Privacy Policy

We appreciate your visit to our website and your interest in our services. We want you to feel comfortable on our website and not worry about the confidentiality of your data. We are deeply committed to data protection and consider transparency in handling your data to be very important. Therefore, we would like to inform you about which data we collect, for what purpose, and how you can control your data at any time.

Data Controller

The data controller responsible for processing your data according to the law is:

3einhalb GmbH
Nägelsbachstraße 26
91052 Erlangen

Categories of Data, Purpose, and Legal Basis of Processing

You can visit our website without providing any personal information. The privacy policy can be accessed via the link at the bottom of every page. We use your personal data collected during your visit only for operating and optimizing our website. For this purpose, your IP address, various technical data from your device (e.g., operating system, browser used), and data about your use of the website are collected. We do not store this data beyond the legal retention periods or the purpose fulfillment. Processing this data is necessary to ensure the website's operation. If you do not consent to this processing, we cannot provide you with our online services. We analyze this information statistically to make the website more enjoyable for all visitors. No linkage with any other personal data stored with us occurs. Data collected during website use is deleted no later than 14 months after collection. Data storage may be extended in individual cases to enforce legal claims or defend against legal claims or due to legal obligations.

Processing personal data for website operation and network and information security is based on Art. 6(1)(f) GDPR (legitimate interest). You are not legally or contractually obligated to provide data when using our website. However, website operation or response to inquiries is not possible without data processing. For more information on data collected by specific services, please refer to the respective sections of this privacy policy.

Recipients of Data

Your data is not disclosed to third parties unless there is a legal obligation to transfer the data. This processing is based on Art. 6(1)(c) GDPR in conjunction with the relevant order or legal obligation. Recipients may include public authorities in case of a legal obligation and processors acting on our behalf who process online data. Joint controllers may also be involved where applicable.

Data Categories, Purpose, and Legal Basis of Processing in the Context of the Software Solution "ISMS for Confluence"

For the plugin "ISMS for Confluence" offered by us, the following processing activities apply:

In the course of contract initiation and fulfillment, we collect company data and contact details of a designated contact person upon your request and create a customer account for that person (Art. 6(1)(b) GDPR). The data collected is visible in the respective input form. With your consent, we collect contact data provided during support inquiries and create a customer account (Art. 6(1)(a) GDPR). Corrections or deletions of contact data and customer accounts are possible at any time, unless legal retention obligations prevent deletion. Corrections or deletions of company data are possible at any time unless needed for contract fulfillment, legal claims, or retention obligations. The license key contains the name and location of your company as well as the ID of your Confluence server instance. We reserve the right to store these data, including the server’s IP address, for online license verification and to have the software product regularly transmit them to us. The legal basis is legitimate interest to protect copyrighted works and contractual agreement for usage verification under the terms and conditions (Art. 6(1)(f) GDPR).

Contact Form

When you fill out the contact form or contact us by email or phone, you provide personal data such as name, company, email address, phone number, and information to create a personalized offer or answer your inquiry. We use this data solely to respond to your specific request and to provide information. To protect your data during transmission to us, we use recognized encryption methods. We will retain your personal data only as long as necessary to fulfill the purposes described. Legal retention periods remain unaffected.

The legal basis for processing general inquiries is your consent under Art. 6(1)(a) GDPR. For contract-related inquiries, it is Art. 6(1)(b) GDPR. For data protection-related inquiries, it is Art. 6(1)(c) GDPR. By submitting the form, you consent to the processing of your data.

Job Applications

If you apply for an open position and send your application documents by email (e.g., certificates, CV), we collect and process your personal data exclusively for the purpose of selecting a suitable employee. Your data is stored and processed in our email and HR systems. Processing is based on pre-contractual measures according to Art. 6(1)(b) GDPR. We retain this data for up to 3 months after the recruitment process ends, after which it is deleted unless legal claims or obligations require longer retention.

You are not legally or contractually obligated to provide data for your application. However, incomplete data may lead to rejection. In such cases, we inform you and delete your data. Data is not disclosed to third parties unless legally required, based on Art. 6(1)(c) GDPR and the respective legal obligation.

Recipients include public authorities (if legally required), HR managers, and decision-makers within our company.

Your Rights Regarding Personal Data Processing

You have various rights regarding the processing of your personal data, which we outline below. Details can also be found in Articles 15 to 21 GDPR and §§ 32 to 37 of the German Federal Data Protection Act (BDSG). You have the right to access your personal data and request correction of inaccurate data.

Under certain conditions, you also have the right to data deletion, restriction of processing, and data portability. You may object to processing based on Art. 6(1)(f) GDPR, as well as profiling under Art. 21 GDPR. Consents you have given during website use can be revoked at any time without reasons and with future effect. You may assert all these rights informally via email or mail to the controller. You also have the right to file a complaint with the relevant data protection supervisory authority if you believe your data is being processed unlawfully.

A list of data protection officers and their contact details is available at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If you have data protection questions, you can contact our external data protection officer:

David Gabel – Email: david.gabel@your-insider.com

General information about data protection and processing of personal data in data protection processes can be found at:
https://www.dsgvo-support.de

Cookies

We use two types of cookies on our website: session cookies and persistent cookies. To help you decide whether to allow us to use them, we explain their purposes briefly. Cookies are small text files stored on your computer. Cookies do not execute commands on your computer and do not pose security risks.

Session cookies (essential cookies) are set only during logins to our website. They store information while you browse and are deleted when you leave the site.

We also store a persistent cookie on your computer, which only contains information that you have visited our website and consented to cookie use. This information is important for designing and operating our website. The use of these cookies is based on Art. 6(1)(f) GDPR (legitimate interest).

You can manage cookies in your browser settings, reject them entirely, or configure your browser to delete cookies regularly. There is sufficient information available online on how to do this.

Cookie Settings Withdrawal

By clicking the button below, you can withdraw your cookie settings.

Cookies

Google Analytics

This website uses Google Analytics, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses “cookies,” which are text files stored on your computer to analyze your website usage. Due to IP anonymization activated on this website, your IP address is shortened within EU member states or other states party to the European Economic Area agreement before being sent to Google.

More information on how Google uses this data can be found here:
https://policies.google.com/technologies/partner-sites?hl=en

Google Analytics is only used with your consent. The legal basis is Art. 6(1)(a) GDPR.

You can revoke your consent at any time by clicking the “Withdraw” button under cookies.

Data collected via Google Analytics is forwarded internally to our marketing department for processing.

Final Note

Your trust is very important to us, and we thank you for it. We hope this explanation has given you a positive impression of our data protection practices. Please note that this privacy policy may change, so we ask you to review it regularly. If you have any questions, please contact us at: datenschutz@3einhalb.com