Politique de confidentialité

Data protection on the simplepeppol.com websites of compacer GmbH, a company of the eurodata Group

Privacy on compacer’s websites

We respect your privacy and personality and would like your visit to our Internet pages to be secure and satisfactory. We thus take the protection of your personal data (such as name, date of birth, address, e-mail address, telephone number) very seriously, and when handling such data we pay very strict attention to the relevant statutory data protection regulations.

Responsible within the meaning of data protection laws is:

compacer GmbH

Max-Planck-Strasse 6-8

71116 Gärtringen

Telephone: +49 7034 998 910 0

Email: info@compacer.com

 

Your data subject rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

• Information about your data stored by us and its processing (Article 15 GDPR),
• Correction of incorrect personal data (Art. 16 GDPR),
• Deletion of your data stored by us (Art. 17 GDPR),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21 GDPR) and
• Data portability, provided you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with future effect.

You can contact a supervisory authority at any time with a complaint, e.g. B. to the responsible supervisory authority in the federal state of your place of residence or to the authority responsible for us.

A list of the supervisory authorities (for non-public areas) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschrift/Laender/Laender-node.html.

 

Collection of general information when you visit our website

Type and purpose of processing:

When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar.

They are processed in particular for the following purposes:

• Ensuring problem-free connection to the website,
• Ensuring smooth use of our website,
• Evaluation of system security and stability as well
• to optimize our website.

We do not use your data to draw conclusions about you personally. Information of this type may be statistically evaluated by us anonymously in order to optimize our website and the technology behind it.

Legal basis and legitimate interest:

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.

Third country transfer:

The data collected may be transferred to the following third countries:

USA

The following data protection guarantees are available:

Contracts according to standard contractual clauses and certification according to the Data Privacy Framework

Storage period:

The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.

If the data is stored in log files, this is the case after 14 days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are anonymized so that it is no longer possible to assign the calling client.

Provision required or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted. For this reason, an objection is excluded.

 

Cookies

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Storage period and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Technically necessary cookies

Type and purpose of processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:

• Contact forms
• Newsletter
• Usercentrics (CookieBot)

Legal basis and legitimate interest:

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in a user-friendly design of our website.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

Data will be deleted no later than 6 months after the request has been processed. If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired.

Provision required or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.

contradiction

Please read the information about your right to object in accordance with Art. 21 GDPR below.

Cookies that are not technically necessary

We also use cookies to better tailor the offerings on our website to the interests of our visitors or to generally improve them based on statistical evaluations.

To find out which providers set cookies, please see the information below on the display, tracking, remarketing and web analysis technologies used.

Legal basis:

The legal basis for this processing is your consent, Article 6 Paragraph 1 Letter a GDPR.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

For other recipients, please see the information below on the display, tracking, remarketing and web analysis technologies used.

Third country transfer:

Please refer to the lists of the individual display, tracking, remarketing and web analysis providers for information on this.

Provision required or required:

Of course, you can generally view our website without cookies. Web browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings (see revocation of consent).

Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Revocation of consent:

You can revoke your consent at any time using our cookie consent tool.

Profiling:

The extent to which we analyze the behavior of website visitors with pseudonymized user profiles can be found in the information below on the display, tracking, remarketing and web analysis technologies used.

 

Newsletter

Type and purpose of processing:

To deliver our newsletter, we collect personal data, which is transmitted to us via an input mask.

For effective registration we need a valid email address. In order to check that a registration is actually made by the owner of an email address, we use the “double opt-in” procedure. For this purpose, we record the registration for the newsletter, the sending of a confirmation email and the receipt of the requested response. Further data is not collected.

Legal basis:

Based on your express consent (Art. 6 Para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by email to the email address you provided.

You can revoke your consent to the storage of your personal data and its use for sending newsletters at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this data protection notice.

Recipient:

Recipients of the data may be processors.

Third country transfer:

The data collected may be transferred to the following third countries:

USA

The following data protection guarantees are available:

Contracts according to standard contractual clauses and certification according to the Data Privacy Framework

Storage period:

The data will only be processed in this context as long as the relevant consent is given. They will then be deleted.

Provision required or required:

The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Revocation of consent:

You can revoke your consent to the storage of your personal data and its use for sending newsletters at any time with effect for the future. Unsubscription can be requested via the link contained in each email or by contacting the data protection officer or person responsible for data protection listed below.

 

Google AdWords

Our website uses Google Conversion Tracking. The operating company for the Google AdWords services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you have reached our website via an ad placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages on our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.

Further information about data processing by Google can be found in the Google data protection information: https://policies.google.com/privacy. There you can also change your personal data protection settings in the data protection center.

Revocation of consent:

The provider currently does not offer an option for a simple opt-out or blocking data transmission. If you want to prevent your activities on our website from being tracked, please revoke your consent for the relevant cookie category or for all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

Google Ads conversion tracking and offline conversion tracking

We use Google Ads conversion tracking from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse the effectiveness of our advertisements and optimise our marketing goals.

When you click on one of our Google ads, a conversion tracking cookie is set. This allows us to identify which of our ads were successful. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), which you have given us via our cookie consent management system.

1. Transfer of online data (GCLID)

When you click on an ad, we collect the Google Click ID (GCLID). This ID is a pseudonymous identifier that is assigned to your click. The GCLID enables Google to assign conversions to our advertising account. No direct personal data is transferred.

2. Use of offline conversion tracking (OCT)

To improve the quality of our advertising campaigns and measure actual business success, we use offline conversion tracking (OCT) in conjunction with our CRM system (HubSpot).

This involves conversion events that do not take place directly on the website (e.g. the status change of a lead to a qualified lead (MQL) in our CRM) being fed back to Google Ads.

• For this purpose, we transfer the following data to Google:
• The previously recorded GCLID.
• The time and name of the qualifying event (MQL).
• The estimated monetary value of the qualified lead.

3. Use of enhanced conversions for leads (hashing)

To increase the accuracy of attribution, we can also use the ‘enhanced conversions for leads’ function in this process. Your email address is encrypted (hashed) before being transmitted to Google and then transmitted to Google in pseudonymised form to enable comparison with Google user accounts. The transmission takes place in this encrypted format so that Google does not receive the email address in plain text.

Purpose: We use this data to train the Google Ads algorithm to find qualified leads more effectively and optimise our campaigns for conversion value.

Revocation: You can revoke your consent to conversion tracking at any time via the settings in our cookie consent management system.

 

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Inc (hereinafter: Google). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics 4 will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser add-on to deactivate Google Analytics.

The data is stored for 14 months.

 

Google Tag Manager

Our goal is to improve the performance of our website and your user experience. The data collected using the analysis tools helps us to gain insights into the use of our website and to make targeted improvements. We also use Google Tag Manager for this.

The personal data we collect is stored for 14 months by default. This data storage is based on Art. 6 Para. 1 lit. a GDPR, which gives us the right to process personal data if this is necessary for the operation of our website and you have given us your consent.

You have the option to revoke your consent to data storage at any time by sending us a short message. We will delete your data immediately if you request this.

We also anonymize IP addresses to protect your privacy and prevent personal identification. Our central priority is to ensure safe and trustworthy handling of your data.

 

Google Marketing Platform

Products from the Google Marketing Platform are used on our website. These include marketing tools such as Surveys, Search Ads 360, Data Studio, Campaign Manager 360 or Display & Video 360. The US company Google Inc. is the provider of these services. The company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all these Google services in Europe.

However, your data is also processed by Google in the United States, among other places. As Google is an active participant in the EU-US Data Privacy Framework, the secure and correct transfer of personal data of EU citizens to the United States is regulated. For more information, please visit https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called Standard Contractual Clauses (SCC) in accordance with Art. 46 (2) and (3) GDPR. These are templates provided by the EU Commission. They are intended to ensure that your data is processed in accordance with European data protection standards even if it is transferred to third countries, such as the USA, and stored there. Through the EU-US Data Privacy Framework and the SCC, Google undertakes to comply with the European level of data protection when processing your relevant data. This applies even if this data is processed, managed and stored in the United States. These clauses are based on the so-called Implementing Decision of the EU Commission. You can find this decision and SCCs at this URL:

https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the SCCs, can be found at the URL:

https://business.safety.google/intl/de/adsprocessorterms/

If you would like to find out more about the data that is processed when you use products from the Google Marketing Platform, you can find out more in Google's privacy policy at

https://policies.google.com/privacy?hl=de?tid=331723524243

 

Hotjar

We use Hotjar to better understand our users' needs and to optimize our offering and their experience. Hotjar is a technology service that helps us analyze users' experience (e.g. how much time they spend on certain pages, which links they click, what users like and dislike, etc.) and allows us to improve our service based on Develop and improve user feedback. Hotjar uses cookies and other technologies to collect data about the behavior of our users and their devices. This includes a device's IP address (processed during your session and stored in an anonymized form), the device's screen size, device type (unique device identifiers), browser information, geographical location (country only) and the preferred language to view our website. Hotjar stores this information in a pseudonymized user profile on behalf of our company. Hotjar is contractually obliged not to sell any of the data collected on behalf of our company.

For more information, see the "About Hotjar" section on the Hotjar support page.

 

Privacy Policy HubSpot CRM

We use the customer relationship management system (CRM system) HubSpot CRM to manage your requests and optimize your user experience. Please note that personal data that we collect via HubSpot CRM is transferred to the provider in the USA.

We collect and process your data exclusively to answer your inquiries, to improve our services and to ensure a smooth user experience. The data will only be stored for as long as is necessary to process your request and provide our services. The collection and use of your data is based on Art. 6 Para. 1 lit. a GDPR, according to which the processing is necessary to fulfill a contract or to carry out pre-contractual measures.

To protect your data, we have concluded an AV contract with HubSpot CRM, which ensures the legally compliant transfer of your data. You have the right to object to or prevent the collection and processing of your data at any time by sending us an email to dsb@compacer.com.

We expressly point out that HubSpot CRM has its own data protection regulations and terms of use over which we have no influence. Please read this yourself to understand what happens to your data in the USA: https://legal.hubspot.com/de/privacy-policy

If you have any further questions about data protection or the use of your data, we will be happy to help you.

 

HubSpot CMS

We take the protection of your personal data very seriously and would like to inform you about the use and handling of your data when you use our website. In this context, we use the content management system (CMS) HubSpot CMS to manage content on our website and optimize your user experience. Please note that personal data that we collect via HubSpot CMS is transferred to the provider in the USA.

We collect and process your data exclusively to provide and optimize our website and to ensure a smooth user experience. The data is only collected with your consent. The data is only stored for as long as is necessary to provide and optimize our website. The collection and use of your data is based on Art. 6 Para. 1 lit. a GDPR, according to which the processing is necessary to fulfill a contract or to carry out pre-contractual measures.

To protect your data, we have concluded an AV contract with HubSpot CMS, which ensures the legally compliant transfer of your data. You have the right to object to or prevent the collection and processing of your data at any time by sending us an email to info@compacer.com.

We expressly point out that HubSpot CMS has its own data protection regulations and terms of use over which we have no influence. Please read this yourself to understand what happens to your data in the USA: https://legal.hubspot.com/de/privacy-policy

If you have any further questions about data protection or the use of your data, we will be happy to help you.

 

HubSpot Analytics

We take the protection of your personal data very seriously and would like to inform you about the use and handling of your data when using our forms. In this context, we use the form tool HubSpot Forms to effectively manage your requests and information and to optimize your user experience. We would like to point out that personal data that we collect via HubSpot Forms is transferred to the provider in the USA.

We collect and process your data exclusively to process your requests, improve our services and ensure a smooth user experience. The data is only collected with your consent. The data will only be stored for as long as is necessary to process your request and provide our services. The collection and use of your data is based on Art. 6 Para. 1 lit. a GDPR, according to which the processing is necessary to fulfill a contract or to carry out pre-contractual measures.

To protect your data, we have concluded an AV contract with HubSpot Forms, which ensures the legally compliant transfer of your data. You have the right to object to or prevent the collection and processing of your data at any time by sending us an email to dsb@compacer.com.

We expressly point out that HubSpot Forms has its own data protection regulations and terms of use over which we have no influence. Please read this yourself to understand what happens to your data in the USA: https://legal.hubspot.com/de/privacy-policy

If you have any further questions about data protection or the use of your data, we will be happy to help you.

 

CookieBot

We use the cookie manager Cookiebot to manage your cookie settings and improve your user experience. We would like to point out that personal data can be collected through the use of our website and the cookie manager. We only store your data for as long as is necessary for the operation of our website and the cookie manager and then delete it securely. The collection and use of your data is based on Art. 6 Para. 1 lit. c GDPR, according to which the processing is necessary to fulfill a legal obligation or in the interest of protecting your personal data. To protect your data, we have concluded an AV contract with Cybot, which ensures the legally compliant transfer of your data. You have the right to object to or prevent the collection and storage of your data at any time by deactivating the execution of script code in your browser. If you have any further questions about data protection or the use of your data, we will be happy to help you.

 

Integration of Stripe (payment service provider)

We use the payment service provider Stripe (Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA) to process payments for our services, in particular for one-off transactions and invoicing.

Purpose of processing: Stripe processes your data for the purpose of payment processing, fraud prevention and the creation of the corresponding invoices.

Categories of data processed: Depending on the payment method selected, the following data is transmitted to Stripe: name, email address, billing address, account details, credit card information, transaction data.

Legal basis: Stripe is used to fulfil the contract for the service you have requested (Art. 6(1)(b) GDPR) and to protect our legitimate interests in efficient and secure payment processing (Art. 6(1)(f) GDPR).

Stripe privacy policy: Further information on the handling of user data can be found in Stripe's privacy policy: https://stripe.com/en-de/privacy

 

Use of LlamaIndex (data indexing and processing)

We use the LlamaIndex service (Privacy Policy: https://www.llamaindex.ai/files/privacy-notice.pdf) to index and process unstructured data that you provide in the context of certain services (e.g. AI agents or simplepeppol upload).

Purpose of processing: The original files you upload (e.g. PDF, JPEG, Word documents) are transmitted to LlamaIndex. This serves to index the documents, prepare them in a format that can be used by AI, and extract the relevant information for subsequent processing or analysis by our systems (e.g. conversion of an invoice).

Processed data categories: The entire content of the file you upload, as well as metadata (file name, file type, etc.), is transmitted to LlamaIndex and processed there.

Legal basis: The use of LlamaIndex is essential for the performance of the contract for the provision of the service (e.g. conversion of an invoice or data analysis by an AI agent) (Art. 6(1)(b) GDPR).

Note on data transfer: We ensure that the protection of your data is guaranteed by appropriate technical and organisational measures. Please refer to the LlamaIndex privacy policy for further details on the processing of the transferred data.

 

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Information about your right to object according to Art. 21 GDPR

Right to object on a case-by-case basis

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR (data processing based on a balance of interests); This also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

Recipient of an objection

compacer GmbH

Max-Planck-Strasse 6-8

71116 Gärtringen

Telephone: +49 7034 998 910 0

Email: info@compacer.com

Changes to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.

Questions for the data protection officer

If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organization directly:

Mühlenbrock Datenschutz Consulting

Managing Director: Frank Mühlenbrock

Sudetenweg 51
71139 Ehningen
Germany

Telephone: +49 (0) 7034 / 6556 009
Mobile: +49 (0) 151 291 5555 6
info@boeblingen-datenschutz.de

VAT identification number in accordance with Section 27a of the German VAT Act: DE 219567267