Data protection declaration for respio.com
In the following, we would like to inform you about the processing of your personal data by respio GmbH and your rights under the GDPR.
Overview:
  1. General Information
  1. Website
1. General Information
The controller in accordance with data protection is:
respio GmbH
Konrad-Zuse-Platz 11
81829 München
Germany
phone: +49 89 2000 8313-0
e-mail: info@respio.com​
What data relating to you is processed by us? And for what purposes?
We process your personal data insofar as this is necessary for establishing and fulfilling a contract with you.
This includes general data about you or persons in your company (name, address, contact details, etc.) as well as, if applicable, further data that you provide to us in the context of the contract. In addition, communication data is processed in case you contact us via telephone or e-mail. The data we process depends on your requested or the agreed upon services.
Which data is processed in detail and how it is used depends largely on the requested or agreed services.
Where is the data processed?
The processing of your data takes place in Germany or within the European Union or the states of the European Economic Area. Processing in other countries is only permitted if an adequacy decision of the EU Commission according to Art. 45 (3) GDPR is available or an adequate level of data protection is ensured by other suitable guarantees within the meaning of Art. 46 (2) GDPR.
What is the legal basis for this?
The legal basis for the processing of personal data is generally Art. 6 GDPR, unless more specific legal regulations are applicable. In such a case, the following options are present:
When personal data is required for establishing or fulfilling contractual obligation, the processing is based on Art. 6 (1) lit. b GDPR.
In addition to that, data processing can also take place based on Art. 6 (1) lit. f GDPR. In these cases, processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.
Processing may also be necessary for compliance with a legal obligation to which we are subject. The legal basis in this case is Art. 6 (1) lit. c GDPR.
If you give us consent to process personal data for specific purposes, the data processing is based on Art. 6 (1) lit. a GDPR.
How long will your data be processed and stored?
We process your personal data as long as this is necessary for our business relationship or for the fulfilment of contractual obligations.
In addition, we are subject to various legal obligations, for example the German Commercial Code and the German Fiscal Code.
Finally, the storage period also depends on the limitation periods according to Division 5 of the German Civil Code.
Due to internal and organizational considerations data in backups may still be available for a longer period of time.
To which recipients is the data passed on?
We only pass on your personal data within our company to those areas and persons who need this data to fulfil contractual and legal obligations or for purposes of our legitimate interest.
Your personal data is also processed on our behalf by service providers based on Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation.
Otherwise, data will only be passed on to third parties if this is required by law, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, or if you have given us your consent to do so.
Your rights as a “data subject”
You have the right according to Art. 15 GDPR to obtain information about your personal data processed by us. According to Art. 16 GDPR you have the right to obtain the rectification of inaccurate personal data without undue delay or the completion of your personal data stored with us. You have the right according to Art. 17 GDPR to obtain the erasure of your personal data stored with us and according to Art. 18 GDPR you have the right to obtain the restriction of the processing of your personal data.
According to Art. 20 GDPR you have the right to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format or to obtain the transmission to another data controller.
When your data is processed based on Art. 6 (1) lit. f or e GDPR, you have the right to object to processing on grounds relating to your particular situation pursuant to Art. 21 (1) GDPR.
According to Art. 7 (3) GDPR you have the right to withdraw the consent given to us at any time. This means that in future we may no longer continue to process the data as based on this consent.
You also have the right pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. The address of the data protection supervisory authority which has jurisdiction over us is:
Data Protection Authority of Bavaria:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 27 91522 Ansbach
Objection to data usage for direct marketing purposes
When your data is used for direct marketing purposes, you have the right to object to processing pursuant to Art. 21 (2) GDPR.
After revoking consent or objecting to the use of data for marketing purposes, your data may remain stored in a backlist or to prove the previous existence of consent.
Our data protection officer
We have appointed a data protection officer at our company. You can contact them via the following address:
ComFor-IT® GmbH & Co. KG
Datenschutz
Bahnhofstraße 6
84405 Dorfen
phone: +49 8081-60499-50
e-mail: datenschutz@comfor-it.de
Internet: www.comfor-it.de
2. Website
Processing takes place through the use of our website or when you send us a message.
We take organisational, contractual, and technical security measures in accordance with the state of technology, to ensure that the regulations of the data protection laws are complied with, and to protect the data processed by us against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons.
Unfortunately, not all data transfers via the Internet (email etc) are secure. Therefore, we wish to point out that we cannot guarantee complete protection of personal data if you use these transfer channels.
Data gathering and recording
The following data is transferred to us when you access our website:
  • Date and time of the request
  • Name of the requested site
  • Site from which the sub-site was requested
  • Access status (site transferred; site not found etc)
  • Web browser and operating system used
  • IP-address of the requesting computer
  • Transferred data quantity
The data is stored for reasons connected to technical security in order to prevent attempted attacks against our server. The processing is based on Art. 6 (1) lit. f GDPR.
The personal data collected on our website is stored on the servers of our external service provider. Our service provider processes your data only insofar as this is necessary for the fulfilment of its service obligations and in accordance with our instructions.
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.
Matomo
This website uses the open-source web analysis service Matomo.
Through Matomo, we are able to collect and analyze data on the use of our website-by-website visitors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).
The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.
IP anonymization
For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.
Analysis without cookies
We have configured Matomo in such a way that Matomo will not store cookies in your browser.
Hosting
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.
Getting in touch
When you get in touch with us via email or telephone, the information of the user will be processed in order to respond to the enquiry. The data processing is based on Art. 6 (1) lit. f GDPR if processing is necessary for the purposes of the legitimate interests pursued by our company. If the processing is necessary for the performance of a contract or for pre-contractual measures, the processing is based on Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your request, provided that there are no legal obligations.
Use of cookies
It is possible for us to deposit so-called "cookies" on your computer when you visit our website. Cookies are text files which are received by your Internet browser, and which are stored on your computer.
You can prevent the saving of cookies by setting your browser software accordingly. However, we wish to point out that in such a case, you may not be able to fully use all functions of this website.
There is a difference between so-called session cookies and analysis cookies. Session Cookies, which are essential for the operation of the website, as otherwise the functionality of the website can be restricted, or parts of the website will not work, cannot be blocked. Analysis Cookies, which serve the purpose of analysing user behaviour on the website in order to obtain information concerning number of visitors and to improve the website, can be blocked.