Privacy Policy

We inform you below in accordance with the legal requirements of data protection law (in particular in accordance with BDSG n.F. and the European General Data Protection Regulation 'GDPR') about the type, scope and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. Regarding the definition of terms such as "personal data" or "processing", we refer to Art. 4 GDPR.

Name and Contact Details of the Responsible Party

Our responsible party (hereinafter "Controller") within the meaning of Art. 4 No. 7 GDPR is:

campusready GmbH
Pommernstraße 12a
82327 Tutzing
Germany
Email: info@campusready.de

Types of Data, Purposes of Processing and Categories of Affected Persons

Below we inform you about the type, scope and purpose of the collection, processing and use of personal data.

1. Types of Data We Process

Master data (name, address, etc.), contact data (phone number, email, fax, etc.), contract data (subject matter of the contract, term, etc.)

2. Purposes of Processing According to Art. 13 Para. 1 c) GDPR

Processing of contracts, technical and economic optimization of the website, fulfillment of contractual obligations, fulfillment of legal retention obligations, processing of contact inquiries

3. Categories of Affected Persons According to Art. 13 Para. 1 e) GDPR

Visitors/users of the website, customers, suppliers, interested parties

The affected persons are collectively referred to as "Users".

Legal Basis for Processing Personal Data

Below we inform you about the legal basis for processing personal data:

  1. If we have obtained your consent for the processing of personal data, Art. 6 Para. 1 S. 1 lit. a) GDPR is the legal basis.
  2. If the processing is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures that take place at your request, Art. 6 Para. 1 S. 1 lit. b) GDPR is the legal basis.
  3. If the processing is necessary to fulfill a legal obligation to which we are subject (e.g., legal retention obligations), Art. 6 Para. 1 S. 1 lit. c) GDPR is the legal basis.
  4. If the processing is necessary to protect vital interests of the data subject or another natural person, Art. 6 Para. 1 S. 1 lit. d) GDPR is the legal basis.
  5. If the processing is necessary to safeguard our legitimate interests or those of a third party and your interests or fundamental rights and freedoms do not override these, Art. 6 Para. 1 S. 1 lit. f) GDPR is the legal basis.

Disclosure of Personal Data to Third Parties and Processors

Without your consent, we generally do not pass on data to third parties. Should this be the case, the disclosure is based on the legal bases mentioned above, e.g., when data is passed on to online payment providers for contract fulfillment or due to a court order or due to a legal obligation to disclose data for the purpose of criminal prosecution, danger prevention or enforcement of intellectual property rights.

We also use processors (external service providers, e.g., for web hosting of our websites and databases) to process your data. If data is passed on to processors as part of an agreement on commissioned processing, this is always done in accordance with Art. 28 GDPR. We carefully select our processors, monitor them regularly and have reserved the right to issue instructions regarding the data. In addition, the processors must have taken appropriate technical and organizational measures and comply with the data protection regulations in accordance with BDSG n.F. and GDPR.

Data Transfer to Third Countries

With the adoption of the European General Data Protection Regulation (GDPR), a uniform basis for data protection in Europe was created. Your data is therefore mainly processed by companies for which the GDPR applies. Should processing by third-party services outside the European Union or the European Economic Area take place, these must meet the special requirements of Art. 44 ff. GDPR. This means that processing takes place on the basis of special guarantees, such as the EU Commission's officially recognized determination of a data protection level corresponding to the EU or compliance with officially recognized special contractual obligations, the so-called "Standard Contractual Clauses".

If we obtain your express consent to the transfer of data to the USA in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR due to the ineffectiveness of the so-called "Privacy Shield", we point out the risk of secret access by US authorities and the use of data for surveillance purposes, possibly without legal remedies for EU citizens.

Deletion of Data and Storage Duration

Unless expressly stated in this privacy policy, your personal data will be deleted or blocked as soon as the consent given for processing is revoked by you or the purpose for storage no longer applies or the data is no longer required for the purpose, unless their further retention is required for evidence purposes or legal retention obligations oppose this. These include, for example, commercial law retention obligations for business letters in accordance with § 257 Para. 1 HGB (6 years) as well as tax law retention obligations in accordance with § 147 Para. 1 AO for receipts (10 years). When the prescribed retention period expires, your data will be blocked or deleted, unless storage is still necessary for a contract conclusion or contract fulfillment.

Automated Decision-Making

We do not use automated decision-making or profiling.

Provision of Our Website and Creation of Log Files

If you only use our website for informational purposes (i.e., no registration and no other transmission of information), we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f) GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

Contact Options

If you contact us (e.g., via contact form or email), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for answering your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 S. 1 lit. f) GDPR or, if your contact is aimed at concluding a contract, Art. 6 Para. 1 S. 1 lit. b) GDPR. Your data will be deleted after final processing of your request; this is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations to the contrary.

Contractual Data Processing

We process personal data that we need to fulfill our contractual obligations, such as name, address, email address, ordered products/services and their prices, as well as invoice and payment data (e.g., bank details, payment history) for the purpose of fulfilling our contractual obligations (knowledge of who the contractual partner is; establishment, content design and processing of the contract; checking the plausibility of the data) and service provision (e.g., customer service contact) in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR. The entries marked as mandatory in online forms are required for contract conclusion.

Disclosure of this data to third parties generally does not occur, except it is necessary to pursue our claims (e.g., transfer to a lawyer for collection) or to fulfill the contract (e.g., transfer of data to payment providers) or there is a legal obligation to do so in accordance with Art. 6 Para. 1 S. 1 lit. c) GDPR.

We can also process the data you have provided to inform you about other interesting products from our portfolio or to send you emails with technical information.

The data will be deleted as soon as it is no longer required to achieve the purpose of its collection. This is the case for master and contract data when the data is no longer required for contract execution and no claims can be asserted from the contract because they are time-barred (warranty: two years / regular limitation period: three years). We are obliged to store your address, payment and order data for a period of ten years due to commercial and tax law requirements. However, we restrict processing after three years after contract termination, i.e., your data will only be used to comply with legal obligations. Information in the user account remains until it is deleted.

Rights of the Affected Person

1. Objection or Revocation Against the Processing of Your Data

If processing is based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a), Art. 7 GDPR, you have the right to revoke your consent at any time. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by this.

If we base the processing of your personal data on the balancing of interests in accordance with Art. 6 Para. 1 S. 1 lit. f) GDPR, you can object to the processing. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling legitimate reasons on the basis of which we will continue processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can exercise the right to object free of charge. You can inform us about your advertising objection using the following contact details:

campusready GmbH
Pommernstraße 12a
82327 Tutzing
Germany
Email: info@campusready.de

2. Right to Information

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about your personal data stored by us in accordance with Art. 15 GDPR. This includes in particular information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it was not collected directly from you.

3. Right to Rectification

You have a right to rectification of incorrect or completion of correct data in accordance with Art. 16 GDPR.

4. Right to Deletion

You have a right to deletion of your data stored by us in accordance with Art. 17 GDPR, unless legal or contractual retention periods or other legal obligations or rights to further storage oppose this.

5. Right to Restriction

You have the right to request a restriction in the processing of your personal data if one of the conditions in Art. 18 Para. 1 lit. a) to d) GDPR is fulfilled:

  • If you dispute the accuracy of the personal data concerning you for a period that enables the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
  • the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
  • if you have objected to the processing in accordance with Art. 21 Para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

6. Right to Data Portability

You have a right to data portability in accordance with Art. 20 GDPR, which means that you can receive the personal data stored by us about you in a structured, common and machine-readable format or request transmission to another controller.

7. Right to Complain

You have a right to complain to a supervisory authority. As a rule, you can contact the supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation.

Data Security

To protect all personal data transmitted to us and to ensure that data protection regulations are complied with by us, but also by our external service providers, we have taken appropriate technical and organizational security measures. Therefore, among other things, all data between your browser and our server is transmitted encrypted via a secure SSL connection.

Last updated: 26.2.2026

← Back to Homepage