Privacy Policy

1. Data Controller
ENDRON GmbH
Hubertusstraße 11
82031 Grünwald
Germany
Office: Tölzer Str. 30a
82031 Grünwald
Email: info@endron.de

2. Data Protection Organisation
ENDRON GmbH operates a structured data protection management system in accordance with the requirements of the General Data Protection Regulation (GDPR).
An external data protection officer has not currently been appointed.
Responsibility for data protection lies with the management.

3. Principles of data processing
We process personal data exclusively in accordance with the following principles:

Lawfulness and transparency
Purpose limitation
Data minimisation
Integrity and confidentiality
Storage limitation


4. Hosting & Infrastructure
The website is operated via:
STRATO

Server location: Germany
A data processing agreement in accordance with Art. 28 GDPR is in place
In addition, the technical implementation is carried out via:
Webflow
with custom code.

5. Data collection when visiting the website
Server log data
The following are automatically processed upon access:

IP address (truncated where possible)
Browser and device information
Operating system
Time of access
Referrer
Purpose:
IT security, stability, prevention of misuse
Legal basis: Art. 6(1)(f) GDPR

6. Contact & Operational Enquiries
The following data is collected via the form provided (‘Submit Operational Enquiry’):

Name
Company
Email address
Telephone number
Country
Industry
Message
Purpose:

Processing business enquiries
Preliminary assessment of potential collaborations
Processing of security-related matters
Special feature (ENDRON context):
Enquiries may concern security-related content. These will be:

classified separately
processed under enhanced organisational security measures
where necessary, handled outside the website infrastructure
Legal basis: Art. 6(1)(b) and (f) GDPR

7. Application process
Applications can be submitted via the website, including:

contact details
CV
additional documents
Purpose: Conducting the application process
Retention period:
A maximum of 6 months after completion of the process
Legal basis: Art. 6(1)(b) GDPR

8. Cookies & consent management
Our website uses cookies.
These include:

Technically necessary cookies
Analytics cookies (optional)
Non-essential cookies are processed only with consent.
The use of a consent management tool (e.g. Usercentrics) is recommended for managing consent.

9. Web analytics
This website may use features of:
Google Analytics
The following data, amongst other things, is processed:

Usage behaviour
Device information
Approximate location data
Important notes:

Processing takes place only with consent
IP anonymisation may be enabled
Data transfer to the USA is possible
Legal basis: Art. 6(1)(a) GDPR

10. Data transfer to third countries
Data may be transferred to the USA in connection with Google Analytics.
This is carried out on the basis of appropriate safeguards in accordance with Art. 46 GDPR (e.g. standard contractual clauses).

11. Social media links
Our website contains links to:

Instagram
LinkedIn
When you click on these links, only the privacy policies of the respective platforms apply.

12. Fonts
The fonts used are hosted locally.
No data is transferred to external providers (e.g. Google Fonts).

13. Data security
We implement the following measures:

SSL/HTTPS encryption
Access restrictions
Internal security policies
Protection against unauthorised access


14. Retention period
Personal data is only stored for as long as:

the purpose of the processing remains valid
statutory retention periods apply


15. Rights of data subjects
You have the right at any time to:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR)
You also have the right to lodge a complaint with a supervisory authority.

16. Changes to this privacy policy
We reserve the right to amend this privacy policy as necessary.