Privacy Policy
1) Definition of Terms
The agency 404MEDIA, as the developer of the “CATAMA” software, offers various services based on different technologies. To distinguish between these, the following terms are used in this document:
CATAMA Website(s): All pages accessible via a web browser that are operated by the agency 404MEDIA and for which it is responsible for the content.
CATAMA Software: This refers to an application named “CATAMA,” developed by 404MEDIA and operated via the Internet, which users access through graphical software to enter, output, and process personal data of customers and/or…
…
2) Operator
All servers used to operate the CATAMA services are, unless otherwise specified, operated by the agency 404MEDIA, Töpferstraße 18, 19336 Bad Wilsnack. Inquiries and requests for information may be sent by mail to this address or by email to info@404media.de.
3) Scope and Purpose of Use of the Collected Data
404MEDIA undertakes to use the user’s data that becomes known to it through the user relationship only in accordance with the German Telemedia Act (TMG), the Federal Data Protection Act (BDSG), and other data protection regulations; and, subject to any consent granted otherwise, to use such data solely for the purposes set forth in this Privacy Policy, to maintain data confidentiality, and to require its employees to do the same to the extent required by law.
3.1 CATAMA Websites – General Information
Each time a webpage or a file accessible via a web browser is requested, the following data is stored:
1. the requested webpage or file,
2. the date and time of the request,
3. the amount of data transferred,
4. a description of the web browser type and operating system used,
5. the truncated, anonymized IP address of the requesting computer.
This information is used to optimize the CATAMA websites and to log any potential attacks on our services via the Internet.
Data Transmission and Logging for Internal System and Statistical Purposes
For technical reasons, your web browser automatically transmits data to our web server when you access our website. This includes, among other things, the date and time of access, the URL of the referring website, the file accessed, the amount of data transmitted, the browser type and version, the operating system, and your IP address. This data is stored separately from other data that you enter while using our services. We are unable to associate this data with a specific individual. This data is analyzed for statistical purposes and subsequently deleted.
Record Data
If a contractual relationship between you and us is to be established, defined in detail, or modified, we collect and use your personal data to the extent necessary for these purposes. Upon order from the competent authorities, we may, in individual cases, disclose information regarding this data (master data) to the extent necessary for the purposes of criminal prosecution, threat prevention, the fulfillment of the statutory duties of the constitutional protection authorities or the Military Counter-Intelligence Service, or the enforcement of intellectual property rights.
Usage Data
We collect and use your personal data to the extent necessary to enable you to use our website or to bill you for its use (usage data). This includes, in particular, identifiers and information regarding the start and end times as well as the scope of your use of our website. For the purposes of advertising, market research, and tailoring our website to user needs, we may create usage profiles using pseudonyms. You have the right to object to this use of your data. We may not combine the usage profiles with data regarding the person behind the pseudonym. Upon order from the competent authorities, we may, in individual cases, disclose information regarding this data (master data) in individual cases, to the extent that this is necessary for the purposes of criminal prosecution, to avert danger, to fulfill the statutory duties of the constitutional protection authorities or the Military Counter-Intelligence Service, or to enforce intellectual property rights.
3.2 CATAMA Websites – Cookies
Our website uses cookies. Cookies are text files that are placed and stored on a computer system via a web browser.
Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID, a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to associate the cookie with the specific web browser in which it was stored. This enables the visited websites and servers to distinguish the data subject’s individual browser from other web browsers that contain different cookies. A specific web browser can be recognized and identified via the unique cookie ID.
By using cookies, we can provide users of this website with more user-friendly services—such as a login area—that would not be possible without setting cookies.
Cookies allow us to optimize the information and offerings on our website to better serve the user’s needs. Cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, a user of a website that uses cookies does not have to re-enter their login credentials every time they visit the site, as this information is handled by the website and the cookie stored on the user’s computer system.
The data subject can prevent our website from setting cookies at any time by adjusting the settings of the web browser being used, thereby permanently objecting to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common web browsers. If the data subject disables the setting of cookies in their web browser, not all features of our website may be fully usable under certain circumstances.
3.3 CATAMA Websites – Registration
During registration for the CATAMA software via the website, the user’s email address, name, and company affiliation are stored. The agency 404MEDIA expressly notes that the email addresses of all users who have not deleted their accounts will be used to send these users notifications regarding the availability of our contractually guaranteed services; for example, information about maintenance periods. Since this information pertains to the fulfillment of the contract, it is not possible to opt out of these communications. During registration for the CATAMA software, at least the following data from the required fields is stored:
1. User’s email address,
2. Company name,
3. User’s first and last name,
4. ZIP code,
5. City,
6. Industry in which the company operates,
7. Legal form of the company.
3.4 CATAMA Websites – Contact Form
The CATAMA websites offer the option to contact the 404MEDIA agency in general or to register. In doing so, at least the following data from the required fields is stored:
1. Email address,
2. Contact person/company name,
3. Free text (contact form only),
4. Phone number.
This data is used by the agency 404MEDIA to respond to inquiries. The data stored in each individual case corresponds to the fields specified in the forms and is therefore directly visible in the forms. Data will only be disclosed to third parties with the consent of the respective user.
3.5 CATAMA Software
Whenever data is requested or stored, various server-side actions may be performed to read, store, and process the data before a transmission or response is sent to the user’s computer. As part of these actions, the following data is stored:
1. the type of action to be performed and all additional actions automatically executed within the CATAMA software as part of that process,
2. the date and time of the start and completion of all executed actions,
3. the customer number used,
4. the user’s login name,
5. the amount of data transferred both from the user’s computer to the 404MEDIA servers and in the opposite direction,
6. the type and amount of data requested, but not the content,
7. the IP address of the computer retrieving the data.
This data is stored on the servers of the 404MEDIA agency for a maximum of one year and is then deleted automatically or by staff. It is used for optimization, capacity planning, investigating misuse, and any errors that may occur in the CATAMA software (so-called “bugs”). In addition to the data mentioned above, all data entered directly by users of the CATAMA software is stored on the servers of 404MEDIA for the duration of the contractual relationship. This data is not used externally by 404MEDIA but is available solely to the creator. Authorized users may request in writing, using the addresses listed under 2), the deletion of all data they have entered themselves into the CATAMA software. Agency 404MEDIA expressly points out that, in this case, it will unfortunately no longer be possible for Agency 404MEDIA to fulfill the contract, and there is no entitlement to compensation for damages or a refund of any payments already made for the performance of the contract.
3.6 Customer Database
The 404MEDIA Agency maintains an internal customer database in which all relevant customer-related events and notes are stored. These include:
1. Customer number,
2. Company name,
3. Company address,
4. Email addresses of all users who have not been deleted,
5. Names of all users who have not been deleted,
6. Notes and remarks regarding phone calls,
7. Billing information.
This data is used to optimize the support provided to 404MEDIA’s clients by the support team. This data is not disclosed to third parties. Users may request the deletion of this data in writing by contacting the addresses listed under 2).
3.7 Extended Data Use
Upon the user’s documented consent to “extended data processing,” the 404MEDIA agency is authorized to collect, process, and use personal data, as well as profile data and demographic data, for the purpose of optimizing CATAMA services. Upon the user’s consent, the agency 404MEDIA is not obligated to delete usage data as soon as possible—i.e., immediately after the end of the respective use—but is authorized to store it. Consent is given by checking the corresponding box. The consent granted is logged and may be revoked by the user upon written request to the addresses listed under 2).
4) Security
The individual CATAMA websites have implemented security features under our control to protect against loss, misuse, and manipulation of data. When accessing the CATAMA websites using a standard browser such as Mozilla Firefox, Google Chrome, or Edge, the connection between these browsers and CATAMA—for pages where the user can enter personal data—is protected by Secure Socket Layer (SSL) technology. SSL uses both server authentication and data encryption to ensure, to the extent technically possible, that the data cannot be tampered with or intercepted by attackers. All CATAMA servers are operated in an environment protected by state-of-the-art technologies within a certified data center to prevent disruptions and intrusion attempts. Users must ensure that they always use unique usernames and secret passwords—as complex as possible—when accessing CATAMA services. These security measures help prevent unauthorized access, maintain data accuracy, and ensure the proper use of the data.
5) Google Maps
The 404MEDIA website uses Google Maps from Google Inc. to visually display geographic information. When using Google Maps, Google also collects, processes, and uses data regarding visitors’ use of Google Maps features.
For more information on the Google Maps Terms of Service and privacy policy, please visit https://www.google.com/intl/de_de/help/terms_maps.html and https://policies.google.com. By using this website, you implicitly agree to these terms. If you do not agree to these terms, please do not use this website.
7) Deletion of Personal Data
The data controller processes and stores the data subject’s personal data only for the period necessary to fulfill the purpose of storage or as required by law. If the purpose of storage no longer applies or if a retention period prescribed by law expires, the personal data will be blocked or deleted in accordance with legal requirements. All data and document images stored in your CATAMA instance will be irretrievably deleted 30 days after your cancellation.
Rights of Data Subjects
Right to Confirmation
Every data subject has the right, granted by law, to request confirmation from 404MEDIA as to whether personal data is being processed. If a data subject wishes to exercise this right to confirmation, they may contact our Data Protection Officer or another employee at any time.
Right of Access
Every data subject affected by the processing of personal data has the right, granted by law, to receive from the controller, free of charge, information at any time regarding the personal data stored about them, as well as a copy of this information. Furthermore, the law grants the data subject the right to receive information regarding the following:
– the purposes of the processing;
– the categories of personal data being processed;
– the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
– if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration;
– the existence of a right to rectification or erasure of the personal data concerning them, or to restriction of processing by the controller, or a right to object to such processing;
– the existence of a right to lodge a complaint with a supervisory authority;
– if the personal data are not collected from the data subject: all available information regarding the origin of the data;
– the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the EU GDPR and—at least in such cases—meaningful information regarding the logic involved, as well as the scope and intended effects of such processing on the data subject
– In addition, the data subject has the right to obtain information on whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject is also entitled to receive information about the appropriate safeguards in connection with the transfer.
If a data subject wishes to exercise this right of access, they may contact our Data Protection Officer (see above) or another employee at any time, or directly at info[at]404media.de.
Right to Rectification
Every data subject affected by the processing of personal data has the right, granted by law, to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data—including by means of a supplementary statement—taking into account the purposes of the processing.
If a data subject wishes to exercise this right to rectification, they may contact our Data Protection Officer (see above) or another employee at any time, or directly at info[at]404media.de.
Right to Erasure / Right to Be Forgotten
Every data subject affected by the processing of personal data has the right, granted by law, to request that the controller erase the personal data concerning them without delay, provided that one of the following grounds applies and insofar as the processing is not necessary:
– The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
– The data subject withdraws their consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
– The data subject objects to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
– The personal data has been processed unlawfully.
– The erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
– The personal data was collected in connection with information society services offered pursuant to Article 8(1) of the GDPR.
If any of the above reasons apply and a data subject wishes to request the erasure of personal data stored by 404MEDIA. , they may contact our Data Protection Officer (see above) or another employee at any time—including directly at info[at]404media.de—who will ensure that the erasure request is complied with without delay.
If the personal data has been made public by 404MEDIA. and our company, as the controller, is obligated under Article 17(1) of the GDPR to erase the personal data, 404MEDIA. take appropriate measures, including technical measures, taking into account available technology and implementation costs, to inform other data controllers who process the published personal data that the data subject has requested that these other data controllers delete all links to such personal data or copies or replicas of such personal data, provided that the processing is not necessary. The Data Protection Officer of 404MEDIA. (see above) or another employee will take the necessary steps on a case-by-case basis.
Right to Restriction of Processing
Every data subject affected by the processing of personal data has the right, granted by law, to request that the controller restrict processing if one of the following conditions is met:
– The data subject disputes the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data.
– The processing is unlawful, the data subject objects to the erasure of the personal data, and instead requests the restriction of the use of the personal data.
– The controller no longer needs the personal data for the purposes of processing, but the data subject needs it to establish, exercise, or defend legal claims.
– The data subject has objected to the processing pursuant to Art. 21(1) of the GDPR, and it has not yet been determined whether the controller’s legitimate grounds override those of the data subject.
If any of the above conditions are met and a data subject wishes to request the restriction of personal data stored at 404MEDIA. , they may contact our Data Protection Officer (see above) or another employee at any time—including directly at info[at]404media.de—who will arrange for the restriction of processing.
Right to Data Portability
Every data subject affected by the processing of personal data has the right, granted by law, to receive the personal data concerning them—which the data subject has provided to a controller—in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising their right to data portability pursuant to Art. 20(1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, provided this is technically feasible and does not adversely affect the rights and freedoms of others.
To exercise the right to data portability, the data subject may contact the Data Protection Officer (see above) or another employee at any time, or may also contact info[at]404media.de directly.
Right to Object
Any data subject affected by the processing of personal data has the right, granted by law, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
404MEDIA. will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If 404MEDIA. processes personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for such marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to 404MEDIA. regarding processing for direct marketing purposes, 404MEDIA. will no longer process the personal data for these purposes.
In addition, the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her that is carried out by 404MEDIA. for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact the Data Protection Officer at 404MEDIA. or another employee directly. The data subject is also free to exercise their right to object in connection with the use of information society services by means of automated procedures that utilize technical specifications.
Automated Individual Decision-Making, Including Profiling
Every data subject affected by the processing of personal data has the right, granted by law, not to be subject to a decision based solely on automated processing —including profiling—that produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for the conclusion or performance of a contract between the data subject and the controller, or is permitted by Union or Member State law to which the controller is subject, and such law provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, or is based on the data subject’s explicit consent.
If the decision is necessary for the conclusion or performance of a contract between the data subject and the controller, or is made with the data subject’s explicit consent, 404MEDIA shall take appropriate measures to safeguard the rights, freedoms, and legitimate interests of the data subject, including at a minimum the right to request human intervention by the controller, to express their point of view, and to contest the decision.
If the data subject wishes to exercise rights relating to automated decisions, they may contact the Data Protection Officer at 404MEDIA. or another employee at any time.
Right to Withdraw Consent Under Data Protection Law
Every data subject affected by the processing of personal data has the right, granted by law, to withdraw consent to the processing of personal data at any time.
If the data subject wishes to exercise their right to withdraw consent, they may contact the Data Protection Officer at 404MEDIA. (see above) or another employee at any time.
8) Static Links from Facebook
Our website uses static links (not “social plugins”) to link to the Facebook page set up by 404MEDIA. The terms of use and privacy policies can be viewed on the respective websites.
9) Right of Access
As a user of our website, you have the right to request information from us regarding the data stored about you or your pseudonym. Upon your request, this information may also be provided electronically. To do so, please send a brief email to info[at]404media.de
Your data will not be disclosed to third parties or otherwise made available to them without your express consent; rather, it will be used solely for your individual support and to provide you with the best possible service. Passus assures you that your data will be treated confidentially in accordance with data protection regulations. Our web server automatically stores technical connection data—such as IP addresses—from every user of the Passus website. This data, along with the “click behavior” of Sanochemia website users, is used for statistical purposes to further improve our website.
10) Use of Matomo/Piwik
Our website uses the web analytics service Piwik. Piwik is open-source software that analyzes website visitor traffic. This analysis is made possible by cookies, which are text files. The cookies collect information regarding your use of our website. This information is stored on our server. Your IP address is anonymized beforehand. However, you have the option to prevent Piwik cookies from being stored on your computer. To do so, you must adjust the settings in your web browser accordingly. Please note, however, that this may prevent you from using our website to its full extent.