Controller
This privacy policy applies to digital-holding.com, including the Digital Holding Club and AdlerDoo offers. Further details are in our legal notice.
Overview
| Purpose | Data | Legal basis (GDPR) | Storage period |
|---|---|---|---|
| Providing the website | IP address, time, page, browser | Art. 6 (1) (f) | Only as long as needed for these purposes |
| Contact form and email | Name, email, phone, company, message | Art. 6 (1) (b) and (f) | Until the enquiry is closed; contract data per statutory periods |
| Customer account and orders | Master and contract data, invoices | Art. 6 (1) (b) and (c) | Contract term plus up to 10 years (commercial and tax law) |
| Technically necessary cookies | Session ID, language | § 25 (2) TDDDG, Art. 6 (1) (f) | Session or up to 1 year |
Hosting and server log files
This website runs on Odoo and is hosted on servers of our own hosting service WAWIHOST in data centres in Germany. When you visit the site, your browser automatically transmits technical data (IP address, date and time, page requested, referrer, browser and operating system). We use this data to deliver the website, ensure security and analyse faults.
Legal basis is our legitimate interest in a secure and stable website (Art. 6 (1) (f) GDPR). Log data is only stored as long as necessary for these purposes and is then deleted automatically, unless it is needed to clarify a security incident.
Contact form, email and phone
If you contact us via the form, by email or by phone, we process your details (e.g. name, email address, phone number, company, message) to handle your enquiry, for example to arrange a demo or prepare an offer. Enquiries are stored in our Odoo system (customer and ticket management).
Legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract, otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). We delete the data once the enquiry has been dealt with, unless statutory retention obligations apply or a contract results from it.
We use Microsoft 365 (Microsoft Ireland Operations Ltd.) for email communication. Microsoft processes data on our behalf under a data processing agreement; transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses.
Customer account, orders and contracts
If you open a customer account, book a package or conclude a contract with us, we process the data required for this (company, contact person, address, email, VAT ID, contract and billing data, support tickets). Legal basis is Art. 6 (1) (b) GDPR; for invoices and accounting records Art. 6 (1) (c) GDPR in conjunction with commercial and tax law retention obligations of up to 10 years.
For payments we pass the necessary data to the payment service provider you choose during the order process. If we process personal data on your behalf in AdlerDoo or Odoo (e.g. your customers’ order data), we conclude a separate data processing agreement pursuant to Art. 28 GDPR.
Cookies
We only use technically necessary cookies, for example to keep your session and remember your language. No consent is required for this (§ 25 (2) No. 2 TDDDG). We do not use analytics, advertising or tracking cookies. Details are in our cookie information.
Fonts and third-party content
The fonts used on this website are loaded from our own server. No data is transmitted to font providers such as Google Fonts. We do not embed maps, videos or social media plug-ins from third parties.
Recipients and processors
We only pass on personal data where this is necessary: to IT and hosting service providers, payment service providers, tax advisors and auditors, and to authorities where we are legally obliged to do so. Service providers who process data on our behalf are bound by a data processing agreement (Art. 28 GDPR). Data is only transferred to countries outside the EU/EEA if the requirements of Art. 44 et seq. GDPR are met, for example on the basis of an adequacy decision or EU standard contractual clauses.
We do not sell personal data and do not use it for automated decision-making within the meaning of Art. 22 GDPR.
Your rights
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you may object at any time for reasons arising from your particular situation. You can object to direct marketing at any time without giving reasons.
To exercise your rights, an informal email to info@tecsee.de is sufficient.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
Security and changes
This website uses TLS encryption. We protect our systems with technical and organisational measures, which we review regularly.
We adapt this privacy policy when our website or legal requirements change. The version published here applies.