Privacy Policy

This privacy policy informs you under Art. 13 GDPR about the processing of personal data when you visit this website.

1. Controller

ISN GmbH Individuelle Software- und Netzwerklösungen
Wegwitz 18
06258 Schkopau
Germany
Phone: +49 345 5667290
Email: info@isn-systems.com
Data protection: datenschutz@isn-systems.com

2. Server log files

Each time this website is accessed, our web server stores:

• IP address of the requesting device
• date and time of the request
• requested address (URL), for searches including the search term
• HTTP status code and amount of data transferred
• previously visited page (referrer) and browser identification (user agent)

We use this data to operate the website securely and reliably and to detect attacks. Software evaluates the log files automatically and temporarily blocks IP addresses from which attacks originate. We also compile statistics on website use from the log files; these statistics contain no IP addresses and do not allow conclusions about individuals.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and stability of the website and in analysing its use).
Retention: 10 days; the log files are then deleted automatically.

3. Cookies and local storage

This website sets no cookies for advertising or analytics. It sets three technically necessary cookies:

• isn_systems_…_session – session identifier so the website can assign your requests to one session; valid for 2 hours
• XSRF-TOKEN – protects forms against misuse; valid for 2 hours
• isn_locale – the selected language (German or English); valid for 1 year

In addition, your browser stores locally (localStorage) the selected colour scheme (isn-theme) and whether the video on the home page should play (isn-hero-video). This information is not transmitted to us.

Legal basis: Section 25(2) no. 2 TDDDG (strictly necessary) and Art. 6(1)(f) GDPR. No consent is required.

4. Web analytics (Matomo)

We use Matomo for statistical analysis of how the website is used. Matomo runs on our own server in Germany (analytics.isn-systems.com); no data is passed to third parties.

• Matomo sets no cookies.
• Your IP address is shortened by two bytes before it is stored (e.g. 192.168.xxx.xxx); we cannot link it to you.
• If your browser has “Do Not Track” enabled, no measurement takes place.
• Individual visit data is deleted after 180 days, the reports derived from it after 12 months.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a data-minimising analysis of website use).

5. Contact form and contact by email or phone

If you write to us via the contact form, we process your name, email address, subject and message, the page from which you sent the form, and your IP address. The request is stored in this website's database and delivered to us by email. The IP address is used to prevent misuse.

To protect against spam, your browser solves a small computational task when sending. No data is transmitted to third parties in the process.

If you contact us by email or phone, we process your details to handle your request.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in answering requests and preventing misuse).
Retention: until the request has been dealt with; records subject to statutory retention obligations are kept for 6 or 10 years (German Commercial Code, Fiscal Code).

6. Hosting

This website, our mail server and Matomo run on servers we rent from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers and the backups are located in data centres in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR).

No data is transferred to countries outside the EU or EEA.

7. Security measures

We take technical and organisational measures under Art. 32 GDPR, in particular:

• Encrypted transmission (TLS 1.2 or higher) for all access to this website
• Automatic detection and blocking of attacks
• Administrative access to the servers only with a cryptographic key, not with a password
• Daily backups
• Automatic installation of security updates

8. Your rights

You have the right to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

Please contact datenschutz@isn-systems.com.

9. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Sachsen-Anhalt
Otto-von-Guericke-Straße 34a
39104 Magdeburg, Germany

10. Obligation to provide data, automated decisions

You are under no statutory or contractual obligation to provide personal data. Without contact details, however, we cannot answer your request.

No automated decision-making within the meaning of Art. 22 GDPR takes place.