Data protection declaration for our customers & interested parties
Thank you for your interest in our company and our services. As the data protection officer,
we want you to feel comfortable interacting with us and our employees regarding the
protection of your personal data.
We take the protection of your personal data very seriously. Compliance with German and European data protection regulations is a matter of course for us. The protection of your personal data is therefore a top priority for us.
With the following information, we would like to inform you about how we handle your personal data in detail:
We take the protection of your personal data very seriously. Compliance with German and European data protection regulations is a matter of course for us. The protection of your personal data is therefore a top priority for us.
With the following information, we would like to inform you about how we handle your personal data in detail:
1. Name and contact details of the controller
Responsible for the processing of your personal data in the context of this contact is
cxomni GmbH
Konrad-Zuse-Platz 8
81829 München
Tel. 089 207042-986
www.cxomni.net
Our internal contact for data protection issues:
Katrin Bock
datenschutz@cxomni.net
2. Contact details of the data protection officer
The designated data protection officer is the
DataCo GmbH
Sandstraße 33
80335 München
Tel.: +49 (0) 89 452459 900
www.dataguard.de
DataCo GmbH
Sandstraße 33
80335 München
Tel.: +49 (0) 89 452459 900
www.dataguard.de
3. Processing of your personal data
a. Your personal data that is processed by us
We process the following personal data as part of the existing customer relationship,
contract initiation and contact management:
- Identification number
- The company
- Surname
- First name
- Your e-mail address
- Telephone number (after opt-in)
b. Purposes of data processing
Your personal data will be processed for the following purposes as part of the existing
customer relationship, contract initiation and contact management:
- Contract fulfillment
- Contact for information purposes
- Processing of inquiries
c. Legal basis for data processing
The legal basis for the processing of data within the scope of the purposes mentioned in b.
is Art. 6 para. 1 sentence 1 lit. a, b and f GDPR.
Processing of your personal data based on consent and legitimate interest
Insofar as we obtain your consent for the processing of your personal data, the processing of your personal data is based on Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 5, 7 GDPR.
Insofar as we process personal data, the processing is based on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in acquiring new customers with the aim of expanding our market presence and strengthening the competitiveness of our company.
If we have not collected your personal data from you but from third parties, this data comes from publicly accessible sources or specialised research service providers that provide professional information. This includes, in particular, contact details such as your first and last name, your business email address, your position and the name of your company.
The collection and processing is carried out via the following service:
Processing is carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in conjunction with Art. 5 and 7 GDPR. Our legitimate interest lies in addressing potential new customers in order to expand our customer base and promote our business activities, whereby we always take care to protect your rights and interests.
Processing of your personal data based on consent and legitimate interest
Insofar as we obtain your consent for the processing of your personal data, the processing of your personal data is based on Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 5, 7 GDPR.
Insofar as we process personal data, the processing is based on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in acquiring new customers with the aim of expanding our market presence and strengthening the competitiveness of our company.
If we have not collected your personal data from you but from third parties, this data comes from publicly accessible sources or specialised research service providers that provide professional information. This includes, in particular, contact details such as your first and last name, your business email address, your position and the name of your company.
The collection and processing is carried out via the following service:
- Apollo.io: Accesses an extensive database of professional contact details sourced from public and licensed sources.
Processing is carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in conjunction with Art. 5 and 7 GDPR. Our legitimate interest lies in addressing potential new customers in order to expand our customer base and promote our business activities, whereby we always take care to protect your rights and interests.
4. Recipients or categories of recipients of the personal data
As part of the processing of your personal data, we may pass on your personal data to the
following recipients. We only transfer your personal data to external recipients if you have
given your consent or if this is permitted by law. External recipients of your personal data
are in particular
- External employees / freelancers
- Newsletter distribution provider (Hubspot)
In addition, your personal data may be transferred to the following service providers based
in a country outside the EUR/EEA:
- Microsoft Corporation
- Elementor Ltd.
- HubSpot
- Smartlead (521 Products Pty Ltd.)
- Open AI
- Sendspark
- Lemlist SAS
- Clay Labs Inc.
In the case of processors and service providers outside the EU/EEA, your above-mentioned
personal data will only be processed insofar as this is the subject of our standard data
protection clauses with these recipients in accordance with Art. 46 para. 2 lit. c GDPR.
5. Transfer of personal data to a third country
In principle, the personal data collected and generated during the provision of relevant
products and services is stored on our servers in the European Union. As the providers of
our software solutions, among others, offer their products and/or services on the basis of
available resources and servers worldwide, your personal data may be transferred to other
jurisdictions outside the European Union and the European Economic Area or accessed
from such a jurisdiction outside the European Union. In particular, personal data is
transferred to the third country USA within the meaning of Art. 15 para. 2 GDPR. In order to
ensure the continued existence of the necessary level of protection when transferring data
to a third country, contractual measures are agreed for this purpose. The software provider
has its registered office in the United States of America, which has not been recognized as
providing an adequate level of data protection. In order to ensure suitable guarantees for
the protection of the transfer and processing of personal data outside the EU, data is
transferred to and processed by our service providers on the basis of suitable guarantees
in accordance with Art. 46 ff GDPR, in particular through the conclusion of so-called
standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR.
6. Duration of storage of personal data
We do not store your personal data for longer than is necessary for the purpose for which
it was collected. This means that data is destroyed or deleted from our systems as soon as
it is no longer required. We take appropriate measures to ensure that your personal data
is only processed under the following conditions:
- For the duration that the data is used to provide you with a service
- As required by applicable law, contract or in light of our legal obligations
- Only for as long as necessary for the purpose for which the data was collected, or longer if required by contract, applicable law, using appropriate safeguards.
7. Rights of data subjects
You have the following rights under the General Data Protection Regulation:
- If your personal data is processed, you have the right to obtain information from the controller about the personal data stored about you (Art. 15 GDPR).
- If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
- If the legal requirements are met, you can request the erasure or restriction of processing (Art. 17 and 18 GDPR).
- If you have consented to the data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
- If the personal data concerning you are processed for direct marketing purposes, you have the right object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. (Art. 21 GDPR)
- You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Bavarian State Office for Data Protection Supervision
Michael Will
Promenade 18
91522 Ansbach
Telefon: 0981/18009-0
E-Mail: poststelle@lda.bayern.de
https://www.lda.bayern.de/
Michael Will
Promenade 18
91522 Ansbach
Telefon: 0981/18009-0
E-Mail: poststelle@lda.bayern.de
https://www.lda.bayern.de/
If the legal requirements are met, you can object to the processing of personal data
concerning you at any time for reasons arising from your particular situation, which is carried
out on the basis of Art. 6 para. 1 lit. e or f GDPR (Art. 21 GDPR).
8. Right to withdraw consent
If you have consented to the processing by the controller by means of a corresponding
declaration, you can revoke your consent at any time for the future. The legality of the data
processing carried out on the basis of the consent until the revocation is not affected by
this.
This privacy policy was created with the support of DataGuard.
This privacy policy was created with the support of DataGuard.
