Data Protection and Privacy Policy

Provider

Provider and responsible body in the sense of the data protection laws is:
Obsidian IT Strategy GmbH
Rathausplatz 10
88175 Scheidegg, Germany

Scope

This privacy notice informs users of the type, scope and purpose of the collection and use of their data by the responsible provider.
The legal framework is formed by General Data Protection Regulation (EU-GDPR), the new Federal Data Protection Act (BDSG-new) and the Telemedia Act (TMG).

Collection of General Information

Every time this site is visited, information is automatically recorded by us or the service provider in so-called server log files.

The following is recorded:

  • Browser type and version used
  • Operating system used
  • Domain name of your Internet provider
  • Referrer URL (previously visited website)
  • IP address
  • Date and time of the server inquiry

This information is technically necessary in order to correctly deliver and display the contents of our websites requested by you. These data are strictly necessary when using the Internet. These data exclusively comprise technical information which does not allow any direct conclusions to be drawn about your person.

In addition, we use this anonymous information for statistical purposes and to optimise our websites and the technology which supports them. Under no circumstances will this anonymous data be passed on to third parties or linked to personal data without your express consent.

These automatically recorded data remain stored in the server log files for 14 days and are then automatically deleted. We and the service provider expressly reserve the right to subsequently check and evaluate the server log files in the event of suspicion of illegal use of our service.

Handling of personal data

We handle personal data only to the extent that this is possible to do so in accordance with data protection regulations. We also take all necessary technical and organisational security measures at all times to adequately protect your personal data from unauthorised access and misuse.

Insofar as we store or process personal data, this takes place inside a data processing centre. To protect the security of your data during transmission, we use encryption methods (e. g. SSL) via HTTPS. Our servers are protected by firewall and anti-virus protection. Back-up and recovery procedures as well as role and authorisation concepts are a matter of course for us.

Our employees are obliged to observe the regulations of the German Telemedia Act (TMG), the German Data Protection Act-new and the EU-GDPR when handling data.

The use of cookies

Similarly, to many other websites, we also use so-called "cookies". Cookies are small text files that are transferred to your hard drive from a website server. When this happens, we automatically receive certain data, such as your IP address, the browser used, the operating system on your computer and your Internet connection.

Cookies cannot be used to run programmes or transfer viruses to your computer. Based on the information contained in the cookies, we can simplify navigation for you and ensure that our website displays correctly.
This automatically collected data will not be passed on to third parties or linked to personal data by us or our service provider without your express consent.

Our website can, of course, be viewed without the use of cookies. Internet browsers are usually set to accept cookies. You can disable the use of cookies in your browser settings at any time. Please refer to your Internet browser's help feature to learn how you can change these settings. Please note that some of our website features may not work if you have disabled the use of cookies.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter Google) Google Analytics uses “cookies”, which are text files stored on the user's computer to analyse how the website is used. The information generated by the cookie on your use of this website is generally transmitted to and stored on a Google server in the USA. Since IP anonymisation has been activated on these websites, before transferring data to the USA, Google will shorten the user's IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional circumstances. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to create reports on website activities and to provide other services to the website operator related to website and internet use. The IP address transmitted by the user's browser within the framework of Google Analytics will not be combined with any other data held by Google.

You may prevent cookies from being stored by selecting the appropriate setting on your browser; please note, however, that doing so may prevent you from being able to use all the functions of this website in full. In addition, you can prevent Google from acquiring and processing the data generated by the cookie and related to your use of this website (including your IP address) by downloading and installing the browser plug-in available at the following: browser add-on to deactivate Google Analytics.

As an alternative to this browser add-on or if you are accessing this website on a mobile device, please click on this link to prevent Google Analytics from collecting data when you are using this website in the future. Doing so will result in an opt-out cookie being stored on your device. If you delete your cookies, you must click on this link again.

Use of Google Maps

This website uses Google Maps API to display geographical information. When Google Maps is used, Google also collects, processes, and utilises data about the visitor's use of map functions. For more information about how Google processes your information, please refer to the Google Privacy Policies. There, you can also go to the Data Protection Centre to change the protection settings for your personal data.

Detailed instructions for managing your own data in connection with Google products can be found here.

Use of Google Web Fonts

This site uses so-called web fonts provided by Google to uniformly display fonts. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR

If your browser does not support web fonts, a default font is used by your computer.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

Contact form

If you contact us via email or the contact form, the information you provide will be saved for the purpose of processing your request and for possible follow-up questions.

Deleting and blocking data

We adhere to the principles of data avoidance and data economy. Therefore, we store your personal data only as long as is necessary to achieve the purposes mentioned here or as required according to the various storage periods determined by the competent legal authorities. Once the purpose in question no longer exists or the storage period expires, the corresponding data will be routinely blocked or deleted as required by law.

Your Rights with regard to Information, Correction, Blocking, Deletion, and Objection

You have the right to be provided with information about any personal data stored on our servers that is related to you, at any time. You also have the right to rectification, blocking or deletion of your personal data, other than the aforementioned data storage for business processes. Please contact our data protection officer. The contact details can be found below.

In order to enable the blocking of data at any time, the data in question must be available on a black list for control purposes. You can also request the deletion of the data, unless this is excluded by a legal archiving obligation. Should such a requirement exist, we will, on request, block your data.

You can make changes or revoke your consent by sending us written notification thereof.

Changes to our Privacy Policy

We reserve the right to occasionally adapt this privacy notice to ensure its compliance with the current legal requirements or to reflect changes in our services, e.g. upon the introduction of new services. Any renewed visit to our site will then be subject to the new privacy notice.

Questions to the data protection officer

If you have any questions about data protection, please write us an email or contact our data protection officer directly:
info(at)obsidian-its.com

Interested? Contact us now.