Data protection information

(Last update: 03/03/2025)

COMAN Software GmbH (hereinafter: "we", "us") is pleased that you are visiting our website www.coman-software.com (hereinafter: "website").
Our policy is to collect only what we need and to process this information solely to provide you with the service you expect.

1. Controller

The controller responsible for the processing of personal data on our website within the meaning of the General Data Protection Regulation (hereinafter: "GDPR") is

COMAN Software GmbH
Lüderitzer Straße 3-5
39576 Stendal
E-mail: info@coman-software.de
Phone: +49 3931 68626-0
Fax: +49 3931 68626-10

2. Data Protection Officer

Our appointed data protection officer is:

Kertos
Briennerstrasse 41
80333 Munich
Germany
E-Mail: dsb@kertos.io

3. What is personal data?

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address or IP address. Information for which we cannot (or only with disproportionate effort) establish a reference to your person, e.g. by anonymising the information, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis such as your consent.

4. Data processing on our website

Provision and use of the website

Scope and purpose of data processing

We collect and use our users' personal data only to the extent that this is technically necessary to provide a functional website and our content and services or information.

When you access and use our website, we collect personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access is made (referrer URL),
• the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring the convenient use of our website
• For IT       purposes

Legal basis

Art. 6 para. 1 lit. f GDPR serves as the legal basis. The processing of the aforementioned data is necessary for the provision of a website and to enable secure and convenient use and thus serves to safeguard a legitimate interest of our company.

Storage period and data erasure

As soon as the aforementioned data is no longer required to display the website, it is deleted (after 30 days at the latest). The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user therefore has no option to object. Further storage takes place in individual cases if this is required by law.

Third parties

Host

The technical infrastructure for this website is provided by cloud servers of HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA (hereinafter: "HubSpot").  

The following personal data is processed through the use of HubSpot:

• Your IP address
• Date and time of the enquiry
• Domain of the website
• the type of browser used

Data processing is necessary to provide you with the website you have accessed. The legal basis is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest lies in the provision of the technical infrastructure, as it would otherwise not be possible to operate the website.

The service provider is based in the EU and complies with the requirements of the GDPR. In addition, a server location in Germany was chosen. Nevertheless, it cannot be ruled out that data may also be transferred to the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. "HubSpot" is certified within this framework, which is why such transfers are based on the legal basis under Article 45 GDPR. Further information on data protection at Microsoft Azure can be found at: https://azure.microsoft.com/de-de/explore/trusted-cloud/privacy.

Consent management

We use the Cookiebot service by Usercentrics  to manage consents for the use of cookies. Cookiebot helps us to store and enforce your preferences regarding the use of cookies on our portal. Your consent data is transmitted to Usercentrics A/S, the operator of Cookiebot. The service provider is based in the EU and complies with the requirements of the GDPR. Further information on data protection at Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/. 

Data processing is necessary to provide you with the legally required consent management and to fulfil our documentation obligations. The legal basis is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR, justified by our interest in fulfilling the legal requirements for consent management.

5. International data transfer

We process your data mainly within the European Union (EU) and the European Economic Area (EEA). However, some of our service providers may be located outside the EEA in so-called "third countries". The General Data Protection Regulation sets high requirements for the transfer of personal data to third countries. All our data recipients must fulfil these requirements. Before we transfer your data to a service provider in a third country, each service provider is first checked for its level of data protection. A service provider is only selected if it can demonstrate an adequate level of data protection outside the EEA. Regardless of whether our service providers are based within the EEA or in third countries, each service provider must conclude a contract with us for order processing. Additional requirements must be met for service providers outside the EEA. In accordance with Art. 44 ff. GDPR, personal data may be transferred to service providers who fulfil at least one of the following requirements

- The European Commission has decided that the third country guarantees an adequate level of protection (e.g. USA and UK).

- Standard contractual clauses have been included in our contract with the data recipient (including any additional measures if required).

- Further appropriate safeguards pursuant to Art. 46 GDPR provided (e.g. Binding Corporate Rules).

- In special exceptional cases pursuant to Art. 49 GDPR

6. Recipients of personal data

Within our company, only those persons have access to your personal data who need it for the purposes stated in each case. Your personal data will only be passed on to external recipients if we are legally authorised to do so or if you have given your consent. Below you will find an overview of the respective recipients 

• Processors: Group companies or external service providers, e.g. in the areas of technical infrastructure and processing, maintenance and payment processing, which are carefully selected and monitored. The processors may only use the data in accordance with our instructions.
• Public authorities: Authorities and state institutions, such as tax authorities, public prosecutors or courts, to which we (must) transfer personal data, e.g. to fulfil legal obligations or to protect legitimate interests

7. Content Delivery Network

Cloudflare

To speed up the loading time of our website and to protect against distributed denial of service attacks (an attack on our system through a large number of requests), we use the content delivery network "CloudFlare", which is provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107 (hereinafter: "Cloudflare").   

By using Cloudflare, the following personal data is processed:   

• the website accessed  
• the type of browser used  
• the operating system  
• the referrer URL  
• the IP address   
• of the requesting provider  

Your personal data will only be processed with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of processing that was carried out before the withdrawal.   

The information is usually forwarded to a Cloudflare server in the USA and stored there. For data transfers to the USA, there is an adequacy decision of the EU Commission, the EU-U.S. Data Privacy Framework. "Cloudflare" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.   

You can find more information on data protection at "Cloudflare" at: https://www.cloudflare.com/privacypolicy/  

 Gstatic

In addition to Cloudflare, we use the content delivery network "CloudFlare" for the same purposes, which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google").

 By using Gstatic, the following personal data is processed:

• the website accessed
• the type of browser used
• the operating system
• the referrer URL
• the IP address
• of the requesting provider

Your personal data will only be processed with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of processing that was carried out before the withdrawal.

The information is usually forwarded to a Google server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

You can find more information on data protection at Google at: https://policies.google.com/privacy.

8. Fonts

Among other things, we use "Google Fonts", which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"), to display the content of our website.  

In order to integrate Google Fonts, the fonts (typefaces) are loaded from a Google server. The following data is usually transmitted in the process:  

• IP address  
• Referrer URL
• Operating system
• Browser type
• Screen resolution
• Language setting of the browser

Your data is usually transferred to a Google server in the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis under Article 45 GDPR. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics may also collect other personal data in addition to the IP address. We would like to point out that Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.  

As a rule, you can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.  

This does not affect the lawfulness of the previous processing.   

You can find more information on data protection at Google at: https://policies.Google, LLC /privacy.

9. ReCaptcha

We use the "reCAPTCHA" service on our website, which is provided by Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). When using the service, the following data is transmitted to Google

     -IP address

     -Referrer URL

     -Operating system

     -Mouse movements/keyboard strokes

     -Dwell time

     -Device settings (e.g. language settings or location)

The purpose of "reCAPTCHA" is to recognise whether the user is an automated user or a real person when contacting us via our contact form. The service thus protects against website downtime due to a high number of automated enquiries. The information is usually forwarded to a Google server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR. Due to the protection of the website and the associated safeguarding of the provision of the website, we have a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on data protection at Google at: https://policies.google.com/privacy.

10. Cloud services

We use so-called "cloud providers" to provide the technical infrastructure and various applications.

 You have the option of booking a demo of our platform on our website. For this purpose, we provide you with the "Book a Demo" and "Book a Meeting" functions and our contact form. To make this possible, we use the "HubSpot" service provided by HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA (hereinafter: "HubSpot").  

The following personal data is processed through the use of HubSpot:

• Your name
• Your e-mail address
• Your company name

HubSpot is used for quick and easy communication in order to be able to offer you a free trial period. This allows you to quickly see when we have an available date and select it.

The processing of your personal data takes place for the implementation of a pre-contractual measure in that you request a trial period for our product  by using the functions mentioned. The lawfulness of the processing of your data is therefore in accordance with Art. 6 para. 1 lit. b GDPR. You are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of processing carried out before the withdrawal.  

We only store the data for as long as is absolutely necessary. Further storage may take place in individual cases if this is required by law or necessary for the fulfilment of the contract.  

The information is usually forwarded to a HubSpot server in the USA and stored there. For data transfers to the USA, there is an adequacy decision of the EU Commission, the EU-U.S. Data Privacy Framework. "HubSpot" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.  

You can find more information on data protection at "HubSpot" at: https://legal.hubspot.com/de/privacy-policy

11. Tracking

Scope and purpose of data processing

Various tracking technologies are used on our website. These include the setting of cookies, the creation of a recognisable value by combining various device and browser information (device fingerprinting) or the use of so-called "universal IDs". In the following, the generic term "cookies" is used for all tracking technologies.

Cookies are data records that are stored on your computer when you visit our website and that enable your browser to be reallocated. Cookies store information such as your language settings for the duration of your visit to our website or the entries you make there.

There are different types of cookies. Session cookies are temporary cookies that are stored in the user's internet browser until the browser window is closed and the session cookies are deleted. Permanent or persistent cookies are used for repeat visits and are stored in the user's browser for a predefined period of time. First-party cookies are set by the website that the user visits. Only this website is authorised to read information from the cookies. Third-party cookies are set by organisations that do not operate the website that the user is visiting.

A distinction can also be made between technically necessary, functional and advertising cookies. The former are necessary to ensure basic website functions (e.g. saving the language setting). Functional cookies collect information about the user's behaviour and whether they receive error messages. Advertising cookies, on the other hand, are used to offer the user customised advertising.

Legal basis

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR due to the purposes of use described, as we have an interest in the user-friendly presentation of our website. If you have given us your consent to the use of functional and advertising cookies on the basis of a notice ("cookie banner") provided by us on the website, the legality of the use is also based on Art. 6 para. 1 sentence 1 lit. a GDPR.

Storage period and data erasure

As soon as the data transmitted to us via the cookies is no longer required to fulfil the purposes described above, this information is deleted. Further storage takes place in individual cases if this is required by law.

Configuration of the browser settings

Most browsers are set to accept cookies by default. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if you deactivate cookies via your browser settings on our website. You can also use your browser settings to delete cookies already stored in your browser or to display the storage period. It is also possible to set your browser to notify you before cookies are stored. As the various browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options.

Cookielist

12. Analytics

We use tracking and analytics tools to ensure the continuous optimisation and needs-based design of our website. With the help of tracking measures, we are also able to statistically record the use of our website by visitors and to further develop our online offer for you with the help of the knowledge gained. If you have given us your consent to the use of cookies by means of a notice ("cookie banner") provided by us on the website, the legality of the use is also based on Art. 6 para. 1 sentence 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the processed data.

Facebook Pixel

This website uses the so-called Facebook pixel, an analysis tool of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: "Meta"). This tool helps to measure the effectiveness of adverts on Facebook (conversion tracking) and to display targeted adverts to interested users.

When you visit our website, a direct connection to the Meta servers is established via the Facebook pixel. This allows Meta to recognise that you have visited our website and link this behaviour to your Facebook profile, if you have one. The Facebook pixel records your IP address, browser information, pages visited and other device-related data. This information can be used by Meta for its own advertising purposes. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Meta is certified within this framework, which is why such transfers are based on the legal basis of Article 45 GDPR. In addition to this, so-called standard contractual clauses (SCC) have been concluded with Meta. When using the Facebook pixel, it cannot be ruled out that other personal data will also be collected. We would like to point out that Meta may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

You can revoke your consent to processing and transfer to third countries at any time in the "cookiebot" consent tool. This does not affect the lawfulness of the previous processing.  

For more information on how Meta processes your data, please refer to Meta's privacy policy: https://www.facebook.com/about/privacy.

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). Google Analytics uses "cookies" and similar tracking methods such as device fingerprinting.  

The information stored in these cookies, e.g. about the time, place and frequency of your use of our website, is generally forwarded to a Google server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis of Article 45 GDPR. In addition to this, so-called standard contractual clauses (SCC) have been concluded with "Google". When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics may also collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.  

Google will use the information generated by the cookie on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.  

As a rule, you can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.  

You can revoke your consent to processing and transfer to third countries at any time in the "cookiebot" consent tool. This does not affect the lawfulness of the previous processing.   

You can find more information on data protection at Google at: https://policies.Google, LLC /privacy.

Google Tag Manager

This website uses Google Tag Manager, which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). Google Tag Manager enables the management of website tags. When you visit the website, an HTTP request is sent to Google. This transmits device information (such as your IP address) to Google and within a Google server in the USA. There is an adequacy decision of the EU Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.  

When using the Google Tag Manager, it cannot be ruled out that the data collected by Google may also collect other personal data. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. 

Processing will only take place after you have given your express consent. You can revoke your consent to processing and transfer to third countries at any time in the "cookiebot" consent tool. This does not affect the legality of the previous processing.  

You can find more information on data protection at Google at: https://policies.Google, LLC /privacy.

DoubleClick

To plan, execute and manage advertising campaigns, we use "DoubleClick", which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). DoubleClick uses cookies and similar tracking technologies.

When using DoubleClick, the following personal data is transmitted to Google:

• Number of page views,
• Behaviour on other sites,
• the IP address
• Previously visited pages
• Keywords used in the search

Your data is usually transferred to a Google server in the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis under Article 45 GDPR. When using DoubleClick, it cannot be ruled out that the cookies set by DoubleClick may also collect other personal data in addition to the data listed. We would like to point out that Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

Processing will only take place after you have given your express consent. You can revoke your consent to processing and transfer to third countries at any time in the "cookiebot" consent tool. This does not affect the legality of the previous processing.  

You can find more information on data protection at Google at: https://policies.google.com/privacy.

HubSpot Analytics

We use the "HubSpot" service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA (hereinafter: "HubSpot").   

The following personal data is processed through the use of HubSpot:  

• A unique user ID in the form of a user token  
• Domain of the website  
• Date and time of the visit to our website  
• Number of sessions  

The unique user ID is stored in the "hubspotutk" cookie, while the other data is stored in the "__hssc" and "__hstc" cookies. Further information on cookie content at HubSpot can be found at: https://knowledge.hubspot.com/de/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser.  

The use of "HubSpot" enables us to monitor the website and thus supports us in improving its functionality. The data is used to support and improve our digital marketing.  

Your personal data will only be processed with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of processing that was carried out before the withdrawal.   

The information is usually forwarded to a HubSpot server in the USA and stored there. For data transfers to the USA, there is an adequacy decision of the EU Commission, the EU-U.S. Data Privacy Framework. "HubSpot" is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.   

You can find more information on data protection at "HubSpot" at: https://legal.hubspot.com/de/privacy-policy  

LinkedIn Conversion

This website uses conversion tracking provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA (hereinafter: "LinkedIn"). LinkedIn uses "cookies" and similar tracking methods such as device fingerprinting.   

The information stored in these cookies, e.g. about the time, place and frequency of your use of our website, is usually forwarded to a LinkedIn server in the USA and stored there. For data transfers to the USA, there is an adequacy decision of the EU Commission, the EU-U.S. Data Privacy Framework. "LinkedIn" is certified within this framework, which is why such transfers are based on the legal basis of Article 45 GDPR. In addition, standard contractual clauses (SCC) have been concluded with LinkedIn.  

When using LinkedIn, it cannot be ruled out that the cookies set by LinkedIn may also collect other personal data in addition to the IP address. We would like to point out that LinkedIn may transfer this information to third parties if this is required by law or if third parties process this data on behalf of LinkedIn.   

LinkedIn will use the information generated by the cookie on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.  

As a rule, you can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.   

The processing is based on your consent. You can revoke your consent to processing at any time. However, this does not affect the legality of previous processing.  

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy

13. Social networks

On our website you will find various links to our presence on social networks.

Facebook

Our website also contains a link to our company page on the social network "Facebook", which is provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: "Meta").  

Before you click on the link, no data is transmitted directly to Meta Platforms Ireland Limited. Only when you click on the button will data be transmitted. By doing so, you leave our website and establish a direct connection between your browser and Meta's servers. Information on the data that is subsequently collected by Facebook can be found at: https://www.facebook.com/about/privacy.

LinkedIn

A link to our company page on the social network "LinkedIn" of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is therefore integrated on our website. Based on the data transmitted to the respective service via the social plugin, the service may be able to assign you to your account with it.

Before you click on the link, no data is transmitted directly to LinkedIn. Only when you click on the button will data be transmitted. By doing so, you leave our website and establish a direct connection between your browser and the LinkedIn servers. Information on the data that is subsequently collected by LinkedIn can be found at: https://de.linkedin.com/legal/privacy-policy

XING

Our website also contains a link to our company page on the "Xing" platform, which is provided by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Before you click on the link, no data is transmitted directly to Xing. Only when you click on the button will data be transmitted. By doing so, you leave our website and establish a direct connection between your browser and the Xing servers. Information on the data that is subsequently collected by Xing can be found at: https://privacy.xing.com/de/datenschutzerklaerung.

YouTube

Our website also contains a link to our company page on the video platform "YouTube", which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.  

No data is transmitted directly to Google before you click on the link. Only when you click on the button will data be transmitted. By doing so, you leave our website and establish a direct connection between your browser and Google's servers. Information on the data that is subsequently collected by Google can be found at: https://policies.Google, LLC /privacy

14. Data security and security measures

We undertake to treat your personal data confidentially. In order to prevent manipulation, loss or misuse of your data stored by us, we take extensive technical and organisational security precautions, which are regularly reviewed and adapted to technical progress.

However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data - e.g. when transmitted by e-mail - can be viewed by third parties. We have no technical influence over this. It is your responsibility as a user to protect the data you provide against misuse by encryption or other means.

15. Storage of the data

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or fulfilment of a contract.

16. Rights of the data subject

With regard to your personal data, you have the following legal rights vis-à-vis us:

Right of access

You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g. about the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.

Right to rectification

You have the right to request the rectification of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

Right to erasure ("right to be forgotten")

You have the right to request erasure if the processing is not necessary. This is the case, for example, if your data is no longer required for the original purposes, if you have revoked your declaration of consent under data protection law or if the data has been processed unlawfully.

Right to restriction of prcoessing

You have the right to restrict processing, e.g. if you believe that the personal data is incorrect.

Right to data portability

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

Right to object to processings

You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you. In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, which includes profiling to the extent that it is related to such direct marketing.

Right to withdraw your consent under data protection law

You can revoke your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the legality of the processing carried out up to the time of revocation.

Notwithstanding these rights, you have the right to lodge a complaint with a supervisory authority at any time if you believe that the processing of your personal data violates data protection regulations.

Change history