Privacy
Privacy policy
As of 9 October 2026. This notice applies to the static website of isepos GmbH provided here. Additional privacy notices may apply to separate services that you access through links.
1. Controller and contact
isepos GmbH
Grießstraße 54
72827 Wannweil, Germany
Email: info@isepos.de
Telephone: +49 7121 1387725
If you have questions about data protection or exercising your rights, you can contact us using these details.
2. Provision of the website through Cloudflare
We provide this website through Cloudflare Workers and its network for delivering static content. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
When you access the website, Cloudflare processes, in particular, your IP address, the time of the request, the requested address, technical information about your browser and operating system and, where applicable, the previously visited page. This data is needed to deliver content, detect errors and protect the website against attacks and abusive access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Access is not possible without the technically necessary processing of connection data.
Cloudflare processes data as a processor to provide the service. For certain network and security data of its own, Cloudflare describes processing as a controller in its own right; the linked Cloudflare privacy notices apply to this processing. The global network and subprocessors used may also process data outside the EU and the European Economic Area, particularly in the USA. For such transfers, Cloudflare’s contractual data protection terms provide, in particular, for EU standard contractual clauses and additional safeguards. Under Section 6.1 of the Self-Serve Subscription Agreement, the Cloudflare Data Processing Addendum is incorporated into the standard terms of use. Information about the contractual terms and subprocessors is available in Cloudflare’s Data Processing Addendum.
This static application does not maintain its own visitor database or store contact enquiries on the web server. Technical and security-related logs held by the hosting provider are separate. Their retention depends on the service used, the logging functions enabled and what is needed for error analysis and security; in the event of specific security incidents, data may be needed until the investigation is complete. We do not guarantee processing exclusively in Germany or the immediate deletion of all connection data. Further information: Cloudflare’s privacy notice.
3. Cookies, fonts and audience measurement
The website code we provide does not incorporate advertising or analytics cookies, Google Analytics, WP Statistics, Google reCAPTCHA or external fonts. Images and fonts are served through our own website. We do not store persistent video consent in the browser; optional videos must be activated again after a new page load.
Where technically necessary security functions of the hosting provider store or read information on your device, this is governed by Section 25(2) TDDDG. Access that is not necessary requires consent under Section 25(1) TDDDG. Optional external video content is therefore loaded only after you expressly activate it.
4. Contact by email and telephone
When you contact us, we process the information you provide, such as your name, email address, telephone number, company and the content of your enquiry, to deal with your request. Providing information is voluntary; without the information needed to handle your enquiry, we may be unable to respond.
If your enquiry concerns a contract or pre-contractual measures with you, the legal basis is Article 6(1)(b) GDPR. For other enquiries, particularly those from a company’s contact persons, processing is based on Article 6(1)(f) GDPR; our legitimate interest is handling business communications.
The website provides direct email and telephone links, but no contact form. An email link opens your own email application; we receive your information only when you send a message from that application. No form is submitted through the web server.
We use Microsoft 365 / Exchange Online for our business email accounts. The service provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes, in particular, sender and recipient addresses, message content, attachments and technical communications data to transmit emails, provide mailboxes and secure the service. The data protection terms for Microsoft products and services apply to processing on our behalf. Depending on the processing involved, Microsoft group companies and subprocessors may participate, including outside the EU and in the USA. Microsoft’s contractual terms contain provisions on data protection and international transfers, including EU standard contractual clauses. We do not guarantee that all data is processed exclusively in Germany or Europe. Further information: Microsoft Products and Services Data Protection Addendum.
Recipients are the people in our company who handle the request and the necessary IT and communications service providers. We retain correspondence for as long as it is needed to handle the request and, where applicable, conduct the subsequent business. Statutory retention obligations, particularly for business letters and accounting records, and the need to establish or defend legal claims may justify a longer retention period. The data is then deleted.
5. Optional videos and external links
Vimeo
On the company page, you can expressly activate a video from Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. No Vimeo player is loaded before activation. By selecting “Consent and load video”, you agree to a connection being established to Vimeo and to Vimeo receiving, in particular, your IP address, browser and device information and playback information. Processing may take place in the USA. Using the video is voluntary; the rest of the website remains usable without activation.
The legal bases are your consent under Article 6(1)(a) GDPR and, where information is stored or read on your device, Section 25(1) TDDDG. We use the player parameter “dnt=1”, which, according to Vimeo, prevents new player cookies from being set. Existing Vimeo cookies may still be transmitted to Vimeo.
You can withdraw your consent using “Deactivate video”. This removes the embedded player, and it establishes no further connections. Data already transmitted to Vimeo is not recalled by doing so. The lawfulness of processing before withdrawal remains unaffected.
For international transfers, Vimeo describes, among other mechanisms, the EU-US Data Privacy Framework and standard contractual clauses. Information about the data collected, recipients, transfer mechanisms and retention criteria is available in Vimeo’s privacy policy. Your consent to use the video is not blanket consent to transfers to third countries without safeguards.
Product video
The product video on the isePRINT page and its preview image are provided directly through this website. The player loads the video file only when you start playback. No additional external video service is incorporated. The information in the section on hosting this website applies to the technically necessary processing of connection data.
Google Maps, social networks and customer portal
Google Maps is provided only as a link, without an embedded map or an automatic connection when the page is viewed. Links to social networks, the external Vimeo presence or the customer portal also open separate services. When you follow such a link, the respective operator processes data under its own privacy notices. Merely displaying these links does not load the services concerned.
6. Your rights
Subject to the statutory requirements, you have the right of access to your personal data, rectification, erasure, restriction of processing and data portability. These rights arise, in particular, from Articles 15 to 20 GDPR.
Right to object: You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves to establish, exercise or defend legal claims. You may object to processing for direct marketing at any time without giving such grounds.
You can withdraw consent at any time with effect for the future. For the Vimeo video, you can use the button described above; otherwise, you can reach us using the contact details provided.
You may lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart. Information and complaint options: Contact the supervisory authority.
We do not carry out automated decision-making, including profiling within the meaning of Article 22 GDPR, on this website.
7. Video surveillance at our premises
Video surveillance at our premises is separate from use of this website. isepos GmbH monitors security-relevant areas inside and outside its buildings using live images and, in certain cases, recordings. People within the marked camera area may be captured. General surveillance of public spaces is not intended.
The purposes are to protect people and property, detect unauthorised entry and secure entrances and emergency exits. Processing is based on Article 6(1)(f) GDPR and these legitimate security interests. The interests of the data subjects and the necessity of each camera must be taken into account.
Access is granted only to the responsible people and, where applicable, commissioned security or IT service providers. Disclosure to competent authorities or other recipients needed for legal proceedings may occur in the event of specific incidents or statutory obligations.
Live images are not stored permanently unless recorded. Recordings are normally deleted after 72 hours. If particular recordings are needed to investigate a specific incident or pursue legal proceedings, they may be retained until that purpose no longer applies.
The data subject rights described above apply, including the right to object and the right to lodge a complaint. Please also note the signs in the monitored areas. For requests for access to recordings, details of the location and time period help us identify the relevant incident.