Privacy notice
Last updated: 23 October 2026
Scope and data controller
This notice covers iti24.de and the IT services offered through it. iti24.de is a service of FRILISA GmbH, Uhlandstraße 130, 10717 Berlin, Germany, represented by Larissa Fromm and Viktor Fromm. FRILISA GmbH is the data controller. For privacy enquiries, email sos@iti24.de. Telephone (please email enquiries): +49 30 69 20 44 55.
The data we process
Visiting this website involves processing technical connection data. If you contact us or engage our services, we may also process your name, contact details, correspondence, appointment details, service requirements, billing and payment information. IT work may involve device and system information, network settings, user identifiers, logs and file or screen contents needed for the agreed task. The data involved depends on your enquiry and the work you commission.
Purposes and legal bases
We use personal data to answer enquiries, plan and deliver services, document work, invoice customers and meet legal obligations. Article 6(1)(b) GDPR applies to steps requested before a contract and performance of a contract with the individual concerned. Article 6(1)(c) covers legal obligations. Article 6(1)(f) applies to legitimate interests such as secure website operation, appropriate business communication and establishing or defending legal claims, unless those interests are overridden by the rights of the individual. Where we request consent, Article 6(1)(a) applies. Consent can be withdrawn at any time for future processing.
Hosting and technical access data
The website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Technical logs may contain IP addresses, access times, requested URLs, referrers, browser and operating system details, status messages and transferred data volumes. This processing supports delivery, reliability, fault diagnosis and protection against misuse under Article 6(1)(f) GDPR. The host processes data as part of the commissioned service under a data processing agreement. Technical logs are retained only as needed for operation and investigation of faults or security incidents, subject to the configured logging and deletion rules. See ALL-INKL.COM’s privacy information.
Encryption and security
The website is intended to be served over HTTPS. We use technical and organisational measures appropriate to the risks of unauthorised access, loss or alteration. No internet transmission can be guaranteed completely secure. Please do not send passwords, recovery keys or similar secrets unsolicited by unencrypted email. We will agree a suitable way of sharing them separately.
Cookies, fonts and external content
The supplied website uses no analytics, advertising or tracking tools. It sets no cookies of its own and does not save form entries in local storage or a website database. Text uses system fonts available on your device. Photos and illustrations are served from our own webspace. There are no embedded maps, videos, social media widgets, booking systems or online payment services. Following an external link establishes a connection to that destination only when you open it.
Enquiry form, email and clipboard
The enquiry form initially processes what you type only in your browser. “Open email draft” uses a mailto link to open your email app with the recipient, subject and message. We receive the message only if you send it yourself. The form text is not sent to the website server. The optional copy button writes the text to your clipboard only after you click it, using the browser’s clipboard functionality. This website has no file upload feature. When you email us, we process your sender details, contact information, message and any attachments you choose to include to handle your enquiry. Article 6(1)(b) or (f) GDPR applies, depending on the enquiry. Delivery involves the email providers used by the parties.
IT advice, administration and remote support
Our services cover networks and file servers, Windows PCs, VPNs, backups, UniFi, firewalls, IP cameras and device setup. We access or process system and content data only as needed for the agreed task. Access to customer systems is limited to the agreed scope. Decisions on purposes, user permissions, backups and camera use remain with the responsible customer unless we are ourselves the controller. Visiting this website does not launch remote support software or additional cloud services. Before such a service is used, we will agree the scope and provider and supply the necessary privacy information.
Processing on behalf of business customers
Where IT administration, backups or remote support involve processing personal data on a business customer’s behalf, the parties’ privacy roles must be established before work begins. Where this constitutes processing on behalf of a controller, an agreement under Article 28 GDPR is required. The customer remains the controller and we act within the agreed scope on documented instructions. This privacy notice does not replace that agreement or the customer’s information obligations towards its employees, customers or other individuals.
Cameras, files and customer systems
Setting up cameras, storage and networks may reveal personal information during testing or troubleshooting. Processing is limited to what the task requires. Retaining entire customer file collections or camera recordings in our own records is not part of operating this website. Where working copies, logs or backups are required for a commissioned service, their purpose, access, return and deletion are governed by the engagement. The enquiry form does not request special categories of personal data.
Recipients and processing outside the EU
Authorised people within FRILISA GmbH may have access. Where necessary, recipients may also include hosting and communication providers, banks, tax and legal advisers and public authorities acting within their powers. Disclosure requires a lawful basis and is limited to what is necessary. Visiting the website does not embed third-country analytics, marketing or remote support services. If a separate engagement requires a service outside the European Economic Area, we will first assess the specific processing and the requirements of Articles 44 onwards GDPR, such as an adequacy decision or appropriate safeguards, and provide the necessary information.
Retention and deletion
Enquiry and correspondence data are retained as long as needed to handle the matter, perform a resulting engagement or protect legitimate interests. They are then deleted unless legal retention requirements or claims require otherwise. Quotations, invoices and business records are subject to the applicable statutory retention periods. Credentials, working copies and diagnostic records are retained only for the agreed tasks and necessary documentation; ongoing support and backup services are governed by their respective agreements. Data received as a processor is returned or deleted under the contract and the controller’s instructions.
Your rights
Subject to the GDPR’s conditions, you may request access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). You may withdraw consent at any time for future processing without affecting the lawfulness of earlier processing. To exercise your rights, email sos@iti24.de. Where we process data only on behalf of a customer, we support that customer in responding to your request.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.
Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:
- In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
- If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
- If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
- If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.
Your right to object
Where processing relies on Article 6(1)(f) GDPR, you may object under Article 21 on grounds relating to your particular situation. We will stop the relevant processing unless there are compelling legitimate grounds or it is needed to establish, exercise or defend legal claims. You can object to direct marketing at any time; your data will then no longer be used for that purpose.
Rejection of unsolicited e-mails
We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in our Site Notice to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.
Complaints
You may complain to a data protection supervisory authority, particularly where you live, work or believe an infringement occurred. The authority for FRILISA GmbH’s registered location is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany; telephone +49 30 13889-0; email mailbox@datenschutz-berlin.de. Current contact details: datenschutz-berlin.de.
Providing data and automated decisions
You do not have to submit an enquiry. However, we need the details required to respond or carry out an engagement. A website cannot be delivered without technically necessary connection data. We do not make decisions based solely on automated processing that produce legal or similarly significant effects, or carry out related profiling.
Updates
We update this notice when features, services or relevant legal and technical circumstances change. Last updated: 23 October 2026.