Privacy information

1. Data controller

I.S.S. Security – International Security Service e. Kfm., proprietor Can Ördek, Große Bergstraße 142, 22767 Hamburg, Germany. Phone: +49 40 607 737 490, mobile: +49 172 408 86 62, email: info@iss-security.de.

2. Website operation

Technically necessary connection data, including IP address, access time, requested resources, browser information and response status, are processed to deliver and secure the website and to diagnose technical errors. Legal basis: Art. 6(1)(f) GDPR. Logging is performed by the hosting provider; retention depends on its actual configuration.

3. Contact requests

Contact information and messages sent by email, telephone or the contact form are used to respond to your enquiry. The form processes your name, email, optional phone number, selected service and message and forwards the request by email. Legal basis: Art. 6(1)(b) GDPR for pre-contractual measures, otherwise Art. 6(1)(f) GDPR. Messages are deleted when no longer necessary, subject to statutory retention obligations.

4. Technical session

The form uses a temporary PHP session and technically necessary session cookie to protect against unauthorised submissions (Art. 6(1)(f) GDPR). Storage and access to this necessary cookie are based on section 25(2)(2) TDDDG. The website as supplied has no analytics or marketing cookies.

5. Recipients

The website hosting and email providers may process connection and message data as technical service providers. Other disclosures occur only as necessary to process an enquiry, perform a contract or comply with law.

6. Your rights

Subject to applicable conditions you may request access, correction, erasure, restriction, portability or object to processing under Arts. 15–21 GDPR. You may lodge a complaint with the competent data-protection authority. Contact info@iss-security.de about privacy matters.

7. Facebook and Instagram

This privacy notice also applies to the official Facebook and Instagram channels operated by I.S.S. Security. We use these channels to provide information about our business and services and communicate with customers and interested persons. The platform provider for users in the European Economic Area is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Our processing on these channels

When you comment, react to content or send us a message, we process the profile details and username visible to us, any contact information you provide, and the contents of your posts and messages. We use these data to respond to enquiries, communicate and manage our business presence. Public posts and comments may be visible to other users. Please do not share confidential operational information in public comments.

Our general communication and business presentation are based on Art. 6(1)(f) GDPR. Our legitimate interests are making information about our services available and responding through users’ chosen communication channels. Specific contractual enquiries are processed under Art. 6(1)(b) GDPR. Where processing relies on consent, Art. 6(1)(a) GDPR applies; consent may be withdrawn with future effect.

Meta processing and page statistics

When you visit Facebook or Instagram, Meta processes personal data, including usage, device and connection data. Depending on settings and features used, Meta may link information to an account and process it for personalised content, advertising and audience measurement. Processing may also affect visitors who are not logged in. Meta’s own processing is described in its privacy notices.

For the collection and processing of personal data to generate Facebook Page Insights, we and Meta are joint controllers under Art. 26 GDPR. We receive aggregated statistics. Meta’s addendum describes the allocation of responsibilities, including Meta’s primary responsibility for informing data subjects and handling their rights relating to Insights data. Our own obligations remain in place. For Instagram, responsibilities depend on the particular features and processing involved; the Facebook addendum does not automatically cover all Instagram processing.

Meta may process data outside the EU or EEA, particularly in the United States. Meta’s privacy notices provide information about the applicable transfer mechanisms, safeguards and retention. We do not have access to all of Meta’s processing operations or retention periods.

• Facebook privacy notice
• Instagram privacy notice
• Facebook Page Insights addendum
• Information about Page Insights

Retention and your rights

Enquiries handled by us are deleted when no longer necessary, subject to statutory retention obligations or legitimate reasons for further retention. Deletion by us does not necessarily remove every copy or processing operation at Meta. Contact info@iss-security.de to exercise your rights regarding our processing; you may also contact Meta directly regarding its processing, including jointly controlled processing. You can contact us by telephone, email or our website form instead of using social networks.

8. Website distinction and objection

The supplied website does not embed Facebook or Instagram feeds, social plugins or the Meta pixel. A normal external link is not an embed. Opening such a link takes you to the platform. Information about necessary website cookies does not describe cookies and technologies on Facebook or Instagram.

You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR. You may object to processing for direct marketing at any time without giving such grounds.

9. Updates

This notice describes the supplied website using locally hosted images and fonts and a self-hosted contact form. New services may require changes to this notice.