Data privacy

In the following, we inform you about the data processing in the context of the use of our website.

The responsible person within the meaning of the EU General Data Protection Regulation (GDPR) is:

External Data Protection Officer for Satellytes Digital Consulting GmbH TÜV SÜD Akademie GmbH Westendstraße 160 80339 München Email: privacy@satellytes.com

Insofar as the term "data" is used in the text, this refers solely to personal data within the meaning of the GDPR. In addition to the GDPR, the provisions of the BDSG, TTDSG and TMG apply.

1. Data processing when visiting the website

1. Server log data

When using the website, certain information is sent to the server of our website by the browser used on the end device for technical reasons. This data is stored and processed on our server.

  1. We process the data mentioned below for the purpose of providing the accessed content of the website, ensuring the security of the IT infrastructure used, troubleshooting, enabling and simplifying the search on the website and managing cookies. There are no plans to change the purposes.

  2. The processed data is HTTP data: HTTP data is protocol data that is technically generated when the website is called up via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes IP address, type and version of the Internet browser, operating system used, the page accessed, the previously visited page (referrer URL), the language set, date and time of access. HTTP(S) data also accrue on servers of our service providers (e.g. when retrieving third-party content).

  3. The legal basis for the processing is our legitimate interest in the operation of the website and the exchange with communication partners (Art. 6 para. 1 lit. f) DS-GVO and § 25 para. 2 No. 2 TTDSG).

  4. The data is automatically provided by the user's browser.

  5. Recipients of the personal data are IT service providers, which we use within the framework of an agreement for order processing.

  6. IP addresses are anonymized after 24 hours at the latest. Pseudonymous usage data is deleted after six months.

  7. It is not possible to use the website without disclosing personal data. Communication via the website is technically not possible without disclosing data.

2. Third party content

By clicking mapbox map content to retrieve the map, you agree that we allow mapbox to collect data for its own purposes. We do this by embedding map content stored with mapbox on our website. In this integration, mapbox content is displayed in partial areas of a browser window. However, the map content is only actually retrieved from the mapbox server by clicking on it separately.

As soon as you click the button to retrieve the map content, the map content is loaded by mapbox. Technically, what happens then is the same as if you were to switch to mapbox's website via a link: mapbox receives all the information that your browser automatically transmits (including your IP address).

The collection and processing of this data takes place exclusively in the area of responsibility of mapbox Inc, 740 15th Street NW, 5th Floor, District of Columbia 20005, USA. We have no knowledge of further details of the processing of personal data in the area of responsibility of mapbox or of data processing in the USA. We have no influence on the data processing of mapbox.

For information about the processing of personal data by mapbox, please see the mapbox Privacy Policy: https://www.mapbox.com/legal/privacy

2. Data processing when contacting us

Furthermore, personal data is processed when you contact us via the form on the website.

  1. The purpose of the processing is the preparation and implementation of a contractual relationship or other communication with interested parties. A change of the purposes is not planned.

  2. The data processed are name, e-mail address, communication content, and time and technical metadata of the communication.

  3. The legal basis for processing your data is, in the case of contracts with natural persons, the initiation of a contract or the contract itself (Art. 6 (1) (b) DS-GVO), and in the case of contracts with legal persons, our legitimate interest in communicating with the contact persons relevant to the contract (Art. 6 (1) (f) DS-GVO), as well as always legal obligations, in particular tax and commercial law regulations (Art. 6 (1) (c) DS-GVO). In the case of pure communication, the legal basis is our legitimate interest in documenting communication processes (Art. 6 (1) f) DS-GVO).

  4. The contact data is actively provided by yourself. The communication metadata and communication data are collected automatically.

  5. Contact and contract data may be transferred to other service providers, business partners, offices and authorities if this is necessary for the execution of the contract or order. We also use service providers as part of order processing in the provision of services, in particular for the provision, maintenance and care of IT systems. For communication, we use in particular the messenger service Slack of the provider Slack Technologies, 500 Howard St, San Francisco, CA 94105, USA by way of order processing. In the USA, there is not yet a level of data protection comparable to the requirements of the GDPR. It is possible that government agencies access personal data without us or you knowing about it. It is probably not yet possible to enforce your rights in the USA. We have concluded the EU standard contractual clauses (2021/914; module 2) with Slack to protect your data.

  6. The data of contractual partners and service providers are deleted ten calendar years after termination of the contract or order. Inquiries and pure communication are automatically deleted after 6 months.

  7. For interested parties, the specification of data is required. Without providing data, communication is not possible.

3. Data subject rights and further information

  1. We do not use any procedures of automated individual case decisions.

  2. You have the right to request information about all personal data we process about you at any time.

  3. If your personal data is incorrect or incomplete, you have the right to have it corrected and completed.

  4. You may request the deletion of your personal data at any time, unless we are legally obligated or entitled to continue processing your data.

  5. If the legal requirements are met, you may request restriction of the processing of your personal data.

  6. You have the right to object to the processing insofar as the data processing is carried out for the purpose of direct marketing or profiling.

  7. If the processing is carried out on the basis of a balancing of interests, you can object to the processing by stating the reasons arising from your particular situation.

  8. If the data processing is carried out on the basis of your consent or within the framework of a contract, you have a right to the transfer of the data you have provided, provided that this does not affect the rights and freedoms of other persons.

  9. If we process your data on the basis of a declaration of consent, you have the right to revoke this consent at any time with effect for the future. The processing carried out before a revocation remains unaffected by the revocation.

  10. You also have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that data processing has been carried out in breach of applicable law.

Status: April 2024