Privacy Policy in accordance with the GDPR
united CONZEPT GmbH · Last updated: 22 June 2026
1. Name and address of the data controller
Your contact person within the meaning of the European General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection provisions, is:
Baierbrunner Str. 23
81379 Munich, Germany
Phone: +49 89 78746-0
Email: [email protected]
(hereinafter referred to as “we” or “our”)
2. Name and address of the Data Protection Officer
The protection of your personal data is of great importance to us. To reflect this, we have commissioned a consultancy firm specialising in data protection and data security to take charge of these key issues. We are advised by:
3. General information on data processing
Scope of personal data processing
We generally process your personal data only insofar as this is necessary for the provision of our services. The processing of your personal data is usually carried out solely on the basis of your consent. An exception applies in cases where the processing of personal data is justified on other grounds specified in Art. 6 (1) GDPR or where the processing of your personal data is permitted by another legal provision.
Legal basis for the processing of personal data
Where we seek your consent for the processing of personal data, Art. 6 (1) (a) GDPR serves as our legal basis.
Where the processing of personal data is necessary for the performance of a contract between you and us, Art. 6 (1) (b) GDPR serves as our legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
Where the processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 (1) (c) GDPR serves as our legal basis.
Where the vital interests of you or another natural person necessitate the processing of personal data, Art. 6 (1) (d) GDPR serves as our legal basis.
If the processing is necessary to safeguard a legitimate interest of ours or of a third party, and your interests, fundamental rights and freedoms do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
Duration of storage of personal data
Your personal data will only be stored for as long as necessary to fulfill the respective processing purposes. Once the processing purpose no longer applies, the data will be erased, unless statutory retention periods or other legal grounds prevent its erasure.
Recipients of personal data
Where applicable, your data will be transferred to the relevant supervisory and auditing authorities for the exercise of their respective supervisory powers.
Your rights
Where we process personal data relating to you, you, as the data subject, have the following rights:
- You may request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access those data, as well as further information relating to the processing (Art. 15 GDPR). Please note that this right of access may be restricted or excluded in certain cases.
- If inaccurate personal data are processed, you have the right to rectification (Art. 16 GDPR).
- Where the legal requirements are met, you may request the erasure or restriction of processing (Arts. 17 and 18 GDPR). However, the right to erasure pursuant to Art. 17(1) and (2) GDPR does not apply where the processing of personal data is necessary in accordance with Art. 17(3) GDPR.
- If you have consented to the processing and the processing is based on this consent, you may withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out on the basis of your consent up to the point of withdrawal remains unaffected by this.
- You have the right to object to the processing of your data at any time on grounds relating to your particular situation (Art. 21 GDPR). Provided the legal requirements are met, we will no longer process your personal data as a result.
Further restrictions, modifications and, where applicable, exclusions of the aforementioned rights may arise from the General Data Protection Regulation or national legislation.
You can also obtain more detailed information on these rights from our Data Protection Officer.
Right to lodge a complaint with the supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR (Art. 77 GDPR).
The competent supervisory authority for us is:
Promenade 18
91522 Ansbach
Phone: +49 981 180093-0
Email: [email protected]
Website: www.lda.bayern.de
4. Information about the website
Logging
When you visit this or other websites, you transmit data to our web server via your web browser. The following data is recorded during an active connection for communication between your web browser and our web server:
- date and time of the request
- name of the requested file
- page from which the file was requested
- access status (file transferred, file not found, etc.)
- web browser and operating system used
- full IP address of the requesting computer
- volume of data transferred.
We store this data for technical security reasons, in particular to defend against attempts to attack our web server. After seven days at the latest, the data is anonymised by truncating the IP address to the domain level, so that it is no longer possible to establish a link to individual users.
Secure data transmission
When this information service is accessed, we provide a connection encrypted using HTTPS and Perfect Forward Secrecy, secured at least by the TLS 1.2 encryption protocol, so that your data are protected against access by third parties during transmission. We recommend that you keep your internet browser up to date in order to make use of this option.
5. Cookies
For the correct technical and functional provision of this information service, we use cookies. Cookies are small text files that are stored on the device you use.
The legal basis for the storage of information and the processing of personal data using technically necessary cookies is Section 25 (2) TDDDG (German Telemedia Act) and Art. 6 (1) (f) GDPR.
Technically necessary cookies are only valid for the current session and are automatically erased as soon as you close your browser.
The use of functional cookies is voluntary. If these cookies are blocked, it may not be possible to provide certain functions in full.
The legal basis for the use of non-technically necessary cookies is the user’s consent in accordance with Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR.
When you access this website, we store cookies (small files) on your device. These are valid for:
| Name | Duration |
|---|---|
| cf_clearance | 1 year |
| cmplz_banner-status | 1 year |
| cmplz_consented_services | 1 year |
| cmplz_functional | 1 year |
| cmplz_marketing | 1 year |
| cmplz_policy_id | 1 year |
| cmplz_preferences | 1 year |
| cmplz_statistics | 1 year |
6. Contact form and contact via email
Description and scope of data processing
Our website features a contact form that can be used to contact us electronically. If you use this option, the data entered in the form will be transmitted to us and stored. This data includes:
- name*
- email*
- message*
*Mandatory field
Your consent is sought for the processing of the data as part of the submission process, and reference is made to this privacy policy.
Alternatively, you may contact us via the email address provided. In this case, the personal data you provide in your email will be stored. In this context, the data will not be passed on to third parties.
The data will be used solely for the purpose of processing the conversation.
Legal basis for data processing
The legal basis for the processing of your personal data, where the user has given consent, is Art. 6 (1) (a) GDPR.
The legal basis for the processing of your personal data transmitted when sending an email is Art. 6 (1) (f) GDPR.
If the purpose of contacting us by email is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
Purpose of data processing
We process your personal data from the input form solely for the purpose of handling your enquiry.
The other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
Your personal data will be erased as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data entered via the contact form and that sent by email, this is the case once the relevant correspondence with you has been concluded. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the submission process will be erased no later than after a period of seven days.
Right to object and right to erasure
You have the right at any time to object to the processing of your personal data in future when contacting us via the contact form or by email. In such a case, the conversation between you and us cannot be continued. All personal data stored in the course of the contact will be erased in this case.
7. Active components
Active components such as JavaScript, Java applets or ActiveX controls are used on this website. You can disable these functions by adjusting the settings in your web browser.
8. Google Web Fonts
This website may use so-called Google Web Fonts to ensure consistent font display. When these fonts are used, your browser downloads the necessary fonts from our website system. These are then temporarily stored in the browser cache to ensure the fonts are displayed correctly. Your browser does not establish a connection to Google’s servers during this process. This ensures that Google does not gain any knowledge of your visit or your IP address.
You can find more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.
9. Google reCAPTCHA
To protect against misuse of forms, Google reCAPTCHA may be used. The optional “remoteip” parameter is not set when making API requests to reCAPTCHA. When reCAPTCHA is used, the data required for its operation is downloaded from Google by your browser. In this process, your browser establishes a connection to Google’s servers, enabling Google to become aware that our website has been accessed and to obtain your IP address. The website operator has no influence over this data transmission.
Google reCAPTCHA is used for the purpose of preventing misuse of forms while minimizing any impact on the user-friendliness of the website. reCAPTCHA provides a wide range of functions and, in many cases, operates through automatic detection.
The use of Google reCAPTCHA is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
When Google reCAPTCHA is accessed, Google’s separate privacy policy applies. Further information can be found at: https://www.google.com/intl/de/policies/privacy/
10. Direct marketing
Description and scope of data processing
Our company processes personal data, in particular your name, postal address, contact details and, where applicable, information regarding existing customer relationships, in order to send you advertising and marketing communications relating to our products and services by post, email or other means of communication.
Legal basis for data processing
Where you have given us your consent, we process your personal data for marketing purposes on the basis of Article 6 (1) (a) GDPR.
Where direct marketing is carried out by post, we process your personal data on the basis of Article 6 (1) (f) GDPR. Our legitimate interest lies in promoting our products and services and maintaining existing customer relationships.
Purpose of data processing
Your personal data is processed for the purposes of direct marketing, promoting our products and services, and maintaining existing customer relationships.
Duration of storage
Your personal data will be deleted as soon as it is no longer required for the purposes for which it was collected. In the event that you withdraw your consent or object to the processing of your personal data for marketing purposes, your personal data will no longer be processed for such purposes.
Right to Withdraw Consent and Right to Object
You may withdraw any consent you have given at any time with effect for the future in accordance with Article 7 (3) GDPR.
Where your personal data is processed for direct marketing purposes on the basis of Article 6 (1) (f) GDPR, you have the right, pursuant to Article 21 (2) GDPR, to object at any time to the processing of your personal data for direct marketing purposes. If you object, your personal data will no longer be processed for such purposes.
11. Legal defence and enforcement
Description and scope of data processing
Our company seeks to protect itself against unjustified claims through legal defence. We also enforce the claims and rights to which we are entitled. For this purpose, it is necessary to process personal data. These data consist of the legally relevant data of the data subjects.
Purpose of data processing
The purpose of processing your personal data in the context of legal defence and enforcement is to defend against unjustified claims and to enforce claims and rights through legal means. This purpose constitutes our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.
Duration of storage
Your personal data will be erased as soon as it is no longer required for achieving the purpose for which it was collected.
Right to object and right to erasure
The processing of your personal data in connection with legal defence and the enforcement of legal claims is strictly necessary for legal defence and enforcement. Consequently, you have no right to object.
12. Categories of recipients
Within our company, those offices and departments receive personal data that require them in order to fulfil the purposes stated above. In addition, we sometimes use various service providers and transmit your personal data to other trusted recipients. These may include, for example:
- banks
- scanning services providers
- printers
- lettershops
- IT service providers
- lawyers and courts
13. Further information
Technical and organisational measures
The data controller has implemented technical and organisational measures to protect your data against loss, destruction or unauthorised access.
In addition, both the controller’s employees and any service providers are obliged to maintain confidentiality and to comply with data protection requirements.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our website uses SSL or TLS encryption. This ensures that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the “https://” in your browser’s address bar and the padlock symbol in the browser bar.