Privacy statement

The following information is to be provided pursuant to Art. 13 et sqq GDPR where personal data are collected from the data subject.

Identity and contact details of the controller

Compliance Essentials GmbH
Lochhamer Str. 31
82152 München-Planegg
Germany

Phone+49 (0) 89 / 1 25 01 56 30

(hereinafter "Compliance Essentials", "we, "us")

Purposes and legal basis for processing personal data

We process personal data for the purpose of establishing and fulfilling the user contract for registered users of the platform and for processing support requests. Personal data is processed regularly on the basis of Art. 6 para. 1 lit. f GDPR. A balancing of interests was carried out and came to the conclusion that the interests of the data subjects, among other things due to the technical and organisational measures taken, do not outweigh the interests of the contracting parties in the fulfilment of the usage contract. By way of derogation from the above, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, if the contractual partner is a natural person and has personal data relating to him/her processed. When registering on the platform, the following data is collected:

Title
Salutation
Last name
First name
Email address
Organisational address
Billing address
Usage preferences such as language
Cryptographic hash (encrypted value) of a password

If you add one of our products from our shop to your shopping cart, a technically required cookie will be set in your web browser.

If you request support in using the platform, your details will be processed for the purpose of handling your enquiry and in the event that follow-up questions arise.

If payment against invoice is offered, we will carry out a credit check in individual cases. As a result, company data, including the company name, which may contain personal data, is transferred to the credit reference agency. The collection, storage and sharing are carried out for the purpose of a credit check to avoid payment defaults and on the basis of Art. 6 (1) (f) GDPR. On the basis of this information, a statistical probability of a credit default and thus your solvency is calculated.

As a registered user of the platform, a limited amount of data (so-called connection data) is collected for technical reasons each time you access the platform when and after you log in. This data is technically necessary to establish a connection between your end device and our servers and to provide the services we offer. Furthermore, this data is necessary to maintain the session after a login and to prevent unauthorised access to this session. The processing is carried out on the basis of Art. 6 (1) (f) GDPR. The following data or categories of data may be collected:

IP address
Date and time of access
Browser type and version
Used operating system
Referrer URL (the previously visited page)
Name of the accessed website

After registering on the platform, a cookie is set that is required to maintain the session and to protect the session. To use the platform, you must allow this cookie in your web browser.

Furthermore, we process personal data of visitors to the platform in order to improve its quality and content. The analysis of the use is carried out with the help of the tool Matomo, which we host ourselves. Your IP address is only processed in abbreviated form for this purpose and is therefore anonymised. It is not possible to draw any conclusions about a specific person. Personal data is processed regularly on the basis of Art. 6 (1) (f) GDPR. A balancing of interests was carried out and came to the conclusion that the interests of the data subjects, among other things due to the technical and organisational measures taken, do not outweigh the interest in improving the quality and content of the platform. If you do not want the data to be processed for analysis purposes, you can object to this or withdraw your objection at any time by clicking on the following button:

In this case, an opt-out cookie will be set in your browser to prevent the collection of usage data. Please note that the setting only applies within your browser and only works if cookies are allowed to be set. If you use a different browser, an opt-out cookie must also be set here to prevent the collection of usage data. If all cookies are deleted in the browser, the opt-out cookie must also be reset in this case.

Automated individual decision-making, including profiling

Your personal data will not be used for automated individual decision-making, including profiling, within the meaning of Art. 22 (1) GDPR and Art. 4 GDPR

Categories of recipients of personal data

Personal data may be transmitted to the following categories of recipients:

Public authorities, due to legal regulations.
Affiliated companies, for the purpose of fulfilling the contract or providing the offers.
Processors within the meaning of Art. 28 GDPR in the course of order processing.
Other third parties in the course of the transfer of functions.

Transfer to third countries

No personal data is transferred to countries outside the European Union or the European Economic Area. The data is processed exclusively on servers located in Germany.

Security

Compliance Essentials takes the legally required technical and organisational measures to protect personal data from loss, destruction, manipulation and unauthorised access.

Data retention period

Personal data will only be stored for as long as is necessary to fulfil the purposes stated here and to exercise, establish and defend legal claims, or as required by the retention periods specified by law. The legal storage obligations arise primarily from commercial and tax law (in particular §§ 147 of the German Tax Code and 257 of the German Commercial Code). After the respective purpose and legal claim no longer applies or after the retention periods have expired, the data will be deleted in accordance with the statutory provisions.

Rights of the data subject

You have the option to exercise your "rights as a data subject" at any time.:

Right of access in pursuance of Art. 15 GDPR.
Right to rectification in pursuance of Art. 16 GDPR.
Right to erasure in pursuance of Art. 17 GDPR.
Right to restriction of processing in pursuance of Art. 18 GDPR.
Right to data portability in pursuance of Art. 20 GDPR.
Right to object in pursuance of Art. 21 GDPR.

If you wish to exercise your rights, please send your request by email or letter to the contact details given above.

Right to lodge a complaint with a supervisory authority

Furthermore, you have the right to lodge a complaint with a supervisory authority at any time in accordance with Art. 77 (1) GDPR. The Bavarian Data Protection Authority, P.O. Box 606, 91511 Ansbach, Germany, is generally responsible for us. Alternatively, you can approach the local supervisory authority responsible for you.