Privacy Policy

At a glance

General information

The following information will provide you with an overview of what happens with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you.

Who is the responsible party?

The data on this website is processed by the operator of the website. Contact information is provided in the section “Information about the responsible party” in this Privacy Policy.

How do we record your data?

We collect data when you share it with us — for instance, in our contact form. Other data is recorded automatically or with your consent by our IT systems and is primarily technical (browser, operating system, time of access).

What do we use your data for?

A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyze your usage patterns.

What rights do you have?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without charge. You also have the right to demand rectification or eradication, and to log a complaint with the competent supervisory agency.

Hosting

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Use is based on Art. 6(1)(f) GDPR. We have concluded a data processing agreement (DPA).

External hosting

This website is hosted externally by Odoo S.A., Chaussée de Namur 40, 1367 Grand Rosière, Belgium. Personal data may include IP addresses, contact requests, metadata, contract information, contact information, and names.

Mandatory information

Information about the responsible party

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies.

Data transfer to non-EU countries

We use tools of companies domiciled in the United States or other non-secure non-EU countries. A data protection level comparable to the EU cannot be guaranteed in those countries.

Revocation of your consent

Many data processing transactions are possible only subject to your express consent. You may revoke consent already given at any time.

SSL / TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the lock icon in your browser.

Recording of data

Cookies

Our website uses “cookies” — small data packages stored on your device. Required cookies are stored on the basis of Art. 6(1)(f) GDPR. Any other cookies are only stored with your consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG).

Server log files

The provider automatically collects browser type and version, operating system, referrer URL, hostname, time of request, and IP address. This data is not merged with other data sources.

Contact form

If you submit inquiries via our contact form, the information provided will be stored to handle your inquiry. We will not share this information without your consent.

Communication via WhatsApp

We use WhatsApp Business (WhatsApp Ireland Limited). Communication is end-to-end encrypted; WhatsApp does, however, gain access to metadata created during the communication process.

Newsletter

To subscribe to our newsletter, we need an email address and verification data. Processing is exclusively based on your consent (Art. 6(1)(a) GDPR). You may unsubscribe at any time via the link in the newsletter.

eCommerce

We collect, process, and use personal customer and contract data to establish, structure, and modify our contractual relationships. The legal basis for these processes is Art. 6(1)(b) GDPR.

Conference tools

We use Microsoft Teams (Microsoft Ireland Operations Limited) and 3CX (3CX Ltd., Cyprus). The conferencing tools collect all information you provide to use them, plus technical metadata.

Social media

We maintain profiles on LinkedIn (linkedin.com/company/sedisto) and YouTube (youtube.com/@sedisto). When you visit our social media pages, processing operations are triggered by the respective providers — please refer to their privacy policies for details.