Data Privacy Policy

24.06.2024

We process you data with care.

Welcome to our website. When you use this website, we collect data. We process this data in order to provide consulting services and online offers. To do this, we operate the associated websites, their functions and content and social media. Much of this data is personal, so it allows conclusions to be drawn about your person and must be handled very carefully. We would therefore like to inform you about this

• what data we collect
• why we collect it and
• what we do with it.

Who is responsible

Responsible for the processing of the data is

Get in contact

If you have any questions or other concerns about data protection, please contact us

• email: [email protected]
• website: www.compliancedesigner.com 

The types of data we process

We process the following personal data, i.e. data that can be traced back to a person.

• Inventory data (e.g. personal master data, such as names or addresses)
  Contact data (e.g. email, telephone number)
• Content data (e.g. text entries, photographs, videos)
• Usage data (e.g. websites visited, interest in content, access times)
• Meta/communication data (e.g. device information, IP addresses)

The individuals whose data we process

These may be visitors to our website, webinars, newsletters and customers of our consulting and online services.

Why we process the data

We process the data so that we can

• provide the services offered,
• make the online offers available,
• conduct webinars,
• carry out security measures,
• measure reach and
• carry out marketing measures.

The most important data processing

Data collection when visiting our website (server log files)

Even if you visit our website for information purposes only, the website provider stores information in server log files. This information is automatically transmitted to us by your browser. These are

• the website visited
• Date and time of the server request
• server name
• IP address
• Operating system
• Device type
• Browser name and version

This data cannot be assigned to a specific person and is not linked to other data sources. We only store the log files in order to guarantee the functionality of the website and to secure the information technology systems. This is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

The data is only stored for as long as it is necessary and is therefore deleted when the session ends. The log files are absolutely necessary to operate the website. You therefore have no option to object to this storage.

Cookies

Our website uses cookies. These are small text files that are stored on the operating system of your device via the browser when you access the website. Cookies do not cause any damage and do not contain viruses.

Most of the cookies we use are "session cookies". They are deleted automatically. Other cookies remain on your device until you delete them. These cookies make it possible to recognise your browser on your next visit. This allows us to save certain settings for you, such as language settings or log-in information, so that you do not have to re-enter them each time you visit the site.

We use cookies to make the website more user-friendly, effective and secure. The processing of data using cookies is based on these legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.

The cookies are stored on your device. However, you can delete, deactivate or restrict them completely.

Hosting

Our website www.compliancedesigner.com is hosted by Hostpoint AG in Switzerland and the personal data that this website collects is stored on Swiss servers. An order data processing agreement is in place with Hostpoint AG.

We also use the website construction kit system of Kajabi, LLC, USA for the purpose of hosting and displaying landing pages, online courses, webinars and memberships. All data collected on these pages is processed on Kajabi's servers in the USA. There is an order data processing agreement in place that obliges Kajabi to protect the data we receive from you and not to pass it on to third parties. The agreed standard contractual clauses (Standard Contractual Clauses, Moule 2) apply to the cross-border transfer of data.

The legal basis is our legitimate interest in the operation and maintenance of the operational security of these websites in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Google reCAPTCHA and Google Analytics

We use Google reCAPTCHA. The provider is Google Ireland. ReCAPTCHA checks whether the data input on the website is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor. For the analysis, reCAPTCHA evaluates various pieces of information. The data collected in this way is forwarded to Google. The reCAPTCHA analyses are carried out entirely in the background and visitors to the website are not made aware of this.

We also use Google Analytics, Google Inc, USA. A cookie is stored on your device, which saves the use of the website, browser type, operating system used, etc. We use the code "anonymizedIP" so that the IP addresses are shortened and thus anonymised. The data is stored in the USA, but is not merged with other Google services. Google Analytics allows us to analyse the use of the website.

The data is stored and analysed on the basis of Article 6(1)(f) GDPR. The operator of this website has a legitimate interest in protecting its website from misuse, SPAM and making further improvements. If a corresponding consent has been obtained, the processing is based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time.

You can also prevent the storage of these cookies by making the appropriate settings in your browser.

Newsletter and other e-mail delivery

When you subscribe to our e-mail newsletter, you will be asked for your name and e-mail address. Before the newsletter is sent, you must expressly confirm to us as part of the so-called double opt-in procedure that we should activate the e-mail newsletter service for you. We do this to prevent third-party email addresses from being used for registrations. We will send you a confirmation and authorisation e-mail asking you to click on the link contained in this e-mail to confirm that you wish to receive our newsletter. If you do not confirm, your personal data will be deleted.

In connection with the registration, the time of registration, the time of confirmation, the IP address and the consent text are stored in addition to the e-mail address and we use the e-mail address exclusively for the delivery of the newsletter unless you have expressly consented to any other use.
Small, "invisible" files (beacons) that are sent with the newsletter can be used for various analyses to improve our offers. The IP address, browser and time of retrieval and opening of the newsletter and the click behaviour on links contained in the newsletter are recorded and statistically evaluated.

The newsletter is also sent via the processor Kajabi, LLC, USA.

The newsletter is sent on the basis of the consent of the recipients in accordance with Art. 6 para. 1 lit. a, Art. 7 GDPR. The opening and click rates are analysed on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our interest is to create the most suitable offers for our users and to achieve and continuously optimise this by analysing user behaviour.

Enquiries via contact form, email, telephone or appointment booking

If you contact us by email or telephone, we will store and process your enquiry and the resulting personal data (name, email, etc.) in order to be able to answer your enquiry. We will not pass on this data without your consent.

For appointment bookings, we use the data processor Calendly, LLC, USA.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for pre-contractual measures. In all other cases, the legal basis is our interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or your consent (Art. 6 para. 1 lit. a GDPR).

The data entered with your enquiry will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies.

Webinars

If webinars are held, we use Zoom Video Communications, Inc., USA as the data processor. Registrations for webinars are made by double opt-in via Kajabi. The legal basis is your consent (Art.6 para.1 lit.a GDPR).

Consultancy services and internal processing

For other services, we use Microsoft Office 365 from Microsoft Corporation, USA and Loom from Loom, Inc. USA as contract data processors. The legal basis is our interest in the effective processing of the enquiries addressed to us (Art.6 para.1 lit.f GDPR) or your consent (Art.6 para.1 lit.a GDPR).

Your rights

You can object to this at any time.

We would like to point out that you can object to the future processing of your personal data in accordance with the legal requirements at any time. In particular, you may object to processing for direct marketing purposes.

You may request information.

You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time.

You can demand correction or deletion. 

You can also request the correction or deletion of your data at any time. Under certain circumstances, you also have the right to restrict the processing of your personal data.

If you have given us your consent for specific data processing, you can revoke this at any time. All you need to do is send us an informal email. The data processing carried out before the revocation remains lawful.

If you wish your data to be corrected, blocked or deleted, if you wish to revoke your consent or if you would like information about your data, please contact this email address: [email protected].

You can lodge complaints about data processing with the competent supervisory authority.

Data security

We use the SSL procedure during your visit to our website. You can recognise whether a page of the website is transmitted in encrypted form by the closed display of the lock symbol in the address bar of your browser. We also use other suitable technical and organisational security measures to protect your data.

However, we would like to point out that it is not possible to completely protect data from access by third parties.

Thank you!

Helke Drenckhan

ComplianceDesigner GmbH