Privacy
- a) Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. - b) Data subject
Data subject means any identified or identifiable natural person whose personal data is processed by the controller. - c) Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. - d) Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future. - e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. - f) Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person. - g) Controller
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. - h) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. - i) Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients. - j) Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data. - k) Consent
Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions related to data protection is:
Commax Consulting GmbH & Co. KG
Südliche Münchner Straße 10a
82031 Grünwald
Germany
Tel: +49-89-360384-0
Email: info@commax.de
Website: commax.de
The Data Protection Officer of the controller is:
Johanna Huß
Commax Consulting GmbH & Co. KG
Südliche Münchner Straße 10a
82031 Grünwald
Germany
Tel: +49-89-360384-43
Email: datenschutz@commax.de
Website: commax.de
Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.
Due to legal regulations, the website of Commax Consulting GmbH & Co. KG contains information that enables quick electronic contact with our company and direct communication with us, which also includes a general address for so-called electronic mail (email address). If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject will be automatically stored. Such personal data transmitted voluntarily by a data subject to the controller are stored for the purpose of processing or contacting the data subject. This personal data is not transferred to third parties. The data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 lit. a GDPR, based on your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your inquiry has been processed.
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
- to demand the immediate rectification of inaccurate personal data stored by us or the completion of incomplete personal data in accordance with Art. 16 GDPR;
- to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
- to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful, but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing in accordance with Art. 21 GDPR;
- to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or to request its transmission to another controller, in accordance with Art. 20 GDPR;
- to withdraw your consent given to us at any time in accordance with Art. 7 para. 3 GDPR. This means that we may no longer continue the data processing that was based on this consent in the future and
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
The data controller has integrated Google AdSense on this website. Google AdSense is an online service that enables the mediation of advertising on third-party sites. Google AdSense is based on an algorithm that selects advertisements displayed on third-party sites to match the content of the respective third-party site. Google AdSense allows for interest-based targeting of internet users, which is implemented by generating individual user profiles. The operating company of the Google AdSense component is Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of the Google AdSense component is the integration of advertisements on our website. Google AdSense places a cookie on the data subject’s IT system. What cookies are has already been explained above. By setting the cookie, Alphabet Inc. is enabled to analyze the use of our website. With each access to one of the individual pages of this website, which is operated by the data controller and on which a Google AdSense component has been integrated, the internet browser on the data subject’s IT system is automatically prompted by the respective Google AdSense component to transmit data to Alphabet Inc. for the purpose of online advertising and commission billing. As part of this technical process, Alphabet Inc. obtains knowledge of personal data, such as the data subject’s IP address, which Alphabet Inc. uses, among other things, to track the origin of visitors and clicks and subsequently enable commission billing. The data subject can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Alphabet Inc. from setting a cookie on the data subject’s IT system. Furthermore, a cookie already set by Alphabet Inc. can be deleted at any time via the internet browser or other software programs. Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic embedded in websites to enable log file recording and log file analysis, allowing for statistical evaluation. Based on the embedded tracking pixel, Alphabet Inc. can recognize whether and when a website was opened by a data subject and which links were clicked by the data subject. Tracking pixels are used, among other things, to evaluate the visitor flow of a website. Via Google AdSense, personal data and information, which also includes the IP address and is necessary for the collection and billing of displayed advertisements, are transferred to Alphabet Inc. in the United States of America. This personal data is stored and processed in the United States of America. Alphabet Inc. may pass on this personal data collected via the technical process to third parties. Google AdSense is explained in more detail under this link https://www.google.de/intl/de/adsense/start/.
The data controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, gathering, and evaluation of data on the behavior of website visitors. A web analysis service collects data, among other things, on which website a data subject came from to reach a website (so-called referrers), which subpages of the website were accessed, or how often and for how long a subpage was viewed. Web analysis is primarily used for optimizing a website and for cost-benefit analysis of internet advertising. The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The data controller uses the “_gat._anonymizeIp” add-on for web analysis via Google Analytics. By means of this add-on, the IP address of the data subject’s internet connection is truncated and anonymized by Google if access to our websites occurs from a Member State of the European Union or another contracting state to the Agreement on the European Economic Area. The purpose of the Google Analytics component is the analysis of visitor flows on our website. Google uses the collected data and information, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our websites, and to provide further services related to the use of our website. Google Analytics places a cookie on the data subject’s IT system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. With each access to one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics component has been integrated, the internet browser on the data subject’s IT system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the data subject’s IP address, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission billing. By means of the cookie, personal information, such as the access time, the location from which access originated, and the frequency of visits to our website by the data subject, is stored. With each visit to our websites, this personal data, including the IP address of the internet connection used by the data subject, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. The data subject can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a cookie on the data subject’s IT system. Furthermore, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs. Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics related to the use of this website, as well as the processing of this data by Google, and to prevent such processing. To do this, the data subject must download a browser add-on from the link download and install https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the data subject’s IT system is later deleted, formatted, or reinstalled, the data subject must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person attributable to their sphere of influence, it is possible to reinstall or reactivate the browser add-on. Further information and Google’s applicable data protection provisions can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.
The data controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads both in Google search results and on the Google advertising network. Google AdWords allows an advertiser to pre-define specific keywords, by means of which an advertisement is displayed in Google search results only when the user retrieves a keyword-relevant search result with the search engine. On the Google advertising network, ads are distributed on thematically relevant websites by means of an automatic algorithm and in consideration of the previously defined keywords. The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google AdWords is to promote our website by displaying interest-relevant advertising on third-party websites and in the search results of the Google search engine, and to display third-party advertising on our website. If a data subject accesses our website via a Google ad, a so-called conversion cookie is stored by Google on the data subject’s IT system. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used for the identification of the data subject. Via the conversion cookie, provided the cookie has not yet expired, it is tracked whether certain subpages, for example, the shopping cart of an online shop system, have been accessed on our website. Through the conversion cookie, both we and Google can track whether a data subject who accessed our website via an AdWords ad generated revenue, i.e., completed or abandoned a purchase. The data and information collected through the use of the conversion cookie are used by Google to generate visit statistics for our website. These visit statistics are, in turn, used by us to determine the total number of users who were referred to us via AdWords ads, i.e., to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google by means of which the data subject could be identified. By means of the conversion cookie, personal information, such as the websites visited by the data subject, is stored. With each visit to our websites, personal data, including the IP address of the internet connection used by the data subject, is therefore transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. The data subject can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the data subject’s IT system. Furthermore, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs. Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must access the link www.google.de/settings/ads from each internet browser they use and make the desired settings there. Further information and Google’s applicable data protection provisions can be found at https://www.google.de/intl/de/policies/privacy/.
The data controller has integrated Jetpack on this website. Jetpack is a WordPress plugin that offers additional functions to the operator of a WordPress-based website. Jetpack allows the website operator, among other things, to get an overview of the site’s visitors. By displaying related posts and publications or the ability to share content on the site, it is also possible to increase visitor numbers. In addition, security functions are integrated into Jetpack, so that a website using Jetpack is better protected against brute-force attacks. Jetpack also optimizes and accelerates the loading of images integrated on the website. The operating company of the Jetpack plugin for WordPress is Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA. The operating company uses the tracking technology of Quantcast Inc., 201 Third Street, San Francisco, CA 94103, USA. Jetpack places a cookie on the data subject’s IT system. What cookies are has already been explained above. With each access to one of the individual pages of this website, which is operated by the data controller and on which a Jetpack component has been integrated, the internet browser on the data subject’s IT system is automatically prompted by the respective Jetpack component to transmit data to Automattic for analysis purposes. As part of this technical process, Automattic obtains knowledge of data that is subsequently used to create an overview of website visits. The data thus obtained serves to analyze the behavior of the data subject who accessed the data controller’s website and is evaluated with the aim of optimizing the website. The data collected via the Jetpack component is not used to identify the data subject without prior explicit consent from the data subject. The data is also made known to Quantcast. Quantcast uses the data for the same purposes as Automattic. The data subject can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Automattic/Quantcast from setting a cookie on the data subject’s IT system. Furthermore, cookies already set by Automattic can be deleted at any time via the internet browser or other software programs. Furthermore, the data subject has the option to object to the collection of data generated by the Jetpack cookie related to the use of this website, as well as the processing of this data by Automattic/Quantcast, and to prevent such processing. To do this, the data subject must click the opt-out button under the link https://www.quantcast.com/opt-out/, which sets an opt-out cookie. The opt-out cookie set with the objection is stored on the IT system used by the data subject. If the cookies on the data subject’s system are deleted after an objection, the data subject must access the link again and set a new opt-out cookie. However, by setting the opt-out cookie, there is a possibility that the data controller’s websites may no longer be fully usable by the data subject. Automattic’s applicable data protection provisions can be accessed at https://automattic.com/privacy/. Quantcast’s applicable data protection provisions can be accessed at https://automattic.com/privacy/.
The data controller has integrated YouTube components on this website. YouTube is an internet video portal that allows video publishers to upload video clips for free and other users to view, rate, and comment on them, also for free. YouTube permits the publication of all types of videos, which is why complete film and television programs, as well as music videos, trailers, or user-generated videos, are accessible via the internet portal. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Each time one of the individual pages of this website, operated by the data controller and on which a YouTube component (YouTube video) has been integrated, is accessed, the internet browser on the data subject’s information technology system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google gain knowledge of which specific sub-page of our website is visited by the data subject. If the data subject is simultaneously logged into YouTube, YouTube recognizes, upon accessing a sub-page containing a YouTube video, which specific sub-page of our website the data subject is visiting. This information is collected by YouTube and Google and assigned to the data subject’s respective YouTube account. YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is simultaneously logged into YouTube at the time of accessing our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not wish for such information to be transmitted to YouTube and Google, they can prevent this transmission by logging out of their YouTube account before accessing our website. The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing, and use of personal data by YouTube and Google.
The data controller has integrated components of the company Facebook on this website. Facebook is a social network. A social network is an online social meeting place, an online community operated on the internet, which typically allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the internet community to provide personal or company-related information. Facebook allows users of the social network, among other things, to create private profiles, upload photos, and connect through friend requests. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The data controller for the processing of personal data, if a data subject lives outside the USA or Canada, is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Each time one of the individual pages of this website, operated by the data controller and on which a Facebook component (Facebook plug-in) has been integrated, is accessed, the internet browser on the data subject’s information technology system is automatically prompted by the respective Facebook component to download a display of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook gains knowledge of which specific sub-page of our website is visited by the data subject. If the data subject is simultaneously logged into Facebook, Facebook recognizes, with each access to our website by the data subject and for the entire duration of the respective stay on our website, which specific sub-page of our website the data subject is visiting. This information is collected by the Facebook component and assigned by Facebook to the data subject’s respective Facebook account. If the data subject activates one of the Facebook buttons integrated on our website, for example, the “Like” button, or submits a comment, Facebook assigns this information to the data subject’s personal Facebook user account and stores this personal data. Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is simultaneously logged into Facebook at the time of accessing our website; this occurs regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not wish for such information to be transmitted to Facebook, they can prevent this transmission by logging out of their Facebook account before accessing our website. The data policy published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing, and use of personal data by Facebook. Furthermore, it explains what settings Facebook offers to protect the data subject’s privacy. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of revocation or objection, an email to datenschutz@commax.de is sufficient, for example.
For our website to function properly, we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website, and to properly document this, we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with the CookieFirst server to enable us to obtain your valid consent for the use of certain cookies. CookieFirst then stores a cookie in your browser to activate only the cookies you have consented to and to properly document this. The processed data will be stored until the specified storage period expires or you request the deletion of the data. Deviating from this, certain statutory retention periods may apply.
CookieFirst serves to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) lit. c of the General Data Protection Regulation (GDPR).
Data Processing Agreement
We have concluded a data processing agreement with CookieFirst. This is a contract required under data protection law, which ensures that the data of our website visitors are processed only according to our instructions and in accordance with the GDPR.
Server Log Files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
- Your consent status or the revocation of your consent
- Your anonymized IP address
- Information about your browser
- Information about your device
- The date and time of your visit to our website
- The URL of the website where you saved or updated your consent settings
- The approximate location of the user who saved their consent preferences
- A universally unique identifier (UUID) of the website visitor who clicked the banner cookie