act’o-soft Logo

Privacy policy

We and our solutions process a wide variety of data from our customers. Our customers, in turn, process data from their customers. So it’s no surprise that data protection is extremely important to us. A cross-departmental team ensures that we all continuously refine our methods and standards for data protection. We would be happy to advise you and share our know-how with you.

Person responsible and contact

Person responsible within the meaning of the General Data Protection Regulation:
act’o-soft GmbH
Brackweder Str. 51
33790 Halle (Westf.)

Tel.: +49 (0)5201 / 18047-0
E-Mail: post(at)

Overall responsibility for the area of information security:
The managing partners: Christian Malachowski 

Contact details of our data protection representative:
Herr Thomas Werning
Tel.: +49 (0)5201 / 18047-0
E-Mail: datenschutz(at)

For information, objections, requests for authorization and deletion of your data and for suggestions, please contact our data protection officer at any time or send a letter to the address below, keyword: “Data protection”.

1 General

This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted. In principle, the website can be used without providing personal data. Unless you make active entries, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website.

The entry and disclosure of personal data by the customer/user is voluntary. Storage will only take place after consent has been given. We process your personal data only to the extent necessary for the provision of the service. In this context, it may be necessary for us to pass on your data to companies that we have commissioned to provide the service or parts thereof, e.g. providers, telecommunications companies or other service providers. You can revoke your consent to the storage of data, as well as its use, e.g. for sending our newsletter, at any time.

In the event that you have not expressly consented to the use of data beyond the duration of the contract, your data will be blocked after the end of the contract and deleted after the expiry of the tax and commercial regulations.

If you would like to see the information we hold about you or your organization, or simply require further information, please contact us at post(at)

For more details, please see the following paragraphs.

2 Personal data

Personal data is individual information about the personal or factual circumstances of a specific or identifiable natural person. This includes information such as the civil name, address, telephone number and date of birth.

Below we inform you in accordance with Art. 12, 13, 14 and 21 of the General Data Protection Regulation (DSGVO) about the handling of your personal data when using our website and when establishing, implementing and terminating a contractual relationship with us.

3 Purpose & legal basis

We adhere to the principle of data use for a specific purpose. We collect, process and store your personal data only for the purposes for which you have provided it to us. We do not pass on your personal data to third parties without your express consent, unless this is necessary for the provision of the service or the execution of the contract. We will also only pass on information to state institutions and authorities entitled to receive such information if we are legally obliged to provide it or if we are obliged to do so by a court decision.

Our employees and the service companies commissioned by us have also been obligated by us to maintain secrecy and to comply with the provisions of data protection law.

We process this data in accordance with the following legal basis:

Art. 6 para. 1 lit. a DSGVO for the processing of personal data with the consent of the data subject.

Art. 6 para. 1 lit. a DSGVO for the appropriate response to contact requests.

Art. 6 para. 1 lit. b DSGVO for the necessary processing of personal data for the fulfillment of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.

Art. 6 para. 1 lit. c DSGVO for the necessary processing of personal data for the fulfillment of a legal obligation to which we are subject according to any applicable law of the EU or according to any applicable law of a country in which the DSGVO is applicable in whole or in part.

Art. 6 para. 1 lit. f DSGVO in conjunction with. § Section 7 (3) UWG for the processing of personal data in the context of direct advertising for our products and services.

Art. 6 para. 1 lit. f DSGVO in conjunction with. § Section 15 (3) TMG to protect our legitimate interests. Our legitimate interest is the design of this website to meet the needs of our customers.

For this purpose, we use service companies separately obligated to secrecy and data protection within the scope of service provision.

These categories of recipients are:

Order processors used by us (Art. 28 DSGVO), in particular in the area of IT services, maintenance and support activities, who process your data for us in accordance with your instructions

public bodies and institutions (tax authorities) in the event of a legal or official obligation

other bodies for which you have given us your consent to the transfer of data.

Data is only passed on to public authorities in the event of overriding legal requirements.

Specifically, we process for the performance of our services:

Master data for the performance and fulfillment of the service. (e.g. name and address, e-mail address, telephone number)

Data in connection with payment processing

Correspondence (e.g. correspondence or e-mail correspondence with you)

Advertising and sales data (e.g. about new potentially interesting offers).

Your data will be stored for the duration of the contract. After the end of the contractual relationship, we are obliged to keep the tax-relevant documents for the duration of any retention periods. Afterwards, the data will be deleted.

4 Right to information, correction, deletion, objection and data portability

If you wish, you will receive information about your data stored by us at any time free of charge and without giving reasons.

Furthermore, you can have your data collected by us blocked, corrected or deleted at any time. Excluded from this is data that is stored due to legal requirements or required for proper business processing. If data does not have to be archived due to a legal obligation, we will delete your data at your request. If there is an archiving obligation, we will block your data.

Furthermore, in accordance with Art. 21 DSGVO, you can revoke the consent given to us for the collection and use of data at any time.

You also have the option to file a complaint with a data protection supervisory authority at any time. For example, with the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia,, which is responsible for us.

However, we recommend that you always direct a complaint to our data protection officer first. Please use the above contact options in this regard and for all other legal claims. Please understand that we will only answer requests for information by telephone or e-mail or mail if we can ensure that the person requesting information is actually the person about whose data information is being requested.

5 Privacy notice for visitors to this website and others

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

We automatically collect and store usage data in so-called server log files. These are automatically transmitted to us by your browser. The server log files include:

  • Browsertyp/ Browserversion
  • Operating system in use
  • Referer URL
  • Host name of the accessing computer
  • Time server query

The purpose of this data collection is the optimization of our website.

The collection of this data is anonymized, without personally identifying the user of the site or assigning the data to a specific person. A connection of this data with other data sources is also not made. However, if we become aware of concrete indications of illegal use, we reserve the right to check the data retrospectively.

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

6 Privacy policy social networks

The company operates profiles on the following networks:

The providers of the various platforms are primarily responsible for providing the data subject with information about the processing operations and enabling him or her to exercise his or her data protection rights. Irrespective of this, we would like to inform you herewith about our appearances on social networks. We recommend that you do not send us any sensitive data via these profiles. Please use a direct communication channel for this purpose.


All data that you enter on our social network profiles (e.g.: comments, pictures, private messages, etc.) are published by the platform operators and used by us exclusively for the purposes stated below. The legal basis for this is Art. 6 para. 1 p. 1 f DSGVO. The legitimate interest is based on public relations, a timely information as well as interaction opportunity and contact with applicants (Xing, LinkedIn) via private and act’o-soft GmbH information systems accounts with our visitors.


When our profiles are called up, data is processed by the platform operator. The form in which this takes place cannot be influenced or viewed by us. However, the procedure usually depends on whether you yourself are registered with the platform. It is possible that the providers process the data outside the EU, so that we cannot guarantee a data protection-compliant procedure according to the GDPR.

You can find more information about the data processing of the individual platform providers in their privacy policy:

Instagram: social network; service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website:; Privacy policy:

Twitter: social network; service provider: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy policy:, (settings);

LinkedIn: social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website:; Privacy policy:; Opt-out:

Xing: Social network; service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany; website:; privacy policy:


Since we have little influence on the data processing of the individual providers, we ask you to contact the respective platform operator directly to assert your rights.

According to Art. 13 (2) DSGVO, you have the following rights:

  • Right of access Art. 15 DSGVO
  • Right of rectification Art. 16 DSGVO
  • Right to erasure Art. 17 DSGVO
  • Right to restriction of processing Art. 18 DSGVO
  • Right to data portability Art. 20 DSGVO
  • Right of objection Art. 21 DSGVO
  • Right of complaint to a supervisory authority Art. 77 GDPR

If you wish to assert the above rights against us, please feel free to contact us at the e-mail address: datenschutz(at)

7 Visitor Analytics

Visitor Analytics is a simple website analytics service that collects traffic to our website and general information from website visitors. We collect statistics to improve the experience of our website visitors. We never use cookies for this purpose.

As a website operator that uses Visitor Analytics to measure reach, depending on the privacy level we have enabled, we may process information about the device you use and its characteristics, information about technical characteristics of the website visit, the number of page visits and statistically relevant behaviors of our visitors on the website. The Platform does not use the collected data to identify individual users or to match the data with additional information about an individual user.

Depending on the location from which you access our website, Visitor Analytics may not collect any information about the device you are using due to our technical settings.