Privacy Policy

This website takes the protection of your data seriously — and is built to collect as little of it as possible in the first place:

• No cookies, no tracking: the public website sets no cookies and embeds no analytics or advertising services.
• No third-party content: fonts and graphics are served from our own servers — no data is transmitted to third parties.
• Hosting in Germany: the server is located in Falkenstein (Hetzner Online GmbH, Germany). When you access the site, technically necessary connection data (including the IP address) is processed in server logs (Art. 6(1)(f) GDPR).
• Platform login: logged-in users receive a technically necessary session cookie (not tracking).

Controller within the meaning of the GDPR

Güclü Holding UG (haftungsbeschränkt)
Represented by Managing Director Bünyamin Güclü
Ilexweg 35, 50769 Cologne, Germany
Phone: +49 221 82828810
Email: kontakt@compliverse.de

Contacting us

You can reach us two ways — directly by email (for example via a “Request access” button) or through the contact form at /en/contact. Either way we process your details solely to handle your request: on the basis of Art. 6(1)(b) GDPR where your enquiry is aimed at a contract (a demo or a quote, say), otherwise on the basis of our legitimate interest in answering it (Art. 6(1)(f) GDPR). We delete this data as soon as it is no longer required and no statutory retention period applies.

The contact form collects your name, company, email address, the subject you select and your message — plus a phone number if you choose to give one. We process your IP address briefly and solely to prevent abuse, by limiting how many enquiries one sender can submit per hour (Art. 6(1)(f) GDPR). We deliberately use no third-party captcha, so no data goes to anyone else in the process. The form stores nothing in a database — your message is sent as an email to kontakt@compliverse.de and handled there like any other enquiry.

Legal-landscape subscription (email notifications)

On the German Legal Landscape page you can sign up for notifications when the law changes; the sign-up form is currently only available there. We process only your email address for this — on the basis of your consent (Art. 6(1)(a) GDPR), obtained via double opt-in: the subscription only becomes active once you click the confirmation link in our email. Unconfirmed entries are deleted after 14 days. You can unsubscribe at any time via the link in every email; unsubscribing deletes your address entirely. Email addresses appear masked in server logs.

Payment processing

When you buy a package, the payment runs through our payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your payment details — your card number, for instance — directly with Stripe; they never reach our servers. What Stripe returns to us is your email address, your name and billing address where given, the package purchased and the payment status. We process that data to perform the purchase contract and set up your access (Art. 6(1)(b) GDPR), and to meet our tax and commercial retention obligations (Art. 6(1)(c) GDPR in conjunction with Section 147 AO and Section 257 HGB — up to ten years for invoices and accounting records). Automatic VAT determination is part of the payment process and serves the same contract.

Stripe processes your data in two roles: as our processor (Art. 28 GDPR) for the payment itself — and as a controller in its own right for the duties it must meet as a payment institution, such as fraud prevention and anti-money-laundering and due diligence obligations. Stripe's own privacy policy applies to that second part: stripe.com/privacy.

Your rights

You have the right, at any time, to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future. Contact us informally using the details above.

Right to lodge a complaint with a supervisory authority

Independently of the above, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de