1. Data Controller
Technikon Consulting GmbH
Zum Fürstenmoor 9
21079 Hamburg
Germany
Represented by its Managing Director, Dhillan Jayakumar
For any enquiries regarding data protection, please use our contact page.
2. General Information
We process personal data only to the extent necessary to ensure the secure operation of our website, respond to enquiries, or comply with legal obligations. Our data processing activities are governed in particular by the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
3. Website Access and Server Logs
When you access our website, certain technical information may be processed and recorded in server logs. This information may include your IP address, the date and time of access, the requested page, HTTP status codes, browser identification data, and the referring website (referrer).
Such processing is carried out to deliver the website, identify and resolve technical issues, and protect our systems against unauthorised access and cyberattacks. The legal basis for this processing is Article 6(1)(f) GDPR, reflecting our legitimate interest in maintaining the security and reliability of our website.
The applicable retention periods for server logs and the identity of the hosting provider must be documented in accordance with the relevant hosting agreement.
4. Contact and Consultancy Enquiries
When you contact us, we process the personal information you provide, which may include your name, email address, company name, telephone number, and the content of your message, depending on the information submitted.
We use this information exclusively to process and respond to your enquiry and, where applicable, to take steps prior to entering into a contract. Depending on the circumstances, the legal basis for processing is Article 6(1)(b) or Article 6(1)(f) GDPR.
Personal data will only be disclosed to third parties where necessary to process your enquiry or comply with applicable legal obligations.
5. Email Communications
Enquiries submitted through our website forms are transmitted to the relevant recipients using the email infrastructure configured for our website. This process involves the handling of message content and technical connection data necessary for successful delivery.
The specific email service provider and, where applicable, the existence of an appropriate data processing agreement must be verified internally.
6. Locally Hosted Spam Protection
To protect our contact forms against automated submissions and misuse, we use a locally hosted CAPTCHA verification mechanism. This security measure is designed to reduce automated spam and unauthorised form submissions.
For verification purposes, technically necessary session information and validation data may be processed. The legal basis for this processing is Article 6(1)(f) GDPR, reflecting our legitimate interest in protecting our website and communication systems.
7. Cookies and Local Storage
Cookies or comparable local storage technologies may be used where technically necessary to ensure the proper functioning of our website.
Non-essential technologies will only be used in accordance with the applicable legal requirements concerning user consent.
The specific cookies and storage mechanisms in use must be verified against the active WordPress configuration and any installed plugins.
8. Data Recipients and Processing on Our Behalf
In connection with website hosting and technical operations, authorised IT service providers may process personal data on our behalf.
Where legally required, appropriate data processing agreements will be concluded in accordance with Article 28 GDPR.
Transfers of personal data to countries outside the European Economic Area (EEA) will only take place where the applicable legal requirements and safeguards are satisfied.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable statutory retention obligations.
Information submitted through enquiries will be deleted once the relevant matter has been resolved, unless statutory obligations or other legitimate grounds justify continued retention.
Specific retention and deletion periods must be established in our internal records of processing activities.
10. Your Data Protection Rights
Subject to the applicable legal requirements, you have the following rights under the GDPR:
- Right of access – Article 15 GDPR
- Right to rectification – Article 16 GDPR
- Right to erasure – Article 17 GDPR
- Right to restriction of processing – Article 18 GDPR
- Right to data portability – Article 20 GDPR
- Right to object – Article 21 GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future in accordance with Article 7(3) GDPR. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection legislation.
In particular, you may contact the supervisory authority responsible for the jurisdiction in which our company is established, in accordance with Article 77 GDPR.
12. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, and