This is a translation for information purposes. In the event of any discrepancy between a translation and the German version, the German version shall prevail. Read the authoritative German version.

Controller

HB DETECTLINE Sicherheit & Service UG (haftungsbeschränkt) Rheinstraße 66, 64295 Darmstadt, Deutschland Telephone: 0163 831 65 11 Email: info@hbdetectline-sicherheit.de

Hosting and access to this website

The website and its technical infrastructure are hosted by Replit. According to the operator, the Replit Deployment geography for the published project is set to EU. An EU geography for project resources does not mean all processing takes place exclusively within the EU. International transfers may occur depending on the service and subprocessors. Where required, the Replit Data Processing Addendum provides in particular for EU Standard Contractual Clauses (SCC). The operator must check the applicable agreement and subprocessors.

When you access the website, the hosting infrastructure may process technically necessary connection data such as IP address, time, requested page and browser information for website delivery, technical stability and prevention of misuse (Art. 6(1)(f) GDPR). For API requests our application logs in particular request ID, method, path without URL parameters and response status; contact-message contents are not stored in application logs. Retention of infrastructure and server logs remains to be confirmed against the actual configuration.

Contact form

We process your details to respond to your enquiry and for business communication (Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise Art. 6(1)(f) GDPR). First and last name, email address and message are required. Company, telephone, role, industry, region and requested solution are optional. Please do not send access credentials or particularly sensitive security information.

Your details are sent through Resend to our recipient mailbox hosted by IONOS. Information required for delivery and the message content are transferred to Resend and processed in the IONOS mailbox. The application does not store enquiry content in its database. To limit misuse, the IP address is converted server-side into a pseudonymous key for the contact form; these technical records are regularly cleaned up. Form details are not sent to marketing or analytics services.

According to Resend’s GDPR information, substantial processing and storage of customer data, including message contents and delivery logs, takes place in the United States. We therefore do not claim exclusively European processing. For transfers from the EEA, Resend refers to EU Standard Contractual Clauses in its Data Processing Addendum and also cites the EU–US Data Privacy Framework as an additional mechanism. Applicable processing agreements, subprocessors and actual retention in the sending and mailbox systems must be verified by the operator against contracts and settings.

Applications by email

The careers page has no application form and does not store application data there. Applications are received by email at info@hbdetectline-sicherheit.de in an IONOS-hosted mailbox. We process submitted details and documents to review your application and communicate with you (Art. 6(1)(b) GDPR for pre-contractual steps; additional employment-law grounds require legal review). Access within the company is intended only for persons handling applications; actual mailbox permissions remain to be verified. Application data is not used for marketing or shared with marketing or analytics services. Please send only necessary documents, not identity-card copies or other unnecessarily sensitive information. The general contact form is not intended for applications. Other recipients and a binding retention and deletion policy for applicant data remain to be confirmed.

Cookies, tracking and third-party content

The website code does not integrate Google Analytics, Google Tag Manager or LinkedIn Insight Tag, or load external maps or videos. However, the published version has an external Replit Analytics script inserted by the Replit Publishing infrastructure. The current Content Security Policy blocks it from running in the browser; no active analytics execution was observed when the live website was checked. No consent prompt for it is included. The hosting infrastructure also sets a “GAESA” cookie on page requests, with a lifespan of about 30 days. According to Replit, this technically used cookie routes requests to the appropriate instance. According to the operator, Project Analytics is disabled in Publishing settings, but the published version still includes the script. Non-essential analytics must not run without any required consent.

Retention and recipients

Enquiries are retained in the email system for handling and, where required, statutory record-keeping. A specific retention and deletion policy for enquiry emails and applications remains to be confirmed; no unagreed period is claimed here. Service providers include Replit for hosting and platform operation, Resend for sending form emails and IONOS for the recipient mailbox. Further potential recipients and international transfers must be checked against the actual contracts and configuration.

Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Where processing is based on your consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. Please contact us at the email address above.

Operator review required: the Project Analytics setting in light of the Replit Analytics script still being included, infrastructure log retention, applicability of data-processing agreements and international transfer mechanisms for Replit, Resend and IONOS, internal mailbox access rights, retention and deletion of enquiry and application emails, and final legal review of this notice.