Skip to content
Built in Paderborn · Hosted in the EU · GDPR-compliant[email protected]+49 5251 6940120
Securo
Log inSign up

Privacy

This privacy policy applies to the website securo-net.com. It explains which personal data we process when you visit this site, for what purpose, and what rights you have.

The Securo Hub and our other applications have their own privacy notices and – where we process data on behalf of our customers – a separate data processing agreement under Art. 28 GDPR. This policy does not cover them.

This is a translation provided for convenience. In case of any discrepancy, the German version of this privacy policy is legally binding.

1. Controller

The controller within the meaning of Art. 4(7) GDPR is:

Dennis Bialik, trading as „Securo Net“
Arminiusstraße 3
33100 Paderborn
Germany

Email: [email protected]
Phone: +49 5251 6940120

We have not appointed a data protection officer. There is no obligation to do so: fewer than twenty people are permanently engaged in the automated processing of personal data at our company (§ 38(1) BDSG), and none of the other criteria in Art. 37(1) GDPR apply. For any data protection matter, please contact us directly using the details above.

2. Principles

We process personal data only to the extent necessary to operate this website and to answer your enquiries. This website deliberately avoids advertising trackers, social network embeds, and any fonts or other content loaded from external servers.

Under Art. 4(1) GDPR, personal data means any information relating to an identified or identifiable natural person – for example your name, your email address, or your IP address.

3. Your rights

As a data subject you have the following rights in relation to us:

  • Access (Art. 15 GDPR): you may find out whether and which data we process about you.
  • Rectification (Art. 16 GDPR): you may have inaccurate data corrected and incomplete data completed.
  • Erasure (Art. 17 GDPR): you may request deletion of your data unless a statutory retention obligation applies.
  • Restriction of processing (Art. 18 GDPR): you may require us to limit how we process your data.
  • Data portability (Art. 20 GDPR): you may receive the data you provided to us in a structured, commonly used and machine-readable format.
  • Withdrawal of consent (Art. 7(3) GDPR): you may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out beforehand.

Right to object under Art. 21 GDPR

Where we process data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation. We will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint

You may also lodge a complaint with a data protection supervisory authority at any time (Art. 77 GDPR). The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
www.ldi.nrw.de

4. Visiting the website and server logs

When you access this website, your browser transmits technically necessary data to our server. The following is logged:

  • the IP address of the requesting device,
  • the date and time of the request,
  • the address requested and the volume of data transferred,
  • the HTTP status code as well as browser type and operating system, where transmitted by your browser.

Purpose: delivering the website, detecting and resolving technical faults, and defending our systems against attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of the website.
Retention: logs are deleted automatically after seven days. We retain entries for longer only where a specific security incident requires further analysis; those entries are deleted once the analysis is complete.

This data is not combined with other sources and is not analysed for advertising or profiling purposes.

5. Hosting

This website runs on a virtual server we rent from the following provider:

Contabo GmbH
Welfenstraße 22
81541 München
Germany

Contabo provides infrastructure only and processes the resulting data – in particular the log data described in section 4 – on our instructions, under a data processing agreement pursuant to Art. 28 GDPR.

The server is located in the provider's data centre in Lauterbourg, France, and therefore within the European Union. No transfer to a third country takes place as part of the hosting.

6. Cloudflare

We use services provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. The contracting party for users in the European Economic Area is Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 München, Germany. A data processing agreement under Art. 28 GDPR is in place with Cloudflare.

All traffic to this website passes through Cloudflare's servers. In doing so, Cloudflare processes your device's IP address and the technical characteristics of your request. See section 10 regarding third-country transfers.

6.1 Content delivery network and attack mitigation

Cloudflare delivers our website content from a distributed server network, encrypts the connection, and filters out malicious traffic such as automated attacks and denial-of-service attempts.

To distinguish human visitors from bots, Cloudflare sets the __cf_bm cookie. It contains no identifier that makes you recognisable across different websites and expires no later than thirty minutes after your last request. If your request is flagged as suspicious and you are shown a security check, the cf_clearance cookie may also be set to record the outcome of that check.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the availability and security of the website). Storing these cookies on your device does not require consent under § 25(2)(2) TDDDG because it is strictly necessary to provide the service you explicitly requested.

6.2 Cloudflare Web Analytics

We use Cloudflare Web Analytics to measure reach. The service counts page views and records coarse technical context such as the approximate country of origin, the referring link, the browser type, and page load times.

Cloudflare Web Analytics operates without cookies and without fingerprinting: no identifier is stored on or read from your device, and no profile is built that would make you recognisable across visits or across websites. Analysis is aggregated only; we cannot draw conclusions about individual people from it.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is understanding which of our content is used so that we can improve it. Since no information is stored on or retrieved from your device, § 25(1) TDDDG does not apply and no consent is required.

6.3 Cloudflare Turnstile

Our contact form is protected against automated abuse by Cloudflare Turnstile. Turnstile uses technical signals from your browser – such as IP address, browser configuration and interaction patterns – to assess whether a submission comes from a human. Unlike traditional image puzzles, the check usually runs in the background without any action on your part.

Purpose: preventing spam and automated bulk enquiries.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in keeping our contact channels functional and free of abuse). Access to your device does not require consent under § 25(2)(2) TDDDG, as it is strictly necessary for the form submission you requested.

According to Cloudflare, data collected via Turnstile is not used for profiling or advertising.

7. Storage in your browser

This website sets no cookies of its own. It only stores one setting in your browser's local storage (localStorage):

  • securo_theme_mode – remembers whether you want the site displayed in light mode, dark mode, or according to your system setting. The entry contains only one of the values light, dark or system and no personal data whatsoever.

This entry stays on your device and is not transmitted to us or to third parties. Storing it does not require consent under § 25(2)(2) TDDDG because it reflects a display preference you set yourself. You can delete it at any time via your browser settings; the website continues to work unchanged and falls back to your system setting.

8. Contacting us

8.1 Email and telephone

If you contact us by email or telephone, we process the details you provide – typically your name, email address or phone number, and the content of your message – in order to handle your request.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract; otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

Our mailbox runs on Microsoft 365, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. A data processing agreement under Art. 28 GDPR is in place with Microsoft. Under the EU Data Boundary, European customers' data is generally processed in data centres within the European Union; see section 10 regarding remaining third-country links.

Retention: we delete correspondence once your request has been dealt with conclusively and no statutory retention periods apply. Business correspondence is subject to the commercial and tax retention periods of six and ten years respectively (§ 257 HGB, § 147 AO).

8.2 Contact form

You can send us a message using the form on our contact page. Your name, email address and message are mandatory; stating your area of interest is optional. Without the mandatory details we cannot attribute and answer your enquiry.

Submitted details are stored and processed as an enquiry in our own system, the Securo Hub. The form is protected by Cloudflare Turnstile (section 6.3). As additional protection against automated submissions, the form contains a field invisible to you that humans do not fill in; if it is filled in, we discard the submission without storing it.

Legal basis: Art. 6(1)(b) GDPR for enquiries relating to entering into a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).
Retention: we delete your enquiry six months after it has been dealt with conclusively. This period allows us to answer follow-up questions on an ongoing matter. If a contract is concluded, retention follows the statutory periods (see section 8.1). You may request earlier deletion at any time, provided no retention obligation applies.

9. Recipients of your data

We do not pass on personal data for advertising purposes and we do not sell it. Access is limited to the following processors, each acting on our instructions under an agreement pursuant to Art. 28 GDPR:

  • Contabo GmbH, München, Germany – server infrastructure (section 5).
  • Cloudflare Germany GmbH / Cloudflare, Inc. – delivery, attack mitigation, reach measurement and spam protection (section 6).
  • Microsoft Ireland Operations Limited – email mailbox (section 8.1).

Beyond this, we only disclose data where we are legally obliged to do so or where you have consented.

10. Transfers to third countries

With the services named in sections 6 and 8.1, personal data may be processed in the United States of America, since the parent companies Cloudflare, Inc. and Microsoft Corporation are based there.

By adequacy decision of 10 July 2023, the European Commission determined that the USA provides an adequate level of protection for companies certified under the EU-US Data Privacy Framework. Both Cloudflare, Inc. and Microsoft Corporation are certified under that framework. In addition, we have agreed the European Commission's Standard Contractual Clauses with both providers pursuant to Art. 46(2)(c) GDPR.

Please note that US authorities may under certain conditions access data processed there, and that legal remedies against such access do not in every case meet the European standard.

11. Automated decision-making

This website does not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

12. Data security

This website is served exclusively over an encrypted TLS connection (recognisable by https:// in your browser's address bar). We also take technical and organisational measures under Art. 32 GDPR to protect your data against loss, destruction, unauthorised access and unauthorised modification, and we keep these measures aligned with technical developments.

13. Links to other websites

Our website contains links to third-party websites, for example to partner companies. We have no influence over their content or their data processing, and this privacy policy does not apply there. Please consult the respective website for information on how it handles your data.

14. Changes to this privacy policy

We update this privacy policy when the processing described here or the legal framework changes. The version available on this page is the one that applies.

Last updated: 21 August 2026