Privacy

Privacy

1. Responsible entity

Redlings IT-Security & Penetration Testing GmbH
Neckarauer Str. 106–116
68163 Mannheim, Germany
Phone: +49 621 48 345 010
Email: info@redlings.com

Data Protection Officer: Dr. Ewan Fleischmann, c/o Redlings GmbH, address as above, info@redlings.com

2. Data we process

This website processes personal data only to the extent necessary for providing the website and communicating with you. We do not use analytics tools, advertising trackers, or social media plugins.

2.1 Server log files

When you access this website, the hosting provider automatically stores information in server log files:

  • IP address (truncated or anonymised where possible)
  • Date and time of access
  • Page or file accessed
  • Data volume transferred
  • Referrer URL (previously visited page)
  • Browser and operating system used (User-Agent)

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in the technically error-free display and security of the website). Log files are deleted or anonymised after a maximum of 14 days.

2.2 Contact form

When you contact us via the contact form on this website, we process the following data:

  • Name (required)
  • Email address (required)
  • Company (optional)
  • Subject (selection, optional)
  • Message (required)
  • Consent to processing (required)

Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent). Your data will be used exclusively to answer your enquiry and deleted after final processing, unless statutory retention periods apply.

To protect against spam and automated submissions, we use technical measures (honeypot, time check, rate limiting). No personal data is transmitted to third parties in this process.

2.3 Application form (job postings)

When you apply via the application form on one of our job postings, we process the following data:

  • Name (required)
  • Email address (required)
  • Phone number (optional)
  • Position you are applying for (required, pre-filled)
  • Cover letter (required)
  • CV as PDF file, maximum 10 MB (required)
  • Consent to processing (required)

Processing is based on § 26 BDSG (data processing in the context of the application process) and Art. 6(1)(b) GDPR. Your application data will be deleted no later than 6 months after completion of the application process, unless you have explicitly consented to longer storage.

The uploaded PDF file is stored in an encrypted directory and used exclusively for the application process. The file is deleted after completion.

2.4 Newsletter (Redlings Brief)

To deliver our newsletter, we process your email address and the subscription timestamp. The legal basis is your consent (Art. 6 (1) (a) GDPR), which we log (hashed IP address, browser identifier, timestamp). The newsletter is sent approximately monthly via our email service provider, which acts as a data processor. You can unsubscribe in every email. Your data is deleted once you unsubscribe. There is no tracking and no profiling.

3. Cookies

This website uses no tracking cookies, no analytics cookies, and no advertising cookies.

Only a technically necessary session cookie is set when you log in as an administrator (WordPress login). This cookie is required for the operation of the website and is deleted when the browser is closed. The legal basis is Art. 6(1)(f) GDPR.

You will not be bothered by a cookie banner when visiting the website, as no non-essential cookies are set.

4. No sharing with third parties

We do not share your personal data with third parties, except:

  • to processors (hosting provider) who support us in providing the website and are bound by data confidentiality obligations;
  • when we are legally obliged to do so (e.g., official order);
  • when you have explicitly consented.

We do not sell data. We do not engage in data marketing.

5. External links

Our website contains links to external services (LinkedIn, YouTube). These are pure referral links, when you click, you leave our website. No data is transferred to these services unless you click the link yourself. We do not embed social media plugins or frames that would automatically transfer data.

6. Storage duration

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention periods exist. Specifically:

  • Server log files: after a maximum of 14 days
  • Contact form data: after final processing
  • Application data: no later than 6 months after completion of the process
  • Uploaded CV files: after completion of the process

7. Your rights

You have the following rights under GDPR:

  • Access (Art. 15 GDPR): You can request information about your data stored with us.
  • Rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
  • Erasure (Art. 17 GDPR): You can request the deletion of your data, provided no retention obligations exist.
  • Restriction of processing (Art. 18 GDPR): You can request the restriction of processing.
  • Data portability (Art. 20 GDPR): You can request the transfer of your data in a structured, commonly used format.
  • Objection (Art. 21 GDPR): You can object to processing to the extent it is based on legitimate interest.
  • Withdrawal of consent (Art. 7(3) GDPR): You can withdraw consent at any time.

To exercise your rights, please contact us by email at info@redlings.com or by post at the address above.

8. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the supervisory authority of the federal state in which you have your residence, or the authority responsible for us:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany

9. Data security

We use technical and organisational security measures to protect your data against manipulation, loss and unauthorised access. These include:

  • TLS encryption of the entire website (HTTPS)
  • Rate limiting and spam protection for forms
  • Protected storage of uploaded files outside public URLs, accessible only via token-secured links
  • Token-secured download links with expiry date
  • Regular security review of our systems

Our website is hosted by Hetzner Online GmbH (Falkenstein, Germany) as a data processor under an agreement pursuant to Art. 28 GDPR. Your data is processed in Germany and is not transferred to third countries.

10. Changes

We may adapt this privacy policy to account for new legal requirements or changes to our services. The respectively current version available on our website shall apply.