Privacy policy

The controller responsible for processing personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

Represented by Christian Schleicher and Iryna Schwindt. Further details can be found in our imprint.

Hosting

This website is hosted by ALL‑INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit our website, the host processes the data technically required for this on our behalf, in particular your IP address.

The legal basis is our legitimate interest in providing our website securely, reliably and efficiently (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with the host under Art. 28 GDPR, which obliges it to process the data only on our instructions and in compliance with the GDPR. More information: privacy information of ALL‑INKL.COM (opens in a new tab) (in German).

Server log files

Each time a page is requested, the web server automatically records information transmitted by your browser in log files:

• IP address of the requesting device
• date and time of the request
• page or file requested and amount of data transferred
• HTTP status code
• referrer URL (the previously visited page)
• browser type and version, operating system

We need this data to deliver the website, to ensure its stability and security, and to fend off attacks (Art. 6(1)(f) GDPR). It is not combined with other data sources or analysed for marketing purposes. Log files are deleted automatically once the host’s short retention period has expired, unless they are needed to investigate a specific security incident.

Encryption

For security reasons, this website uses TLS encryption, recognisable by “https://” in your browser’s address bar. Data you transmit to us cannot be read by third parties in transit.

We do not use cookies for analytics, tracking or advertising, which is why there is no cookie banner. Only the following is stored on your device:

These entries do not identify you, and local storage is never transmitted to our server. The legal basis for storing and reading them is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), as they are strictly necessary for a service you have explicitly requested; any further processing is based on Art. 6(1)(f) GDPR. You can delete cookies and local storage at any time in your browser settings.

Fonts (Inter, IBM Plex Mono) and icons (Material Symbols) are hosted on our own server. Visiting this website does not establish a connection to Google or any other third party. We do not use embedded videos, maps, social media plug‑ins or content delivery networks.

Our website contains links to external sites, such as LinkedIn or the TÜV Association. Data is only transmitted to these providers when you click such a link; from then on, the provider’s own privacy policy applies.

If you contact us by email, we process the data you provide (for example name, email address, company and the content of your enquiry) to handle your request and answer follow‑up questions.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We delete the data once your request has been dealt with conclusively and no statutory retention obligations apply; business correspondence is generally retained for six years in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).

You are not obliged to provide us with any data, but without your contact details we cannot respond to your enquiry. Please note that unencrypted emails can in principle be read by third parties in transit. For confidential information – such as details of security vulnerabilities – we are happy to agree an encrypted channel with you.

Personal data we receive in the course of an engagement – such as contact details of your staff or information from workshops, assessments and security tests – is processed solely to perform the respective contract (Art. 6(1)(b) GDPR) or on the basis of our legitimate interest in communicating with your employees (Art. 6(1)(f) GDPR). Where we process personal data on your behalf, we conclude a data processing agreement under Art. 28 GDPR beforehand. On request, we also sign a non‑disclosure agreement.

Your data is only received by parties that need it for the purposes described above: our hosting provider as a processor and – where required by law – public authorities, such as tax authorities. We do not sell data or pass it on for advertising purposes. No data is transferred to countries outside the European Union or the European Economic Area in connection with this website.

Unless a more specific period is stated in this policy, we store personal data only for as long as necessary for the respective purpose. Statutory retention periods – in particular under commercial and tax law, usually six to ten years – remain unaffected; in that case we restrict processing and delete the data once the period has expired. We do not use automated decision‑making, including profiling (Art. 22 GDPR).

You have the following rights regarding your personal data:

• Access to the data we process (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to hello@dignity.info is all it takes to exercise your rights.

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Last updated: October 2026. We update this privacy policy whenever our website, our services or the legal situation change. The version published here applies. In case of doubt, the German version prevails.