Liability for content

As a service provider, we are responsible for our own content on these pages in accordance with general legislation pursuant to Section 7 (1) of the German Telemedia Act (TMG). According to §§ 8 to 10 TMG, however, we are not obligated as a service provider to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity.

Obligations to remove or block the use of information under the general laws remain unaffected. However, liability in this regard is only possible from the point in time at which a concrete infringement of the law becomes known. If we become aware of such infringements, we will remove this content immediately.


1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

CONCEDUS GmbH
Schlehenstraße 6
90542 Eckental
Eckental, Germany
+49 9126 206 393 0
info@concedus.com
concedus.com


2. Contact details of the data protection officer

The data protection officer of the controller is

Audit GmbH Karlsruhe Stuttgart
Auditing company
Heilbronner Street 41
70191 Stuttgart
Germany

📧 datenschutz@concedus.com


3. General information on data processing

Scope of the processing of personal data

We only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the consent of the user concerned. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by law.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis.

Data erasure and storage duration

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.


4. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:

  • Right to information: You can request confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right to information about: the purpose of the processing, the categories of data stored, the duration of storage or the criteria for determining this duration, your right to rectification or erasure, restriction of processing or objection, the existence of a right of appeal to a supervisory authority.

Since no automated decision-making or profiling takes place on our website and no data is transferred to third countries or international organizations, no such information is provided.

  • Right to erasure
    • a) Obligation to erase: You have the right to obtain from the controller the erasure of personal data concerning you without undue delay where one of the following grounds applies:
      • The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
      • You withdraw your consent …
      • You object to the processing …
      • The personal data has been processed unlawfully.
      • The deletion is necessary to fulfill a legal obligation.
      • The personal data has been collected in relation to the offer of information society services.
    • b) Information to third parties: Where the controller has made the data public …
    • c) Exceptions: The right to erasure does not exist if the processing is necessary.

5. Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you …

  • If processed for direct marketing → you can object at any time.
  • If you object, your data will no longer be processed for such purposes.

6. Provision of the website and creation of log files

Data collected automatically:

  • Browser type & version
  • Operating system
  • IP address
  • Date & time of access
  • Referrer websites

Data is stored in log files but not together with other personal data.


7. Use of cookies

Our website uses cookies.

  • Technically necessary cookies → e.g. transfer of language settings.
  • Legal basis: § 25 para. 2 no. 2 TDDDG + Art. 6 para. 1 sentence 1 lit. f GDPR.
  • Storage: You can delete cookies manually; Safari ≥12.1 deletes automatically after 7 days.

8. Use of a cookie consent technology

We use the Squarespace Consent Management Platform.

  • Squarespace places cookies to manage consent.
  • Legal basis: Art. 6 para. 1 lit. c GDPR + Art. 6 para. 1 lit. f GDPR.
  • Further info: Squarespace Datenschutz

9. Use of other cookies

  • Functional cookies
  • Marketing cookies (only with consent, Art. 6 para. 1 lit. a GDPR)

10. Email contact

  • Contact possible via email → personal data stored.
  • Legal basis: Art. 6 para. 1 lit. a, f or b GDPR (depending on purpose).
  • Data erased when conversation ends.
  • Revocation possible anytime: datenschutz@concedus.com

11. Contact form

  • Stores: Email, name, company, phone, IP, date/time, content.
  • Consent required before sending.
  • SSL encrypted.
  • Data deleted when no longer required.

12. Use of company presences in professional networks


13. Hosting

  • Hosted on Squarespace servers (Germany).
  • Server logs collected: browser, OS, referrer, hostname, time, IP.
  • Legal basis: Art. 6 para. 1 lit. f GDPR.

14. Plugins used

Google ReCaptcha

  • Provider: Google LLC / Google Ireland Ltd.
  • Checks whether input is human or bot.
  • Data processed: activity, clicks, device info, IP, OS.
  • Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
  • Opt-out: Google Ads Settings
  • More info: Google Privacy Policy

This privacy policy was created with the support of Audit GmbH Karlsruhe Stuttgart Wirtschaftsprüfungsgesellschaft.