Privacy policy

The following data protection information informs you about the nature and extent of our processing of so-called personal data in accordance with the information requirements of Article 13 of the EU General Data Protection Regulation (hereinafter "GDPR"). Personal data is information that can be directly or indirectly attributed to you or can be attributed to you. If you have any questions or comments about this data protection information, you can send them at any time to the e-mail address given in section 2. We have also taken appropriate technical and organi­zational security measures in accordance with the DSGVO to protect your personal data against loss, destruction, manipulation and unauthorized access.

1 Person responsible according to Art. 4 para. 7 DSGVO

Responsible for the processing within the framework of this website is

IT-Kompass GmbH
Tobelstr. 2
73079 Süßen
Deutschland
Phone: +49 (0) 7162 14505-80
E-mail: info@it-kompass.com

2 Data protection officer of the responsible party

You can reach our data protection officer at datenschutz@it-kompass.com

3 Rights of the data subject

In the following, we will inform you about your data subject rights.

4 Data deletion and storage period

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the processing ceases to apply.

We may also store data if we are required to do so by law.

Data will also be blocked or deleted if a storage period prescribed by the afore­mentioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

5 External Hosting & CDN

This website is hosted on servers in Germany. These are provided by the technology service provider, Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands.

A third country transfer of your data cannot be excluded, as Zoho is present in several third countries.

Please note the risks associated with transferring your data to the U.S. as described in section 9.

This processing is carried out pursuant to Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in a secure and efficient provision and improvement of the stability and functio­nality of our website. We have concluded an agreement with this service provider for order processing in accordance with Art. 28 DSGVO.

More information about the data that is stored when you visit our website can be found in the next section.

6 Server log files

In the case of simple infor­mational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. The following data is collected in any case when you visit our website:

We temporarily store this data, which is technically necessary for us, such as your IP address, in order to display our website to you and to ensure stability and security. The legal basis for this is our legitimate interest according to Art. 6 para. 1 lit. f DSGVO.

7 Other forms of use of our website
7.1 Contact form / Inquiry form

Our website includes a contact form that you can use to get in touch with us. When using the contact form, the data entered in the input mask is transmitted to us and stored. In addition, your IP address and the date and time of the request are stored.

In addition, it is possible to contact us via e-mail addresses provided by us. In this case, your personal data transmitted with the e-mail will be stored and processed by us in order to process your inquiry or the reason for your contacting us. The data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

The legal basis for the processing of your data in the context of your contact request is your consent pursuant to Art. 6 para. lit. a DSGVO.

7.2 Newsletter

When sending our electronic newsletter, to which you can subscribe, we process the following personal data: E-mail address, first name, last name. Mandatory fields are marked with *.

For the dispatch of the electronic newsletter the speci­fication of the e-mail address is mandatory. The processing of your further data serves the persona­lization of these contacts as well as the speciali­zation of the offers and information and is voluntary.

We process your e-mail address in order to contact you for the purpose of sending you our electronic newsletter, to inform you about current events as well as current developments, if applicable, and to maintain our contractual relationship with you. In addition, we use this data for advertising messages by e-mail and, if we have received your e-mail address in connection with our products and services, for advertising measures about our own similar products and services.

7.2.1 Tracking

By subscribing to the newsletter, the user consents to tracking for statistical purposes. A tracking pixel is used.

We use the solution of the provider Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands for newsletter tracking.

A third country transfer of your data cannot be excluded, as Zoho is represented in the USA, among other countries.

Please note the risks associated with transferring your data to the U.S. as described in section 9.

When delivering the newsletter, the external server can then record certain data of the recipient, for example the time of the retrieval, the IP address or information on the e-mail program used (client). The name of the image file is indivi­dualized for each e-mail recipient by appending a unique ID and can thus determine which newsletter recipient has just opened the e-mail when the image is retrieved.

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to the interests of the recipients. The data will not be passed on to third parties.

The user can prevent tracking by setting his e-mail program so that it does not load images in an e-mail. We accept an unsub­scription from the newsletter as a revocation of this consent.

7.2.2 Legal basis

For sending our newsletter as well as the associated tracking to you, we will generally obtain your express declaration of consent. For this purpose, we use the so-called double opt-in procedure. After your registration for the newsletter, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 48 hours, your information will be blocked and automa­tically deleted after one month. In addition, we store your IP addresses used and times of registration and confirmation. The purpose of this procedure is to prove your registration and to be able to clarify a possible misuse of your personal data.

Insofar as we do not already process your data on the basis of your explicit consent only in exceptional cases, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party and to the extent that this does not override your interests or fundamental rights and freedoms which require the protection of personal data (Art. 6 para. 1 lit. f DSGVO).

You can revoke your consent at any time by clicking on the link provided in each newsletter email or by contacting us.

8 Cookies use

Cookies are small files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective.

The storage of technically unnecessary cookies or the use of comparable technical functions is based on the legal basis of consent pursuant to Section 25 (1) TTDSG.

The possible further processing of your data with the help of a cookie is also based on your consent according to Art. 6 para. 1 lit. a DSGVO.

The storage of technically necessary cookies takes place according to § 25 para. 2 p. 2 TTDSG.

Detailed information about the cookies we use can be found in our cookie banner.

9 Data transfer to the USA

There is no adequate level of data protection for the transfer of personal data to the USA based on a decision by the European Commission. Due to the powers of the US intelligence services and the legal situation in the USA, the requirements of the GDPR cannot be met:

As a result, there are no effective remedies or independent data protection review authority available for access to your personal data by U.S. authorities.

If your personal data is transferred to the USA, the loss of your own data sovereignty cannot be ruled out. As a result, the rights and freedoms of data subjects may be inadequately protected.

10 Web Analytics & Third Party Services
10.1 Local web analytics

Insofar as locally deployed web analytics tools are used, the legal basis is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. Our interest is to analyze the use of our website by our website visitors in order to improve our offer and make it more interesting for you as a user through the statistics obtained. The legal basis for the use of third-party providers to perform web analytics is based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO.

10.2 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC ("Google") in Europe represented by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. In this regard, we have concluded an order processing agreement in accordance with Art. 28 DSGVO.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Please note the risks associated with transferring your data to the U.S. as described in section 9.

IP addresses are shortened or masked as soon as the data is received by Google Analytics and before it is stored or processed. The data is deleted after 14 months.

We use Google Analytics only after your consent according to Art. 6 para. 1 lit. a DSGVO, § 25 para. 1 TTDSG and Art. 49 para. 1 lit. a DSGVO. You can revoke this at any time with effect for the future in the cookie banner.

10.3 Microsoft Clarity

We use the web analytics service Microsoft Clarity on our website for marketing purposes. With Microsoft Clarity, we analyze the use of our website based on a pseudonymous user ID. In particular, we process pseudo­nymized usage data (e.g. clicks, access times, pages visited), movement data (e.g. scrolling movements, mouse movements), location data and metadata (e.g. IP address, device information).

We only use Microsoft Clarity with your consent pursuant to Art. 6 (1) lit. a DSGVO.

For more information about Microsoft's privacy practices, please see Microsoft's Privacy Policy.

Recipient of the data: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland.

Please note the risks associated with transferring your data to the U.S. as described in section 9.

10.4 YouTube

We use YouTube, a service of Google LLC in Europe represented by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, to show you video content. To protect your privacy, we have activated the extended data protection mode. YouTube also uses cookies to collect information about visitors to its website. YouTube uses these, among other things, to collect video statistics, to prevent fraud and to improve the user experience. In the process, calling up a video usually also leads to a connection being established with the Google Ads network. When you start the video, this could trigger further data processing operations, especially if you are already logged into YouTube. We have no influence on this.

Please note the risks associated with transferring your data to the U.S. as described in section 9.

We use YouTube only after your consent according to Art. 6 para. 1 lit. a and Art. 49 para. 1 lit. a DSGVO. You can revoke this at any time with effect for the future in the cookie banner.

For more information about privacy at YouTube, please see their privacy policy.

10.5 Piwik Pro

We use the website analysis software Piwik Pro from Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin (Piwik) to optimize and stati­stically evaluate visitor access to our website. We have concluded an order processing contract with Piwik in accordance with Art. 28 DSGVO.

This uses cookies that allow us to analyze the use of our website. We ensure that the calling IP address is anonymized immediately after its influence into a hash value and even before storage, so that no inference to you is possible.

We use Piwik Pro only after your consent according to Art. 6 para. 1 lit. a DSGVO, § 25 para. 1 TTDSG and Art. 49 para. 1 lit. a DSGVO. You can revoke this at any time with effect for the future in the cookie banner.

10.6 Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States.

The use of the Google Tag Manager is based on your consent according to Art. 6 para. 1 lit. a and Art. 49 para. 1 lit. a DSGVO. You can revoke this at any time with effect for the future in the cookie banner.

For more information about Google's privacy practices, please visit: https://policies.google.com/privacy.

The recipient of the data is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Please note the risks associated with transferring your data to the U.S. as described in section 9.

10.7 DoubleClick by Google

DoubleClick by Google uses cookies to present you with ads that are relevant to you. In the process, a pseudonymous identi­fication number is assigned to your browser in order to check which ads were displayed in your browser and which ads were called up. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the Internet. The information generated by the cookies is transmitted and stored by Google for analysis. A transfer of data by Google to third parties only takes place due to legal regulations or in the context of order processing. Google will not merge your data with other data collected by Google.

We use this service only after your consent according to Art. 6 para. 1 lit. a DSGVO, § 25 para. 1 TTDSG and Art. 49 para. 1 lit. a DSGVO. You can revoke this at any time with effect for the future in the cookie banner.

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

In the case of access to the data from the USA (e.g. support): Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Please note the risks associated with transferring your data to the U.S. as described in section 9.

Revised: 07.03.2023