Privacy Policy of the VisitorApp Platform

We would hereby like to inform you about the processing of personal data carried out by IT-Kompass in accordance with the EU General Data Protection Regulation (EU-DSGVO).

The following data protection information informs you about the type and scope of the processing of so-called personal data by IT-Kompass. Personal data is information that can be directly or indirectly attributed to you or can be attributed to you.

IT-Kompass has taken appropriate technical and organizational security measures in accordance with the EU General Data Protection Regulation to protect your personal data against loss, destruction, manipulation and unauthorized access.

Name and contact details of the person responsible

IT-Kompass GmbH

Tobelstraße 2

73079 Süßen

Germany

Phone: 49 (0) 7162 / 14505-80

Fax: +49 (0) 7162 / 14505-98

E-mail: info@it-kompass.com

Data protection officer of the responsible person

Dr. Ralf W. Schadowski

Tel.: +49 241 44688-0

E-mail: datenschutz@it-kompass.com

Purposes of data processing and their legal basis

Calling up and visiting our website

When you visit our website, information is automatically sent to our server by the browser used on your end device and temporarily stored in a so-called log file.

The following information is collected and stored until it is automatically deleted:

the IP address of the requesting internet-capable device
the date and time of access
the name and URL of the file accessed
the website/application from which the access was made (referrer URL)
the browser you use and, if applicable, the operating system of your internet-enabled computer as well as the name of your access provider.

The legal basis for the processing of the IP address is Article 6 (1) lit. f DSGVO. Our legitimate interest follows from the purposes of data collection listed below.

The IP address of your terminal device and the other data listed above are used by us for the following purposes:

Ensuring a smooth connection setup,
Ensuring a comfortable use of our website/application,
Evaluation of system security and stability
Provision, troubleshooting and improvement of our service

We also process your personal data to provide features, analyse performance, troubleshoot and improve the usability and effectiveness of our service. This is done on the basis of our legitimate interest under the legal basis of Art. 6 para. 1 lit. f DSGVO.

Setting up the user account and orders

The creation and setting up of your user account is based on your consent within the meaning of Article 6 (1) a DSGVO.

In order to create a user account, you must enter a password of your choice. This, together with your e-mail address and your user name, is used to access your user account. After setting up a user account, no new data entry is required. In addition, you can view and change the data stored about you in your user account at any time.

You have the option of deleting your user account at any time.

In this case, please contact the customer support at service@visitorapp.io.

Please note, however, that this does not necessarily mean that the data visible in the user account will be deleted at the same time.

If you place an order with us, we process the data required for the conclusion, performance or termination of a contract (Article 6 para 1 lit. b DSGVO) with you.

This includes:

First name, last name
Billing address
E-mail address
Invoice and payment data
Telephone number, if applicable

This data will be added to your user account in the course of the first order. You do not need to enter this data again for subsequent orders.

By creating a user account, your data assigned to the user account and stored therein will generally be processed until you request or make the deletion of the user account. However, we store your personal data until the expiry of the statutory period or possible contractual warranty and guarantee rights.

After expiry of this period and in the event of a deleted user account, we retain the information of the contractual relationship required under commercial and tax law for the periods determined by law. For this period of ten years from the conclusion of the contract, the data is processed solely in the event of an audit by the tax authorities.

Contacting our customer support

When contacting our support (e.g. via contact form, e-mail or telephone), the information of the inquiring persons is processed insofar as this is necessary to answer the contact enquiries and any requested measures.

This includes:

Inventory data (e.g. names, addresses),
contact data (e.g. e-mail, telephone numbers),
content data (e.g. text entries).

The legal basis for this is the fulfilment of the contract and pre-contractual enquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO) as well as your consent according to Art. 6 para. 1 lit. a DSGVO.

Passing on of personal data to service providers used

Personal data will only be passed on to third parties if IT-Kompass has commissioned them to provide the website and the marketplace. IT-Kompass has concluded commissioned processing contracts with these commissioned service providers in accordance with Art. 28 DSGVO.

Should any processing of personal data in the context of the provision of the offer take place outside the EU/EEA, IT-Kompass has concluded the EU standard data protection clauses with the commissioned processors used.

Transfer of personal data to providers

After completing a ticket purchase or voucher purchase, we pass on your personal data to the provider you have selected.

This is done on the basis of Art. 6 para. 1 lit. b DSGVO for the purpose of fulfilling the contract for the ticket purchase or the voucher purchase.

Payment processing for your order

Within the framework of payment processing, we offer you several options for payment, during which your data may be passed on to the following payment service providers. Credit card numbers or other bank details are not stored by us and are transmitted directly to the payment service providers.

If you choose the Stripe payment method, we will pass on the necessary payment data to the payment service provider we have commissioned. With this payment method, payment processing is carried out via the service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process together with information about your order (name, address, account number, bank sort code, any credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. B DSGVO. Your data will only be passed on for the purpose of processing payments with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose.

You can find more information on Stripe's data protection at:

https://stripe.com/de/privacy#translation.

If you additionally decide to use the Paypal payment method, this will be processed by PayPal Europe S.a.r.L. & Cie, S.C.A., 5th floor, 22-24 Boulevard Royal, L-2449 Luxembourg. In this process, your personal data (name, address, company, e-mail address, telephone and mobile number, IP address) are automatically transmitted to Paypal and processed within the framework of the ordering process in accordance with Art. 6 Para. 1 lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider Paypal and only insofar as it is necessary for this purpose.

Further information on data protection can be found in Paypal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the use of cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout

This website uses Google Analytics with the extension "anonymizeIp()". This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you is personally identifiable, this is immediately excluded and the personal data is immediately deleted.

For the exceptional cases in which personal data is transferred to the USA, Google has fully accepted the EU standard data protection clauses with its contractual partners.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

Squarespace Analytics

We use the web analytics service of Squarespace Ireland Ltd, Le Pole House, Ship Street Great, Dublin 8, Ireland (hereinafter referred to as "Squarespace").

The Squarespace Analytics service sets so-called cookies. The information generated by these, which also includes your IP address, is also transmitted to a Squarespace server in the USA and stored there. Squarespace is committed to complying with the requirements of the GDPR and the EU standard contractual clauses.

Squarespace will use this information for the purpose of evaluating your website activity, compiling reports on it for us and providing other services relating to internet usage. Squarespace may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Squarespace's behalf.

Squarespace will not associate your IP address with any other data held by Squarespace. By using this website, you consent to the processing of data about you by Squarespace in the manner and for the purposes set out above.

You have the option of preventing cookies from being stored on your computer by making the appropriate browser settings. Our service can then still be called up, but it will then only be able to be provided to a limited extent. You can find out more about data protection at Squarespace here: https://de.squarespace.com/privacy/

Microsoft Clarity

We use the web analytics service Microsoft Clarity on our website for marketing purposes. With Microsoft Clarity, we analyze the use of our website based on a pseudonymous user ID. In particular, we process pseudonymized usage data (e.g. clicks, access times, pages visited), movement data (e.g. scrolling movements, mouse movements), location data and metadata (e.g. IP address, device information).

We only use Microsoft Clarity with your consent in accordance with Art. 6 Para. 1 lit. a DSGVO.

For more information on data protection at Microsoft, please refer to Microsoft's privacy policy.

Recipients of the data: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland.

Please be aware of the risks associated with transferring your data to the U.S. as outlined in Section 9.

Piwik Pro

We use the website analysis software Piwik Pro from Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin (Piwik) to optimize and statistically evaluate visitor access to our website. We have concluded an order processing contract with Piwik in accordance with Art. 28 DSGVO.

This uses cookies that allow us to analyze the use of our website. We ensure that the calling IP address is anonymized immediately after its influence into a hash value and even before storage, so that no inference to you is possible.

We use Piwik Pro only after your consent according to Art. 6 para. 1 lit. a DSGVO, § 25 para. 1 TTDSG and Art. 49 para. 1 lit. a DSGVO. You can revoke this at any time with effect for the future in the cookie banner.

bookingkit GmbH

In order to market our products and services, we use the booking system of bookingkit GmbH, located at Sonnenallee 233, 12059 Berlin, Germany (hereinafter "bookingkit") as an additional sales channel. If you make a booking of a bookingkit offer via our website, you agree that your personal data will be stored and processed by bookingkit. This transfer and processing of your data is for the following purposes: to support and process your orders, to authenticate you, to process payments and to improve bookingkit's services.

For more information on bookingkit's terms of use and privacy policy, as well as on the possible engagement of third parties for data processing by bookingkit, please visit the following link:https://bookingkit.com/privacy-statement/

Zoho CRM & Zoho Bigin

We use the service of Zoho CRM and Zoho Bigin. The provider here is Zoho Corporation Pvt. Ltd. of Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India (hereinafter referred to as "Zoho CRM or Zoho Bigin").

Zoho CRM or Zoho Bigin enables us to manage existing and potential customers and customer contacts and organise sales and communication processes. The use of the CRM system also enables us to analyse and optimise our customer-related processes. The customer data is stored on Zoho CRM or Zoho Bigin servers. Details on the functions of Zoho CRM or Zoho Bigin can be found here:

https://www.zoho.com/de/crm/help/getting-started/key-features.html

https://www.zoho.com/de/bigin/features.html

The use of Zoho CRM or Zoho Bigin is based on Art. 6 para. 1 lit. f) DSGVO. We have a legitimate interest in the most efficient customer management and customer communication possible. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a) DSGVO. Your consent given to us can be revoked at any time.

A possible data transfer to third countries outside the European Union due to a support case is based on the EU standard contractual clauses.

For details on the processing of your personal data and compliance with the GDPR by Zoho CRM or Zoho Bigin, please refer to the privacy policy of the service provider:

https://www.zoho.com/privacy.html

https://www.zoho.com/gdpr.html

Newsletter subscription via Zoho Campaigns

We collect and process your personal data (name, first name, email address, company name) for the purpose of sending you our newsletter.

By subscribing to our newsletter, you confirm that you wish to receive it in the future at the email address you have provided and that you are the same person signing or returning the newsletter. For verification purposes, you will receive a separate e-mail with which you must confirm your newsletter order. Without this renewed confirmation, you will not receive a newsletter.

The legal basis for this is your consent in accordance with Art. 6 Para. 1 lit. a). Your consent given to us can be revoked at any time.

A possible data transfer to third countries outside the European Union due to a support case is based on the EU standard contractual clauses.

Your data will be transferred to "Zoho Campaigns" for the purpose of sending the newsletter.

Zoho processes and stores the data in compliance with the European General Data Protection Regulation (DSGVO / GDPR):

https://www.zoho.com/campaigns/gdpr/

Microsoft Bookings

We use the Microsoft Bookings service, which is a Microsoft 365 application, for online appointment booking. The provider of this service is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521.

The software is used to book an appointment. The connection to the service is only established when you access the online booking function via a link or button on our website. To make an appointment, your entries in the appointment form are transferred to Microsoft. The legal basis for processing your data in relation to the "Microsoft Bookings" service is Art. 6 para. 1 lit. f) DSGVO. The legitimate interest arises from our claim to offer you a user-friendly website with a wide range of functions and to give you the opportunity to make an appointment quickly and easily at any time if required. Please note that you are not obliged to use Microsoft Bookings to make an appointment. If you do not wish to use the service, please use another of the contact options offered to make an appointment.

You can find more information about Microsoft's processing of your personal data here: Microsoft Privacy Policy.

Your Rights

Overview of your rights

In addition to the right to withdraw the consent you have given to us, you have the following other rights, subject to the relevant legal requirements:

Right to information about your personal data stored by us in accordance with Art. 15 DSGVO;

The right to have inaccurate data corrected or to have correct data completed in accordance with Art. 16 DSGVO,

The right to have your data stored by us deleted in accordance with Art. 17 of the GDPR, insofar as no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed,

Right to restrict the processing of your data pursuant to Art. 18 DSGVO,

the right to data portability in accordance with Art. 20 DSGVO

Right to complain to the competent supervisory authority:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Postal address

PO Box 10 29 32

70025 Stuttgart

Telephone: 0711/61 55 41 - 0

Fax: 0711/61 55 41 - 15

Your right of objection

Under the conditions of Art. 21 (1) DSGVO, you may object to data processing on grounds relating to the specific situation of the data subject.

The above general right of objection applies to all processing purposes described in this data protection information, which are processed on the basis of Article 6(1)(f) DSGVO. Unlike the specific right of objection directed at data processing for advertising purposes, we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so.

Amendment and up-to-dateness of the data protection information

We revise this data protection information when changes are made to this website or on other occasions that make this necessary. You will always find the current version on this website. You should therefore visit this website regularly to find out about the current status of the data protection declaration.

Status: 30.05.2022