Privacy Policy

The responsible party for the enforcement of the privacy policy and particularly for the EU-General Data Protection Regulation (GDPR) is:

Compass Software GmbH 
Steinhammerstrasse 140a 
44379 Dortmund
Germany

Conta​ct: 
Phone: +49 (0) 23 1 9812 90-0 
Fax: +49 (0) 231 9812 90-10 
Email: mail@compass-software.de

Represented by:
CEO: Lukas Hollinderbäumer and Ludger Ostendarp

Registered at 
District Court Dortmund
​HRB 27732  

VAT No.
DE 15 333 54 30

You Data Subject Rights

By contacting the Data Protection Officer through the contact data above you can exercise the following rights:

  • request information on your saved personal data and processing thereof,
  • request correction of false personal data,
  • request deletion of your personal data saved by us,
  • limit data processing, if we are unable to delete your data at that time due to legal obligations,
  • object to us processing your data, and
  • data portability, if you have agreed to data processing or entered into a contract with us.

If you have given us your consent, you can withdraw it with future effect at anytime.

You are free to raise a complaint with the respective supervisory authority at any time. The responsible supervisory authority is determined by the state you live in, where you work, or in which the alleged violation occurred. We have provided a list of supervisory authorities (for the private sector), including addresses here: https://www.bfdi.bund.de/EN/Service/Contact/contact.html?nn=10396540

Purpose of Data Processing by the Responsible Party and Third Parties

We will only process your personal data for the purposes described in this Privacy Policy. We will not forward your personal data to third parties for other reasons than those described in this policy. We will only transfer your personal data to third parties if:

processing of the data is necessary for safeguarding legitimate interests and there is no reason to believe that you would have an overriding interest in the non-disclosure of your data.

Deletion or Resp. Blocking of Data

We follow the principles of data avoidance and data economy. We only save your personal data for as long as necessary under the provisions named in this Privacy Policy, for the reasons named in this policy, or as long as the various retention periods mandated by law demand us to do. After cessation of the respective purposes or expiration of these retention periods, we will routinely block or delete the relevant data according to laws and regulations. 

Acquisition of General Information when Visiting Our Website

When you visit our website a cookie is automatically collecting information of a general nature. This information (server-log files) consists of data like the kind of web browser used, the operating system of the device used, the domain name of your internet service provider or similar information. The collected information consists solely of data that does not permit any conclusions on your person.

The collection of this information is necessary for technical reasons to be able to display the website correctly and is absolutely necessary for using the internet. The data is above all processed for the following reasons:

The processing of your personal data is based on our legitimate interest in data acquisition for the reasons named above. We will not use your data to draw conclusions on your specific person. Recipients of your data are solely the responsible authority and, if applicable, persons in charge of order processing.

Anonymous information of this kind may be used for statistical analysis by us in order to optimize our internet presence and the underlying technical properties.

Cookies

As many other websites, we make use of so called "cookies". Cookies are small text data, which are transferred to your hard drive by a website server. Through this process we receive certain data automatically, such as your IP-address, the browser you are using, your operating system, and information about your connection to the internet.

Cookies cannot be used to initiate programs or transfer viruses to a computer. The information contained in cookies helps us make navigation of our website easier for you, as well as display our website correctly.

The collected data will not be shared with third parties in any case and will not be collected in connection to personal data without your consent.

Of course it is possible to access our website without the utilization of cookies. Internet browsers are normally configured to accept cookies automatically. You can disable the use of cookies in your browser settings at any time. Please use the help tool provided by your web browser to change this setting. Please be aware that some of the features on our website might not work properly if you have disabled the use of cookies.

Matomo

We use the open source software Matomo for the analysis and statistical evaluation of the website usage by users that have accepted the statistical and marketing cookies. The analysis makes use of cookies (see paragraph Cookies above). The website usage information that is generated by these cookies, is sent to the server of our web agency (PixelConsult), is summarized into pseudonym user profiles, and is not shared with third parties.

When viewing individual pages of our website, the software will save the following data:

(1) Two bytes of the user´s system´s IP address

(2) The web page that was viewed

(3) The web page the user viewed before calling up the current web page (referrer)

(4) The sub-pages that are called up from the current web page

(5) The dwell time on the web page

(6) The number of times the web page was called up

(7) Language settings of the browser

(8) Location, type of device, operating system, and browser type

The information is used to analyze the usage of our website and to be able to meet the demands of the user for the design of our website. The collected information is not shared with third parties. Under no circumstances will the IP address be associated with other data relating to the user. The IP addresses are masked so that an assignment is not possible (IP masking).

Google Maps

We utilize Google Maps to display maps. The embedding requires that Google is able to read the IP address of the user. The IP address is used to send content to the user´s browser. We want to make you aware that Google has their own privacy policy that is independent of our own. We do not accept any responsibility or liability for their policies or practices. Please review the Google privacy policy before using our website. 

Google Analytics

Google will be using your user data on behalf of us to analyze the usage of our online offering by you, the user, to create reports on the activities taking place within our online offering, and to render other services to us in connection to the usage of this online offering and other internet usage related services. This process may lead to the creation of pseudonym user profiles of the users. We only use Google Analytics with activated IP-masking. This means the IP address of users is shortened by Google for all users within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. There are only some exceptions where the entire IP address is sent to on the of the Google servers in the U.S. and shortened there. The IP addresses shared from the user´s browser, will not be connected to other Google data.   

Users are able to avoid the storage of cookies via the respective settings in their browser software. Users can avoid the collection of cookie generated data regarding the usage of the online offering by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin contained in the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can get more information about data usage for advertising purposes by Google, settings, and objection possibilities via the Google website:https://www.google.com/intl/de/policies/privacy/partners/ ("HOW GOOGLE USES INFORMATION FROM SITES OR APPS THAT USE OUR SERVICES"), http://www.google.com/policies/technologies/ads ("ADVERTISING"), http://www.google.de/settings/ads ("Control ad personalisation on websites and apps that use Google ad services."), and http://www.google.com/ads/preferences/ ("Control the Ads you see“).

​SSL Encryption

In order to secure your data during transfer, we are using state-of-the-art encryption processes (e.g. SSL) via HTTPS for the following web applications:

​Newsletter

Based on your explicit consent we are regularly sending you our newsletter or similar information via email to the address you provided us with.

To receive the newsletter all we need is a valid email address. When subscribing to our newsletter the entered data is used exclusively for the purpose of sending you said newsletter. Subscribers may also be contacted via email with other information that is relevant to the service or registration (e.g. changes made to the newsletter service or technical requirements).

We need a valid email address for the registration to the newsletter. To verify, whether the subscription was actually made by the owner of the email address, we use closed loop authentication. This process consists of us recording the subscription of the newsletter, the sending of a confirmation email, and the receipt of your reply as requested in this email. No additional data will be collected. The information is used exclusively for the distribution of the newsletter and will not be passed on to third parties.

You can revoke your permission for the storage of your personal data and the utilization for the distribution of the newsletter at any time. Each newsletter contains a link which can be used for this purpose. Furthermore, you can unsubscribe at any time on this website or contact us with your wish to unsubscribe directly via the contact information given at the end of this Privacy Policy.

​Contact Form

When contacting us with questions of any kind via email or a contact form, you automatically give us your permission to use your data for the purpose of contacting you. This requires a valid email address. This address is used to administrate your request and for the subsequent reply to this request. Additional information is optional. Your information will be stored for the purpose of processing your request, as well as possible additional questions. After we have completed your request all personal data will be deleted automatically.

Embedded YouTube Videos

On some of our websites we embed YouTube videos. The operator of the respective Plugins is the YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Visiting a page with a YouTube Plugin will create a connection to the YouTube servers. This process will transmit to YouTube which website you are visiting. If you are logged in on your YouTube account, YouTube is able to personally identify you and your surfing activity. You can avoid this by logging out of your YouTube account. 

When playing a YouTube video, the provider uses cookies to collect information on the user behavior.

If you have deactivated the storage of cookies for the Google-Ad-Program, you will not have to worry about such cookies when watching a YouTube video. However, YouTube also uses other cookies to store non-personal user information. If you want to avoid this you have to block the storing of cookies on your internet browser.

You can find more information about data protection in "YouTube's" privacy policy at: https://policies.google.com/privacy

Service Request Form

If you contact us via the Service Request Form, you give us permission to use your data to contact you. In order to do this we ask for the following information:

This information helps us to assign your request and with the subsequent reply to your request. Additional information is optional. Your information will be stored for the purpose of processing your request, as well as possible additional questions. After we have completed your request all personal data will be deleted.

Staircase Configurator

If you contact us with questions via the Offer Request, you give us permission to use your data to contact you. In order to do this we ask for the following information:

  • Name
  • Email address
  • Phone number
  • Mailing address

This information helps us to assign your request and with the subsequent reply to your request. Additional information is optional. Your information will be stored for the purpose of processing your request, as well as possible additional questions. After we have completed your request all personal data will be deleted.

3D-Plus Online

Your IP address is temporarily saved for security reasons when using the 3D Plus Online portal and when calling up the staircase construction on the internet. The collected data is only used to ward again and resolve attacks, as well as to recognize, contain, or remove problems in our software.

Filestation

In order to prepare a link for the filestation, the following data from you are collected by us:

  • Company name
  • E-mail
  • Person Name
  • IP address

The information provided by you, will be stored for the purpose of creating the link and for possible follow-up questions. Furthermore, they are needed for the company-related assignment of the link.

Our social media appearances:

 

This privacy policy applies to the following social media presence

 

Data processing through social networks

We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

Social networks such as Facebook, X etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g., like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g., Facebook).

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage time

The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.

We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g., in their privacy policy, see below).

Your rights

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data portability and the right to file a complaint with the responsible regulatory agency. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.

Individual social networks

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries.

We have signed an agreement with Meta on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Meta are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4452

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

For details on how they handle your personal information, see the Instagram Privacy Policy: https://privacycenter.instagram.com/policy/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4452

LinkedIn

We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5448

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=en.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780

Changes to Our Privacy Policy

We reserve the right to change this Privacy Policy to ensure it is up-to-date on the current legal requirements or to accommodate changes to our services which need to be included in the Privacy Policy, e.g. when introducing new services. When you visit this website again you will be held to the new Privacy Policy.

Questions to the Data Protection Officer

If you have questions regarding data protection, please send us an email or contact our Date Protection Officer directly:

Thomas Hug  
IDKOM Networks GmbH  
Dieselstraße 1  
87437 Kempten, Germany
Phone: 0831-59090-400  
E-Mail: datenschutz@idkom.de  

 

Our Privacy Policy has been generated with the Datenschutzerklärungs-Generator der activeMind AG.