Skip to content
Start project

Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

concet Holding UG (haftungsbeschränkt)
Eichbergstr. 1
64285 Darmstadt
Germany

Represented by Managing Director Aziz Ajaghfouf

Telephone: +49 6151 15 22 689
Email: info@concet.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Contact for privacy enquiries

For questions about privacy or to exercise your data protection rights, please contact us at datenschutz@concet.de.

2. Hosting by Hetzner

This website is hosted on servers in Germany by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

When you access this website, technically necessary connection data is transmitted to the hosting infrastructure. This includes, in particular, the IP address of the device making the request. The data is processed to provide the website securely, reliably and efficiently and to detect possible technical faults and misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of this website.

Hetzner processes personal data generated through hosting as our processor. We have entered into a data processing agreement with Hetzner in accordance with Article 28 GDPR. Further information is available in Hetzner's Privacy Policy.

3. Server Log Files

When you access this website, the web server automatically records technical access data in server log files. The following data is processed:

  • IP address of the device making the request
  • date and time of access
  • HTTP method and requested URL path
  • amount of data transferred and HTTP status code
  • browser type and browser version (user agent)

Logging is used exclusively to provide the website technically, ensure its stability and security, and detect errors and abusive access. The data is not combined with other data sources or evaluated for advertising or analytics purposes.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and uninterrupted operation of the website. Server log files are automatically deleted after no more than seven days.

4. Cookie and Consent Management

We use strictly necessary technologies so that this website can be provided reliably and your privacy choices can be stored. Optional analytics or marketing services are loaded only after you have given your explicit consent.

Language cookie

To provide the language version you have selected, we use the strictly necessary first-party cookie NEXT_LOCALE.

  • Purpose: Store and provide the selected website language
  • Content: Language identifier de or en
  • Storage period: Duration of the browser session; the cookie is deleted when the session ends
  • Scope: Entire website
  • Category: Strictly necessary

Consent cookie

We store your choices in the strictly necessary first-party cookie concet_it_consent.

  • Purpose: Store the selected consent categories and the applicable consent version
  • Content: Approval or rejection of analytics and marketing categories and the time of the decision
  • Storage period: 180 days
  • Scope: The domain currently being visited
  • Category: Strictly necessary

The cookie contains no advertising identifier and is not used to create profiles.

The storage and reading of these strictly necessary cookies is based on section 25(2) no. 2 of the German Telecommunications and Digital Services Data Protection Act (TDDDG). To the extent that personal data is processed, processing related to the language cookie is based on Article 6(1)(f) GDPR and processing related to the consent cookie on Article 6(1)(c) GDPR. Our legitimate interests lie in providing an appropriate language selection and operating the website reliably; the consent cookie is used to meet our legal documentation and accountability obligations.

Optional services

There are currently no active optional analytics or marketing services. When such a service is added, the cookie settings will identify its provider, purpose and category. Visitors will be asked to make a new selection before the service is activated for them.

Change or withdraw your choices

You can change or withdraw your choices at any time through Cookie settings in the footer. After withdrawal, the affected optional services will no longer load. Known first-party cookies belonging to those services will be removed where technically possible.

5. Contacting Us

Contact form

If you write to us using the contact form, we process the data you enter in order to respond to your enquiry. We process your name, email address and message. Providing a company name is optional.

The information is forwarded to info@concet.de and is not stored in a website database. Access is limited to the people responsible for handling your enquiry. We use Hetzner Online GmbH as our processor to provide the mailbox and technically transmit email. The data processing agreement referred to under “Hosting by Hetzner” also covers this processing.

We also store the information from your enquiry that is needed to handle it and manage our relationship in the external HubSpot CRM. The statement that information is not stored in a website database does not exclude this separate CRM storage. Section 9, “Appointment Booking and CRM Using HubSpot”, explains the data involved, purposes, legal bases and deletion criteria.

Where your enquiry relates to a potential or existing contract, processing is necessary to take steps prior to entering into a contract or to perform a contract in accordance with Article 6(1)(b) GDPR. General enquiries are processed in accordance with Article 6(1)(f) GDPR. Our legitimate interest lies in handling incoming enquiries properly and efficiently.

We retain your information for as long as needed to handle your enquiry, carry out agreed follow-up activities, or maintain an existing business relationship. Once the relevant purpose no longer applies, we delete the data unless statutory retention obligations or the establishment, exercise or defence of legal claims require further retention. These criteria also apply to CRM storage as described in section 9.

Contact by email or telephone

If you contact us by email or telephone, we also process the data you provide in order to handle your enquiry. The legal bases and retention periods described above apply accordingly.

We also store information from emails and telephone conversations in HubSpot CRM where needed to handle your enquiry and manage our relationship. This includes contact details, communication history and conversation notes. Section 9 describes how we use this information to manage contacts and proposals.

6. Your Data Protection Rights

Where the relevant legal requirements are met, you have the following rights in particular:

  • access to the personal data we process about you (Article 15 GDPR)
  • rectification of inaccurate data or completion of incomplete data (Article 16 GDPR)
  • erasure of your personal data (Article 17 GDPR)
  • restriction of processing (Article 18 GDPR)
  • data portability where automated processing is based on consent or a contract (Article 20 GDPR)
  • objection to processing based on Article 6(1)(e) or (f) GDPR on grounds relating to your particular situation (Article 21 GDPR)
  • withdrawal of consent with effect for the future; withdrawal does not affect the lawfulness of processing carried out before withdrawal (Article 7(3) GDPR)

To exercise your rights, simply email datenschutz@concet.de.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority. The authority particularly responsible for our company is:

The Hessian Commissioner for Data Protection and Freedom of Information
Wilhelmstraße 7
65185 Wiesbaden
Germany

Telephone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de
Submit a complaint online

7. Optional Analytics and Marketing Services

The services below are activated only if they have been technically configured for this website and you have expressly consented to the relevant processing. You can see which services are active, including the cookies used and their storage periods, in the cookie settings at any time.

General information about Google services

The provider of the Google services described below in the European Economic Area is:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

The legal basis for processing personal data is your consent in accordance with Article 6(1)(a) GDPR. Information is stored on or accessed from your device only with your consent in accordance with section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future through the cookie settings.

When these services are used, data may be transferred by Google Ireland Limited to Google LLC or other recipients outside the European Economic Area, particularly in the United States. According to Google, such transfers are based in particular on the European Commission's Standard Contractual Clauses. Further information is available in Google's Privacy Policy and Google's information about data transfers.

Google Tag Manager

Google Tag Manager is used to centrally manage and deploy analytics and marketing tags. Tag Manager does not itself create user profiles. However, loading Tag Manager establishes a connection to Google, during which technical HTTP request data is generated. According to Google, data in standard HTTP request logs is deleted within 14 days.

Google Tag Manager and the tags managed through it are loaded only after you have consented. Any further processing depends on the service integrated through Tag Manager and is described in the following sections.

Google Analytics 4

Where you have consented to the "Analytics" category, Google Analytics 4 is used to statistically analyse the use of this website. In particular, the following data may be processed:

  • pages viewed and events triggered
  • time, duration and approximate region of access
  • referrer URL
  • browser, device and operating system information
  • cookie and other online identifiers

Google Analytics uses first-party cookies to distinguish users and sessions. Google states that it uses the IP addresses of users in the EU only to derive coarse location data and discards them before they are logged or stored.

The retention period for user-level and event-level data will be set to 14 months during implementation. Once this period expires, Google automatically deletes the affected data. Aggregated standard reports may remain available for longer regardless of this setting.

Further information is available in Google Analytics' EU-focused privacy information and its data retention information.

Google Ads Conversion Tracking

Where you have consented to the "Marketing" category, conversion tracking measures whether people perform certain actions on our website after viewing or clicking a Google advertisement, in particular successfully submitting a contact enquiry. This enables Google and us to attribute later actions on our website to advertising interactions.

Data processed may include advertising and click identifiers, cookie identifiers, technical device and browser data, pages viewed, and information about the time and type of a conversion. The contents of your contact enquiry and the email address entered in the contact form are not transmitted to Google Ads. The conversion tracking period will be limited to 30 days following an advertising interaction.

Google Ads Remarketing

We do not currently use Google Ads remarketing or personalised advertising based on your website behaviour. If we introduce remarketing, we will first obtain separate marketing consent, update this privacy policy and increase the version of the cookie settings.

YouTube videos

We plan to embed videos hosted on YouTube. The provider is Google Ireland Limited, as identified above. No connection to YouTube is established before you consent; a placeholder is initially shown instead of the video. The YouTube player is loaded only after you give your consent.

When a video is loaded and played, your IP address, referrer URL, device and browser information, cookie or other online identifiers, and information about your use of the video may be transmitted to Google. If you are signed in to Google, Google may associate the use with your Google Account.

Videos will be embedded using privacy-enhanced mode through youtube-nocookie.com. According to YouTube, views in this mode are not used to personalise the YouTube browsing experience or advertising. Nevertheless, the player will be loaded only after you have consented. The general information above on the legal basis, withdrawal and possible transfers to third countries applies. Further information is available in YouTube's information about privacy-enhanced mode.

Vimeo videos

We also plan to embed videos provided by:

Vimeo.com, Inc.
330 West 34th Street, 10th Floor
New York, New York 10001
USA

No connection to Vimeo is established before you consent; a placeholder is initially shown instead of the video. The Vimeo player is loaded only after you give your consent. Your IP address, approximate region derived from the IP address, referrer URL, device and browser information, and information about your use of the video may then be transmitted to Vimeo. Vimeo may use cookies or comparable technologies.

We plan to use the Vimeo player's Do Not Track parameter. According to Vimeo, this prevents new, non-essential Vimeo cookies from being set during the viewing session, but does not prevent the browser from transmitting Vimeo cookies that already exist. The player is therefore loaded only after you have consented.

The legal basis is your consent in accordance with Article 6(1)(a) GDPR and section 25(1) TDDDG. Vimeo processes data in the United States and other countries. Vimeo states that it relies, among other safeguards, on the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework. Further information is available in Vimeo's Privacy Policy and its information about Vimeo Player cookies.

Google Maps

We plan to embed interactive maps from Google Maps. The provider is Google Ireland Limited, as identified above. No connection to Google Maps is established before you consent; a placeholder is initially shown instead of the map. The map is loaded only after you give your consent.

Your IP address, referrer URL, device and browser information, cookie or other online identifiers, and your interactions with the map may be transmitted to Google. If you use your device's location permission or are signed in to Google, additional location or account data may be processed.

Google Maps is loaded only on the basis of your consent in accordance with Article 6(1)(a) GDPR and section 25(1) TDDDG. The general information above on withdrawal and possible transfers to third countries applies. Further information is available in Google's Privacy Policy and the Google Maps Embed API documentation.

8. Online Meetings Using Microsoft Teams

We use Microsoft Teams for online meetings and video conferences with prospective customers, customers and business partners. The provider in the European Economic Area is:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Dublin D18 P521
Ireland

In particular, the following data may be processed during a Teams meeting:

  • name, display name and email address
  • meeting data such as subject, participants, start, end and duration
  • technical connection data such as IP address and device, browser and operating system information
  • audio, video, chat and screen-sharing content where you use the relevant features

The data is processed to prepare and conduct the meeting. Where the meeting relates to a potential or existing contract, Article 6(1)(b) GDPR is the legal basis. In other cases, processing is based on Article 6(1)(f) GDPR and our legitimate interest in efficient business communication.

Recordings and transcriptions

Meetings may be recorded or transcribed in individual cases. Recording or transcription is never carried out secretly and is not started by default. All participants are informed in advance and must give their explicit consent. The legal basis is Article 6(1)(a) GDPR. Refusing consent has no adverse consequences; if any participant does not consent, the recording or transcription will not be started or will be stopped, and the meeting will continue without it.

Recordings and transcripts may contain audio, video, screen sharing, chat messages, names and speaker attribution. Depending on the meeting configuration, Microsoft stores Teams recordings and transcripts in OneDrive or SharePoint. We delete recordings and transcripts initiated by us after no more than 30 days, unless a separate longer retention period has been agreed in advance for a specifically identified purpose or statutory obligations require otherwise.

Microsoft processes the data required to provide Teams on the basis of the Microsoft Product Terms and the Microsoft Products and Services Data Protection Addendum. Processing by Microsoft or its subprocessors outside the European Economic Area cannot be ruled out. According to Microsoft, appropriate safeguards are provided for such processing, in particular the European Commission's Standard Contractual Clauses. Further information is available in Microsoft's Privacy Statement.

9. Appointment Booking and CRM Using HubSpot

We use HubSpot Meetings to arrange appointments through an external booking link and HubSpot CRM to manage our contacts with prospective customers and customers. Our contracting partner is:

HubSpot Germany GmbH
Am Postbahnhof 17
10243 Berlin
Germany

External booking page and data processed

Appointments are booked on an external HubSpot page, not through a form embedded on this website. We do not load a Meetings script on this website for this purpose. Your browser connects to the booking service only when you open the external booking link. Technical data such as your IP address, browser and device information, and information about the page visit may then be processed. The notices and choices on the external page apply to its cookies and similar technologies; our cookie settings do not control that external page.

When you book an appointment and we subsequently manage the contact, we process in particular:

  • name and email address
  • requested appointment, time zone, meeting subject and booking status
  • any further details you provide in the booking form, such as your company or the reason for your enquiry
  • contact history and information used to handle your enquiry and prepare for or follow up on the conversation

We use this data to coordinate appointments, send booking confirmations, and handle and follow up on your enquiry in our CRM. Booking an appointment does not constitute consent to newsletters or other promotional emails. You can also arrange an appointment by email or telephone. The preceding section applies separately to meetings conducted using Microsoft Teams.

Website Tracking with HubSpot

Where you have consented to the "Marketing" category and the function is technically enabled, we use the HubSpot tracking code to attribute website activity and campaign contacts to leads in the CRM. This may include pages viewed, time and duration of the visit, referrer URL, browser and device information, cookie or other online identifiers, and campaign parameters. Processing serves to measure marketing effectiveness and support the traceable handling of prospective customers.

HubSpot cookies are stored and accessed only with your consent under section 25(1) TDDDG; related personal-data processing is based on Article 6(1)(a) GDPR. You can withdraw consent at any time through the cookie settings. The HubSpot cookies listed there will then be deleted where technically possible.

Data storage and contact management in HubSpot CRM

Independently of appointment bookings, we store and manage data from contact forms, emails, telephone conversations and appointment bookings in HubSpot CRM. Where server-side transfer is enabled, a successful contact enquiry may also be sent directly to the CRM. Where relevant to the contact and available, this includes:

  • names and contact details, particularly email addresses and telephone numbers
  • company details and contact persons
  • enquiries and the associated communication history
  • conversation notes, agreed appointments and next steps
  • proposal history, including services requested, proposals issued and their current status
  • campaign parameters, landing page and Google click identifier for attribution where marketing consent has been given

We store this information to handle enquiries, prepare for and follow up on conversations, prepare and follow up on proposals, and maintain existing customer relationships. This is not limited to contacts originating from HubSpot Meetings.

Conversation notes are written summaries, not audio recordings or automatic transcripts. Recordings and transcriptions of Teams meetings are governed solely by the separate information in section 8. Adding a contact to the CRM does not constitute consent to newsletters or other promotional emails.

Legal bases and retention

Where processing is necessary for a contract with you or to take steps at your request before entering into a contract, it is based on Article 6(1)(b) GDPR. For communication with a company's contact persons and other business enquiries, we rely on Article 6(1)(f) GDPR. Our legitimate interest is in organising appointments efficiently and maintaining clear records when assisting prospective customers and customers. Your right to object is explained in the section on your data protection rights.

These legal bases apply to appointment coordination and the general contact and proposal management described above, in each case to the extent that processing is necessary for the relevant purpose.

We retain appointment and CRM data, including communication history, conversation notes and proposal history, only for as long as needed to handle your enquiry, carry out agreed follow-up activities, or maintain an existing business relationship. Once the relevant purpose no longer applies, the data is deleted unless statutory retention obligations or the establishment, exercise or defence of legal claims require further retention. Making contact or booking an appointment alone does not justify keeping a CRM record indefinitely.

Processing on our behalf and international transfers

Where HubSpot processes appointment and CRM data on our behalf, it acts as a processor. HubSpot provides a Data Processing Agreement as part of its contractual terms. Its subprocessors are listed on the HubSpot Sub-Processors Page.

Processing by HubSpot group companies or subprocessors outside the European Economic Area, particularly in the United States, cannot be ruled out. HubSpot's Data Processing Agreement describes the transfer mechanisms provided for this purpose, including the European Commission's Standard Contractual Clauses. Further details, including information about processing for which HubSpot acts as a controller in its own right, are available in HubSpot's Privacy Policy.

10. Encrypted Transmission

This website uses TLS encryption to protect transmitted content against unauthorised access by third parties. An encrypted connection can be recognised in particular by https:// in your browser's address bar. Please note that completely secure data transmission over the internet cannot be guaranteed technically.

11. Provision of Data and Automated Decision-Making

Simply visiting this website does not create a statutory or contractual obligation to actively provide us with personal data. However, we need the information marked as mandatory to process a contact enquiry; without it, we cannot handle your enquiry. Consent to optional analytics, marketing and media services is voluntary and is not a condition for using the rest of the website.

We do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

12. Updates to This Privacy Policy

We update this Privacy Policy when the website, the services used or the legal requirements change.

Last updated: 23 September 2026