CL Compliance und Datenschutz GmbH & Co. KG
Douglasstr. 11-15
76133 Karlsruhe
Federal Republic of Germany

Telephone.: +49 (0) 721-91250-880 
Telefax: +49 (0) 721-91250-22

email: hls@compliance-datenschutz.de

Below, we provide information about the data processing that takes place on our website (a), its purposes (b), legal basis (c), and respective storage periods. Additionally, where applicable, specific options for objection and removal (d).

1. Logfiles

a.
When you visit our website, the browser that is used on your device automatically sends information to our website’s server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until it is automatically deleted:

• Referrer
• Date and time of access
• Page accessed
• Success or error when loading
• Abbreviated IP adress
• Amount of data transferred

b.
We process the aforementioned data for the following purposes:

• To ensure a smooth connection to the website
• To ensure convenient use (performance investigation) of our website
• To evaluate system security and stability, to defend against cyber attacks
• for other administrative purposes.

c.
The legal basis for data processing is Art. 6 Para. 1 Sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes of data processing listed above. We will not, under any circumstances, use the data collected for the purpose of drawing conclusions about your person.

d.
The data in the log files will be deleted after 30 days, at the latest.

2. Cookies

a.
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) whenever you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojan horses, or other malware.

The cookie stores information that is related to the specific device used. However, this does not mean that we are aware of your identity right away.

We use the following cookies:

• Session Cookies
• Persistent Cookies

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may also mean that you cannot use all the functions of our website.

b.
On the one hand, the use of cookies serves to make using our website more pleasant for you.

We use so-called ession Cookies to recognize that you have already visited individual pages of our website.

In addition, we also use other temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already been here and what inputs and settings you have made so that you do not have to enter them again.

On the other hand, third-party providers use corresponding cookies for analysis and evaluation purposes (details can be found in the following descriptions of the associated third-party services).

c.
Cookies that are necessary for the electronic communication process (necessary cookies) or for the provision of certain functions you have requested (functional cookies) are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the relevant cookies is based exclusively on this consent (Art. 6 Para. 1 lit. a GDPR in conjunction with § 25 Para. 1 (German) Teleservices Data Protection Act); consent can be revoked at any time.

d.
Session cookies are automatically deleted when you leave our site. Cookies used to optimize the website, store settings for personalizing the offer, and generate personal functions are automatically deleted after a defined period of time, in this case 3 months. Third-party cookies are automatically deleted, in line with the times specified by the respective providers.

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can delete cookies that have already been stored at any time in your browser’s security settings.

3. Contact form

a.
There is a contact form on our website that can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored.

The mandatory information that must be provided to contact us electronically via the contact form is marked with (*). Any further data you provide us with is voluntary.

If you contact us directly via the provided email address, only your email address is mandatory and all other information is voluntary.

b.
The data will be processed to enable us to contact you and process your request, to prevent misuse of the contact form, and to ensure the security of our information technology systems.

c.
The legal basis for the processing of the mandatory information is Art. 6 Para. 1 Sentence 1 lit. f GDPR. The aforementioned purpose also constitutes the legitimate interest in the processing of the data. If the email contact or callback request is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 Sentence 1 lit. b GDPR.

The legal basis for processing the data you voluntarily provide to us is Art. 6 Para. 1 Sentence 1 lit. a GDPR.

d.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the input mask of the contact form/from your email, this is the case when the respective conversation with you has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been finally clarified. If a contract is concluded, the data will also be stored until the expiry of the statutory retention periods (6 years after the end of the year in which the contract was terminated) and then deleted, unless we are obliged to store it for longer, due to tax and commercial law retention and documentation obligations (from the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)), or you have consented to further storage in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR.

In addition, you have the option of revoking your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. To exercise your right of revocation, see Section VII. All personal data stored in the course of establishing contact will be deleted in this case.

4. Embedded YouTube Videos

a.
We have embedded YouTube videos in our online offering. They are stored on www.YouTube.com and can be played directly from our website. YouTube is a service provided by Google Inc. Only a preview image loaded from our own web server is displayed. Personal data is only transferred when you play the videos. We have no influence on this data transfer. The data transfer takes place regardless of whether YouTube provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data will be assigned directly to your account.

b.
YouTube stores your data as usage profiles and uses it for advertising, market research, and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

c.
The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The legal basis for this processing is Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the underlying advertising purpose. If consent to the storage of cookies has been requested, the storage of the relevant cookies is based exclusively on this consent (Art. 6 Para. 1 lit. a GDPR in conjunction with § 25 Para. 1 (German) Teleservices Data Protection Act); consent can be revoked at any time. If you do not want your profile to be linked to YouTube, you must log out of YouTube before starting the video. You also have the right to object to the creation of these user profiles, which you must exercise by contacting YouTube. Further information on data processing, in particular on the legal basis and storage duration by YouTube, can be found in the provider’s privacy policy. There you will also find further information about your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy . 

5. Online presence on social media

We maintain an online presence on social networks and platforms in order to communicate with customers, interested parties, and users who are active there and with the goal of informing them about our services.

We have no influence on the collection of data and its further use by social networks. We have no knowledge of the extent to which, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are made with the data, and to whom the data is passed on. We therefore expressly point out that your data (e.g., personal information, IP address) will be stored by the network operators in accordance with their data usage guidelines and used for business purposes.

We point out that user data may be processed outside the European Union. This may result in risks for users, as it could, for example, make it more difficult to enforce users’ rights.

Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created that are based on the usage behavior and resulting interests of users. In turn, the usage profiles can be used, for example, to place advertisements within and outside of platforms that are likely to correspond to the interests of users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behavior and interests of the users are stored Furthermore, data may also be stored in the usage profiles independently of the devices used by the users (in particular if the users are members of the respective platforms and are logged in to them).

The processing of users’ personal data is based on our legitimate interests in providing users with effective information and communicating with users in accordance with Art. 6 Para. 1 lit. f. GDPR. If users of this website or the respective platform providers are asked to consent to the aforementioned data processing, the legal basis for processing is Art. 6 Para. 1 lit. a GDPR in conjunction with § 25 Para. 1 (German) Teleservices Data Protection Act, Art. 7 GDPR.

For a detailed description of the respective processing operations and the options for objection (opt-out), we refer to the information provided by the providers linked below.

– Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), privacy policy: https://www.facebook.com/about/privacy/

– Google/YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – privacy policy: https://policies.google.com/privacy

– Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), privacy policy: https://help.instagram.com/155833707900388, Instagram cookie settings: https://help.instagram.com/cookie_settings

– LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland), Privacy Policy https://www.linkedin.com/legal/privacy-policy

In the event of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the user data and can take appropriate measures and provide information directly. However, if you require assistance, please contact us.

We sometimes use external service providers (processors) to process your data. These have been carefully selected and commissioned by us, are bound by instructions, and are regularly monitored. These are external service providers who provide us with technical support (web hosts, programmers). This is done on the basis of order processing agreements in accordance with Art. 28 GDPR.

Otherwise, we only pass on your data to third parties if:

• You have given your express consent to this in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, and
• the disclosure is necessary for the assertion, exercise, or defense of legal claims pursuant to Art. 6 Para. 1 Sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding interest in the non-disclosure of your data,
• there is a legal obligation to disclose the data pursuant to Art. 6 Para. 1 Sentence 1 lit. c GDPR, or
• this is legally permissible and necessary for the fulfillment of contractual relationships with you in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR.

Service providers in third countries will only be commissioned if the special requirements of Art. 44 ff. GDPR are met.

You have the right:

• pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
• pursuant to Art. 16 GDPR, to request the immediate correction of incorrect or incomplete personal data stored by us;
• pursuant to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
• pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided us in a structured, commonly used and machine-readable format, or to request its transfer to another controller;
• pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the place of the alleged infringement.

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 Para. 1, Sentence 1, lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation; this also applies to profiling based on these provisions. We will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Needless to say, you can object to the processing of your personal data for advertising and data analysis purposes at any time. This also applies to profiling insofar as it is related to such direct marketing.

In accordance with Art. 7 Para. 3 GDPR, you have the right to revoke your consent at any time. As a result, we will no longer be permitted to continue processing the data based on this consent in the future. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected by this.

This privacy policy is current as of April 2025.

In light of the further development of our website and offers or due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy.