GENERAL

This Privacy Notice gives a simple overview of what happens to your personal data when you visit our website, www.tectrex.com and www.app.tectrex.com. Personal data is any data with which you could be personally identified, whether directly or indirectly. We are committed to respecting and protecting the privacy of individuals whose personal data we process. All your personal data will be processed in accordance with applicable data protection laws, including the European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation or GDPR), as amended from time to time.

THE CONTROLLER OF THIS WEBSITE

The party responsible for processing your personal data on this website (in this policy referred to as "we" and/or "us") is:

tectrex AG
Senckenberganlage 10-12
60325 Frankfurt am Main
Mail: [email protected]
Tel: +49 69 5050 27426

DATA COLLECTION ON OUR WEBSITE

Log Data

When you visit our website, the device and browser you use automatically transmit log data to our server. This log data includes the names of the files accessed (web pages), the volume of data transferred, the type and version of the web browser, the operating system used, the date and time of access, the referrer URL (the website you came from), and the IP address of the requesting computer.

This data is collected and used exclusively for the proper and optimal presentation of our website and to detect and prevent cyber-attacks. The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR to ensure that our website functions properly and remains secure. We do not use this data to directly identify you, but please be aware that with the cooperation of your internet service provider, it could theoretically be possible to determine the holder of the internet connection based on the transmitted IP address. We delete this log data no later than 14 days after collection, unless a legal justification or statutory retention obligation exists for continued retention.

Registration

You can register on our website. The information marked with an asterisk (*) in the contact form is required. You may also provide additional data and information voluntarily. We will process this data only as necessary for the verification of your registration, the decision about your registration, and the subsequent performance of our services according to our terms of use. The legal basis for this processing is Art. 6(1)(b) GDPR, as it is necessary for entering into and performing a contract with you. We will delete your data after you terminate your account or your account expires for other reasons, unless we are required to retain it under mandatory statutory provisions, such as the German Commercial Code or German Tax Code, or based on our legitimate interest (e.g., in case of a dispute).

Contact form

We offer you the option to contact us and submit questions through a contact form on our website. The information marked with an asterisk (*) in the form is required, while additional data can be provided voluntarily in the free-text field. We will process this data only as necessary to adequately answer your inquiry. The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR to effectively handle your request. Only a limited number of authorized recipients within our company will have access to your inquiry. We will retain your message until you request its deletion or the purpose for its storage no longer applies (e.g., after your inquiry is fulfilled). Any mandatory statutory provisions, especially those regarding retention obligations, remain unaffected.

Data processing for Recruitment Processes

We also process personal data for recruitment purposes. For this, we collect personal data from candidates via an e-application form provided by our partner Personio GmbH & Co. KG (acting as our data processor). This data includes employment and educational history, and other information provided in a CV or similar document.

We retain information about any candidate throughout the recruitment process. If no employment contract is concluded, the application documents will be automatically erased six months after notification of the refusal decision. We may retain the documents for a longer period if we are entitled to do so based on our legitimate interests (e.g., for legal defense in case of a dispute related to the recruitment process, such as a claim under the German General Act on Equal Treatment) or statutory obligations.

The legal basis for this processing is Section 26(1) of the German Federal Data Protection Act (Bundesdatenschutzgesetz) in conjunction with Art. 6(1)(b) GDPR (processing is necessary for taking steps at the request of the data subject prior to entering into a contract).

Newsletter

If you wish to receive relevant information and updates about our products, you can subscribe to our newsletter by filling out the contact form. When you sign up, we will process the data you provide to send you our newsletter. We will only process this data with your consent, per Art. 6(1)(a) GDPR. You may revoke your consent at any time. An informal email making this request is sufficient. Withdrawing your consent does not affect the lawfulness of any data processing carried out before you withdrew your consent. We will retain the data you provide until you request its deletion, revoke your consent, or the purpose for its storage no longer applies (e.g., if you unsubscribe). Any mandatory statutory provisions, especially those regarding retention periods, remain unaffected.

WHO HAS ACCESS TO YOUR DATA?

We may share your personal data with:

• other group entities for the purpose of our internal business processes or if necessary for the purpose of data processing;

• our suppliers and service providers, including the entity hosting the website for us, and other organizations providing IT and related services to us;

• law enforcement and other governmental or regulatory authorities where we are required or permitted by law to do so;

• third parties when you have consented to us doing so.

Where it is necessary to transfer your data to a recipient outside of the European Union (EU) and the European Economic Area (EEA), we will comply with all transfer requirements under data protection laws. You may request a copy of the arrangements we have implemented with recipients located outside the EU and the EEA by contacting us via the channels indicated in section 2.

COOKIES

We use cookies on our website. Cookies are small text files that are stored on your device by your browser. They help us to make our services more user-friendly, effective, and secure. We use both strictly necessary cookies and non-essential cookies. Strictly necessary cookies are required for the basic functionality of our website and do not require your consent.

For all other cookies (e.g., for analytics, marketing, or performance), we only set these with your explicit consent, which you provide through our cookie consent banner. The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. You can manage your cookie preferences and withdraw your consent at any time through the cookie settings available on our website.

YOUR RIGHTS UNDER DATA PROTECTION LAWS

Subject to specific legal requirements and potential restrictions, you may have the following rights under applicable data protection laws:

• Right of Access: You have the right to obtain information on your data stored by us, as well as on certain aspects of our data processing activities, including the purposes of processing and the recipients of your data.

• Right to Rectification: At your request, we will correct any inaccurate or incomplete data stored by us about you.

• Right to Erasure: You have the right to request the deletion of your data if doing so is not in conflict with other statutory provisions (e.g., statutory retention periods) or an overriding interest on our part (e.g., for the defense of our rights and claims).

• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data. In such cases, we may only use the data for certain limited purposes set out by law.

• Right to Data Portability: In certain cases, you also have the right to receive your data in a structured, commonly used, and machine-readable format or have it sent to a third party.

• Right to Withdraw Consent: You have the right to revoke any consent you have given us for the processing of personal data with future effect at any time. Please note that withdrawing your consent does not affect the lawfulness of any data processing carried out before you withdrew your consent.

• Right to Lodge a Complaint: You also have a right to complain to a data protection supervisory authority. However, we recommend that you always direct any complaints to us first.

• Right to Object: You can object to the processing of your data. Please refer to the framed wording below for more information on this right.

INFORMATION ABOUT YOUR RIGHT OF OBJECTION (ART. 21 GDPR)

You have the right at any time to object to any processing of your data that is based on Art. 6(1)(f) GDPR (data processing based on legitimate interests) or Art. 6(1)(e) GDPR (data processing in the public interest) on grounds relating to your particular situation. This also applies to profiling. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

In case we process your personal data for direct marketing purposes, and you do not wish to receive advertising, you have the right to object to this at any time. This also applies to profiling insofar as it is associated with such direct marketing. If we receive such an objection from you, we will stop processing your data for direct marketing purposes.

If you wish to exercise your above rights, or if you have any questions or concerns in relation to our data processing activities, you may submit your request or question to us using the contact details in section 2. Whenever possible, please submit your request or question in writing.

CHANGES TO THIS PRIVACY NOTICE

Please note that occasional adjustments may be made to our Privacy Notice in response to developments of the Internet or a change in applicable laws. Therefore, we reserve the right to make appropriate amendments to this Notice at any time. Please revisit this Privacy Notice from time to time to ensure you have up-to-date information concerning our data processing practices. The date of the latest version of this Privacy Notice is indicated below.