DATA PROTECTION NOTICE
Thank you for your interest in our online platform Capmo (hereinafter "Platform") and the services provided and offered there (hereinafter "Capmo Services"). The protection of personal data in the context of the use of the Platform and the Capmo Services is of particular concern to us. We respect your privacy. We therefore collect and process your personal data exclusively in accordance with the relevant legal provisions.
1.1
The controller within the meaning of the EU General Data Protection Regulation (Art. 4 No. 7 GDPR) is Capmo GmbH, Ridlerstraße 39, 80339 Munich, phone +49 (0)89 21540420, e-mail (hereinafter "Capmo", "we", "our", "us" etc.).
1.2
You can contact Capmo's data protection officer by post at Nextwork GmbH, represented by Marco Peters, Sophienstraße 20, 80333 Munich and by e-mail at .
Personal data is all information that can be assigned to you individually (see Art. 4 No. 1 GDPR). This includes, for example, your name, your address, your telephone number, your e-mail address and your payment information. Non-personal data, on the other hand, is information of a general nature that cannot be used to determine your identity. This includes, for example, the number of users of the platform.
3.1
Web server logs (including the IP address)
When you visit the platform, our web server automatically collects your full IP address, the date and time you are on the platform, the websites you have visited on the platform, the website you were previously on, the browser you are using (e.g. Google Chrome etc.), the operating system you are using (e.g. Windows 10, MacOS etc.) and the domain name and address of your Internet provider (e.g. Deutsche Telekom) for technical reasons. This information is required for the technical transmission of the platform's web pages and secure server operation.
We process this information to observe and monitor the stability, functionality and technical performance of the Platform and Capmo Services and to investigate, identify, rectify and resolve any problems and errors on the Platform and Capmo Services. The legal basis for the processing of this information is our legitimate interests (Art. 6 para. 1 letter f GDPR), which consist in ensuring and improving the integrity, stability and functionality of the platform and Capmo services - as far as technically possible and reasonable.
For reasons of technical security, in particular to defend against attempted attacks or other misuse of the platform, the Capmo services and/or our web server, this information will continue to be stored for a short period of time. It is not possible for us to draw any direct conclusions about individual persons on the basis of this information. After seven (7) days at the latest, this information is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to an individual person. However, for the period until the IP address is shortened, we may process this information in the event of a security incident (attempted attack or misuse, etc.) in cooperation with your Internet provider and/or local authorities in order to determine the originator of the security incident. The legal basis for this is our legitimate interests (Art. 6 para. 1 letter f GDPR), which consist of protecting the integrity of the platform, the Capmo services, our system and our users.
3.2
Personal data that you provide to us when using the Capmo services
(a) We also collect personal data from you if you have voluntarily provided it to us in order to provide, operate and administer the Platform and provide you with the Platform and Capmo Services in accordance with the Master Service Agreement ("MSA").
In particular, we collect (i) your name, your email address, your telephone number, your position in the company, the industry of the company, the language you have selected and your payment information; and (ii) - optionally - your profile picture if you register a customer account on the platform as our contractual partner and specify yourself as the contact person for the customer account. The legal basis for this is the fulfilment of our contractual obligations (Art. 6 para. 1 letter b GDPR).
Furthermore, we collect in particular (i) your name, your e-mail address, your telephone number, your position in the company, the industry of the company and the language you have selected; and (ii) - optionally - your profile picture if you register a user account assigned to the customer account as an authorised user (hereinafter "user") or are registered as a user by the owner of the corresponding customer account or by Capmo with your consent. The legal basis for this is our legitimate interests (Art. 6 para. 1 letter f GDPR), which consist of providing you with the platform and the Capmo services in accordance with the MSA.
In this context, the user's e-mail address may also be provided to us by the owner of the customer account in order to send the user an invitation to the platform with the enquiry.
When we collect your personal data, we will inform you whether the provision of the respective personal data is required or merely optional, as well as about the possible consequences if you do not provide the corresponding information.
(b) We also collect your name, your e-mail address and any other information you provide when you fill out any forms on the platform or send us an e-mail enquiry in order to process and handle your enquiry. The legal basis for this is the fulfilment of our pre-contractual or contractual obligations (Art. 6 para. 1 letter b GDPR).
(b) If you have given us your consent, we will also collect your name, your e-mail address and the language you have selected when you register for our newsletter. We process this personal data in order to send you our newsletter. The legal basis for this is the consent you have given us (Art. 6 (1) (a) GDPR).
You can revoke your consent at any time with effect for the future. You can declare this cancellation at any time by following the cancellation instructions contained in each newsletter or by contacting the contact options listed under section 1.2 with your cancellation request.
We do not pass on any personal data to third parties unless this is necessary for the fulfilment of the contract, otherwise permitted by relevant legal provisions or you have given us your consent.
In this respect, in order to provide the Capmo services, we must pass on certain information for processing purposes to (a) other involved users of the platform (i.e. the users also involved in the activities and processes) and (b) involved service providers (i.e. providers of payment services). This information is passed on to these persons exclusively for the processing of Capmo services on the platform, but in no case for marketing purposes. The legal basis for this is the fulfilment of our contractual obligations (Art. 6 para. 1 lit. b GDPR) and our legitimate interests (Art. 6 para. 1 lit. f GDPR), which consist of providing you with the platform and the Capmo services in accordance with the MSA.
We are also authorised to outsource the processing of personal data in whole or in part to external service providers who work for us as processors (Art. 4 No. 8 GDPR) within the framework of data protection regulations. If these service providers are based outside the European Union (EU) or the Agreement on the European Economic Area (EEA), we will take appropriate security measures in accordance with legal and regulatory requirements to ensure the security of your personal data.
Within our software solution, we offer users the option of uploading and saving emails for documentation purposes. As emails contain personal data from third parties (e.g. service providers), we would like to draw your attention to your obligation to inform the data subjects about this processing of their personal data.
We take appropriate and reasonable technical measures to protect your personal data against loss, destruction, manipulation and unauthorised access. The platform uses transport encryption (TLS) to protect the transmission. All of our employees and external service providers working for us (processors within the meaning of Art. 4 No. 8 GDPR) are obliged to comply with the applicable data protection laws.
Our security precautions are subject to a continuous improvement and optimisation process. Please always use the latest version of the Google Chrome web browser to ensure that your personal data is protected in the best possible way.
Your personal data will only be stored by us for as long as is necessary to fulfil the purposes for which it was collected or - if there are additional statutory retention periods (e.g. Section 147 AO and Section 257 HGB) - for the duration of the statutory retention period. Your personal data will then be deleted.
7.1
The Platform and Capmo Services use cookies and local storage to (a) better understand how the Platform and Capmo Services are used; (b) provide and maintain a stable, secure, functional and accurately running Platform to the extent technically possible and reasonable; and (c) provide and enable you to have an optimal and meaningful user experience.
Cookies and local storage help us to make your visit to the platform and the use of Capmo services more pleasant, efficient and meaningful for you.
(a) Cookies
Cookies are text information files that are sent from our web server to your computer and stored there when you visit the platform. Most browsers accept cookies automatically, but can be configured via the browser settings function so that they are not used. You can refuse the use of cookies or delete the data collected at a later date. It is not necessary for you to allow cookies to be set in order to use the platform in general. However, there are certain areas and functions on the platform that you cannot use without cookies.
(b) Local Storage
The Local Storage technology is described in more detail in Section 7.2 (a). The use of local storage cannot be deactivated for the reasons stated there because it is required for authentication and security purposes in connection with your customer account or user account.
7.2
The following types of cookies and local storage are used on the platform:
(a) Local Storage
Local Storage is a technology with which your browser stores data on your computer or mobile device in order to recognise multiple use by the same user; the data collected remains stored for this purpose even after the browser is closed or the programme is terminated. Local storage is used to record whether you are logged in to the platform. This serves authentication and security purposes and is necessary to enable you to navigate and use the platform when you are logged in (assignment to your customer account or user account). The legal basis for this is the fulfilment of our contractual obligations (Art. 6 para. 1 letter b GDPR) or our legitimate interests (Art. 6 para. 1 letter f GDPR), which consist of providing you with the platform and Capmo services in accordance with the MSA.
(b)Technically required cookies
Technically necessary cookies are cookies that are required for navigation on the platform and for the use of the various options of the Capmo services provided there, in particular the necessary data communication, identification of your user account, access to restricted areas of the platform or the storage of content in order to share it. The legal basis for this is our legitimate interests (Art. 6 para. 1 letter f GDPR), which consist of providing you with the platform and the Capmo services in accordance with the MSA.
(c)Personalising cookies or customisation cookies
Customisation cookies are cookies that allow access to the platform with certain general default settings according to different specifications of your end device, such as language settings, browser type and regional settings, etc. The legal basis for this is our legitimate interests (Art. 6 para. 1 letter f GDPR), which consist of providing you with a user-friendly and meaningful platform and Capmo services that meet your expectations and needs in accordance with the MSA.
(c)Personalisierende Cookies bzw. Customization-Cookies
Bei Customization-Cookies handelt es sich um Cookies, die den Zugang zur Plattform mit gewissen allgemeinen Voreinstellungen nach Maßgabe unterschiedlicher Vorgaben Ihres Endgerätes erlauben, wie z.B. Spracheinstellungen, Browsertyp und regionale Einstellungen etc. Rechtsgrundlage hierfür ist sind unsere berechtigten Interessen (Art. 6 Abs. 1 Buchst. f DSGVO), die darin bestehen, Ihnen nach Maßgabe unserer AGB (abrufbar unter https://capmo.com/de/agb) eine nutzerfreundliche und bedeutungsvolle Plattform und Capmo-Dienste bereitzustellen, die Ihren Erwartungen und Bedürfnissen entspricht.
(d) Analysis and advertising cookies from third parties (external service providers)
Analysis and advertising cookies from external service providers are used on the platform. These cookies allow the storage, administration and evaluation of information about user behaviour, which is obtained through the continuous observation of user behaviour. Based on usage profiles, these cookies enable us to (a) manage advertising spaces on the platform in a highly efficient manner on the basis of various information (e.g. edited content or the frequency of advertisements displayed); (b) determine the number of users visiting the platform and the most popular areas of the platform in order to improve browsing on the platform and offer you better Capmo services. The legal basis for this is Art. 6 para. 1 letter f GDPR. Our legitimate interests in this context are the provision of a user-friendly and meaningful platform that meets your expectations and needs and fulfils our commercial interests.
7.3
We use the following services from external service providers that use cookies. If you do not agree to such use, you can deactivate these services on the one hand by rejecting the corresponding cookies in your browser. On the other hand, you can also deactivate the use of the service directly via a corresponding opt-out link or other measures. You can find this opt-out link and other deactivation options in the following overview under the heading "Opt-Out". Further information on the respective services can be found in the data protection notices of the respective services, which you can access via the respective link in the following overview under the heading "Data protection notices". Under the heading "Recipient countries and appropriate safeguards", you will also find information about the respective recipient country and whether appropriate safeguards exist.
In accordance with the applicable data protection law, you have the following rights in particular. Please contact our data protection officer using the contact details provided in section 1.2.
(a) Right to information: You have the right to request information about your personal data stored by us at any time. You can also view the master data of your customer account or user account (see section 3.2 letter a) directly in your customer account or user account.
(b) Right to rectification: When we process your personal data, we endeavour to take reasonable steps to ensure that your personal data is accurate and up to date for the purposes for which it was collected. In the event that your personal data is inaccurate or incomplete, you may request the rectification of this data. You can also change the master data of your customer account or user account (see section 3.2 letter a) directly in your customer account or user account.
(c) Right to erasure and restriction: You may have the right to request the erasure or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing in accordance with this Privacy Policy or applicable law and statutory retention obligations do not prevent further storage.
(d) Right to data portability: You may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to transmit those data to another controller.
(e) Right to object: You may have the right to object to the processing of your personal data on grounds relating to your particular situation.
(f) Right to withdraw your consent: If you have consented to the collection and processing of your personal data, you can withdraw your consent at any time with effect for the future, but without affecting the lawfulness of processing based on consent before its withdrawal. You can also object to the use of your personal data for the purposes of market and opinion research and advertising. Further information on revoking your consent to receive our newsletter can also be found in section 3.2 letter c.
(g) Supervisory authority responsible for possible complaints: In the event of a complaint, you can also contact the Bavarian State Office for Data Protection Supervision (BayLDA), P.O. Box 606, 91522 Ansbach, phone: +49 (0)981 180093-0, fax: +49 (0)981 180093-800, e-mail: as the supervisory authority responsible for Capmo. A list of other possible supervisory authorities (e.g. that of your place of business) can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
The platform may also contain links to other websites. The privacy policy described here does not apply to these other websites. We ask you to visit these other websites directly to obtain information about data protection and the handling of your personal data.
We reserve the right to amend this privacy policy at any time in compliance with legal requirements. This may be necessary, for example, to comply with new legal provisions, due to new technologies or in the case of new services.
Status: May 2025