Privacy policy

Privacy statement

IT-label (hereinafter: "we", "us" or "our") processes personal data in accordance with the General Data Protection Regulation (GDPR). This privacy statement describes what data we collect, why we do this and how we protect your data.

What data do we collect?

We may collect and process the following personal data:

• Name, email address, phone number and company name when you contact us via the contact form or by email.
• Address and characteristics of buildings registered for an IT-label audit.
• Business data, certifications and contact information of certified partners.
• Anonymized data about the use of our website, such as pages visited, referring websites and device information.

Why do we process your data?

We process your personal data for the following purposes:

• Answering your questions and requests via the contact form
• Carrying out and registering IT-label audits
• Managing the partner network and partner certifications
• Improving our website and services based on anonymized usage statistics
• Complying with legal obligations

Legal basis for processing

The processing of your personal data is based on one or more of the following legal grounds: your consent (for example when filling in a contact form), the performance of a contract (for example when carrying out an audit), our legitimate interest (for example when improving our services), or a legal obligation.

Retention periods

We do not retain your personal data longer than necessary for the purpose for which it was collected. Contact details are retained as long as the communication continues and for a maximum of two years thereafter. Audit data is retained for the validity of the IT-label and five years after it ends. Anonymized website statistics are retained for a maximum of 26 months.

Sharing with third parties

We do not share your personal data with third parties, unless this is necessary for the performance of our services (for example referring to a certified partner for an audit), you have given consent for this, or we are legally obliged to do so. We never sell your data to third parties.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You have the right to know which personal data we process about you.
• Right to rectification: You can request us to correct inaccurate data.
• Right to erasure: You can request us to delete your personal data.
• Right to restriction: You can request us to restrict the processing of your data.
• Right to data portability: You have the right to receive your data in a structured format.
• Right to object: You can object to the processing of your data.

To exercise your rights, you can contact us. We will respond to your request within 30 days.

Cookie policy

Our website uses cookies to improve the user experience and to keep anonymized statistics. On your first visit, the cookie notice asks for your preference; you can change that choice at any time by clearing the stored preference in your browser.

Functional cookies

Functional cookies are necessary for the proper functioning of the website. These cookies are always placed and do not require consent. They remember, for example, your cookie preferences and ensure that forms work correctly.

Analytical cookies

We use analytical cookies to gain insight into how visitors use our website. This data is processed anonymously and helps us improve the website. We use privacy-friendly analysis tools that do not store personal data.

Marketing cookies

We do not place marketing cookies and do not use third-party tracking on our website. Your browsing behavior is not tracked for advertising purposes.

Changes

We reserve the right to modify this privacy policy. Changes will be published on this page. We recommend that you consult this page regularly. In the event of significant changes, we will actively inform you.

Contact

Do you have questions about this privacy policy? Then contact us. You can also file a complaint with the Data Protection Authority if you believe we are not handling your personal data correctly.

Also see our terms and conditions.