1. Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
Lakoni & Thiel GbR
cinco.systems
Wilhelmstr. 18
79379 Müllheim im Markgräflerland
Germany
Phone: +49 7631 9753997
Email: office[at]cinco-systems.de
2. General information
We take the protection of your personal data seriously and treat it confidentially and in accordance with statutory data protection regulations. Our website can be used without providing any personal data. It does not use cookies, analytics or tracking services, and does not embed any third-party content (such as social media plugins, videos, or externally hosted fonts).
3. Hosting and server log files
Our website is hosted by an external service provider (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany). Processing takes place on servers located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.
When you access our website, the hosting provider automatically collects information in so-called server log files, which your browser transmits. This includes:
- browser type and version
- operating system used
- referrer URL (the previously visited page)
- pages accessed on our website
- date and time of access
- IP address of the accessing device
This data is not merged with other data sources and serves solely to ensure the reliable operation of the website, improve its stability, and defend against attacks. The legal basis is our legitimate interest in the technically error-free presentation and security of our website (Art. 6 (1) (f) GDPR). Log files are automatically deleted after a short period, unless security-relevant incidents require longer retention.
4. Contacting us
If you contact us by email or telephone, the data you provide (e.g. name, contact details, content of your enquiry) will be stored for the purpose of processing your enquiry and for possible follow-up questions. We do not pass on this data without your consent.
The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR).
The data remains with us until the purpose of storage no longer applies or you request its deletion; statutory retention periods (in particular under commercial and tax law) remain unaffected.
5. Event registration
If you register for one of our events (e.g. workshops, seminars, online formats), we process the data required for this purpose (e.g. name, email address, and where applicable organisation and billing details) in order to organise and conduct the event and, where relevant, for invoicing.
The legal basis is Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures). Data is only passed on to third parties where necessary for conducting the event (e.g. a venue or a video conferencing provider); in such cases, we will inform you as part of the registration process.
Data is deleted after the event has concluded, unless statutory retention obligations apply (in particular commercial and tax law retention periods of up to ten years for invoicing data).
6. Newsletter
If you subscribe to our newsletter, we use your email address exclusively to send you the newsletter containing information about our topics, offers and events.
Registration uses a double opt-in procedure: after signing up, you will receive an email asking you to confirm your subscription. Your address is only added to the mailing list once you have confirmed. To document your consent, the time of registration and confirmation as well as your IP address are stored.
The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe at any time via the unsubscribe link in each newsletter or by informally notifying us. After unsubscribing, your email address is deleted from the mailing list.
7. Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of processing no longer applies. If you assert a legitimate request for deletion or withdraw consent to data processing, your data will be deleted unless statutory retention obligations apply.
8. Your rights
Within the scope of the applicable statutory provisions, you have the right at any time to:
- information about your personal data stored by us, its origin, recipients and the purpose of processing (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure of your data (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on Art. 6 (1) (e) or (f) GDPR (Art. 21 GDPR)
You may withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR). To exercise these rights, an informal message to the contact details above is sufficient.
9. Right to lodge a complaint with a supervisory authority
In the event of breaches of data protection law, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
10. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar.
11. Automated decision-making
No automated decision-making, including profiling, takes place.