Privacy policy

This English version is provided for convenience. Only the German version is legally binding.

1. Privacy at a glance

General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

The key points in brief

• We do not use any analytics, tracking or advertising tools and do not embed any third-party content. We deliver fonts and videos ourselves.
• When you access the website, technical access logs are created, which we store for a limited period for security and error analysis.
• We only set cookies when you log in to the customer area. They are technically necessary for this; a cookie banner is therefore not required.
• If you contact us by email or phone or apply for a job, we process your details to handle your request.

2. Controller

The controller responsible for data processing on this website is:

DISACON AG
Postfach 1120
56401 Montabaur
Germany
Phone: +49 2602 83483 00
Email: datenschutz@disacon.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

3. Hosting and delivery

This website is hosted by Amazon Web Services and delivered via the Amazon CloudFront content delivery network. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (“AWS”). The content (in Amazon S3), the login service and the access logs are located in the AWS region Frankfurt am Main (eu-central-1). CloudFront delivers the content via servers close to you in order to provide the website quickly and reliably.

We have concluded a data processing agreement with AWS pursuant to Art. 28 GDPR (part of the AWS contractual terms). AWS processes the data only in accordance with our instructions. As the delivery network operates worldwide and AWS belongs to the Amazon group, headquartered in the USA, a transfer to the USA cannot be ruled out. Amazon.com, Inc. is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision and, in addition, on the standard contractual clauses.

The legal basis is our legitimate interest in providing our website securely, quickly and reliably (Art. 6(1)(f) GDPR).

4. Access logs (server log files)

Each time this website is accessed, CloudFront automatically logs technical access data. This includes:

• IP address of the requesting device
• date and time of access
• requested address including parameters (e.g. campaign identifiers in links)
• referrer URL (the previously visited page)
• browser and operating system used
• status code and amount of data transferred

We use this data to ensure secure and trouble-free operation, to detect attacks and to analyse errors. The legal basis is our legitimate interest in doing so (Art. 6(1)(f) GDPR). The data is not combined with other data sources or analysed for advertising purposes. The logs are deleted automatically after 90 days.

5. Cookies and storage in the browser

Cookies are small text files stored by your browser. On the public pages of this website, we do not set any cookies or store any information on your device. Only when you log in to the customer area is this technically necessary for the login:

This storage is strictly necessary to provide the customer area you have expressly requested (Section 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act); consent is not required for this. The legal basis stated in section 6 applies to the associated processing. We do not use analytics, marketing or third-party cookies.

You can set your browser to reject cookies or delete them when you close it. Logging in to the customer area is then not possible.

6. Customer area and login

For access to the customer area (e.g. manual and documentation), we use the Amazon Cognito login service from AWS. This involves processing your email address, your login credentials, your permissions and the time and technical data of the login. Passwords are not stored in plain text: Amazon Cognito stores only salted hash values from which the password cannot be recovered.

The processing serves to provide the customer area. If you are our contractual partner yourself, the legal basis is the performance of the contract (Art. 6(1)(b) GDPR). If you use the customer area as an employee or agent of one of our clients, the processing is based on our legitimate interest and that of our client in providing and securing the contractually agreed access for the persons designated by the client (Art. 6(1)(f) GDPR). We store the login credentials for as long as the access exists; after the end of the collaboration or at your request, we delete them unless statutory retention obligations prevent this. Amazon Cognito is operated by AWS under the data processing agreement mentioned in section 3; section 3 applies to the transfer to AWS.

7. Contact by email or phone

If you contact us by email or phone – including via buttons such as “Request the check by email” or “Request documents” that open a prepared email – we process your request including the resulting personal data (e.g. name, contact details, request) in order to handle your request. Incoming emails are technically forwarded via our email service provider to the mailboxes of the responsible employees. Beyond that, we only pass on your data where this is necessary to handle your request, where we are legally obliged to do so or where you have given your consent.

Processing is based on Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures; in all other cases, it is based on our legitimate interest in handling requests (Art. 6(1)(f) GDPR). The data remains with us until you request its deletion or the purpose no longer applies; statutory retention periods remain unaffected.

8. Job applications

If you apply to us, we process your details and documents in order to decide on establishing an employment relationship. The legal basis is pre-contractual measures (Art. 6(1)(b) GDPR) and, in addition, Section 26 BDSG (German Federal Data Protection Act), where applicable. Only the persons involved in the selection process have access.

If no employment relationship is established, we delete your documents no later than six months after the end of the process, unless you have consented to longer storage (Art. 6(1)(a) GDPR). If you are hired, the data is transferred to your personnel file.

9. Links to LinkedIn

On our website, we link to profiles on LinkedIn. These are simple links, not embedded plugins: you are only redirected to LinkedIn when you click a link. LinkedIn’s privacy policy applies there.

10. General information and your rights

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of the data processing no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place once these reasons no longer apply.

Legal bases

We process personal data on the basis of consent (Art. 6(1)(a) GDPR), for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), to comply with legal obligations (Art. 6(1)(c) GDPR) or on the basis of our legitimate interest (Art. 6(1)(f) GDPR). The sections above state which basis applies in each case.

Withdrawal of your consent to data processing

Where processing is based on your consent (e.g. longer storage of your application documents), you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate), Hintere Bleiche 34, 55116 Mainz, Germany.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption, which protects the connection between your browser and our website, including the login to the customer area. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL/TLS encryption is activated, the data you transmit to us via this connection cannot be read by third parties. This does not apply to emails: buttons such as “Request documents” open your own email program, and the message is sent from there via the email servers involved. Whether it is encrypted throughout transmission depends on your email provider and the servers involved. Please do not send particularly confidential information by unencrypted email; on request, we will agree a secure transmission method with you.

Information, deletion and rectification

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification or deletion of this data. You can contact us at any time about this and other questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us about this at any time. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection pursuant to Art. 21(1) GDPR, your interests and ours must be weighed up. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.

Objection to advertising emails

We hereby object to the use of contact data published in the context of the legal notice obligation for sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam emails.

As of: October 2026