Privacy Policy

1. Introduction

InfoSec Consult ("we", "us", or "our") operates in accordance with the General Data Protection Regulation (GDPR) and German data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our consulting services.

2. Information We Collect

We collect information you voluntarily provide, including:

• Name and contact information (email, phone, address)
• Company information and job title
• Service inquiry details and project requirements
• Communication preferences
• Payment and billing information (when applicable)

We automatically collect technical information through cookies and analytics, including IP address, browser type, pages visited, and access times.

3. Legal Basis for Processing

We process your data based on:

• Your explicit consent
• Performance of our consulting contracts
• Compliance with legal obligations
• Our legitimate business interests

4. How We Use Your Information

We use collected information to:

• Provide and improve our consulting services
• Respond to inquiries and communications
• Process and fulfill service requests
• Send marketing communications (with your consent)
• Comply with legal and regulatory requirements
• Prevent fraud and ensure security
• Analyze website usage and improve user experience

5. Data Sharing

We do not sell, trade, or rent your personal information. We may share your data with:

• Service providers and subcontractors under confidentiality agreements
• Legal authorities when required by law
• Business partners with your consent

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy and as required by German law. Typically, we retain client data for 7 years for tax and legal compliance purposes, and marketing data until you unsubscribe.

7. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict processing of your data
• Object to processing
• Request data portability
• Withdraw consent at any time

To exercise these rights, please contact us at info@infosec-consult.eu.

8. Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure.

9. Cookies

Our website uses cookies to enhance user experience. You can control cookie settings through your browser. Functional cookies are necessary for website operation, while analytical cookies help us understand user behavior.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We recommend reviewing their privacy policies before providing any personal information.

11. Contact Information

For privacy-related inquiries or to exercise your GDPR rights, contact us at:

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of our website constitutes acceptance of the updated policy.