Privacy Policy

All processors are evaluated for compliance with data protection laws, and appropriate contractual safeguards (such as EU Standard Contractual Clauses) are in place.

We may also work with additional processors for functions like secure email delivery, billing, or customer support. A current list of processors is available on request.

​

6. International & Cross-Border Data Transfers 

Some of the third-party services listed above are located or store data outside the European Economic Area (EEA).
Whenever personal data is transferred internationally, we ensure appropriate safeguards are applied, such as:

• EU Standard Contractual Clauses (SCCs) adopted by the European Commission,

• Adequacy decisions (e.g., Israel), or

• Additional technical measures such as encryption and pseudonymization.

We continuously review our partners to ensure compliance with EU data protection standards.

​

7. Data Retention & Deletion

• We retain personal data only for as long as required to fulfil the purposes for which it was collected, including for legal, accounting, or reporting obligations or defense of legal claims.

• Where applicable, we anonymize or delete data when it is no longer needed.

• For customer accounts, upon termination, we may delete or anonymize personal data after a defined retention period (e.g. 12 months or as per contractual terms), unless required to keep it longer by law.
  ​

8. Security Measures

We take technical and organizational measures to protect personal data, including:

• Encryption in transit (TLS) and at rest where applicable.

• Network security, firewalling, intrusion detection and prevention.

• Access controls, role-based access, least privilege.

• Regular vulnerability assessments, penetration testing, audits.

• Backup and recovery procedures to protect against data loss.

• Multi-factor authentication (MFA) for administrative access.

• Secure logging, monitoring, and incident response processes.

Nevertheless, no system is perfectly secure; in the event of a data breach, we will notify affected users and authorities as required by applicable law.

​

9. Your Rights & Choices

Depending on your jurisdiction (e.g., GDPR in the EU), you may have rights regarding your personal data. These can include:

• Right to access — request a copy of the personal data we hold about you.

• Right to rectification — request correction of inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”) — request deletion of your personal data, subject to lawful exceptions.

• Right to restrict processing — ask us to limit how we use your data.

• Right to object — object to certain processing (e.g. marketing, profiling).

• Right to data portability — receive your data in a structured, commonly used, machine-readable format and transmit it elsewhere.

• Right to withdraw consent — where processing is based on consent, you can withdraw at any time.

• Right to lodge complaints — e.g. with relevant data protection authorities.
   

To exercise any rights, please contact us at contact@gomisp.com. We may ask you to verify your identity.

​

10. Cookies & Tracking Technologies

What are cookies?

A cookie is a small data file that is placed on your device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.

Cookies set by the website owner (in this case, WALLSEC GmbH) are called "first party cookies". Cookies set by parties other than the website owner are called "third party cookies". Third party cookies enable third party features or functionality to be provided on or through the website (e.g. like advertising, interactive content and analytics). The parties that set these third party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.

Our website uses cookies and similar technologies managed through Consentik, our consent-management platform.
These tools help us comply with GDPR and ePrivacy requirements by recording and respecting your cookie preferences.

Depending on your consent, we may use:

• Essential cookies — Required for the website to function (e.g., session management, security, Consentik settings).

• Analytics cookies (Google Analytics) — To collect anonymized statistics about site usage.

• Functional cookies (WIX, Google Maps) — For interactive features and enhanced usability.

• Marketing cookies (Google Ads, LinkedIn) — To deliver personalized ads and measure campaign performance.

• Social & community cookies (BlueSky) — To support embedded social features, if used.

When required by law (e.g. EU), we will present a cookie consent banner allowing you to accept, reject or configure non-essential cookies.

You may disable or delete cookies via your browser settings, though some features of the Site may cease to function properly.

​

11. Minors

Our Services and Site are not directed at minors (e.g. under 16). We do not knowingly collect personal data from minors. If we learn that we have inadvertently collected personal data of a minor, we will take steps to delete it.

​

12. Changes to This Policy

We may update this Privacy Policy from time to time (e.g. in response to new laws or changes to our practices). We will post the revised policy on the Site with a new effective date, and where required, provide notice (e.g. via email for registered users). We encourage you to review this page periodically.

​

13. Contact & Complaints

goMISP
Email: contact@gomisp.com
Industriestraße 44, 69190 Walldorf, Germany