secunet customer survey
Data Protection statement
Data protection and data security are the top priority for secunet Group. For this reason, we would like to explain to you in this privacy policy which of your data we process as part of the customer survey and how we protect your privacy.
Controller
The controller is defined by the General Data Protection Regulation and other data protection laws applicable in the member states of the European Union is:
secunet Security Networks AG
Kurfuerstenstraße 58
45138 Essen, Germany
Management Board: Marc-Julian Siewert (CEO), Torsten Henn, Dr. Kai Martius, Jessica Nospers
Phone: +49 (0) 201 5454-0
Fax: +49 (0) 201 5454-1000
Email: info(at)secunet.com
stashcat GmbH
Schiffgraben 47
30175 Hannover
Management: Christopher Bick, Felix Ferchland
secunet International GmbH
Kurfürstenstraße 58
45138 Essen
Management: Christian Jüttner
SysEleven GmbH
Boxhagener Straße 80
10245 Berlin
Management: Andreas Hermann, Jens Ihlenfeld, Jens Plogsties, Andreas Rückriegel
For secunet Security Networks AG, secunet International GmbH & Co. KG and stahscat GmbH, the data protection officer can be contacted at:
secunet Security Networks AG
Kurfürstenstrasse 58
45138 Essen
E-mail: datenschutz@secunet.com
You can reach the data protection officer for Syseleven GmbH at:
datenschutz@syseleven.de
Personal data
The definitions used, such as "personal data" or their "processing", correspond to the definitions of Article 4 of the General Data protection Regulation (GDPR). Accordingly, the term personal data includes all information relating to an identified or identifiable natural person.
Personal data of minors
The customer survey is not directed at any minors. Personal data of minors will not be collected.
Collection and processing of personal data
Within the scope of the customer survey, we exclusively process the following personal data:
- Organization
- Salutation
- First name, last name
- E-mail business
- Data that you provide by participating in the survey yourself and voluntarily
The categories of persons affected by the data processing include:
- The persons participating in the customer survey (business partners and customers of the secunet group as well as the respective contact persons).
The respective companies of the secunet Group have concluded an agreement on joint responsibility in accordance with Art. 26 GDPR for the implementation of the customer survey.
For the collection and analysis of the data, we work with the independent external service provider Rogator AG (Emmericher Str. 17, 90411 Nuremberg, Germany) with whom we have concluded an agreement on commissioned processing in accordance with Art. 28 DSGVO. When the questionnaire pages are called up and forwarded by the data processing systems of our service provider, technical data is automatically recorded in log files (e.g. shortened IP address, time, files called up, information on browser/operating system, etc.). Content and technical data types are stored separately and are not linked.
The technical data is collected to ensure error-free provision and functionality of the services on a permanent basis and to be able to react appropriately in the event of criminal attacks. No user profiles in any form are created with it. The log files are automatically deleted after 90 days.
Purpose and legal basis of data processing
We collect, process and use your personal data for the following purpose: We survey the satisfaction of our customers in order to improve the service quality of the respective secunet Group company.
We process your personal data in compliance with the relevant data protection regulations. This means that your data will only be processed if we have legal permission to do so. Data processing is based on our legitimate interests. Our legitimate interest is to determine customer satisfaction. The legal basis for processing is thus Art. 6 (1) lit. f DSGVO in conjunction with Section 7 (3) UWG.
The data is stored for these purposes in accordance with applicable law and then deleted again.
Categories of recipients of personal data
In order to fulfill the purpose of processing, the customer survey is carried out by our service provider Rogator AG exclusively on our behalf and in accordance with our instructions. All employees of secunet and the external service provider who have access to and/or process personal data are obliged to treat this data confidentially. Appropriate legal precautions as well as corresponding technical and organizational measures have been taken to ensure the protection of personal data in accordance with the relevant legal regulations.
In addition, data will only be passed on within the framework of legal requirements. Your personal data will not be disclosed to third parties unless you have consented to such disclosure or such disclosure is permitted under applicable law.
Security measures
secunet Security Networks AG uses extensive technical and organizational security measures (TOMs) to ensure that the personal data you make available to us is not compromised by accidental or intentional manipulation, loss, destruction or disclosure to unauthorized third parties. Our security measures are continuously improved and adapted according to the state of the art.
The security measures include in particular the encrypted transfer of data between your browser and our server.
Please note that there may be security vulnerabilities when transferring data online (such as when communicating by email). It is not possible to protect data completely against access by third parties.
Log files
When you visit our website, the browser you are using automatically transmits the following information to our website server, which is temporarily stored in log files:
- IP address
- URL requested
- Date and time of the request
- Access methods/functions requested by the browser
- Operating system and browser type or browser settings
We process this data for the following purposes:
- Ensuring the error-free operation of the website
- Tracking unauthorized access attempts
- Statistical evaluations
The legal basis for this is Article 6(1)(f) GDPR. Our legitimate interest is the error-free and secure provision of our website.
We delete this data after 7 days.
Etracker/Web analysis services
We collect statistical data of your visit to our website. For this purpose, we use a service provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg. Etracker processes your personal data on our behalf. We process the following personal data from you:
- IP address
- Scroll behavior
- Length of stay
- Interactions with certain elements
This data is summarized and statistically evaluated by etracker. We only see the data of all our visitors on a given day, not the data of individual visitors. This data is not merged with other data or passed on to third parties.
We process this data for the following purposes::
- Improvement of the design and functionality of the website
The legal basis for this is Article 6(1)(f) GDPR. Our legitimate interest is to make our information offering attractive.
If you give us your consent, we will store a cookie in your browser so that we can recognize you. We then create a profile with the data listed above and can thus identify trends. The legal basis for this is Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
If you have not given us your consent, we will only process your personal data until we have aggregated your data for our statistics. This is usually the case on the day following your visit to our website.
If you have given us your consent, we will process your data for 13 months. If you withdraw your consent, we will delete your data immediately, unless it is subject to statutory retention obligations.
You can object to the aforementioned data processing at any time by clicking on the slider. The objection has no adverse consequences. If no slider is displayed, the data collection is already prevented by other blocking measures:
Your rights as a data subject
In the context of the processing of your personal data, you are also entitled to certain rights. More detailed information can be found in the relevant provisions of the GDPR and the following description of your rights. As a data subject, you can contact our data protection officer named above with an informal notification in order to exercise your legal rights under the GDPR. If the legal requirements are met, you may be entitled to the following rights:
Right to information and rectification
You have the right to receive information from us (Art. 15 DSGVO) about which of your personal data we process. If this information is no longer correct, you can demand that we correct the data (Art. 16 DSGVO), and if the information is incomplete, that we complete it (Art. 16 DSGVO).
Right to be forgotten (deletion)
You have the right to request the deletion of your personal data (Art.15 DSGVO).
Right to restriction of processing
You have the right to request the restriction of your personal data (Art.18 DSGVO).
Right to data portability
You have the right to obtain, upon request, personal data that you have given us for processing and that is processed by us by automated means, in a transferable and machine-readable format (Art.20 DSGVO).
Right to withdraw your consent
You have the right to revoke your consent at any time provided that the processing is based on your consent given to us. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Right to complain to the supervisory authority
You have the right to complain to the competent data protection officer or to the competent supervisory authority (Art. 77 DSGVO).
Right to object
You have the right to object to processing (Art. 21(1) DSGVO). We will then no longer process your personal data for these purposes.
If you object, we will no longer process your personal data for the above-mentioned purposes, unless we can demonstrate compelling legitimate grounds for processing your data that override your interests, rights and freedoms, or because your personal data are used to assert, exercise or defend legal claims. The objection does not prevent the lawfulness of the processing carried out until the objection. We will restrict the processing of your data until the review of your objection has been completed.
>> Your objection may be made informally and should be addressed to:
kundenbefragung@secunet.com / customers of secunet Security Networks AG and secunet International GmbH & Co. KG
kundenbefragung@stashcat.com / customers of stashcat GmbH
kundenbefragung@syseleven.de / customers of SysEleven GmbH
Changes to the data protection statement
We reserve the right to change the privacy policy in order to adapt it to changed legal situations, or in case of changes to the services as well as data processing.
Effective date: 23.10.2024
