Privacy policy of CCV GmbH

For German version click here. 

The confidentiality and integrity of your personal data is of particular concern to us and forms the basis for a trusting business relationship. We will therefore process and use your data carefully, for the intended purpose or according to your consent and in accordance with the legal provisions on data protection.

With the following information, we inform you about the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Definitions according to Art. 4 GDPR

Personal data: information relating to a living person who can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data or an online identifier.

Processing: an operation relating to personal data, such as collection, recording, organisation, filing, storage, adaptation or alteration, disclosure, or any other use.

Data subject: any identified or identifiable natural person whose personal data are processed by the controller.

Consent: Consent means any freely given and informed unequivocal expression of the data subject's will in a specific case, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.

  1. Who is responsible for the data processing?

This privacy policy applies to data processing by

CCV GmbH

Gewerbering 1

84072 Au in der Hallertau

Germany

and

CCV Group B.V.

Westervoortsedijk 55

6827AT, Arnheim

Netherlands

(we, us and ours) is responsible for and provides websites, online offers and job advertisements. It also applies to free content and services (such as newsletters, online portals and platforms, download and transmission of text, audio, video and image material, even if and to the extent that access to these is provided by mobile devices such as mobile phones or other data storage and/or retrieval devices - hereinafter referred to as "Services" in their entirety or individually).

Unless expressly stated otherwise, CCV GmbH is the responsible party within the meaning of the GDPR.

This privacy policy is also intended to inform you about the way and why we collect your personal data.

For websites of other providers to which reference is made, e.g. via links, the data protection information, and policies there apply. We are not responsible for the content and data processing on the corresponding third-party websites. Parts of the website are provided under the responsibility of CCV Group B.V.

Responsibilities of business customers

If a customer, prospective customer or other user of CCV's services has access to personal information (e.g. if a CCV customer provides CCV with personal data about his or her employees), the customer is considered to be the data controller responsible for the processing and use of this information. This policy does not apply to the processing and use of personal data by customers, interested parties or other users.

  1. Hosting

The web server for the operation of our website is technically operated by:

Hosted Power BV
Gontrode Heirweg 176
9090 Melle (Ghent)
Belgium

 

  1. Summary of our processing activities

In the following summary, the processing activities on our website are briefly described. You will find more detailed information in the sections below.

  • If you visit our website for informational purposes, we collect only limited personal data (see point 6.).
  • Should you wish to contact us, further personal data will be processed in this context (see point 7.).
  • When visiting our business profiles in the social networks, cookies may be used (see point 8. and the Cookie Policy).
  • If you register for one of our services and benefits such as webshop, newsletter subscription, CCV-Store, etc., further personal data will be collected (see point 9.).
  • Furthermore, your personal data is used for statistical analysis to improve our website. In addition, we enhance your user experience through third-party content (see Cookie Policy).
  • Your personal information may be disclosed to third parties located outside your country of residence where different privacy standards may apply (see Cookie Policy).
  • When registering for events and promotions, personal data will be processed for the purpose of implementation (see point 9.1.3 and 9.1.4).
  • When the apps provided by CCV GmbH via the CCV Store are used, personal data is processed (see point 9.5).
  1. SSL or TLS encryption

We use various technical and organizational measures, according to the current state of the art, to protect and maintain the security, integrity and availability of your data.

For security reasons and to protect the transmission of confidential content that you send to the site operator, this website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line. 

  1. Approval (consent) to the collection, use and processing of personal data

Outside of legal obligations personal data may only be collected, used, or processed with (and within the scope of) your consent. In order to guarantee this, you can be asked at various points during the use of our Internet or our Apps offer to agree to our privacy policy or to the processing of your data for a specific purpose (e.g. contacting us via contact form).

  1. Use of the website for information purposes

If you visit our websites for information purposes, i.e. without registering for one of the services we offer or purchasing products, and without providing us with personal data in any other way, we may automatically collect additional information about you, which only contains personal data in limited cases and is automatically collected by our server. These are:

  • Browsertype and Browserversion
  • Used operating system
  • URL, which you have accessed
  • Host name of the accessing computer
  • Access date and time
  • IP address of the requesting computer

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. f GDPR.

We use this information to ensure the provision, stability and security of the website. An evaluation of the data for marketing purposes does not take place in this context.

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.

  1. Contact and customer support

You have the possibility to get in contact with us in several ways. By e-mail, by telephone, by chat, by contact form or by post. If you contact us or get in touch with our customer support, we will use the personal data that you voluntarily provide us with in this context solely for the purpose of meeting your request for contact and processing your enquiry.

The legal basis for this data processing is Art. 6 para. 1 lit. a, Art. 6 para. 1 lit. b, Art. 6 para. 1 lit. c, and Art. 6 para. 1 lit. f GDPR.

Should you contact us via the contact form, the form with your personal data will be stored in our website backend for 1 year from the time of collection and then automatically deleted. Depending on the content of the message, further (contractual and/or legal) storage obligations may arise after forwarding to the appropriate departments.

  1. Social media presence

We maintain online presences within social networks in order to communicate with the users active there or to offer information about us there. Furthermore, you will find links (buttons) to our corresponding business profiles on our website.

If you visit our business profile in the social media, please note that (personal) data of you as a user may be processed outside the area of the European Union/European Economic Area. This may result in risks for you because it could make it more difficult for you to enforce your rights, for example. The basis for international data transfers is the conclusion of standard contractual clauses (SCC).

Under certain circumstances, your (personal) data may be processed within social networks for market research and advertising purposes. For example, usage profiles can be created based on usage behaviour and the resulting interests. The user profiles can in turn be used, for example, to place advertisements within and outside the networks that are presumably in line with your interests. For these purposes, cookies are usually stored on your computer where the usage pattern and your interests are saved. Furthermore, data can also be stored in the user profiles independently of the devices you use (especially if you are a member of the respective social network and logged in to it - please also see our Cookie Policy).

For a detailed presentation of the respective forms of processing and the possibilities of objection (opt-out), we refer to the privacy policies and information of the operators of the respective social networks.

Also, in the case of requests for information and the assertion of rights of affected persons, we would like to point out that these can be most effectively asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information directly. Should you nevertheless require assistance, you can contact us (for contact details see point 16.).

When visiting our business profile in the social networks, we may collect the following data:

  • Inventory data (e.g. names, addresses)
  • Contact details (e.g. e-mail, telephone numbers)
  • Content data (e.g. text entries, photographs, videos)
  • Usage data (e.g. websites visited, interest in content, access times)
  • Meta/communication data (e.g. device information, IP addresses)

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. f GDPR.

Services used and service providers:

Facebook: Social network; service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Statement: https://www.facebook.com/about/privacy; Opt-Out: Settings for advertisements: https://www.facebook.com/settings?tab=ads; Additional Privacy Notice: Agreement on joint processing of personal data on Facebook Pages: https://www.facebook.com/legal/terms/page_controller_addendum, Privacy Notice for Facebook Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.

LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://www.linkedin.com; privacy policy: https://www.linkedin.com/legal/privacy-policy; opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

YouTube: Social network; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy: https://policies.google.com/privacy; Opt-out: https://adssettings.google.com/authenticated.

Xing: Social network; service provider: XING SE, Dammtorstraße 29-32, 20354 Hamburg, Germany; Website: https://www.xing.de; Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

  1. Registration for our services

Our websites offer, among other things, a webshop, a CCV-Store, systems that we use for contract initiation as well as some services (e.g. TOM Login, Vapos Login), which can only be used if a contractual relationship between you and us already exists. However, other services offered by us can also be used without a previous customer relationship between you and CCV. These would be:

9.1. Marketing actions

9.1.1 General marketing actions

You can register for various actions and campaigns on our website, through paid advertisements or organic contributions on our social media profiles, through your e-mail address. When you register for these marketing campaigns, we will ask for your consent.

We may collect the following data for the implementation:

  • Inventory data (e.g. names, addresses)
  • Contact details (e.g. e-mail, telephone numbers)
  • Usage data (e.g. websites visited, interest in content, access times)
  • Meta/communication data (e.g. device information, IP addresses)

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. a GDPR.

Your personal data that you provide during our campaigns on Facebook, LinkedIn and Google are automatically deleted by the platforms 90 days (30 days for Google) after collection. The personal data that you make available to us via our own website https://www.ccv.eu/de/ (e.g. through participation in campaigns) is automatically deleted after 1 year after collection.

9.1.2 Newsletter marketing

With your e-mail address you can subscribe to our newsletter. This registration can be done on our website and via a link in the e-mail signatures of our employees. When you register for these services, we will ask for your consent. With the help of the so-called "Double-Opt-In" procedure we check whether you are the owner of the given e-mail address. You will receive an e-mail with a link that you can use to confirm that you have registered yourself for the newsletter.

The legal basis of this processing is Art. 6 para. 1 lit. a GDPR.

The email addresses of pending confirmations are stored for 60 days. The confirmation link also expires after 60 days.

We store your e-mail address as long as you subscribe to our newsletter. You can unsubscribe from the newsletter by clicking on the link contained in each newsletter.

9.1.3 Registration for events and actions

You can register for various events and promotions through the respective forms on our website, and through paid advertisements and/or organic contributions on our profiles in the social media. When you register for these events and promotions, we will ask for your consent.

We may collect the following data for the implementation:

  • Company name
  • Job title
  • Business relationship with CCV
  • Inventory data (e.g. names, addresses)
  • Contact details (e.g. e-mail, telephone numbers)
  • Usage data (e.g. websites visited, interest in content, access times)
  • Meta/communication data (e.g. device information, IP addresses)

We store your personal data for 1 year from the date of collection.

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. a GDPR.

9.1.4 Surveys

In cooperation with our partners (see point 10.) CCV develops customer satisfaction surveys and sends them out at regular intervals. The surveys are sent out by CCV employees. We ask for your consent when participating in surveys.

We may collect the following data for the implementation:

  • Company name
  • Your job title
  • Business relationship with CCV
  • Inventory data (e.g. names, addresses)
  • Contact details (e.g. e-mail, telephone numbers)
  • Usage data (e.g. websites visited, interest in content, access times)
  • Meta/communication data (e.g. device information, IP addresses)

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. a GDPR.

As far as possible, the questionnaires are designed in such a way that they can be answered without providing personal data. Your personal data will be made anonymous after 30 days.

9.2 4eyeTool

As partner, integrator or network operator you can activate our OPP terminals. For this purpose, the PCI regulations applicable to electronic payment transactions stipulate that the following personal data must be collected and stored when calculating activation codes for the commissioning of vending machine terminals according to the dual control principle:

  • Inventory data (e.g. names, addresses)
  • Contact details (e.g. e-mail, telephone numbers)

This data is used exclusively for the purpose of calculating activation codes. A combination with other data or a passing on to third parties does not occur.

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. a GDPR.

The data will be deleted at the earliest after the destruction of all components involved in the activation process (terminal and card reader) or until you have expressly commissioned the deletion yourself.

9.3 Online Shop „MyCCV“

In order to place orders via "MyCCV", you must create a user account. Your personal data will be stored in your customer account for future purchases. You can delete your personal data and your user account in your account settings. When you place orders via our website, we may collect the following data:

  • Inventory data (e.g. names, addresses)
  • Contact details (e.g. e-mail, telephone numbers)
  • Payment information data (e.g. IBAN, payment method)
  • Usage data (e.g. websites visited, interest in content, access times)
  • Meta/communication data (e.g. device information, IP addresses)

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. b GDPR.

We are required by law to retain transaction-related financial information (including address, payment, and order information) for ten years. After 2 years, however, we will limit the processing of your personal data in order to comply with the legal requirements and will then stop processing the personal data. The storage of your personal data in this regard is based on Art. 6 para. 1 lit. c GDPR.

9.4 OAM Receipt server

As a consumer, you have the option of having a QR code displayed at various retailers (CCV customers) via the card terminal after your purchase. As soon as you scan the QR code with your mobile phone, you will be linked to our website. There you have the option of having your proof of purchase sent to your e-mail address or to download it directly. We collect the following data:

  • Contact details (e.g. e-mail, telephone numbers)
  • Meta/communication data (e.g. device information, IP addresses)
  • PAN

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. a GDPR.

The document server deletes personal data within 13 months. However, the CCV Mailgateway, which is used to send documents, stores metadata (including the destination address) for six months.

9.5 Apps

The use of our apps may require the processing of personal data. The following applies to individual apps:

9.5.1 PhonePOS

If you, as a retailer, wish to use the CCV PhonePOS solution, your personal data must be processed as part of the personalisation process in the app. For this purpose, your retailer e-mail address, which is stored in your contract with the acquirer, is forwarded to our Partner Rubean (see 10.) and stored on the personalisation server for the duration of your contract for the purpose of sending an activation e-mail.

As an end customer, the name of the cardholder is read during transaction processing. However, this personal data is not stored or passed on to third parties.

  • Inventory data (e.g. names, addresses)
  • Contact details (e.g. e-mail, telephone numbers)
  • Payment information data (e.g. IBAN, payment method)
  • Usage data (e.g. websites visited, interest in content, access times)
  • Meta/communication data (e.g. device information, IP addresses)

The processing of your personal data is based on the legal basis of Art. 6 para. 1 lit. b GDPR.

  1. Transfer of personal data to third parties

Your personal data may be disclosed to the following contractors who assist us in providing our services:

Lionware GmbH, Im Kaisemer 13A, 70191 Stuttgart, Germany (Hosting of the portal for the PostIdent procedure, see point 7.)

Personio GmbH, Buttermelcherstraße 16, 80469 Munich, Germany (Hosting application portal, see point 14.)

Inspyde, MutzerHeide 3, 51467 Bergisch Gladbach, Germany (Development of CCV.eu with country identities)

Biedmeer B. V. (CCVShop), Diamantstraat 3, 7554 TA Hengelo (Ov), Netherlands (Hosting and development of the CCV Shop web store, see point 9.)

CCV Group B. V., Westervoortsedijk 55, 6827 AT Arnhem, Netherlands (Hosting of the website, see point 2. – use and evaluation of cookies, see Cookie Policy; hosting & maintenance „MyCCV“, see point 9.3, Marketing actions see point 9.1) 

Customeyes B.V. Singel 126-130, 1015 AE Amsterdam, Nethlerlands (see point 9.1.4)

Clang/E-Village, Amersfoortseweg 10 E, 3712 BC Huis ter Heide, Netherlands (see point 9.1.1 and 9.1.2)

Typeform S.L.  Bac de Roda, 163 (local), 08018 Barcelona, Spain (see point 9.1.4) 

PRO FACTS BVBA, Grotesteenweg 15-17, 9840 De Pinte, Belgium (see point 9.1.4) 

Rubean AG, Kistlerhofstraße 168, 81379 Munich, Germany (see point 9.5.1)

Samhammer AG, Zur Kesselschmiede 3, 92637 Weiden, Germany (Support Hotline, see point 7.)

There is an agreement between the CCV and all the listed contractors on contract processing in accordance with Art. 28 GDPR. The legal basis for this transfer of your personal data is therefore Art. 6 para. 1 lit. b GDPR.

10.1 Integration of third-party content

We use content from third-party providers on our website to analyze and optimize our online offering. The legal basis for the collection of your IP address and technical information about your browser and operating system, web pages, date and time of access and other information is based on the legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR or based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Below you will find a list of all third-party providers whose content we include on our website. In this overview, in addition to the content offered, you will also find links to the privacy statements of the third-party providers.

Google Analytics

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy policy: https://policies.google.com/privacy?hl=de&gl=de

Legal basis for the use of Google Analytics: Art. 6 para. 1 1 lit. f DS-GVO.

Google Analytics uses text files ("cookies"), which are stored on your computer and which allow an analysis of the use of the website. The information generated by the cookie about your use of our website (including your shortened IP address) will be transmitted to and stored by Google on servers in the United States.

IP Stack

apilayer Data Products GmbH, Elisabethstrasse 15/5, 1010 Vienna, Austria

Privacy policy: https://ipstack.com/privacy

Legal basis for the use of IPStack: Art. 6 para. 1 1 lit. f DS-GVO.

We use the service IPStack on our website. This service allows us to geo-locate the IP addresses of our website visitors.

Google Optimize

Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Privacy policy: https://policies.google.com/privacy?hl=de&gl=de

Legal basis for the use of Google Optimize: Art. 6 para. 1 1 lit. f DS-GVO.

We use the web analysis and optimization service "Google Optimize" on our website. Google Optimize analyzes the use of different variants of our website and helps us to improve the user experience according to the behavior of our users on the website. Google Optimize is a tool integrated with Google Analytics. If you do not wish to receive interest-based advertising, you can disable the use of cookies by visiting www.google.com/settings/ads/plugin.

AB Tasty

AB TASTY SAS, 3 impasse de la Planchette, F-75003 Paris, France

Privacy policy: https://www.abtasty.com/de/GDPR/

Legal basis for the use of AB Tasty: Art. 6 para. 1 1 lit. a DS-GVO.

Our website uses the web analytics service AB Tasty from AB TASTY SAS. This service uses cookies to identify a visitor's browser and analyze the use of our website.

Doubleclick

Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy policy: https://policies.google.com/privacy?hl=de&gl=de

Legal basis for the use of Doubleclick: Art. 6 para. 1 1 lit. a GDPR.

We use the online marketing tool Doubleclick from Google. Doubleclick uses cookies to serve ads that are relevant to users or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Doubleclick can use cookie IDs to record so-called conversions that are related to ad requests.

Google Fonts

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy policy: https://policies.google.com/privacy?hl=de&gl=de

Legal basis for the use of Google Fonts: Art. 6 para. 1 1 lit. a GDPR

We use Google Web Fonts on our website. Google Web Fonts enables us to use external fonts, so-called Google Fonts. to improve the use of our website for you and make it more user-friendly. For this purpose, the required Google Font is loaded into the browser cache by your web browser when you access our website. This is necessary so that your browser can display a visually improved representation of our texts. If your browser does not support this function, a standard font will be used by your computer for display. For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address.

Hotjar

Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St, Julian's STJ 3141, Malta

Privacy Policy: https://www.hotjar.com/legal/policies/privacy/

Legal basis for the use of Hotjar: Art. 6 para. 1 1 lit. a GDPR.

We use Hotjar on our website. Hotjar is a service that analyzes the behavior and feedback of you as a user on our website through a combination of analytics and feedback tools. We receive reports and visuals from Hotjar that show us where and how you "move" on our site.

Hotjar explicitly states that it is necessary to share data with Amazon Web Services because portions of the information from our website visitors are stored on AWS servers.

Amazon Web Services, Inc, P.O. Box 81226, Seattle, WA 98108-1226, USA

Privacy policy: https://aws.amazon.com/de/compliance/data-privacy/

Legal basis for the use of Amazon AWS: Art. 6 para. 1 1 lit. a GDPR

Amazon Web Services (AWS) is a cloud computing provider.

hCaptcha

Intuition Machines, Inc. 350 Alabama St, San Francisco, CA 94110, USA

Privacy policy and terms of use: https://hcaptcha.com/privacy/ and https://hcaptcha.com/terms

Legal basis for the use of hCaptcha: Art. 6 para. 1 1 lit. f GDPR.

We use the anti-bot service hCaptcha (hereinafter "hCaptcha") on our website. This service is provided by Intuition Machines, Inc, a US company based in Delaware ("IMI"). hCaptcha is used to check whether data entered on our website (e.g. on a registration page or a contact form) has been entered by a human or by an automated program. To do this, hCaptcha analyzes the behavior of the visitor to the website or mobile app based on various characteristics. This analysis starts automatically as soon as the website or mobile app visitor enters a part of the website or app with hCaptcha enabled. For the analysis, hCaptcha evaluates various information (e.g. IP address, dwell time of the visitor on the website or app or mouse movements of the user). The data collected during the analysis is forwarded to IMI. The hCaptcha analysis in "invisible mode" can take place entirely in the background. Website or app visitors are not made aware that such analysis is taking place if no challenge is displayed to the user. The data processing is based on Art. 6 para. 1 1 lit. f GDPR, as CCV has a legitimate interest in protecting its website from abusive automated crawling and spam.

  1. Transfer of personal data to third countries

Within the scope of the above-mentioned scope, it is possible that we may transfer your personal data to legal entities named in this privacy policy. This is done exclusively based on a contractual agreement on order processing between us and the corresponding third-party provider. These third parties may be located in other countries (including countries outside the EEA) where data protection standards may differ from those in your country of residence. Please note that data processed in other countries may be subject to foreign laws and may be accessible to the governments, courts, law enforcement and regulatory authorities of those countries.

  1. Automated decision making

We do not process your personal data for automated decision-making processes that have legal effect on you or significantly affect you in a similar way.

  1. What rights do you have as a data subject?

We take the greatest possible care and security when handling your personal data. The GDPR gives rise to the following rights with regard to your personal data:

Right to information

You have the right to be informed about those of our operations that involve the handling and processing of your personal and payment data.

Right of access

You have the right to inspect your personal data stored with us. If you wish to exercise this right, we must first verify your identity before retrieving your data. You will then receive all data we have stored about you. We will also inform you of the details of our processing methods, including information on the purpose of processing, the retention period, the recipients of the data and the method of data collection. We aim to provide you with an overview of this data after one month at the latest. If we expect a longer processing time, we will inform you of this.

Right of rectification, limitation and erasure

You have the right to correct or supplement your personal data stored with us. You can also arrange for the partial deletion of your data in order to limit the amount of data we may use in the future. Furthermore, you have the "right to be forgotten", i.e. you can request that your data stored with us be completely deleted. However, we are legally obliged to retain certain data, which cannot be deleted in this case.

Right to data portability

You may request CCV to transfer the data stored about you to another legal entity by digital means. If you exercise this right, we will provide you with your data in a structured and common file format. We can only do this for personal data that you have transmitted to us yourself or that you have expressly agreed to process or that we have received in fulfilment of our contractual obligations. We have set ourselves the goal that the requested information should be ready for data transfer within one month at the latest. If we assume a longer processing time, we will inform you of this.

Right of objection

If you believe that we are processing certain personal data about you unlawfully, we would ask you to inform us of this. If your objection is justified, we will stop processing your personal data to the appropriate extent.

Right of appeal

You also can lodge an official complaint if you feel that your data is not being handled with the necessary care. In the event of a complaint, we will examine our procedures in detail and make every effort to rectify any shortcomings found. If no agreement can be reached, you have the possibility to contact the German data protection authority with your complaint.

  1. Which supervisory authority do we report to?

At CCV we respect your rights with the utmost care. However, if you feel that we have not sufficiently respected your rights, you have the right to complain to a data protection authority, as mentioned in point 13.

The Supervisory Authority responsible for CCV can be reached as follows:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Postfach 1349

91504 Ansbach

Germany

  1. How can you contact us or make use of your above-mentioned rights

If you have any questions, concerns or comments about this privacy policy or inquiries about your personal data, please send an e-mail to our data protection officer:

Phone: +49 (0)8752 8640

E-Mail: datenschutz@ccv.eu

You can also use our contact form for this purpose.

The information that you provide when you contact us (for example, first name, last name and e-mail address) will only be processed in order to handle your request. It will be deleted immediately thereafter. Alternatively, we will restrict the processing of your personal data in accordance with the statutory regulations on retention obligations.

Note

We reserve the right to change this privacy policy according to the updating of our website. The need for action in this regard may also arise, for example, because of changes in the law. Please visit this website regularly and check the current data protection statement. This privacy policy was last updated on 10.02.2022