Cybersecurity that speaks your language.

Engineered Cybersecurity. Made in Germany.

TeutoSec is an independent cyber risk and resilience advisory for mid-sized companies. We combine technical depth with commercial acumen and turn cybersecurity into sound business decisions.


No product recommendations, no vendor lock-in. Just advice that serves your interests, and yours alone.
Privacy Policy

We're glad to explain everything.

Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

TeutoSec GmbH
Schellingstr. 109a
80798 Munich, Germany
Represented by the management: Kirsten Biefang, Sebastian Hess
Phone: +49 89 24410311
Email: info@teutosec.de

No data protection officer is legally required to be appointed.

2. General information on data processing

We generally only process our users' personal data to the extent necessary to provide a functioning website along with our content and services. Processing takes place only with the user's consent or on the basis of a legal permission.

3. Hosting

This website is operated and hosted by a service provider we've engaged, acting as our processor:

lena//media, Andy Götze
An der Backhausbreite 4
39179 Barleben, Germany

This provider in turn uses a data center operator (Host Europe GmbH, Cologne) as a subprocessor for the technical infrastructure. Processing takes place to fulfill our contractual and pre-contractual obligations to our users and in the interest of a secure and efficient provision of our online offering (Art. 6(1)(b) and (f) GDPR).

4. Server log files

When you visit this website, the infrastructure we use automatically collects information transmitted by your browser. This includes:

browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request, and the IP address.

This data is not merged with other data sources. Processing takes place under Art. 6(1)(f) GDPR. The operator has a legitimate interest in the technically error-free presentation and security of its website. Log files are deleted once they are no longer required for the purpose of their collection.

5. Contact form

You can send us a message using the contact form provided on our website. The following required fields are processed: name, email address, and your message.

Submitting the form generates an email that is sent to us via your email program. Submitted data is not separately stored in a database on the website. The data is used exclusively to process your inquiry.

The legal basis for processing is Art. 6(1)(b) GDPR, where your inquiry is aimed at concluding or performing a contract, and otherwise our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR).

Data submitted in connection with your inquiry is deleted once it is no longer required for the purpose of its collection and no statutory retention obligations apply.

6. Email communication

If you contact us by email or via the contact form, your message is processed in our email inbox. This inbox is operated by Microsoft Ireland Operations Limited (Microsoft 365 / Exchange Online). The legal basis is Art. 6(1)(b) or (f) GDPR. A data processing agreement is in place with Microsoft (Microsoft Product Terms/DPA).

7. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the browser address bar switching from "http://" to "https://" and by the lock icon in the browser bar.

8. No cookies, no tracking, no third-party content

This website does not use cookies beyond what is technically necessary. No web analytics or tracking takes place. The fonts used are served locally from our own server; no connection is made to third-party servers. No embedded third-party content (such as map services, videos, or social networks) is used.

9. Your rights as a data subject

Under the applicable legal provisions, you have the right to: information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object to processing (Art. 21 GDPR). An informal message to the contact details above is sufficient to exercise these rights.

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). The competent authority includes the one at our company's registered seat, the Bavarian State Office for Data Protection Supervision (BayLDA).

10. Current version and updates to this privacy policy

This privacy policy is currently in effect. Ongoing development of our website, or changes in legal or regulatory requirements, may make it necessary to update this privacy policy.

Ready to know your risks?

Schedule a no-obligation initial consultation: 30 minutes, free, no commitment.

30 minutes - free - no obligfation