Privacy policy

Data protection at a glance

We at DECODEX are very pleased about your interest in our web application.

We take the protection of your personal data very seriously.

With this privacy policy, we aim to inform companies and the public about the type, scope, and purpose of the personal data we collect, use, and process. Furthermore, this privacy policy informs you about your rights. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.

The processing of your personal data is carried out exclusively within the framework of the legal provisions of data protection law, in particular the European General Data Protection Regulation (hereinafter referred to as GDPR) and the German Federal Data Protection Act (hereinafter referred to as BDSG).

Below, we inform you about the processing of your personal data and your rights as a data subject under data protection law.

If we link to external websites, please note that these websites are not operated by us and we are not responsible for their content. We have no influence on the data processing procedures on external websites.

Responsible entity

The responsible entity for data processing on this website is:

SABOY Anlagentechnik
Bodenseeallee 4
78333 Stockach
Germany

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Collection, processing and provision of personal data

We collect, process, and use your personal data only to the extent permitted by law or if you have given us your explicit consent, such as:

- the voluntary consent to functional and/or marketing cookies  
- registration in our web application  
- subscribing to our newsletter

or if you contact us via the provided contact form.

Personal data are all information relating to an identified or identifiable natural person. This includes, for example, your name, phone number, and postal and email address, as these data reflect your identity as a person.

Processing of personal data is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Data categories

We process communication data. Communication data are data such as name, address, email address, and IP address. Processing is carried out exclusively for the purposes described below and is limited to the necessary personal data in accordance with the data minimization principle of data protection law.

Purposes of processing and legal bases

Both we and the service providers we commission process your personal data exclusively for the following purposes:

If you have given us consent to process your data, we process your data for the specified purpose.

The collection and processing of personal data also take place to fulfill our legal obligations, such as control and reporting obligations.

We also process your data to the extent necessary to protect our legitimate interests or the legitimate interests of third parties.

This includes, for example:

- Assertion of legal claims and defense in legal disputes  
- Prevention and investigation of criminal offenses  
- Ensuring IT security and IT operations

Further processing of your personal data for another purpose

If we intend to further process your personal data for a purpose other than that for which the data were collected, we will provide you with all relevant information before further processing.

Transfer of data to third parties

In the course of our business activities, we work with various external entities. This sometimes requires the transfer of personal data to these external entities. We only transfer personal data to external entities if this is necessary for the fulfillment of a contract, if we are legally obliged to do so (e.g., transfer of data to tax authorities), if we have a legitimate interest in the transfer according to Article 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using processors, we only transfer personal data of our customers based on a valid processing contract. In the case of joint processing, a joint processing contract is concluded.

When transferring personal data to a third country, it should be noted that not all third countries have an adequate level of protection. However, before transferring your personal data to a third country, we ensure that either an adequate level of protection is provided by the recipient of the data or that you have given your consent for the data transfer.

Duration of storage of your personal data

We only process your personal data for as long as necessary.

Data processing is necessary, particularly for the execution and handling of contracts as well as for the defense and enforcement of civil claims within the applicable statute of limitations. Additionally, we have to comply with tax, commercial, or other legal retention obligations that may necessitate the storage of your personal data. For these reasons, we reserve the right to delete the data only after the respective retention periods have expired.

Cookies

On our website, we and third parties use technically necessary cookies and, if you give us your voluntary consent by activating the respective checkbox, also cookies and tracking technologies for analysis and marketing purposes.

Cookies are small text files that are stored on your device (e.g., computer or mobile devices such as tablets or smartphones) with the help of the web browser you use.

When you visit our website, we provide you with our cookie management tool Usercentrics Consent Management, which helps you manage your cookie preferences and informs you about the details of the personal data of the respective consents.

Consent can be revoked at any time with effect for the future.

The legal basis for the use of cookies is Article 6(1)(a) and (f) GDPR.

Cookies are classified into different categories. A distinction is made between technically necessary (essential) and non-essential cookies.

Essential cookies are absolutely necessary for the operation and function of a website, which also leads to necessary data storage. These technically necessary cookies cannot be disabled in our systems.

Functional and marketing cookies are technically non-essential cookies, and their use requires your consent.

These help us to optimally tailor our website to your interests and improve our online presence for you in this way. They capture your user behavior by collecting device-specific data using cookies and then analyzing it. Device-specific data includes information about how you access our website, which areas you visit, and how often and how long you view these areas.

Transfer to third countries

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. When transferring data to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having legal remedies.

Deletion

If cookies have already been set during your visit to our website and you subsequently decide against the use of cookies, it is possible to delete the cookies that have already been set.

You can delete them using the web browser you are using. You can also use the help functions in your web browser for this purpose.

Registration with DECODEX

We offer you a digital project portal (hereinafter referred to as DECODEX). By registering, DECODEX provides you with access to various project-specific content, such as access to our technical documentation.

The following personal data must be provided for registration with DECODEX:

- Salutation, first and last name, email address, company name, and country.

In addition, the following data is stored:

- IP address  
- Date and time of registration

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

If you subscribe to the newsletter offered on our website, the data provided during the newsletter registration will only be used for sending the newsletter, unless you have agreed to further use.

To subscribe to our newsletter, we need your email address.

You can unsubscribe from the newsletter at any time through out contact form.

Contact options via the website

If you contact us via email or the provided contact form, you share your personal data with us. To process your contact request, we process your information and, if necessary, forward it to third parties, as far as this is required.

The following personal data must be provided for the use of the contact form:

- Salutation, first and last name, email address, company, country, and details of your request.

Provision of your personal data

The collection of your personal data also takes place to fulfill legal obligations to which we are subject. In this context, the provision of your personal data is legally required. In particular, the reporting of data protection breaches to the competent supervisory authority according to Article 33(1) GDPR is legally required.

The provision of your personal data is required for subscribing to our newsletter, registering with DECODEX, or using our contact form. Without providing your personal data, we cannot provide these services to you.

We are represented on social media and networks. In the context of our appearances, we may link to this privacy policy. Therefore, we point out that the following provisions only apply to the extent that data processing takes place within the framework of these appearances.

Your rights as a data subject

As a data subject, you have various rights regarding the processing of your personal data.

To exercise these rights, please use the contact details provided under section 1.

As a data subject, you have the following rights:

- You can request information about whether and which personal data of yours is being processed, Article 15 GDPR;  
- You can request the correction of incorrect or the completion of incomplete personal data, Article 16 GDPR;  
- You have the right to immediate deletion (right to be forgotten) of your personal data under the conditions of Article 17 GDPR;  
- You can request the restriction of the processing of your personal data, as far as Article 18 GDPR provides;  
- You have the right to data portability, meaning you have the right to receive the personal data concerning you or to have this data transferred to another controller, Article 20 GDPR.

Furthermore, you have the right to object to the processing of your personal data at any time, Article 21 GDPR.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

You can also object at any time to the processing of your personal data for direct marketing purposes. Your personal data will then no longer be processed.

You have the right to withdraw your consent to the processing of your data at any time, Article 7(3) GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you believe that the processing of your personal data violates legal requirements, you have the right to lodge a complaint with the data protection supervisory authority responsible for us, according to Article 77 GDPR. The data protection supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

Automated decision-making and profiling

We deliberately refrain from automated decision-making, including profiling.

Security

Both we and our processors take appropriate technical and organizational measures, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk, Article 32(1) GDPR.

Status and changes to the privacy policy

This privacy policy is as of November 2024.

Due to developments in technology and/or changes in legal and/or regulatory requirements, it may be necessary to change or adapt this privacy notice. The current version of this privacy policy applies.