Compart GmbH is pleased about your visit to our website and your interest in our company and our products. Compart is issuing this data protection declaration to inform you about our data protection regulations and measures so that you can feel safe when visiting our website, also with regard to the protection of your personal data. Compart offers business-to-business solutions for document management and therefore assumes that website visitors are over 16 years of age. Your data protection concerns are taken into account as follows.

1. Name and address of the person responsible for processing

The person responsible within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the member states of the European Union and other regulations of a data protection nature is the:
Compart GmbH

2. Name and address of the Data Protection Officer

Dr. Timo Hoffmann
Hoffmann – Consulting
Am Rebberg 4
78078 Niedereschach-Kappel, Germany
Phone: +49 151 54314630
Email: dataprotection@compart.com

3. Use of cookies

We use cookies. Cookies are data files that are stored by the Internet browser on the user's computer system. The cookies can be transmitted to a page when it is called up and thus enable the user to be assigned to it. Cookies help to simplify the use of internet pages for the user.
It is possible at any time to object to the setting of cookies by changing the settings in the Internet browser accordingly. Laws Cookies can be deleted. Please note that if cookies are deactivated, it may not be possible to use all functions of our website to their full extent.
Details about the cookies:

Cookies Settings

4. Creation of log files

Every time the Internet page is called up, Compart collects data and information through an automated system. These are stored in the log files of the server.

The following data can be collected:

(1) Information on the type of browser and the version used
(2) The user's operating system
(3) The user's Internet service provider
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user's system accesses our website (referrer)
(7) Websites that are called up by the user's system via our website

The processing of the data serves to deliver the contents of our website, to guarantee the functionality of our information technology systems and to optimise our website. The data of the log files are always stored separately from other personal data of the users.

5. Counting pixels and web bugs

Our website uses counting pixel technology provided by WiredMinds GmbH (www.wiredminds.de) to analyze visitor behavior. In connection with this, the IP address of the visitor is processed. The processing occurs only for the purpose of collecting company based information such as company name, for example. IP addresses of natural persons are excluded from any further processing by means of a whitelist. An IP address is not stored in LeadLab under any circumstances. While processing data, it is our utmost interest to protect the rights of natural persons. Our interest in processing data is based on Article 6(1)(f) GDPR. At no time is it possible to draw conclusions from the collected data on an identifiable person. WiredMinds GmbH uses this information to create anonymized usage profiles of the visit behavior on our website. Data obtained during this process is not used to personally identify visitors of our website.

Exclude from tracking

(A technically necessary cookie is set to permanently exclude you from tracking by WiredMinds LeadLab on this website).

6. Sharing content within the framework of social media

In order to share content on our pages on social media, share buttons from Facebook, XING, LinkedIn and Twitter are available. These are not embedded plugins from the social media providers, but HTML links with the look of the respective social media providers. The connection with the social media provider is only established when the button is clicked. You will then be redirected to the respective page of the social media provider. No personal data about you can be collected by the respective social media provider before this. The collection and processing of your personal data by the social media provider is governed by their respective privacy policies.

7. Use of social plugins in the context of social media

7.1. XING

Our website uses functions of the network XING, provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing XING functions is called up, a connection is established to XING servers. For the purpose and scope of data collection, further processing and use of data by XING, as well as your rights and settings options for protecting your privacy, please refer to the XING privacy policy.
Further information on the XING Share button can also be found in the XING privacy statement.

7.2. LinkedIn

Our website uses features of the LinkedIn network, which is operated by LinkedIn Inc. of Mountain View, California, USA. Each time you access one of our pages that contains LinkedIn features, a connection is made to LinkedIn's servers. For the purpose and scope of data collection, further processing and use of the data by LinkedIn, and your rights and settings options for protecting your privacy, please see the LinkedIn privacy policy. Further information about the LinkedIn-Share Button can also be found in the LinkedIn privacy policy (see above)

8. Links to other websites

If you use external links (including "Share" buttons) that are offered as part of our Internet pages, this data protection declaration does not extend to these links. We have no influence on the compliance with data protection regulations by other providers.

9. Register for online or on-site events, download MKT materials and evaluation licenses or trial versions for DocBridge® software products

If you register via a form for an online or on-site event or register for MKT materials such as white papers, checklists, flyers and videos or download an evaluation license or trial version for a DocBridge® software product or test it online, the data in the respective input mask will be used for provision by email and for a one-time contact by an employee. The data will not be passed on to third parties except to the subsidiaries named below (see 13 below). An exception exists if there is a legal obligation to pass on the data. Future contact regarding new publications and information on relevant topics will only be made with your express consent; otherwise the data will be deleted. Consent to further contact can be revoked at any time; a corresponding link can be found in the emails sent.

10. Newsletter

If the newsletter of our company is subscribed to, the data in the respective input mask will be transmitted to the person responsible for processing.
When subscribing to the newsletter, the IP address of the user as well as the date and time of registration are stored. This serves to prevent abuse of the services or the email address of the person concerned. The data will not be passed on to third parties except to the subsidiaries listed below (see 13 below). An exception is made if there is a legal obligation to pass on data.
The data is used exclusively for sending the newsletter. The subscription to the newsletter can be cancelled by the person concerned at any time. Likewise, the consent to the storage of personal data can be revoked at any time. For this purpose there is a corresponding link in every newsletter.

11. Possibilities to get in contact

There is a contact form on the Compart website that can be used for electronic contact. Alternatively, it is possible to contact us via the email address provided. If you contact Compart via one of these channels, the personal data transmitted will be stored automatically. This storage is solely for the purpose of processing or contacting you. The data will not be passed on to third parties other than the listed Compart subsidiaries (see 13 below).

12. Routine deletion and blocking of personal data

Compart processes and stores personal data of the person concerned only as long as this is necessary to achieve the purpose of storage. In addition, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible for processing is subject.
As soon as the storage purpose ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.

13. Other transfer of the data to third parties

Compart GmbH may pass on data to the following subsidiaries within the group of companies:

Compart France SAS
Compart Iberia S.L.U.
Compart North America, Inc.

The subsidiaries use the data passed on as described here. The company to which your data is passed on depends primarily on the subpage from which you have provided us with your data and on regional or linguistic conditions recognizable from the data. Standard data protection clauses have been agreed with Compart North America, Inc. in accordance with Art. 46 Para. 2 GDPR.

14. Rights of the data subject

If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

14.1. Right to information

14.1.1. You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us.
14.1.2. If such processing has taken place, you can request information from the data controller on the following:
14.1.3. the purposes for which the personal data are processed
14.1.4. the categories of personal data which are processed;
14.1.5. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
14.1.6. the planned duration of storage of the personal data concerning you or, if it is not possible to give specific details, criteria for determining the duration of storage;
14.1.7. the existence of a right of rectification or erasure of personal data concerning you, a right to have the processing restricted by the controller or a right to object to such processing;
14.1.8. the existence of a right of appeal to a supervisory authority;
14.1.9. any available information as to the origin of the data when the personal data are not collected from the data subject;
14.1.10. the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject.
14.1.11. You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees in accordance with Article 46 of the GDPR in connection with the transfer.

14.2. Right of rectification

You have the right to obtain from the data controller the rectification and/or integration of any personal data processed concerning you if it is incorrect or incomplete. The data controller shall make the correction without delay.

14.3. Right to limit processing

14.3.1. Under the following conditions, you may request that the processing of personal data concerning you be restricted:
14.3.2. if you dispute the accuracy of the personal data concerning you for a period of time which enables the controller to verify the accuracy of the personal data
14.3.3. if the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
14.3.4. the controller no longer needs the personal data for the purposes of the processing, but you need them for the purpose of asserting, exercising or defending legal claims; or
14.3.5. if you have lodged an objection to the processing pursuant to Article 21 (1) of the GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
14.3.6. If the processing of personal data concerning you has been restricted, such data - apart from being stored - may be processed only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of major public interest of the Union or a Member State.
14.3.7. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

14.4. Right of cancellation

14.4.1. You may request the controller to delete personal data concerning you without delay and the controller is obliged to delete such data without delay if one of the following reasons applies:
14.4.1.1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
14.4.1.2. You revoke your consent on which the processing was based in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing.
14.4.1.3. You object to the processing pursuant to Article 21 (1) GDPR and there are no legitimate reasons for the processing which take precedence, or you object to the processing pursuant to Article 21 (2) GDPR.
14.4.1.4. The personal data concerning you have been processed unlawfully.
14.4.1.5. Deletion of personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
14.4.1.6. The personal data concerning you have been collected in relation to information society services provided, in accordance with Article 8(1) of the GDPR.
14.4.2. If the controller has made the personal data concerning you public and is obliged to delete it pursuant to Article 17 (1) of the GDPR, he shall take reasonable measures, including technical measures, taking into account the available technology and the costs of implementation, to inform controllers who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
14.4.3. The right of cancellation does not apply where the processing is necessary
14.4.3.1. for the exercise of the right to freedom of expression and information;
14.4.3.2. to comply with a legal obligation requiring processing under Union or national law to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
14.4.3.3. for reasons of public interest in the field of public health pursuant to Article 9 (2) (h) and (i) and Article 9 (3) of the GDPR;
14.4.3.4. for archiving, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Article 89 (1) GDPR, insofar as the law referred to in para 1 is likely to render impossible or seriously hamper the attainment of the objectives of such processing, or
14.4.3.5. to assert, exercise or defend legal claims.

14.5. Right to information

If you have exercised the right to rectify, erase or limit the processing, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the controller.

14.6. Right to data transferability

You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, common and machine-readable format. You also have the right to have this data communicated to another person in charge without interference from the person in charge to whom the personal data has been made available, provided that
a. the processing is based on a consent pursuant to Article 6 (1) lit. a GDPR or Article 9 (2) lit. a GDPR or on a contract pursuant to Article 6 (1) lit. b GDPR and
b. the processing is carried out using automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, in so far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data transferability shall not apply to processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

14.7. Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6(1)(e) or (f) GDPR, including profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he or she can demonstrate compelling legitimate reasons for processing which outweigh your interests, rights and freedoms, or unless the processing is for the purpose of asserting, exercising or defending legal claims.
Where personal data relating to you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data relating to you for the purpose of such marketing, including profiling, insofar as it relates to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
You have the possibility to exercise your right of objection in relation to the use of information society services, without prejudice to Directive 2002/58/EC, by means of automated procedures using technical specifications.

14.8. Right to revoke the declaration of consent under data protection law

You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until revocation.

14.9. Automated decision in individual cases including profiling

They shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way. This shall not apply if the decision
a. is necessary for the conclusion or fulfilment of a contract between you and the person responsible
b. is authorised by Union or national legislation to which the person responsible is subject and that legislation provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
c. with your express consent.
However, these decisions may not be based on special categories of personal data in accordance with Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect rights and freedoms and your legitimate interests.
With regard to the cases referred to in a. and c., the controller shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, which shall include at least the right to obtain the intervention of a person from the controller, to express his or her point of view and to contest the decision.

14.10. Right to appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of employment or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you is in breach of the GDPR.
The supervisory authority to which the complaint has been lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

15. Legal basis of processing

Insofar as we obtain the consent of the data subject for the processing of personal data, Article 6 para 1 lit. a of the GDPR serves as the legal basis.
When processing personal data which are necessary for the performance of a contract to which the data subject is a party, Article 6 para 1 letter b of the GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 para 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or of another natural person make it necessary to process personal data, Article 6 para 1 letter d of the GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 para 1 lit. f GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the conduct of our business.

16. Duration of the storage of personal data

Personal data is stored for the duration of the respective legal retention period. After expiry of the period, the data is routinely deleted, unless it is necessary for the initiation or fulfilment of a contract.