General Privacy Policy
Scope
This General Privacy Policy addresses information we collect in connection with your use of Websites and social media pages that link to this General Privacy Policy, your interactions with cormeo during in-person meetings at cormeo facilities or at cormeo events, and in the context of other online or offline sales and marketing activities.
This General Privacy Policy applies to the processing of personal data by cormeo of:
- customers and prospects of cormeo and their employees and representatives
- suppliers and business partners and their employees and representatives
- visitors and users of the cormeo website (cormeo.com) and our social media pages
- attendees of cormeo webinars and other events
- subscription to cormeo newsletter
- registration to cormeo Customer Portal
- participants in cormeo publications such as case studies.
This privacy policy does NOT apply to the following activities:
- Personal data processed by cormeo to provide software services in the cloud, technical support, consulting, or other professional services. In such case, cormeo process personal data on behalf of the customer, acting as a processor as defined under Art.28 GDPR. If you are a customer of any of the services provided by cormeo, please refer to the Data Processing Agreement which is incorporated to our contract with customers, or send a request to privacy@cormeo.com.
Identity and address of the Controller and DPO
The controller for the purposes of the General Data Protection Regulation (GDPR) is:
cormeo GmbH
Carl-Bertelsmann-Str. 270
33335 Gütersloh, Germany
Phone: +49 89 189454-0
cormeo's Global Data Protection Officer is happy to help with questions or inquiries.
Email: privacy@cormeo.com
General Information on data processing
The processing activities carried out by cormeo and their related purposes and legal basis can be categorized as follows: XXXXXXXXX
Additional Information about the processing
Retention period and deletion of data
Your personal data will be deleted or locked once you withdraw consent or as soon as the purpose of storage no longer applies. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Data will also be locked or deleted if a storage period prescribed by the aforementioned standards expires unless there is a need for further storage of the data for the conclusion or performance of a contract. The exact retention period will thus depend on the categories of personal data.
Existence of automated decision-making
We do not use automatic decision-making or profiling.
Data subject rights
You have the following data protection rights, which you can exercise by contacting us using the details below:
- The right to withdraw your consent at any time, and to change your initial decision regarding the acceptance of statistics and marketing cookies on this website (see Cookie Policy).
- The right to access, correct, update or request deletion of your personal information.
The right to object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. - The right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. Alternatively, you can indicate your marketing preferences for email, phone, and postal marketing during registration or at any time by contacting us using the contact details provided below.
- The right, if we have collected and processed your personal information with your consent, to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- The right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
Right to lodge a complaint with the supervisory authority
As data subject, you have the possibility of lodging a complaint to the National Supervisory Authority. Please find below the contact details of the German National Supervisory Authority.
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Telefon: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de
Cookie Policy and Social Media
To be able to provide media services you expressly requested, we also consider the regulations in Section 25 TTDSG and on absolute necessity in accordance with Section 25 (2) No. 2 TTDSG.
To ensure the functionality of our services, we process your data based on our legitimate interest (Art. 6 para. 1 p.1 lit. f) GDPR) by:
- Storing and/or retrieving information on a device
- Ensure security, prevent fraud, and correct errors
- Provide content technically
- Receive and use automatically sent device properties for identification purposes
In the case of cookies that are not required, the legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR. The following Cookie Categories are used:
Analytics/Statistics: These cookies collect information about how you use our website, which pages you visited the most and which links you clicked on. These cookies are aggregated data, therefore anonymized and you cannot be identified. The purpose is to improve the website functions and will include third-party analytics services. Cookies from Google Analytics and Tag Manager help cormeo to evaluate visitors’ behavior on the website, e.g., which pages are visited (see “Use of web analytics services: Google Analytics and Google Tag Manager” below).
Marketing: These cookies track your online activity to help us deliver more relevant advertising. Cookies from Hubspot allow us to personalize marketing activities for customers (see Data protection provisions about Hubspot below).
Advertisement: These cookies help us provide you with personalized and relevant advertising and track the effectiveness of related promotional activities.
cormeo offers you the possibility, within the framework of consent management ("cookie banner"), to decide on the setting of cookies according to your specifications. Furthermore, already set cookies may be deleted at any time via the Internet browser used or by other software programs.
Change your initial decision regarding the acceptance of statistics and marketing cookies on this website.
You can update your cookie preferences by clicking on the button below.
Use of web analytics services: Google Analytics and Google Tag Manager
- about the website from which a person has come (the so-called referrer),
- which sub-pages were visited,
- how often and for what duration a sub-page was viewed.
Google Inc.,
1600 Amphitheatre Pkwy,
Mountain View, CA 94043-1351,
United States.
Anonymization function: cormeo uses the application "_gat. _anonymizeIp" for web analytics through Google Analytics. By means of this application, your IP address is abridged by Google and anonymized when accessing our websites from a Member State of the EU/EEA.
Opt-Out from Google Analytics: you can also opt-out from this service in the „Privacy Check Out“ of Google. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on your device.
Further information and the applicable data protection provisions of Google can be found under the Google Privacy Policy and the Google Analytics Terms of Service
Use of Google Tag Manager
Use of Google Ads
Google Ads allows an advertiser to pre-define specific keywords, with the help of which an ad on Google's search results is only then displayed when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google Advertising Network, the ads are distributed on relevant web pages using an automatic algorithm, considering the previously defined keywords.
If a data subject reaches our website via a Google Ad, a conversion cookie is filed on the information technology system of the data subject through Google. The definition of cookies is explained above. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. If the cookie has not expired, the conversion cookie is used to check whether certain sub-pages, e.g., the shopping cart from an online shop system, were called up on our website. Through the conversion cookie, both Google and the controller can understand whether a person who reached an Ads ad on our website generated sales, that is, executed or canceled a sale of goods.
The data and information collected using the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are used to determine the total number of users who have been served through Google Ads to ascertain the success or failure of each Google Ads ad and to optimize our Ads in the future. Neither our company nor other Google Ads advertisers receive information from Google that could identify the data subject.
The conversion cookie stores personal information, e.g., the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass this personal data collected through the technical procedure to third parties.
The data subject may, at any time, prevent the setting of cookies by our website, as stated above, by means of a corresponding setting of the Internet browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the information technology system of the data subject. In addition, a cookie set by Google Ads may be deleted at any time via the Internet browser or other software programs.
The data subject has a possibility of objecting to the interest-based advertisement of Google. Therefore, the data subject must access from each of the browsers in use the link www.google.de/settings/ads and set the desired settings.
Further information and the applicable data protection provisions of Google may be retrieved at https://www.google.com/intl/en/policies/privacy/.
The operating company of Google Ads, Google Tag Manager, and Google Analytics is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.
Use of LinkedIn
With a call-up to one of the individual pages of this website on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the system of the data subject is automatically prompted to download a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed at https://developer.linkedin.com/plugins. During this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject - and for the entire duration of their stay on our website - which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.
LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.
LinkedIn provides, under https://www.linkedin.com/psettings/guest-controls, the possibility to unsubscribe from e-mail messages, SMS messages, and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy for LinkedIn is available at https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available at https://www.linkedin.com/legal/cookie-policy.
Use of YouTube
With a call-up to one of the individual pages of this website on which a YouTube component (YouTube video) was integrated, the Internet browser on the system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained at https://www.youtube.com/yt/about/en/. During this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our website was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google will receive information through the YouTube component that the data subject has visited our website if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.
YouTube's data protection provisions, available at www.google.com/intl/en/policies/privacy/, provide information about the collection, processing, and use of personal data by YouTube and Google.