We, ComXpert GmbH, respect the privacy of everyone who visits this website. Therefore, we would like to inform you of how we use your personal data. We recommend that you read these data protection guidelines so that you understand the way in which we use your personal data. This Data Protection Statement covers the use of your personal data by us through or in connection with the website www.comxpert.de and all its subpages. Other COMXPERT GMBH websites and portals may be subject to data protection guidelines that differ from the data protection guidelines laid down here.
COMXPERT GMBH  complies with all applicable data security and data protection legislation, including the applicable EU data protection provisions. We treat your data as confidential and in accordance with legal requirements. Below, we would like to inform you of how we handle your data when using our website.

I. Contact information

1. Name and address of the controller

The controller responsible for data collection, processing and use (“data processing”) in accordance with the General Data Protection Regulation (GDPR) is:
ComXpert GmbH
Breitwasenring 2
72135 Dettenhausen
Email: info@comxpert.de
Tel.: +49 (0) 7157 6692-0

2. Name and address of the data protection officer

Please contact us using the contact details provided above if you have any questions regarding the processing of your personal data, this Data Protection Statement and exercising your rights. Equally, you can also contact our data protection officer:

Ralf Busch
ComXpert GmbH
Breitwasenring 2
72135 Dettenhausen
Telefon: +49 (0)7157 6692-0
E-Mail: ralf.busch@comxpert.de

II. General information on data processing

COMXPERT GMBH is responsible for the data processing carried out during use of this website. COMXPERT GMBH employees are obliged to keep personal data confidential and have been made aware of the particular importance of data protection.
This Data Protection Statement is permanently available to access, print or download at all times via https://www.comxpert.de/datenschutz/.

1. Scope of processing of personal data

It is necessary to process various information, including personal data relating to your IP address, in order to run the website. Besides this, the scope of data processing depends on your use of the website’s functions, such as the contact form, and the extent to which you have given us your consent.

2. Legal basis for the processing of personal data

This processing of your personal data is carried out on various legal bases. These are all illustrated in an abstract manner below.

3. Data erasure and storage period

We delete your personal data as soon as there is no longer a legal basis for the processing of it and there are no statutory retention periods. There may also be a retention period if this is provided for by the European or national legislator in regulations, laws or other rules to which COMXPERT GMBH is subject.

The transfer of information via this website is secured by TLS encryption. You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.

III. Data processing necessary for running the website

When you visit and look at our website and use the functions offered on it, the data processing operations described below are necessary to provide them, to enable the website to be displayed correctly and to guarantee the constant functionality of the information technology systems, the website technology and IT security. Unless stated otherwise below, the data processing operations are carried out on the legal basis of our legitimate interest in running and constantly improving our website.

1. Establishment and maintenance of a connection

1.1 Log Files

To establish and maintain the connection when you are just looking at the website, server log files that your browser transmits to us are automatically collected and stored. It is specifically the following data, which is technologically necessary for display and IT security, that is collected:

• The date and time of access
• The volume of data transmitted in bytes
• The source/referring page from which you visited the site
• The browser used
• The operating system used
• The IP address used (anonymised, if necessary)

The personal data stated is also stored in the server’s log files. The stored data is not amalgamated with other data concerning you. The IP address is stored based on the legitimate interest in preventing misuse.

1.2. Technologically necessary cookies

Technologically necessary cookies are also used to establish and maintain the connection. A cookie is a small text file containing information that is transmitted by your browser. Allowing the use of cookies in your browser does not pose a threat to your computer. These cookies do not contain any personal data and are automatically deleted when you close your browser.
You can prevent cookies from being saved in your browser settings. However, the website or certain functions may then no longer be available to you.

2. Google Web Fonts

So that fonts are displayed consistently, this website uses so-called Web Fonts from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). When you visit a website, your browser loads the necessary Web Fonts in your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. In this way, Google is informed that our website has been visited via your IP address. We use Google Web Fonts in the interest of displaying our online platform in a consistent, appealing fashion. This represents a legitimate interest within the meaning of Article 6(1)(f) GDPR. If your browser does not support Web Fonts, your computer will use a standard font.

You can find further information on Google Web Fonts at developers.google.com/fonts/faq and in Google’s Privacy Policy: www.google.com/policies/privacy/

3. Contact form

When you use the contact form on our website to send us a query, we need the following information: Surname, first name, email address and company. You also have the option to provide your telephone number. By sending your query, you give us consent to use the data you have transmitted to respond to your query. We then send a confirmation email to the email address provided. We use the so-called double opt-in method to respond to your query. This means that we will only send you an email newsletter when you have explicitly confirmed that you sent the query by clicking the appropriate link.
By clicking the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. When handling your query, we store your IP address as registered by the Internet Service Provider (ISP) and the date and time of registration to enable us to identify possible misuse of your email address at a later date. The personal data collect is only used for responding to the query.

4. Online application

If you choose the option to submit an online application via our website, you will be asked to provide personal data. This is provided firstly using the entry fields and secondly by uploading documents such as your photo or your comp card. Compulsory information on the application is indicated as such. All additional information is provided voluntarily. In principle, all of your data is only processed by us in order to carry out the application process. In the case of an online application, processing is carried out in accordance with Section 26 BDSG-Neu to make a decision on whether or not to enter into an employment contract or to take steps prior to entering into a contract.

5. Duration of storage

Stored log files are deleted after 30 days at the latest, unless any statutory retention periods apply. Technologically necessary session cookies are deleted as soon as you close your browser. Other cookies may also be stored for several weeks. If your application is rejected, the personal data provided in your application will be deleted after 6 months at the latest.

IV. Usuage analysis

COMXPERT GMBH also wishes to collect data and to use collected data to analyse usage behavior on the website and to improve the quality of the website itself and the service range using the information obtained. To do so, the data in the log files is analysed and the analytics cookies described below are saved. Before performing the analysis, we expressly ask you for your consent to do so. The usage analysis is performed based on our legitimate interest in constantly improving the efficiency of our website design and our service range and adapting them to users’ needs.
Data processing is carried out for the purpose of the usage analysis until effective objection by you.

V. Right to object and right to rectification

Wherever data processing is carried out based on your consent or a legitimate interest on the part of COMXPERT GMBH, you have the right to object to the processing at any time. If you object to processing based on our legitimate interest, we may still continue with the processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms.

IV. Rights of data subjects

If your personal data is processed by COMXPERT GMBH, you are a data subject in accordance with Article 4(1) GDPR. Therefore, you have the following rights in relation to the personal data concerning you:

• Right of access in accordance with Article 15 GDPR
• Right to rectification or erasure in accordance with Articles 16 and 17 GDPR
• Right to restriction of processing in accordance with Article 18 GDPR
• Right to object to processing in accordance with Article 21 GDPR
• Right to data portability in accordance with Article 20 GDPR
• Right to revoke declaration of consent given under data protection law in accordance with Article 7(3) GDPR

As a visitor to our website, you are not subject to any automated decision-making within the meaning of Article 22 GDPR.
If you do not agree with the manner in which we process your data, please contact our data protection officer stated under II. In accordance with Article 77 GDPR, you also have the right to lodge a complaint with your competent supervisory authority.

VII. Recipients of data

The personal data that we collect from you when using the website is only transmitted to the processors used for data processing based on an effective agreement on a work order.

VIII. Transfer of data to third countries

The personal data that we collect from you through the website is not usually transmitted to third countries outside the European Economic Area. Your IP address is only transmitted to the USA when using Google Web Fonts. The recipient of the data, Google LLC, is certified under the EU-U.S. Privacy Shield, so an adequate level of data protection is guaranteed.

Last updated: May 2018

Source: https://www.e-recht24.de/muster-datenschutzerklaerung.html