1. General information and principles of data processing
Scope of processing of personal data
We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users takes place regularly only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
Insofar as processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
Data erasure and storage period
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject.
2. Responsible entity
The responsible party (Controller) within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
ComplyMarket GmbH
Leopoldstraße 244
80807 Munich
Germany
Email: info@complymarket.com
3. Data Protection Officer
Our designated Data Protection Officer is available for any privacy-related inquiries:
Data Protection Officer
ComplyMarket GmbH
Leopoldstraße 244
80807 Munich
Germany
Email: privacy@complymarket.com
4. Provision and use of the website / server log files
Type and scope of data processing
Every time you access our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user's Internet service provider
- The IP address of the user
- Date and time of access
- Websites from which the system of the user reaches our website
- Websites accessed by the user's system through our website
Legal basis and purpose
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. Temporary storage of the IP address by the system is necessary to enable delivery of the website to the computer of the user. The storage in log files is done to ensure the functionality of the website and to secure our information technology systems.
Storage duration
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for providing the website, this is the case when the respective session has ended.
5. Data collection for the implementation of pre-contractual measures and for the fulfillment of the contract with you
Type and scope of data processing
We collect personal data when you voluntarily provide it to us in the context of your order, when contacting us (e.g., via contact form or email), or when opening a customer account. Required fields are marked as such because we strictly need the data for contract processing or processing your contact request.
Legal basis and purpose
The legal basis for processing this data is Art. 6 para. 1 lit. b GDPR (contract performance and pre-contractual requests). We use the data provided by you to process contracts and handle your inquiries.
Data retention
After complete execution of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of tax and commercial retention periods, unless you have expressly consented to further use of your data.
6. Recruiting Privacy Statement
Type and scope of data processing
We process applicant data for the purpose of processing application procedures. This includes personal details, contact data, application documents (CV, certificates, cover letter, etc.). Processing can also be carried out electronically (e.g., via email or job portals).
Legal basis
The legal basis for data processing in job application procedures is Art. 6 para. 1 lit. b GDPR (initiation of an employment contract) in conjunction with local legal employment regulations.
Retention and deletion
If an employment contract is concluded, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If no employment contract is concluded, the application documents will be deleted automatically 6 months after notification of the rejection decision, provided no other legitimate interests of the controller oppose deletion.
7. Online Store
Type and scope of data processing
When you place an order in our online store, we collect and process the personal data you provide during the ordering process (such as name, billing address, shipping address, payment details, email address, and phone number).
Legal basis and purpose
The processing of this data is necessary for the fulfillment of the purchase contract concluded between you and ComplyMarket GmbH pursuant to Art. 6 para. 1 lit. b GDPR. We pass on your payment data to the authorized credit institution or payment provider commissioned with the payment process.
8. Compliance evidence
Documentation and record-keeping
We maintain records of processing activities in accordance with GDPR requirements (Art. 30 GDPR). This documentation helps us demonstrate compliance with privacy laws and regulations to supervisory authorities upon request.
Legal basis
The legal basis for maintaining compliance evidence and audit logs is Art. 6 para. 1 lit. c GDPR (fulfillment of legal obligations to which the controller is subject).
9. Registration option
Type and scope of data processing
On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask, transmitted to us, and stored. The registration process requires data such as your name, corporate email address, password, company name, and job role.
Legal basis and purpose
The registration of the user is required for the fulfillment of a contract with the user or for carrying out pre-contractual measures (Art. 6 para. 1 lit. b GDPR), as well as for providing user access to restricted compliance features.
10. Contact form
Type and scope of data processing
A contact form is available on our website which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and saved. This data usually includes: Name, email address, company, and message text.
Legal basis
The legal basis for processing the data transmitted in the course of sending a contact request is Art. 6 para. 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 lit. b GDPR if the contact aims at concluding a contract.
11. Contact options by e-mail
Type and scope of data processing
You can contact us via the provided email address (info@complymarket.com). In this case, personal data transmitted with the email (including your email address, header information, and message body) will be stored for processing the conversation.
Legal basis
The processing of data transmitted in the course of sending an email is based on Art. 6 para. 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis is Art. 6 para. 1 lit. b GDPR.
12. Application possibility
Type and scope of data processing
We offer the possibility to apply for advertised positions or unsolicited inquiries via our website application portal or direct contact links. Applicant data is stored separately and accessible only to authorized HR personnel and relevant hiring managers.
Legal basis
Data processing during the application process is governed by Art. 6 para. 1 lit. b GDPR and applicable national labor privacy laws.
15. Google Maps
Type and scope of data processing
We use the Google Maps service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on our website to display interactive maps and make it easy to find our office location. When loading maps, data such as your IP address is sent to Google servers.
Legal basis
The legal basis for using Google Maps is Art. 6 para. 1 lit. f GDPR (legitimate interest in presentable office navigation) or your consent pursuant to Art. 6 para. 1 lit. a GDPR via our consent manager.
16. Google reCAPTCHA
Type and scope of data processing
We use the reCAPTCHA service provided by Google LLC on our website forms to distinguish whether input is made by a natural person or abusively by automated processing (bots). This involves sending your IP address and potential interaction data to Google.
Legal basis
The legal basis for using Google reCAPTCHA is Art. 6 para. 1 lit. f GDPR (legitimate interest in protecting our web applications against spam, fraud, and automated abuse).