I. General Information on Data Processing

This privacy policy informs you in accordance with Art. 13 GDPR about the processing of personal data when using our website.

Controller

SoftwareheldenGmbH
Eichwiesenring 9
70567 Stuttgart, Germany
Phone: 0711 68684000
kontakt@softwarehelden.de

Data Protection Officer

OBSECOM GmbH
Königstraße 40
70173 Stuttgart, Germany
Phone: 0711 460502540
datenschutz@obsecom.de

II. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing     (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 para. 3 GDPR)
• Right to lodge a complaint with a supervisory authority     (Art. 77 GDPR)

III. Data Processing on Our Website

1. Hosting

Our website is hosted by an external service provider (processor). The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient provision of our website).

2. Access Data and Log Files

When visiting our website, the following data is processed:

• IP address
• Date and time of request
• Browser type and version
• Referrer URL
• Pages visited

Legal basis: Art. 6 para. 1 lit. f GDPR
Retention period: max. 6 months

3. Contact

If you contact us by email, we process your data to handle your request.

• Legal basis: Art. 6 para. 1 lit. b GDPR
• Retention period: Until the request is fully resolved, at the latest after 6 months unless statutory retention periods apply

4. Job Applications

We process application documents for the purpose of deciding on the establishment of an employment relationship.

• Legal basis: Art. 6 para. 1 lit. b GDPR, § 26 BDSG
• Retention period: 6 months after the application process ends; with consent, up to 2 years

IV. Cookies and Consent Management

We use cookies to enhance the usability of our website. Necessary cookies are essential for its operation. Other cookies (e.g., for analytics or marketing) are only used with your consent under Art. 6 para. 1 lit. a GDPR. When visiting our website, a consent banner is displayed, allowing you to adjust your cookie settings or withdraw consent at any time.

V. Google Services

We use services from Google LLC. Data may be transferred to the USA. Google is certified under the EU-U.S. Data Privacy Framework.

VI. Data Transfers to Third Countries

Data transfers outside the EU/EEA only take place based on an adequacy decision or appropriate safeguards under Art. 44 ff. GDPR.

VII. Deletion of Data

Personal data is deleted as soon as it is no longer required for the stated purposes and if no legal retention obligations apply. Commercial and tax-related retention periods can be up to 10 years.