Your data.Privacywithout tricks.

The controller under the GDPR is SEKurity GmbH, Breite Straße 22, 40213 Düsseldorf, Germany, represented by its managing directors Alexander Sturz, Lukas Eder and Alexander Küppers. For any data protection matter please contact datenschutz [at] sekurity [dot] gmbh. We are not legally required to appoint a data protection officer; this address is our dedicated channel for all privacy related enquiries.

When you visit this site our hosting provider processes technically necessary access data: IP address, user agent, timestamp and the requested resource. Such data is typically retained for up to 30 days and is used solely to keep the site running securely and free of abuse, in particular to detect and mitigate attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest arises from protecting our infrastructure.

If you use our contact form we process the data you provide: company, name, email address, phone number, your message and the service type you selected. We use this data only to handle your request and, where applicable, to prepare a first call. The legal basis is Art. 6 (1) (b) GDPR (steps preceding a contract) or Art. 6 (1) (f) GDPR (legitimate interest in handling enquiries). Delivery is performed via the Microsoft Graph API in the Microsoft 365 EU region. Microsoft Ireland Operations Ltd. processes this data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

This website is hosted with Vercel Inc. Delivery is typically served from an EU region; we have entered into a Data Processing Addendum with Vercel as an Art. 28 GDPR processing agreement. To our knowledge Vercel Inc. is certified under the EU-US Data Privacy Framework, which is intended to provide a lawful basis for transfers to the United States. Where individual requests are technically routed via locations outside the EU, this is limited to what is necessary to deliver the site.

We use Vercel Analytics and Vercel Speed Insights to evaluate page views and performance in aggregate. Both are cookieless and anonymised; they do not build profiles and do not recognise users across devices. We do not use third-party trackers. These scripts are only loaded after you explicitly consent via the consent banner. The legal basis is Art. 6 (1)(a) GDPR. Your decision is stored locally in your browser; you can withdraw it at any time via the “Cookie settings” link in the footer, with effect for the future. Vercel Inc. is, to our knowledge, certified under the EU-US Data Privacy Framework.

Server logs are typically deleted after no more than 30 days. Data from the contact form is stored for the duration of handling your request and typically for up to six months thereafter to allow for follow-up questions. Where statutory retention obligations apply (for example under the German Commercial Code or tax law), we retain the corresponding data for the legally required period and restrict it from further processing until then.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on a legitimate interest (Art. 21). An informal email to datenschutz [at] sekurity [dot] gmbh is enough. Independently, you have the right to lodge a complaint with a supervisory authority — for us that is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

All traffic between your browser and our servers is encrypted using TLS. This applies in particular to anything you enter into the contact form. Please use an up-to-date browser to ensure transport encryption works reliably.