Privacy policy

We take the protection of your personal data very seriously.

1. Data controller

Cyber-Sec.IT GbR
Alwin Frankenstein and Martin Maurer
Sudetenstraße 14
35576 Wetzlar, Germany
Email: info@cyber-sec.it

2. Data we collect

When you visit our website, our server automatically records the following data in server log files:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing device
Date and time of the server request
IP address (anonymised where possible)

This data is not combined with other data sources. The legal basis for processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient operation of the website, in error analysis and in the defence against attacks). The processing is technically necessary for the website to be delivered.

The log files are collected by our hosting provider (see section 5). They are stored only for as long as is necessary for the purposes stated and are then deleted automatically.

3. Cookies, local storage and device properties

This website does not use cookies. We do not set any HTTP cookies, tracking cookies, analytics cookies, or marketing cookies.

We also do not store any data in your browser’s local storage (localStorage, sessionStorage). You choose the language with the language switch in the header; this choice is not stored.

Query of device properties. To keep the website running smoothly on low-powered devices and to respect your system settings, a script in your browser locally queries the following: whether data-saver mode is active, how much memory and how many processor cores your device reports (the browser interfaces Network Information, deviceMemory and hardwareConcurrency), your system setting for reduced motion, and whether you use a mouse or touch. If your device reports low performance or data-saver mode is active, we switch off elaborate animations; with reduced motion we omit motion effects.

These values are evaluated solely in your browser. They are not stored, not transmitted to our server or to third parties, and not used to recognise you or to create profiles. The legal basis for accessing this information on your device is § 25 para. 2 no. 2 TDDDG (insofar as necessary for the website you have requested to be displayed reliably and without impairment); no further processing takes place.

Since we do not store any information on your device and the access described serves solely to display the website reliably, no consent under § 25 TDDDG and therefore no cookie banner is required.

4. Contact requests

If you send a request through the contact dialog on this website, we process the details you enter: the selected company size (number of employees), your company name, your preferred way of being contacted, and your phone number or email address (depending on your choice). When you submit the form, the server also adds the time of receipt and the language of the website. We use these details solely to get back to you about your request.

Providing these details is voluntary. Without contact details, however, we cannot respond to your request.

The details are sent to us by email. The email is sent via the server of our hosting provider, which acts as a processor on our behalf. The details are received by us only; we do not pass them on to any other third parties. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures at your request) and Art. 6 para. 1 lit. f GDPR (legitimate interest in answering enquiries).

We delete your details as soon as your request has been dealt with and no statutory retention obligations apply. If a contract is concluded, the statutory retention periods apply to the contract data that then arises.

Contact by email. If you write to us directly by email (for example to info@cyber-sec.it or martin@cyber-sec.it), we process your email address, the content of your message and the time of receipt in order to handle your enquiry. The legal basis is Art. 6 para. 1 lit. b GDPR and, alternatively, Art. 6 para. 1 lit. f GDPR. Storage period and deletion are as described above. Please note that emails may, under certain circumstances, be read by third parties in transit; therefore please do not send us confidential information unencrypted.

Protection against abuse. To protect the form from spam and mail flooding, we use three measures: a field that is invisible to people (honeypot), a measurement of the time taken to fill in the form, and a limit on requests per sender. The content of the invisible field and the fill-in time are used only to check the request in question and are not stored. For the limit, the server stores a pseudonymised hash of your IP address together with the times of your requests. The hash is generated with a random key known only to the server; the IP address itself is not stored in plain text for this purpose. Entries older than one hour are no longer taken into account and are deleted on every further call to the contact form. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in protecting against abuse and in the security of our form).

5. Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich (Friedersdorf, Germany) on servers within the European Union. The hosting provider processes the data arising from visits to the website and from contact requests on our behalf. We have concluded a data processing agreement (DPA) with the hosting provider in accordance with Art. 28 GDPR. We do not transfer data to countries outside the European Union or the European Economic Area.

6. Fonts

This website uses the system fonts available on your device. No requests are made to external font providers (such as Google Fonts).

7. Third-party services

This website does not integrate any third-party services, tracking tools, analytics platforms, or external content delivery networks (CDNs). All resources are served from our own servers.

8. No automated decision-making

No decision based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR takes place on this website.

9. Your rights

Under the GDPR you have the following rights regarding your personal data:

Right of access – You may request a copy of the data we hold about you (Art. 15 GDPR).
Right to rectification – You may request correction of inaccurate data (Art. 16 GDPR).
Right to erasure – You may request deletion of your data under certain conditions (Art. 17 GDPR).
Right to restriction – You may request that we restrict processing of your data (Art. 18 GDPR).
Right to object – You may object to processing based on legitimate interests (Art. 21 GDPR).
Right to data portability – You may request your data in a machine-readable format (Art. 20 GDPR).

To exercise any of these rights, please contact us at info@cyber-sec.it.

Information about your right to object under Art. 21 GDPR: You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data that is based on Art. 6 para. 1 lit. f GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany. You may also contact the supervisory authority of your place of residence or work.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in technology, legislation, or our services. The current version is always available on this page.

Last updated: September 2026