You can generally use our website www.comix.de (hereinafter referred to as "the website") without providing any personal data. However, if a user or an individual wants to avail themselves of services through our website, processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we will obtain consent from the affected person. The processing of personal data (e.g., name, address, email address of an affected person) always takes place in accordance with the General Data Protection Regulation (GDPR) and in compliance with the specific data protection regulations applicable to us.
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection regulations, is:
COMIX Software GmbH Wagnerstraße 8, 80802 Munich, Germany Phone: +49.8105.7786-0 Email: firstname.lastname@example.org
Managing Director: Peter Wartelsteiner Commercial Register: Local Court of Munich, HRB 93810
Scope of Personal Data Processing We generally process personal data of our users only to the extent necessary for providing a functional website and our services. The processing of personal data of our users usually occurs with their consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of data is permitted by statutory provisions.
Legal Basis for Personal Data Processing If we obtain the consent of the data subject for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for processing.
Information about the browser type and version The user's operating system The internet service provider of the user The IP address of the user Date and time of access Websites from which the user's system accesses our website Websites accessed by the user's system through our website This data is stored in log files by our system. The IP addresses of the user or other data that allows attribution to a user are not affected. This data is not stored together with other personal data of the user.
Legal Basis for Data Processing The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
Purpose of Data Processing The temporary storage of the IP address by the system is necessary to deliver the website to the user's device. For this purpose, the IP address of the user must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, the data serves to optimize the website and ensure the security of our information technology systems. No evaluation of this data for marketing purposes takes place in this context.
Our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR lies in the stated purposes. Under no circumstances do we use the collected data to draw conclusions about the data subject.
In the case of data stored in log files, this happens after seven days at the latest. Further storage is possible. In this case, the IP addresses of users are deleted or distorted so that assignment to the accessing client is no longer possible.
Title, First name, Last name, Company A valid email address Address Telephone number (landline and/or mobile) Additionally, the following data is collected during the registration:
bb) If you purchase goods on our website and provide your email address, it may be used by us to send newsletters. In such a case, the newsletter will only contain direct advertising for our own similar goods or services.
cc) The data will not be passed on to third parties in connection with the data processing for the newsletter distribution. This data will be used exclusively for sending the newsletter.
bb) The legal basis for sending the newsletter as a result of the sale of goods or services is § 7(3) of the German Unfair Competition Act (UWG).
Purpose of Data Processing The collection of the user's email address is for delivering the newsletter. The collection of other personal data during the registration process is to prevent misuse of the services or the email address used.
Duration of Storage aa) The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The user's email address will be stored as long as the subscription to the newsletter is active.
bb) If the newsletter is sent based on the user's registration on the website, the other personal data collected during the registration process will generally be deleted after a period of seven days.
bb) If the newsletter is sent based on the user's registration on the website or the use of a contact form, the revocation of consent for the storage of personal data collected during the registration process is also possible.
The following data may be collected in individual cases during the registration or sign-up process:
Title First name, Last name, Company A valid email address Address Telephone number (landline and/or mobile) At the time of registration, the following data is also stored:
User's IP address Date and time of registration During the registration process, the user's consent to the data processing is obtained.
bb) If the registration is for the fulfillment of a contract in which the user is a party or for the implementation of pre-contractual measures, the additional legal basis for data processing is Art. 6(1)(b) of the GDPR.
bb) The registration may also be necessary to fulfill a contract with the user or to carry out pre-contractual measures. The collection of this data is particularly for the following purposes:
To identify you as our customer; To process, fulfill, and execute your order; To correspond with you; For billing purposes; For handling any liability claims and asserting any claims against you; To ensure the technical administration of our website; To manage our customer data; For direct advertising purposes.
If the registration does not lead to the conclusion of a contract with the user, this applies to the data collected during the registration process when the registration on our website is canceled or modified.
If the registration serves the conclusion of a contract with the user or is for the execution of pre-contractual measures, this applies to the data collected during the registration process for the execution of a contract or the implementation of pre-contractual measures when the data is no longer required for the performance of the contract. Even after the conclusion of the contract, there may be a need to store the personal data of the contracting party to comply with contractual or legal obligations. Continuing obligations require the storage of personal data for the duration of the contract. For sales contracts, warranty periods must be observed. In addition, data storage also serves tax purposes. The storage periods required for this cannot be determined in a generalized way but must be determined for each contract and contracting party on a case-by-case basis.
If the registration serves the conclusion of a contract with the user, and the data is necessary for the fulfillment of a contract or the implementation of pre-contractual measures, the premature deletion of the data is only possible to the extent that there are no contractual or legal obligations opposing the deletion.
If a user takes advantage of this option, the data entered into the input mask of the contact form will be transmitted to us and stored. This data includes:
Title, First Name, Last Name, Company A valid email address Address Phone number (landline and/or mobile) At the time of sending the message, the following data will also be stored:
If a user contacts us via the provided email address, the personal data transmitted with the email will be stored.
There is no disclosure of this data to third parties. The data is exclusively used for processing the communication.
The legal basis for processing data transmitted via email is Art. 6(1)(f) of the GDPR. If the email contact aims at concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) of the GDPR.
Purpose of Data Processing The processing of personal data from the input mask solely serves the purpose of processing the contact request. In the case of contact via email, there is also a legitimate interest in processing the data for handling the communication. The other personal data processed during the submission process serves to prevent misuse of the contact form and ensure the security of our information technology systems.
Duration of Storage The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data entered into the input mask of the contact form and the data sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when the circumstances indicate that the matter in question has been conclusively resolved.
The additional personal data collected during the submission process will be deleted after a period of seven days.
If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
To exercise the right to object or revoke consent, please follow the instructions on the website.
We may disclose your personal data to third parties, specifically to the payment service provider engaged for payment processing in the context of contract fulfillment. In such cases, the scope of transmitted data is limited to the necessary minimum. The legal basis for this disclosure is Art. 6(1)(b) of the GDPR.
If you choose to make a payment via PayPal, credit card, debit card, or instant bank transfer (Sofortüberweisung), we will share your payment data with the payment service provider as part of the payment processing.
The transmission of your personal data to a payment service provider for any purpose other than the fulfillment of contractual obligations does not occur.
Except in the cases mentioned above (registration for the members' area, subscription to a newsletter, etc.), we only disclose your personal data to third parties if:
You have given your explicit consent in accordance with Art. 6(1)(a) of the GDPR, It is necessary for the performance of a contract with you in accordance with Art. 6(1)(b) of the GDPR, There is a legal obligation to disclose the data in accordance with Art. 6(1)(c) of the GDPR.
The transmission of personal data to a third country (outside the EU) or an international organization is excluded.
We use social plugins (plugins) from various social networks. These plugins are identifiable by their respective logos.
If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the rights described below towards the data controller as set forth above and below.
You can exercise your rights as a data subject through the contact information provided in section I.
If such processing is being carried out, you can request the following information from the data controller:
The purposes for which the personal data is being processed; The categories of personal data that are being processed; The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed; The planned duration of storage of the personal data concerning you or, if specific information about this is not possible, the criteria used to determine the storage period; The existence of the right to rectification or erasure of personal data concerning you, the right to restrict processing by the data controller, or the right to object to such processing; The right to lodge a complaint with a supervisory authority; All available information on the origin of the data if the personal data concerning you was not collected from you; The existence of automated decision-making, including profiling, according to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you as the data subject. You have the right to obtain information as to whether the personal data concerning you will be transferred to a third country or an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with such transfer.
Right to Rectification You have the right to obtain from the data controller without undue delay the rectification and/or completion of personal data concerning you if it is inaccurate or incomplete.
Right to Restriction of Processing Under the following conditions, you can request the restriction of processing of personal data concerning you:
If you contest the accuracy of the personal data concerning you for a period that enables the data controller to verify the accuracy of the personal data; If the processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of its use; If the data controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims, or If you have objected to processing pursuant to Article 21(1) of the GDPR, pending the verification whether the legitimate grounds of the data controller override your interests. If the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted according to the above conditions, you will be informed by the data controller before the restriction is lifted.
The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed. You withdraw your consent on which the processing was based according to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal ground for the processing. You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR. The personal data concerning you has been unlawfully processed. The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the data controller is subject. The personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR. b) Information to Third Parties Where the data controller has made the personal data concerning you public and is obliged pursuant to Article 17(1) of the GDPR to erase it, the data controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, that personal data.
c) Exceptions The right to erasure does not apply to the extent that processing is necessary
for exercising the right of freedom of expression and information; for compliance with a legal obligation that requires processing under Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller; for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR; for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or for the establishment, exercise, or defense of legal claims.
You have the right to be informed about those recipients by the data controller.
The processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and The processing is carried out by automated means. In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one data controller to another, where technically feasible. This must not adversely affect the freedoms and rights of others.
The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
In the case of logging into the password-protected area, only temporarily valid session cookies are used in the browser's main memory, which are lost after closing the browser. These session cookies do not contain an IP address, and therefore, it is not possible to trace or identify visitors through these temporary session cookies.
To register in the password-protected area, we require your name, first name, and email address. The user data is stored on the web server, and access to the data is exclusively encrypted via https. After registration, you will be prompted to confirm the registration via email to the provided email address. After confirmation, you can access further information in the password-protected area, such as price lists.
The legal basis for processing personal data using cookies is Article 6(1)(f) of the GDPR.
Setting the cookie is necessary to ensure that only authorized individuals have access to the password-protected area without us having knowledge of which specific persons are accessing it. We require your data to verify whether you are entitled to access the protected area, especially as this area is intended for commercial customers, including existing customers and interested parties. Our legitimate interest in processing personal data lies in these purposes, according to Article 6(1)(f) of the GDPR.
The data provided during registration will be deleted after the purpose has been achieved. This is the case when we assume that you no longer wish to access the protected area.
Access to the protected area can be terminated by the user at any time. To do this, please contact us using the contact information provided in the imprint or via email at email@example.com. This will also allow for the revocation of consent for the storage of personal data collected during the registration process.