Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Daniel Drury
Hauptstraße 13
57632 Ziegenhain
Germany

Email: mail[@]compass-digital.de

Website: https://compass-digital.de

2. General information on data processing

We process personal data only to the extent necessary to provide our website, respond to enquiries, provide our services, and maintain a secure and functional website.

Personal data means any information relating to an identified or identifiable natural person.

We process personal data in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable German data protection laws.

3. Hosting

This website is hosted by:

STRATO AG
Pascalstraße 10
10587 Berlin
Germany

When you visit our website, STRATO may process technical information automatically transmitted by your browser, including:

IP address
date and time of access
requested pages
browser type and version
operating system
referrer URL

This processing is necessary to ensure the secure and reliable operation of the website.

The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in providing a secure and functional website).

4. Server log files

The hosting provider automatically collects and stores information in server log files.

These logs are used for:

detecting and preventing security incidents,
analysing technical problems,
maintaining website stability.

The data is not merged with other data sources.

Server log data is deleted after a reasonable retention period unless longer storage is required for security or legal purposes.

5. Contact forms and HubSpot

We use HubSpot forms to allow visitors to contact us and submit enquiries.

Provider:

HubSpot, Inc.
2 Canal Park
Cambridge, MA 02141
USA

When you submit a form, we may process the information you provide, including:

name,
email address,
company information,
telephone number (if provided),
message content,
any additional information you voluntarily submit.

The purpose of processing is:

responding to enquiries,
communicating with prospective customers,
managing customer relationships.

The legal basis depends on the nature of the enquiry:

Art. 6(1)(b) GDPR where processing is required to respond to a request related to services,
Art. 6(1)(f) GDPR based on our legitimate interest in managing enquiries,
Art. 6(1)(a) GDPR where you provide consent for marketing communication.

HubSpot processes personal data on our behalf as a service provider.

Data may be transferred to countries outside the European Economic Area. HubSpot uses appropriate safeguards for international transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

Further information:

HubSpot Privacy Policy:
https://legal.hubspot.com/privacy-policy

You may withdraw any consent you have provided at any time by contacting us.

6. Google Analytics

This website uses Google Analytics [GA4 — please confirm].

Google Analytics is a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics uses cookies and similar technologies to analyse website usage.

The following information may be collected:

IP address,
device and browser information,
website usage data,
approximate location information.

Google Analytics is only activated after you have provided consent through our cookie consent system.

The legal basis is Art. 6(1)(a) GDPR.

You may withdraw your consent at any time through the cookie settings.

Google Privacy Policy:

https://policies.google.com/privacy

7. Cookies and consent management

We use Complianz to manage cookie consent.

Complianz ensures that technologies requiring consent are only activated after you have provided permission.

Your consent preferences are stored so that they can be applied during future visits.

The processing is based on:

Art. 6(1)(a) GDPR for consent-based technologies,
§25 TTDSG for storing or accessing information on your device.

You can change or withdraw your cookie preferences at any time through the cookie settings available on this website.

8. Locally hosted fonts

This website uses locally hosted fonts.

No connection is established to external font providers when visiting this website.

Therefore, no personal data is transmitted to third-party font providers through font loading.

9. Data recipients

We only share personal data with third parties where necessary to provide our services or operate our website.

Recipients may include:

hosting provider (STRATO AG),
CRM/form provider (HubSpot),
analytics provider where consent has been provided (Google Analytics).

All service providers are selected with consideration of applicable data protection requirements.

10. Data retention

We store personal data only for as long as necessary for the respective purpose.

Contact enquiries are deleted when the enquiry has been fully processed unless legal retention obligations apply or continued storage is required for business purposes.

11. Your rights under GDPR

You have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

12. Withdrawal of consent

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

13. Data security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, and disclosure.

14. Changes to this privacy policy

We reserve the right to update this privacy policy where our services or legal requirements change.

The current version is always available on this website.