GDPR Policy

We are pleased that you are visiting the Continuitance Business Portal. Respecting the personal rights of our customers and partners is an essential principle for us. This naturally also applies to the handling of your personal data from your internet visit to our pages.

Responsible for data processing on this website is:

Continuitance GmbH
Briaweg 296
2162 Falkenstein
E-Mail: office@continuitance.com

The right of the individual to informational self-determination is derived from the general right of personality. Its protection is intended by various legal regulations - e.g. the EU General Data Protection Regulation. Our internet presence is designed in accordance with the legal data protection provisions.

• If we want to process personal data from your visit to the websites, we disclose this.
• You decide which personal data we receive and for what purpose we may process it.
• We respect your data protection rights, in particular your right to information regarding the data stored about you.
• Our employees are obliged to maintain confidentiality.

Open Access and Closed User Groups

As an internet user, you have free access to the websites of the Continuitance Business Platform. Access to certain areas is reserved for users with special authorization. The reasons for this are:

• E-business processes that require a special level of security
• Applications for customers, partners, and other closed user groups

Data Definitions

• "Personal data" means any information relating to an identified or identifiable natural person ("data subject") (Art. 4 No. 1 GDPR).
• "Data subject" of data processing is the natural person whose personal data is processed.
• "Processing" means any operation performed on personal data, whether or not by automated means. This includes in particular collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing or destroying personal data (Art. 4 No. 2 GDPR).
• "Controller" for data processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (Art. 4 No. 7 GDPR).
• "Processor" processes personal data on behalf of the controller. This can be a natural or legal person, public authority, agency or other body. Processors are always bound by the instructions of the controller and may not use the data for their own purposes. The basis for processing is always a data processing agreement. Therefore, processors are not third parties in the data protection sense (Art. 4 No. 8 GDPR).
• "Third parties" are any natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorized to process personal data; this also includes other group-affiliated legal entities (Art. 4 No. 10 GDPR).

We leave it entirely up to you which information you wish to entrust to us during your visit.

• Use of the platform: We only collect statistical data (see section "Processing of Data") to improve our internet presence. When using our dialog masks, you are free to provide only an email address for answering or contacting. We will not determine the owner of this address.
• Voluntariness: If you use one of our product offers, you voluntarily enter the data in the dialog masks provided.
• Newsletter and product information from Continuitance: The services offered by Continuitance deal with the topics of business continuity and risk assessment in companies. Only after an active double opt-in will you receive topic-related newsletters and relevant information including product information. You can object to the internal use of personal data for information and advertising purposes at any time. Send your message to office@continuitance.com

Access Protection

• With the use of one of our product offers and the associated registration or
• as a member of a defined user group, your access is password-protected (e.g. identification with access number or SmartCard or PIN) and the dialog is automatically cryptographically encrypted. Input transactions can additionally be secured by transaction numbers (TAN). The security of your data therefore depends crucially on how you handle the access data.

Processing of Data

If we want to process personal data from your visit, we will inform you. You decide which personal data we receive and for what purposes we may process and use it.

We only collect data for personalized processing via public websites if you voluntarily decide to enter data or declare your consent. Usually, such information will serve to provide you with a desired product offer.

In closed user groups, we collect data for personalized processing insofar as it serves the purpose of your contractual relationship with us or insofar as you have expressly consented electronically or in writing (e.g., in a product application or a cooperation agreement).

For each request of a file from our download offer, access data is stored. Each data record consists of:

• the page from which the file was requested
• the name of the file
• the date and time of the request
• the amount of data transferred
• the access status (file transferred, file not found, etc.)
• a description of the type of web browser used

We correct and complete stored data as soon as we become aware of a change. As a member of a closed user group, you have direct influence on the quality and currentness of your personal data.

We only store the data collected when visiting the website for as long as is necessary for the stated purposes or until the legal or contractual retention periods have expired.