Privacy Policy

In short: This website does not set cookies, does not use analytics or advertising services and does not load content from third parties. We only process personal data if you write to us, submit a form or book an appointment.

1. Controller

Sachverständigenbüro Schulte, owner Heinrich Markus Schulte
Grünberger Weg 9, 40627 Düsseldorf, Germany
Phone +49 211 93375777 · Email mschulte@itschulte.de

For data protection questions you can reach us at dsb@itschulte.de.

2. Hosting and server log files

The website is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on servers in Germany. A data processing agreement under Art. 28 GDPR is in place with IONOS.

When you access the website, the server processes technically necessary data: IP address, date and time, page accessed, amount of data transferred, browser and operating system as well as the previously visited page. This serves to deliver the website, keep it secure and fend off attacks. The legal basis is Art. 6(1)(f) GDPR. The log files are only stored for a limited period and then deleted or anonymised.

3. Contact by email and phone

If you contact us by email or phone, we process your details to handle your request. The legal basis is Art. 6(1)(b) GDPR where a contractual relationship or pre-contractual measures are concerned, otherwise Art. 6(1)(f) GDPR.

4. Contact, enquiry and licence forms

The forms on this website (contact, Readiness Check, licence enquiry, white paper, profile) transmit your entries in encrypted form to our web server. From there they are forwarded to us by email. The contents are not stored on the web server.

• Data processed: name, company, email address, optionally phone number, your message and your selection in the form.
• Purpose: handling your enquiry and preparing a quote. For the white paper and the profile we provide the document: the download starts directly, and we also send a personal download link valid for 7 days to the email address provided. In doing so we learn that you requested the document and may contact you once.
• Legal basis: your consent under Art. 6(1)(a) GDPR and Art. 6(1)(b) GDPR for pre-contractual enquiries.
• Abuse protection: to prevent mass automated submissions, we store a non-reversible, salted hash of your IP address for a maximum of one hour. In addition, your browser automatically solves a small computational task while you fill in the form (self-hosted captcha without cookies and without third parties). No personal data is transmitted in the process; only the used task is stored until it expires after 30 minutes. The legal basis is Art. 6(1)(f) GDPR.
• Storage period: we delete enquiries once they have been dealt with and no statutory retention obligations apply, at the latest after three years. If a contract is concluded, the retention periods under commercial and tax law apply.

You can withdraw your consent at any time with effect for the future, for example by email to dsb@itschulte.de.

5. Online appointment booking

To book an initial consultation we link to Microsoft Bookings. Only when you click the link are you redirected to a page of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. There, Microsoft processes the details you enter for the appointment on our behalf. The legal basis is Art. 6(1)(b) GDPR. A transfer to the USA cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework. Further information can be found in the Microsoft privacy statement.

6. Self-checks (assessments)

The self-checks on the EU AI Act, cyber security (NIS2) and proportionality under DORA evaluate your answers exclusively in your browser. No data is transmitted to us or to third parties and nothing is stored. Only if you explicitly send us the result via the form do we process it as described in section 4. In that case we transmit the result together with your individual answers and generate a PDF report from them on our server, which is attached only to the email to us and is not stored on the server.

7. Fonts, cookies and privacy notice

All fonts are hosted on our own server; there is no connection to Google Fonts or other font services. We do not use cookies or any tracking, analytics or social media services.

On your first visit, a notice informs you about data protection on this website. So that it does not reappear on every page view, we store your confirmation in your browser’s local storage (localStorage, key “its-consent”, content: version, date, selection). This storage is strictly necessary for the service you requested (Section 25(2) No. 2 TDDDG). It is not transmitted to us and is renewed after twelve months. You can delete it at any time via your browser settings or reopen it via “Privacy settings” in the footer. If you choose light or dark mode using the switch in the header, we also store this choice only in your browser’s local storage (key “its-theme”, content: “light” or “dark”) so that it applies on all pages; this is likewise strictly necessary for the function you requested (Section 25(2) No. 2 TDDDG) and is not transmitted to us.

8. External links

The website contains links to LinkedIn, Xing, the NIS2 Cockpit++ preview (cockpit.proit4all.de) and the client login of our ISMS platform (isms.proit4all.de). Data is only transmitted when you click a link. The respective providers are responsible for data processing by LinkedIn and Xing.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and withdrawal of consent given (Art. 7(3)). Where we process data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Art. 21).

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

10. Encryption

This website is only accessible via HTTPS. All data you send us is transmitted with TLS encryption.