Legal

Privacy Policy

Last updated: 2026-03-16

This privacy statement applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://isdfeniqs.com. We recommend you read this statement carefully. In our processing we comply with the requirements of the GDPR and applicable privacy legislation. That means, among other things, that:

we clearly state the purposes for which we process personal data;
we limit our collection of personal data to only what is required for those purposes;
we request your explicit consent where required by law;
we take appropriate security measures to protect your personal data and require the same from processors acting on our behalf;
we respect your rights to access, correct, or delete your personal data upon request.

If you have any questions or want to know what data we hold about you, please contact us.

1. Purpose, Data, and Retention Period

1.1 Contact Inquiries (via Webform)

When you submit a contact inquiry through our website, we process the following data:

Data collected:

Name (optional)
Email address
Message content
Source page and language (internal metadata)

Legal basis:

Art. 6(1)(b) GDPR — processing is necessary for taking pre-contractual steps at your request.

Processors:

Submissions are stored in our content management system (self-hosted, EU data center) and forwarded to our ERP system for follow-up.

Retention:

6 months after the inquiry is resolved.

1.2 Job Applications

When you apply for a position through our careers portal, we process:

Data collected:

First and last name
Email address
Phone number (optional)
LinkedIn profile URL (optional)
Cover letter (optional)
Earliest available start date (optional)
Salary expectation (optional)
CV / resume files (PDF)

Legal basis:

Art. 6(1)(f) GDPR — processing is necessary for the purposes of our legitimate interest in evaluating candidates' suitability for employment. We have conducted a balancing test, documentation of which you may request at any time by contacting us.

Where you progress to active contract negotiation, the relevant processing activities will switch to Art. 6(1)(b) GDPR (pre-contractual and contractual processing).

Processors:

Applications are stored in our content management system (self-hosted, EU data center) and forwarded to our ERP system for recruitment management. Uploaded CV files are stored within the same EU-based infrastructure.

Retention:

6 months from the date of application, or 24 months if the applicant has consented to inclusion in our talent pool, or until the end of any resulting contractual relationship.

1.3 Event Registrations

When you register for an event via our website, we process:

Data collected:

First and last name
Email address
Company (optional)
Phone number (optional)
Message (optional)

Legal basis:

Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract (your event registration).

Processors:

Registrations are stored in our content management system (self-hosted, EU data center).

Retention:

6 months after the event date.

1.4 Cybersecurity Readiness Assessment

When you complete our Cybersecurity Readiness Assessment module, we process:

Data collected:

Email address
Your assessment answers (aggregated scores)

Your email address is used solely to deliver your personalized results and recommendations to you.

Legal basis:

Art. 6(1)(f) GDPR — processing is necessary for our legitimate interest in providing you with a personalized, actionable assessment result.

Processors:

Submissions are stored in our content management system (self-hosted, EU data center).

Retention:

6 months.

1.5 Compliance with Legal Obligations

Where required, we may process personal data to comply with applicable legal obligations (e.g., retention requirements under commercial or tax law).

Legal basis:

Art. 6(1)(c) GDPR.

2. Cookies and Tracking

We use Umami, a privacy-friendly, GDPR-compliant analytics tool, to understand how our website is used. Umami is self-hosted on our own infrastructure within the EU. No cookies are stored. No personal data is collected or shared with third parties. All data is aggregated and anonymized, ensuring that your activity cannot be tracked across sites or sessions. We do not deploy advertising trackers or browser fingerprinting technologies.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving website content and usability. Given that no personal data is collected and no cookies are used, the impact on your privacy is minimal.

3. Anti-Spam Protection (ALTCHA)

Our web forms use ALTCHA, a privacy-friendly CAPTCHA technology, to protect against automated spam submissions. ALTCHA operates entirely on our own infrastructure — no data is transmitted to external ALTCHA services. The required proof-of-work computation runs locally within your browser.

4. Disclosure Practices

We may disclose personal data where required by law, court order, or a law enforcement authority, to the extent permitted under applicable law.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your data may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We implement appropriate technical and organisational measures to prevent unauthorised access and misuse. Access to personal data is restricted to personnel who require it to perform their duties, and our security practices are reviewed on a regular basis.

6. Third-Party Websites

This privacy statement does not apply to third-party websites accessible via links on our website. We cannot guarantee that these third parties handle your personal data reliably or securely. We recommend reviewing the privacy statements of those websites before using them.

7. Amendments to this Privacy Statement

We reserve the right to amend this privacy statement. We recommend consulting it regularly to stay informed of any changes. Where feasible, we will notify you of material changes directly.

8. Your Rights

You have the following rights regarding your personal data:

Right to information:

You have the right to know why your data is processed, what happens to it, and how long it is retained.

Right of access:

You have the right to access the personal data we hold about you.

Right to rectification:

You have the right to have inaccurate or incomplete personal data corrected.

Right to erasure:

Under certain conditions, you have the right to have your personal data deleted.

Right to withdraw consent:

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Right to data portability:

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another controller.

Right to object:

You have the right to object to processing based on legitimate interests (Art. 6(1)(f)). We will comply unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to request balancing test documentation:

Where we rely on Art. 6(1)(f) as the legal basis, you may request a copy of the balancing test we conducted.

To exercise any of these rights, please contact us using the details in Section 11. Please clearly identify yourself so that we can ensure we act on the correct data.

9. Submitting a Complaint

If you are not satisfied with how we handle your personal data or a related complaint, you have the right to lodge a complaint with the competent supervisory authority. In Germany, this is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz.

10. Data Protection Officer

Our Data Protection Officer is registered with the data protection authority of an EU Member State. For questions or requests relating to this privacy statement or data protection matters, please contact:

daschug GmbH

11. Contact Details

ISD FENIQS GmbH
Sternstraße 166-168
67063 Ludwigshafen am Rhein
Germany

Website: https://isdfeniqs.com

Peace of Mind for your IT

1. Purpose, Data, and Retention Period

1.1 Contact Inquiries (via Webform)

When you submit a contact inquiry through our website, we process the following data:

Data collected:

Name (optional)
Email address
Message content
Source page and language (internal metadata)

Legal basis:

Art. 6(1)(b) GDPR — processing is necessary for taking pre-contractual steps at your request.

Processors:

Submissions are stored in our content management system (self-hosted, EU data center) and forwarded to our ERP system for follow-up.

Retention:

6 months after the inquiry is resolved.

1.2 Job Applications

When you apply for a position through our careers portal, we process:

Data collected:

First and last name
Email address
Phone number (optional)
LinkedIn profile URL (optional)
Cover letter (optional)
Earliest available start date (optional)
Salary expectation (optional)
CV / resume files (PDF)

Legal basis:

Processors:

Retention:

6 months from the date of application, or 24 months if the applicant has consented to inclusion in our talent pool, or until the end of any resulting contractual relationship.

1.3 Event Registrations

When you register for an event via our website, we process:

Data collected:

First and last name
Email address
Company (optional)
Phone number (optional)
Message (optional)

Legal basis:

Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract (your event registration).

Processors:

Registrations are stored in our content management system (self-hosted, EU data center).

Retention:

6 months after the event date.

1.4 Cybersecurity Readiness Assessment

When you complete our Cybersecurity Readiness Assessment module, we process:

Data collected:

Email address
Your assessment answers (aggregated scores)

Your email address is used solely to deliver your personalized results and recommendations to you.

Legal basis:

Art. 6(1)(f) GDPR — processing is necessary for our legitimate interest in providing you with a personalized, actionable assessment result.

Processors:

Submissions are stored in our content management system (self-hosted, EU data center).

Retention:

6 months.

1.5 Compliance with Legal Obligations

Where required, we may process personal data to comply with applicable legal obligations (e.g., retention requirements under commercial or tax law).

Legal basis:

Art. 6(1)(c) GDPR.

2. Cookies and Tracking

4. Disclosure Practices

We may disclose personal data where required by law, court order, or a law enforcement authority, to the extent permitted under applicable law.

5. Security

8. Your Rights

You have the following rights regarding your personal data:

Right to information:

You have the right to know why your data is processed, what happens to it, and how long it is retained.

Right of access:

You have the right to access the personal data we hold about you.

Right to rectification:

You have the right to have inaccurate or incomplete personal data corrected.

Right to erasure:

Under certain conditions, you have the right to have your personal data deleted.

Right to withdraw consent:

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Right to data portability:

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another controller.

Right to object:

Right to request balancing test documentation:

Where we rely on Art. 6(1)(f) as the legal basis, you may request a copy of the balancing test we conducted.

To exercise any of these rights, please contact us using the details in Section 11. Please clearly identify yourself so that we can ensure we act on the correct data.