Controller

aramido GmbH, Durlacher Allee 75 – 77, 76131 Karlsruhe (hereinafter referred to as "aramido", further contact details see Legal Notice) is the controller for the processing of data and security of this website in accordance with General Data Protection Regulation (GDPR) Art. 4.

Purpose and Nature of Data Collection

When using the websites of aramido GmbH, personal data is collected exclusively on the basis of the provisions of Art. 6 GDPR. This means that the collection, processing, and use take place based on your explicit consent, based on legitimate technical requirements, or based on legal regulations. We limit ourselves to the minimum necessary requirements. The legal basis for this can be found in the GDPR, the BDSG (new) and the Digital Services Act.

Data Categories

The following types of personal data are processed on this website:

• Contact data (e.g., email, phone numbers)
• Content data (e.g., messages in contact requests)
• Usage data (e.g., visited pages, access times)
• Meta/communication data (e.g., browser information, IP addresses)

Deletion of Data

The personal data we process is deleted or anonymized as soon as it is no longer required for its purpose and there are no legal reasons against deletion (e.g., due to retention obligations under the Commercial Code), unless otherwise stated.

Contact Forms

If you use one of our contact forms or request the download of a document provided by us, your message as well as your email address and phone number are first transmitted to our web server via an encrypted connection and then delivered to us by email.

Purpose and Legal Basis of Processing

The message is processed for cooperation with our customers (processing for the fulfillment of pre-contractual measures within the meaning of Art. 6 Para. 1(b) GDPR).

Storage Duration

The data is stored encrypted for the duration of the statutory period.

Privacy Policy for Plausible

To analyze and optimize our web offer, we use the privacy-friendly tool Plausible. In this case, data is processed solely for the purpose of creating aggregated usage statistics. Plausible completely avoids the use of cookies and does not store any personal data. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest), which consists in the demand-oriented provision, secure operation and continuous improvement of the website.

Logging and Security

To ensure the operation and security of the offer, the following data is stored on our web servers for a limited period: the IP address of the requesting system, date and time of access, the address of the page accessed, the response code providing information about any occurring errors, and the amount of data in the web server response. This data would only be personally identifiable with further information, which we do not collect.

Additionally, we use the CapJS system to ward off automated access (bots). Since this solution is hosted entirely by ourselves, all data remains on our own infrastructure. Verification takes place locally in the user's browser, without cookies being set or data being transmitted to external third parties.

Purpose and Legal Basis of Processing

The purpose of the data processing is the secure and reliable provision of the website (processing based on a legitimate interest within the meaning of Art. 6 Para. 1(f) GDPR).

Storage Duration

The data is automatically deleted at regular intervals if there is no longer a need.

Cooperation with Third Parties

We will not use your data for any purposes not mentioned here and will not pass it on to uninvolved third parties. Our hosting service provider has been committed to a high level of data protection via a contract for order processing (Art. 28 GDPR). Due to the use of hard disk encryption, no personal data is visible to the hoster.

Supervisory Authority

Since aramido is based in Baden-Württemberg, the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg is the supervisory authority responsible for data protection. You have the right to lodge a complaint there (Art. 77 GDPR).

Rights of Access and Objection

Upon request, we will be happy to inform you in writing whether and what personal data about you is stored with us (right of access Art. 15 GDPR). If, despite our constant efforts regarding currentness and correctness of your data, we have stored incorrect information, we will be happy to correct your data (right to rectification Art. 16 GDPR). Under certain conditions, you also have the right to block and delete your personal data stored with us (right to deletion Art. 17 GDPR and right to restriction of processing Art. 18 GDPR). Furthermore, you have the right to receive the data provided to us or to transmit it to another controller (right to data portability Art. 20 GDPR). If you generally do not wish to receive any advertising information and offers, neither by post, by email, by SMS, by fax nor by telephone, or if you wish to object to a consent given, you can also write to us at any time or send an email (Art. 7 Para. 3 GDPR and Art. 21 GDPR). If we have doubts about your identity, we may ask you to send clarifying information (for example, a redacted copy of your identity card with first and last name, address and date of birth). For all questions about the processing of your personal data in our house, suggestions or complaints, you are welcome to contact our data protection officer. Please send an email or a postal message to the following address:

aramido GmbH
Data Protection Officer
Durlacher Allee 75 – 77
76131 Karlsruhe
Email:

Changes to the Privacy Policy

We review and update the privacy policy to comply with the currently applicable legal data protection regulations. You can find out about the current status on this website.

Last updated: 17.07.2026

Controller

aramido GmbH, Durlacher Allee 75 – 77, 76131 Karlsruhe (hereinafter referred to as "aramido", further contact details see Legal Notice) is the controller for the processing of data and security of this website in accordance with General Data Protection Regulation (GDPR) Art. 4.

Purpose and Nature of Data Collection

When communicating with aramido GmbH via email, personal data is collected exclusively on the basis of the provisions of Art. 6 GDPR. This means that the collection, processing, and use take place based on your explicit consent, based on legitimate technical requirements, or based on legal regulations. We limit ourselves to the minimum necessary requirements. The legal basis for this can be found in the GDPR, the BDSG (new) and the Digital Services Act.

Data Categories

When communicating by email or via our contact form, the following types of personal data are processed:

• Contact data (e.g., name, email)
• Content data (e.g., messages)
• Meta/communication data (e.g., IP addresses)

Deletion of Data

The personal data we process is deleted or anonymized as soon as it is no longer required for its purpose and there are no legal reasons against deletion (e.g., due to retention obligations under the Commercial Code), unless otherwise stated.

Logging and Security

To ensure the operation and security of the offer, the following data is stored on our mail servers for a limited period: the IP address of the requesting system, date and time of access, the address of the recipients and any occurring errors. This data would only be personally identifiable with further information, which we do not collect (processing based on a legitimate interest within the meaning of Art. 6 Para. 1(f) GDPR).

Cooperation with Third Parties

We will not use your data for any purposes not mentioned here and will not pass it on to uninvolved third parties.

Supervisory Authority

Since aramido is based in Baden-Württemberg, the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg is the supervisory authority responsible for data protection. You have the right to lodge a complaint there (Art. 77 GDPR).

Rights of Access and Objection

Upon request, we will be happy to inform you in writing whether and what personal data about you is stored with us (right of access Art. 15 GDPR). If, despite our constant efforts regarding currentness and correctness of your data, we have stored incorrect information, we will be happy to correct your data (right to rectification Art. 16 GDPR). Under certain conditions, you also have the right to block and delete your personal data stored with us (right to deletion Art. 17 GDPR and right to restriction of processing Art. 18 GDPR). Furthermore, you have the right to receive the data provided to us or to transmit it to another controller (right to data portability Art. 20 GDPR). If you generally do not wish to receive any advertising information and offers, neither by post, by email, by SMS, by fax nor by telephone, or if you wish to object to a consent given, you can also write to us at any time or send an email (Art. 7 Para. 3 GDPR and Art. 21 GDPR). If we have doubts about your identity, we may ask you to send clarifying information (for example, a redacted copy of your identity card with first and last name, address and date of birth). For all questions about the processing of your personal data in our house, suggestions or complaints, you are welcome to contact our data protection officer. Please send an email or a postal message to the following address:

aramido GmbH
Data Protection Officer
Durlacher Allee 75 – 77
76131 Karlsruhe
Email:

Changes to the Privacy Policy

We review and update the privacy policy to comply with the currently applicable legal data protection regulations. You can find out about the current status on this website.

Last updated: 09.07.2025

Controller

aramido GmbH, Durlacher Allee 75 – 77, 76131 Karlsruhe (hereinafter referred to as "aramido", further contact details see Legal Notice) is the controller for the processing of data and security of this website in accordance with General Data Protection Regulation (GDPR) Art. 4.

Purpose and Nature of Data Collection

We collect, process, and use your personal data exclusively to verify your registration and to fulfill the service contract (for example, by providing training materials, access to interactive, self-hosted learning platforms, and the issuance of certificates), to ensure the implementation, documentation, and follow-up of the training (for example, using attendance lists and evaluation results), to inform you about date-related changes, supplementary learning materials, or further offers, provided you have explicitly consented to this, and finally to fulfill statutory retention obligations. The legal basis for the processing of your personal data is the fulfillment of the contract according to Art. 6 Para. 1(b) GDPR.

Data Categories

The following types of personal data are processed on this website:

• Contact data (e.g., name and email address)
• Content data (e.g., messages)
• Usage data (e.g., visited pages, access times)
• Meta/communication data (e.g., browser information and IP addresses)
• Master data (e.g., address)
• Usage and performance data (e.g., attendance lists, certificate issuance, feedback and evaluation forms)

Deletion of Data

The personal data we process is deleted or anonymized as soon as it is no longer required for its purpose and there are no legal reasons against deletion (e.g., due to retention obligations under the Commercial Code), unless otherwise stated.

Cooperation with Third Parties

We will not use your data for any purposes not mentioned here and will not pass it on to uninvolved third parties.

Supervisory Authority

Since aramido is based in Baden-Württemberg, the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg is the supervisory authority responsible for data protection. You have the right to lodge a complaint there (Art. 77 GDPR).

Rights of Access and Objection

Upon request, we will be happy to inform you in writing whether and what personal data about you is stored with us (right of access Art. 15 GDPR). If, despite our constant efforts regarding currentness and correctness of your data, we have stored incorrect information, we will be happy to correct your data (right to rectification Art. 16 GDPR). Under certain conditions, you also have the right to block and delete your personal data stored with us (right to deletion Art. 17 GDPR and right to restriction of processing Art. 18 GDPR). Furthermore, you have the right to receive the data provided to us or to transmit it to another controller (right to data portability Art. 20 GDPR). If you generally do not wish to receive any advertising information and offers, neither by post, by email, by SMS, by fax nor by telephone, or if you wish to object to a consent given, you can also write to us at any time or send an email (Art. 7 Para. 3 GDPR and Art. 21 GDPR). If we have doubts about your identity, we may ask you to send clarifying information (for example, a redacted copy of your identity card with first and last name, address and date of birth). For all questions about the processing of your personal data in our house, suggestions or complaints, you are welcome to contact our data protection officer. Please send an email or a postal message to the following address:

aramido GmbH
Data Protection Officer
Durlacher Allee 75 – 77
76131 Karlsruhe
Email:

Changes to the Privacy Policy

We review and update the privacy policy to comply with the currently applicable legal data protection regulations. You can find out about the current status on this website.

Last updated: 09.07.2025

Mastodon Corporate Page

We operate a page on Mastodon, a decentralized, federated social networking platform. The page is located on the instance https://infosec.exchange. When visiting the page on Mastodon, personal data is collected and processed by the operator of the instance infosec.exchange. We use Mastodon to share information about our company, our services, and current developments, and to get in touch with potential customers, partners, and interested parties. Since Mastodon is a federated platform, your interactions with our page may also be stored and processed on other instances. The privacy policies of the respective instances may differ from the policies of our instance. We do not have direct access to all data collected by Mastodon. The operator of our instance provides us with aggregated statistical data about the use of our page, such as the number of followers, the reach of our posts, and the demographic characteristics of our followers.

The legal basis for processing is Art. 6 Para. 1 lit. f GDPR, our legitimate interest in a professional external presentation and communication with our target group. Further information on the processing of personal data by the operator of our instance https://infosec.exchange/ can be found in the Privacy Policy of the instance. Please note that we cannot assume responsibility for the privacy practices of other instances in the Mastodon federation.

LinkedIn Corporate Page

We operate a corporate page on the LinkedIn platform, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is a network that promotes the exchange between professionals and executives. When visiting our LinkedIn page, personal data is collected and processed by LinkedIn. We use LinkedIn to provide information about our company and to get in touch with interested parties and customers. LinkedIn provides us with so-called "Page Insights". These contain statistical data about the use of our LinkedIn page. In this case, we receive only anonymized data, but LinkedIn processes this information on the basis of its own privacy policies.

The legal basis for processing is our legitimate interest in communication and external presentation according to Art. 6 Para. 1 lit. f GDPR. Further information on the processing of personal data by LinkedIn can be found in the LinkedIn Privacy Policy. LinkedIn and we are jointly responsible for the processing of Insights data in the sense of Art. 26 GDPR. The corresponding agreement can be viewed here: https://legal.linkedin.com/pages-joint-controller-addendum.

Xing Corporate Page

We operate a corporate page on the Xing platform, a service of Xing New Media Holding GmbH, Dammtorstraße 9, 20354 Hamburg, Germany. Xing is a network that focuses on the German-speaking region and promotes the exchange between professionals and executives. When visiting our Xing page, personal data is collected and processed by Xing. We use Xing to share information about our company, our services, and current developments and to get in touch with potential customers, partners, and employees. Xing provides us with aggregated statistical data about the use of our corporate page, such as the number of profile visitors and the demographic characteristics of these users. This data helps us to improve our communication and offer more relevant content. Xing processes this information on the basis of its own privacy policies.

The legal basis for processing is our legitimate interest in professional external presentation and the improvement of our marketing activities according to Art. 6 Para. 1 lit. f GDPR. Further information on the processing of personal data by Xing can be found in the Xing Privacy Policy. Xing and we are jointly responsible for the processing of the available data in the sense of Art. 26 GDPR. The corresponding agreement can be viewed here: Agreement on shared responsibility under data protection law.

X (formerly Twitter) Corporate Page

We operate a page on X (formerly Twitter), a platform for real-time information and social interaction, operated by X Corp. When visiting our page on X, personal data is collected and processed by X Corp. We use X to share information about our company, our services, and current developments, and to get in touch with potential customers, partners, and interested parties. X provides us with aggregated statistical data about the use of our page, such as the number of impressions, the reach of our posts, the demographic characteristics of our followers, and the number of interactions (likes, retweets, replies).

The legal basis for processing is Art. 6 Para. 1 lit. f GDPR, our legitimate interest in a professional external presentation, communication with our target group, and the improvement of our marketing activities. Further information on the processing of personal data by X can be found in the X Privacy Policy. Please note that X is a public platform where posts may be visible to a broad audience. We cannot assume responsibility for the visibility and use of our posts by third parties.

Last updated: 09.07.2025