for the use of the Complaints Management GmbH website
The protection of your personal data when it is collected, processed and used during your visit to our website is important to us. Complaints Management GmbH (hereinafter referred to as ‘CM’ or ‘we’ or ‘our company’) attaches particular importance to the protection of personal data. We would therefore like to take this opportunity to inform you about data protection. We naturally comply with the statutory provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG) and other data protection regulations.
We have summarised for you which data our company may collect from you on this website, how this data is handled and to whom it may be made available, etc., in the following data protection declaration:
Name and address of the controller
of Complaints Management GmbH
Dottendorfer Str 82,
D - 53129 Bonn
E-mail: info@complaints-management.com
Collection and processing of data
No personal data (e.g. first name, surname, address, telephone number, email address, etc.) is collected from you via the website unless you voluntarily provide us with such data (e.g. by contacting us by email or via a contact form) or have consented to the collection and processing of your data or the relevant legal provisions on the protection of your data permit this.
Our company will not knowingly collect personal data from children without expressly pointing out that such data should only be transmitted with the consent of the parents if applicable legal provisions provide for this. Our company will only use or disclose the personal data of children to the extent permitted by law, to obtain the legally required parental consent or to protect children. For the term ‘child/children’, the nationally applicable legal provisions and cultural customs must be taken into account.
Intended purpose
In order to enable fast electronic communication, you can contact our company by e-mail or via the contact form. If you contact us by e-mail or via the contact form, the personal data you provide will be stored automatically.
The storage of voluntarily transmitted personal data takes place on the basis of Art. 6 para. 1 letter a and, if applicable, letter b GDPR for the purpose of processing the enquiry and/or contacting you. Personal data will not be passed on to third parties unless you have given your prior consent.
The stored personal data will be deleted if you revoke your consent to storage, if knowledge of it is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons.
Use for specific purposes
Our company will only collect, process and use the personal data provided by you online for the purposes expressly communicated to you in the context of this data protection notice or otherwise, and in cases where the collection, processing or use is necessary for the fulfilment of a specific purpose.
Communication or usage-related data
If you access our website via telecommunication services, communication-related information (e.g. Internet protocol address) or usage-related information (e.g. information on the start and duration of use and on the telecommunication services you use) may be automatically generated by technical means. This may allow conclusions to be drawn about personal data. Insofar as the collection, processing and use of your communication or usage-related data is absolutely necessary, this is subject to the statutory regulations on data protection.
Automatically collected non-personal data
When you access our website, information is occasionally collected automatically (i.e. not via registration) that is not assigned to a specific person (e.g. Internet browser and operating system used; domain name of the website from which you came; number of visits; average time spent on the site; pages viewed). Our company uses this information to determine the attractiveness of the website and to improve its performance and content.
Disclosure of personal data to third parties
Personal data will only be provided to third parties in cases prescribed by law; this is conceivable, for example, in the context of the fulfilment of tax regulations.
Under no circumstances will our company sell or otherwise commercialise personal data to third parties.
Data erasure and storage duration
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. In this case, the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. After expiry of the statutory retention period, the corresponding personal data will be deleted unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Data security
Our company takes technical and organisational security measures to ensure that your personal data is protected against unintentional or unlawful deletion, alteration or loss and against unauthorised disclosure or access.
Links to other websites
If our website contains links to other websites, our company is not responsible for the data protection policies of these other websites.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 letter b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 letter f GDPR serves as the legal basis for the processing.
Rights of the data subject
The data subject has the following rights under the GDPR:
To exercise one or more of these rights, please send us a message with your request to the e-mail address or postal address stated in the legal notice.
Explicit reference to the right to object pursuant to Art. 21 GDPR
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.