Privacy Policy

1. Responsible Party

The responsible party in terms of the General Data Protection Regulation (GDPR) is:

Hoy-Metzler IT
Bautzener Allee 59
02977 Hoyerswerda
Represented by: Tiziano Santo Metzler
Phone: +49 1590 1084284
Email: hoy-metzler-it@fn.de

2. Collection and Use of Personal Data

The collection and use of personal data from our users is generally done only with the user's consent, if technically possible. We collect and use personal data of visitors to our customers' websites only to the extent necessary to provide a functional website and our content and services. This collection and use are done on behalf of the website operator and based on their legitimate interest in the security and functionality of their website.

3. Types of Data Collected

We collect the following data on behalf of the website operator when you use our services:

• IP Addresses: Used for traffic direction and system configuration.
• End User Data: Information about interactions of end users with the customers' websites, including IP addresses and data for traffic direction.
• Customer Data: Includes contact information, account settings, and payment information.
• Log Data: Records of activities by administrative users.

4. Purpose of Data Collection

This data is collected for the following reasons:

• Technical analysis and troubleshooting
• Protection against DDoS attacks and other threats
• Optimization and improvement of our services
• Compliance with legal obligations
• Provision of customized services for our customers

5. Data Retention Period

IP addresses and log entries are deleted after 30 days. This retention period is necessary to allow comprehensive technical analysis and the tracking of attacks, as well as to ensure the security of our systems.

6. Legal Basis for Processing Personal Data

The processing of personal data of users is generally done only with the user's consent. If we obtain the consent of the data subject for processing personal data, Art. 6(1)(a) GDPR serves as the legal basis. For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures. If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

7. Data Sharing

Your personal data will not be transferred to third parties for purposes other than those listed below. We only share your personal data with third parties if:

• You have given your explicit consent
• The transfer is necessary for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not having your data shared (Art. 6(1)(f) GDPR)
• There is a legal obligation to share the data (Art. 6(1)(c) GDPR)
• This is legally permissible and necessary for processing contractual relationships with you (Art. 6(1)(b) GDPR)

8. Data Security

We use the widely used SSL (Secure Socket Layer) technology during your website visit, combined with the highest level of encryption supported by your browser. Typically, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell if an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock icon in the lower status bar of your browser.

In addition, we use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

9. Your Rights

You have the right to:

• Request information about your personal data processed by us in accordance with Art. 15 GDPR. You can request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
• Request the correction of inaccurate or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR;
• Request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
• Request the restriction of processing your personal data in accordance with Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need it for the assertion, exercise, or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• Receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request the transmission to another controller in accordance with Art. 20 GDPR;
• Withdraw your consent at any time according to Art. 7(3) GDPR. This means that we may no longer continue the data processing based on this consent in the future; and
• File a complaint with a supervisory authority in accordance with Art. 77 GDPR. Generally, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

10. Right to Object

If your personal data is processed based on legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right to withdraw or object, an email to hoy-metzler-it@fn.de is sufficient.

11. Changes to This Privacy Policy

We reserve the right to amend this privacy policy to ensure it complies with current legal requirements or to implement changes to our services in the privacy policy, such as the introduction of new services. The new privacy policy will apply to your next visit.

12. Contact

If you have any questions or concerns regarding this privacy policy or the processing of your personal data, please contact us at:

Hoy-Metzler IT
Bautzener Allee 59
02977 Hoyerswerda
Represented by: Tiziano Santo Metzler
Phone: +49 1590 1084284
Email: hoy-metzler-it@fn.de