Privacy Policy

Welcome to infinit.cx – we’re glad you’re here!

Thank you for your interest in our website and our company. Protecting your data and your privacy is
extremely important to us. We therefore collect personal data only to a limited extent and only where it is
genuinely necessary, for example to:

• provide our services;
• perform a contract, including its initiation, conclusion, performance and termination;
• handle and answer enquiries (contact form);
• safeguard our business operations;
• improve what we offer;
• prevent, detect and investigate potentially prohibited or unlawful activities and enforce our general terms
  and conditions.

So that you are fully informed about how personal data is processed on our website, we have set this
information out as fully and as clearly as we can. We make every technical and organisational effort required
to protect your data.

The controller for the processing of personal data is:

infinit.cx GmbH
Ganghoferstraße 66e
80339 Munich
Germany
Tel.: +49 89 262 029 900
Email: info@infinit.cx

effiZERT GmbH
Represented by: Michael Schlagintweit
Amselweg 3
82335 Berg
Germany
Email: datenschutz@infinit.cx

We process personal data in order to make our website available, and we store IP addresses in order to detect and defend against attacks.  The legal basis is our legitimate interest in providing and securing our website pursuant to Art. 6(1)(f) of the General Data Protection Regulation (GDPR). Where you use our website in connection with the initiation or performance of a contract, Art. 6(1)(b) GDPR applies in addition.

We process the following personal data:

• IP address
• time of access
• browser type and version*
• operating system*
• referrer URL (the page visited previously)*
• cookies**

* You may be able to prevent this data from being sent by adjusting the settings on your device or browser.

** Cookies are small text files stored locally in your browser’s cache. They help make our website more user-friendly, more effective and more secure, for example by speeding up navigation. They also let us measure things such as how often pages are viewed and how visitors move around the site. Your browser settings determine how long cookies are stored, when they are deleted and whether they are rejected altogether. Please refer to your browser’s documentation. Please note that if you reject cookies, you may not be able to use all the functions of this website. You have the option of preventing the actions you take here from being analysed and linked. This will protect your privacy, but it will also prevent the owner from learning from your actions and improving usability for you and other users. You can see the current status of your consent to the use of cookies on this website in the cookie policy and adjust it there.

The data subject is you, as a visitor to our website.

Contact form
We collect personal data when you contact us, for example through the contact form or by email. The relevant form shows which data we collect. We store and use this data solely to answer your enquiry or to contact you, and for the associated technical administration. The legal basis is our legitimate interest in answering your enquiry pursuant to Art. 6(1)(f) GDPR. If your enquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR applies in addition. We delete your data once your enquiry has been dealt with conclusively, that is, once the circumstances show that the matter has been finally resolved, provided that no statutory retention obligations prevent deletion.

Newsletter subscription and optional consent to telephone contact
If you have subscribed to our newsletter with your email address, we use that address for our own advertising purposes. The newsletter contains information about campaigns, offers and news. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. We store your email address until you unsubscribe. You can unsubscribe at any time using the link provided in the newsletter or by telling us. By unsubscribing, you withdraw your consent to the use of your email address. The platform we use is Freshsales, provided by Freshworks Inc. (2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA). You can find the provider’s privacy information at: https://www.freshworks.com/privacy We engage the dispatch service provider on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR and under a data processing agreement pursuant to Art. 28(3) sentence 1 GDPR.

Event registration
infinit.cx gives you the opportunity to take part in specialist events, including hotel reservation. For this we need your contact details (form of address, surname, first name, company, position, email address), any accommodation preferences and information relating to the particular event. We use your data to organise the event shown. You agree that we may hold your data as a lead in our CRM system in order to administer further information campaigns. We share this data with premium partners of our event. Registration uses a double opt-in procedure: after registering you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using someone else’s email address. We log registrations so that we can evidence the registration process as the law requires. We use your contact details on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR or of your consent pursuant to Art. 6(1)(a) GDPR. Our interest lies in giving our users targeted information about opportunities to take part in specialist events and, where applicable, in sending information. This serves our business interests and matches what our users expect. Withdrawal and cancellation: you may withdraw your consent to the sending of information at any time. Once you have cancelled, we delete your personal data, and your consent to the sending of information lapses at the same time.

Downloading documents
infinit.cx gives you the opportunity to download documents that may interest you. If you consent to receiving information about service offerings that may interest you, we need your contact details (form of address, surname, first name, company, email address), because we hold you as a lead in our CRM system in order to administer information campaigns. Registration uses a double opt-in procedure: after registering you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using someone else’s email address. We log registrations so that we can evidence the registration process as the law requires. We log and store this on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our interest lies in giving our users targeted information through document downloads and, where applicable, in sending information. This serves our business interests, matches what our users expect and allows us to evidence consent. Withdrawal and cancellation: you may withdraw your consent to the sending of information at any time. Once you have cancelled, we delete your personal data, and your consent to the sending of information lapses at the same time.

Blog participation
infinit.cx lets you take an active part in our blogs by posting comments. To do so, you must give your name and email address. This information serves solely to personalise your contribution and we use it for no other purpose. We use your data on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, which lies in complying with our rules on internal and external information and communication.

Video content (YouTube)
On individual pages we make video content available that is hosted on YouTube. Videos are not loaded automatically. A preview image is displayed first, and the video is retrieved from YouTube only when you 6(1)(a) actively click on it. Only at that point is data transmitted to YouTube, in particular your IP address. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Onward transfer to Google LLC in the USA cannot be ruled out. The legal basis for retrieving the video is your consent pursuant to Art. GDPR, which you give by clicking the play button. Further information: https://policies.google.com/privacy

Web fonts (Adobe Fonts)
To display typefaces consistently, this website uses web fonts from Adobe Fonts (formerly Typekit). When you open a page, your browser connects to Adobe’s content delivery network at use.typekit.net to load the fonts, and your IP address is transmitted to Adobe in the process. For users in the European Economic Area, the controller is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland. Onward transfer to Adobe Inc. in the USA cannot be ruled out. The legal basis is our legitimate interest in a consistent and appealing presentation of our website pursuant to Art. 6(1)(f) GDPR. Further information: https://www.adobe.com/privacy/policy.html

Processing for the purpose of detecting and defending against attacks is a legitimate interest (cf. Recital 49 GDPR).

For further processing on the basis of legitimate interests, please see the following sections:

• Contact form
• Newsletter subscription and optional consent to telephone contact
• Event registration
• Downloading documents
• Blog participation
• Recipients
• Social media presence
• Web fonts (Adobe Fonts)

When a website is called up, every server involved in transporting the page receives at least sender and recipient information. If the content is not encrypted, those servers also receive the content itself, that is, our website. Our website is also hosted with a service provider, so that we can concentrate on our core business. We have engaged IONOS SE for this.

As a further platform we use Freshsales, provided by Freshworks Inc. (2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA). You can find the provider’s privacy information at: https://www.freshworks.com/privacy

We engage the dispatch service provider on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR and under a data processing agreement pursuant to Art. 28(3) sentence 1 GDPR. Withdrawal and cancellation: you can withdraw your consent to receiving the newsletter or to telephone contact at any time and thereby cancel your subscription. Once you have cancelled, we delete your personal data, and your consent lapses at the same time. You will also find the link for cancelling at the end of every newsletter.

When a website is called up, there is no guarantee that the data will remain within the EU. Because of the way the internet works, a request on its way from you to us, or a web page on the way back, may be routed via a server in an unsafe third country. This cannot be prevented.

Personal data may also be transferred to the USA where the services named in this Privacy Policy are used, in particular to Freshworks Inc. and to the providers of the social networks, and through onward transfers by Adobe and Google. Such transfers take place on the basis of the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795 of 10 July 2023) where the recipient is certified under that framework, and otherwise on the basis of standard contractual clauses pursuant to Art. 46(2)(c) GDPR. You can obtain a copy of the relevant safeguards from us using the contact details given above.

We store the IP address of a website access for 14 days.

We store all other data for as long as the purpose set out in the relevant section above requires, or for as long as a statutory retention obligation applies. Once the purpose no longer applies and no retention obligation stands in the way, we delete the data.

You have the rights to access, rectification, erasure, restriction and data portability. To exercise them, please use the contact details given above.

So that processing remains fair and transparent, we should explain what we can actually do. As the categories of data listed above show, we process no names when the website is accessed. We would need additional information to identify your website access. Because we separate IP addresses from the remaining data immediately after the website is accessed, we can no longer attribute them to you afterwards. For that reason we cannot give you meaningful information about a website access, and the position is similar for your rights to rectification, erasure, restriction and data portability.

This limitation concerns website access only. Where you have given us your data yourself, for example through the contact form, the newsletter, an event registration or a document download, we can identify you and give full effect to your rights.

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR (Art. 21(1) GDPR). Where personal data is processed for direct marketing purposes, you have the right to object at any time and without giving reasons. Following such an objection, we will no longer process your data for those purposes (Art. 21(2) and (3) GDPR).

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of the processing carried out on the basis of the consent until withdrawal remains unaffected.

For processing carried out on the basis of consent, please see:

• Newsletter subscription and optional consent to telephone contact
• Event registration
• Downloading documents
• Social media presence
• Video content (YouTube)

If you are dissatisfied, please let us know using the contact details given above. Please also use these details if you become aware of a data protection breach. Thank you!

If you have any problems with the processing of your data, you can contact our data protection officer at any time (contact details as above).

You also have the right to lodge a complaint about the processing of your data with a supervisory authority. You can do so either with a supervisory authority responsible for your place of residence or with the supervisory authority responsible for us:

Bayerisches Landesamt für Datenschutzaufsicht
(Bavarian State Office for Data Protection Supervision)
Postfach 606
91511 Ansbach
Germany
Email: poststelle@lda.bayern.de
Internet: https://www.lda.bayern.de

You initiate every website access yourself, and in doing so you give us the data listed above. Your IP address is required, as otherwise we cannot display our website to you.

No automated decision-making takes place.

We maintain online presences within social networks and platforms so that we can communicate with the customers, prospective customers and users who are active there and inform them about our services.

Please note that users’ data may be processed outside the European Union. This may create risks for those users, because it can make enforcing their rights more difficult. Where providers in the USA are involved, transfers take place on the basis of the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795 of 10 July 2023) where the provider concerned is certified under that framework, and otherwise on the basis of standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

Users’ data is also generally processed for market research and advertising purposes. Usage profiles may be created from users’ behaviour and the interests derived from it, and those profiles may in turn be used to place advertisements inside and outside the platforms that are presumed to match users’ interests. For these purposes, cookies are generally stored on users’ computers, recording their behaviour and interests. Usage profiles may also store data independently of the devices users use, in particular where users are members of the relevant platforms and are logged in to them.

The processing of users’ personal data takes place on the basis of our legitimate interests in informing users effectively and communicating with them pursuant to Art. 6(1)(f) GDPR. If a provider asks you for consent to the data processing, for example by ticking a checkbox or confirming a button, the legal basis is Art. 6(1)(a) and Art. 7 GDPR.

For a detailed description of each provider’s processing and of the opt-out options, please see the providers’ information linked below. Requests for access and other user rights can also be asserted most effectively with the providers themselves: only they have access to the data and can take appropriate measures and give information directly. If you still need assistance, you are welcome to contact us.

• Google/YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – privacy
  policy: https://policies.google.com/privacy,
  opt-out: https://adssettings.google.com/authenticated
• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – privacy policy:
  https://www.linkedin.com/legal/privacy-policy,
  opt-out: https://www.linkedin.com/psettings/guest
  controls/retargeting-opt-out

You can request this at info@infinit.cx.

This Privacy Policy is dated September 2026.