Data privacy policy
General information
We are pleased you have shown an interest in our website. Data privacy and data security have always taken high priority with us; therefore, we observe the legal provisions of the General Data Protection Regulation (GDPR), the German Teleservices Act (TMG) and other data protection provisions.
In the following, we will provide you with information about how your personal data is handled. Personal data according to the GDPR is all data with which you can be personally identified.
Name and contact details of the controller
The controller for data processing on this website is:
COMPO EXPERT GmbH
Krögerweg 10
48155 Münster
Deutschland
Phone.: +49 (0)251 297981-000
Fax.: +49 (0)251 297981-111
E-Mail: [email protected]
Contact details of the data protection officer:
Our data protection officer Mr André Korte can be reached using the aforementioned company address and at [email protected].
Scope and Purpose of the Processing of Personal Data
Accessing This Website
When you access our website, the internet browser used by the visitor automatically transmits data to our website server. This data is temporarily stored in a log file. The following data is stored without any further action on the part of the visitor until it is automatically deleted:
- IP address of the visitor’s device
- Date and time of access by the visitor
- Name and URL of the page accessed by the visitor
- Website from which the visitor accessed our website, known as the referrer URL
- Browser and operating system of the visitor’s device and the name of the access provider used by the visitor
The processing of this personal data is justified pursuant to Art. 6(1), first sentence, point (f) GDPR. The company has a legitimate interest in processing the data for the following purposes:
- Establishing a rapid connection to the company’s website
- Enabling the user-friendly use of this website
- Identifying and ensuring the security and stability of the systems
- Facilitating and improving the administration of this website
The data is expressly not processed for the purpose of obtaining information about the identity of visitors to this website.
Contact Form
You may send messages to the company using the online contact form on our website. To process your enquiry, we require your first and last name, email address, a subject and a message.
The legal basis for the processing is Art. 6(1), first sentence, point (b) GDPR in the case of customer enquiries and Art. 6(1), first sentence, point (f) GDPR in all other cases. The data is processed exclusively for the purpose of handling and responding to enquiries submitted via the contact form.
Personal data collected through the contact form is automatically deleted as soon as the enquiry has been resolved and there is no legal basis for its continued retention.
Newsletter
Depending on the circumstances, the receipt of our newsletter may be based on one of two legal bases.
The data subject may already have a business relationship with us, in which case we use the newsletter to provide information about our company’s products and services. The legal basis for the processing is Art. 6(1), first sentence, point (b) GDPR in the case of customer enquiries and Art. 6(1), first sentence, point (f) GDPR in all other cases.
By subscribing to the newsletter, the data subject expressly consents to the processing of their personal data. Only the visitor’s email address is required to subscribe to the newsletter. The legal basis for processing the visitor’s personal data for the purpose of sending newsletters is consent pursuant to Art. 6(1), first sentence, point (a) GDPR.
The visitor may unsubscribe from future newsletters at any time. This can be done by using the dedicated unsubscribe link at the end of the newsletter or by sending a simple message to the controller.
Disclosure of Data
Personal data is disclosed to third parties where:
- The data subject has expressly consented to the disclosure pursuant to Art. 6(1), first sentence, point (a) GDPR
- The disclosure is necessary pursuant to Art. 6(1), first sentence, point (f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that the data subject has an overriding legitimate interest in their data not being disclosed
- There is a legal obligation to disclose the data pursuant to Art. 6(1), first sentence, point (c) GDPR
- The disclosure is necessary pursuant to Art. 6(1), first sentence, point (b) GDPR for the performance of a contractual relationship with the data subject
Personal data is not disclosed to third parties in any other circumstances.
Cookies
Our website uses cookies. Cookies are data packets exchanged between the server of this website and the visitor’s browser. They are stored on the device used to access the website, such as a desktop computer, notebook, tablet or smartphone.
Cookies cannot cause damage to the devices on which they are stored. In particular, they do not contain viruses or other malicious software. Cookies contain information associated with the specific device being used. This does not enable the company to directly identify the visitor to this website.
Cookies are generally accepted under the default settings of most browsers. Browser settings can be configured either to prevent cookies from being accepted on the devices used or to display a specific notification before a new cookie is created. Please note, however, that disabling cookies may mean that not all functions of this website can be used to their full extent.
Cookies are used to make the company’s website more convenient to use. Session cookies, for example, can be used to determine whether the visitor has already accessed individual pages of this website. These session cookies are automatically deleted after the visitor leaves the website.
Temporary cookies are also used to improve user-friendliness. They are stored on the visitor’s device for a limited period. When the visitor returns to the website, it is automatically recognised that the visitor has previously accessed the website and which entries and settings were selected, so that they do not have to be entered again.
Cookies are also used to analyse visits to this website for statistical purposes and to improve the services offered. When the visitor returns to the website, these cookies make it possible to automatically recognise that the visitor has previously accessed the website. These cookies are automatically deleted after a defined period.
The data processed through cookies is necessary for the purposes described above and for the protection of the company’s legitimate interests pursuant to Art. 6(1), first sentence, point (f) GDPR.
Website Analytics Services and Tracking
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies. These are text files stored on your computer that enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the United States.
Where IP anonymisation is activated on this website, Google will first truncate your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transmitted to a Google server in the United States and truncated there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet use.
- The IP address transmitted by your browser within the framework of Google Analytics will not be combined with other Google data.
You can prevent cookies from being stored by selecting the appropriate settings in your browser. Please note, however, that you may not be able to use all functions of this website to their full extent if you do so.
You can also prevent Google from collecting and processing the data generated by the cookie relating to your use of the website, including your IP address, by downloading and installing the browser plug-in available at:
- This website uses Google Analytics with the _anonymizeIp() extension. As a result, IP addresses are processed only in truncated form, which prevents them from being associated with a specific individual. Where the data collected about you could be associated with an individual, this association is immediately excluded and the personal data is deleted without delay.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more relevant to you as a user.
The legal basis for the use of Google Analytics is Art. 6(1), first sentence, point (f) GDPR.
Where corresponding consent has been requested, particularly consent to the storage of cookies, the processing is carried out exclusively on the basis of Art. 6(1), point (a) GDPR. Consent may be withdrawn at any time.
Any transfer of data to the United States that cannot be excluded when Google services are used is based on the European Commission’s Standard Contractual Clauses. Further details are available at:
Third-party provider information:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Fax: +353 (1) 436 1001Further information:
Google Tag Manager
We use Google Tag Manager on our website, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google”.
Google Tag Manager enables us to manage website tags through a user interface. The Google Tag Manager tool that implements the tags operates on a cookie-free domain and does not itself collect personal data.
Google Tag Manager triggers other tags that may collect data. Google Tag Manager does not access this data. Where tracking has been disabled at domain or cookie level, this setting remains effective for all tracking tags implemented through Google Tag Manager.
Any transfer of data to the United States that cannot be excluded when Google services are used is based on the European Commission’s Standard Contractual Clauses. Further details are available at:
Third-party provider information:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Fax: +353 (1) 436 1001
Further information about data protection is available on the following Google websites:
Use of Social Media Buttons
Our website uses various social media buttons in the form of links. These include Facebook buttons provided by Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, LinkedIn buttons provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, and Xing buttons provided by XING AG, Dammtorstraße 29–32, 20354 Hamburg, Germany.
When our website is accessed, no data is initially transmitted to the social media services. This prevents third parties from creating a profile solely as a result of the website visit.
Visitors to our website may use the social media buttons to access our social media profiles or share content, such as posts, with other users.
Clicking a social media button may result in certain information being transmitted to the relevant social media service. This may include:
- The COMPO EXPERT webpage on which the social media button is displayed
- The date and time on which the social media button was clicked
- Information about the browser and operating system used
- The current IP address
By clicking the button, the visitor consents to the processing of data by the social media service pursuant to Art. 6(1), first sentence, point (a) GDPR.
Where the visitor is already logged into the relevant social media service at the time the button is clicked, that service may also be able to associate the information listed above with the visitor’s username and potentially obtain further information.
The social media service may also process this information in countries outside the European Union. We have no influence over the scope, nature or purpose of the processing carried out by the social media service. The social media service may use the information to create pseudonymised or individualised user profiles.
Further information about data protection is available from the respective providers:
Use of YouTube
We use a YouTube plug-in to make our own videos available to visitors to our website.
The service is provided by:
Google Ireland Limited
Google Building Gordon House
4 Barrow Street
Dublin, D04 E5W5
Ireland
The legal basis for the processing is Art. 6(1), point (a) GDPR, meaning the consent that we obtain from you for this use.
The following data is collected:
- The referrer URL, meaning the URL of the page from which the website was accessed
- The IP address of your device
This data is stored by YouTube on its servers.
Where you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
The data is disclosed to the following recipient:
Google Inc.
1600 Amphitheatre Parkway
Mountain View, CA 94043-1351
USA
The data is stored until the purpose of the processing no longer applies. It is then deleted.
Further information about the handling of user data is available in the YouTube and Google Privacy Policy.
Facebook Pixel, Facebook Custom Audiences and Facebook Conversion Tracking
Our website uses the “Facebook Pixel” provided by the social network Facebook, which is operated by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, and, for visitors residing in the European Union, by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as “Facebook”.
The Facebook Pixel enables Facebook to identify visitors to our online services as a target audience for the display of advertisements known as Facebook Ads.
We use the Facebook Pixel to display the Facebook Ads placed by us only to Facebook users who have demonstrated an interest in our online services or who have certain characteristics that we transmit to Facebook. These groups are known as Custom Audiences.
The Facebook Pixel also enables us to ensure that our Facebook Ads correspond to the potential interests of users and are not perceived as intrusive. We can also evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by determining whether users were redirected to our website after clicking a Facebook advertisement. This is referred to as conversion tracking.
Facebook processes the data in accordance with its data usage policy. General information about the display of Facebook Ads is available in Facebook’s data usage policy. Specific information about the Facebook Pixel and how it works is available in Facebook’s Help Centre.
The Facebook Pixel and the associated conversion cookies are used on the basis of Art. 6(1), point (a) GDPR.
Data Processing Agreement
For data processing activities in which Facebook acts as a processor, we have entered into a data processing agreement with Facebook. Under this agreement, Facebook is required to protect our customers’ data and not disclose it to third parties.
Objection
You may object to the collection of your data by the Facebook Pixel and to the use of your data for the display of Facebook Ads.
To control the types of advertisements displayed to you on Facebook, you may access the page provided by Facebook and follow the instructions for configuring usage-based advertising.
The settings apply across platforms, meaning they are adopted for all devices, including desktop computers and mobile devices.
You can also object to the use of cookies for reach measurement and advertising purposes through the opt-out page of the Network Advertising Initiative and through the following websites:
Google Ads and Conversion Tracking
This website uses Google Ads. Google Ads is an online advertising programme provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to place advertisements in the Google search engine or on third-party websites when a user enters certain search terms into Google. This is known as keyword targeting.
Targeted advertisements may also be displayed on the basis of user data available to Google, such as location data and interests. This is known as audience targeting.
As the website operator, we can quantitatively evaluate this data, for example by analysing which search terms led to our advertisements being displayed and how many advertisements resulted in corresponding clicks.
You can prevent cookies from being stored on your device by configuring the appropriate settings in your browser. It cannot be guaranteed that you will be able to access all functions of this website without restriction where your browser does not permit cookies.
You may also use a browser plug-in to prevent the information collected through cookies, including your IP address, from being transmitted to and used by Google Inc. The relevant plug-in is available at:
Google Analytics Opt-out Browser Add-on
Further information about the Google services used is available in the Google Privacy Policy.
The tools are used on the basis of Art. 6(1), point (f) GDPR. We have a legitimate interest in analysing user behaviour in order to optimise both our website and our advertising.
Where corresponding consent has been requested, particularly consent to the storage of cookies, the processing is carried out exclusively on the basis of Art. 6(1), point (a) GDPR. Consent may be withdrawn at any time.
Provisions Applicable to Both Tools
We expressly point out that United States authorities, including intelligence services, may obtain access under United States legislation, such as the CLOUD Act, to personal data that is necessarily exchanged with Google through the internet protocol when this service is integrated.
Any transfer of data to the United States that cannot be excluded when Google services are used is based on the European Commission’s Standard Contractual Clauses.
Further details are available at:
Microsoft Clarity
This website uses the web analytics service provided by the following provider:
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA
Microsoft Clarity uses cookies and similar technologies, in particular tracking pixels and web beacons, to enable us to analyse how visitors use our website.
For this purpose, information may be processed concerning:
- The device used
- Browser information
- The IP address
- Usage data
- Clicks
- Scrolling behaviour
- Mouse movements
- Time spent on the website
- Interactions with individual page content
This makes it possible, among other things, to analyse user behaviour patterns, for example through heatmaps and session recordings. These may show the duration of page visits and interactions with page content, such as text input, scrolling, clicks and mouse-overs.
The results are provided to us in a form that does not enable us to identify individual persons. We do not combine this information with any other directly identifying personal data collected about you.
Microsoft Clarity is used only where you have previously given your consent through our consent banner.
The legal basis for the processing of personal data is Art. 6(1), point (a) GDPR. Where cookies are placed or information is stored on or accessed from your device, this is likewise carried out only on the basis of your consent pursuant to Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future through the cookie settings.
Where you consent to the processing, Microsoft collects your personal data on our website in order to perform a standard analysis. The results are then made available to us in anonymised form through Microsoft Clarity.
The service is provided by Microsoft. Microsoft acts as an independent controller and may process the data collected through Clarity for additional purposes under its own responsibility.
We have no influence over any further processing activities carried out by Microsoft. Further information about Microsoft’s processing of personal data is available in the:
The data collected is generally transferred to and stored on Microsoft servers in the United States for data analysis purposes and for other purposes determined by the service provider.
Such transfers are subject to the provisions of the EU-U.S. Data Privacy Framework.
The recipients of the data collected are Microsoft Corporation and any other companies with which Microsoft may share the data under its own responsibility.
The retention period is determined by Microsoft Clarity’s policies. According to Microsoft’s current information:
- Session recording data is generally retained for 30 days
- Labelled or favourited sessions and click data are generally retained for nine months
- Heatmap data is generally retained for 13 months
After these periods, the data is deleted from Clarity servers, including backups.
Any further processing carried out by Microsoft under its own responsibility remains unaffected.
Applicants
Applicant data is processed for the performance of a contract or in order to take steps prior to entering into a contract.
The data is not intended to be disclosed to third parties and no such disclosure takes place.
The data is deleted no later than six months after the application procedure has ended, unless the applicant has expressly consented to a longer retention period.
No automated decision-making, including profiling, is carried out for this purpose.
Employees
Employee data is processed for the performance of the employment contract and compliance with legal obligations.
Data is regularly transmitted to social security institutions, tax authorities and other bodies in order to comply with legal obligations.
The data is deleted following the expiry of the applicable statutory retention periods.
No automated decision-making, including profiling, is carried out for this purpose.
Customers
Customer data is processed for the performance of a contract, compliance with legal obligations or on the basis of the controller’s legitimate interests.
Data is regularly transmitted to tax authorities and other bodies in order to comply with legal obligations.
The data is deleted two years after the most recent contact or following the expiry of the applicable statutory retention periods.
No automated decision-making, including profiling, is carried out for this purpose.
Suppliers
Supplier data is processed for the performance of a contract, compliance with legal obligations or on the basis of the controller’s legitimate interests.
Data is regularly transmitted to tax authorities and other bodies in order to comply with legal obligations.
The data is deleted two years after the most recent contact or following the expiry of the applicable statutory retention periods.
No automated decision-making, including profiling, is carried out for this purpose.
Your Rights as a Data Subject
Where your personal data is processed in connection with your visit to our website, you have the following rights as a “data subject” within the meaning of the GDPR.
Right of Access
You may request confirmation from us as to whether we process personal data relating to you.
The right of access is excluded where the data is stored solely because it may not be deleted due to statutory or organisational retention requirements, or where it is used exclusively for data backup or data protection monitoring purposes, provided that granting access would require a disproportionate amount of effort and processing for other purposes is excluded through appropriate technical and organisational measures.
Where your right of access is not excluded and we process your personal data, you may request the following information from us:
- The purposes of the processing
- The categories of personal data relating to you that are processed
- The recipients or categories of recipients to whom your personal data has been or will be disclosed, particularly recipients in third countries
- Where possible, the envisaged period for which your personal data will be stored or, where this is not possible, the criteria used to determine that period
- The existence of a right to rectification or erasure of your personal data or restriction of processing, or a right to object to such processing
- The existence of a right to lodge a complaint with a data protection supervisory authority
- Where the personal data was not collected directly from you as the data subject, any available information concerning its source
- Where applicable, the existence of automated decision-making, including profiling, meaningful information about the logic involved and the significance and envisaged consequences of such processing
- Where applicable, if data is transferred to recipients in third countries and no European Commission adequacy decision pursuant to Art. 45(3) GDPR exists, information about the appropriate safeguards provided pursuant to Art. 46(2) GDPR for the protection of the personal data
Right to Rectification and Completion
Where you determine that the personal data concerning you held by us is inaccurate, you may request that we rectify the inaccurate data without undue delay.
Where the personal data concerning you is incomplete, you may request that it be completed.
Right to Erasure
You have the right to erasure, also known as the “right to be forgotten”, provided that the processing is not necessary for exercising the right of freedom of expression and information, complying with a legal obligation or performing a task carried out in the public interest, and one of the following grounds applies:
- The personal data is no longer necessary for the purposes for which it was processed
- The sole legal basis for the processing was your consent and you have withdrawn that consent
- You have objected to the processing of your personal data that we made publicly available
- You have objected to the processing of personal data that we did not make publicly available and there are no overriding legitimate grounds for the processing
- Your personal data has been processed unlawfully
- The personal data must be erased in order to comply with a legal obligation to which we are subject
There is no entitlement to erasure where, in the case of lawful non-automated data processing, erasure is impossible or would involve disproportionate effort due to the particular method of storage and your interest in erasure is minimal.
In this case, restriction of processing will apply instead of erasure.
Right to Restriction of Processing
You may request that we restrict the processing where one of the following grounds applies:
- You dispute the accuracy of the personal data. In this case, the restriction may be requested for the period necessary for us to verify the accuracy of the data
- The processing is unlawful and you request restriction of the use of your personal data instead of its erasure
- We no longer require your personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims
- You have objected to the processing pursuant to Art. 21(1) GDPR, and it has not yet been determined whether our legitimate grounds override your grounds
Restriction of processing means that the personal data may be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest.
Before a restriction is lifted, we are required to inform you.
Right to Data Portability
You have the right to data portability where the processing is based on your consent pursuant to Art. 6(1), first sentence, point (a) or Art. 9(2), point (a) GDPR, or on a contract to which you are a party, and the processing is carried out by automated means.
Provided that this does not adversely affect the rights and freedoms of others, the right to data portability includes the following rights:
You may request that we provide the personal data you have supplied to us in a structured, commonly used and machine-readable format.
You have the right to transmit this data to another controller without hindrance from us.
Where technically feasible, you may request that we transmit your personal data directly to another controller.
Right to Object
Where processing is based on Art. 6(1), first sentence, point (e) GDPR, concerning the performance of a task carried out in the public interest or in the exercise of official authority, or Art. 6(1), first sentence, point (f) GDPR, concerning the legitimate interests of the controller or a third party, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
This also applies to profiling based on Art. 6(1), first sentence, point (e) or point (f) GDPR.
After you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.
You may object at any time to the processing of personal data relating to you for direct marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing.
After you exercise this right to object, we will no longer use the relevant personal data for direct marketing purposes.
You may submit your objection informally by telephone, email or post using the postal address of our company provided at the beginning of this Privacy Policy.
Withdrawal of Consent
You have the right to withdraw consent at any time with effect for the future.
The withdrawal of consent may be communicated informally by telephone, email or post.
The withdrawal does not affect the lawfulness of processing based on consent before the withdrawal was received.
Once the withdrawal has been received, any processing based exclusively on your consent will be discontinued.
Right to Lodge a Complaint
Where you believe that the processing of personal data relating to you is unlawful, you may lodge a complaint with a data protection supervisory authority.
The competent supervisory authority for data protection matters is the state data protection authority of the German federal state in which our company has its registered office.
A list of data protection authorities and their contact details is available at:
German Federal Commissioner for Data Protection and Freedom of Information – Addresses and Links
Status and Updates to This Privacy Policy
This Privacy Policy was last updated on 14 July 2026.
We reserve the right to amend this Privacy Policy periodically to reflect changes to the underlying data-processing activities.
Change settings here.