimp, a service of The Rocket Science Group LLC, a subsidiary of Intuit Inc., 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to manage and send the newsletter. Mailchimp processes subscriber data on our behalf.

Newsletter measurement

We do not use personalised opening or click measurement on the basis of the newsletter subscription alone. Such measurement will only be activated where you have given a separate and voluntary consent for this purpose. If enabled with your consent, newsletters may contain technologies that allow us to determine whether a message was opened and which links were selected. We use this information to assess and improve newsletter content. The legal basis is Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.

International data transfers

Data may be processed in the United States. Intuit Inc. and The Rocket Science Group LLC doing business as Mailchimp state that they are certified under the EU–U.S. Data Privacy Framework. Mailchimp also incorporates the European Commission’s Standard Contractual Clauses into its Data Processing Addendum as an additional transfer mechanism.

Further information is available in the Intuit privacy statement and the Mailchimp Data Processing Addendum.

Unsubscribing

You may withdraw your consent at any time by using the unsubscribe link in any newsletter or by contacting us. After unsubscribing, your address may be stored on a suppression list to ensure that no further newsletter is sent. This limited storage is based on Art. 6(1)(f) GDPR and serves to respect and document your withdrawal.

Locally hosted fonts and media

The fonts used on this website are hosted locally. Loading a page therefore does not create a connection to Google Fonts. Where possible, website images, videos and interface libraries are also delivered from our own web infrastructure.

External websites and social networks

Our website may contain ordinary links to external websites or social media profiles. No data is transmitted to the operator of the linked service merely because the link is displayed. Data is transmitted only after you actively select the link and leave our website. The privacy policy of the respective provider then applies.

Embedded content

If external content is embedded in individual cases, it is blocked until the required consent has been given. Once activated, the external provider may receive technical data such as your IP address, device and browser information and may use cookies or similar technologies. Details are shown in the consent dialog for the relevant service.

Within EKS InTec GmbH, personal data is available only to departments and employees who need it for the relevant purpose. We may also engage service providers for hosting, IT support, website operation, email delivery, newsletter distribution and other business functions.

Service providers acting on our instructions are bound by data processing agreements in accordance with Art. 28 GDPR where required. Personal data may also be disclosed where we are legally obliged to do so or where disclosure is necessary to establish, exercise or defend legal claims.

If personal data is transferred outside the European Economic Area, we ensure that the requirements of Chapter V GDPR are met. Depending on the recipient, this may be based on an adequacy decision under Art. 45 GDPR, appropriate safeguards such as Standard Contractual Clauses under Art. 46 GDPR, or a derogation under Art. 49 GDPR.

We retain personal data only for as long as necessary for the purpose for which it was collected. The relevant period depends on the type of data, the purpose of processing, contractual requirements and statutory retention obligations. Regular access logs are normally retained for seven days, while the limited technical form-protection logs described above are normally retained for 30 days.

Once the purpose no longer applies, data is deleted or anonymised unless continued storage is required by law, necessary to establish, exercise or defend legal claims, or otherwise permitted under data protection law. Where data is retained only for these reasons, access is restricted accordingly.

Subject to the applicable legal requirements, you have the following rights:

Right to object

If processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims.

If personal data is processed for direct marketing, you may object at any time without stating reasons. The data will then no longer be processed for that purpose.

Automated decision-making

We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR in connection with this website.

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. You may contact the authority responsible for us or another authority competent under Art. 77 GDPR.

We may update this policy when legal requirements, our website or the services used on it change. The version published on this page applies. If a change requires renewed consent, we will request it through the consent management system.

Last updated: October 2026