Privacy policy

With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter “data”).

1. Responsible for data processing

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

iComply GmbH
Große Langgasse 1A, DE-55116 Mainz
Telefon +49 6131 27626 80, E-Mail kontakt@iwhistle.de

2. Contact details of our data protection office

Matthias Rosa
RMPrivacy GmbH
Am Winterhafen 78
DE-55131 Mainz

E-Mail: datenschutz@icomply.de

3. General information on data processing

In the course of our business and website operations, we process data.

This also includes disclosure by transfer to third parties and, if applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.

4. Data processing

The individual data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:

4.1 Website visit log file

We log your website visit. In doing so, we process:

  • Name(s) of our accessed website(s),
  • Date and time of retrieval,
  • the amount of data transferred,
  • the browser type and version,
  • the operating system you are using,
  • the referrer URL (the previously visited website),
  • your IP address
  • the requesting provider.

The legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website pursuant to Art. 6 (1) f) GDPR.

The log file is deleted after seven days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period.

4.2 Hosting

To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.

The legal basis for data processing is our overriding legitimate interest in the provision of our website pursuant to Art. 6 (1) f) GDPR.

4.3 Contacting

If you contact us, we process the following data from you for the purpose of processing and handling your request: Name, contact details – if provided by you – and your message.

The legal basis of the data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) GDPR.

4.4 Use of cookies

We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.

Information about the specific cookies we use, their providers and purposes can be found in our Consent-Banner website. There you give your consent to the respective services, can revoke it or adjust your settings subsequently.

Our Consent-Banner Cookiebot

In order to document your choices regarding certain data processing operations that use cookies and, in case of your consent, to communicate them to the respective third party providers, we use on our website the service “Cookiebot”, Cybot A/S. Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cybot”).

By making a choice about the cookies used via the cookie consent provided, the following data is automatically logged with Cybot:

  • The IP number of the end user in anonymized form (the last three digits are set to ‘0’).
  • Date and time of consent.
  • User agent of the end user’s browser.
  • The URL from which the consent was sent.
  • An anonymous, random and encrypted key.
  • The consent status of the end user, which serves as proof of consent.

The key and consent status are stored in your browser in the cookie “Cookie Consent” so that our website can automatically read and follow your settings in all subsequent page requests and future end-user sessions for up to 12 months. The key is used for proof of your consents or settings and for an option to verify that the consent status stored in your browser is unchanged from the original consent submitted to Cybot.

The data processing is carried out to fulfill our legal obligation to process data in accordance with Art. 6 para. 1 c) GDPR.

4.5 External content

We use dynamic content (“Content”) from third parties to optimize the presentation and the offer of our website. When visiting the website, a request is automatically made to the server of the respective content provider by means of an interface, during which certain log data (e.g. the user’s IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.

We use external content in connection with the following functionalities:

4.5.1 Google Fonts

To make visiting our website attractive, we use external fonts from Google Fonts. These are loaded from servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) when you visit the site. Google does not store any cookies in your browser in the process. According to our information, however, the IP address of the user’s terminal device is transmitted to Google and stored. This processing takes place on the basis of our overriding legitimate interest in the optimal marketing of our offer in accordance with Art. 6 para. 1 f) GDPR.

It cannot be ruled out that a data transmission to Google- LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA takes place.

There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. Please contact datenschutz@icomply.de for this purpose.

4.5.2 Google Maps

We use the map service “Google Maps” from Google on our website to provide you with an interactive map. When displaying the map, data including your IP address and your location are transmitted to Google servers and stored there. This processing takes place due to our overriding legitimate interest in the optimal marketing of our offer according to Art. 6 para. 1 f) GDPR.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) is responsible for data processing for Maps. It cannot be ruled out that a data transfer to Google- LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA takes place.

There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. Please contact datenschutz@icomply.de for this purpose.

5. Duration of data storages

We store personal data only as long as it is necessary for the purposes for which it is processed or if you have revoked your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.

6. Your data subject rights
6.1 Information

Upon request, you will receive information free of charge at any time about all personal data that we have stored about you.

6.2 Correction, deletion, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) in response to a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future. You have the right to object in particular in cases where your data is required due to the performance of a task that is in the public interest or in our legitimate interest, as well as profiling based on this. You also have such a right of objection in the event of data processing for the purpose of direct advertising.

6.3 6.3 Right of revocation for consents with effect for the future

You can revoke consents granted at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.

6.4 Data portability

If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or with the help of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine- readable format so that you can transfer the data to another responsible party upon request.

6.5 Restriction of processing

Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.

6.6 Exercise of your data subject rights and right of appeal

If you have any questions regarding the processing of your personal data, if you wish to obtain information, correct, block, object to or delete data, or if you wish to have your data transferred to another company, please contact kontakt@icomply.de.

You also have the possibility to complain to a supervisory authority about your data protection rights.