Skip to main content

privacy policy

Privacy – a topic that concerns us all

How do we ensure a trustful handling of your personal data in our company?

Dear website visitors,

With this data protection declaration we would like to inform you in a general, transparent and understandable form about how we guarantee the handling of your personal data in our company in accordance with the General Data Protection Regulation (GDPR for short).

In this data protection declaration you will find out what data we collect, for what purposes we collect the data and what happens to the collected data. Please take the time to read our privacy policy carefully.

1. You can use our website without giving any personal data (e.g. first name, surname etc.). However, if you (data subject) wish to contact us and receive information about a service or service, personal data may be required.

If the processing of personal data is required, e.g. for an inquiry via our contact form, we generally obtain your consent for data processing in accordance with Art. 6 Par. 1 S. 1 lit. a GDPR.

Alternatively, you can contact us by phone, for example.

Data processing is always carried out in accordance with the Basic Data Protection Ordinance. Our legal basis for data processing is Art. 6 Par. 1 S. 1 lit. f GDPR. The legitimate interest of the person responsible is derived from the purposes listed above.

2. capture of general data (log files)
a) When you visit our website, information is automatically sent to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:
• The Internet protocol address (IP address) of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• the previously visited website (so-called referrer),
• the browser used and, if applicable, the operating system of your computer,
• the name of your Internet service provider, and
• other similar data and information used for security purposes in the event of attacks on our information technology systems

b) The data mentioned under 2 a) will be processed by us for the following purposes:
• Ensuring a smooth connection of the website,
• Ensuring comfortable use of our website,
• evaluation of system security and stability, and
• for other administrative purposes.

The legal basis for this data processing results from Art. 6 Par. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes stated under Section 2 b). Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

3. collection and storage of personal data and the nature and purpose of its use
a) Contact via our website
For inquiries of any kind, we offer you the opportunity to contact us via a form embedded on the website.

A valid e-mail address is required so that we know who sent the request and can respond to it. Further information such as title and name are required. The data will be processed for the purpose of contacting us in accordance with Art. 6 par. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent.

c) Consent to the processing of personal data
You give any consent to the processing of your personal data:
1. voluntary, 2. informed, 3. unambiguous and 4. with revocability (for the future).

4. passing on of data
Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:
• you have given your express consent pursuant to Art. 6 par. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 par. 1 sentence 1 f GDPR is necessary to assert claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that a legal obligation exists for the transfer pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• this is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

5. rights of the person concerned (rights of the person concerned)
You have the right, in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can obtain information on
a) processing purposes;
b) the categories of personal data being processed,
c) the categories of recipients to whom your information has been or will be disclosed;
d) the planned storage period,
e) the existence of a right to rectification, cancellation, restriction of processing or opposition,
f) the existence of a right of appeal to a supervisory authority,
g) the origin of their data, insofar as these were not collected from us, and
h) the existence of automated decision-making, including profiling


The data subject has a right of access to information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject has the right to obtain information on the appropriate guarantees in connection with the transfer.

If a data subject wishes to exercise this right of access, he may contact our data protection officer or another employee of the controller at any time, see point 18.

6. right to rectification(Art. 16 GDPR)
The data subject has the right to request the data controller to rectify any inaccurate personal data concerning him/her without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

7. right to erasure (“right to be forgotten”) Art. 17 GDPR
The data subject has the right to request the deletion of his/her personal data stored with us, unless the processing is necessary to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

Your right to cancellation includes:
a) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
b) The data subject withdraws his/her consent on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) and there is no other legal basis for the processing.
c) the data subject opposes processing under Article 21(1) GDPR and there are no overriding legitimate grounds for processing or the data subject opposes processing under Article 21(2) GDPR.
d) The personal data have been processed unlawfully.
e) The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
f) The personal data was collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.

8. righ to restriction of processing (Art. 18 GDPR)
The data subject has the right to request that the processing of his/her personal data be restricted if you dispute the accuracy of the data, if the processing is unlawful but refuses to delete the data and we no longer need the data, but needs them to assert, exercise or defend legal claims or has lodged an objection against the processing in accordance with Art. 21 GDPR.

9. right to data data portability (Art. 20 GDPR)
The data subject has the right to receive the personal data he has provided to us in a structured, common and machine-readable format or to request its transfer to another person responsible.

10. Conditions for consent (Art. 7 para. 3 GDPR)
The person concerned has the right to revoke his/her consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation. The person concerned will be informed before giving his/her consent. The revocation of consent must be as simple as the granting of consent. If you wish to revoke your consent, simply send an e-mail to

11. right of object (Art. 21 GDPR)
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 letter f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this which arise from your particular situation or the objection to direct advertising is directed. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to

12. right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, any data subject shall have the right of appeal to a supervisory authority, in particular in the Member State where he resides, works or is alleged to have infringed, where the data subject considers that the processing of his personal data is contrary to this Regulation.

As a rule, you can contact the supervisory authority of your usual place of residence or work.

If a data subject wishes to exercise his or her rights, he or she may at any time contact our Data Protection Officer or any other employee of the controller, see point 18.

13. Security of processing (Art. 32 GDPR)
We have taken extensive technical and organisational measures and security precautions to protect your personal data from unauthorised access or misuse. Our security procedures are regularly reviewed and adapted to technological progress. Our data protection principles are the guarntee of:

1. Confidntiality,
2. Integrity,
3. availability and resilience

systems and services in connection with the processing in the long term.

Furthermore, our employees are trained in data protection and are obliged to maintain confidentiality and data protection.

14. Cookies
We use cookies to make our website user-friendly and optimally tailored to your needs. A cookie is a small text file that is stored locally on your computer notebook, tablet, smartphone etc..

However, this does not mean that we immediately become aware of your identity. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our website. Your browser also offers a function to delete cookies (e.g. via browser data delete). For more information, see Help or, as a rule, your Internet browser settings. The data processed by cookies is required for the aforementioned purposes in order to protect our legitimate interests and those of third parties pursuant to Art. 6 para. 1 sentence 1 letter f GDPR.

Every time you access our website, data about this process is stored in a log file. This data is not personal, so we cannot trace which user has retrieved which data.

In detail, the following data record is stored for each retrieval:
» Name of the retrieved file,
» Date and time of retrieval,
» transmitted data volume,
» Message as to whether the retrieval was successful.

You also have the option of deactivating or managing cookies throughout your browser. Here you will find a list of all current browsers, with a click on the link you will be redirected to the browser manufacturer page.

Google Chrome:
Mozilla Firefox:
Microsoft Internet Explorer:
Mac OS Safari:

15. Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. “(“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (
You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent future collection of your data when you visit this website: Disable Google Analytics
For more information on terms of use and data protection, see or Please note that the code “anonymizeIp” has been added to Google Analytics on this website to ensure anonymous collection of IP addresses (so-called IP masking).

16. general information about social media plug-ins
Browser plug-ins and links from social networks (e.g. Facebook, Youtube, XING, and Twitter) are integrated on our website
These social networks are operated exclusively by third parties, some of whom are based outside the EU. Third parties may not provide you with an adequate level of privacy. These browser plug-ins and links are marked with logos or other references on our website.

a) Facebook
Our website integrates the plug-in of the social network “”, operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). You can recognize the Facebook plugins by the Facebook logo and the “I like” button.
When you access a web page that contains such a plugin, your browser establishes a direct connection to the Facebook server. Facebook then sends the content of the plugin to your browser, which in turn integrates the plugin into the website. In this way, Facebook receives information that a user with a specific IP address, namely the IP address assigned to your Internet access at the time of transmission, has visited the relevant website. If you are logged into your Facebook account at the same time, Facebook can associate your visit with your Facebook account, even if you do not click the “I like” button. If you use the plugin by clicking on the “I like” button, your browser will also send it to Facebook and save it there. If you do not want Facebook to collect information through our website and associate it with your Facebook account, please log out of Facebook before visiting our website.
For more information about the purpose and scope of Facebook’s collection, storage and use of this information and your rights regarding this and the possible settings of your Facebook account to protect your personal information, please see the Facebook Privacy Policy

b) Twitter
Our website contains plugins of the short message network of Twitter Inc. (Twitter) integrated. You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found here ( When you access a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click the Twitter “tweet button” while logged into your Twitter account, you can link the contents of our pages on your Twitter profile. This allows Twitter to associate the visit of our pages with your user account. We would like to point out that, as the provider of the pages, we are not aware of the content of the data transmitted or how it is used by Twitter. If you do not want Twitter to associate your visit to our pages, please log out of your Twitter account. For more information, please see the Twitter

c) Xing
The XING network plug-in is integrated on our website. ( The plugin is offered by XING AG, Gänsemarkt 43, 20354 Hamburg (“XING”). When you visit our website, your browser is used to establish a short-term connection to the XING servers. XING does not store any personal information about users who have accessed our website. XING also does not store the IP address. There is also no evaluation of your usage behaviour via the use of cookies in connection with the XING Share button. A summary of the functionalities of the share button is available at: A general description of data processing can be found in the XING data protection declaration

d) Youtube
Use of YouTube plugins (videos)
Videos stored on YouTube are embedded on our website. YouTube is a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For all YouTube videos on our websites, the “extended data protection mode” is activated. YouTube provides these and assures that YouTube does not store any cookies with personal data on your computer. When you visit the website and embed the videos, the IP address is transmitted. This cannot be assigned unless you have signed in to YouTube or another Google service or are permanently signed in before you visit the site. As soon as you start playback of an embedded video by clicking on it, YouTube only stores cookies on your computer that do not contain any personally identifiable data due to the extended data protection mode. These cookies can be prevented by appropriate browser settings and extensions.
Further information about the integration of Youtube videos can be found on the information page of YouTube

17. External Links
We use links on our websites to external sites which are specially marked and whose contents are not on our server. The external contents of these links were checked when the links were set. However, it cannot be ruled out that the contents may have been subsequently changed by the respective providers. Should you notice that the content of external providers violates applicable law, please let us know.
This data protection declaration only applies to content on our servers

18. name and address of controller
Responsible in the sense of the GDPR.
innovation mecom GmbH
Ferdinand – Schneider – Straße 10
D-36043 Fulda
Phone: +49 661 / 94940

Contact our data protection officer:

19. Responsible Data Protection Authority
The Hessian Data Protection Commissioner
Prof. Dr. Michael Ronellenfitsch,
PO Box 31 63, 65021 Wiesbaden, Germany
Gustav Stresemann ring 1, 65189 Wiesbaden, Germany
Phone: 06 11/140 80, Fax: 06 11/14 08-900 or 901,

20. timeliness of this privacy policy
This data protection declaration is currently valid and has the status May 2018. due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to change this data protection declaration.