Source: http://mail.comforte.info/privacy-policy/
Timestamp: 2019-04-22 08:29:06+00:00

Document:
comforte AG takes the protection of your personal data seriously and has implemented the according legal provisions of the General Data Protection Regulation ("GDPR") and the Federal Data Protection Act (“BDSG”). For this reason, we would like to inform you to what extent and for what purpose our website processes your personal data.
With regard to further definitions in accordance with the GDPR, we refer to Art. 4 GDPR.
Personal data of the respective users will only be processed, if this serves the functionality of the website and is necessary for the provision of the contents and services. In accordance with the data protection principle of the prohibition with reservation of permission, we only process personal data that has either been provided with the user's prior consent or such consent is not possible for factual reasons and the statutory provisions permit the processing of personal data.
The central legal basis for the processing of personal data is Art. 6 Sec. 1 GDPR. Reference is made to this permission standard within the framework of this data protection declaration, insofar as this is necessary.
According to Art. 21 Sec. 1 GDPR, you can revoke your consent to the processing of your data at any time with effect for the future, insofar as you have given your consent when accessing the website. If we base the processing of your personal data on the weighing of interests, you may object to the processing.
The user's personal data will always be deleted if the purpose of storage no longer exists. An exception to this is when the European or national legislator has provided for the storage of data in EU regulations, laws or other provisions to which the person responsible is subject. In addition, personal data will be deleted when the intended storage period has expired, unless there is a legal requirement to do so.
The relevant legal basis for the temporary storage of data and log files is Art. 6 Sec. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this, the IP address of the user must remain stored for the duration of the session.
Our legitimate interest in data processing pursuant to Art. 6 Sec. 1 lit. f GDPR also lies in these purposes.
The storage of this data is limited to the duration of the user's session on our site when the website is made available, so that this data is deleted when the user leaves the site.
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or distorted so that an assignment of the calling user is no longer possible.
In addition, when cookies are used, a differentiation must be made between necessary and unnecessary cookies. Necessary cookies are those that are necessary for the provision and maintenance of the website and do not require separate consent. If, however, cookies are not necessary, i.e. those that are not absolutely necessary, we obtain the explicit consent of the user in accordance with the data protection regulations.
The following list shows the cookies used by us and our processors Hubpsot Inc. and Google Analytics.
Purpose: This cookie can be set to prevent the tracking code from sending any information to HubSpot. Setting this cookie is different from opting out of cookies, which still allows anonymized information to be sent to HubSpot.
Purpose: This cookie is used to test whether the visitor has support for cookies enabled.
Purpose: This cookie is used to consistently serve visitors the same version of an A/B test page that they’ve seen before.
Purpose: This cookie is used to consistently redirect visitors to the language version of a page in the language they’ve selected on this top-level private domain in the past (if such a language version exists).
Purpose: When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login. The cookie name is unique for each password-protected page.
Purpose: When you dismiss the welcome message in your messages tool, a cookie is set to prevent it from appearing again for one day.
Purpose: The main cookie for tracking visitors. It contains the domain, utk (see below), initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).
Purpose: This cookie is used for to keep track of a visitor's identity. This cookie is passed to HubSpot on form submission and used when de-duplicating contacts.
Purpose: This cookie keeps track of sessions. This is used to determine if we should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp.
Purpose: Whenever HubSpot changes the session cookie, this cookie is also set. We set it to 1 and use it to determine if the visitor has restarted their browser. If this cookie does not exist when we manage cookies, we assume it is a new session.
Purpose: This cookie is used to recognize visitors who chat with you via the messages tool. If the visitor leaves your site before they're added as a contact, they will have this cookie associated with their browser. If you have a history of chatting with a visitor and they return to your site later in the same cookied browser, the messages tool will load your conversation history with that visitor.
In the register process, your consent is obtained for the processing of the data and reference is made to this data protection declaration. Furthermore, we use the double-opt-in procedure in terms of data protection regulations.
In the context of data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.
The legal basis for the processing of personal data is after registration and the user's consent to receive the newsletter Art. 6 Sec. 1 lit. a GDPR.
The subscription to the newsletter can be revoked by the user concerned at any time. It is sufficient that the user informs us under the mail info@comforte.com that he does not want to receive any more newsletters.
In the framework of the registration process, the user's consent to the processing of this data will be obtained.
The legal basis for the processing of data is Art. 6 Sec. 1 lit. a GDPR if the user has given his consent.
The user has the right to revoke his consent of processing the personal data at any time. If the user wishes to revoke his consent, he has to contact us via e-mail (info(at)comforte.com) with the corresponding content. In such a case, a further conversation might not possible anymore.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Sec. 1 lit. f GDPR.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been finally clarified and no further contact is necessary for the user.
To assert the objection or the request for removal, all you need to do is send an e-mail to info@comforte.com with the corresponding content. All personal data stored in the course of contacting us will be deleted in this case.
The IP address of the user's invoking system.
The processing of users' personal data enables us to analyze the surfing behavior of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website, its user-friendliness and to offer our users the best possible service. For these purposes, it is also in our legitimate interest to process the data in accordance with Art. 6 para. 1 lit. f GDPR. By anonymizing the IP address, users' interest in protecting their personal data is sufficiently taken into account.
The user has the possibility to object to the processing of this personal data at any time by writing us an corresponding e-mail.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies” (see above), which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. In case of the IP de-personalization process being activated on this website, your IP address will be shortened by Google within the member states of the European Union or in other member states of the European Economic Area. Only in exceptional cases shall the full IP address be transmitted to a Google server in the USA and shortened there. For the cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
The legal basis for processing users' personal data is Art. 6 Sec. 1 lit. f GDPR.
The processing of personal data via customer satisfaction surveys and their analysis serves the purpose that we can offer the customer a constantly improved service. Our ambition is to offer the customer the best possible service. For this reason, it is very important to us that the customer's opinion is expressed as stated in the customer survey.
The user has the option to object to the processing of this personal data at any time by writing us a corresponding email.
The processing of users' personal data enables us to analyze the surfing behavior of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, it is also in our legitimate interest to process the data in accordance with Art. 6 Sec. 1 lit. f GDPR. By anonymizing the IP address, users' interest in protecting their personal data is sufficiently taken into account.

References: Art. 4
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6