Logo of Customer Due Diligence Solutions Company ( CDDS )

Privacy Policy

General Information

In the following, we inform you in accordance with Art. 13 GDPR about the collection of personal data when using our website. Personal data includes all data that can be related to you personally, e.g. name, address, email addresses and user behavior.

The controller within the meaning of Article 4 (7) EU General Data Protection Regulation (GDPR) is:

CDDS Luxembourg S.A. 233-241 rue de Beggen L-1221, Luxembourg (see our Imprint)

In case of inquiries or requests regarding your rights or this policy, please contact us at info@cdds.lu

Your rights

If personal data is processed about you as a user, you are considered a data subject in accordance with GDPR. Data subjects are entitled to the following rights vis-à-vis the controller:

The competent supervisory authority in data protection matters can be found under the following link: National Data Protection Commission - Luxembourg (public.lu)

Contacting us

Nature and purpose of the processing

We provide you with the live chat function of Intercom Inc., 98 Battery Street, Suite 402, San Francisco, CA 94111 USA on our website for the purpose of customer management and, above all, to ensure the fastest possible support.

In order to interconnect our tools and thus to be able to respond to the request for information and documents via the chat function, we use the integration service provider Zapier Inc., 243 Buena Vista Ave #508, Sunnyvale, CA 94086, USA. To ensure quick processing and response to your request, it is necessary for us to transfer the stored data of the live chats to our CRM system in order to ensure a quick processing and response to your request. Therefore, the use of an integration service provider is essential in this regard.

Legal basis of the processing

Data provided is processed on the basis of a legitimate interest (Art 6 para 1 lit. f GDPR). The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. If you contact us to request an offer, we will process the data provided to implement pre-contractual measures (Art. 6 (1) point (b) GDPR).

The use of the live chat function is only made possible upon your express consent pursuant to Art.6 (1) point (a) GDPR.

The use of the integration service provider is based on our legitimate interest pursuant to Art. 6 (1) point (f) GDPR which guarantees a fast processing of/response to your request as well as cost-efficient design and optimization.

Data categories

Recipients

Recipients of the data are internal employees of the relevant departments and, if applicable, order processors such as Intercom and Zapier.

Storage duration

Data will be erased no later than six months after the request has been processed. If a contractual relationship arises, we are subject to the statutory retention periods according to the respective law and erase your data after these periods have expired.

Legal / contractual requirement

Providing your personal data is entirely voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.

Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). In order to guarantee the level of data protection in this third country (Intercom, USA), we have agreed to the standard data protection clauses with Intercom and Zapier.

Automated decision-making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

Hosting

The hosting services we use are intended to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, email dispatch, security services and technical maintenance services, which we use for the purpose of operating this online presence.

For this purpose, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, metadata and communication data of customers, interested parties and visitors of this online presence on the basis of our legitimate interests in an efficient and secure provision of this online presence, in accordance with Art. 6 (1) point (f) GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract).

Questions & Concerns

If you have any questions or comments about this privacy policy, how we collect and use your information, your choices or rights regarding such use, or wish to exercise your rights, please do not hesitate to contact us at: info@cdds.eu

Website visit

When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are necessary for us in technical terms in order to display our website to you and to ensure its stability and security:

We collect and store this data on the basis of our legitimate interest for a limited time in order to initiate a derivation to personal data in the event of unauthorized access or attempted access to local servers (Art. 6 (1) point (f) GDPR).

Performing the namecheck

Nature and purpose of the processing

When you are doing a namecheck via our website solution, the data you provide is processed at our servers and deleted as soon as the result is sent to you. The only data stored when a namecheck is made is the used code in order to keep records of the codes that have been used.

Legal basis of the processing

The processing is carried out in accordance with Art. 6 (1) point (f) GDPR on the basis of legitimate interest.

Data categories

Recipients

Storage duration

The data is deleted when it is no longer required for the purpose for which it was collected.

Legal / contractual requirement

The provision of the personal data is neither legally nor contractually required. However, without the data the service and functionality of our website cannot be guaranteed.

Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

Revocation of consent

You have the right to object to the processing of your personal data at any time. You can notify us of your revocation at any time using the contact option provided at the beginning of this data protection notice.

Automatic decision-making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

Use of cookies

What are cookies?

Cookies and similar technologies are very small text documents or pieces of code that often contain a unique identification code. When you visit a website or use a mobile application, a computer asks your computer or mobile device for permission to store this file on your computer or mobile device and access information. Information collected through cookies and similar technologies may include the date and time of your visit and how you use a particular website or mobile application.

Why do we use cookies?

We use cookies to understand how our website is used and how we can improve it. In addition, depending on your preferences, our own cookies may be used to show you targeted advertising that matches your personal interests.

What type of cookies do we use?

Functional

These cookies are always enabled because they are necessary for the functionality of the website.

Visitor behavior

These cookies allow us to improve the functionality of the site by tracking user behavior on this website. If you disable this setting, we will completely disable Google Analytics and any other tools used for you. We store this setting in the functional cookies to remember your choice on your next visit.

Tools

We would like to offer our visitors added value with the tools offered from external providers. However, through the loading of these tools, user data is transferred to third-party providers. You can deactivate these tools but may then experience restrictions in the use of this website.

How can I turn off or remove cookies?

You can turn off all but the necessary, i.e functional cookies. In the browser settings, you can change the settings to block cookies. In most browsers, you will find an explanation on how to do this in the so-called "help function". However, if you block the cookies, it is possible that you will not be able to use all technical features of our website and that this may have a negative impact on your user experience.

We have made it easy for you to manage your consents or revocations.

Which cookie banner do we use?

This website uses the cookie banner to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection law.

When you enter our website, the following personal data is stored on our servers:

Furthermore, we store a cookie in your browser in order to be able to assign the consent(s) given to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

The use of a cookie banner takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) point (c) GDPR.

Language settings

Nature and purpose of the processing

Functions of the translation service langue integrated on this website. Langue cookie is loaded when you visit the website so that you can change the language to a language other than French via the language icon on the website. This allows a direct connection between your browser and the CDDS server when you visit this website. CDDS thereby receives the information that you have visited this website with your IP address.

Legal basis of the processing

The processing is carried out in accordance with Art. 6 (1) point (f) GDPR on the basis of our legitimate interest in improving the user-friendliness and functionality of our website.

Data categories

Recipients

Storage duration

The data is deleted when it is no longer required for the purpose for which it was collected. This is generally the case when the respective session has ended.

Legal / contractual requirement

The provision of the personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be limited.

Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

Revocation of consent

You have the right to object to the processing of your personal data at any time. You can notify us of your revocation at any time using the contact option provided at the beginning of this data protection notice.

Automatic decision-making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

Use of LeadFeeder

Nature and purpose of the processing

We use the LeadFeeder which is a service provided by Liidio Oy, Mikonkatu 17 C, Helsinki 00100, Finland, as a lead generation tool. LeadFeeder accesses the list of IP addresses of website visitors provided by Google Analytics as part of its analysis and links the list of IP addresses with information about the companies that can be found on the Internet under these IP addresses. Due to the shortening of the IP address of the website visitors, which is already carried out when using Google Analytics, a direct personal reference is not established.

Only company visitors can be identified. LeadFeeder is integrated with our CRM system & email marketing tool.

Legal basis of the processing

The processing of the entered data is based on the user's consent (Art. 6 (1) point (a) GDPR).

Data Categories

Recipients

Storage duration

Data will only be processed in this context as long as the necessary consent has been given. Afterwards, they will be erased, provided that there are no legal retention obligations that prevent erasure. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.

Legal/ contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you do not grant your permission, this may result in functional restrictions on the website.

Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.

Automatic decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

Use of Google Analytics

Nature and purpose of the processing

This website uses Google Analytics, a web analytics service provided by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses "cookies", which are text files placed on your computer to help the website analyse how visitors use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of this website’s operator, Google will use this information to analyse your use of the website, compile reports on website activity and provide further services relating to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The purposes of data processing are to evaluate the use of the website and to compile reports on website activities. Based on the use of the website and the Internet, other related services shall then be provided.

Legal basis of the processing

The processing of the entered data is based on the user's consent (Art. 6 (1) point a GDPR).

Data categories

Recipients

Storage duration

Data will only be processed in this context as long as the necessary consent has been given. Afterwards, they will be erased, provided that there are no legal retention obligations that prevent erasure. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.

Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you do not grant your permission, this may result in functional restrictions on the website.

Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have agreed to the standard data protection clauses with Google (Analytics).

Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the available browser plugin: "Browser Add-On to disable Google Analytics".

Automatic decision-making and profiling

With the help of the tracking tool Google Analytics, the behavior and interests of visitors of this website can be analyzed. For this purpose, we create a pseudonymous user profile.

Processing of your data in the context of automated decision-making / profiling

In principle, you have the right to opt out of decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. In particular, these decisions may not regularly be based on special categories of personal data pursuant to Art. 9 (1) GDPR. We do not use any corresponding decision-making processes within the scope of our website and the associated data processing.

Online Payment and use of PayPal Service

Nature and purpose of the processing

We use PayPal, which is a service provided by PayPal Inc.,2211 N 1st San Jose CA 95131, United States as a tool for making online payments. In order to purchase codes online at our website, you are asked to provide your email and billing address. When you click on the “PayPal Buy Now” button, you will be directed to the PayPal’s website, where you will be asked to provide your PayPal account details and password. We are not responsible for the privacy practices on external websites. Please inform yourself about the data protection of the external websites. For more information, please see PayPal Privacy Statement. The data you provide will be processed for billing purposes.

Legal basis of the processing

The processing is carried out in accordance with Art. 6 (1) point (f) GDPR on the basis of our legitimate interest in improving the user-friendly and practical payment through our website.

Data categories

Recipients

Storage duration

The data is deleted when it is no longer required for the purpose for which it was collected. This is generally the case when the respective session has ended.

Legal / contractual requirement

The provision of the personal data is neither legally nor contractually required. However, without the providing email and billing address, the service cannot be guaranteed.

Third country transfer

Processing may take place outside the European Union (EU) or the European Economic Area (EEA). For ensuring data protection in these countries, PayPal relies on Binding Corporate Rules approved by competent Supervisory Authorities.

Revocation of consent

You have the right to object to the processing of your personal data at any time. You can notify us of your revocation at any time using the contact option provided at the beginning of this data protection notice.

Automatic decision-making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

Changes

CDDS may change this Privacy Policy at any time and from time to time. The most recent version of the Privacy Policy is reflected by the version date located at the bottom of this Privacy Policy. All updates and amendments are effective immediately upon notice, which we give by posting a revised version of this Privacy Policy or other notice on the website. We encourage you to review this

Privacy Policy regularly to stay informed of changes that might affect you, as your continued use of the services means your continuing consent to them.

Updated November 2021