Privacy policy

Protecting your personal data genuinely matters to us – not only because the law requires it, but because data protection is part of our work. This policy explains which data is processed when you visit this website, for what purpose, and which rights you have.

1. Controller

The controller responsible for data processing on this website is:

Represented by the managing director Vaidas Martusis.

2. Principles – what this website does not do

This website is deliberately designed to be data-minimal:

• No cookies are set.
• There is no tracking and no audience measurement (no analytics tools, no advertising networks).
• No third-party content is loaded. Fonts are served locally from our server; there is no connection to Google Fonts or similar services.
• No social media plugins, map services or video embeds are used.

A cookie banner is therefore not required.

3. Hosting and server log files

This website is hosted by an external service provider: Namecheap, Inc. (4600 East Washington Street, Suite 305, Phoenix, AZ 85034, USA). When you access the website, the web server automatically processes information transmitted by your browser (server log files):

• IP address of the requesting device
• Date and time of access
• Requested page or file and amount of data transferred
• Referrer URL (previously visited page)
• Browser type, operating system and language

This processing serves to ensure the stable and secure operation of the website and to defend against attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). Log files are deleted after a short period unless they are required to investigate a security incident.

A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The provider is based outside the European Union; server log data may therefore be transferred to a third country. Such transfers are based on the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR). Further information is available in the provider's privacy policy: https://www.namecheap.com/legal/general/privacy-policy/

4. Contact form and e-mail contact

If you contact us via the contact form or by e-mail, we process the data you provide (name, company, e-mail address, optional phone number, selected topic, your message, and the time and language of the request) exclusively to handle your request and for possible follow-up questions.

The data is transmitted encrypted (TLS) to a script on our web server, which forwards your request by e-mail to our mailbox. It is not shared with third parties. To prevent automated spam submissions, the IP address is processed briefly to limit the request rate.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures or performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). Where you have given consent, the legal basis is Art. 6 (1) (a) GDPR; you may withdraw consent at any time with effect for the future.

Your data is deleted once your request has been fully processed and no statutory retention obligations apply. If a business relationship arises, the retention periods under commercial and tax law apply.

5. Local storage of your language preference

To display the website in the language you have chosen, your browser stores your language selection in local storage ("tsbsec-lang"). This entry contains only the language code, is not transmitted to us and serves solely the function you requested. The legal basis is § 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). You can delete the entry at any time via your browser settings.

6. Encryption

For security reasons and to protect the transmission of confidential content, this website uses TLS encryption (recognisable by "https://" and the padlock symbol in your browser). Data you transmit to us cannot be read by third parties.

7. Your rights

With regard to your personal data you have the following rights against us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, an informal message to info@tsbsec.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

8. Changes to this privacy policy

We update this privacy policy whenever the legal situation or our website changes. The version published on this page applies.