Privacy policy.

1. Data controller

The controller responsible for processing personal data on this website is:

Mario Djukic · SAFEWORK Software Technologies
Röntgenstraße 25c
30163 Hannover, Germany
Telephone: +49 170 6941873

You may send privacy enquiries by telephone or post. You may also use the contact form. With your consent, the contact form transmits your details through FormSubmit to our IONOS mailbox. Alternatively, you may contact us directly by email, telephone or post.

Email for contact and privacy enquiries: m.djukic@safework-technologies.de

2. Scope

This privacy policy applies to safework-technologies.de and the associated SAFEWORK information website provided through ChatGPT Sites. It does not describe the future training web app or the processing of employee data within such an application. Other websites that you open through links have their own privacy notices.

3. Website delivery and security

Technically necessary connection data is processed when you access the website. This may include your IP address, access time, the page or file requested, browser and device information, the referring page and technical status information. Processing serves website delivery, troubleshooting and protection against abusive access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and stable delivery of our information website. Access to the website is not possible without processing the technically necessary connection data.

The website is provided through ChatGPT Sites by OpenAI. Under the ChatGPT Sites Data Processing Addendum, OpenAI Ireland Ltd is the contracting party for the processing covered by that agreement for a website operator based in Germany. OpenAI also uses subprocessors, including Cloudflare for hosting and content delivery.

Further information: ChatGPT Sites Data Processing Addendum, OpenAI's subprocessors and OpenAI's privacy policy.

Technical data is needed only for as long as necessary for delivery, security and troubleshooting. Security-related incidents may be retained until resolved. We currently do not have a confirmed retention period specific to this website for technical logs held by the hosting provider; we therefore do not state an unverified number of days.

4. International data processing

Provision by OpenAI and its subprocessors may involve processing outside the European Economic Area, particularly in the United States. For data covered by the Sites DPA, OpenAI provides for EU standard contractual clauses or an applicable adequacy decision for relevant transfers. Information about these safeguards is available in the linked DPA; processing exclusively within Germany or Europe is not guaranteed for this website.

5. Product selection in your browser

You can shortlist topics on the products page. The website uses your browser's session storage (sessionStorage) under the key safework-selection. Only the names of the products you select are stored. Your selection is not sent to SAFEWORK as an enquiry and contains no user identifier assigned by us.

Storage occurs when you use a selection button and provides the shortlist you have expressly requested during your current browser session. For the necessary access to device storage, we rely on Section 25(2)(2) of the German TDDDG. Where personal data is processed, the legal basis is our legitimate interest in providing the requested function under Article 6(1)(f) GDPR.

You can remove selected items by clicking the selection buttons again. Session storage is generally deleted when you close the tab or browser session; browser session restoration may restore the data. You can delete it at any time through your browser's website data settings. If session storage is unavailable, selection remains available for the current page visit.

6. Image gallery and external images

The SAFEWORK logo, favicon, background, SAFEWORK Training gallery and pilot customer artwork are delivered together with this website. Displaying and enlarging these images does not establish an additional connection to an external image provider through our page code; the connection data described in section 3 is processed. Team photos and collection images, however, are loaded through image.jimcdn.com. Technically necessary connection data, particularly your IP address and the file requested, is transmitted to that image service. The data may be processed in its technical logs.

These images present our team and product portfolio. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is to provide an informative visual presentation of our offering. Information about the provider and its data processing is available in Jimdo's privacy notice. We do not have an independently verified retention period for that image service's logs.

7. Contact form, pilot customer enquiries and email

Data and purpose

When you write to us through the contact form, we process your name, email address, company if provided, message and consent confirmation. Name, email address, message and consent are required fields; providing a company name is optional. The data is used to respond to your enquiry, contact you and, where applicable, prepare cooperation as a pilot customer. The form cannot be submitted without the required information. You can still contact us by telephone or direct email.

Sending through FormSubmit

The form uses FormSubmit by Devro LABS. Simply opening the contact page does not load FormSubmit scripts through our page code. An HTTPS connection to formsubmit.co is established only when you submit the form. The service receives your completed details, consent confirmation and technical connection data such as your IP address and, where applicable, browser or referral information. FormSubmit forwards the message to m.djukic@safework-technologies.de. Our page code does not implement a separate database for contact enquiries.

Forwarding through FormSubmit is based on your prior consent under Article 6(1)(a) GDPR. The consent checkbox is not preselected. You can withdraw your consent at any time with effect for the future by emailing m.djukic@safework-technologies.de. Withdrawal does not affect the lawfulness of processing already carried out. A message already sent cannot technically be recalled; we assess deletion in accordance with your statutory rights and any applicable retention obligations.

Responding to an enquiry concerning the establishment or performance of a contract is based on Article 6(1)(b) GDPR, where its conditions apply. Other enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is responding to your contact request.

Receipt in our IONOS mailbox

The receiving mailbox is provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, under our Mail Business contract. Emails sent directly to us are also processed there. We may access the mailbox in webmail or on our configured devices to handle enquiries. Information about IONOS is available in IONOS's privacy notice.

Retention and provider information

FormSubmit states a retention period of 30 days for its submissions archive. This period concerns the sending service's archive, not the copy of the message in our mailbox. We delete received correspondence once it is no longer needed to handle the enquiry and any follow-up questions, unless statutory retention obligations or the necessary protection of legal claims require otherwise.

Further information is available in FormSubmit's privacy notice and the FormSubmit documentation. The service's publicly available information does not specify binding storage locations or safeguards for possible transfers to third countries that specifically apply to this integration. Processing exclusively within Europe or particular third-country safeguards are therefore not guaranteed for this service. You can avoid FormSubmit by contacting us directly by email or telephone.

Spam protection and security

The regular contact form includes an invisible honeypot field to detect automated entries. Google reCAPTCHA is disabled in the regular form; our page code does not load Google reCAPTCHA scripts for it. The connection to the sending service is encrypted through HTTPS. This does not guarantee end-to-end encryption of the subsequent email transmission.

8. Access through ChatGPT and other services

The website is publicly accessible. If you use functions of the ChatGPT platform, its terms and privacy notices also apply. OpenAI processes associated account and sign-in data in accordance with its own privacy notices. Our page code does not contain its own login system and does not retrieve ChatGPT profile information.

Our pages do not incorporate analytics tools, advertising pixels, newsletter registration, embedded maps or videos. Our page code does not set its own tracking cookies. Technical cookies or similar functions of the hosting and access platform are governed by OpenAI's information. This policy therefore does not claim that the entire platform is cookie-free.

9. Your rights

Subject to the applicable statutory conditions, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent at any time with effect for the future.

Right to object: You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation under Article 21 GDPR. For direct marketing, you may object without giving such grounds.

To exercise your rights, contact Mario Djukic using the details above. We handle requests within the statutory time limits. Providing contact details is voluntary; without sufficient information, we may be unable to respond to an enquiry. Our page code does not make automated decisions with legal or similarly significant effects and does not carry out profiling.

10. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement. In Lower Saxony, you can contact the State Commissioner for Data Protection at:

PO Box 221, 30002 Hannover
Telephone: 0511 120-4500
Email: poststelle@lfd.niedersachsen.de
Online complaint to the Lower Saxony data protection authority

11. Changes

We update this policy when functions, contact channels or service providers change. Changes to contact channels, website functions or hosting are reflected in this policy.