Privacy policy

Please note: This is a translation provided for your convenience. The legally binding version is the German one, available at the German privacy policy. In the event of any discrepancy, the German wording prevails.

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how your personal data is handled when you use our website. Personal data is any data by which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the GDPR is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 A data protection officer has not been appointed, as the conditions of Section 38 (1) of the German Federal Data Protection Act (BDSG) are not met. For questions about data protection, please use the contact details above.

2) Data collected when visiting our website

2.1 If you use our website for information purposes only, that is if you do not transmit any information to us, we collect only the data that your browser transmits to our server (server log files). When you visit our website we collect the following data, which is technically necessary for us to display the site to you:

• The page visited on our site
• Date and time of access
• Amount of data transferred in bytes
• Source or referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (in anonymised form where applicable)

Processing takes place pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. We reserve the right, however, to review the server log files retrospectively should specific evidence indicate unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser bar.

2.3 This website does not load any fonts, scripts or other resources from external servers. Simply opening the pages therefore does not establish any connection to third-party providers.

3) Hosting

For hosting our website and displaying its content we use a provider that renders its services, itself or through selected subcontractors, exclusively on servers within the European Union:

All data collected on our website is processed on these servers, unless different recipients are named below for specific processing operations.

We have concluded a data processing agreement with the provider which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.

4) Cookies and consent management

To make visiting our website attractive and to enable certain functions, we use cookies or comparable storage technologies, that is small text files stored on your device. Some of these are deleted automatically when you close your browser (session cookies), others remain on your device for longer and allow settings to be saved (persistent cookies).

On this website we distinguish between:

• Technically necessary storage: We store only your privacy choice in your browser's local storage so that we do not have to ask you again on every visit. Legal basis: Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.
• Services requiring consent: External content such as the map is loaded only once you have expressly agreed. Legal basis: Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR.

You can also configure your browser to inform you when cookies are set and to decide individually whether to accept them. Please note that not accepting cookies may limit the functionality of our website.

Cookie consent tool

This website uses a cookie consent tool to obtain effective user consent for applications requiring consent. It is displayed when you open the site as an interactive interface on which consent can be given for specific services. All services requiring consent are loaded only if you have given the corresponding consent.

The tool is operated by us; no data is transmitted to third parties. Only your choice is stored, in your browser's local storage. A further legal basis for the processing is Art. 6 (1) (c) GDPR: as controller, we are under a legal obligation to make the use of services that are not technically necessary dependent on the user's consent.

You can change your choice at any time via the privacy settings link in the footer of every page. The lawfulness of processing carried out up to the point of withdrawal remains unaffected.

5) Contacting us

5.1 Personal data is collected when you contact us (for example via the contact form, by email or by telephone). Which data is collected when you use a form can be seen from the respective form. This data is stored and used exclusively for the purpose of responding to your enquiry and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6 (1) (f) GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis is Art. 6 (1) (b) GDPR. Where you have consented to the processing, Art. 6 (1) (a) GDPR also applies. Your data is deleted once your enquiry has been dealt with conclusively, unless statutory retention obligations apply (Section 257 of the German Commercial Code, Section 147 of the German Fiscal Code).

Please note that unencrypted emails may be read by third parties in transit.

5.2 Technical processing of the forms

The forms on this website are processed by a script on our own web space and delivered to our mailbox by email. No external form service is used. Beyond the server log files referred to in section 2, no additional data is stored.

5.3 Uploaded files

In both the contact form and the application form you may voluntarily attach files (for example floor plans, specifications, a CV or references). Up to five files are permitted in the formats PDF, JPG, PNG, WEBP, HEIC, DOC, DOCX, ODT, TXT and RTF, with a maximum of 5 MB each and 12 MB in total.

Processing takes place exclusively on our own web server; no files are transmitted to third parties and no external upload services are used. The files are not stored permanently on the server but are transmitted immediately to our mailbox as attachments and then removed from the server.

The legal basis is Art. 6 (1) (b) GDPR and your consent pursuant to Art. 6 (1) (a) GDPR. Attaching files is voluntary; you can submit the form without them. Please do not send special categories of personal data within the meaning of Art. 9 GDPR, such as health information, unless we expressly ask you to.

5.4 WhatsApp Business

You may contact us via the messaging service WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the business version of WhatsApp for this. Our website contains only a link; no data is transmitted to the provider simply by opening the page.

If you contact us via WhatsApp in connection with a specific matter, we store and use the mobile number you use on WhatsApp and, if provided, your first and last name pursuant to Art. 6 (1) (b) GDPR in order to process and respond to your request. If you use our WhatsApp contact for general enquiries, processing takes place pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data is used solely to answer your request via WhatsApp. It is not passed on to third parties.

Please note that WhatsApp Business obtains access to the address book of the mobile device we use for this purpose and automatically transmits telephone numbers stored in that address book to a server of its parent company Meta Platforms Inc. in the USA. For our WhatsApp Business account we therefore use a mobile device whose address book contains only the contact details of users who have themselves contacted us via WhatsApp. Data of users who do not use WhatsApp or have not contacted us via WhatsApp is therefore not transmitted.

Use is voluntary – you can equally reach us by telephone, email or the form. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. Further information: whatsapp.com/legal.

6) Applications

We process your application data (contact details, qualifications, the information in your message and any documents you send) exclusively in order to carry out the application procedure. The legal basis is Section 26 (1) BDSG in conjunction with Art. 88 GDPR and Art. 6 (1) (b) GDPR.

• If an employment relationship comes about, we store the data in your personnel file.
• Otherwise we delete application documents no later than six months after the procedure ends. This period results from the two-month period for asserting claims under Section 15 (4) of the German General Equal Treatment Act (AGG) plus a buffer for any court proceedings.
• Storage for longer in our talent pool takes place only with your express consent.
• The same deletion period applies to documents attached via the form; for the technical processing see section 5.3.

Work in the security industry requires an official reliability check under Section 34a GewO. The data required for this is transmitted to the competent authorities only later in the procedure and only to the extent legally required.

7) Google Maps

On our contact page this website uses an online map service provided by Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive maps in order to present geographical information visually. Using this service shows you our location and makes it easier to find us.

The map is loaded only after your active consent. When it loads, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; transmission to servers of Google LLC in the USA may also occur. This happens regardless of whether you have a Google account. If you are logged in to Google, your data is assigned directly to your account. If you do not want this assignment, you must log out before loading the map.

The legal basis is Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. Further information: business.safety.google.

8) Social media profiles

In the footer we link to our profiles on LinkedIn, Instagram, Facebook and TikTok. These are simple links – no social plugins are loaded, and no data is transmitted to the networks simply by opening our website. Only when you click a link do the privacy provisions of the respective provider apply. For the processing of visitor data on our company pages there, we are jointly responsible with the respective provider (Art. 26 GDPR).

9) Recipients of your data

Data is passed on only where this is necessary and legally permissible, in particular to:

• IT service providers, hosting and maintenance partners as processors pursuant to Art. 28 GDPR,
• tax advisors, banks and insurers to the extent legally required,
• public authorities, where we are legally obliged to provide information.

Your data is not sold. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

10) Data processing in the course of our services

Where we provide services for clients that involve the processing of personal data – such as visitor lists at reception, key management, patrol and incident logs or the operation of CCTV systems – this is done on instruction and on the basis of a data processing agreement pursuant to Art. 28 GDPR. Our staff are bound in writing to confidentiality.

11) Rights of the data subject

11.1 Applicable data protection law grants you the following rights vis-à-vis the controller with regard to the processing of your personal data:

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to notification pursuant to Art. 19 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to withdraw consent given pursuant to Art. 7 (3) GDPR
• Right to lodge a complaint pursuant to Art. 77 GDPR

11.2 RIGHT TO OBJECT

11.3 Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is:

12) Duration of storage of personal data

The duration of storage of personal data depends on the respective legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (for example under commercial and tax law, Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code).

Where processing is based on express consent pursuant to Art. 6 (1) (a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods exist for data processed in the context of contractual obligations on the basis of Art. 6 (1) (b) GDPR, such data is routinely deleted after the retention periods expire, provided it is no longer required for the performance or initiation of a contract.

Where processing is based on Art. 6 (1) (f) GDPR, the data is stored until you exercise your right to object under Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing.

Unless stated otherwise elsewhere in this policy, stored personal data is deleted once it is no longer necessary for the purposes for which it was collected.

13) Currency of this policy

We adapt this privacy policy whenever the legal situation or the services used change. The version available on this page applies in each case.

Last updated: enter date

This privacy policy is based on a template by IT-Recht Kanzlei, Munich (it-recht-kanzlei.de), adapted to the functions actually used on this website.