cosa.systems Home

Privacy Policy

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Responsible Party

The party responsible for data processing on this website is:

cosa.systems GmbH

Offakamp 9e

22529 Hamburg

Germany

Email: mail@cosa.systems

Hosting (IONOS)

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The servers are located in data centers in Germany and the European Union. When you visit this website, IONOS processes technical access data (such as your IP address) in server log files (see below). We have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR. The processing is based on our legitimate interest in providing this website securely, quickly and reliably (Art. 6 (1) (f) GDPR). Further information: https://www.ionos.com/terms-gtc/terms-privacy/

Data Collection on This Website

Cookies and local storage

This website does not use tracking or analytics cookies. To provide technically necessary functions, settings such as your language choice and color scheme are stored in your browser's local storage (localStorage), and a marker that the one-time language redirect has taken place is kept for the duration of your session (sessionStorage). This information remains on your device and is not transmitted to us or to third parties. This storage is strictly necessary for the service you request (Section 25 (2) No. 2 TDDDG).

Server Log Files

Our hosting provider IONOS automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. It is collected on the basis of our legitimate interest in the stability, security and functionality of our website (Art. 6 (1) (f) GDPR).

Contacting us

If you contact us by e-mail or telephone, the information you provide, including the contact details you supply, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We do not pass this data on without your consent. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (our legitimate interest in answering your inquiry).

Newsletter

Our newsletter is sent with newsletter software that we operate ourselves on our own infrastructure in Germany (news.cosa.systems); no third-party newsletter service is involved. When you subscribe, we process your e-mail address, your first and last name and the language you chose, for the sole purpose of sending you the newsletter. Registration uses a double-opt-in procedure: you receive a confirmation e-mail and are only added to the mailing list after confirming. To document your consent we log the time of your registration and confirmation together with the IP address and browser identification used for them. Unconfirmed registrations are deleted after 14 days. To protect the form against automated sign-ups we use the privacy-friendly ALTCHA solution, served from our own infrastructure; no data is transmitted to third parties for this purpose. Newsletter e-mails are delivered through the mail servers of our e-mail provider IONOS named above. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can revoke at any time via the unsubscribe link in every newsletter or by informally notifying us. Every newsletter also contains a link to a preferences page where you can change your details, export them or delete your subscription. After a deletion we retain only a non-reversible hash of your e-mail address, which lets us honour your withdrawal without storing the address itself (Art. 6 (1) (f) GDPR).

OpenStreetMap

On our contact page we embed map material from OpenStreetMap, provided by the OpenStreetMap Foundation (OSMF), St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. When you open the contact page, a connection to OSMF servers is established and technically necessary data such as your IP address is transmitted. An adequacy decision of the European Commission exists for the United Kingdom. The map is embedded on the basis of our legitimate interest in providing an easy-to-understand indication of our location (Art. 6 (1) (f) GDPR). Further information: https://osmfoundation.org/wiki/Privacy_Policy

No analytics or tracking services

We do not use any analytics, tracking or marketing services. Fonts and all other resources of this website are served locally from our own infrastructure; apart from the map service mentioned above, no connections to third parties are established.

Your Rights

You have the right to information about the personal data we store, its origin and recipients, and the purpose of data processing (Art. 15 GDPR), to correction (Art. 16) or deletion (Art. 17) of your data, to restriction of processing under certain circumstances (Art. 18), to receive the data you provided to us in a structured, commonly used and machine-readable format (data portability, Art. 20) and to object to processing that is based on our legitimate interests (Art. 21). If you have given consent to data processing, you can revoke it at any time with effect for the future (Art. 7 (3)). To exercise these rights, contact us at the e-mail address given above.

Right to Complain to Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law. The supervisory authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, datenschutz-hamburg.de).

Data Security

This website is delivered exclusively over an encrypted connection (HTTPS/TLS) using the highest encryption level supported by your browser. You can recognize the encrypted connection by the lock symbol in your browser's address bar.

endeesfritpl