1. Responsible person
ITOM Group
Dipl.-Inf. (FH) Konstantinos Sianavas
Geisenhausener Straße 16a
81379 Munich
Germany
Telephone: +49 (0)170 96 59 49 2
E-mail: info@itom-consulting.de
2. Data protection officer
Law firm for IT compliance
Lawyer Jürgen Dierlamm
Neue Kasseler Straße 12F
35039 Marburg
Germany
Email: info@ra-dierlamm.de
Phone: +49 (0)6422 8500648
3. General information on data processing
Personal data is information that relates to an identified or identifiable person. We only process such data to the extent that this is necessary to provide this website, for communication, to fulfill contractual or pre-contractual obligations, to fulfill legal requirements or to protect legitimate interests.
Depending on the processing, we rely in particular on Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. b GDPR (contract and pre-contractual measures), Art. 1 lit. c GDPR (legal obligation) or Art. 6 Para. 1 lit. f GDPR (legitimate interests).
4. Hosting and server protocols
When you access our website, technically necessary data is transmitted to the web server. This may include IP address, date and time of access, page or file accessed, amount of data transferred, referrer URL, browser type, browser version and operating system. The processing serves to ensure the secure and stable provision of the offer as well as to detect and prevent misuse. The legal basis is Article 6 (1) (f) GDPR.
Log data will be deleted as soon as they are no longer required for these purposes. Longer storage only occurs if a security-related incident needs to be clarified or a legal claim needs to be pursued.
5. Contact and contact form
If you contact us via the contact form, by email or by telephone, we will process the information you provide in order to check and respond to your request. In the contact form, these are name, organization, email address, selected area of interest and - if provided voluntarily - telephone number and message.
The form is sent to a service operated by us and is then forwarded to our email inbox via SMTP. To protect against automated or abusive requests, we also temporarily process the IP address and limit the number of transmission attempts.
For inquiries about the initiation or execution of a contract, Art. 6 Para. 1 lit. b GDPR is the legal basis. For other inquiries, processing is carried out on the basis of our legitimate interest in orderly communication in accordance with Article 6 (1) (f) GDPR. If we request consent, Art. 6 Para. 1 lit. a GDPR also applies.
We delete requests when they have been finally processed and there are no legal retention obligations or legitimate reasons for further storage.
6. Range measurement with Matomo
This website uses Matomo for statistical analysis of usage. The analysis system is available at matomo.itom-consulting.de operated. In particular, the pages accessed, time and duration of the visit, referrer, technical information about the browser, operating system and device as well as the IP address can be processed. The evaluation helps us to understand and improve the use, stability and content of the website.
The legal basis is - to the extent that processing takes place without storage or reading on your device requiring your consent - Art. 6 Para. 1 lit. f GDPR. If Matomo uses cookies or comparable technologies, consent is required before their use in accordance with Section 25 Paragraph 1 TDDDG in conjunction with Article 6 Paragraph 1 Letter a GDPR. Consent given can be revoked at any time with future effect.
Matomo will only be loaded after you have selected “Allow analysis” in the dialog that appears. Your selection will be stored in your browser's local storage. You can change your selection at any time and revoke your consent with effect for the future using the permanently accessible “Data protection settings” button. Accessible Matomo cookies are deleted. You can also remove or block existing cookies via your browser settings.
7. OpenStreetMap
On our contact page we offer a map from the OpenStreetMap service. The provider is the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map does not load automatically. Only when you select “Load map” will your browser establish a connection to OpenStreetMap servers. In particular, your IP address, technical browser data as well as the time and page accessed are transmitted to the provider.
The loading is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG. Alternatively, you can open the external route planner; You are also leaving our website and OpenStreetMap's data protection regulations apply. For more information, see the OpenStreetMap Foundation Privacy Policy.
8. Recipients and order processing
We only pass on personal data if this is permitted or required by law, is required to fulfill the contract, you have consented or we use a service provider as part of order processing. Commissioned service providers are contractually obliged in accordance with Art. 28 GDPR. A transfer outside the EU or the EEA only takes place under the conditions of Art. 44 ff. GDPR.
9. Storage period and deletion
We only store personal data for as long as it is necessary for the respective purpose. They are then deleted or their processing is restricted, provided that statutory retention periods, the securing of evidence or the assertion, exercise or defense of legal claims do not require further storage.
10. Your rights
Within the framework of the legal requirements, you have the right to information (Art. 15 GDPR), correction (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).
You can give your consent in accordance with Art. 7 Para. 3 GDPR can be revoked at any time with effect for the future. You can object to processing based on legitimate interests in accordance with Art. 21 GDPR.
In addition, you can complain to a data protection supervisory authority in accordance with Art. 77 GDPR. In particular, the supervisory authority of your usual place of residence, your place of work or the place of the suspected violation is responsible.
11. Security and updating
We take appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect personal data from loss, unauthorized access and other misuse. This data protection declaration will be adjusted if our website, the services used or legal requirements change.
As of: August 2026