Privacy Policy
The responsible party for the enforcement of the privacy policy and particularly for the EU-General Data Protection Regulation (GDPR) is:
Compass Software GmbH
Steinhammerstrasse 140a
44379 Dortmund
Germany
Contact:
Phone: +49 (0) 23 1 9812 90-0
Fax: +49 (0) 231 9812 90-10
Email: mail@compass-software.de
Represented by:
CEO: Lukas Hollinderbäumer and Ludger Ostendarp
Registered at
District Court Dortmund
HRB 27732
VAT No.
DE 15 333 54 30
Purpose of Data Processing by the Responsible Party and Third Parties
We will only process your personal data for the purposes described in this Privacy Policy. We will not forward your personal data to third parties for other reasons than those described in this policy. We will only transfer your personal data to third parties if:
- you have explicitly agreed for us to do so,
- processing of the data is necessary for the handling of a contract,
- processing of the data is necessary for the fulfillment of a legal obligation,
processing of the data is necessary for safeguarding legitimate interests and there is no reason to believe that you would have an overriding interest in the non-disclosure of your data.
Acquisition of General Information when Visiting Our Website
When you visit our website a cookie is automatically collecting information of a general nature. This information (server-log files) consists of data like the kind of web browser used, the operating system of the device used, the domain name of your internet service provider or similar information. The collected information consists solely of data that does not permit any conclusions on your person.
The collection of this information is necessary for technical reasons to be able to display the website correctly and is absolutely necessary for using the internet. The data is above all processed for the following reasons:
- ensuring a smooth connection buildup of the website,
- ensuring a smooth surfing experience on our website,
- analysis of system security and dependability, as well as
- additional administrative purposes.
The processing of your personal data is based on our legitimate interest in data acquisition for the reasons named above. We will not use your data to draw conclusions on your specific person. Recipients of your data are solely the responsible authority and, if applicable, persons in charge of order processing.
Anonymous information of this kind may be used for statistical analysis by us in order to optimize our internet presence and the underlying technical properties.
Matomo
We use the open source software Matomo for the analysis and statistical evaluation of the website usage by users that have accepted the statistical and marketing cookies. The analysis makes use of cookies (see paragraph Cookies above). The website usage information that is generated by these cookies, is sent to the server of our web agency (PixelConsult), is summarized into pseudonym user profiles, and is not shared with third parties.
When viewing individual pages of our website, the software will save the following data:
(1) Two bytes of the user´s system´s IP address
(2) The web page that was viewed
(3) The web page the user viewed before calling up the current web page (referrer)
(4) The sub-pages that are called up from the current web page
(5) The dwell time on the web page
(6) The number of times the web page was called up
(7) Language settings of the browser
(8) Location, type of device, operating system, and browser type
The information is used to analyze the usage of our website and to be able to meet the demands of the user for the design of our website. The collected information is not shared with third parties. Under no circumstances will the IP address be associated with other data relating to the user. The IP addresses are masked so that an assignment is not possible (IP masking).
Service Request Form
If you contact us via the Service Request Form, you give us permission to use your data to contact you. In order to do this we ask for the following information:
- Name
- Company
- Email address
- Phone number
- Customer number
This information helps us to assign your request and with the subsequent reply to your request. Additional information is optional. Your information will be stored for the purpose of processing your request, as well as possible additional questions. After we have completed your request all personal data will be deleted.
3D-Plus Online
Your IP address is temporarily saved for security reasons when using the 3D Plus Online portal and when calling up the staircase construction on the internet. The collected data is only used to ward again and resolve attacks, as well as to recognize, contain, or remove problems in our software.
Our social media appearances:
This privacy policy applies to the following social media presence
Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, X etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g., like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.
Legal basis
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g., Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
Storage time
The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.
We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g., in their privacy policy, see below).
Your rights
You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data portability and the right to file a complaint with the responsible regulatory agency. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.
Individual social networks
Facebook
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries.
We have signed an agreement with Meta on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Meta are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4452
Instagram
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details on how they handle your personal information, see the Instagram Privacy Policy: https://privacycenter.instagram.com/policy/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4452
LinkedIn
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5448
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=en.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780