We take data privacy seriously so that you are secure


As a young start-up in the area of IT security, the protection of personal data is a particular concern, which we take seriously. We treat all data collected through your visit to our website confidentially and in accordance with the legal data protection regulations of the Federal Republic of Germany. With the following declaration we therefore inform you comprehensively about the type, use and storage of personal data on our website.

The protection of your privacy when processing personal data is an important concern for us. When you visit our website, our web servers store the IP address of your internet service provider, the website from which you visit us, the web pages you visit on our site and the date and duration of your visit as standard. A personalised evaluation of this data does not take place.

If you send us data via contact form, this data will be stored on our servers in the course of data backup. Your data will be used by us exclusively for processing your request. Your data will be treated strictly confidential. Your data will not be passed on to third parties.

Person in charge:
IT-Seal GmbH
Hilpertstr. 31
64295 Darmstadt
Tel.: +49 (0) 6151 / 4938990
E-Mail: kontakt@it-seal.de

Personal data

Personal data are data about your person. You do not need to provide any personal data to visit our website, and you do not have to provide any personal data to visit our website. In some cases, we may need your name and address and other information to provide you with services you requested.

The same applies if we supply you with information material on request or if we answer your inquiries. In these cases we will always point this out for you. Furthermore, we only store the data that you have automatically or voluntarily transmitted to us.

If you use one of our services, we usually only collect the data that is necessary to provide you with our service. We may ask you for further information, but this is voluntary. Whenever we process personal data, we do so in order to provide you with our service or to pursue our commercial goals.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Date and time of the request

  • Name of the requested file

  • Page from which the file was requested

  • Access status (file transferred, file not found, etc.)

  • the web browser and operating system used

  • complete IP address of the requesting computer

  • data volume transferred

This data is not merged with other data sources. Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our justified interest in improving the stability and functionality of our website.

For reasons of technical security, in particular to defend against attempts to attack our web server, this data is stored by us for a short time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user. In anonymised form, the data is also processed for statistical purposes; it is not compared with other data sets or passed on to third parties, even in excerpts. Only in the context of our server statistics, which we publish every two years in our activity report, is a presentation of the number of page impressions.


When you visit our website, we may store information on your computer in the form of cookies. Cookies are small files that are transferred from an Internet server to your browser and stored on its hard disk. Only the internet protocol address is stored - no personal data. This information, which is stored in the cookies, makes it possible to automatically recognize you the next time you visit our website, which makes it easier for you to use. The legal basis for the use of cookies is the legitimate interest according to Art. 6 para. 1 lit. f GDPR.

Of course you can also visit our website without accepting cookies. If you do not want your computer to be recognised on your next visit, you can also refuse the use of cookies by changing the settings in your browser to "refuse cookies". You will find the respective procedure in the operating instructions of your respective browser. If you refuse the use of cookies, however, this may result in restrictions in the use of some areas of our website.

Google Tag Manager

This website uses Google Tag Manager. The Tag Manager does not collect any personal information. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager. Google's privacy policy regarding this tool can be found here: https://www.google.de/tagmanager/use-policy.html

Google AdWords

Our website uses Google Conversion Tracking. If you have reached our website via an advertisement placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad served by Google. These cookies expire after 30 days and are not personally identifiable. If the user visits certain pages on our site and the cookie hasn't expired, we and Google can tell that the user clicked the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. As a result, cookies cannot be tracked across the websites of AdWords customers. The information collected through the conversion cookie is used to generate conversion statistics for those advertisers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can refuse the necessary setting of a cookie - for example, by changing your browser settings to disable the automatic setting of cookies generally or to set your browser to block cookies from the domain "googleleadservices.com".

Please note that you may not delete the opt-out cookies as long as you do not wish to record measurement data. If you have deleted all your cookies in the browser, you will have to set the respective opt-out cookie again.

Google Analytics with anonymization function

We use Google Analytics, a web analysis service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google" on our website. Google Analytics uses so-called "cookies", text files that are stored on your computer and thus enable an analysis of your use of the website.

The information generated by these cookies, such as time, place and frequency of your website visit, including your IP address, is transferred to Google in the USA and stored there.

We use Google Analytics with the addition "_gat._anonymizeIp" on our website. In this case, your IP address will already be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus made anonymous.

Google will use this information to evaluate your use of our website, to compile reports on website activities for us and to provide further services related to website and internet use. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google.

Google will, according to its own information, under no circumstances connect your IP address with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.

Google also offers a deactivation add-on for the most popular browsers, which gives you more control over what information Google collects about the sites you visit. The add-on tells the JavaScript(ga.js) of Google Analytics that no information about your website visit should be transmitted to Google Analytics. However, the Google Analytics browser disablement add-on does not prevent information from being sent to us or to other web analytics services we may use. For more information on how to install the browser add-on, please click on the link below: https://tools.google.com/dlpage/gaoptout?hl=de

Clicking the link will set an opt-out cookie in your browser, which is valid only for that browser and domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted, so you will have to click the link again.

If you have agreed to have Google link your web and app browsing history to your Google Account and use information from your Google Account to personalize ads, Google will use your information, along with Google Analytics data, to create audience lists for cross-device remarketing. Google Analytics first collects your Google-authenticated ID linked to your Google Account (i.e., personal information) on our website. Google Analytics will then temporarily link your ID to your Google Analytics data to optimise our target groups.

If you don't agree to this, you can opt-out by changing the settings in the "My Account" section of your Google Account.

Google SiteSearch (Google AJAX Search API )

On our site you can download Java-Script code of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you have enabled Java-Script in your browser and have not installed a Java-Script blocker, your browser may transmit personal data to Google. We do not know what data Google links to the data received and for what purposes Google uses this data. To prevent the execution of Java-Script code from Google altogether, you can install a Java-Script blocker (e.g. www.noscript.net). You will find more details in the data protection information of the provider:


Google Doubleclick

Doubleclick by Google is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Doubleclick by Google uses cookies to present you with advertisements relevant to you. In doing so, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads have been shown in your browser and which ads have been viewed. The cookies do not contain any personal information. DoubleClick's use of the DoubleClick cookie only enables Google and its partner websites to serve ads based on previous visits to our or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for evaluation and stored there. Google observes the data protection regulations of the "Privacy Shield" agreement and is registered with the "Privacy Shield" program of the US Department of Commerce. A transfer of data by Google to third parties only takes place due to legal regulations or within the scope of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

By using our website, you agree to the processing of the data collected about you by Google and the aforementioned manner of data processing and the purpose stated. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent the collection of the data generated by the cookies and related to your use of the websites to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link under the item DoubleClick deactivation extension. Alternatively, you can also deactivate the Doubleclick cookies with this opt-out.

YouTube in advanced privacy mode

We use the provider YouTube to integrate videos. The videos are embedded in the extended privacy mode. However, like most websites, YouTube uses cookies to collect information about visitors to its site. YouTube uses these cookies to collect video statistics, prevent fraud and improve the user experience. It also connects you to the Google DoubleClick network. If you start the video, this could trigger further data processing. We have no control over this. For more information about YouTube's privacy practices, please see their privacy policy: https://support.google.com/youtube/answer/7671399

Google reCaptcha

To protect your orders via internet form we use the service reCAPTCHA of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). The query is used to distinguish whether the input is human or abusive through automated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the service reCAPTCHA to Google. For this purpose your input will be transmitted to Google and used there. By using reCaptcha, you agree that the recognition you provide will be incorporated into the digitalisation of old works. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCaptcha is not combined with other data from Google. For these data the deviating data protection regulations of the company Google apply. You can find further information on Google's privacy policy at https://www.google.com/intl/de/policies/privacy/.

Userlike Live-Chat

This website uses Userlike, a live chat software of the company Userlike UG (limited liability) , Deisterweg 7, 51109 Köln. Userlike uses "cookies", text files that are stored on your computer and that enable a personal conversation in the form of a real-time chat on the website with you. The Userlike cookie is set by the live chat plugin to enable the live chat to keep the chat open while you surf and assigned to the same operator. The information about your usage and related data of the live chat is collected, stored and processed on Userlike servers in Germany. For further information, please refer to the privacy policy of Userlike UG (limited liability): www.userlike.com/privacy_policy .


For sending out newsletters we use the so-called double opt-in procedure, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed to us beforehand that you want us to activate the newsletter service. We will then send you a notification e-mail and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this e-mail. When you register for our newsletter, we will save your IP address and the date of registration. This storage is only used as proof in case a third party misuses your e-mail address to register you for the newsletter without your knowledge or authorization. If you do not wish to receive newsletters from us at a later date, you can object to this at any time without incurring any costs other than the transmission costs according to the basic rates.


Wir nutzen Hotjar, um die Bedürfnisse unserer Nutzer besser zu verstehen und das Angebot und die Erfahrung auf dieser Webseite zu optimieren. Mithilfe der Technologie von Hotjar bekommen wir ein besseres Verständnis von den Erfahrungen unserer Nutzer (z.B. wieviel Zeit Nutzer auf welchen Seiten verbringen, welche Links sie anklicken, was sie mögen und was nicht etc.) und das hilft uns, unser Angebot am Feedback unserer Nutzer auszurichten. Hotjar arbeitet mit Cookies und anderen Technologien, um Daten über das Verhalten unserer Nutzer und über ihre Endgeräte zu erheben, insbesondere IP Adresse des Geräts (wird während Ihrer Website-Nutzung nur in anonymisierter Form erfasst und gespeichert), Bildschirmgröße, Gerätetyp (Unique Device Identifiers), Informationen über den verwendeten Browser, Standort (nur Land), zum Anzeigen unserer Webseite bevorzugte Sprache. Hotjar speichert diese Informationen in unserem Auftrag in einem pseudonymisierten Nutzerprofil. Hotjar ist es vertraglich verboten, die in unserem Auftrag erhobenen Daten zu verkaufen.


Für ausgewählte Umfragen und Formulare verwenden wir Typeform, ein Formular-Tool der TYPEFORM S.L., Carrer Doctor Trueta, 113-119, Planta 1, 08005 Barcelona, Spanien; „Typeform“). Mit dem Ausfüllen eines Formulars werden die IP-Adresse des Users, Informationen zu Zeitpunkt und Dauer der Umfrage sowie die in Formularen gemachten Angaben des Users an Typeform übertragen. Wenn Sie nicht möchten, dass Ihre Daten durch Typeform verarbeitet werden, sollten Sie an Umfragen nicht teilnehmen und entsprechend gekennzeichnete Formulare nicht ausfüllen. Daten aus Umfragen können von uns statistisch ausgewertet und zu Marketingzwecken verarbeitet und genutzt werden. Selbstverständlich werden die Daten dafür anonymisiert, so dass keine Rückschlüsse auf Einzelpersonen möglich sind.

Die Datenverarbeitung beruht auf der Rechtsgrundlage des Art. 6 Abs. 1 S. 1 f DSGVO und dient unserem berechtigen Interesse an der Verbesserung und dem wirtschaftlichen Betrieb unseres Dienstes.


We have taken technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees as well as service providers working for us are obliged to comply with the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a continuous improvement process and our privacy policy is constantly being revised. Please make sure that you have the latest version.

Rights of data subjects

You have the right to information, correction, deletion or restriction of the processing of your stored data, a right to object to the processing as well as a right to data transferability and to complain in accordance with the requirements of data protection law at any time.

Right of access:

You can demand information from us as to whether and to what extent we handle your data.

Right of rectification:

If we process your data that is incomplete or incorrect, you can demand that we correct or complete it at any time.

Right of cancellation:

You can demand the deletion of your data from us if we process them unlawfully or if the processing interferes disproportionately with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of statutory storage obligations.

Irrespective of the exercise of your right to deletion, we will delete your data immediately and completely as long as there is no legal obligation to retain them.

Right to restrict processing:

You may request us to restrict the processing of your data if

– you dispute the accuracy of the data, for a period of time that allows us to verify the accuracy of the data.

– the processing of the data is unlawful, but you refuse to allow it to be deleted and instead demand a restriction on the use of the data,

– we no longer need the data for the intended purpose, but you still need the data to assert or defend legal claims, or

– you have lodged an objection to the processing of the data.

Right to data transferability:

You can demand that we provide you with the data you have provided us with in a structured, common and machine-readable format and that you can transfer this data to another responsible party without hindrance from us, provided that

– we process this data on the basis of a revocable consent granted by you or for the fulfilment of a contract between us, and

– such processing is carried out by means of automated procedures.

If technically feasible, you may request us to transfer your data directly to another responsible party.

Right of objection:

If we process your data out of a legitimate interest, you may object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate reasons for processing which outweigh your interests, rights and freedoms or the processing is for the purpose of asserting, exercising or defending legal claims. You may object to the processing of your data for the purpose of direct marketing at any time without stating reasons.

Right of appeal:

If you have the opinion that we are violating German or European data protection law in processing your data, we ask you to contact us so that we can clarify any questions you may have. Of course, you also have the right to contact the supervisory authority responsible for you, the respective State Office for Data Protection Supervision.

If you wish to assert any of the above rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.

Changes to this privacy policy

We reserve the right to change our privacy policy if new technologies make this necessary. Please make sure that you have the latest version. If fundamental changes are made to this data protection declaration, we will announce these on our website.

All interested parties and visitors to our website can contact us regarding data protection issues at

Mr. Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Tel.: 0941 2986930
Fax: 0941 29869316
E-Mail: anfragen@projekt29.de
Internet: www.projekt29.de 

Information security: Are you interested in our solutions on security awareness?

We look forward to hearing from you.

    I want to stay in touch and am interested in receiving occasional updates from IT-Seal (bi-monthly newsletter).

    IT-Seal Robbe negativ