Name and address of the controller
The controller (“we”) within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States and other data protection provisions is:

ISN International Security Network GmbH
Wichernstr. 2
76185 Karlsruhe
Germany
Tel.: +49 (0) 7229 69 76 900
Email: info@isn.eu.com

Data protection officer
The controller’s data protection officer can be contacted at the above address, for the attention of the data  protection officer, or at datenschutz@isn.eu.com.

Information on the collection of personal data

We provide you below with information on the collection of personal data when using our website. Personal data are all data which concern you personally e.g. name, address, email addresses, user behaviour.

When you contact us by email or using a contact form, the data provided by you (your email address, your name and telephone number, if applicable) are stored by us in order for us to answer your questions. We erase the resulting data in this context when storage is no longer required or we restrict the processing if legal obligations to keep and retain records exist. The legal basis is Art. 6 (1) sentence 1 f) GDPR or, if it serves the performance of a contract or to take steps prior to entering into a contract, Art. 6 (1) sentence 1 b) GDPR.

If we have recourse to the resources of engaged service providers for individual functions of our website or wish to use your data for advertising purposes, you will be informed of the respective processes in detail below. We also state the criteria determined for the storage period.

Your rights
You have the following rights vis-à-vis ourselves regarding personal data concerning yourself:

• right of access
• right to rectification or erasure
• right to restriction of the processing
• right to object to the processing
• right to data portability

You also have the right to lodge a complaint with a supervisory authority on data protection concerning the processing of your personal data by us.

Collection of personal data when visiting our website
When using the website merely for informational purposes i.e. if you do not register or otherwise transmit information to us, we will collect only the personal data which your browser transmits to our server. If you wish to view our website, we will collect the following data which are technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (1) sentence 1 f) GDPR):

• Information concerning the browser type and the version used
• User’s operating system and its interface
• User’s internet service provider
• User’s IP address
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites which are accessed by the user’s system via our website
• Volume of data transmitted
• Access status/HTTP status code

In addition to the above-mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard drive, allocated to the browser you use, and through which the party setting the cookie (in this case by us) receives certain information. Cookies cannot be used to run programs or deliver viruses to your computer. Their purpose is to make the website overall more user friendly and efficient.

Use of cookies:

1. a) This website uses the following types of cookies. Their scope and functioning are explained below:

• transient cookies (see b)
• persistent cookies (see c).

1. b) Transient cookies are automatically deleted when you close your browser. They include in particular session cookies. They store a so-called session ID that can be used to assign various inquiries from your browser during the shared session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
2. c) Persistent cookies are automatically deleted after a prescribed period, which can vary depending on the cookie. You can delete these cookies in the security settings of your browser at any time.
3. d) You can configure your browser setting as you wish and e.g. refuse to accept third-party cookies or all cookies. In that case, however, please be aware that you might not be able to use all the features of this websiteCookies are stored on the user’s computer and transmitted from the computer to our website. Therefore, as user you also have full control over the use of cookies. By changing the settings on your internet browser, you can disable or restrict the transfer of cookies. Cookies already stored can be deleted at any time. This can also be carried out automatically. If cookies for our website are disabled, this may prevent the full use of all features of the website.

Blog
In our blog, where we publish different articles on subjects relating to our activities, you can make public comments. Your comments on the article are published with your specified user name. We recommend that you use a pseudonym instead of your real name. Indication of user name and email address is required, all other information is voluntary. If you make a comment, we will continue to store your IP address which we will erase after one week. Storage is necessary for us to enable us to defend ourselves against liability claims in cases of possible publication of illegal content. We need your email address to contact you if a third party challenges your comment as illegal. The legal bases are Art. 6 (1) sentence 1 b) and f) GDPR. Comments are not reviewed before publication. We reserve the right to delete comments if they are challenged by third parties as illegal.

Applications
Our website provides you with the possibility of applying for job vacancies at our company. To apply, you can use the application form. We use data requested via this form (name, address, date of birth and other data on professional qualifications e.g. certificates, curriculum vitae ) solely to process your application and to make a selection decision concerning the vacancy to be filled. If you are then employed, we will store the data provided in your personnel file. The legal basis for processing is Art. 6 (1) sentence 1 b) GDPR.

If you are not employed, we will erase your data at the latest after six months. If you have consented, we will store your data for correspondingly longer in order to consider you for future job vacancies and contact you for such job vacancies. In such case, the legal basis for processing is Art. 6 (1) sentence 1 a) GDPR.

You can object to the use of your data at any time by sending a message to the contact data indicated above. Please note, however, that you will no longer be considered for our job vacancies in such case.

Newsletter
By giving your consent, you can subscribe to our newsletter which provides information on our current events and other news relating to our company. The services covered are stated in the declaration of consent.

We use the so-called double opt-in procedure to register for our newsletter. This means that we send an email to the specified email address after your registration, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically erased after one month. Furthermore, we store your IP addresses used and the time of registration and confirmation. The purpose of the procedure is to prove your registration and to enable clarification of any possible misuse of your data, if applicable.

Providing your email address is the only compulsory information required for sending the newsletter. Providing other separately marked data is voluntary and will be used to enable us to speak to you personally. After your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) sentence 1 a) GDPR.

Your consent to the sending of the newsletter can be withdrawn and you can unsubscribe to the newsletter at any time. You can withdraw your consent by clicking on the link provided in every newsletter email, by sending an email to wissensforum@vdi.de or by notifying the contact data provided in the legal notice.

We draw your attention to the fact that we evaluate your user behaviour when sending the newsletter. For this evaluation, emails sent include so-called web beacons or tracking pixels which are single-pixel image files stored on our website. To do so, we link the data automatically collected when visiting the website (see above) and the web beacons to your email address and a unique ID. Data are collected exclusively in pseudonymised form. The IDs are, therefore, not linked to your other personal data. Direct tracking to a specific user is excluded. The legal basis is Art. 6 (1) sentence 1 f) GDPR.

You can object to this tracking at any time by clicking on the separate link provided in each email or informing us by other means of contact. The information will be stored as long as you subscribe to the newsletter. After deregistration, we store data purely for statistical purposes and anonymously.

Matomo
We use the Matomo open source software tool (formerly PIWIK) on our website to analyse internet behaviour of our users.
When individual pages are accessed on our website, the following data are stored:

(1) three bytes of the IP address of the user’s accessing system
(2) the website accessed
(3) the website from which the user has reached the accessed website (referrer)
(4) the sub-pages visited from the accessed website
(5) the session length on the website
(6) how often the website is accessed

The software runs exclusively on our website servers. Personal data of users is only stored there. Data are not disclosed to third parties. The software is set so that the IP addresses are not stored in full but 1 bytes of the IP address is masked (e.g.: 192.0.2.xxx). In this way, identification of the truncated IP address with the accessing computer is no longer possible. The legal basis for the processing of the personal data of users is Art. 6 (1) f) DSGVO.

Processing of the personal data of users enables us to analyse the internet behaviour of our users. By evaluating the data obtained we are able to compile information on the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. Anonymisation of the IP address sufficiently takes into account the interest of users in the protection of personal data.
Data will be erased as soon as they are no longer required for our recording purposes. In our case, this is after six months.

Further information on privacy settings for the Matomo software is available under the following link: https://matomo.org/docs/privacy/.

Data are stored exclusively on the servers of our company which also operates this web server. Data are accessible neither to third parties nor are they disclosed to third parties for commercial or non-commercial purposes.

Updating of this Privacy Policy
We reserve the right to update this Privacy Policy, where necessary, to take account of technical developments or in relation to new services or products offered. The current version can be viewed at all times on our website.