Privacy Policy
Privacy Policy
Wir informieren Sie nachfolgend darüber, wie wir Ihre personenbezogenen Daten beim Besuch unserer Website und bei einer Kontaktaufnahme verarbeiten und welche Rechte Ihnen zustehen.
1. Controller
SDS – Steel Defence Solutions GmbH
Kaiserau 2
51789 Lindlar
Germany
2. Hosting and Server Logs
Our website is hosted by a service provider in Germany. The hosting provider processes the personal data required to operate the website on our behalf and on the basis of a data processing agreement.
Whenever you access our website, technical access data is processed and stored in server logs. This includes your IP address, the date and time of access, the page or file requested, the HTTP status code, the volume of data transferred, information about your browser and operating system and, where applicable, the website previously visited (referrer URL).
We require this data to deliver the website, ensure stable and secure operation, and detect and investigate technical errors or attacks. The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interests are the secure and reliable provision of our website. Processing the IP address is technically necessary to transmit the requested content.
Server logs are deleted after 90 days. If individual log entries are required to investigate a specific security incident or to establish, exercise or defend legal claims, we retain the necessary data separately until the investigation or legal proceedings have been concluded.
3. Contacting Us
If you contact us using the contact form or by email, we process the information you provide to handle your enquiry and respond to you. For the contact form, this includes your first and last name, your email address, your company and your message. When you contact us by email, we also process the content you send and any attachments.
Enquiries submitted through the form are sent to us by email and handled in the relevant email inbox. Enquiries are not additionally stored on a permanent basis on the web server. Access is restricted to the people responsible for handling the enquiry and the IT service providers required for this purpose who act on our behalf.
If your enquiry concerns entering into or performing a contract with you, the legal basis is Article 6(1)(b) GDPR. For other enquiries and communication with company representatives, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the appropriate handling of business and other enquiries.
We delete contact enquiries once the matter has been fully resolved and further retention is no longer necessary. Where data is required to pursue legal claims, we generally retain it until the expiry of the standard limitation period of three years, starting at the end of the year in which the claim arose and the statutory conditions for the limitation period to begin are met. Where proceedings are ongoing, retention may be necessary until they have been concluded. Commercial and business correspondence subject to statutory retention requirements must generally be retained for six years, and accounting records for eight years, in each case starting at the end of the relevant calendar year. Data subject to retention requirements is only processed further for other purposes where legally permitted.
Where we are legally required to retain data, processing is based on Article 6(1)(c) GDPR in conjunction with the applicable retention provisions, in particular Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).
Contacting us is voluntary. Without the information required to handle your enquiry, we may be unable to respond. There is no statutory or contractual obligation to contact us.
4. Cookies and Storage of Your Language Preference
Our website uses cookies and your browser’s local storage. Cookies are small files stored on your device. Local storage allows settings to remain stored independently of individual page visits.
Storage and access that are strictly necessary to provide a service you have explicitly requested are based on Section 25(2), point 2, of the German Telecommunications Digital Services Data Protection Act (TDDDG). For analytics cookies and other technologies that are not strictly necessary, we obtain your prior consent under Section 25(1) TDDDG. Where personal data is processed, the GDPR legal bases stated below also apply.
When you select the website language, we store the language code “de” or “en” in local storage. This allows your selection to be applied on subsequent visits. The entry does not contain an individual user identifier. It remains stored until you select a different language or delete the entry through your browser. No separate expiry date is set.
Storing and accessing your language preference serves to provide the language version you have selected and is based on Section 25(2), point 2, TDDDG. Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is the user-friendly provision of your selected language version.
5. Consent Management with Cookiebot
We use Cookiebot to request, store and implement your consent choices. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Usercentrics processes the necessary data on our behalf.
To display the consent dialogue, data processed includes, in particular, your IP address, the website accessed, your browser language and technical browser information. Data required solely to deliver the dialogue is discarded after processing. To document your decision, information stored includes, in particular, your consent status, an associated consent identifier and the website to which the decision relates. For this purpose, the “CookieConsent” cookie is stored in your browser. Your decision and the associated records are generally stored for twelve months.
The legal basis for documenting consent is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR. The technical management of your choices, including a refusal, is based on Article 6(1)(f) GDPR. Our legitimate interest is to implement your privacy settings reliably. The storage of and access to information on your device required for this purpose are based on Section 25(2), point 2, TDDDG.
We use Cookiebot’s European delivery option. Consent records are stored in the European Union.
You can change or withdraw your consent at any time using the “Cookie Settings” link on our website. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before withdrawal. Further information about the provider:
Cookiebot Privacy Policy.
6. Your Rights
Subject to the statutory conditions, you have the right of access to the personal data processed about you (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR) and the right to data portability (Article 20 GDPR). The right to data portability applies to data you have provided to us and that we process by automated means on the basis of your consent or a contract.
You can withdraw consent at any time with effect for the future. To exercise your rights, please use the contact details provided in Section 1. You can also manage your consent choices for website services through “Cookie Settings”.
Your Right to Object
Where we process your personal data on the basis of Article 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the alleged infringement. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia:
https://www.ldi.nrw.de/.
No decision-making based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you within the meaning of Article 22 GDPR takes place in connection with this website.