1. General

Collana IT GmbH is responsible in the meaning of the European General Data Protection Regulation (GDPR) for data processing on this website. We are attentive to your rights to personality. We know about the significance of personal data that we hold on you as user of our website. We respect the protection of your personal data and shall collect, store, or process all the data obtained exclusively according to the extent of the relevant provisions of data protection law in the context of our business purposes.


1.1 Definitions

Personal data is deemed to be all information which relates to an identified or identifiable natural person. A natural person is considered to be identifiable if they can be identified directly or indirectly, particularly by means of assignment to an identifier, a name, an identification number, site data, online identifier or one or more particular characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.


1.2 Legal Basis for Processing

To the extent that we obtain permission for processing personal data, Art. 6 (1) (1) (a.) of the European General Data Protection Regulation (GDPR) is used as the legal basis.

The processing of personal data required for performance of a contract with you is supported by Art. 6 (1) (1) (b.) of the GDPR. This also applies to processes required for undertaking pre-contractual measures.

To the extent that processing personal data is required for compliance with a legal obligation to which our business is subject, this happens in the context of Art. 6 (1) (1) (c.) of the GDPR.

If the processing is required to protect a legitimate interest of us or a third party and your interests, basic rights and freedoms do not override the legitimate interest, then Art. (6) (1) (1) (f.) of the GDPR is the legal basis for processing. The legitimate interest of our business is generally in the provision of our services due and/or ongoing optimisation of our services and representations.

1.3 Data Erasure and Duration of Storage

Your personal data shall be erased or blocked as soon as the purpose of storage lapses. Furthermore, storage may happen if this has been provided for by the European or national legislators in European Union regulations, laws or other regulations. Blocking or erasure of the data also occurs if the storage period prescribed by the standards mentioned elapses, unless a requirement for further storage of the data persists for conclusion or performance of a contract.


2. Collecting Personal Data

In principle, we do not collect and use any personal data when someone visits our website. This only happens to the extent that this is required for provision of a functioning website and our contents and services. The collection and usage of personal data from our users is done regularly, only after they have given their permission. This does not apply in such cases in which prior obtaining of permission is not possible for practical reasons, and the processing of data is permitted by legal regulations.

In the following, we would like to inform you of the nature, scope and purpose of our data handling in the context of this website:


2.1 Server-Log-Files

Every time our website is called up, the user data required to access, use and account for the usage of the site will automatically be transferred by your browser to our server and stored in a protocol file (log). 

These are:

  • Browser type/ browser version
  • Operating system used
  • Hostname of the accessing computer
  • Date and time of the server query
  • IP address of the computer querying the website;
  • Website from which the access is made (referrer URL)
  • Files called up
  • Quantity of data transferred

The storage of the log file is for the following purposes:

  • Evaluation of the file call-up for statistical purposes
  • System security and stability of the website
  • Review of uncontractual or otherwise illegal usage, to the extent that there are actual indications of this

The legal basis for this data processing is Art. 6 (1) (1) (f.) of the GDPR. Our authorised interest comes from the purposes mentioned above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. We do not merge this data with other data sources.


2.2 Usage Data

We collect and use personal data on the basis of Art. (6) (1) (1) (b.) of the GDPR from you, where this is required to enable the utilisation of our internet provision (usage data).

For the purposes of advertising, market research and for demand-based formatting of our internet provision, we are also allowed to create usage profiles by using pseudonyms.

You are entitled to reject this usage of your data at any time. We are not allowed to merge the usage profiles with data on the holder of the pseudonym.


2.3  Data in Connection with You Making Contact

If you encounter enquiries from us by contact form, your information from the form, or by the e-mail address provided for making contact, including the contact data specified by you in it, shall only be stored by us for the purposes of processing the relevant enquiry and in the event of associated questions. We shall not pass on this data to any third party without your permission. The corresponding data usage occurs on the basis of Art. 6 (1) (1) (b) of the GDPR in the context of processing your request.


3. Cookies

After user approval on our website, what are known as “cookies” are stored on the user's computer.

A cookie relates to a small text file in a duly-provided folder of the computer. This file is used to identify the user's computer for the duration of the session. Cookies cannot generate any manipulations on any terminal of the user and may – most simply in the browser – be deleted manually at any time.

Handling of cookies can be set in your internet browser or our privacy settings individually, so that cookies are rejected or only accepted after confirmation. The cookies, what are known as “session cookies” here, are used for the purpose of web analysis and extending the function of our internet provision. We refer to the fact that when rejecting cookies, not all components of our applications can operate problem-free.


4. Tracking Process

The usage of tracking tools with anonymised collection is done on the basis of Art. (6) (1) (1) (f) of the GDPR. In so doing, to the extent of the context of our legitimate interests, we want to guarantee a demand-based format and the ongoing optimisation of our website (through statistical evaluations).


4.1 Google Analytics

If you have agreed to this use, our website uses Google Analytics, a web analytics service provided by Google LLC ("Google"), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.  

Google Analytics uses so-called "cookies" (text files stored on your computer) to enable the analysis of your usage of our website. The relevant information generated by these cookies is usually transferred to a US Google server and stored there. If IP address anonymization has been activated on the site, your IP address will be shortened (masked) within an EU country or a contract partner state within the Eurozone (EFTA) prior to the transfer to a US server. The full IP address will only be transferred to a US Google server in exceptional cases, to be masked there. Google will use this information to evaluate your usage of the website, create reports on the activities on the website, and to provide further services linked to the usage of the website and the internet on behalf of the operators of this website. The IP address transferred by your browser as part of the Google Analytics activity will not be consolidated with any other Google data. You can prevent the storage of cookies by changing the settings in your browser software. Please note that in this case, some functionality of the site will no longer be available to you. You can also prevent the transfer to and processing of the data captured by means of cookies (including your IP address) by Google, by downloading the plug-in available through the following link. This installs an opt-out cookie which prevents any further data capture when you visit the website.

Please note that Google Analytics on this site has been extended to include the code "anonymizeIp" in order to ensure the anonymized capture of IP addresses (through masking). We use Google Analytics for the sole purpose of analyzing data from double-click cookies and AdWords for statistical purposes. If you wish, you can deactivate this through your ad preferences settings.

As the operator of this website, we do not have any knowledge of the content of the transferred data or its usage by Google. You can find further information in the data protection declaration and the Google terms & conditions for usage at or

Tracking tools are used on the basis of Art. 6, § 1, S. 1 lit. f of the DSGVO, for the sole purpose of creating and continuously optimizing the functionality and user friendliness of our website (by means of statistical analysis) as part of our legitimate business interests.


5. Responsibility for Linked Content

On our website we may also use links to websites of other providers. This privacy declaration does not apply in this case. Where personal data is collected, processed or used when using the websites of other providers, please follow the privacy instructions from the relevant provider. We are not responsible for their data protection conduct.


6. Forwarding Personal Data to Third Parties

Your personal data are exclusively stored on our servers or on the servers used on our behalf. Access and usage of this data is only possible by a duly-authorised group of employees or service providers and is also only limited to that data needed for fulfilment of the relevant task.

Your data shall not be submitted to third parties without your permission. Data submission to third party states (states outside the European Economic Area – EEA) does not occur, unless otherwise specified in this privacy declaration, and is also not intended in the future.


7. Data Security

To protect your personal data, we have taken technical and organisational measures to ensure that your data is protected against random or intentional losses, destruction or manipulations, as well as access to unauthorised persons. Our protective measures are reviewed at regular intervals and adapted to technical advancements as required.


8. Data Protection Officer

If you have any further questions in relation to processing your personal data, please contact our data protection officer:

compolicy GmbH
Schwedenkai 1
24103 Kiel


9. Changes to the Privacy Declaration

We reserve the right to change this privacy declaration at any time as required, and in consideration of the respective data protection regulations applicable at the time of the change.

Issued: June 2021