Privacy Policy

At inCevion GmbH ("inCevion", "we", "our", or "us"), we recognize the importance of protecting personal data and respecting individual privacy rights. We process personal data exclusively in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the German Federal Data Protection Act ("BDSG"), and all other applicable data protection legislation.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website or otherwise interact with us.

1. Controller

Unless otherwise stated in this Privacy Policy, the controller responsible for the processing of personal data within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:

Email: contact@incevion.com

Website: www.incevion.com

2. Contact Regarding Data Protection

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us at:

Email: privacy@incevion.com or phone: +49 761 888 4 22 0

3. Categories of Personal Data

Depending on the nature of your interaction with us, we may process the following categories of personal data:

• Identification data (name, title)
• Contact details (email address, telephone number, postal address)
• Company and professional information
• Communication content
• Technical usage data
• IP address
• Browser and device information
• Log file information
• Website usage statistics

We collect personal data only where necessary for the respective purpose and in accordance with applicable law.

4. Purposes and Legal Bases of Processing

We process personal data for the following purposes and on the following legal bases:

Website Operation and Security

Purpose: Ensuring the secure, stable, and efficient operation of our website.

Legal Basis: Article 6(1)(f) GDPR (legitimate interests).

Our legitimate interest consists of maintaining the security, integrity, and functionality of our online services.

Business Communications and Contact Inquiries

Purpose: Handling inquiries, correspondence, and business communications.

Legal Basis:

• Article 6(1)(b) GDPR
• Article 6(1)(f) GDPR

Contract Management

Purpose: Establishing, performing, and managing contractual relationships.

Legal Basis:

• Article 6(1)(b) GDPR
• Article 6(1)(c) GDPR where statutory obligations apply

Marketing Communications

Purpose: Providing newsletters, event information, corporate news, and marketing communications.

Legal Basis:

• Article 6(1)(a) GDPR (consent).

Consent may be withdrawn at any time with effect for the future.

5. Server Log Files

When accessing our website, certain technical information is automatically collected and stored in server log files.

This may include:

• IP address
• Browser type and version
• Device information
• Operating system
• Referrer URL
• Date and time of access
• Requested pages and resources

Processing is required to ensure system security, troubleshoot technical issues, and protect against unauthorized access.

Legal Basis: Article 6(1)(f) GDPR.

6. Contact Forms and Email Communications

If you contact us by email or via a contact form, the information you provide will be processed exclusively for handling your inquiry and any related business communication.

The processing is based on:

• Article 6(1)(b) GDPR
• Article 6(1)(f) GDPR

Personal data will not be disclosed to third parties except where necessary to process your request, required by law, or otherwise permitted under applicable legislation.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to ensure functionality, improve user experience, and perform analytical evaluations.

Where legally required, non-essential cookies are only activated after obtaining your explicit consent.

Cookies may be classified as:

Strictly Necessary Cookies

Required for the operation, security, and functionality of the website.

Legal Basis: Article 6(1)(f) GDPR.

Analytics Cookies

Used to analyze website performance and visitor interaction.

Legal Basis: Article 6(1)(a) GDPR.

Marketing Cookies

Used for marketing and advertising purposes.

Legal Basis: Article 6(1)(a) GDPR.

Detailed information on the cookies used and their retention periods is available through our Cookie Consent Management Platform.

8. Social Media Presence

We maintain professional profiles on social media platforms, including but not limited to:

• LinkedIn

When visiting these platforms, personal data may be processed by the respective operators under their own privacy policies. We have no influence over such processing activities.

9. Recipients of Personal Data

Your personal data may be disclosed to carefully selected service providers and business partners where necessary for legitimate business purposes.

Recipients may include, in particular:

• Hosting and infrastructure providers
• Microsoft 365 service providers
• Cloud and storage service providers
• IT maintenance and support providers
• Professional advisers such as auditors, tax advisers and legal counsel
• Public authorities where disclosure is required by law

Where service providers process personal data on our behalf, appropriate Data Processing Agreements (DPAs) are concluded in accordance with Article 28 GDPR.

10. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure that adequate safeguards are implemented, including:

• European Commission adequacy decisions;
• Standard Contractual Clauses approved by the European Commission; or
• Other lawful transfer mechanisms recognized by the GDPR.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law.

Retention periods may include:

• Contact requests: up to three years following the last communication
• Contractual data: up to ten years where statutory retention obligations apply
• Technical log files: up to ninety days
• Newsletter subscriptions: until withdrawal of consent

Longer retention periods may apply where required by law or necessary for the establishment, exercise, or defence of legal claims.

12. Data Subject Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

13. Right to Object

Where personal data is processed based on Article 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object at any time without providing any specific reason.

14. Security Measures

inCevion GmbH maintains appropriate technical and organizational measures designed to ensure a level of security appropriate to the risk associated with the processing of personal data, taking into account the state of the art, implementation costs, and the nature, scope, context and purposes of processing.

15. Amendments to this Privacy Policy

We reserve the right to update or amend this Privacy Policy from time to time in order to reflect changes in legal requirements, technical developments, or our processing activities.

The most current version will always be available on this website.