Privacy Policy

2. Data Processing & Retention

We process personal data of our customers, interested parties, and business partners to provide our IT services and to handle pre-contractual and contractual inquiries (Art. 6 Para. 1 lit. b GDPR).

Purpose of Processing

Software & web development (custom software)
AI consulting & implementation
System administration & IT infrastructure
Project management & technical documentation

Legal Bases

In addition to contract fulfillment, processing takes place to protect legitimate interests (Art. 6 Para. 1 lit. f GDPR), such as ensuring IT security, for internal statistics, or to optimize our engineering processes.

Retention Period

Personal data will be deleted as soon as they are no longer necessary for the purposes for which they were collected. In the context of IT projects, this may extend beyond the completion of the project (e.g., for warranty claims or maintenance contracts). Statutory retention periods (e.g., 6 to 10 years according to commercial and tax law for tax-relevant documents) remain unaffected.

3. Provision of the Website & Hosting

When visiting this website, technical information is automatically collected (e.g., IP address, browser, time).

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Hosting at ALL-INKL

This website is hosted at ALL-INKL.COM (Friedersdorf, Germany). Your data is stored exclusively on German servers. Use is based on our legitimate interest in secure website provision (Art. 6 Para. 1 lit. f GDPR).

4. Analysis Tools & Communication

Reach Measurement with Matomo

We use the privacy-friendly tool Matomo on our own server. No cookies are set and IP addresses are immediately anonymized. We also respect your browser's "Do Not Track" settings.

WhatsApp & Communication

When contacting us via WhatsApp, we use end-to-end encryption. Please note the privacy policy of WhatsApp/Meta.

Google Workspace

For emails, documents (Google Docs), appointment bookings (Google Calendar), and collecting data via forms (Google Forms), we use Google Workspace. We also use integrated AI tools (Google Gemini) for process optimization. We have concluded a data processing agreement with Google based on EU standard contractual clauses and have explicitly set the storage location of the data to the European Union (EU).

GitHub

We use GitHub to manage, version control, and provide the source code of this website. In doing so, technical connection data may be transmitted to GitHub (GitHub, Inc., USA). Use is based on our legitimate interest in efficient and secure software development (Art. 6 Para. 1 lit. f GDPR).

Note on Data Transfer to the USA

We use tools from companies based in the USA (e.g., Google, Meta, Microsoft). When these tools are active, personal data may be transferred to the USA. We point out that since July 2023, the USA has again been considered a safe third country with a level of data protection comparable to the EU standard due to the EU-US Data Privacy Framework (DPF), provided that the US companies are certified according to the DPF. The service providers we use have this certification or we use Standard Contractual Clauses (SCCs).

5. Social Media Presence

We maintain profiles on LinkedIn, Instagram, and GitHub. When visiting these pages, the privacy policies of the respective platform operators apply (LinkedIn Ireland, Meta Platforms Ireland, or GitHub, Inc.).

6. Your Rights as a Data Subject

You have the following rights regarding your personal data:

Access

Rectification

Erasure

Restriction

Data Portability

Objection

Withdrawal of your consent: Many data processing operations (such as the use of WhatsApp) are only possible with your express consent. You can withdraw consent you have already given at any time. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with the supervisory authority: In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a data protection supervisory authority. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

To exercise your rights, simply send an email to info@huesken.it.

1. Who is responsible for data processing?