Privacy Policy
pursuant to Art. 13 GDPR
Controller
DEFCOM ONE GmbH
c/o Regus, Kronstadter Str. 4
81677 München, Germany
Email: base@defcom.one
Data Processing
Server and Hosting Logs
IP address, requested path, user agent, and referrer are logged automatically on every request, for secure and reliable operation of the Website (Art. 6(1)(f) GDPR). Logs are rotated automatically (max. three files of 10 MB per service) and not otherwise retained.
Analytics
We use Google Analytics (Google Ireland Limited) to understand how visitors use the Website. This processes pseudonymised usage, device, browser, and approximate location data. Legal basis: § 25 TDDDG and Art. 6(1)(a) GDPR (consent via our cookie banner). Data may be transferred to Google LLC in the US under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. You can withdraw consent at any time via the cookie settings. Further information: policies.google.com/privacy
Cookies
We use cookies and similar technologies to operate the Website and, with your consent, for analytics and marketing. Storing or accessing information on your device requires consent under § 25 TDDDG, except where strictly necessary. Manage or withdraw consent anytime via the cookie settings.
Contact Form
Name, email, and message content are processed to respond to your enquiry (Art. 6(1)(b) GDPR), for as long as necessary, subject to statutory retention periods.
Email Communication
Sender/recipient addresses, content, attachments, and transmission metadata are processed via mail.defcom.one for business correspondence (Art. 6(1)(b) or (f) GDPR). Where a third party operates this mail service, they act as our processor under Art. 28 GDPR.
Email Marketing
If you subscribe, we use your email address to send news about DEFCOM ONE, via a CRM provider (Art. 6(1)(a) GDPR, consent). Unsubscribe anytime via the link in each email or at base@defcom.one.
AI-Generated Content
Parts of this Website's content may be created or supported by AI tools, subject to human review. This involves no additional personal data processing. Content will be marked where required under Art. 50 EU AI Act.
External Links
Links to third-party sites (e.g. LinkedIn, Instagram) are provided for convenience; we have no influence over and accept no liability for their content. Their own privacy policies apply.
International Transfers
Data is processed within the EU/EEA unless transferred under an adequacy decision, Standard Contractual Clauses, or another safeguard pursuant to Art. 44 et seq. GDPR.
Recipients
Recipients may include IT infrastructure and email providers, analytics and marketing providers, and authorities where legally required, based on consent, legitimate interest, legal obligation, or contract performance (Art. 6(1)(a), (b), (c), (f) GDPR).
Data Security and Retention
We apply appropriate technical and organisational measures to protect your data. Data is deleted once its purpose no longer applies, unless longer retention is legally required.
Your Rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to withdraw consent anytime (Art. 7(3)). You may object to processing based on legitimate interests (Art. 21) and lodge a complaint with a supervisory authority, in particular the Bavarian State Office for Data Protection Supervision (BayLDA), or the authority of your habitual residence (Art. 77 GDPR).
As of: August 2026