Privacy Policy

1. Overview

This website is designed to be privacy-friendly. In concrete terms:

• No cookies requiring consent are set. A cookie banner is therefore not required.
• No analytics, tracking or advertising services are used.
• Fonts are served locally from this server. No external font service is contacted.
• No third-party content is embedded – no maps, no videos, no social media plugins, no chat or booking widgets.
• Personal data is processed only if you actively contact us, and in the form of technical server logs.

2. Controller

The controller for data processing on this website is:

Company

ITSB Deutschland UG (haftungsbeschränkt)

Address

Karlsplatz 3, 80335 München, Germany

Represented by

René Eck, Managing Director

Phone

+49 89 416127440

Email for privacy matters

datenschutz@itsb-deutschland.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

3. Hosting and server logs

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. A data processing agreement pursuant to Article 28 GDPR is in place with the provider.

Server log files

When this website is accessed, the hosting provider automatically records information transmitted by your browser in server log files:

• requested address (URL) and access status
• date and time of access
• volume of data transferred
• browser type and version, and operating system used
• referrer URL, where transmitted
• IP address

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the technically faultless operation of the website, the security of our systems and the prevention of attacks. This data is not combined with other data sources. Log data is deleted automatically as soon as it is no longer required for operating the website, and in any event after no more than 30 days. Data required to investigate a specific security incident is retained until that investigation is concluded and deleted thereafter.

4. Encrypted transmission

This website uses encrypted transmission via TLS only (indicated by “https://” in the address bar). Requests over unencrypted HTTP are redirected automatically to the encrypted connection. Data you transmit to us therefore cannot be read by third parties.

5. Contact form

If you send us an enquiry using the contact form, we process the details you enter in order to handle that enquiry. Only the information required for this purpose is collected:

• Name (required)
• Email address (required)
• Subject area (required)
• Message (required)
• Company (voluntary)
• Phone number (voluntary)

The legal bases are Article 6(1)(a) GDPR (your consent, given expressly when you submit the form) and Article 6(1)(b) GDPR insofar as your enquiry is directed at entering into a contract. You may withdraw your consent at any time; the lawfulness of processing carried out before withdrawal remains unaffected.

The data is not stored in a database belonging to this website but transmitted directly as an email to our mailbox. We retain it until your enquiry has been conclusively dealt with, and thereafter only for as long as statutory retention obligations apply or the data is required to perform a contractual relationship. It is then deleted.

Delivery of the form message

The message is delivered to our mailbox via the mail server of the hosting provider named in section 3. No further service providers are involved. In particular, your details are not passed to newsletter, marketing or CRM services and are not added to any mailing list.

Protection against misuse

To prevent automated bulk submissions (spam), we limit the number of submissions per sender within a time window. For this purpose your IP address is not stored in clear text but held solely as a non-reversible hash value in memory for the duration of the time window, and then discarded. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the prevention of misuse. No third-party captcha or bot detection services are used.

6. No cookies, no tracking

This website sets no cookies and uses no comparable techniques for storing information on your device that would require consent under § 25(1) TDDDG. Your chosen language version is determined solely by the address you visit (/de/ or /en/) and is not stored on your device.

No web analytics take place. There is no reach measurement, no conversion tracking, no heatmaps, no session recording and no profiling.

7. Links to other websites

This website links to other ITSB offerings, in particular itsb-deutschland.de and itsb-os.app, as well as to third-party websites. Links are implemented as plain hyperlinks; no data is transmitted to the destination in advance. The privacy policies of the linked websites apply to processing there. Those policies differ from this one and may in particular involve cookies and analytics services.

8. Recipients and transfers to third countries

Your data is disclosed only to the hosting provider named in section 3, which also operates the mail server, and only to the extent necessary for the respective purpose. No further processors are involved. No transfers to countries outside the European Union take place.

Your data is not sold and not passed on to third parties for advertising purposes.

9. Your rights

You have the right at any time to:

• access the data processed about you (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• object to processing based on legitimate interests (Article 21 GDPR)
• withdraw consent with effect for the future (Article 7(3) GDPR)

To exercise your rights, a message to datenschutz@itsb-deutschland.de is sufficient. This incurs no cost to you.

10. Right to lodge a complaint

Independently of the above, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The authority responsible for us is:

Supervisory authority

Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 27, 91522 Ansbach, Germany

You may also contact the supervisory authority of your habitual residence or place of work.

11. No automated decision-making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place on this website.

12. Changes to this policy

We update this privacy policy when the processing carried out on this website changes – for example when new functionality is introduced. The version published here applies in each case. The date of the current version is shown at the end of this page.

Last updated: October 2026