Privacy policy
Information on the handling of personal data
We are delighted that you are interested in our website – and therefore in our company. The protection of your private rights and freedoms is important to us; we only use your data for the purposes intended. As it is important to us that you know at all times to what extent we collect, use and, if necessary, transfer your data to third parties, we will inform you in detail below about the processing of your personal data collected by us or stored by us. You can generally use our website without providing any data; if there are any exceptions to this for selected services, we will explain these in the following sections. We do not process data without a legal basis without your informed consent. When processing personal data, we strictly adhere to the provisions of the EU General Data Protection Regulation (GDPR) and, where applicable, other data protection regulations.
Name and address of the controller
COMPLEVO GmbH Karsten Friedrich, Stefan Pillasch Franklinstraße 14 10587 Berlin Germany E-mail: kontakt@complevo.de
Website: https://complevo.de/
Name and address of the data protection officer
Mr. Jörg ter Beek Cortina Consult GmbH Hafenweg 24 48155 Münster Germany E-Mail: dsb.complevo@cortina-consult.de
Website: https://cortina-consult.com
Up-to-dateness of the privacy policy
We use the CLOUD DSE service of Cortina Consult GmbH, Hafenweg 24, 48155 Münster, Germany, to ensure that data protection information in connection with the services on our website is always up to date. The content of our privacy policy is hosted on the servers of Cortina Consult and managed centrally. Any necessary changes are implemented promptly by Cortina Consult and displayed immediately via direct integration on our website.
Rights of data subjects
Chapter III of the EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects, which we explain to you below in relation to the processing of your personal data:
Right to information
This requirement applies in particular to information on the following details of data processing:
- Purposes of the processing
- Categories of data
- Recipients or categories of recipients, if applicable
- If applicable, the planned storage duration or the criteria for determining this duration
- Information on the respective right to rectification, erasure, restriction or objection
- Existence of the right to lodge a complaint with a supervisory authority
- If applicable, origin of the data (if not collected from you)
- If applicable, the existence of automated decision-making including profiling, including meaningful information about the logic involved, the scope and the expected effects
- If applicable, (planned) transfer to a third country or international organization
Right to rectification
We will correct any incorrect data immediately if you inform us accordingly.
Right to erasure (right to be forgotten)
If the processing is no longer necessary and one of the following conditions is met:
- Discontinuation of the processing purpose
- Withdrawal of your consent and absence of any other legal basis for processing
- Objection to processing without an important reason to the contrary
- Unlawful processing
- Necessary to fulfill a legal obligation
- Data collection in accordance with Art. 8 para. 1 GDPR
Right to data portability
If it is technically possible and does not affect the rights and freedoms of other persons, we will – at your request – transfer your data to another recipient (controller).
Right to object
If we collect or have collected and process personal data from you (on the basis of Art. 6 para. 1 e or f or Art. 9 para. 2 a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can prove compelling legitimate interests for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for direct marketing purposes, you have the right to object to this processing at any time. This also applies to profiling insofar as it is associated with such direct advertising. You also have the right to object to the processing of your data by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
Automated decisions in individual cases including profiling
If we collect or have collected and process personal data from you, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or if you have expressly consented to the processing. In any case, we will take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.
Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time.
Right to lodge a complaint with a supervisory authority
A list of the competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/DE/Service/Kontakt/Kontaktfinder/kontaktfinder_node.html.
General information on data processing on the website
The following information applies to data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the respective sections.
Information on data security
We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. We have also implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all risks is not possible.
Legal basis of the processing
- We process personal data in accordance with the provisions of the GDPR, depending on the type and purpose of processing, as follows
- Permission: Requirement of the GDPR
- Informed consent: Art. 6 para. 1 a
- Performance of a contract: Art. 6 para. 1 b
- Implementation of pre-contractual measures: Art. 6 para. 1 b
- Fulfillment of legal obligations: Art. 6 para. 1 c
- Protection of vital interests: Art. 6 para. 1 d
- Safeguarding our legitimate interest: Art. 6 para. 1 f
Our legitimate interest
Our legitimate interest as defined in Article 6(1)(f) GDPR is based on the performance of our business activities to maintain our operational capability and secure the employment of our employees.
General deadlines for data erasure
Once the purpose of storage no longer applies, the retention periods are generally at least six or ten years. Data is generally deleted immediately in accordance with our deletion concept, provided that this does not conflict with a retention obligation, necessity for contract fulfillment or a legitimate interest.
Deletion or blocking of personal data
We only store your personal data for the period required to fulfill the specified purpose. Once the purpose no longer applies and any retention periods have expired, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.
Collection of general data and information
As soon as you visit our website, our web server collects some general data and technical information – as shown in the following table:
| Data collected | Purpose of the collection |
|---|---|
| Browser types and versions used | Correct display of the page content |
| Operating system used, visitor origin (referrer, e.g. Google), subpages clicked on | Optimization of our website content and advertising |
| Date and time of access to the website as well as the IP address and internet service provider of the visitor | Ensuring the permanent functionality of our IT systems (for the operation of the website) and preventing misuse |
| Other data and information for security purposes in the event of attacks | Provision of relevant information for law enforcement authorities in the event of a cyber attack |
Obligation to provide personal data
Under certain circumstances (e.g. due to legal or contractual regulations), you are obliged to provide us with your personal data. Examples of such processing are as follows:
| Nature or purpose of the processing | Necessity |
|---|---|
| Conclusion of a purchase contract (e.g. your address) | Fulfillment of the contractual obligation (e.g. delivery of the goods to your address) |
| In the context of employees (e.g. transmission of data to the tax office) | Compliance with legal requirements (e.g. tax regulations) |
Information about specific data processing on the website
If necessary, in deviation from or in addition to the above general information, you will find below details on the individual data processing on our website.
Applications and application procedure
| Purpose of the processing | Applicant data is collected, processed and used for the purpose of selecting potential employees. |
| Recipient, if applicable (in case of forwarding) | The data will not be passed on to third parties and/or to a third country. |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Forwarding does not take place and is not planned. |
| If known: Duration of data storage | The personal data of applicants whom we do not hire will be stored for the period required for possible legal claims (e.g. under the General Equal Treatment Act (AGG)) (maximum 6 months) and then immediately destroyed or deleted. |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | For a smooth application process, it is necessary that you provide us with the requested information truthfully. |
| Consequences of non-compliance (failure to provide the required data) | Failure to do so (i.e. failure to provide the required data) may mean that an employment contract cannot be concluded with you. |
| Existence of automated decision-making, if applicable | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves; however, it may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Master data, contact data, application data |
| Change of purpose if necessary. | If we take you on as an employee after the application process has been completed, the purpose for processing the relevant data will change: in this case, the data will be used in future to implement and maintain the employment relationship. |
Cookies
We use cookies on this website; these are small text files that are stored on your computer via your Internet browser (e.g. Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g. shopping cart functions, saving your login information), other cookies are used for the security of your data or the website and some cookies can be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID – a unique identifier consisting of a character string that enables websites and servers to be assigned to the storing browser.
Cookies that are necessary to carry out the transmission of a message via a public telecommunications network and cookies that are absolutely necessary to provide you with an expressly requested function are referred to as “technically necessary cookies” and may be set without your explicit consent (Section 25 (2) TTDSG). All other cookies are subject to consent (Section 25 (1) TTDSG); where applicable, regulated by our consent management platform.
We use cookies partly only for the duration of your visit to the website, partly for a predefined period and partly permanently. You can delete all these cookies manually or automatically at any time via your web browser.
It is possible to use our website (although possibly not to its full extent) without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.
Contact form
| Purpose of the processing | Processing and, if necessary, answering the request of the form sender |
| Recipient, if applicable (in case of forwarding) | The data will not be passed on to third parties and/or to a third country. |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Forwarding does not take place and is not planned. |
| If known: Duration of data storage | See General time limits for data erasure |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | There is no obligation. |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Data and categories requested in the respective form. |
| Change of purpose if necessary. | none |
Real Cookie Banner
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/. The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents. The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consent.
