Privacy Policy

Personal Data (hereinafter referred to as "Data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly online presence, including its content and the services offered there.According to Article 4, Number 1 of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" refers to any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
‍
With the following Privacy Policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we either alone or jointly with others determine the purposes and means of the processing.Additionally, we inform you below about the third-party components we use for optimization purposes and to enhance the quality of user experience, provided that such third parties process data under their own responsibility.

Our Privacy Policy is structured as follows:
I. Information About Us as the Data Controller
II. Rights of Users and Data Subjects
III. Information on Data Processing
IV. Information About Us as the Data Controller

I. The responsible provider of this website in terms of data protection law is:

Comparus GmbH
Essener Straße 4,
Haus D1
22419 Hamburg
Germany

Phone: +49 40 4100 9070
datenschutz@comparus.de

Data Protection Officer:
Comparus GmbH
Data Protection Officer
Essener Straße 4
22419 Hamburg
Germany
Phone +49 40 41 00 70 90
E-Mail: datenschutz@comparus.de

II. Rights of Users and Data Subjects

With regard to the data processing described in more detail below, users and data subjects have the following rights:

  • The right to confirmation of whether data concerning them is being processed, the right to access the processed data, further information about the data processing, and copies of the data (see also Art. 15 GDPR).
  • The right to correction or completion of incorrect or incomplete data (see also Art. 16 GDPR).
  • The right to the immediate deletion of data concerning them (see also Art. 17 GDPR), or alternatively, if further processing is necessary under Article 17(3) GDPR, the right to restriction of processing as per Article 18 GDPR.
  • The right to receive the data concerning them that they have provided and to have this data transmitted to other providers/controllers (see also Art. 20 GDPR).
  • The right to lodge a complaint with the supervisory authority if they believe that data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

‍

Furthermore, the provider is obligated to inform all recipients to whom data has been disclosed by the provider about any correction or deletion of data or restriction of processing carried out pursuant to Articles 16, 17(1), and 18 GDPR. However, this obligation does not apply if such notification is impossible or would involve disproportionate effort.

Notwithstanding this, the user has the right to be informed about these recipients.
‍

Users and data subjects also have the right, under Article 21 GDPR, to object to the future processing of their data, insofar as the data is processed by the provider in accordance with Article 6(1)(f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.

III. Information on Data Processing

The owner takes appropriate security measures to prevent unauthorized access, disclosure, alteration, or unauthorized destruction of the data.

Data processing is carried out using computers and/or IT-supported tools that follow organizational procedures and modes strictly related to the specified purposes.

In addition to the owner, data may, in some cases, be accessible to specific types of responsible persons involved in the operation of this application (management, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, postal services, hosting providers, IT companies, communication agencies), if necessary, as data processors of the owner. The updated list of these parties can be requested from the owner at any time.

Cookies

a) Session Cookies
We use so-called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you are using. These cookies process certain information about you, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, efficient, and secure, as it enables functions like displaying our website in different languages or offering a shopping cart feature.
The legal basis for this processing is Article 6(1)(b) GDPR, provided these cookies process data for contract initiation or contract execution. If the processing is not for contract initiation or execution, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6(1)(f) GDPR.
These session cookies are deleted when you close your internet browser.

b) Third-Party Cookies
If applicable, cookies from partner companies with whom we collaborate for advertising, analysis, or the functionality of our website may also be used.
For details, particularly regarding the purposes and legal bases for the processing of such third-party cookies, please refer to the following information.

c) Option to Remove Cookies
You can prevent or limit the installation of cookies by adjusting the settings of your internet browser. Additionally, you can delete cookies that have already been stored at any time. The required steps and measures depend on the specific internet browser you are using. If you have questions, please use the help function or documentation of your internet browser, or contact its manufacturer or support.
For so-called Flash cookies, the processing cannot be prevented via the browser settings. Instead, you need to change the settings of your Flash player. The necessary steps and measures depend on the specific Flash player you are using. If you have questions, please use the help function or documentation of your Flash player, or contact the manufacturer or user support.
Please note that if you prevent or restrict the installation of cookies, some features of our website may not be fully usable.

Contract Execution

The data you provide to access our goods and/or services will be processed by us for the purpose of contract execution and is necessary for this purpose. Contract conclusion and execution are not possible without providing your data. The legal basis for processing is Article 6(1)(b) GDPR.
We will delete the data once the contract has been fully executed, but we must comply with tax and commercial retention periods.
As part of contract execution, we may pass your data to the transport company responsible for delivering the goods or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or payment purposes. The legal basis for the transfer of data is then Article 6(1)(b) GDPR.

Contact Requests / Contact Possibility
If you contact us via contact form or email, the data you provide will be used to process your request. Providing the data is necessary for processing and responding to your request – without it, we cannot or can only partially respond to your inquiry. The legal basis for this processing is Article 6(1)(b) GDPR.
Your data will be deleted once your request has been conclusively answered, unless legal retention obligations, such as those arising from a potential subsequent contract execution, prevent deletion.

Online Job Applications / Publication of Job Advertisements
We offer you the opportunity to apply for a job via our website. In these digital applications, your applicant and application data will be electronically collected and processed by us to handle the application process. The legal basis for this processing is Section 26(1) Sentence 1 BDSG in conjunction with Article 88(1) GDPR.
If an employment contract is concluded after the application process, we will store the data you submitted during the application in your personnel file for the usual organizational and administrative processes – of course, in compliance with further legal obligations. The legal basis for this processing is also Section 26(1) Sentence 1 BDSG in conjunction with Article 88(1) GDPR.
If your application is rejected, we will automatically delete the data you submitted two months after the rejection notification. However, deletion will not occur if the data must be stored for a longer period due to legal requirements, such as for evidence purposes under the AGG, up to four months or until the conclusion of legal proceedings. The legal basis in this case is Article 6(1)(f) GDPR and Section 24(1)(2) BDSG. Our legitimate interest lies in the defense or enforcement of legal claims.
If you explicitly consent to a longer storage of your data, e.g., for inclusion in a candidate or prospect database, the data will be further processed based on your consent. The legal basis is then Article 6(1)(a) GDPR. You can withdraw your consent at any time in accordance with Article 7(3) GDPR with effect for the future.

LinkedIn
We maintain an online presence on LinkedIn to present our company and services and to communicate with customers/clients. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Therefore, we would like to point out that there is a possibility that user data may be processed outside the European Union, particularly in the USA. This could pose increased risks for users, such as the potential difficulty in accessing user data at a later time. Additionally, we do not have access to this user data. The access rights are solely with LinkedIn.
You can find LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy

LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
‍
Instagram
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: https://help.instagram.com/519522125107875
‍
The encrypted key and the cookie status are stored on the user's device via a cookie to restore the corresponding cookie status during future page visits. This cookie automatically deletes itself after 12 months.
The legal basis for this is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the user-friendliness of the website as well as in fulfilling the legal requirements of the GDPR.The user can prevent or terminate the installation and storage of the cookie, and thus their cookie consent, at any time by adjusting the settings of their browser.

Further information on the topic of data protection is provided by Cybot through the following links: https://www.cookiebot.com/de/privacy-policy/ Sample Privacy Policy from the law firm Weiß & Partner Contract Processing