secunet customer survey

Data Protection statement 

As one of the leading German suppliers of high-quality IT security, secunet Security Networks AG treats data security and data protection as a top priority. This requirement relates to all customers, suppliers and employees, and applies for all of our fields of activity and working processes.

Controller

The controller is defined by the General Data Protection Regulation and other data protection laws applicable in the member states of the European Union is:

     secunet Security Networks AG
     Kurfuerstenstraße 58
     45138 Essen, Germany

Management Board: Axel Deininger (CEO), Torsten Henn, Dr. Kai Martius, Jessica Nospers

     Tel.: +49 (0) 201 5454-0
     Fax: +49 (0) 201 5454-1000
     Email: info(at)secunet.com

Data protection is extremely important to the management team at secunet Security Networks AG. For this reason, we explain in this data protection statement how we protect your privacy when you share your personal data with us via this website.

You can contact the data protection officer at secunet Security Networks AG using the following contact details:

     Data Protection Officer
     secunet Security Networks AG
     Kurfuerstenstraße 58
     45138 Essen, Germany

     Email: datenschutz(at)secunet.com

Personal data
The definitions used, such as "personal data" or their "processing", correspond to the definitions of Article 4 of the General Data protection Regulation (GDPR). Accordingly, the term personal data includes all information relating to an identified or identifiable natural person.

Personal data of minors
The customer survey is not directed at any minors. Personal data of minors will not be collected.
 

Collection and processing of personal data
Within the scope of the customer survey, we exclusively process the following personal data:

• Organization
• Salutation
• First name, last name
• E-mail business
• Data that you provide by participating in the survey yourself and voluntarily will be processed anonymously at all times.

The categories of persons affected by the data processing include:

• The persons participating in the customer survey (business partners and customers of secunet as well as the respective contact persons).

For the collection and analysis of the data, we work with the independent external service provider Rogator AG (Emmericher Str. 17, 90411 Nuremberg, Germany) with whom we have concluded an agreement on commissioned processing in accordance with Art. 28 DSGVO. When the questionnaire pages are called up and forwarded by the data processing systems of our service provider, technical data is automatically recorded in log files (e.g. shortened IP address, time, files called up, information on browser/operating system, etc.). Content and technical data types are stored separately and are not linked.

The technical data is collected to ensure error-free provision and functionality of the services on a permanent basis and to be able to react appropriately in the event of criminal attacks. No user profiles in any form are created with it. The log files are automatically deleted after 90 days.

Purpose and legal basis of data processing
We collect, process and use your personal data for the following purpose: We survey the satisfaction of our customers in order to improve the service quality of secunet Security Networks AG.
 

We process your personal data in compliance with the relevant data protection regulations. This means that your data will only be processed if we have legal permission to do so. Data processing is based on our legitimate interests. Our legitimate interest is to determine customer satisfaction. The legal basis for processing is thus Art. 6 (1) lit. f DSGVO in conjunction with Section 7 (3) UWG.

The data is stored for these purposes in accordance with applicable law and then deleted again.

Categories of recipients of personal data
In order to fulfill the purpose of processing, the customer survey is carried out by our service provider Rogator AG exclusively on our behalf and in accordance with our instructions. All employees of secunet and the external service provider who have access to and/or process personal data are obliged to treat this data confidentially. Appropriate legal precautions as well as corresponding technical and organizational measures have been taken to ensure the protection of personal data in accordance with the relevant legal regulations.
 

In addition, data will only be passed on within the framework of legal requirements. Your personal data will not be disclosed to third parties unless you have consented to such disclosure or such disclosure is permitted under applicable law.

Security measures

secunet Security Networks AG uses extensive technical and organizational security measures (TOMs) to ensure that the personal data you make available to us is not compromised by accidental or intentional manipulation, loss, destruction or disclosure to unauthorized third parties. Our security measures are continuously improved and adapted according to the state of the art.

The security measures include in particular the encrypted transfer of data between your browser and our server.

Please note that there may be security vulnerabilities when transferring data online (such as when communicating by email). It is not possible to protect data completely against access by third parties.

Consent Manager

We use a Consent Manager to optimally register and manage the consent obtained from our users in connection with cookies and other tracking mechanisms. Among other things, data such as the IP address, consent status, but also device information is collected. In this context, so-called session cookies are used, text files that your browser automatically creates and stores on your terminal device (PC, laptop, tablet, smartphone, etc.) when you visit our website.

The legal basis for the use of the Consent Manager is Art.6 para.1 lit. f DSGVO, as we have a legitimate interest in the documentation and collection of your consent to the extent you wish.

Etracker/Web analysis services

We use an analysis tool to ensure that our website is designed to meet the needs of our users and is continuously optimized, and to adapt to technical conditions on the part of our users. Information about the user behavior of our websites as well as technical details are collected, including IP address, browser information and usage data.

On this website, data is processed for marketing and optimization purposes using technologies from etracker GmbH (www.etracker.com), based in Germany.

The data processing is carried out on the basis of the legal provisions of Art. 6 para.1 lit f (legitimate interest) of the EU General Data Protection Regulation. Our legitimate interest in processing personal data is the optimization of our online offer and our web presence. To protect privacy, etracker pseudonymizes data such as the IP address, login or device identifiers as early as possible so that a reference to a specific person can no longer be established. No other use, combination with other data from etracker or disclosure to third parties takes place.

You can object to the aforementioned data processing at any time by clicking on the slider. The objection has no adverse consequences. If no slider is displayed, the data collection is already prevented by other blocking measures:

Your rights as a data subject

In the context of the processing of your personal data, you are also entitled to certain rights. More detailed information can be found in the relevant provisions of the GDPR and the following description of your rights. As a data subject, you can contact our data protection officer named above with an informal notification in order to exercise your legal rights under the GDPR. If the legal requirements are met, you may be entitled to the following rights:

Right to information and rectification
You have the right to receive information from us (Art. 15 DSGVO) about which of your personal data we process. If this information is no longer correct, you can demand that we correct the data (Art. 16 DSGVO), and if the information is incomplete, that we complete it (Art. 16 DSGVO).

Right to be forgotten (deletion)
You have the right to request the deletion of your personal data (Art.15 DSGVO).

Right to restriction of processing
You have the right to request the restriction of your personal data (Art.18 DSGVO).

Right to data portability
You have the right to obtain, upon request, personal data that you have given us for processing and that is processed by us by automated means, in a transferable and machine-readable format (Art.20 DSGVO).

Right to withdraw your consent
You have the right to revoke your consent at any time provided that the processing is based on your consent given to us. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right to complain to the supervisory authority
You have the right to complain to the competent data protection officer or to the competent supervisory authority (Art. 77 DSGVO).
 

Right to object
You have the right to object to processing (Art. 21(1) DSGVO). We will then no longer process your personal data for these purposes.

If you object, we will no longer process your personal data for the above-mentioned purposes, unless we can demonstrate compelling legitimate grounds for processing your data that override your interests, rights and freedoms, or because your personal data are used to assert, exercise or defend legal claims. The objection does not prevent the lawfulness of the processing carried out until the objection. We will restrict the processing of your data until the review of your objection has been completed.

>> Your objection may be made informally and should be addressed to: kundenbefragung@secunet.com

Changes to the data protection statement

We reserve the right to change the privacy policy in order to adapt it to changed legal situations, or in case of changes to the services as well as data processing.

Effective date: 13.10.2022