Privacy policy

We take the protection of your personal data very seriously. Personal data is all data with which you can be personally identified.

We treat personal data confidentially, in accordance with the statutory data protection regulations and this privacy policy.

Data processing

Who is responsible?

Tec-chain GmbH
Am Rhönbad 5
36043 Fulda
Germany

Email: data_protection@tec-chain.de

How is your data collected?

On the one hand, your data is collected when you provide it to us through e.g. via contact form, by e-mail, social media, fax or post.

In addition, information of a general nature is collected when you visit our website, such as the used browser, the operating system or the time of the page view. This data is collected automatically as soon as you enter our website and is technically necessary in order to correctly display the content of our website that you have requested.

What is your data used for?

On the one hand, data is collected to ensure error-free provision of the website and on the other hand, to analyze your user behavior. Thus, e.g. your surfing behavior will be statistically evaluated with the help of analysis programs. Details on the used analysis programs can be found in this privacy policy.

How long do we store your data?

We store your data as long as no more specific storage period has been specified until the time at which the purpose of the data processing no longer applies, you assert a legitimate attempt for deletion or revoke your consent to data processing. Unless we have to store your data for legally permissible reasons (e.g. tax or commercial retention periods). After expiry of the prescribed periods, we will then delete your data and limit the processing of your data to necessary purposes (fulfillment of retention obligations).

What rights do you have regarding your data?

Right to information and data portability

You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data in a structured, common and machine-readable format.

Right to rectification, erasure and restriction

In addition, you have the right to correction and deletion and, in certain cases, the right to restriction of your data.

Right of revocation

If you have given your consent to data processing, you can revoke this consent at any time for the future.

Right to lodge a complaint

Furthermore, you can complain to a supervisory authority at any time. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.

Hosting

Explanation of hosting

In order to maintain our web pages, we use a provider on whose server our web pages are stored and made available for retrieval on the internet (hosting).

Each time you access our website, usage data is transmitted to us or our web host by your web browser and stored in log data (so-called server log files). Among other things, the name of the website accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider are part of the stored data. The processing is carried out on the basis of our overriding legitimate interest in ensuring trouble-free operation of our website and improving our offer.

Services used

Netlify

Provider: Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, California 94104, USA)

We use the provider Netlify to host our website. Netlify also processes data in the USA, among other places.

Please note that we do not have insight into Netlify's processing operations and therefore there may be further processing steps unknown to us. This may also result in data being transmitted to Netlify Incservers in the USA. There is a risk that the regulations from the GDPR cannot be complied with. Detailed information on the terms of use and data protection conditions of the respective provider can be found directly on the provider's website.

Details can be found in Netlify's privacy policy: https://www.netlify.com/privacy/

The use of Netlify is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in a reliable presentation of our website.

For order processing according to Art. 28 GDPR, Netlify holds a contract that acts as the data protection basis for our customer relationship with Netlify. You can view this contract under the following link: https://www.netlify.com/v3/static/pdf/netlify-dpa.pdf

Webflow

Provider: Webflow Inc. (398 11th Street, 2nd Floor, San Francisco, CA,94103, USA)

Webflow is a tool for building and hosting websites. We use it to edit our website, but not to host it.

Details can be found in Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy

The use of Webflow is based on Art. 6 para. 1lit. f GDPR. We have a legitimate interest in ensuring that our website is as reliable as possible.

If data is transferred to the USA, this is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy

Cookies

What are cookies and what do we need them for?

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are temporarily stored on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit to our website. Permanent cookies: Permanent cookies remain on your device until you delete them yourself or until they are automatically deleted by your web browser.

We distinguish between first-party cookies and third-party cookies. First-party cookies come from us, while third-party cookies come from third-party companies. Third-party cookies enable the integration of certain services from third-party companies within our website (e.g. payment services).

In order to carry out the electronic communication process, to optimize the website (e.g. clicked websites) and to provide the functions you have requested, on the basis of Art. 6 para. 1 lit. f GDPR, unless another legalbasis is specified. As the operator of this website, we have a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG). The consent can be revoked at any time.

You can set your web browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be restricted.

Cookie Consent

Our website uses Finsweet's cookie consent technology to obtain your consent to the storage of certain cookies and to ensure documentation that complies with data protection regulations.

Provider:  https://finsweet.com/

This technology stores a cookie in your browser to be able to associate your granting of consent or revocation. Data collected in this way is stored until you request us to delete it, delete the Consent Manager Provider cookie yourself or the purpose for storing the data no longer applies. Legal storage obligations remain unaffected by this. The use of our cookie tool takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Cloud services

What are cloud services?

Cloud services provide data storage over the internet. We send data to the cloud providers and they take over the management and storage of our data. For example, the cloud service provider provides sufficient storage space for all our data.

Why do we use cloud services?

We use cloud services for several reasons: On the one hand, we have access to our data from different locations, and on the other hand, we store our data very securely due to measures taken by the respective provider (e.g. servers backed up several times).

We mainly use cloud services as follows:

Especially when using online meetings with the option of video and screen sharing, the following data can also be processed:

Contact, customer and contract data are also stored on the servers of the respective providers. Depending on the provider, information about you may be transferred to and stored on servers outside the European Union. There is a risk that the regulations from the GDPR cannot be complied with. If the cloud provider offers the processing of data within the European Union, we intend (if not already done) to process your data exclusively there.

Cloud services used

Atlassian

Provider: Atlassian. Pty Ltd (Level 6, 341 George Street, Sydney, NSW 2000, Australien)

Please note that we do not have insight into Atlassian's processing operations and therefore there may be further processing steps unknown to us. This may alsolead to the transmission of data to Atlassian Pty Ltd servers in the USA or Australia. There is a risk that the regulations from the GDPR cannot be complied with. Detailed information on the terms of use and data protection conditions of the respective provider can be found directly on the provider's website.

Furtherinformation on data protection: https://www.atlassian.com/de/legal/privacy-policy

For order processing according to Art. 28 GDPR, Atlassian holds a contract that acts as the data protection basis for our customer relationship with Atlassian. You can view this contract under the following link: https://www.atlassian.com/legal/data-processing-addendum

DATEV

Provider: DATEV eG (Paumgartnerstr. 6-14, 90429 Nürnberg, Deutschland)

For our payroll and accounting we use the accounting software DATEV.

Furtherinformation on data protection: https://www.datev.de/web/de/m/ueber-datev/datenschutz/?tid=331696952639

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google Work Space

Provider: Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA)

Registered office within the European Union: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland)

Please note that we do not have insight into Google's processing operations and therefore there may be further processing steps unknown to us. This may also result in data being transmitted to Google LLC servers in the USA. There is a risk that the regulations from the GDPR cannot be complied with. Detailed information on the terms of use and data protection conditions of the respective provider can be found directly on the provider's website.

Further information on data protection: https://policies.google.com/privacy

For order processing according to Art. 28 GDPR, Google holds a contract that acts as the data protection basis for our customer relationship with Google. You can view this contract under the following link: https://cloud.google.com/terms/data-processing-addendum/

Microsoft 365 - Microsoft Teams

Provider: Microsoft Corporation (One Microsoft Way, Redmond, WA, 98052-6399, USA)

Please note that we do not have insight into the processing of Microsoft and therefore there may be further processing steps unknown to us. This may also result in data being transferred to Microsoft servers in the USA. There is a risk that the regulations from the GDPR cannot be complied with. Detailed information on the terms of use and data protection conditions of the respective provider can be found directly on the provider's website.

Further information on data protection: https://privacy.microsoft.com/de-de/privacystatement

For order processing according to Art. 28 GDPR, Microsoft holds a contract that acts as the data protection basis for our customer relationship with Microsoft. You can view this contract under the following link: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA/

Advertising, analysistools and statistics

Why do we use these tools?

The measures listed below serve to continuously improve the usability of our offer and the needs-based design of our website. For this purpose, we continuously collect the necessary key figures about the use of our website. Usage data such as access times and clicked links as well as communication data such as information about the device you are using are recorded.

For this purpose, cookies are usually placed on your device. We would also like to point out that depending on the provider listed below, your data may be transferred and processed outside the European Union.

Tools used

Google Analytics

If you have given us your consent in accordance with Art. 6 Para. 1 S. 1lit. a GDPR, we use Google Analytics for the purpose of website analysis.

Provider: Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA)

Registered office within the European Union: Google Ireland Limited (GordonHouse, Barrow Street, Dublin 4, Ireland)

We use Google Analytics exclusively with the extension for anonymizing the IP address (shortening) in order to exclude a direct personal reference.

During your visit to our website, your user behavior is recorded in the form of "events". These events can be:

The data sent by us and linked to cookies are automatically deleted after 14 months. The maximum lifetime of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached takes place automatically once a month.

Google Analytics uses cookies that enable an analysis of the use of the website. Information about your use of the website may be transmitted to Google servers and stored. This may also result in data being transmitted to Google LLC servers in the USA. There is a risk that the regulations from the GDPR cannot be complied with. Detailed information on the terms of use and data protection conditions of the respective provider can be found directly on the provider's website.

Further information on data protection: https://policies.google.com/privacy?hl=de&gl=de

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the service processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Brevo (Sendinblue GmbH)

If you use our contact form or after you have registered the so-called double opt-in procedure to our newsletter, we use Brevo to store your personal data and to create user profiles.

Provider: Sendinblue GmbH (Köpenicker Straße 126, 10179 Berlin)

With the help of Brevo, we have the possibility to create user profiles by linking provided email addresses and names with any other contact information (such as phone numbers provided later or messages on social media accounts). In doing so, the Service may also store data such as the date and time of interaction with you (e.g., when a link was clicked). Through analysis functions of user behavior, a personal profile can thus be built up.

Further information on data protection: https://www.brevo.com/de/legal/privacypolicy/

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Validity and modification of the privacy policy

Notice

We adapt this privacy policy at regular intervals to correspondingly changed functionalities, newly used tools or adapted legal situation. Therefore, we recommend that you take note of the privacy policy informationat regular intervals.

Version

Current version: March 2024