Data protection

Data protection

data protection

The operators of this website take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

Our website can usually be used without providing personal data. Insofar as personal data (e.g. name, address or e-mail address) is collected on our website, this is always done on a voluntary basis as far as possible. These data will not be passed on to third parties without your express consent.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

Responsible person

Comitatus Software AG
Board member Stefan Craatz
Email: scraatz@comitatus.de
Phone: 030-21090850

The address of our website is: https://www.comitatus.de

Which data we collect and process

Cookies

Some of the internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

The cookies we use are so-called “session cookies”. They are automatically deleted after your visit.
Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

Contact form and chat

Personal data that you enter in the contact form and in the chat widget will be saved by us so that we can contact you later about your request.

Contract data

 We collect, process and save the data that you provide to us in the context of an order or an order. We also save and process data about the order and payment history.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • operating system used
  • Referrer URL (unique resource locator)
  • Host name of the accessing computer
  • Time of the server request

These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use. We delete the data after 4 weeks.

Embedded content from other websites

Articles on this site may include embedded content (e.g.  videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website.

These websites can collect data about you, use cookies, embed additional tracking services from third parties and record your interaction with this embedded content, including your interaction with the embedded content, if you have an account and are logged in to this website.

Legal basis for processing

The processing of your data takes place for the execution of the contract, for the purpose of improving our services and our websites, for the provision of updates and upgrades and for the notification regarding the service as well as for the purpose of invoicing the collection of our claims.

Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR) serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract, the processing is based on Art. 6 Para. 1 lit. b GDPR.
The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products and services. 

If the processing of personal data is based on a legal obligation, the processing is based on Art. 6 Para. 1 lit. c GDPR. 

Finally, processing operations could be based on Article 6 (1) lit. f GDPR. With this regulation, processing operations are permitted that are not covered by any of the aforementioned legal bases, if the processing is necessary to safeguard our legitimate interests or those of a third party, if the interests, fundamental rights and freedoms of the person concerned do not prevail.

We process applicant data in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG (new). Please do not send unsolicited applications.

Categories of recipients

Authorities and third parties

We only release data to authorities and third parties if there are statutory provisions or a judicial title. Information to authorities may have to be given due to a legal regulation for hazard prevention or for criminal prosecution. Third parties only receive information if a statutory provision provides for this. This can e.g. B. be the case with copyright infringement.

Google Maps + Google Youtube

Google services are used or offered via our homepage. You can find out about the privacy policy, i.e. how Google handles the data, here: Google’s privacy policy: https://www.google.de/intl/de/policies/privacy

Safety precautions

SSL encryption

For reasons of security and to protect the transmission of confidential content, such as the inquiries that you send to us as the website operator, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmitted to us, not read by third parties.

Data transfer to third countries

We do not transfer your data to third countries.

Duration of storage

We process and store personal data only for the period necessary to achieve the storage purpose or if this is required by law. As a rule, the purpose of the processing is achieved with the termination of your contract and complete billing and payment.

Backups in our backup systems are automatically deleted with a time delay. 

For contract data, processing is restricted after termination of the contract, after expiry of the statutory retention period, it will be deleted. 

Data that you enter as part of the application process will be stored for a maximum of six months.

Your rights

right of providing information

You have the right to receive free information and confirmation of the personal data stored about you and a copy of this information from us at any time.

Right to rectification

You have the right to request the immediate correction of incorrect personal data concerning you. Furthermore, you have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data.

Deletion rights

You have the right to have your personal data deleted immediately if one of the following reasons applies and if processing is not necessary:

  • The personal data was collected or otherwise processed for purposes for which further processing is no longer necessary.
  • You revoke your consent on which the processing was based and there is no other legal basis for the processing.
  • According to Art. 21 Para. 1 DS-GVO you object to the processing, and there are no overriding legitimate reasons for the processing, or you object in accordance with Art. 21 Para. 2 DS-GVO objection to the processing.
  • The processing of personal data took place unlawfully.
  • The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which we are subject.
  • The personal data was collected in relation to the information society services offered in accordance with Art. 8 Para. 1 GDPR.

Right to restriction of processing

You have the right to request that processing be restricted if one of the following conditions is met:

  • You dispute the correctness of the personal data for a period of time that enables us to check the correctness of the personal data.
  • The processing is unlawful, you reject the deletion of the personal data and instead request that the use of the personal data be restricted.
  • We no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims.
  • You have an objection to the processing acc. Art. 21 para. 1 GDPR and it has not yet been determined whether our legitimate reasons outweigh yours.
  • Right to object to processing

You have the right at any time to object to the processing of personal data relating to you, which is based on Art. 6 Para. 1 lit. e or f DS-GVO takes place, to lodge an objection.

In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You have the right to object at any time to the processing of personal data for the purpose of direct mail.

Right to data portability

You have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from us, provided that the processing is based on the consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract in accordance with Art. 6 Para. 1 lit. b DS-GVO is based and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

Furthermore, when exercising your right to data portability in accordance with Art. 20 Para. 1 GDPR, you have the right to request that the personal data be transmitted directly from one person in charge to another person in charge, insofar as this is technically feasible and provided that this does not impair the rights and freedoms of other people.

Right to withdraw consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time.

Right of appeal to the supervisory authority

You have the right to contact a supervisory authority in the Member State of your place of residence or place of work or of the alleged violation at any time if you are of the opinion that the processing of your personal data violates the EU General Data Protection Regulation.

Existence of automatic decision-making / profiling

We do not make automatic decision-making or profiling.