Privacy Policy

Last updated: August 11, 2026

1. Data protection at a glance

Protecting your personal data is important to us. Personal data means any information that can be used to identify you personally or that can be attributed to an identifiable individual.

This Privacy Policy explains which personal data is processed when you visit our website and use our services, for what purposes the processing takes place and on which legal basis the processing is carried out.

2. Controller

The controller responsible for data processing on this website is:

ASIS GmbH
Kiem-Pauli-Straße 3
84036 Landshut
Germany

Phone: +49 (0) 871 / 2 76 76-0
Email: mail@asis-gmbh.de

3. Data Protection Officer

We have appointed a Data Protection Officer for our company:

Mr. Volker Baron
Baron Consult EDV-Beratung und –Service
Haydnstraße 2
80336 Munich
Germany

Email: volker.baron@baron-consult.de

4. General information on data processing

We process personal data only to the extent necessary to provide our website, process inquiries, carry out pre-contractual or contractual measures, comply with legal obligations, or on the basis of consent or a legitimate interest.

Depending on the respective processing activity, the following legal bases in particular may apply:

• Art. 6(1)(a) GDPR – consent
• Art. 6(1)(b) GDPR – contract or pre-contractual measures
• Art. 6(1)(c) GDPR – legal obligation
• Art. 6(1)(f) GDPR – legitimate interests

Where information is stored on your terminal device or information already stored on your terminal device is accessed, the requirements of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) also apply. Cookies and comparable technologies that are not technically necessary are generally used only with your consent. Consent is not required for strictly necessary technologies in accordance with Section 25(2) TDDDG.

5. Storage period

Unless a more specific storage period is stated in this Privacy Policy, we generally store personal data only for as long as necessary for the respective purpose of processing.

If you withdraw your consent or legitimately request the deletion of your data, the relevant data will be deleted unless statutory retention obligations or other legally permissible reasons require further storage.

6. Hosting and website operation via HubSpot

We use services provided by HubSpot for hosting, content management, forms, contact management, website analytics, the provision of media content and other functions of our website.

When you visit our website, technical data in particular may be processed, for example:

• browser type and browser version
• operating system used
• IP address
• referrer URL
• pages and files accessed
• date and time of access
• device information
• other technical connection data

When you use forms, the data you enter in the respective form is also processed.

We have entered into a data processing agreement with HubSpot. As part of the provision of its services, HubSpot may also use affiliated companies and subprocessors. For international data transfers, an adequacy decision, the EU-U.S. Data Privacy Framework or Standard Contractual Clauses may be used in particular.

Where processing is necessary for the secure, stable and technically reliable provision of our website, it is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and economically efficient provision of our online services.

7. Server log files

When you access our website, technically necessary information is processed. This may include, in particular, the IP address, date and time of access, the page or file accessed, the referrer URL, browser type, operating system and other technical information.

This processing serves in particular to deliver the website, identify technical errors, ensure system security and detect misuse and attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of our website.

8. SSL/TLS encryption

Our website uses SSL or TLS encryption. This protects data transmitted between your browser and our website against unauthorized access.

You can identify an encrypted connection in particular by the use of “https” in your browser's address bar.

9. Cookies and consent management

Our website uses cookies and comparable technologies. Cookies are small pieces of information that may be stored on your terminal device.

We distinguish in particular between technically necessary cookies and optional cookies for analytics, functional purposes and, where applicable, advertising.

We use the HubSpot Consent Banner to manage your choices. You can use it to accept or reject optional cookies or make your selection by category. Cookies and comparable technologies that are not necessary are activated only after you have given the corresponding consent.

Technically necessary cookies and technologies are used on the basis of Section 25(2) TDDDG and, where personal data is processed, on the basis of Art. 6(1)(f) GDPR.

Optional cookies and comparable technologies are used on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You can change your selection at any time with effect for the future or withdraw consent that you have already given:

Cookie settings

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

10. HubSpot website analytics

If you consent to the corresponding cookie category, we use HubSpot analytics functions.

This may include the processing of information about pages accessed, the time and duration of visits, the source of the visit, browser and device information and interactions with our website.

We use this information to understand how visitors use our website and to improve our content, user experience and website performance.

The processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You can withdraw your consent at any time via the cookie settings.

11. SalesViewer

Why do we use SalesViewer?

We use the web analytics tool SalesViewer, a service provided by SalesViewer® GmbH, Universitätsstraße 60, 44789 Bochum, Germany, to identify which companies visit our website, optimize our marketing and sales activities and improve the relevance of our content.

The data collected is not used to identify individual natural persons.

What data is processed by the tool?

The tool may process the following categories of data in particular:

• company name and company address, where identifiable
• industry information
• time and duration of the website visit
• pages visited and interactions
• technical information relating to the website visit

SalesViewer uses a JavaScript-based method to identify company visits. According to the provider, the technology operates without cookies and is designed to identify company-related information. The data collected is not used to personally identify visitors to this website.

According to the provider, processing takes place using infrastructure in German or European data centers.

How long is the data stored?

The data is deleted as soon as it is no longer required for analysis purposes. The anonymized raw data is stored for no longer than 360 days.

Legal basis

The processing is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Our legitimate interest is to analyze company visits to our website, improve the relevance of the information we provide and optimize our marketing and sales activities.

SalesViewer is used independently of the selection made in the HubSpot Consent Banner. However, you may object to data collection by SalesViewer at any time with effect for the future.

We have entered into a data processing agreement with SalesViewer® GmbH pursuant to Art. 28 GDPR.

Objection and further information

You may object to the collection and storage of data by SalesViewer at any time with effect for the future.

SalesViewer provides its own opt-out option for this purpose: SalesViewer opt-out

Further information about the terms of use of SalesViewer and its data protection provisions can be found at: SalesViewer privacy information .

The software provider commissioned the law firm Menold Bezler Rechtsanwälte Steuerberater Wirtschaftsprüfer Partnerschaft mbB, Stuttgart, to carry out a legal assessment of the data protection-compliant use of SalesViewer: Legal assessment of the use of SalesViewer (PDF) .

12. Contact, project inquiry and download forms

We provide various forms on our website, for example for:

• contact inquiries
• project inquiries
• download requests for white papers, brochures or other documents
• other information and service inquiries

The personal data processed in each case is determined by the respective form fields.

In particular, the following data may be processed:

• name
• company
• email address
• telephone number
• country
• information relating to your project or inquiry
• your message

The information entered is processed to handle your inquiry, provide the requested content and communicate with you further, and is stored in our HubSpot CRM.

If your inquiry relates to the conclusion or performance of a contract, the processing is carried out on the basis of Art. 6(1)(b) GDPR.

For other business inquiries, the processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in processing incoming inquiries and maintaining business contacts.

Any further use of your data for marketing communications will only take place where an appropriate legal basis exists.

13. HubSpot CRM and Salesforce

Personal data from contact, download and project inquiries may be stored in our HubSpot CRM and, depending on the respective process, synchronized with our Salesforce CRM system.

The processing serves in particular to:

• centrally manage customer and prospect contacts
• process and follow up inquiries
• provide sales support
• document communications
• assign inquiries and contacts to the responsible employees

Where the processing takes place in connection with a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.

Otherwise, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest consists in structured and efficient customer and prospect management.

For the internal prioritization of prospective customers, information from form submissions and interactions with our content may be evaluated. Such evaluation serves to organize our sales and marketing processes.

Decisions that have legal effects or similarly significant consequences are not made solely by automated means on the basis of such an evaluation.

14. Email communications and marketing emails via HubSpot

We also use HubSpot to send and manage email communications.

For emails relating to a specific inquiry, quotation, project or existing business relationship, the processing is carried out on the basis of Art. 6(1)(b) or Art. 6(1)(f) GDPR.

If you have expressly subscribed to newsletters, marketing information or comparable communications, such communications are sent on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Where you have given the corresponding consent, information about opens and clicks in our marketing emails may also be processed in order to evaluate the use and effectiveness of our communications.

You may withdraw your consent at any time with effect for the future. Marketing emails generally contain an appropriate unsubscribe option.

After you unsubscribe, we may store your email address on a suppression list where this is necessary to ensure that you do not receive further unwanted marketing communications.

15. Google reCAPTCHA

Google reCAPTCHA may be used on individual forms to protect against automated or abusive form submissions.

reCAPTCHA is used to distinguish whether an entry is made by a human or by automated means. Technical information and information about the use of the form may be transmitted to and processed by Google.

The processing serves to protect our forms, IT systems and CRM against automated attacks and spam.

Where the processing is necessary to ensure the functionality and security of the respective form, it is carried out on the basis of Art. 6(1)(f) GDPR.

Where consent is required for storing or accessing information on your terminal device, the processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

16. LinkedIn Lead Gen Forms

We may use so-called Lead Gen Forms on LinkedIn.

If you complete such a form directly within LinkedIn, the personal data you provide is initially processed by LinkedIn and subsequently transmitted to us or to our systems connected to LinkedIn.

For users within the European Union, LinkedIn services are generally provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

The transmitted data may subsequently be stored in our HubSpot CRM and used to process the inquiry described in the respective form.

This may serve the following purposes in particular:

• contacting you
• providing requested information
• processing a project inquiry
• further business communications

Depending on the specific purpose, the legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(a) GDPR.

No LinkedIn Insight Tag for analyzing visitor behavior is currently integrated on our website.

17. Careers and applications via Maxime HR

We use services provided by the following company to display our job vacancies and for parts of our recruitment process:

Maxime Media GmbH
Münsterstraße 109
48155 Münster
Germany

When career content integrated in this way is accessed, technically necessary connection data may be transmitted to Maxime Media.

If you apply to us via the applicant portal, the following data in particular may be processed:

• name and contact details
• curriculum vitae
• certificates and application documents
• qualifications and professional background
• other information provided by you

The processing is carried out for the purpose of deciding whether to establish an employment relationship on the basis of Section 26 of the German Federal Data Protection Act (BDSG) and Art. 6(1)(b) GDPR.

If no employment relationship is established, the application documents may continue to be stored for a limited period after completion of the application process where this is necessary, in particular, for the establishment, exercise or defense of legal claims.

A longer storage period may apply if you have expressly consented to further storage, for example for inclusion in an applicant pool, or where statutory retention obligations apply.

18. Social media links

Our website contains simple links to our profiles on external social media platforms, such as LinkedIn, Facebook, Instagram or TikTok.

A simple link does not constitute the automatic embedding of content from the respective social network.

Only when you click the respective link do you leave our website and access the website or app of the respective provider. From that point onward, further data processing is carried out in accordance with the provisions of the respective platform operator.

19. Data transfers to third countries

When using individual service providers, personal data may be processed outside the European Union or the European Economic Area.

Where personal data is transferred to a country for which the European Commission has adopted an adequacy decision, the transfer is carried out on this basis.

For appropriately certified companies in the United States, the EU-U.S. Data Privacy Framework may in particular be used as a legal basis for such transfers.

Where no adequacy decision applies, appropriate safeguards pursuant to Art. 46 GDPR may be used, in particular Standard Contractual Clauses adopted by the European Commission.

20. Contact by email and telephone

If you contact us by email or telephone, we process the information you provide in order to handle your inquiry.

If your inquiry relates to a contract or pre-contractual measures, the processing is carried out on the basis of Art. 6(1)(b) GDPR.

In all other cases, processing is carried out on the basis of our legitimate interest in efficiently handling incoming inquiries pursuant to Art. 6(1)(f) GDPR.

The data will be deleted once your inquiry has been fully processed and there are no statutory retention obligations or other legal grounds requiring further storage.

21. Withdrawal of your consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

You can change or withdraw consent to optional cookies and comparable technologies at any time using the “Cookie settings” button in the “Cookies and consent management” section of this Privacy Policy.

22. Right to object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing.

Following an objection, your personal data will no longer be used for direct marketing purposes.

23. Your data protection rights

Subject to the applicable statutory requirements, you have in particular the following rights:

• the right of access to personal data stored about you
• the right to rectification of inaccurate data
• the right to erasure
• the right to restriction of processing
• the right to data portability
• the right to object to certain processing activities
• the right to withdraw consent with effect for the future

To exercise your rights, you may contact us or our Data Protection Officer.

24. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The supervisory authority responsible for our company is, in particular:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany

Phone: +49 (0) 981 180093-0

The right to lodge a complaint applies without prejudice to any other administrative or judicial remedies.

25. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy if our website, the services we use, or the legal or technical framework conditions change.

The version of this Privacy Policy currently published on this website shall apply.

Last updated: August 11, 2026