We take the protection of your personal data very seriously, and we treat your personal data confidentially and in accordance with statutory regulations.
This privacy statement informs you about processing of your personal data in the context of use of the website www.competo-cp.de (the "website").
The controller pursuant to the EU General Data Protection Regulation (GDPR) with regard to the processing of personal data in connection with the website is Competo Capital Partners GmbH, Karlstrasse 12 - Karolinen Karree, 80333 Munich (“Competo”, “we”, “us”).
We will inform you below about which data we collect in the context of usage of our website, for what purposes, the manner in which we use this data and what rights you have. Please note that the website may contain links to websites of other providers over which we have no influence and to which this data privacy information does not apply.
Our privacy statement should be clear and comprehensible to all. As a rule, this privacy statement adopts the official terms used in the General Data Protection Regulation (GDPR). The official definition of terms is provided in GDPR Article 4.
2. PROCESSING OF YOUR DATA
2.1 VISITING THE WEBSITE
2.1.1. ACCESS TO AND STORAGE OF INFORMATION IN TERMINAL EQUIPMENT
When our website is used, information can be accessed (e.g. IP address) or stored (e.g. cookies) in your terminal devices, resulting in the processing of personal data pursuant to GDPR.
In cases in which such access to or storage of information is essential in order for us to technically provide our services without errors, this is done on the basis of TTDSG (German Telecommunications and Telemedia Data Protection Act) § 25 Clause 1 Sentence 1, Clause 2 Point 2.
In cases in which such a procedure serves other purposes (e.g. adequate design of our website), this is done on the basis of TTDSG § 25 Paragraph 1 only with your consent pursuant to GDPR Article 6 Clause 1(a). Consent can be withdrawn at any time in the future.
For more information on the processing of your personal data and the relevant legal basis in connection with this can be found in the following sections about concrete processing activities on our website.
2.1.2. This website is hosted by an external service provider (host). This website is hosted in the German IONOS data centres. Personal data entered on the website is stored on the host’s servers. This data can include IP addresses, contact requests, meta and communication data, web page accesses and other data generated via a website.
We have concluded with the provider a contract to process data on our behalf in accordance with the provisions of GDPR Article 28, in which we obligate the provider to protect our customers’ data and not to forward it to third parties.
2.1.3. SERVER LOGFILES
When you access our website, it is necessary for technical reasons that data is transmitted via your Internet browser to our web server. The following data is collected in anonymised form as soon as a connection is established for communication between your Internet browser and our web server:
- The referrer (previously visited website)
- The requested website or file
- The browser type and browser version
- The operating system used
- The device type used
- The time of access
- The IP address in anonymised form (is only used to determine the place of access)
We collect the listed data to ensure a smooth connection to the website and technically error-free provision of our services. It is essential for this data to be processed so that we can provide you with the website. The log files are used to evaluate system security and stability and for administrative purposes. The legal basis for the processing of data is our legitimate interest in the protection and functionality of our website pursuant to GDPR Article 6 Clause 1(f).
We temporarily store this data for reasons of technical security, in particular to prevent attacks on our web server. Immediately after the visit to our website, the data is anonymised by truncating the IP address at domain level, so that it is not possible to make a connection to the individual user.
2.2 COMMUNICATION BY EMAIL
If you send us requests the contact form or by email, we store your details from the request form or your email, including the personal data provided there, so that we can process your request and ask any follow-up questions. You must provide an email address, while your first and last name and telephone number are optional. We never forward this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to GDPR Article 6 Clause 1(f) and GDPR Article 6 Clause 1(b) if the purpose of your request is to conclude a contract. Your data shall be deleted following final processing of your request, provided no statutory retention obligations prevent this. In the case of GDPR Article 6 Clause 1(f) you can object to the processing of your personal data at any time.
2.3.1 The website uses only session cookies. Cookies are small text files that are stored in the memory (cache) of your browser and whose data is used for technical session control. Their purpose includes facilitating your navigation through our website. These session cookies are stored exclusively for the duration of your use of our website, as their sole purpose is to identify you while you are logged in to our website. The session cookies are deleted at the end of each session. No additional use of session cookies occurs.
We use session cookies in order to see if you have already visited individual pages on our website. You can configure your browser so that no cookies are stored or a notice always appears before a new cookie is created.
2.3.2 The legal basis for the manner of processing described in Item 2.c) is GDPR Article 6 Clause 1(f) (legitimate interest, the legitimate interest being derived from the above purposes, in particular to optimise website usage and to improve your user experience).
2.3.3 You can configure your browser so that
- you are informed about the setting of cookies,
- cookies are only permitted in individual cases,
- you can exclude the acceptance of cookies in certain cases or generally,
- you activate the automatic deletion of cookies when the browser is closed.
Cookie settings can be managed for the respective browsers at the following links:
- Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Safari: https://support.apple.com/kb/ph21411?locale=de_DE
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
You can also individually manage cookies of numerous companies and features used for advertising. Use the appropriate user tools for this purpose. These can be retrieved at https://www.aboutads.info/choices/ or
Most browsers also offer a “Do Not Track” feature. When this feature is enabled, your browser communicates to advertising networks, websites and applications that you do not wish to be “tracked” for behavioural targeted advertising and similar.
Information and instructions on how to edit this feature can, depending on your browser provider, be obtained at the following links:
- Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
- Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
- Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
- Safari: https://support.apple.com/kb/PH21416?locale=de_DE
- Opera: https://help.opera.com/Windows/12.10/de/notrack.html
However, disabling cookies may mean that you cannot (fully) use all the features of our website.
3. SOCIAL MEDIA POSTS
Information is provided below about the handling of your data collected as a result of your use of our social media posts on social networks and platforms. Your data is processed in accordance with legal regulations.
If your personal data is processed by a provider listed below, this controller is responsible for processing data pursuant to GDPR. For the assertion of your rights as data subject, please note that these can be asserted most effectively against the provider in question. Only these providers have access to your collected data. However, if you need assistance, please do not hesitate to contact us.
We have an online presence on the following social media platforms:
- Instagram Inc., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
3.2 DATA PROTECTION OFFICER
For information about contacting the data protection officer of the social media providers, see:
- Instagram Inc.: https://de-de.facebook.com/help/instagram/155833707900388
- LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
3.3 GENERAL INFORMATION ON THE SOCIAL MEDIA PLATFORMS
The controller responsible for data processing pursuant to GDPR is the party named at the start of this privacy statement, if we ourselves process data transmitted via one of the social media platforms.
3.3.2. OUR DATA PROTECTION OFFICER
In matters relating to data processing carried out by us as the controller, you can contact our data protection officer using the contact information provided in Item 7 of this privacy statement.
3.4 GENERAL DATA PROCESSING ON THE SOCIAL MEDIA PLATFORMS
3.4.1. DATA PROCESSING FOR MARKET RESEARCH AND ADVERTISING
As a rule, personal data on the corporate site is used for market research and advertising purposes. For this, a cookie is set in your browser, enabling the provider to identify you again when you visit a website. The data gathered in this way can be used to create usage profiles. These in turn are used to display advertisements within and outside the platform that are assumed to be of interest to you. Data independent of the devices you used can also be stored in the usage profiles. This is regularly the case if you are a member of the platform and are logged on to it.
3.4.2. DATA PROCESSING DURING COMMUNICATION
We ourselves collect personal data when you communicate with us, for example using the contact form. Which data is collected depends on the information you provide and the contact details you specify or release. We store this data to process your request and so that we can ask any follow-up questions. We never forward this data to third parties without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to GDPR Article 6 Clause 1(f) and GDPR Article 6 Clause 1(b) if the purpose of your request is to conclude a contract. Your data shall be deleted following final processing of your request, provided no statutory retention obligations prevent this. We assume that final processing has been carried out when the circumstances indicate that the matter in hand has been dealt with in full.
3.4.3. DATA PROCESSING FOR CONTRACT CONCLUSION
If the purpose of your communication via a social network or other platform is to conclude a contract with us for the provision of services, we process your data in order to fulfil the contract or to carry out precontractual measures or to provide the requested services. The legal basis for the processing of your data is in this case GDPR Article 6 Clause 1(b). Your data is deleted when it is no longer required to fulfil the contract or it is found that the precontractual measures are not going to result in the conclusion of a contract as requested. Please note that even after contract conclusion, it may be necessary to store personal data of our contractual partners in order to meet contractual or legal obligations.
3.4.4. DATA PROCESSING DUE TO CONSENT
If you are asked by the providers of the platforms to provide your consent for processing for a particular purpose, the legal basis of processing is GDPR Article 6 Paragraph 1(a), Article 7. Consent provided can be revoked for the future at any time.
3.5 DATA FORWARDING AND RECIPIENTS
When the platforms listed above are visited and used, personal data may be transferred to the USA or other third countries outside the EU, and further protection measures are therefore necessary in these cases in order to preserve the level of protection provided by GDPR. For more information on the guarantees provided by the providers for these cases, see below.
We cannot influence the processing and handling of your personal data by the provider. We also have no information about this. For more information, see the privacy statement of the provider in question and if necessary, make use of the options for opt-out/personalisation with regard to data processing by the provider.
We have an online presence on the following social media platforms:
- Privacy statement/opt-out: http://instagram.com/about/legal/privacy/
- According to the privacy statement, Instagram (Facebook) uses standard data protection clauses to ensure an appropriate level of data protection in accordance with the GDPR specifications for data transmission to the USA or other third countries outside the EU: http://instagram.com/about/legal/privacy/
- Privacy statement: https://www.linkedin.com/legal/privacy-policy
- Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
- According to the privacy statement, LinkedIn uses standard data protection clauses to ensure an appropriate level of data protection in accordance with the GDPR specifications for data transmission to the USA or other third countries outside the EU: https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de
4. DISCLOSURE OF DATA TO THIRD PARTIES
The personal data collected in the context of use of the website will not be forwarded to third parties or transmitted in any other way without your consent, said policy being subject to other cases expressly described in this privacy statement.
We use external service providers where necessary to process personal data on our behalf (e.g. IT service providers). These service providers are carefully selected by us, process the corresponding personal data exclusively according to our instructions (processors) and are inspected regularly by us. Processing agreements required pursuant to GDPR Article 28 shall be concluded prior to commissioning. Your personal data shall under no circumstances be forwarded to third parties by the service providers employed on our behalf.
We may share your personal data with third parties if required to do so by law (e.g. at the request of a court or law enforcement agency), GDPR Article 6 Clause 1 (c) (legal obligation) or if this is necessary pursuant to GDPR Article 6 Clause 1(b) for processing contractual relations with you. Furthermore, data disclosure on the basis of GDPR Article 6 Clause 1(f) may occur to establish, exercise or defend legal claims or for other reasons in our legitimate interest if there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data.
5. DURATION OF STORAGE OF YOUR PERSONAL DATA
Unless otherwise stipulated in the other provisions of this privacy statement, we only save your personal data obtained by us in connection with use of the website for as long as this is particularly necessary to process your inquiries to us, and then only to the extent and insofar as we are obliged to do so due to mandatory statutory retention obligations. Insofar as we no longer need your data for the purposes described above, it will only be stored during the respective statutory retention period and will not be processed for other purposes.
6. YOUR RIGHTS
Information is provided below regarding your rights as data subject pursuant to applicable data protection law with respect to the controller in matters of the processing of your personal data:
The right, pursuant to GDPR Article 15, to obtain information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the categories of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where the data were not collected by us, the existence of automated decision-making, including profiling, and where relevant meaningful information about the details.
The right, pursuant to GDPO Article 16, to obtain without undue delay the rectification of inaccurate personal data stored by us or the completeness of same.
The right, pursuant to Article 17, to obtain the erasure of personal data stored by us, provided processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
The right, pursuant to GDPR Article 18, to obtain restriction of processing of your personal data, provided the accuracy of the personal data is contested by you, the processing is unlawful but you oppose the erasure of the personal data and we no longer require the data, but you require the data for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to GDPR Article 21
The right, pursuant to GDPR Article 20, to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to demand the transmission of this data to another controller.
The right, pursuant to GDPR Article 77, to lodge a complaint with a supervisory authority. As a rule, you can turn in this respect to the supervisory authority of the federal state of our registered office, as indicated above, or that of your usual place of residence or workplace.
The right to withdraw granted consent pursuant to GDP Article 7 Clause 3: You have the right to withdraw your consent to the processing of data at any time with future effect. In the event of a withdrawal, we shall immediately erase the data concerned, provided further processing cannot be supported on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
RIGHT TO OBJECT
If your personal data is processed by us on the basis of legitimate interests pursuant to GDPR Article 6 Clause 1(f), you have the right to object to processing of your personal data pursuant to GDPR Article 21, insofar as this occurs for reasons that arise from your particular situation. Insofar as the objection is directed against processing of personal data for the purpose of direct marketing, you have a general right to object without the need to specifying a particular situation.
You can also contact our Data Protection Officer directly concerning data protection (including the assertion of your rights under Item 6.
The contact details of the Data Protection Officer are:
PROLIANCE GmbH www.datenschutzexperte.de
8. DATA SECURITY
Competo maintains up-to-date technical measures to ensure data security (e.g. SSL encryption), in particular to protect your personal data against risks in data transmissions and with regard to the acquisition of knowledge by third parties. These are adapted in each case to reflect the current state of the art of technology.
9. EXISTENCE OF AUTOMATED DECISION-MAKING
As a responsible company, we refrain from automated decision-making or profiling.
10. LEGAL OBLIGATIONS
Personal data for a decision regarding the conclusion or fulfilment of a contract or for the performance of precontractual measures is provided voluntarily. However, we can only make a decision within the framework of contractual measures if you provide such personal data that is required for the conclusion or fulfilment of a contract or for the precontractual measures.
11. AMENDMENTS TO THE PRIVACY STATEMENT
It may be necessary to amend this privacy statement from time to time (e.g. due to further development of our website or legal changes). We therefore reserve the right to change the privacy statement at any time with effect for the future. Consequently, we recommend that you read this privacy statement again at regular intervals. The most current version of this privacy statement applies during your visit.
Updated: December 2021