As of July 2026
This is a reading aid. The binding version of this document is the German one — the statutory duties under § 5 DDG and the GDPR are discharged in German.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Inter Sozio Tech GmbH
[to be added before we go live], Germany
Email: info@intersoziotech.com
Telephone: [to be added before we go live]
The details marked “[to be added before we go live]” are not currently available and will be added before we go live. Until then, the email address above is sufficient for requests for access, erasure or objection.
2. Data protection officer
[Name of the data protection officer]
Email: [datenschutz@…]
3. Principles of processing
We process personal data solely on the basis of the statutory provisions. The principle of data minimisation applies: we collect only the data required for the respective purpose and delete it as soon as that purpose ceases to apply and no statutory retention periods stand in the way.
All processing takes place on servers inside the European Union. No personal data is transferred to a third country.
4. Visiting the site (server log files)
When you visit this site, the hosting provider processes technically necessary data in server log files:
- the shortened IP address of the requesting system
- the date and time of access
- the name and URL of the file retrieved
- the volume of data transferred and confirmation of whether the retrieval succeeded
- the browser type and version used, and the operating system
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and stable operation of the site and in defending against attacks. Log files are deleted after 7 days at the latest.
Hosting
The site is hosted with [name of the hosting provider], [address]. A data processing agreement under Art. 28 GDPR is in place with that provider. The servers are located in Germany only.
5. Typefaces
This site uses the typefaces Inter and DM Mono. Both are served from our own server and embedded locally. When the page loads, no connection is made to Google Fonts or to any other external provider . No transfer of your IP address to a third party therefore takes place.
6. Cookies and consent management
We use technically necessary storage techniques only, for as long as you have not consented to any further category. On your first visit you are shown a dialogue in which rejecting is exactly as easy as accepting. No category is pre-selected.
- Necessary — stores your cookie decision in your browser’s local storage. Legal basis: § 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR.
- Functional — stores convenience settings. Only with your consent, § 25 (1) TDDDG, Art. 6 (1) (a) GDPR.
- Statistics — anonymised reach measurement. Only with your consent.
- Marketing — not in use at present.
Your consent is stored for 12 months and can be withdrawn at any time with effect for the future through the cookie settings.
7. Getting in touch and the request form
If you contact us by email, by telephone or through the request form, we process the details you send — in particular your name, company, email address, telephone number and the description of your project — in order to deal with your enquiry.
The legal basis is Art. 6 (1) (b) GDPR where the enquiry serves the initiation or performance of a contract, and otherwise Art. 6 (1) (a) GDPR on the basis of the consent you give in the form.
Passing details to providers: Your details are transmitted to partners from the marketplace only after your explicit release in the individual case, and only to the extent required for it. Without your release, your technical documents do not leave our system.
Your details are deleted as soon as the enquiry has been dealt with conclusively and no commercial or tax retention periods (as a rule 6 or 10 years) stand in the way.
How it is sent: The details you submit are delivered from our server to our mailbox over a transport-encrypted connection (SMTP over STARTTLS) and handled there. The operator of that mailbox is bound as a processor under Art. 28 GDPR; the processing takes place inside the European Union. You also receive a copy of your details at the address you gave, so that you can see what reached us. No evaluation of your message beyond that takes place.
No automated decision-making: No decision based solely on automated processing within the meaning of Art. 22 GDPR takes place. We operate no scoring of your usage behaviour and no profiling, and we do not use your enquiry data to train automated selection procedures. Every enquiry is read and owned by a person. Should an automated selection or matching procedure be introduced in future, it would require its own legal basis, a separate consent, and prior information about the logic involved.
Documenting your consent: If you give consent in the request form, we store the wording of the consent statement in the version valid at the time you gave it, together with the time it was given. It is therefore traceable what exactly you consented to (Art. 7 (1) GDPR). A later change to the text has no retroactive effect on consent already given.
8. Job applications
If you send us an application, we process the data it contains in order to carry out the application procedure (§ 26 (1) BDSG, Art. 6 (1) (b) GDPR). Application documents are deleted six months after the procedure concludes at the latest, unless you have agreed to longer storage.
9. Recipients and processors
Your data is passed on only where this is necessary to perform a contract, where you have consented, or where a legal obligation exists. The providers we use — in particular for hosting and for operating our email mailbox — are contractually bound under Art. 28 GDPR and process data solely on our instructions.
10. Your rights
You have the following rights in relation to us:
- access to the data processed about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing (Art. 21 GDPR)
- withdrawal of a consent given, with effect for the future (Art. 7 (3) GDPR)
An informal message is enough to exercise them: info@intersoziotech.com.
11. Right to complain to a supervisory authority
Without prejudice to any other remedy, you have the right to complain to a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.
12. Data security
This site uses TLS encryption. Beyond that we take technical and organisational measures to protect your data against loss, destruction, manipulation and unauthorised access. Our measures are reviewed continuously and adapted to the state of the art.
13. Changes to this policy
We update this privacy policy as soon as changes to the site or to legislation make it necessary. The version available on this page applies in each case.