Privacy policy
This is a translation for your convenience. The German version is legally binding.
In short: We only process data that is technically necessary to visit the website or that you send us yourself (contact form, Digital Check, email). We do not set cookies, do not use tracking or analytics tools and do not sell any data. Our website, our form service and our mailbox are run by providers in Germany.
1. Controller
The controller responsible for data processing on this website is:
SIS Integration
Owner: Sonja Stawinoga
[Straße und Hausnummer]
[PLZ] [Stadt]
Germany
Email: info@sisintegration.com
A data protection officer is not required by law (§ 38 BDSG).
2. Visiting the website and server logs
When you visit the website, our web server processes technically necessary data: IP address, date and time, page requested, amount of data transferred, browser and operating system, and the previously visited page (referrer). This is necessary to deliver the website, operate it securely and reliably, and detect attacks.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure, working service). The logs are deleted automatically after [X Tagen], unless they are needed for longer to investigate a specific security incident.
The connection is encrypted via SSL/TLS (recognisable by “https://” and the padlock symbol in your browser).
3. Hosting
The website and form service run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (data centre in Germany/EU). Hetzner processes the data solely on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place.
4. Contact form and SIS Digital Check
If you write to us via the contact form or the SIS Digital Check, we process the information you enter:
- Contact form: name, email address, message; optional: company, phone number, website address, selected interest
- SIS Digital Check: company, email address, your answers to the questions and the initial suggestion calculated from them; optional: contact person, phone number, website address, message
The information is transmitted in encrypted form to our own form service on our server at Hetzner in Germany and forwarded from there as an email to our mailbox (see section 5). The form service does not store the content; it does not log names, email addresses or IP addresses. To prevent abuse, the IP address is kept briefly in memory to detect too many requests within a short time.
The purpose is to answer your enquiry and, if applicable, prepare an offer. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures at your request) and otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). We need the fields marked * to be able to reply; without them, an enquiry via the form is not possible.
The suggestion in the Digital Check is calculated in your browser from your answers. It is a non-binding guide – no automated decision within the meaning of Art. 22 GDPR takes place; we prepare every offer personally.
5. Contact by email
If you send us an email or a form enquiry reaches us, we process your email address and the content of your message in order to reply (legal basis as in section 4). Our mailbox is operated by united-domains GmbH (Germany), which processes the data on our behalf (data processing agreement pursuant to Art. 28 GDPR).
6. No cookies, no tracking
This website does not set cookies and does not store any information on your device (§ 25 TDDDG). We do not use analytics, tracking or advertising services. That is why there is no cookie banner.
7. Fonts, images and maps
Fonts, images, videos and the map sections in our examples are stored on our own server. When you visit the website, no connection is made to Google, OpenStreetMap or other third parties.
8. Links to LinkedIn and other websites
On our website we link to our LinkedIn profiles. These are simple links, not embedded content: data is only transferred to LinkedIn when you click a link. Processing on LinkedIn is governed by the privacy policy of LinkedIn Ireland Unlimited Company.
9. Recipients and disclosure
Your data is only received by us and the service providers named above, who process it on our behalf (Hetzner, united-domains). Disclosure to other third parties only takes place if it is necessary to perform a contract, you have consented or we are legally obliged to do so. No data is transferred to countries outside the EU.
10. Retention period
Enquiries that do not lead to an order are deleted no later than 6 months after the last message. If an order results, we keep the documents for as long as statutory retention obligations require (commercial and tax law: 6 or 8 years for accounting records, 10 years for books).
11. Your rights
You have the right to:
- access the data we hold about you (Art. 15 GDPR)
- rectification of incorrect data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you may object at any time on grounds relating to your particular situation. An informal message to info@sisintegration.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, datenschutz.hessen.de.
For all questions about your data: info@sisintegration.com
12. Changes
We update this privacy policy when our website, our service providers or the legal situation change. The version published here applies.