1. Introduction
EXODUSIT (“we,” “us,” or “our”) operates https://www.exodusit.org (the “Site”). We are committed to protecting your privacy under the EU General Data Protection Regulation (GDPR) and German data protection laws. This policy explains how we collect, use, and safeguard your personal data.
2. Data We Collect
-
Personal Data: Name, email, phone number, company name, billing address.
-
Technical Data: IP address, browser type, device information, cookies.
-
Usage Data: Pages visited, service interactions, session duration.
-
Client Data: Information provided for project execution (e.g., login credentials, project specifications).
3. How We Use Your Data
-
To deliver services (web development, AI automation, cybersecurity).
-
To communicate about projects, invoices, or updates.
-
To improve our website and services via analytics (using tools like Google Analytics).
-
To comply with legal obligations (e.g., tax laws).
4. Legal Basis for Processing
-
Contractual Necessity: To fulfill service agreements.
-
Consent: For newsletters or non-essential cookies.
-
Legitimate Interest: Fraud prevention, service improvements.
5. Data Sharing
-
Third-Party Providers:
-
Cloud services (AWS, Google Cloud) for hosting.
-
Payment processors (e.g., Stripe, PayPal).
-
Email marketing tools (e.g., Mailchimp).
-
-
Legal Compliance: Disclose data if required by German/EU law.
6. International Transfers
Data may be transferred outside the EU/EEA to partners like AWS. We ensure GDPR-compliant safeguards (e.g., Standard Contractual Clauses).
7. Your Rights Under GDPR
-
Access, correct, or delete your data.
-
Object to processing or restrict use.
-
Withdraw consent (e.g., unsubscribe from emails).
-
Lodge complaints with German authorities (e.g., Landesbeauftragte für Datenschutz NRW).
8. Data Security
-
Encryption (SSL/TLS) for data transfers.
-
Regular security audits (ISO 27001 standards).
-
Access restricted to authorized personnel.
9. Data Retention
We retain data only as long as necessary:
-
Client data: 6 years post-contract (German commercial law).
-
Newsletter data: Until consent withdrawal.
10. Contact Us
For privacy requests, contact:
Data Protection Officer: [Name]
Email: privacy@exodusit.org
Address: Düsseldorf Germany