Privacy Policy

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. With regard to the terms used, such as "personal data" or their "processing", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Our website can usually be used without providing personal data. Insofar as personal data (e.g. name, address or e-mail address) is collected on our website, this is always done on a voluntary basis as far as possible. These data will not be passed on to third parties without your express consent.

We would like to point out that data transmission over the Internet (e. g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

Responsible body

The responsible body for www.campudus.com, www.grud.de and www.yourshowroom.de is Campudus GmbH, Ludwig-Erhard-Str. 6, 84034 Landshut ("Campudus"). You can request information about your personal data held by Campudus via datenschutz@campudus.com or withdraw your consent to the processing of personal data.

Cookies

Some of the websites use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

Google Analytics

We use Google Analytics, a web analysis service provided by Google LLC ("Google"), on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f GDPR). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and internet usage. In doing so, pseudonymous user profiles can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by the user's browser will not be merged with other Google data.

Google Analytics Opt-Out

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set that prevents your data from being collected when you visit this website in the future: Deactivate Google Analytics You can find more information on data usage by Google, settings and objection options on the Google website:
https://policies.google.com/technologies/partner-sites ("Use of data by Google when you use our partners' websites or apps"), https://policies.google.com/technologies/ads ("Use of data for advertising purposes"), https://adssettings.google.com/authenticated ("Manage information that Google uses to show you advertisements").

Google Maps

The service "Google Maps" is integrated via an API on our website, to display geographical information, as our headquarter location. The use of Google Maps enables Google to collect, process and use data about your use of the service. By using Google Maps, information about your use of this website, including your IP address and the addresses you enter, may be transmitted to Google in the USA. The map content is transmitted by Google directly to your browser and is integrated into the website. We have no influence on the scope of the data collected by Google in this way. We also have no influence on the further processing and use of the data by Google and therefore cannot accept any responsibility for this. You can find more information about the processing of your data by Google in the privacy policy of Google.

With the help of Google Maps, data such as IP address, location information, GPS, sensor data of your device, data usage data, date and time of visit, visited URLs  can be collected and processed. Legal basis for the processing is your consent according to GDPR Article 6 (1). If you do not want Google to collect, process or use data about you via our website, you can refuse or revoke your consent at any time with effect for the future. In addition, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.

The personal data will be kept for as long as is necessary to fulfill the purpose of processing. The data will be deleted as soon as they are no longer required to fulfill the purpose. In the course of processing, the data may be transmitted to the further recipients in addition to Google Ireland Limited, which can be Google LLC. and/or Alphabet Inc. In the course of processing by Google Maps, the data may be transmitted to the USA. The security of the transfer is guaranteed by so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security equivalent to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an appropriate level of security, your consent will be obtained as part of the cookie usage consent.

Live-Chat

This website uses Userlike, a live chat software from Userlike UG (limited liability). Userlike uses "cookies", text files that are stored on your computer and that enable a personal conversation in the form of a real-time chat on the website with you. The data collected is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

Collection of access data and log files

We collect data on every access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR. The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider . For security reasons (e.g. to investigate acts of abuse or fraud), log file information is stored for a maximum of 31 days and then deleted. Data, the further storage of which is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified.

Contact

When you contact us (via contact form, chat or e-mail), your details will be processed to process the contact request and to process it in accordance with Art. 6 para. 1 lit. b GDPR.

Application form
If you contact us using the application form, your details from the form, including the contact details you provided there, will be stored by us for the purpose of processing the application and in case of follow-up questions. The data will not be used for any other purpose or passed on to third parties.

Hosting

This website is hosted by an external service provider (hoster). We would like to point out that the operation of our website and the servers are hosted by the provider commissioned by us, Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103 in the USA. Further information on Webflow's privacy policy can be found under the following link: Global Privacy Policy | Webflow.

The personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, meta and communication data, web page accesses and other data generated by a website. As far as possible, IP addresses are anonymized. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

Conclusion of a contract for commissioned processing
In order to ensure data protection-compliant processing, we have concluded a contract for commissioned processing with Webflow and our company Campudus GmbH on the basis of Art. 28 GDPR in conjunction with the EU standard contractual clauses.

Online presence in social media

We maintain an online presence within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.

Unless otherwise stated in our data protection declaration, the data of the users will be processed if they communicate with us within the social networks and platforms, e.g. write articles on our online presence or send us messages.

Rights of data subjects

You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR. You have accordingly Art. 16 GDPR the right to request the completion of the data concerning you or the correction of the incorrect data concerning you. In accordance with Art. 17 GDPR, you have the right to demand that the relevant data be deleted immediately or, alternatively, in accordance with Art. 18 GDPR, to request a restriction on the processing of the data. You have the right to request that you receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request that it be transmitted to other responsible parties. In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.

Safety measures

In accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons, we make suitable technical and organizational measures to ensure a level of protection appropriate to the risk. The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, ensuring availability and their separation. Furthermore, we have set up procedures that enable the exercise of data subject rights, Ensure deletion of data and reaction to data threats. Furthermore, we take into account the protection of personal data already in the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR).

Deletion of data

The data processed by us will be deleted or restricted in their processing in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention requirements. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.

Changes and updates to the privacy policy

We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e. g. consent) or other individual notification.