Privacy Policy
1. Controller
499sec GmbH
Enderstraße 94, 01277 Dresden, Germany
Represented by the Managing Director: Ben Elias Broda
Email: 499seccgmbh@inbox.eu · Phone: +49 163 936 2144
Commercial register: Amtsgericht Dresden, HRB 44806
The controller within the meaning of Art. 4 (7) GDPR is the company named above. We have not appointed a data protection officer, as we are not legally required to do so. You can reach us on all data-protection matters via the contact details above.
2. Principles
We process personal data only where a legal basis exists (Art. 6 (1) GDPR), only for the purposes stated here, and only for as long as necessary. We do not sell personal data and we do not use it for automated decision-making or profiling within the meaning of Art. 22 GDPR.
3. Hosting and server log files
When you access this website, the hosting provider's web server automatically records technical information in server log files: the requested page or file, date and time of the request, transferred data volume, HTTP status, browser type and version, operating system, referrer URL and the IP address of the requesting device.
Purpose and legal basis: ensuring the stability, security and correct delivery of the website (Art. 6 (1) (f) GDPR — legitimate interest). Log files are typically deleted after no more than 14 days unless a security incident requires longer retention.
Our hosting provider processes this data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
4. Contact form and email
If you contact us via the contact form or by email, we process the data you provide (name, company, email address, subject and the content of your message) in order to handle your request and any follow-up questions.
Legal basis: Art. 6 (1) (b) GDPR where your request relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (our legitimate interest in answering enquiries).
Retention: we delete enquiry data once the matter is fully resolved and no statutory retention periods (e.g. under commercial or tax law) apply.
5. Cookies
This website uses only strictly necessary cookies and local storage entries by default (for example, to remember your cookie choice). Optional analytics or marketing cookies are only set if you actively consent via the cookie banner (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Details, including a list of cookies and how to withdraw consent, are set out in our Cookie Policy.
6. Web fonts
This website loads fonts from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When a page is loaded, your browser connects to Google's servers and transmits your IP address so that the fonts can be delivered. Google may transfer data to servers in the USA; the transfer is based on the EU-US Data Privacy Framework and standard contractual clauses.
Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in a consistent, well-designed presentation of the website. If you do not want this connection to be made, you can block requests to fonts.googleapis.com and fonts.gstatic.com in your browser; the site will then fall back to system fonts.
7. External links
Our website contains links to third-party websites (for example, a map link to Google Maps). When you follow such a link, the privacy policy of the respective provider applies. We have no influence on the data processing by those providers.
8. Recipients and international transfers
We only pass on personal data to third parties where this is necessary for the purposes described above (e.g. hosting provider, IT service providers bound by data processing agreements), where you have consented, or where we are legally obliged to do so. Where data is transferred to countries outside the EU/EEA, we ensure an adequate level of protection through adequacy decisions or standard contractual clauses.
9. Your rights
Under the GDPR you have the following rights with regard to your personal data:
- Access (Art. 15) — information about the data we hold about you
- Rectification (Art. 16) — correction of inaccurate data
- Erasure (Art. 17) — deletion, subject to statutory retention obligations
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection (Art. 21) — in particular to processing based on legitimate interests
- Withdrawal of consent (Art. 7 (3)) — at any time with effect for the future
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Saxon Data Protection and Transparency Officer (Sächsische Datenschutz- und Transparenzbeauftragte), Devrientstraße 5, 01067 Dresden, Germany.
10. Data security
This website is delivered over an encrypted TLS (HTTPS) connection. We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we review these measures regularly.
11. Changes to this policy
We may update this Privacy Policy to reflect changes in the law, in our website or in our processing activities. The current version is always available on this page; the date of the last update is shown at the top.