Privacy Policy

1. General Information and Data Controller

The protection of your personal data is very important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this Privacy Policy.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Capoyo GmbH
Rotwandweg 3
82024 Taufkirchen
Germany
Phone: +49 (0) 89 44 14 11 40
E-Mail: info@capoyo.de

2. Data Collection on Our Website (Server Logs)

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The mentioned data are processed by us to ensure a smooth connection of the website, to ensure a comfortable use of our website, and to evaluate system security and stability. The legal basis for this data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.

3. Contact by E-Mail or Telephone

If you contact us by e-mail or telephone, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of processing your request. We will not pass on these data without your consent.

The processing of these data is based on Art. 6 (1) lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if this has been requested.

The data you send to us will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

4. Analytics Tools: Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Consent as Legal Basis
The use of Google Analytics only takes place if you have given us your express prior consent via our cookie banner. The legal basis is Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG (German Telecommunications-Digital Services Data Protection Act). You can revoke your consent at any time by accessing and adjusting the cookie settings on our website.

Data Transfer to the USA
Insofar as data is processed on Google servers in the USA, this data transfer is based on the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR). Google is certified under this framework and thus commits to complying with European data protection standards.

IP Anonymization & Data Processing Agreement
We have activated the IP anonymization function on this website and have concluded a data processing agreement with Google. Your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to transmission.

5. Your Rights as a Data Subject

You have the right:

• pursuant to Art. 15 GDPR, to request information about your personal data processed by us.
• pursuant to Art. 16 GDPR, to demand the immediate rectification of incorrect or completion of your personal data stored by us.
• pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us.
• pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data.
• pursuant to Art. 20 GDPR, to receive your provided personal data in a structured, commonly used and machine-readable format (data portability).
• pursuant to Art. 7 (3) GDPR, to revoke your consent at any time.
• pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority.