In this Privacy Policy, we describe the types of data, including personal data (collectively "data"), that we collect when you use the website of Marks Software GmbH and certain products and services, how we use, process, and share this data, and what choices you have to access or update your data.
This Privacy Policy may be updated from time to time. The version in effect at the time of purchase, commissioning, or registration of a service shall apply. The data controller is Marks Software GmbH, Brock 6, D-29683 Bad Fallingbostel, Germany.
Definitions
The following definitions are used in this Privacy Policy:
Marks Software GmbH ("MS"), Brock 6, D-29683 Bad Fallingbostel.
MS Software Product. Any software product developed, customized, or operated by MS (including custom software, middleware, CMS systems, and extensions).
MS Hardware Product. Hardware supplied, configured, or integrated by MS (notebooks, Bitcoin hardware, Linux systems, and related components).
MS Software as a Service / Hosted Systems. Systems operated or managed by MS (hosting, operation, maintenance of software and infrastructure).
MS Website. The website marks-software.de as well as associated domains and subdomains.
MS Account. An account created by you to manage inquiries, projects, or services.
Personal Data means any information relating to an identified or identifiable natural person.
Why We Collect Data and What We Collect
We collect data for the following reasons:
- To provide you with software, hardware, systems, and services. This includes the development and delivery of custom software, the configuration and operation of hardware (notebooks, Bitcoin hardware, Linux systems), training, as well as support and maintenance. The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
- To protect against unlawful use and ensure the security of our systems. We may collect technical data to prevent abuse, unauthorized access, or damage. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in security and the protection of our systems).
- To improve our products and services. We may use anonymized or aggregated usage data to improve systems and processes. The legal basis is Art. 6(1)(f) GDPR.
- For internal records and the protection of our rights. We store data necessary for evidence purposes, project management, and the defense of legal claims. The legal basis is Art. 6(1)(f) GDPR.
- To fulfill legal obligations. This applies in particular to accounting, tax law, and commercial retention obligations. The legal basis is Art. 6(1)(c) GDPR.
You may object to processing based on Art. 6(1)(f) GDPR at any time (by sending an email to info@marks-software.de).
Data that we may process:
- Names, addresses, email addresses, telephone numbers
- Usernames and encrypted passwords (for accounts)
- IP addresses and technical log data
- Project and inquiry data (descriptions, requirements, communication content)
- Billing and contract data (including tax numbers / VAT-ID where applicable)
- SSH keys or other access credentials, insofar as required for the operation of systems and provided by you
When developing and operating systems for clients, we generally process data on behalf of and in accordance with the client's instructions (data processing agreement pursuant to Art. 28 GDPR).
Disclosure of Data
Data is only shared if this is necessary for the performance of the contract (e.g., to hosting providers, hardware suppliers, or payment service providers) or if we are legally obligated to do so. We conclude data processing agreements pursuant to Art. 28 GDPR with processors. Data is not passed on to third parties for their own purposes without your consent.
Security
We implement technical and organizational measures to protect your data. These include, in particular, SSL/TLS encryption during transmission, access restrictions, and the selection of partners who adhere to appropriate security standards. Servers and systems on which personal data is processed are located within the EU.
Storage Period and Data Management
We store data only for as long as necessary for the respective purposes or as required by statutory retention periods (typically 6–10 years for business records). Thereafter, the data is deleted or anonymized.
You may request information, rectification, erasure, or restriction of processing. Please direct inquiries to info@marks-software.de. Upon termination of a contract or cooperation, you may request the deletion of your data, provided no statutory retention obligations prevent this.
Your Rights
You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object (Art. 21 GDPR)
- Withdraw consent with future effect
To exercise your rights, an email to info@marks-software.de is sufficient.
You also have the right to lodge a complaint with the competent data protection supervisory authority (for Lower Saxony: The State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover).
Changes to This Policy
We may update this Privacy Policy. The current version can always be found on this page. In the event of material changes, we will notify you where possible in advance.
Questions
If you have any questions or concerns regarding data protection, please contact us at info@marks-software.de.