Data protection notice for Falcon Complete by Crowdstrike (H_TE_DE)

August 2025

This data protection notice applies to the processing of your personal data by "Falcon Complete" software by Crowdstrike. We use the Falcon Complete software to improve IT security, both to detect suspicious actions and files on company-owned computers and to search for suspicious devices in the networks used (company network, private network in the home office or even networks of customers, partners or public networks).

1 Data Controller

The data controller is

Technoform Caprano + Brunnhofer GmbH
Friedrichsplatz 8
34117 Kassel, Germany

Phone: +49 561-9583-200
Email: info [at] technoform [dot] com (info[at]technoform[dot]com)

For any questions regarding data protection, feel free to contact us at any time using the contact details mentioned above.

2 Purpose and legal basis

We process your data on the basis of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other laws relevant to us in terms of data protection law.

The Falcon Complete software collects and logs the following data from company-owned computers (managed assets):

device name,
device information,
IP and MAC address,
file names and locations of suspicious files,
user data,
time stamps of user logins.

Device names, IP addresses and file names can be used to establish a personal reference. However, this information is only evaluated in specific cases of suspicion and to eliminate IT problems.

From devices (unmanaged assets and unsupported assets) logged in the same networks as the company's computers we may collect and log the following data:

device name,
device information,
IP and MAC address.

Device names and IP addresses could be used to establish a personal reference if necessary. However, this information is only evaluated in specific cases of suspicion and to eliminate IT problems.

We process the data on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) for the secure operation of our IT systems. Ensuring IT security is both a legal requirement and of great interest to the Technoform Group, all employees, customers and business partners.

The logged data is usually deleted after 90 days. In specific cases of suspicion, the data will be stored until the incident has been clarified.

3 Recipients of personal data

We will only pass on your data to third parties if this should become necessary for the fulfilment of the purpose. Furthermore, data may be passed on to authorities on the basis of legal provisions in accordance with Art. 6 (1) (c) and (e) GDPR .

In addition, we are supported in the operation of the product by the software provider Crowdstrike, with whom we have concluded a data processing agreement in accordance with Art. 28 GDPR. In this context, data transfers outside the EU may also occur. The level of data protection is ensured by a contract based on the standard data protection clauses in accordance with Art. 46 (2) (c) GDPR (https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en).

4 Your rights

You have the following rights vis-à-vis us in relation to personal data concerning you:

Right to information (Art. 15 GDPR).
Right to rectification (Art. 16 GDPR).
Right to erasure (Art. 17 GDPR).
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object to processing (Art. 21 GDPR).
Right to withdraw consent (Art. 7 para. 3 GDPR).
Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

5 Data protection officer

We have appointed an external data protection officer:

Stefan Pietsch

Contact data:

Pietsch IT GmbH
Wilhelmshöher Straße 1
34590 Wabern

Phone: +49 5683-923440
Email: datenschutz [at] pietsch-it [dot] de (datenschutz[at]pietsch-it[dot]de)
Internet: www.pietsch-it.de

6 Validity and modification of this data protection notice

This data protection notice is currently valid (see status in the heading). Due to the further development of our offers or due to changes in legal or official requirements, it may become necessary to change this data protection notice.