Data Privacy Statement

§ 1 Information about the collection of personal data

In this statement we inform about the collection of personal data when using our website. Personal data is any data personally related to you, e.g. name, address, e-mail.

Responsible for this website, in accordance to Art. 4 Abs. 7 Datenschutz-Grundverordnung (DS-GVO):

Seal One AG
Berliner Straße 44
60311 Frankfurt/Main
Telefon: (069)1301468-52
Telefax: (069)1301468-56

You can reach our data protection officer with following contact information:

Karsten Böhm
Privacy One GmbH
Lyoner Straße 14
60528 Frankfurt am Main

or at our postal address with the remark "c/o Data Protection Officer"

§ 2 Collection of personal data when visiting our website

In case you just view our websit we only collect the data which is transmitted from your browser to our server.If you want to view our website, we collect the following information that is technically necessary for us to display our website and to ensure its stability and safety (on the legal basis of Art. 6 Abs. 1 S. 1 lit. f DS-GVO):

- IP address
- date and time of the request
- timezone difference to Greenwich Mean Time (GMT)
- content of the request (specific page)
- access status/HTTP status code
- the amount of transmitted data
- website from which the request comes
- browser
- operating system and desktop environment
- language und version of the browser

§ 3 Personal data, purposes and legal bases of processing

In case you contact us by e-mail, the information you provided (first name, surname, address, e-mail, etc.) will be stored by us to answer your questions or make an offer. This data is collected on the legal basis of Art. 6 Abs. 1 lit. b DS-GVO, which allows the processing of data to fulfill a contract or precontractual measures. We delete the corresponding data after the purpose-bound storage is no longer necessary or restrict the processing if there are legal storage requirements. If you make a general request, the data will be stored for a maximum period of 3 months after completing the request process. After this period the data is deleted.

Use of our webshop

If you want to order in our webshop, it is necessary for the conclusion of the contract, that you provide your personal data, which we need for the processing of your order. Mandatory information necessary for the execution of the contracts is marked separately, further details are voluntary. We process the data provided by you to process your order. For this we can pass on your payment data to our house bank. We need your e-mail address to send you a confirmation e-mail. This also contains the bill. You will also receive a shipping confirmation.

You can also retrieve your invoice yourself on our shop page. You will need the order number and e-mail address or e-mail address and the serial number of your Seal One device.

The legal basis for this is Art. 6 Abs. 1 S. 1 lit. b DS-GVO.

Due to commercial and tax regulations, we are obliged to save your address, payment and order data for a period of ten years. However, after two years we are restricting processing, ie. H. Your data will only be used to comply with legal obligations.

To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

Use of Seal One devices

With the Seal One devices, we offer a solution for access and transaction security. Whether banking, telecommunications, retail, customer portals or insurance, Seal One devices can be used across industries. Data is transmitted tamper-proof. Seal One device provides complete security through full end-to-end encryption. All risks due to insecure components (network, terminals) are eliminated. The legal basis for this is Art. 6 Abs. 1 lit. b DS-GVO.

In part, we use to process your data from external service providers. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected. The legal basis is Art. 28 DS-GVO in connection with contract processing contracts.

Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners.

Insofar as our service providers or partners are based in a country outside the European Economic Area (EEA), we inform you about the consequences of this circumstance in the description of the offer.

§ 4 Tracking Tools

We do not use any tracking tools.

§ 5 Duration of storage

We store your personal data for the period of time required for the purposes mentioned above and for the period in which we expect the assertion of legal rights. Thus, the statutory limitation period for such claims in individual cases may be between three and thirty years.

In addition, we store personal data within the scope of the legal proof and retention obligations (eg according to the Commercial Code, Tax Code, Money Laundering Act). The statutory retention periods can be up to ten years. After this, the data is deleted.

§ 6 Social Media

We do not use so-called social plugins ("plugins") of the social networks Twitter and LinkedIn on our websites. Therefore, no active code is executed by social media providers on our sites. Rather, you will find on our website a button with a Twitter or LinkedIn link.

We expressly point out that we have no knowledge of the content and scope of the stored data on Twitter and LinkedIn and therefore refer to the currently valid privacy policy and contact details of the networks:

Twitter, Inc., 1355 Market St., Suite 900, San Francisco, California 94103, USA; Twitter has submitted to the EU-US Privacy Shield, Framework

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; LinkedIn has submitted to the EU-US Privacy Shield, Framework

We also provide a link to our Youtube account. Youtube is a trademark of Google Inc. ("Google") 1600 Amphitheater Parkway, Mountain, View, CA 94043, USA.

When videos are called via the link, a connection is made to Youtube servers. This will trigger further data processing. We have no influence on that.

Further information on data protection and the processing of your data on Youtube can be found at:

§ 7 Your Rights

You have the following rights with respect to your personal data:

- the right to request information in accordance with Art. 15 DS-GVO

- the right to correct in accordance with Art. 16 DS-GVO

- the right to delete in accordance with Art. 17 DS-GVO

- the right to restrict the processing in accordance with Art. 18 DS-GVO

- the right to object in accordance with Art. 21 DS-GVO

- the right to transmit data in accordance with Art. 35 DS-GVO

In addition, you have the option to contact the relevant regulatory authority:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

Prof. Dr. Michael Ronellenfitsch

Presse- und Öffentlichkeitsarbeit
Gustav-Stresemann-Ring 1
65189 Wiesbaden

Telefon.: (0611)1408-0
Telefax.: (0611)1408-611

§ 8 Opposition or revocation against the processing of your data

If you have given your consent to the processing of your data, you can revoke them at any time. Such revocation will affect the admissibility of the processing of your personal data after you have given it to us.

Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if, in particular, the processing is not required to fulfill a contract with you, which we describe in each case in the following description of the functions. In the event of such a disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling legitimate reasons on which we continue the processing.

Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your advertising conflict by using the contact details above.

§ 9 Amendments

We reserve the right to make changes and, if necessary, will adapt this data privacy statement in accordance with the data protection regulations.

As of April 10th, 2019