Privacy Policy

Sadeem IT Solutions UG (haftungsbeschränkt), Hessenstraße 38, 97078 Würzburg, Germany. Represented by the managing directors Abdullah Abas and Mohamad Halloway.

Email: info@Sadeem.de, phone: +49 174 7430952. A data protection officer is not required by law and has not been appointed.

We only process personal data where this is necessary to operate this website, answer your enquiries or meet legal obligations, or where you have given consent. The legal bases are in particular Art. 6(1)(a) (consent), (b) (contract and pre-contractual steps), (c) (legal obligation) and (f) GDPR (legitimate interests).

Where we store or read information on your device, we do so with your consent under Section 25(1) TDDDG or, where this is strictly necessary for a service you have requested, under Section 25(2) no. 2 TDDDG. The legal basis that applies in each case is stated in the following sections.

This website is operated and delivered through the services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers, D1, R2, Queues, KV). Our database, media storage and queues are located in Cloudflare's EU jurisdiction. Pages are delivered through the global Cloudflare network; when you visit the website, Cloudflare processes technically necessary connection data: IP address, date and time, requested address, referrer, browser and operating system details.

The purpose is the secure and fast delivery of the website and protection against attacks. The legal basis is Art. 6(1)(f) GDPR. We have a data processing agreement with Cloudflare. Where data is transferred to the USA, Cloudflare is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition. In the production environment of this website we do not keep our own access logs containing IP addresses.

To fend off automated access, Cloudflare may set a technically necessary cookie (__cf_bm, lifetime 30 minutes). The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. Further information can be found in Cloudflare's privacy policy (cloudflare.com/privacypolicy).

We only set statistics and marketing cookies with your consent (see section 6). Technically necessary cookies from Cloudflare are described in sections 2 and 5. In your browser's local storage (localStorage) we only keep your cookie choice and your selected colour scheme. This information does not leave your device.

The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. You can delete this data at any time in your browser settings. You can change your cookie choice at any time using the "Cookie settings" link in the footer of every page.

If you write to us via the contact form or by email, we process your name, email address, your message and optional details such as phone number and company. For the form we also store the language, your browser identifier (user agent), campaign parameters if you have consented to the "Marketing" category (see section 6), and a hash of your IP address generated with a secret key (a pseudonym); the IP address itself is not stored. The hash is used to limit mass requests (Art. 6(1)(f) GDPR). The enquiry is stored in our database in the EU and delivered by email to our mailbox info@Sadeem.de.

You receive an automatic confirmation at the email address you provided. Emails are sent via Cloudflare. The purpose is to handle your enquiry; the legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR.

We process applications that you send via the contact form or by email solely to carry out the application process. This includes your contact details, cover letter, CV, certificates and any other information you provide. The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG (initiating an employment relationship).

Please only send information that is necessary for your application and refrain from sending particularly sensitive data such as health, religion or origin unless it is required for the position (Art. 9 GDPR).

If no employment relationship results, we delete your application documents six months after the end of the process. Until then we keep them to defend against possible claims, for example under the General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR). If you would like us to keep your application on file for future vacancies (talent pool), we only do so with your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. If you are hired, we transfer the documents to your personnel file.

Enquiries from the contact form are deleted automatically after 180 days unless ongoing communication or a statutory retention obligation requires otherwise.

To protect the contact form against spam and automated attacks we use Cloudflare Turnstile. Technical characteristics of your browser and your IP address are sent to Cloudflare to check whether the request comes from a human. Turnstile is only loaded on the contact page. The legal basis is Art. 6(1)(f) GDPR and, where your device is accessed, Section 25(2) no. 2 TDDDG; our legitimate interest is protection against abuse.

Cloudflare processes this data as our processor. For transfers to the USA, the information in section 2 applies.

We use Google Tag Manager and Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Both services are only loaded after you have consented to the "Statistics" category in the cookie banner. Before you choose, analytics and advertising storage are set to "denied" via Google Consent Mode.

Google Tag Manager is a tool we use to embed services such as Google Analytics on the website. It does not create user profiles itself and does not set its own cookies, but it processes your IP address when it is loaded.

With Google Analytics we evaluate how the website is used, for example pages viewed, time spent, where the visit came from (referrer), device, browser, screen resolution and approximate location. For this, Google sets the cookies _ga and _ga_<ID> with a lifetime of up to two years, which recognise your browser. Your IP address is transmitted but not stored in Google Analytics 4; it is only used to derive your approximate location. Event data is deleted in Google Analytics after 14 months at the latest. We only receive aggregated reports and do not combine them with other data about you.

We have concluded a data processing agreement with Google. Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition. Further information can be found in Google's privacy policy (policies.google.com/privacy).

Only if you consent to the "Marketing" category is advertising storage enabled in Google Consent Mode. In that case we also keep campaign parameters from the link you followed (e.g. utm_source, utm_campaign, gclid) in sessionStorage until you close the browser tab, and send them along with an enquiry via the contact form. This shows us how you found us. If you withdraw your consent, we remove this data from your browser.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with future effect using the "Cookie settings" link in the footer of every page. Withdrawal does not affect the lawfulness of processing carried out before it.

We maintain profiles on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) and Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). Our website only contains simple links to them; no plugins are embedded, and data is only transferred when you click a link.

When you visit or interact with our profiles (e.g. view, like or comment on posts, or send us messages), the respective provider also processes your data for its own purposes, such as reach measurement and advertising, partly using cookies and also in third countries such as the USA. For the statistics the platforms provide to us (page insights), we are joint controllers with the provider under Art. 26 GDPR; we only receive aggregated data and have no access to individual profiles. The legal basis for our presence is Art. 6(1)(f) GDPR (public relations and communication); for messages to us, Art. 6(1)(b) GDPR if your enquiry relates to a contract.

You can assert your data subject rights with us or directly with the provider; the provider is usually best placed to comply. Information on data processing can be found in the providers' privacy notices (linkedin.com/legal/privacy-policy, privacycenter.instagram.com).

If you contact us via WhatsApp (Meta Platforms Ireland Limited), we process your message and phone number to reply to your enquiry. Using WhatsApp is at your own initiative; please note WhatsApp's privacy notices.

Besides us, recipients of your data are Cloudflare as processor (hosting, database, email delivery, Turnstile) and, only with your consent, Google (section 6). If you visit our social media profiles or message us on WhatsApp, the respective provider processes your data (section 7).

We only use processors on the basis of a data processing agreement under Art. 28 GDPR. Beyond that, we only pass on data where we are legally obliged to do so (e.g. to tax authorities), where it is necessary to perform a contract or where you have consented.

We store personal data only as long as necessary for the respective purpose or as required by statutory retention periods. In detail: enquiries via the contact form 180 days, application documents six months after the end of the process, cookie choice and colour scheme in your browser until you delete them, campaign parameters until you close the browser tab, Google Analytics cookies up to two years and event data in Google Analytics no longer than 14 months, the Cloudflare cookie __cf_bm 30 minutes.

We keep business letters and emails relating to contracts in accordance with commercial and tax law (e.g. six years for business letters, eight years for accounting records). We delete other emails once the purpose no longer applies. The data is then deleted.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with future effect (Art. 7(3)).

For your right to object under Art. 21 GDPR, see section 11. An informal message to info@Sadeem.de is sufficient for all requests.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany. This right is without prejudice to any other administrative or judicial remedy.

Where we process your data on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. After an objection we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (Art. 21(1) GDPR).

Where your data is processed for direct marketing purposes, you may object to this at any time; this also applies to related profiling. After an objection your data will no longer be used for direct marketing (Art. 21(2) GDPR).

No particular form is required for the objection, for example an email to info@Sadeem.de.

Providing your data is voluntary. Without the mandatory fields in the contact form, however, we cannot handle your enquiry. There is no automated decision-making, including profiling.

Please note: emails on their way to us are usually encrypted in transit but not end-to-end encrypted. Where possible, please do not send us particularly confidential information by unencrypted email.

This website is transmitted using TLS encryption. We update this privacy policy when the website or the legal situation changes.