Source: https://bpcompass.com/privacy
Timestamp: 2019-04-23 12:30:43+00:00

Document:
The protection of personal data is an important issue to us. We process your personal data in compliance to applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act („Bundesdatenschutzgesetz“, BDSG). With the following statement, we inform you about the processing of personal data in connection with the use of our website.
When visiting our website www.bpcompass.com, the browser used on your device automatically sends information to the website’s server, including IP-address, date and time of visit, name and URL of the requested site, the website that linked on the source being requested (referrer-URL), the browser and the operating system being used and possibly your access provider. This information is stored temporally in a log-file. We process this data for the purposes of a trouble-free connection establishment to our website, the optimization of the website presentation (adjusted to your device) as well as the evaluation of system security and stability and further administrative purposes, without any conclusions being drawn to your person. The legal basis for the processing is our legitimate interest in these purposes (Art. 6(1)1 lit. f GDPR).
We will only transmit your personal data to third parties, if you have given consent to the transmission (Art. 6(1)1 lit. a GDPR), the transmission is necessary for the performance of a contract with you as permitted by law (Art. 6(1)1 lit. b GDPR) or if the transmission is necessary for compliance with a legal obligation to which bpcompass is subject (Art. 6(1)1 lit. c GDPR).
In the visit of our website, small pieces of data are automatically placed on your device by your browser (Cookies). These Cookies include information in connection with your device without disclosing your identity in any way.
The purpose of Cookies is to technically optimize our website and to make your visit more comfortable i.e. by saving your adjustments made on our website, so you won’t have to enter your information again in the event of a new visit. Furthermore, Cookies are used for statistical coverage for the purpose of the website’s optimization. This processing is necessary for the purpose of our legitimate interest in the optimization of our website (Art. 6(1)1 lit. f GDPR).
Cookies are being automatically deleted after a determined period. You can disable the placement of Cookies in general in the browser settings. As a result of disabling Cookies, the use of our website may be affected.
The generated Cookies contain device-related information such as browser type and browser version, the operating system, the referrer-URL, the IP-address (anonymized via IP-masking) and the time of the server request. This information is transferred to and stored at a Google server in the USA for the purposes of analysis of the use of our website, further usage-orientated services, market research and website optimization. A transmission to third parties only occurs, if it is prescribed by law (Art. 6(1)1 lit. c GDPR) or if data is processed by a third party on behalf of the controller. The anonymized IP-addresses will under no circumstances be amalgamated with other Google data.
You can prevent the gathering of usage-related data and the processing by Google by using a browser add-on (downloadable under: https://tools.google.com/dlpage/gaoptout?hl=en). Under following link, you can find further information in connection with Google Analytics: https://support.google.com/analytics/answer/6004245?hl=en.
According to Art. 15 GDPR, you have the right to obtain information to your personal data processed by us. This includes the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request from us rectification, erasure or restriction of processing and the right to object, the right to lodge a complaint with a supervisory authority, where the personal data are not collected from us, any available information as to their source as well as the existence of automated decision-making, including profiling and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.
According to Art. 16 GDPR, you have the right to obtain the rectification of completion of inaccurate personal data processed by us concerning your person without undue delay.
According to Art. 17 GDPR, you can demand the erasure of your personal data processed by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interests or for the establishment, exercise or defense of legal claims.
Art. 18 GDPR gives you the right to demand restriction of processing of your personal data as far as the accuracy of the personal data is contested by you, the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, we no longer need the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR.
According to Art. 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to demand transmission of this data to another controller.
According to Art. 7(3) GDPR, you can withdraw your consent at any time. As a result, we must not continue the processing based on the consent, but the withdrawal of consent does not affect the lawfulness of processing based on consent before your withdrawal.
According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, which will usually be in the Member State of your habitual residence or place of work or of our place of business.
We implement appropriate state-of-the-art technical and organizational measures in order to meet the requirements of the data protection rules and to protect personal data from manipulation, loss, unauthorized access by third parties or similar. These measures include the SSL-encryption of our website (which can be identified by the symbol of a locked padlock within the status bar of your browser). If supported by your browser, a 256-bit-encryption is being used. Otherwise, we rely on 128-bit-v3-technology.
As a result of a further development of our website or amended legal or regulatory requirements, a modification of this statement may be necessary. You can find the statement as amended under following link.

References: Art. 15
 Art. 16
 Art. 17

Art. 18
 Art. 21
 Art. 20
 Art. 7
 Art. 77