Free maturity assessment: How advanced is your use of customer journeys?

Free maturity assessment

06 Days
08 Hours
17 Minutes
DATA PROTECTION DECLARATION FOR OUR CUSTOMERS & INTERESTED PARTIES Tabea Scherling 6. May 2025

Data protection declaration for our customers & interested parties

Thank you for your interest in our company and our services. As the data protection officer, we want you to feel comfortable interacting with us and our employees regarding the protection of your personal data.

We take the protection of your personal data very seriously. Compliance with German and European data protection regulations is a matter of course for us. The protection of your personal data is therefore a top priority for us.

With the following information, we would like to inform you about how we handle your personal data in detail:

1. Name and contact details of the controller

Responsible for the processing of your personal data in the context of this contact is

cxomni GmbH
Konrad-Zuse-Platz 8
81829 München
Tel. 089 207042-986
www.cxomni.net

Our internal contact for data protection issues:

Katrin Bock
datenschutz@cxomni.net

2. Contact details of the data protection officer

The designated data protection officer is the

DataCo GmbH
Sandstraße 33
80335 München
Tel.: +49 (0) 89 452459 900
www.dataguard.de

Processing of your personal data

a. Your personal data that is processed by us

We process the following personal data as part of the existing customer relationship, contract initiation and contact management:

  • Identification number
  • The company
  • Surname
  • First name
  • Your e-mail address
  • Telephone number (after opt-in)

b. Purposes of data processing

Your personal data will be processed for the following purposes as part of the existing customer relationship, contract initiation and contact management:

  • Contract fulfillment
  • Contact for information purposes
  • Processing of inquiries

c. Legal basis for data processing

The legal basis for the processing of data within the scope of the purposes mentioned in b. is Art. 6 para. 1 sentence 1 lit. a, b and f GDPR.

Processing of your personal data on the basis of consent and legitimate interest. Insofar as we obtain your consent for the processing of your personal data, your personal data will be processed on the basis of Art. 6 para. 1 sentence 1 lit. a-f GDPR in conjunction with Art. 5, 7 GDPR. Art. 5, 7 GDPR.

4. Recipients or categories of recipients of the personal data

As part of the processing of your personal data, we may pass on your personal data to the following recipients. We only transfer your personal data to external recipients if you have given your consent or if this is permitted by law. External recipients of your personal data are in particular

  • External employees / freelancers
  • Newsletter distribution provider (Hubspot)
In addition, your personal data may be transferred to the following service providers based in a country outside the EUR/EEA:

  • Microsoft Corporation
  • Elementor Ltd.
  • HubSpot
  • Clickmatic
In the case of processors and service providers outside the EU/EEA, your above-mentioned personal data will only be processed insofar as this is the subject of our standard data protection clauses with these recipients in accordance with Art. 46 para. 2 lit. c GDPR.

5. Transfer of personal data to a third country

In principle, the personal data collected and generated during the provision of relevant products and services is stored on our servers in the European Union. As the providers of our software solutions, among others, offer their products and/or services on the basis of available resources and servers worldwide, your personal data may be transferred to other jurisdictions outside the European Union and the European Economic Area or accessed from such a jurisdiction outside the European Union. In particular, personal data is transferred to the third country USA within the meaning of Art. 15 para. 2 GDPR. In order to ensure the continued existence of the necessary level of protection when transferring data to a third country, contractual measures are agreed for this purpose. The software provider has its registered office in the United States of America, which has not been recognized as providing an adequate level of data protection. In order to ensure suitable guarantees for the protection of the transfer and processing of personal data outside the EU, data is transferred to and processed by our service providers on the basis of suitable guarantees in accordance with Art. 46 ff GDPR, in particular through the conclusion of so-called standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR.

6. Duration of storage of personal data

We do not store your personal data for longer than is necessary for the purpose for which it was collected. This means that data is destroyed or deleted from our systems as soon as it is no longer required. We take appropriate measures to ensure that your personal data is only processed under the following conditions:

  1. For the duration that the data is used to provide you with a service
  2. As required by applicable law, contract or in light of our legal obligations
  3. Only for as long as necessary for the purpose for which the data was collected, or longer if required by contract, applicable law, using appropriate safeguards.
A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and guarantee claims. If the data are no longer required for the fulfillment of contractual or legal obligations, they are regularly deleted, unless their – temporary – retention is still necessary, in particular to fulfill legal retention periods of up to ten years (e.g. from the German Commercial Code, the Tax Code and the Money Laundering Act). In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.

7. Rights of data subjects

You have the following rights under the General Data Protection Regulation:

  • If your personal data is processed, you have the right to obtain information from the controller about the personal data stored about you (Art. 15 GDPR).
  • If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
  • If the legal requirements are met, you can request the erasure or restriction of processing (Art. 17 and 18 GDPR).
  • If you have consented to the data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
  • If the personal data concerning you are processed for direct marketing purposes, you have the right object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. (Art. 21 GDPR)
  • You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision. You can contact them at:
Bavarian State Office for Data Protection Supervision
Michael Will
Promenade 18
91522 Ansbach
Telefon: 0981/18009-0
E-Mail: poststelle@lda.bayern.de
https://www.lda.bayern.de/
If the legal requirements are met, you can object to the processing of personal data concerning you at any time for reasons arising from your particular situation, which is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR (Art. 21 GDPR).

8. Right to withdraw consent

If you have consented to the processing by the controller by means of a corresponding declaration, you can revoke your consent at any time for the future. The legality of the data processing carried out on the basis of the consent until the revocation is not affected by this.

This privacy policy was created with the support of DataGuard.