Privacy Policy

General Information

This privacy policy explains the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the associated websites, functions and content (hereinafter collectively referred to as "online offering"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Controller

MK IT Consulting
Marcel Karras
Enderstr. 94
01277 Dresden
Germany
Email: contact@mkitconsulting.io
Website: www.mkitconsulting.io

Types of Data Processed

• Contact data (e.g., name, email address)
• Content data (e.g., text entries in the contact form)
• Usage data (e.g., visited websites, access times)
• Meta/communication data (e.g., IP addresses)

Purpose of Processing

• Contact requests and communication
• Security measures
• Provision of the online offering and delivery in the correct language

Definitions

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie) or to one or more factors specific to that natural person.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term is broad and covers virtually any handling of data.

Legal Basis

In accordance with Article 13 GDPR, we inform you of the legal basis of our data processing. Unless the legal basis is mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR, the legal basis for processing for the performance of our services and execution of contractual measures as well as answering inquiries is Article 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing to protect our legitimate interests is Article 6(1)(f) GDPR.

Contact

When contacting us (e.g., via contact form or email), the user's information is processed for handling the contact request and its processing in accordance with Article 6(1)(b) GDPR. User information may be stored in a Customer Relationship Management System ("CRM System") or comparable inquiry organization.

We delete the requests if they are no longer required. We review the necessity every two years; furthermore, the statutory archiving obligations apply.

Hosting and Email Dispatch

The hosting services used by us serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email dispatch, security services and technical maintenance services that we use for the purpose of operating this online offering.

In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offering on the basis of our legitimate interests in an efficient and secure provision of this online offering in accordance with Article 6(1)(f) GDPR in conjunction with Article 28 GDPR.

Spam Protection with Cloudflare Turnstile

To protect our contact form against automated requests and abuse, we use "Turnstile", a service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare").

The script required for this is loaded from a Cloudflare server when you open the German or English language version; the language gate and the legal pages do not embed it. In doing so, your IP address is transmitted to Cloudflare. This happens when the page is loaded, not only when the form is submitted. Turnstile additionally evaluates technical information about your browser and device as well as your interaction behaviour on the page in order to assess whether the request originates from a human. According to Cloudflare, Turnstile is used solely for abuse detection and not for advertising or profiling purposes.

The legal basis is our legitimate interest in defending against spam and automated attacks on our contact form in accordance with Article 6(1)(f) GDPR.

Cloudflare is a company based in the USA. Personal data is therefore transferred to a third country. This transfer is based on the Standard Contractual Clauses of the European Commission and on Cloudflare's certification under the EU-US Data Privacy Framework.

Further information on how Cloudflare handles personal data is available at https://www.cloudflare.com/privacypolicy/.

Collection of Access Data and Log Files

We, or our hosting provider, collect data on each access to the server on which this service is located (so-called server log files) based on our legitimate interests within the meaning of Article 6(1)(f) GDPR. The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is stored for security reasons (e.g., to investigate abuse or fraud) for a maximum period of 7 days and then deleted. Data whose further retention is required for evidentiary purposes is exempt from deletion until final clarification of the respective incident.

Rights of Data Subjects

You have the right to request confirmation as to whether data concerning you is being processed and to request information about this data as well as further information and a copy of the data in accordance with Article 15 GDPR.

In accordance with Article 16 GDPR, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.

In accordance with Article 17 GDPR, you have the right to request that the relevant data be deleted immediately or, alternatively, to request a restriction of the processing of the data in accordance with Article 18 GDPR.

You have the right to request that the data concerning you that you have provided to us be received in accordance with Article 20 GDPR and to request its transmission to other controllers.

You also have the right to lodge a complaint with the competent supervisory authority in accordance with Article 77 GDPR.

Right of Withdrawal

You have the right to revoke consents granted in accordance with Article 7(3) GDPR with effect for the future.

Right to Object

You may object to the future processing of data concerning you at any time in accordance with Article 21 GDPR. The objection may be made in particular against processing for direct marketing purposes.

Cookies and Local Storage

We do not set any cookies ourselves. Cloudflare Turnstile, which is embedded on the language versions, may store information in or read information from your terminal equipment when the page loads; see "Spam Protection with Cloudflare Turnstile" above and Cloudflare's own privacy policy for details.

On every load of the start page ("/") the website reads your browser's configured language (navigator.language) and any language entry already stored, in order to send you to the German or the English version. This read does not happen on the /de/ and /en/ pages. The value itself is evaluated in your browser alone and is never transmitted to us; the resulting redirect to /de/ or /en/ is, like any other page request, contained in the server log files described under "Collection of Access Data and Log Files" above.

For your language choice the website stores a single entry in your browser's local storage (localStorage): the key "language" with the value "de" or "en". The entry is only created when you select a language. It is evaluated in your browser alone, is never transmitted to us or to any third party, and remains until you clear this site's data in your browser.

Legal basis: The entry is set solely in response to your explicit language choice and is read again on every load of the start page, where the language configured in your browser is read as well. All three of these operations are strictly necessary to provide the language version you selected or, until you have made a choice, the one matching your browser language — or, where neither is available, the English version. Storing and reading the entry, and reading the language configured in your browser, are all accesses to your terminal equipment and are therefore exempt from consent under Section 25(2) no. 2 TDDDG. We base the associated processing on our legitimate interest in delivering this website in working order and in the correct language under Article 6(1)(f) GDPR. The entry serves no reach measurement, no profiling and no recognition beyond this website. Because the legal basis is stated here explicitly, the general rule described under "Legal Basis" above does not apply to these processing operations.

Deletion of Data

The data processed by us will be deleted or its processing restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

Changes and Updates to the Privacy Policy

We ask you to inform yourself regularly about the content of our privacy policy. We adapt the privacy policy as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.