Privacy Policy
June 2026
Privacy notice
1. Data controller within the meaning of data protection laws
Waldeck Compliance Tech Services GmbH & Co. KG
Eschersheimer Landstraße 14 | TurmCenter
60322 Frankfurt am Main Germany
Responsible for data processing on this website is:
Phone: +49 69 90747–0 Email: info@waldeck-compliance.eu
2. General Information on Data Processing
We process the personal data of users of this website solely in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Personal data refers to any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR). This includes, for example, your name, address, email address, or IP address.
This data is only processed to the extent necessary to provide a functional website, as well as our content and services, or where a corresponding legal basis exists.
3. Legal Basis for Processing
Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) (a) GDPR serves as the legal basis. Where the processing of personal data is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract, Art. 6 (1) (b) GDPR serves as the legal basis. Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis. If the processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party, and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis.
4. Provision of the Website and Creation of Log Files
4.1 Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
User's IP address (truncated/anonymised where technically feasible)
Date and time of access
Accessed page or name of the retrieved file
Volume of data transferred
Notification of successful retrieval
Browser type and version used
Operating system used
Referrer URL (previously visited page)
The data is stored in our system's log files. This data is not stored together with other personal data of the user.
4.2 Legal Basis and Purpose of Data Processing
The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. It is stored in log files to ensure the proper functioning of the website and to maintain IT security.
4.3 Retention Period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of storing data in log files, this occurs after a maximum of 14 days.
5. Hosting
This website is hosted by an external service provider:
Framer B.V.
Rozengracht 207B 1016 LZ Amsterdam Netherlands
The host processes personal data on our behalf (e.g. IP addresses, log files, contact enquiries, meta and communication data). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the reliable provision of our website). A data processing agreement has been concluded with the host in accordance with Art. 28 GDPR.
6. Contact Form and Email Contact
6.1 Description and scope of data processing
A contact form is available on our website, which can be used to establish contact electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data includes:
Name
Email address
Company / job title (where applicable)
Content of the message
Date and time of transmission
Alternatively, contact can be established via the email address provided. In this case, the personal data of the user transmitted with the email will be stored.
No data is passed on to third parties in this context. The data is processed exclusively for managing the conversation.
6.2 Legal basis for processing
The legal basis for the processing of data, where user consent has been obtained, is Art. 6 (1) (a) GDPR.
The legal basis for the processing of data transmitted in the course of establishing contact is Art. 6 (1) (f) GDPR. If the intent of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
6.3 Purpose of data processing
The processing of personal data from the input mask is used solely to handle the contact inquiry. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.
6.4 Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent via email, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
Statutory retention obligations (in particular retention periods of up to 10 years under commercial and tax laws pursuant to Section 147 AO, Section 257 HGB) remain unaffected by this.
6.5 Right of objection and removal
The user has the option at any time to withdraw their consent to the processing of personal data. If they contact us by email, they can object to the storage of their personal data at any time. In such cases, the conversation cannot be continued.
The withdrawal of consent and the objection to storage can be made informally by email to [datenschutz@...]. In this event, all personal data stored in the course of establishing contact will be deleted, provided that no statutory retention obligations prevent this.
7. Recipients of Personal Data
Your personal data will only be disclosed to third parties if:
you have given your express consent to this (Art. 6 para. 1 lit. a GDPR),
disclosure is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 para. 1 lit. f GDPR),
there is a legal obligation to disclose the data (Art. 6 para. 1 lit. c GDPR),
this is necessary for the performance of contractual relationships with you (Art. 6 para. 1 lit. b GDPR).
Within the scope of data processing on behalf of a controller pursuant to Art. 28 GDPR, personal data may be transferred to the following categories of recipients:
Hosting service providers
IT service providers (maintenance, support)
8. Data Transmission to Third Countries
Personal data is not transferred to countries outside the European Union or the European Economic Area (third countries).
9. Cookies
This website uses only technically necessary cookies that are required for the operation of the website (e.g. session cookies). These cookies are set on the basis of Section 25 (2) (2) TDDDG and Art. 6 (1) (f) GDPR and are automatically deleted after the browser session ends.
No tracking, analysis or marketing cookies are used.
10. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:
10.1 Right of access (Art. 15 GDPR)
You have the right to obtain confirmation from the controller as to whether or not personal data concerning you is being processed by us. Where this is the case, you can request access to this data as well as information regarding the purposes of the processing, the categories of data, the recipients, the storage period, and other points specified in Art. 15 GDPR.
10.2 Right to rectification (Art. 16 GDPR)
You have the right to obtain from the controller the rectification and/or completion of any inaccurate or incomplete personal data concerning you.
10.3 Right to erasure (Art. 17 GDPR)
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay, provided that one of the grounds specified in Art. 17 GDPR applies.
10.4 Right to restriction of processing (Art. 18 GDPR)
Under the conditions set out in Art. 18 GDPR, you have the right to request the restriction of processing of your personal data.
10.5 Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format.
10.6 Right to object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (e) or (f) of Art. 6(1) GDPR.
The controller shall no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
10.7 Right to withdraw consent under data protection law (Art. 7(3) GDPR)
You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
10.8 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority responsible for us is:
The Hessian Commissioner for Data Protection and Freedom of Information (HBDI) Gustav-Stresemann-Ring 1 65189 Wiesbaden
11. Data Security
We employ appropriate technical and organisational measures (TOM) to protect your personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the lock symbol in your browser address bar.
12. Validity and Amendments to This Privacy Policy
This privacy policy is currently valid and is correct as of May 2026.
Due to the further development of our website and offers, or owing to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed on this website by you at any time.
