We take data privacy seriously so that you are secure


As a young start-up in the area of IT security, the protection of personal data is a particular concern, which we take seriously. We treat all data collected through your visit to our website confidentially and in accordance with the legal data protection regulations of the Federal Republic of Germany. With the following declaration we therefore inform you comprehensively about the type, use and storage of personal data on our website.

The protection of your privacy when processing personal data is an important concern for us. When you visit our website, our web servers store the IP address of your internet service provider, the website from which you visit us, the web pages you visit on our site and the date and duration of your visit as standard. A personalised evaluation of this data does not take place.

If you send us data via contact form, this data will be stored on our servers in the course of data backup. Your data will be used by us exclusively for processing your request. Your data will be treated strictly confidential. Your data will not be passed on to third parties.

Person in charge:

IT-Seal GmbH

Hilpertstr. 31

64295 Darmstadt

Tel.: +49 (0) 6151 / 4938990

E-Mail: kontakt@it-seal.de

Personal data

Personal data are data about your person. You do not need to provide any personal data to visit our website, and you do not have to provide any personal data to visit our website. In some cases, we may need your name and address and other information to provide you with services you requested.

The same applies if we supply you with information material on request or if we answer your inquiries. In these cases we will always point this out for you. Furthermore, we only store the data that you have automatically or voluntarily transmitted to us.

If you use one of our services, we usually only collect the data that is necessary to provide you with our service. We may ask you for further information, but this is voluntary. Whenever we process personal data, we do so in order to provide you with our service or to pursue our commercial goals.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Date and time of the request

  • Name of the requested file

  • Page from which the file was requested

  • Access status (file transferred, file not found, etc.)

  • the web browser and operating system used

  • complete IP address of the requesting computer

  • data volume transferred

This data is not merged with other data sources. Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our justified interest in improving the stability and functionality of our website.

For reasons of technical security, in particular to defend against attempts to attack our web server, this data is stored by us for a short time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user. In anonymised form, the data is also processed for statistical purposes; it is not compared with other data sets or passed on to third parties, even in excerpts. Only in the context of our server statistics, which we publish every two years in our activity report, is a presentation of the number of page impressions.


When you visit our website, we may store information on your computer in the form of cookies. Cookies are small files that are transferred from an Internet server to your browser and stored on its hard disk. Only the internet protocol address is stored - no personal data. This information, which is stored in the cookies, makes it possible to automatically recognize you the next time you visit our website, which makes it easier for you to use. The legal basis for the use of cookies is the legitimate interest according to Art. 6 para. 1 lit. f GDPR.

Of course you can also visit our website without accepting cookies. If you do not want your computer to be recognised on your next visit, you can also refuse the use of cookies by changing the settings in your browser to "refuse cookies". You will find the respective procedure in the operating instructions of your respective browser. If you refuse the use of cookies, however, this may result in restrictions in the use of some areas of our website.

Google Tag Manager

This website uses Google Tag Manager. The Tag Manager does not collect any personal information. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager. Google's privacy policy regarding this tool can be found here: https://www.google.de/tagmanager/use-policy.html

Google AdWords

Our website uses Google Conversion Tracking. If you have reached our website via an advertisement placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad served by Google. These cookies expire after 30 days and are not personally identifiable. If the user visits certain pages on our site and the cookie hasn't expired, we and Google can tell that the user clicked the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. As a result, cookies cannot be tracked across the websites of AdWords customers. The information collected through the conversion cookie is used to generate conversion statistics for those advertisers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can refuse the necessary setting of a cookie - for example, by changing your browser settings to disable the automatic setting of cookies generally or to set your browser to block cookies from the domain "googleleadservices.com".

Please note that you may not delete the opt-out cookies as long as you do not wish to record measurement data. If you have deleted all your cookies in the browser, you will have to set the respective opt-out cookie again.

Google Analytics with anonymization function

We use Google Analytics, a web analysis service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google" on our website. Google Analytics uses so-called "cookies", text files that are stored on your computer and thus enable an analysis of your use of the website.

The information generated by these cookies, such as time, place and frequency of your website visit, including your IP address, is transferred to Google in the USA and stored there.

We use Google Analytics with the addition "_gat._anonymizeIp" on our website. In this case, your IP address will already be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus made anonymous.

Google will use this information to evaluate your use of our website, to compile reports on website activities for us and to provide further services related to website and internet use. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google.

Google will, according to its own information, under no circumstances connect your IP address with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.

Google also offers a deactivation add-on for the most popular browsers, which gives you more control over what information Google collects about the sites you visit. The add-on tells the JavaScript(ga.js) of Google Analytics that no information about your website visit should be transmitted to Google Analytics. However, the Google Analytics browser disablement add-on does not prevent information from being sent to us or to other web analytics services we may use. For more information on how to install the browser add-on, please click on the link below: https://tools.google.com/dlpage/gaoptout?hl=de

Clicking the link will set an opt-out cookie in your browser, which is valid only for that browser and domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted, so you will have to click the link again.

If you have agreed to have Google link your web and app browsing history to your Google Account and use information from your Google Account to personalize ads, Google will use your information, along with Google Analytics data, to create audience lists for cross-device remarketing. Google Analytics first collects your Google-authenticated ID linked to your Google Account (i.e., personal information) on our website. Google Analytics will then temporarily link your ID to your Google Analytics data to optimise our target groups.

If you don't agree to this, you can opt-out by changing the settings in the "My Account" section of your Google Account.

Google SiteSearch (Google AJAX Search API )

On our site you can download Java-Script code of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you have enabled Java-Script in your browser and have not installed a Java-Script blocker, your browser may transmit personal data to Google. We do not know what data Google links to the data received and for what purposes Google uses this data. To prevent the execution of Java-Script code from Google altogether, you can install a Java-Script blocker (e.g. www.noscript.net). You will find more details in the data protection information of the provider:


Google Doubleclick

Doubleclick by Google is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Doubleclick by Google uses cookies to present you with advertisements relevant to you. In doing so, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads have been shown in your browser and which ads have been viewed. The cookies do not contain any personal information. DoubleClick's use of the DoubleClick cookie only enables Google and its partner websites to serve ads based on previous visits to our or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for evaluation and stored there. Google observes the data protection regulations of the "Privacy Shield" agreement and is registered with the "Privacy Shield" program of the US Department of Commerce. A transfer of data by Google to third parties only takes place due to legal regulations or within the scope of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

By using our website, you agree to the processing of the data collected about you by Google and the aforementioned manner of data processing and the purpose stated. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent the collection of the data generated by the cookies and related to your use of the websites to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link under the item DoubleClick deactivation extension. Alternatively, you can also deactivate the Doubleclick cookies with this opt-out.

YouTube in advanced privacy mode

We use the provider YouTube to integrate videos. The videos are embedded in the extended privacy mode. However, like most websites, YouTube uses cookies to collect information about visitors to its site. YouTube uses these cookies to collect video statistics, prevent fraud and improve the user experience. It also connects you to the Google DoubleClick network. If you start the video, this could trigger further data processing. We have no control over this. For more information about YouTube's privacy practices, please see their privacy policy: https://support.google.com/youtube/answer/7671399

Google reCaptcha

To protect your orders via internet form we use the service reCAPTCHA of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). The query is used to distinguish whether the input is human or abusive through automated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the service reCAPTCHA to Google. For this purpose your input will be transmitted to Google and used there. By using reCaptcha, you agree that the recognition you provide will be incorporated into the digitalisation of old works. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCaptcha is not combined with other data from Google. For these data the deviating data protection regulations of the company Google apply. You can find further information on Google's privacy policy at https://www.google.com/intl/de/policies/privacy/.

Userlike Live-Chat

This website uses Userlike, a live chat software of the company Userlike UG (limited liability) , Deisterweg 7, 51109 Köln. Userlike uses "cookies", text files that are stored on your computer and that enable a personal conversation in the form of a real-time chat on the website with you. The Userlike cookie is set by the live chat plugin to enable the live chat to keep the chat open while you surf and assigned to the same operator. The information about your usage and related data of the live chat is collected, stored and processed on Userlike servers in Germany. For further information, please refer to the privacy policy of Userlike UG (limited liability): www.userlike.com/privacy_policy .


For sending out newsletters we use the so-called double opt-in procedure, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed to us beforehand that you want us to activate the newsletter service. We will then send you a notification e-mail and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this e-mail. When you register for our newsletter, we will save your IP address and the date of registration. This storage is only used as proof in case a third party misuses your e-mail address to register you for the newsletter without your knowledge or authorization. If you do not wish to receive newsletters from us at a later date, you can object to this at any time without incurring any costs other than the transmission costs according to the basic rates.

Hotjar Datenschutzerklärung

Wir verwenden auf unserer Webseite Hotjar der Firma Hotjar Limited (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta), um Besucherdaten statistisch auszuwerten. Hotjar ist ein Dienst, der das Verhalten und das Feedback von Ihnen als Nutzer auf unserer Webseite durch eine Kombination von Analyse- und Feedback-Tools analysiert. Wir erhalten von Hotjar Berichte und visuelle Darstellungen, die uns zeigen wo und wie Sie sich auf unserer Seite “bewegen”. Personenbezogenen Daten werden automatisch anonymisiert und erreichen niemals die Server von Hotjar. Das heißt Sie werden als Webseitenbenutzer nicht persönlich identifiziert und wir lernen dennoch vieles über Ihr Userverhalten.

Was ist Hotjar?

Wie im oberen Abschnitt bereits erwähnt, hilft uns Hotjar das Verhalten unserer Seitenbesucher zu analysieren. Zu diesen Tools, die Hotjar anbietet,  gehören Heatmaps, Conversion Funnels, Visitor Recording, Incoming Feedback, Feedback Polls und Surveys (mehr Informationen darüber erhalten Sie unter https://www.hotjar.com/). Damit hilft uns Hotjar, Ihnen eine bessere Nutzererfahrung und ein besseres Service anzubieten. Es bietet somit einerseits eine gute Analyse über das Onlineverhalten, andererseits erhalten wir auch ein gutes Feedback über die Qualität unserer Webseite. Denn neben all den analysetechnischen Aspekten wollen wir natürlich auch einfach Ihre Meinung über unsere Webseite wissen. Und mit dem Feedbacktool ist genau das möglich.

Warum verwenden wir Hotjar auf unserer Webseite?

In den letzten Jahren nahm die Bedeutung von User Experience (also Benutzererfahrung) auf Webseiten stark zu. Und das auch aus gutem Grund. Eine Webseite soll so aufgebaut sein, dass Sie sich als Besucher wohl fühlen und sich einfach zurechtfinden. Wir können dank der Analyse-Tools und des Feedback-Tools von Hotjar unsere Webseite und unser Angebot attraktiver gestalten. Für uns besonders wertvoll erweisen sich die Heatmaps von Hotjar. Bei Heatmaps handelt es sich um eine Darstellungsform für die Visualisierung von Daten. Durch die Heatmaps von Hotjar sehen wir beispielsweise sehr genau, was Sie gerne anklicken, antippen und wohin Sie scrollen.

Welche Daten werden von Hotjar gespeichert?

Während Sie durch unsere Webseite surfen, sammelt Hotjar automatisch Informationen über Ihr Userverhalten. Um diese Informationen sammeln zu können, haben wir auf unserer Webseite einen eigenen Tracking-Code eingebaut. Folgende Daten können über Ihren Computer beziehungsweise Ihren Browser gesammelt werden:

  • IP-Adresse Ihres Computers (wird in einem anonymen Format gesammelt und gespeichert)
  • Bildschirmgröße
  • Browserinfos (welcher Browser, welche Version usw.)
  • Ihr Standort (aber nur das Land)
  • Ihre bevorzugte Spracheinstellung
  • Besuchte Webseiten (Unterseiten)
  • Datum und Uhrzeit des Zugriffs auf eine unserer Unterseiten (Webseiten)

Zudem speichern Cookies auch Daten, die auf Ihrem Computer (meist in Ihrem Browser) platziert werden. Darin werden keine personenbezogenen Daten gesammelt. Grundsätzlich gibt Hotjar keine gesammelten Daten an Dritte weiter. Hotjar weist allerdings ausdrücklich darauf hin, dass es manchmal notwendig ist, Daten mit Amazon Web Services zu teilen. Dann werden Teile Ihrer Informationen auf deren Servern gespeichert. Amazon ist aber durch eine Geheimhaltungspflicht gebunden, diese Daten nicht preiszugeben.

Auf die gespeicherten Informationen haben nur eine begrenzte Anzahl an Personen (Mitarbeiter von Hotjar) Zugriff. Die Hotjar-Server sind durch Firewalls und IP-Beschränkungen (Zugriff nur genehmigter IP-Adressen) geschützt. Firewalls sind Sicherheitssysteme, die Computer vor unerwünschten Netzwerkzugriffen schützen. Sie sollen als Barriere zwischen dem sicheren internen Netzwerk von Hotjar und dem Internet dienen. Weiters verwendet Hotjar für Ihre Dienste auch Drittunternehmen, wie etwa Google Analytics oder Optimizely. Diese Firmen können auch Informationen, die Ihr Browser an unsere Webseite sendet, speichern.

Folgende Cookies werden von Hotjar verwendet. Da wir uns unter anderem auf die Cookie-Liste aus der Datenschutzerklärung von Hotjar unter https://www.hotjar.com/legal/policies/cookie-information beziehen, liegt nicht bei jedem Cookie ein exemplarischer Wert vor. Folgender Absatz zeigt ein Beispiel eines verwendeten Hotjar-Cookies und erhebt keinen Anspruch auf Vollständigkeit.

Name: ajs_anonymous_id
Wert: %2258832463-7cee-48ee-b346-a195f18b06c3%22311200678-5
Verwendungszweck: Das Cookie wird gewöhnlich für Analysezwecke verwendet und hilft beim Zählen von Besuchern unserer Website, indem es verfolgt, ob Sie schon mal auf dieser Seite waren.
Ablaufdatum: nach einem Jahr

Wie lange und wo werden die Daten gespeichert?

Wir haben einen Tracking-Code auf unserer Webseite eingebaut, der an die Hotjar-Server in Irland (EU) übertragen wird. Dieser Tracking-Code kontaktiert die Server von Hotjar und sendet ein Skript an Ihren Computer oder Ihr Endgerät, mit dem Sie auf unsere Seite zugreifen. Das Skript erfasst bestimmte Daten in Bezug auf Ihre Interaktion mit unserer Webseite. Diese Daten werden dann zur Verarbeitung an die Server von Hotjar gesendet. Hotjar hat sich selbst eine 365-Tage-Datenspeicherungsfrist auferlegt. Das heißt alle Daten, die Hotjar gesammelt hat und die älter als ein Jahr sind, werden automatisch wieder gelöscht.

Wie kann ich meine Daten löschen bzw. die Datenspeicherung verhindern?

Hotjar speichert für die Analyse keine personenbezogenen Daten von Ihnen. Das Unternehmen wirbt sogar mit dem Slogan „We track behavior, not individuals“ (also „Wir tracken Userverhalten, aber keine identifizierbaren, individuellen Daten). Sie haben auch immer die Möglichkeit die Erhebung Ihrer Daten zu unterbinden. Dafür müssen Sie nur auf die „Opt-out-Seite“ gehen und auf „Hotjar deaktivieren“ klicken. Bitte beachten Sie, dass das Löschen von Cookies, die Nutzung des Privatmodus Ihres Browsers oder die Nutzung eines anderen Browsers dazu führt, Daten wieder zu erheben. Weiters können Sie auch in Ihrem Browser den „Do Not Track“-Button aktivieren. Im Browser Chrome beispielsweise müssen Sie dafür rechts oben auf die drei Balken klicken und auf „Einstellungen“ gehen. Dort finden Sie im Abschnitt „Datenschutz“ die Option „Mit Browserzugriffen eine “Do Not Track”-Anforderung senden”. Jetzt aktivieren Sie nur noch diese Schaltfläche und schon werden keinen Daten von Hotjar erhoben.

Mehr Details zur Datenschutzrichtlinie und welche Daten auf welche Art durch Hotjar erfasst werden finden Sie auf https://www.hotjar.com/legal/policies/privacy?tid=311200678.


Für ausgewählte Umfragen und Formulare verwenden wir Typeform, ein Formular-Tool der TYPEFORM S.L., Carrer Doctor Trueta, 113-119, Planta 1, 08005 Barcelona, Spanien; „Typeform“). Mit dem Ausfüllen eines Formulars werden die IP-Adresse des Users, Informationen zu Zeitpunkt und Dauer der Umfrage sowie die in Formularen gemachten Angaben des Users an Typeform übertragen. Wenn Sie nicht möchten, dass Ihre Daten durch Typeform verarbeitet werden, sollten Sie an Umfragen nicht teilnehmen und entsprechend gekennzeichnete Formulare nicht ausfüllen. Daten aus Umfragen können von uns statistisch ausgewertet und zu Marketingzwecken verarbeitet und genutzt werden. Selbstverständlich werden die Daten dafür anonymisiert, so dass keine Rückschlüsse auf Einzelpersonen möglich sind.

Die Datenverarbeitung beruht auf der Rechtsgrundlage des Art. 6 Abs. 1 S. 1 f DSGVO und dient unserem berechtigen Interesse an der Verbesserung und dem wirtschaftlichen Betrieb unseres Dienstes.


We have taken technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees as well as service providers working for us are obliged to comply with the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a continuous improvement process and our privacy policy is constantly being revised. Please make sure that you have the latest version.

Rights of data subjects

You have the right to information, correction, deletion or restriction of the processing of your stored data, a right to object to the processing as well as a right to data transferability and to complain in accordance with the requirements of data protection law at any time.

Right of access:

You can demand information from us as to whether and to what extent we handle your data.

Right of rectification:

If we process your data that is incomplete or incorrect, you can demand that we correct or complete it at any time.

Right of cancellation:

You can demand the deletion of your data from us if we process them unlawfully or if the processing interferes disproportionately with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of statutory storage obligations.

Irrespective of the exercise of your right to deletion, we will delete your data immediately and completely as long as there is no legal obligation to retain them.

Right to restrict processing:

You may request us to restrict the processing of your data if

– you dispute the accuracy of the data, for a period of time that allows us to verify the accuracy of the data.

– the processing of the data is unlawful, but you refuse to allow it to be deleted and instead demand a restriction on the use of the data,

– we no longer need the data for the intended purpose, but you still need the data to assert or defend legal claims, or

– you have lodged an objection to the processing of the data.

Right to data transferability:

You can demand that we provide you with the data you have provided us with in a structured, common and machine-readable format and that you can transfer this data to another responsible party without hindrance from us, provided that

– we process this data on the basis of a revocable consent granted by you or for the fulfilment of a contract between us, and

– such processing is carried out by means of automated procedures.

If technically feasible, you may request us to transfer your data directly to another responsible party.

Right of objection:

If we process your data out of a legitimate interest, you may object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate reasons for processing which outweigh your interests, rights and freedoms or the processing is for the purpose of asserting, exercising or defending legal claims. You may object to the processing of your data for the purpose of direct marketing at any time without stating reasons.

Right of appeal:

If you have the opinion that we are violating German or European data protection law in processing your data, we ask you to contact us so that we can clarify any questions you may have. Of course, you also have the right to contact the supervisory authority responsible for you, the respective State Office for Data Protection Supervision.

If you wish to assert any of the above rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.

Changes to this privacy policy

We reserve the right to change our privacy policy if new technologies make this necessary. Please make sure that you have the latest version. If fundamental changes are made to this data protection declaration, we will announce these on our website.

All interested parties and visitors to our website can contact us regarding data protection issues at

Mr. Christian Volkmer

Projekt 29 GmbH & Co. KG

Ostengasse 14

93047 Regensburg

Tel.: 0941 2986930

Fax: 0941 29869316

E-Mail: anfragen@projekt29.de

Internet: www.projekt29.de 

Information security: Are you interested in our solutions on security awareness?

We look forward to hearing from you.

    I want to stay in touch and am interested in receiving occasional updates from IT-Seal (bi-monthly newsletter).