Privacy Policy

A General Information

Name and contact details of the controller

Insyrt GmbH
Managing Director: Kathrin Schirmer
Kreuzstr. 20, 83624 Otterfing, Germany
Phone: +49 (0) 8024 - 46 90 803
Email: contact@insyrt.de

Contact details of the data protection officer

No data protection officer has been appointed, as the requirements for a mandatory appointment under Section 38 of the German Federal Data Protection Act (BDSG) are not met. If you have any questions about data protection, you can contact us directly at the address above or send an email to contact@insyrt.de.

Purposes and legal bases for processing personal data

We process personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other relevant laws.

Data is processed when you visit this website in order to protect our legitimate interests or those of a third party (Art. 6(1)(f) GDPR). Our legitimate interest lies in providing and securely operating the website.

Recipients of personal data

Your data is processed by our hosting provider (see section B) on our behalf as a processor. Data is only passed on to other third parties if we are legally obliged to do so or if this is necessary to defend against attacks on our IT infrastructure.

Storage period of personal data

Your data is only stored for as long as is necessary to achieve the respective purpose of processing or as required by statutory retention periods.

Your rights

Insofar as we process your personal data, you as the data subject have the following rights:

You have the right to access the data stored about you (Art. 15 GDPR).
If inaccurate personal data is processed, you have the right to rectification (Art. 16 GDPR).
If the legal requirements are met, you can request erasure or restriction of processing (Art. 17 and 18 GDPR).
If you have consented to the processing or a contract for data processing exists and the processing is carried out by automated means, you may have a right to data portability (Art. 20 GDPR).
If you have consented to the processing, you can withdraw your consent at any time with effect for the future.

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data where the processing is based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Postal address: Postfach 1349, 91504 Ansbach, Germany
Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de
Website: www.lda.bayern.de

B Information about the Website

Technical implementation

Our web server is operated by Strato AG. The personal data you transmit when visiting our website is therefore processed on our behalf by:

Strato AG
Pascalstraße 10
10587 Berlin, Germany
Email: impressum@strato.de

Logging

When you access this website, your web browser transmits data to our web server. The following data is recorded during an active connection for communication between your web browser and our web server:

Date and time of the request
Name of the requested file
Page from which the file was requested
Access status (file transferred, file not found, etc.)
Web browser and operating system used
Full IP address of the requesting computer
Amount of data transferred

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored briefly on the basis of Art. 6(1)(f) GDPR. After a short time, it is no longer possible for us to identify individual persons, as the IP address is anonymized.

Active components

We use JavaScript to display some features. You can disable this function in your web browser settings.

Cookies

We do not set or use any cookies.

Analysis of user behavior (web tracking systems)

We do not use any programs to analyze user behavior.

C Information about Specific Processing Activities

Appointment booking via Google Calendar

We use Google Calendar to schedule and manage appointments online. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Using the appointment booking tool is voluntary; alternatively, you are welcome to contact us by email or phone to arrange an appointment.

Purpose of processing: Your data (e.g. name, email address, phone number, date and time of the requested appointment and, if applicable, the subject of the meeting) is processed for the purpose of scheduling and preparing the appointment.

Legal basis: If the appointment request serves to carry out pre-contractual measures or to perform a contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases, the processing is based on our legitimate interest in efficient appointment management and user communication (Art. 6(1)(f) GDPR).

Data transfer to third countries: When you use Google Calendar, data may be transferred to Google LLC in the USA. Please note that Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection. In addition, Google uses standard contractual clauses as a safeguard for the data transfer.

Storage period: The data you enter remains with us until the purpose for storing it no longer applies (e.g. after your appointment has been completed) or you ask us to delete it. Mandatory statutory provisions – in particular retention periods – remain unaffected.

Presence on LinkedIn (company page and employee profiles)

Our website contains links to our company profile on LinkedIn and to the professional profiles of individual employees. This serves to introduce our team, make it easier to get in touch and support professional communication.

1. Type of link
These are simple hyperlinks. You are only redirected to the LinkedIn platform when you click on a LinkedIn icon or a name. Only from that moment is your data transferred to LinkedIn. As long as you do not click, no data is exchanged.

2. Data processing by us
Company profile: If you visit our company profile or contact us there, we process your data (e.g. user name, messages) in order to communicate with you. The legal basis is our legitimate interest in offering modern ways to obtain information and get in touch (Art. 6(1)(f) GDPR).
Employee profiles: The linked profiles of our employees are their individual presences on LinkedIn. They are linked as part of our team presentation. We do not store your data when you merely view these profiles.

3. Data processing by LinkedIn and transfer to third countries
When you visit LinkedIn, LinkedIn Ireland Unlimited Company (Ireland) collects data (e.g. IP address, device data, click behavior). We have no influence on this data processing. LinkedIn may also transfer data to the USA. LinkedIn is certified under the EU-U.S. Data Privacy Framework, which is intended to ensure an adequate level of data protection.

4. Joint controllership (Page Insights)
For our company page specifically, we use the "Page Insights" feature (visitor statistics). For this, we are joint controllers with LinkedIn pursuant to Art. 26 GDPR. For details, please see the Page Insights Joint Controller Addendum.

5. Your rights and further information
Information about your rights as a data subject and LinkedIn's privacy policy can be found here:

LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out