Data Protection Policy

1. Introduction

Welcome to SOPHIA. The protection of your personal data is of utmost importance to us. This policy provides detailed information about the nature, scope, and purpose of the collection and use of your personal data.

We process your data in strict compliance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Telemedia Data Protection Act (TTDSG).

2. Data Controller

The party responsible for data processing on this website is:

3. Your Rights

As a data subject, you have the following rights under the GDPR:

• • Right of Access (Art. 15 GDPR): Information about your processed personal data
• • Right to Rectification (Art. 16 GDPR): Correction of inaccurate personal data
• • Right to Erasure (Art. 17 GDPR): Deletion of your personal data
• • Right to Restriction (Art. 18 GDPR): Restriction of processing
• • Right to Portability (Art. 20 GDPR): Transfer of your data
• • Right to Object (Art. 21 GDPR): Object to data processing

4. Data We Collect

Server Log Files

When you access our website, our web server automatically collects:

• Browser type and version
• Operating system used
• Referrer URL
• Time of the server request
• IP address (anonymized)

Cookies

We use only technically necessary cookies essential for the operation of the website. These are used based on our legitimate interest in providing a functional website according to Art. 6(1)(f) GDPR.

Contact Forms

If you contact us via forms or email, we store your inquiry data for processing purposes. The legal basis is Art. 6(1)(b) GDPR for contract-related inquiries or Art. 6(1)(f) GDPR for other inquiries.

5. Data Security

We use appropriate technical and organizational security measures to protect your data. This website uses SSL/TLS encryption for secure data transmission.

6. Data Retention

We process and store your personal data only for the period necessary to achieve the purpose of storage or as required by law. After the purpose has been fulfilled, data will be deleted or blocked according to legal provisions.

7. Third-Party Services

We only share your data with third parties if you have given consent, if legally required, or if necessary for contract fulfillment. All third-party processors are bound by data processing agreements.

8. Changes to This Policy

We reserve the right to update this privacy policy to reflect changes in legal regulations or our services. The current version will always be available on our website.

9. Contact for Data Protection

For any questions regarding data protection, please contact us using the details provided in Section 2 above.