Privacy policy

The controller is :

COMPO Benelux nv
Venecolaan 56, B-9880 Aalter
Telefoon : +32(0)9/311 00 00
E-Mail: compo@compo.be

You can reach our company's data protection officer at the above address using the keywords DATA PROTECTION or using the following email contact: privacy@compo.be.

We process personal data in accordance with the provisions of the EU's General Data Protection Regulation (GDPR).

1. To fulfil contractual obligations (Article 6(1.)(b) GDPR)
   The processing of data can take place in the context of executing contracts with you as our customer or in order to implement pre-contractual measures.
2. In the balancing of interests (Article 6(1.)(f) GDPR)
   If required, we can process your data beyond the actual fulfilment of the contract to safeguard our or a third party's legitimate interests. Examples: reviewing and optimising the processes of requirements analysis for the purpose of direct customer contact; advertising or market and opinion research insofar as you have not objected to the use of your data; asserting legal claims and defence in the event of legal disputes; safeguarding IT security and IT operations within the company, and measures to control business processes and develop services and products
3. Based on your consent (Article 6(1.)(a) GDPR)
   Once you have agreed to the processing of personal data for specific purposes (e.g. for marketing purposes, receipt of newsletters), the legitimacy of such processing shall be deemed to be given based on your consent.
4. Based on legal requirements (Article 6(1.)(c) GDPR) or in the public interest (Article 6(1.)(e) GDPR)
   In addition, we are subject to various legal obligations, i.e. statutory requirements (e.g. tax laws). The purposes of processing include the fulfilment of fiscal inspection and reporting requirements, and much more.

2.1. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the accessing computer. The following data are collected:
information about the browser type and the version used;

• the user's operating system;
• the user's internet service provider;
• the user's ip address;
• date and time of access;
• websites from which the user's system accesses our website, and websites accessed by the user's system via our website.

The data are also stored in the log files of our system. These data are not stored together with other personal data of the user. The legal basis for the temporary storage of data in log files are our legitimate interests. Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must be kept for the duration of the session. Storage in log files takes place to ensure the functionality of the website. In addition, the data are used to optimise the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes does not take place in this instance.

The data are deleted immediately when no longer required for the purpose of collection. In terms of data collection for the provision of the website, this is the case when the respective session has ended.

Data collection for the provision of the website and data storage in log files is essential for the operation of the website. Consequently, the user has no opportunity to opt out.

2.2. Cookies

Cookie notices are provided by Cookiebot.

2.3. Google marketing services

2.3.1. Methods of analysis

• We use the “Google Analytics” service offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on the basis of Art. 49 GDPR to analyze user website usage and optimize our website content. The service uses “cookies” - text files that are stored on your end device on the basis of your consent in accordance with Art. 6 para. 1 lit. A. GDPR and § 25 para. 1 TTDSG. The information collected by the cookies is usually sent to a Google server in the USA and stored there. This also means that both Google Inc. and state authorities in the USA may gain access to the personal data collected.
• IP anonymization is used on this website. The IP address of users is truncated within the member states of the EU and the European Economic Area. This truncation eliminates the personal reference of your IP address. As part of the contract data agreement that the website operators have concluded with Google Inc., Google Inc. uses the information collected to compile an analysis of website usage and website activity and provides services related to internet usage. You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
• We also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services on our website.

You can also use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de

You can find more information on the use of data by Google Inc. here: https://support.google.com/analytics/answer/6004245?hl=de

2.3.2 Advertising methods

Tracking for advertising purposes is only carried out on the basis of your consent and on the basis of Art. 6 para. 1 a GDPR and § 25 para. 1 TTDSG if you have given us your consent to process personal data for specific purposes (e.g. for marketing purposes, newsletter dispatch).

• The Google marketing services we use include the online advertising program “Google Ads”. In the case of Google AdWords, each AdWords customer receives a different “conversion cookie”. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
• We also use “Google Remarketing Technologies” to retarget visitors to our website with interest-based advertising on the pages of the Google Partner Network. With the help of cookies, we can analyze your interests when you visit our website and then use them to display advertising that is relevant to you. The use of Google Remarketing is based on your consent in accordance with Art. 6 para. 1 lit. A. GDPR and § 25 para. 1 TTDSG. If you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalize ads, Google will use this data for cross-device retargeting. If you are logged in to Google while visiting our website, Google will use your data together with Google user data to create and define target group lists for cross-device retargeting with your consent. For this purpose, your personal data held by Google is temporarily linked with Google user data in order to create target groups.

2.3.3 Security precautions with the help of Google

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM.

• We use “Google reCAPTCHA” for our forms.
  The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 para. 1 lit. A. GDPR and § 25 para. 1 TTDSG. The purpose of reCAPTCHA is to check whether the data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
  The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

Further information on Google reCAPTCHA and Google's privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/

2.4 Commerce Connector

Commerce Connector is a Stuttgart-based software-as-a-service provider that enables consumers to be redirected from the manufacturer's website to the websites of retailers. On our website, we use the Buy Now button, which is provided and controlled by Commerce Connector. You can find more information on data processing here.

2.5. Newsletter

You may subscribe to a free newsletter on our website. In this instance, data are transmitted to us from the input mask when registering for the newsletter. We request the following details for this:

• user's email address
• title
• first name
• last name
• postcode

In addition, the following data are collected during registration:

• recipient list ID
• ID of opt-in process
• opt-in source
• opt-in status ID
• IP address of opt-in activation/confirmation
• timestamp of opt-in activation/confirmation

As part of the registration process, your consent will be obtained and you will be referred to this Data Privacy Statement for the processing of the data. To ensure that your registration proceeds correctly, an opt-in process will be started after your initial newsletter registration. You will receive an email requesting that you confirm your registration. The legal basis is your consent according to Article 6(1.)(a) GDPR. You will then be managed as an active recipient. Data records for incomplete opt-in processes will be deleted automatically after 30 days.

Your email address is collected in order to deliver the newsletter. In conjunction with your newsletter registration, we will also store your IP address and the timestamps of your registration/deregistration along with the respective confirmation. This is done so that we can track and prove your registration at a later stage. The legal basis for this storage is a legitimate interest for the purposes of Article 6(1.)(f) GDPR, where the legitimate interest is evidence of registration/deregistration.  Other personal data are collected as part of the registration process for the purpose of preventing misuse of the services or the email address provided.

If you no longer wish to receive our newsletter, you can object to its receipt at any time and unsubscribe accordingly. If you click the link contained in every newsletter, you will then be guided through the deregistration process. To delete your personal data, please send an email to privacy@compo.be.

We carry out individual user tracking in order to be able to send you interest-related information in the future. Among other things, we monitor whether the newsletter has been opened and which links are clicked on. In this way, we are able to make our newsletters more individual and interesting. The legal basis for using this user tracking is the user's consent (Article 6(1.)(f). You can object to this tracking at any time by clicking on the separate link provided in each mail or by contacting us through other channels. The information will be stored for as long as you have been subscribed to our newsletter. Furthermore, this tracking is not possible in case you have by default deactivated the display of images in your e-mail program. In this case, the newsletter may not be displayed in full or you may not be able to use all the functions.

2.6. Facebook

We operate the following fan page for the purpose of addressing consumers / advertising new products and receiving customer feedback: My Inspiring COMPO Garden.

Facebook provides the framework for the fan page and processes the user data to create anonymized / aggregated evaluations (so-called “Insights”) for the fan page operator. Under data protection law, Facebook Ireland Ltd (hereinafter “Facebook”) and the fan page operator are jointly responsible for the processing. Which data protection obligations are fulfilled by Facebook and which the fan page operator has to fulfill are set out under this link:

As the operator of the fan page, we must ensure the lawfulness of the processing. In accordance with the purpose set out above, the processing is carried out on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR). Since Facebook does not provide us with any data that enables us to identify individual users, we assume that the interests of the data subjects do not outweigh our legitimate interest.

As Facebook is certified under the Privacy Shield Agreement, we assume that Facebook respects European data protection law and the fundamental rights of the persons affected by the processing (users of the fan page). Facebook Inc. uses “cookies” - text files that are stored on your end device. The information collected by the cookies may be sent to a server in the USA and stored there. This also means that both Facebook and government authorities in the USA may gain access to the personal data collected.

If you would like information about the data processed about you or wish to assert your rights as a data subject, please contact Facebook directly.

We place advertisements on Facebook that lead to our fan page or our website. We have installed the so-called “Facebook pixel” provided by Facebook on our website (legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR) to measure reach in the sense of analysis, optimization and economic operation of our online offer (e.g. by evaluating which advertisement most encourages purchases). To the best of our knowledge, the following information is transmitted to Facebook in the Facebook pixel process IP address, information about the web browser, the website on which the pixel is located, day and time of use, pixel ID, Facebook ID of the user.

The above-mentioned data processing only affects users who have an account with Facebook or have accessed a Facebook partner page (which sets a cookie). If you have a Facebook account, you can deactivate tracking by clicking on the following link.

Data subjects who do not have a Facebook account can prevent Facebook tracking - as well as cookies from other services - via this website, for example.

Facebook Customer Audience, in the context of which the controller provides Facebook with customer lists for comparison with user profiles, does not take place.

When processing personal data in the context of Facebook Conversions (Pixel) and Facebook Custom Audience, which we do not use, Facebook sees itself as a processor:

Thus, as far as Facebook Conversions is concerned, we are the data controller.

2.7 Web font from Fast.Fonts

This website uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net) to display fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the fonts.com servers. This gives fonts.com knowledge that our website has been accessed via your IP address. The use of Fonts.com Web Fonts is in the interest of a uniform and appealing presentation of our online offers. The information collected by the cookies may be sent to a server in the USA and stored there. This constitutes a legitimate interest within the meaning of Art. 49 GDPR and the user's consent. Since fonts.com's servers are located in the USA, this means that both fonts.com and government authorities in the USA could gain insight into the personal data collected. If your browser does not support web fonts, a standard font will be used by your computer.

Further information on these web fonts can be found at https://www.fonts.com/info/legal and in the privacy policy of Fonts.com: https://www.fonts.com/info/legal/privacy/ and in the privacy policy of Monotype GmbH: https://www.monotype.com/legal/privacy-policy/

2.8. Registration on retailer portal

On our website, we offer you the opportunity to register with the retailer portal, which involves providing personal data.

The retailer portal presents salespeople in the plant protection sector with a broad range of activities, training opportunities and information on the topic of plant protection. You can test and enhance your knowledge in this area. The content of the retailer portal is also a useful tool when you prepare for the certificate of competence examination. As a registered user, you can also participate in our bonus programme. 

The data entered in the input mask as part of the registration process are transmitted to and stored by us. The following data are collected as part of the registration process:

• first and last name
• road, postcode, town/city and country
• email address
• date of birth
• market in which the person works
• road, postcode, town/city and country of market
• district manager

In addition, the following data are stored at the time of registration:

• date and time of registration
• membership number
• points status
• bonuses ordered
• date and time of training registration
• date and time of training deregistration
• verification code

These data will not be passed on to third parties unless doing so is necessary for the proper performance of the service ordered. Personal data will be passed on to the relevant examination board for the acquisition of the certificate of competence in plant protection. This is required for the examination to be carried out by the board and for the certificate of competence to be issued. Personal data will be passed on to the relevant regional authorities with regard to renewing the certificate of competence in plant protection, if such continued education has been completed through us.

You give your consent to the processing of these data as part of the registration process. The legal basis for processing your data, when consent is provided, is Article 6(1.)(a) GDPR.

For the use of personal data for other purposes (in particular, for advertising purposes), COMPO will always seek your explicit consent before collecting such information. You need to register to receive the content and services offered in the retailer portal. Personal data are collected during registration so as to prevent a misuse of services.

The data are deleted immediately when no longer required for the purpose of collection. This is the case for data collected during the registration process if registration on our website is revoked or altered.

As a user, you may cancel your registration at any time. Furthermore, you may have the data stored about you modified at any time. To delete the account, please send an email to privacy@compo.be.

We will then delete all the data specified by you, unless statutory retention periods prevent us from doing so. You can change the data stored by you at any time by navigating to the 'My Profile' tab in the restricted member area of the site.

2.9. Participation in prize games and product tests

On our website, we offer you the opportunity to register for prize games, product tests and other competitions (referred to hereinafter as 'promotions') by providing personal data. Here, the data are entered in an input mask and then transmitted to us and stored. The data are only forwarded to service providers that support us in the fulfilment of the aforementioned purposes.

The following data are collected as part of the registration process:

• title
• first name
• last name
• email address
• road
• building number
• postcode
• city
• prize game question

In addition, the following data are stored at the time of registration:

• quiz ID
• date and time of registration

You give your consent to the processing of these data as part of the registration process. The legal basis for processing your data, when consent is provided, is Article 6(1.)(a) GDPR.

You may cancel your registration at any time. You may also have the data stored about you modified at any time. The data are deleted immediately when no longer required for the purpose of collection. This is the case for data collected during the registration process if the promotion has ceased or the statutory retention periods have expired. As a user, you may opt out of the promotion at any time. To do this, please send an email to privacy@compo.be. We will then delete all the data specified by you, unless statutory retention periods prevent us from doing so.

2.10. Use of Google Maps for postcode searches and calculating routes

This takes place regardless of whether or not Google has provided a user account that you are logged on with. If you have logged on at Google, your data will be directly associated with your account. If you do not wish for association with your profile on Google to take place, then you must log out before activating the button. Google stores your data in the form of usage profiles. It then uses the data for advertising, market research and/or the demand-driven design of its website. The main purpose of assessments like this (even for users not logged on) is to provide demand-driven advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of such user profiles, which must be lodged with Google directly.

2.11. Contact form and email contact

Our website contains contact forms that can be used for electronic communication. If you make use of this option, then the data entered in the input mask will be transmitted to us and stored. Such data include:

• first name

• last name

• email address

• postcode

• city

• phone number (queries)

• your message/question

• picture

As part of the sending operation, your consent will be obtained and you will be referred to this Data Privacy Statement for the processing of your data.

Alternatively, contact can be initiated using the email address provided. In this case, the personal data transmitted with your email address will be stored. Data will not be passed on to third parties in this instance. It will only be used for the purpose of processing the correspondence.

The legal basis for the processing of data with your consent is Article 6(1.)(a) GDPR. The legal basis for the processing of data transmitted when sending an email are our legitimate interests. If the email contact is geared towards the conclusion of a contract, then the additional legal basis for processing shall be Article 6(1.)(b) GDPR.

The processing of personal data in the input mask is for the sole purpose of facilitating communication. The legitimate interest also concerns the processing of data in the case of communication by email. The remaining personal data processed during the sending operation are used to prevent misuse of the contact form and to ensure the security of our IT systems.

The data will be deleted if no longer required for the purpose of its collection. This is the case for personal data entered in the input mask of the contact form and data sent by email if the respective correspondence with you, the user, has concluded. This is the case where circumstances make clear that the matter in question has been resolved. You may withdraw your consent to the processing of personal data at any time. You may object to the storage of your personal data at any time by sending us an email. Correspondence cannot be continued in such cases. To do this, please send an email to privacy@compo.be. All personal data stored during this period of communication will be deleted in such cases, unless statutory retention periods apply at the time.

2.12. Application management

Would you like to apply for a job with us? We look forward to receiving your application by e-mail.

As part of applicant management, we process the personal data you provide us with to initiate an employment relationship on the basis of Art. 88 GDPR in conjunction with Section 26 (1) BDSG. Alternatively, collective agreements (group, general and works agreements as well as collective bargaining agreements) pursuant to Art. 88 GDPR in conjunction with Section 26 (4) BDSG may apply. § Section 26 (4) BDSG and consents (e.g. for photographs) pursuant to Art. 88 GDPR in conjunction with Section 26 (2) BDSG. In individual cases, we process your data in order to protect legitimate interests, e.g. when exchanging data within the Group for administrative purposes (Art. 6 para. 1 f GDPR in conjunction with Recital 48). Insofar as special categories of personal data (e.g. severe disability) are processed, this is done on the basis of Art. 88 GDPR in conjunction with § Section 26 para. 3 BDSG. In addition, the processing of health data for the assessment of your ability to work in accordance with Art. 9 para. 2 h) in conjunction with § 22 para. 1 b) BDSG may be necessary.

We process and store your personal data for as long as is necessary to fulfill the purposes of data processing or legal, contractual or statutory obligations. The data will then be deleted or its processing restricted. In the event that no employment relationship is established after completion of the application process, we will delete your data no later than 3 years after completion of the application process. After expiry of the regular 3-year limitation period in accordance with Section 195 of the German Civil Code (BGB), this is the time at which any claims under the General Equal Treatment Act (AGG) become time-barred. Should we wish to store your application in a so-called “applicant pool” for a period of more than three years, we would ask you for your consent after the three years have expired.

Of course, you are also free to withdraw your application at any time. In this case, your data would also be deleted if it is no longer required to achieve the purpose for which it was collected. Sending us an e-mail with the relevant content is sufficient for this. You can also withdraw any consent you have given at any time.

2.13. Disclosure of personal data to service providers

When making use of the technical support services of our contract partners or during co-operation with our hosting partners, for example, it is possible that personal data may be viewed by these service providers.

We currently co-operate with the below service providers for the following reasons:

xQueue: Email forwarder
xQueue is an email marketing service provider based in Germany. We use this partner for sending newsletters (see section 2.4) and campaign emails, for example. xQueue data protection information can be found at: https://www.maileon.de/datenschutz/

iQuer: Hosting
iQuer is our Germany-based hosting partner. iQuer's data centres are located in Paderborn. You can access the data protection information here: https://www.iquer.net/impressum-und-datenschutz

IBM iX : Administrative, troubleshooting and support services
IBM iX is our IT consultant. The company is based in Germany. You can find the data privacy statement here: https://www.nexum.de/datenschutz.

If your data are processed by these service providers, it will normally only be data that you have made available to us, e.g. for making contact electronically or other reasons mentioned above.

The legal basis for the temporary processing of your data for the above purposes are our legitimate interests (Article 6(1.)(f) GDPR). We would not be able to provide you with the website and services offered if we did not co-operate with our service providers.

Processing the personal data enables us to continue corresponding with you by email and to offer and make available our website.

The data will be deleted if no longer required for the purpose of its collection. Accordingly, in the case of a support service, the data are deleted immediately after completion by the service provider. In this regard, please also note the information on the descriptions mentioned in section 2 concerning data processing, as well as the options of objection and disposal.

2.14. Chatbot “Ask us”

COMPO Benelux uses the “Advisor 2.0” service of FronNow GmbH, Choriner Str 7, 10119 Berlin, Germany, for the COMPO Chatbot 'Ask Us' on this website on the basis of Art. 49 GDPR. The connection to the service is only established when you call up the chatbot function via a button.

The service uses “cookies” - text files that are stored on your end device. The information collected by the cookies may be sent to servers in the USA and stored there by using generative artificial intelligence, more precisely LLMs (Large Language Models - e.g. ChatGPT from Open AI Inc.). This also means that government authorities in the USA could also gain access to the personal data shared.

Further information on the handling of user data can be found in the terms of use.

We would like to point out that you are not obliged to use the COMPO ChatBot 'Ask Us'. If you do not wish to use the service, please use one of the other contact options offered to send questions to COMPO.

As a rule, it is not necessary to enter personal data to answer an inquiry. You should therefore refrain from entering personal data in inquiries.

The legal basis for data transmission, storage and processing is your consent (Article 6(1)(a) GDPR and Article 49 GDPR).

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

Every data subject has the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

You can withdraw your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

Please contact our data protection officer in this regard. If you are unhappy with the way we have handled your personal data or any privacy query or request that you have raised with us, you have a right to complain to the Data Protection Authority (“DPA”) in your jurisdiction. If you would like to be directed to the appropriate DPA, please contact us.

Please contact our data protection officer to exercise your rights for queries in this regard.

In the context of our business relationship, you must provide such personal data as are required for the establishment and implementation of a business relationship and for the fulfilment of associated contractual obligations or for whose collection we are legally required. We would normally be forced to refuse conclusion of the contract or execution of the order or unable to continue implementing an existing contract and possibly have to terminate it without these data.

No. For the establishment and implementation of business relationships, at present, we do not use any fully-automated decision-making processes pursuant to Article 22 GDPR. Profiling does not take place.

Right to object based on an individual case

You have a permanent right to object – on grounds relating to your particular situation – to the processing of personal data concerning you, which is based on Article 6(1.)(e) GDPR (data processing in the public interest) and Article 6(1.)(f) GDPR (data processing based on legitimate interests). That also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

We shall no longer process your personal data if you lodge an objection, unless we can demonstrate compelling legitimate grounds for its processing, which override your interests, rights and freedoms or such processing is used for the establishment, exercise or defence of legal claims.

Recipient of the objection

The objection may be filed without any form requirement using the subject 'Objection' and specifying your name, address and date of birth, and should be sent to:

COMPO Benelux nv
Venecolaan 56, B-9880 Aalter
+32(0)9/311 00 00
privacy@compo.be

If you require information not contained in this Data Privacy Statement or if you would like to receive additional information at a later date, please contact our data protection officer, who will be pleased to assist.