Privacy Policy

Privacy Policy

1) Definition of Terms
The agency 404MEDIA, as the developer of the “CATAMA” software, offers various services based on different technologies. To distinguish between them, the following terms are used in this document:
CATAMA Website(s): All pages accessible via a web browser that are operated by the agency 404MEDIA and for which it is responsible for the content.
CATAMA Software: This refers to an application developed by the agency 404MEDIA and operated via the Internet under the name “CATAMA,” which users access via graphical software to input, output, and process personal customer data and/or

2) Operator
Unless otherwise noted, all servers used to operate the CATAMA services are operated by 404MEDIA, Töpferstraße 18, 19336 Bad Wilsnack. Questions and requests for information may be sent by mail to this address or by email to info@404media.de.

3) Scope and Purpose of Use of Collected Data
404MEDIA undertakes to use the user’s data obtained through the user relationship solely in accordance with the German Telemedia Act (TMG), the Federal Data Protection Act (BDSG), and other applicable data protection regulations, and—subject to any consent otherwise provided—solely for the purposes set forth in this privacy policy; to maintain data confidentiality; and to require its employees to do the same, to the extent required by law.

3.1 CATAMA Websites – General
Whenever a webpage or a file accessible via a browser is requested, the following data is stored:
1. the requested webpage or file,
2. the date and time of the request,
3. the amount of data transferred,
4. a description of the web browser type and operating system used,
5. the truncated, anonymized IP address of the requesting computer.

This information is used to optimize the CATAMA websites and to log any potential attacks on our services via the Internet.

Data Transmission and Logging for Internal System and Statistical Purposes
When you access our website, your internet browser automatically transmits data to our web server for technical reasons. This data includes, among other things, the date and time of access, the URL of the referring website, the file accessed, the amount of data transmitted, the browser type and version, the operating system, and your IP address. This data is stored separately from other data that you enter while using our website. We are unable to link this data to a specific individual. This data is analyzed for statistical purposes and subsequently deleted.

Master Data If a contractual relationship between you and us is to be established, defined in detail, or modified, we will collect and use your personal data to the extent necessary for these purposes. Upon order of the competent authorities, we may, in individual cases, disclose information regarding this data (master data) to the extent necessary for the purposes of criminal prosecution, to avert danger, to fulfill the statutory duties of the domestic intelligence agencies or the Military Counter-Intelligence Service, or to enforce intellectual property rights.

Usage Data
We collect and use your personal data to the extent necessary to enable you to use our website or to bill you for its use (usage data). This includes, in particular, information used to identify you, as well as details regarding the start and end times and the extent of your use of our website. For the purposes of advertising, market research, and to tailor our website to your needs, we may create usage profiles using pseudonyms. You have the right to object to this use of your data. We may not merge the usage profiles with data regarding the person behind the pseudonym. Upon order of the competent authorities, we may, in individual cases, provide information regarding this data (master data) to the extent that this is necessary for the purposes of criminal prosecution, to avert danger, to fulfill the statutory duties of the domestic intelligence agencies or the Military Counter-Intelligence Service, or to enforce intellectual property rights.

3.2 CATAMA Websites – Cookies

Our website uses cookies. Cookies are text files that are placed and stored on a computer system via a web browser.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID, a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to associate the cookie with the specific web browser in which it was stored. This enables the websites and servers visited to distinguish the data subject’s individual browser from other web browsers that contain different cookies. A specific web browser can be recognized and identified via the unique cookie ID.

By using cookies, we are able to provide users of this website with more user-friendly services—such as a login area—which would not be possible without cookies.

Cookies allow us to optimize the information and content on our website to better serve our users. Cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users to navigate our website. For example, a user of a website that uses cookies does not have to re-enter their login credentials every time they visit the website, as this information is retrieved by the website and the cookie stored on the user’s computer system.

The data subject may prevent our website from setting cookies at any time by adjusting the settings of the web browser being used, thereby permanently objecting to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common web browsers. If the data subject disables the setting of cookies in the web browser they are using, not all features of our website may be fully usable under certain circumstances.

3.3 CATAMA Websites – Registration
When registering for the CATAMA software via the website, the user’s email address, name, and company affiliation are stored. The agency 404MEDIA expressly notes that the email addresses of all users who have not deleted their accounts will be used to send these users notifications regarding the availability of our contractually guaranteed services; e.g., information about maintenance periods. Since this information pertains to contract fulfillment, it is not possible to unsubscribe from these notifications. During registration for the CATAMA software, at least the following data from the required fields is stored:
1. User’s email address,
2. Company name,
3. User’s first and last name,
4. ZIP code,
5. City,
6. Industry in which the company operates,
7. Legal form of the company.

3.4 CATAMA Websites – Contact Form
The CATAMA websites offer the option to contact the agency 404MEDIA or to register. In doing so, at least the following data from the required fields is stored:
1. Email address,
2. Contact person/company name,
3. Free text (contact form only),
4. Phone number.

This data is used by 404MEDIA to respond to inquiries. The data stored in each case corresponds to the fields specified in the forms and is therefore directly visible in the forms. Data will only be shared with third parties with the consent of the respective user.

3.5 CATAMA Software
Whenever data is requested or stored, various actions may be performed on the server side to read, store, and process the data before a transmission or response is sent to the user’s computer. As part of these actions, the following data is stored:
1. the type of action to be performed and all additional actions automatically executed within the CATAMA software during its execution,
2. the date and time of the start and completion of all executed actions,
3. the customer number used,
4. the user’s login name used,
5. The amount of data transferred both from the user’s computer to the 404MEDIA servers and in the opposite direction,
6. The type and amount of data requested, but not the content,
7. The IP address of the computer retrieving the data.

This data is stored on the servers of the 404MEDIA agency for a maximum of one year and is then deleted automatically or by staff. It is used for optimization, capacity planning, and investigating misuse and any errors that may occur in the CATAMA software (so-called bugs). In addition to the data mentioned above, all data entered directly by users of the CATAMA software is stored on the servers of the 404MEDIA agency for the duration of the contractual relationship. This data is not used externally by the 404MEDIA agency but is available solely to the creator. Authorized users may request in writing at the addresses listed under 2) the deletion of all data they have entered themselves into the CATAMA software. Agency 404MEDIA expressly points out that, in this case, the agency will unfortunately no longer be able to fulfill the contract, and there is no entitlement to compensation or a refund of any payments already made for the performance of the contract.

3.6 Customer Database
The agency 404MEDIA maintains an internal customer database in which all relevant customer-related events and notes are stored. These include:
1. Customer number,
2. Company name,
3. Company address,
4. Email addresses of all non-deleted users,
5. Names of all non-deleted users,
6. Notes and remarks regarding phone calls,
7. Billing information.

This data is used to optimize the support services provided to 404MEDIA’s clients. This data will not be disclosed to third parties. Users may request the deletion of this data in writing by contacting the addresses listed under 2).

3.7 Extended Data Use
Upon the user’s recorded consent to “extended data processing,” the agency 404MEDIA is authorized to collect, process, and use personal data, profile data, and demographic data for the purpose of optimizing CATAMA services. Upon the user’s consent, 404MEDIA is not obligated to delete usage data as soon as possible—i.e., immediately after the end of the respective use—but is authorized to store it. Consent is given by checking the corresponding box. The consent granted is recorded and may be revoked by the user upon written request to the addresses listed under 2).

4) Security
The individual CATAMA webpages have implemented security features to protect the data under our control against loss, misuse, and manipulation. When accessing CATAMA websites using a standard browser such as Mozilla Firefox, Google Chrome, or Edge, the connection between these browsers and CATAMA is protected by Secure Socket Layer (SSL) technology for pages where users can enter personal data. SSL uses both server authentication and data encryption to ensure, to the extent technically possible, that data cannot be tampered with or intercepted by attackers. All CATAMA servers are operated in an environment protected by standard technologies within a certified data center to prevent disruptions and intrusion attempts. The user must ensure that they always use unique usernames and secret passwords that are as complex as possible when accessing CATAMA services. These security measures help prevent unauthorized access, maintain data accuracy, and ensure the proper use of the data.

5) Google Maps
The 404MEDIA website uses Google Maps from Google Inc. to visually display geographic information. When Google Maps is used, Google also collects, processes, and uses data regarding how visitors to the website use Google Maps features.

For more information on Google Maps’ Terms of Service and privacy policy, please visithttps://www.google.com/intl/de_de/help/terms_maps.html and https://policies.google.com. By using this website, you implicitly agree to these terms. If you do not agree to these terms, please do not use this website.

7) Deletion of Personal Data
The data controller processes and stores the data subject’s personal data only for the period necessary to achieve the purpose of storage or as required by law. If the purpose of storage no longer applies or if a retention period prescribed by law expires, the personal data will be blocked or deleted in accordance with legal requirements. All data and document images stored in your CATAMA instance will be irretrievably deleted 30 days after your cancellation.

Rights of Data Subjects

Right to Confirmation
Every data subject has the right, granted by law, to request confirmation from 404MEDIA as to whether personal data is being processed. If a data subject wishes to exercise this right to confirmation, they may contact our Data Protection Officer or another member of staff at any time.

Right of Access
Any individual whose personal data is being processed has the right, granted by law, to obtain from the data controller, at any time and free of charge, information regarding the personal data stored about them, as well as a copy of such information. Furthermore, the law grants the data subject the right to access the following information:
– the purposes of the processing
– the categories of personal data being processed
the recipients or categories of recipients to whom the personal data has been or will be disclosed, particularly recipients in third countries or international organizations
– if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration
– the existence of a right to rectification or erasure of the personal data concerning them, or to restriction of processing by the controller, or a right to object to such processing
– the existence of a right to lodge a complaint with a supervisory authority
– if the personal data are not collected from the data subject: All available information regarding the origin of the data
– the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the EU GDPR and – at least in such cases – meaningful information regarding the logic involved, as well as the significance and the intended consequences of such processing for the data subject
– In addition, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

If a data subject wishes to exercise this right of access, they may contact our Data Protection Officer (see above) or another member of staff at any time, or feel free to contact us directly at info[at]404media.de.

Right to Rectification
Every data subject affected by the processing of personal data has the right, granted by law, to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data—including by means of a supplementary statement—taking into account the purposes of the processing.
If a data subject wishes to exercise this right to rectification, they may contact our Data Protection Officer (see above) or another employee at any time, or directly at info[at]404media.de.

Right to Erasure / Right to be Forgotten
Any data subject affected by the processing of personal data has the right, granted by law, to request that the controller erase personal data concerning them without undue delay, provided that one of the following grounds applies and provided that the processing is not necessary:
– The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
– The data subject withdraws their consent on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
– The data subject objects to the processing pursuant to Art. 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR.
– The personal data has been processed unlawfully.
– The erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
– The personal data was collected in relation to information society services offered pursuant to Art. 8(1) of the GDPR.

If any of the above reasons apply and a data subject wishes to request the deletion of personal data stored by 404MEDIA, they may contact our Data Protection Officer (see above) or another member of staff at any time—or send an email directly to info[at]404media.de—and we will ensure that the request for deletion is fulfilled without delay.

If 404MEDIA has made the personal data public and is our company, as the controller pursuant to Art. 17(1) GDPR, obligated to erase the personal data, 404MEDIA. shall take appropriate measures, including technical measures, taking into account available technology and implementation costs, to inform other controllers processing the published personal data that the data subject has requested that these other data controllers delete all links to such personal data or copies or replicas of such personal data, provided that the processing is not necessary. The Data Protection Officer of 404MEDIA. (see above) or another employee will take the necessary steps on a case-by-case basis.

Right to Restriction of Processing
Any data subject whose personal data is being processed has the right, granted by law, to request that the controller restrict the processing if any of the following conditions are met:
– The data subject disputes the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data.
– The processing is unlawful, the data subject opposes the erasure of the personal data and instead requests the restriction of the use of the personal data.
– The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the establishment, exercise, or defense of legal claims.
– The data subject has objected to the processing pursuant to Art. 21(1) GDPR, and it has not yet been determined whether the controller’s legitimate grounds override those of the data subject.

If any of the above conditions are met and a data subject wishes to request the restriction of personal data stored by 404MEDIA, they may contact our Data Protection Officer (see above) or another member of staff at any time—or email us directly at info[at]404media.de—and we will arrange for the processing to be restricted.

Right to Data Portability
Every data subject whose personal data is being processed has the right, granted by law, to receive the personal data concerning them—which they have provided to a controller—in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising their right to data portability under Article 20(1) of the GDPR, the data subject has the right to have their personal data transmitted directly from one controller to another, provided that this is technically feasible and does not adversely affect the rights and freedoms of others.

To exercise the right to data portability, the data subject may contact the Data Protection Officer (see above) or another member of staff at any time, or may also contact us directly at info[at]404media.de.

Right to Object
Any data subject whose personal data is being processed has the right, granted by law, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.

If you object to the processing of your personal data, 404MEDIA will no longer process it, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If 404MEDIA processes personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for such marketing purposes. This also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to 404MEDIA regarding processing for direct marketing purposes, 404MEDIA will no longer process the personal data for these purposes.

In addition, the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her that is carried out by 404MEDIA for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact the Data Protection Officer of 404MEDIA. or another employee directly. The data subject is also free to exercise their right to object in connection with the use of information society services by means of automated procedures that utilize technical specifications.

Automated decision-making in individual cases, including profiling
Any data subject whose personal data is being processed has the right, granted by law, not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning the data subject or similarly significantly affects the data subject, unless the decision is necessary for entering into or performing a contract between the data subject and the controller, or is permitted by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or is based on the data subject’s explicit consent.
If the decision is necessary for the conclusion or performance of a contract between the data subject and the controller or is made with the data subject’s explicit consent, 404MEDIA take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller, to present their own point of view, and to contest the decision.
If the data subject wishes to exercise rights regarding automated decisions, they may contact the Data Protection Officer at 404MEDIA. or another employee at any time.

Right to Withdraw Consent Under Data Protection Law
Every individual whose personal data is being processed has the right, granted by law, to withdraw their consent to the processing of personal data at any time.
If the data subject wishes to exercise their right to withdraw consent, they may contact the Data Protection Officer at 404MEDIA (see above) or another employee at any time.

8) Static links from Facebook
Our website uses static links (not “social plugins”) to link to the Facebook pages created by 404MEDIA. The terms of use and privacy policies can be viewed on the respective websites.

9) Right to Access Information
As a user of our website, you have the right to request information from us regarding the data we have stored about you or your username. Upon your request, this information can also be provided electronically. To do so, please send a brief email to info[at]404media.de

Your data will not be disclosed to third parties or made available to them in any other way without your express consent; rather, it will be used solely to provide you with personalized support and to offer you the best possible service. Passus assures you that your data will be treated confidentially in accordance with data protection regulations. Our web server automatically stores technical connection data from every user of the Passus website, such as IP addresses, which, along with the “click behavior” of Sanochemia website users, are used for statistical purposes to further improve our website.

10) Use of Matomo/Piwik
Our website uses the web analytics service Piwik. Piwik is open-source software that analyzes website visitor traffic. This analysis is made possible by cookies, which are text files. The cookies collect information regarding your use of our website. This information is stored on our server. Your IP address is anonymized beforehand. However, you have the option to prevent Piwik cookies from being stored on your computer. To do this, you must modify the settings in your web browser accordingly. However, this may result in you being unable to use our website to its full extent.