DEEN
Home Software Customer Management Order Tracking Point of Sale Lens Price Lists Interfaces Lens Orders Frame Inventory Contact Lenses Marketing Optometry & Anamnesis Master Data Reports Industry News Service Contact Download Demo Legal Notice Privacy

Privacy Policy

1. Data Controller

COMCEPT GmbH
Hauptstraße 161A
51143 Cologne
Germany

Phone: +49 2203 36928-0
E-Mail: info@comcept.eu

Responsible for the processing of personal data on this website within the meaning of Art. 4 No. 7 GDPR.


2. Server Hosting (Hetzner)

Our website is hosted on servers of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). For technical reasons, the following data is automatically processed:

  • IP address
  • Date and time of access
  • Requested URL
  • Referrer URL
  • HTTP status code
  • Volume of data transferred
  • Browser type and version
  • Operating system used

Purpose: Ensuring stable and secure operation of the website, error analysis and abuse detection.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests).
Retention period: Generally 7 to 14 days.
A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.


3. Static Website

This website is delivered as a static HTML site. No content management system that processes user data is used. External resources are embedded minimally (Bootstrap, Font Awesome, each loaded from public CDNs). When these resources are requested, the IP address and browser data are technically transmitted to the respective CDN operator.

Purpose: Delivery of fonts, icons and CSS libraries.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in performant delivery).


4. Contact Enquiries

When you contact us via the contact form or by email, we process the data you provide (e.g. name, email address, message) as well as technical metadata.

Purpose: Processing your enquiry and business communication.
Legal bases:
- Art. 6(1)(b) GDPR (contractual or pre-contractual enquiries)
- Art. 6(1)(f) GDPR (general enquiries)

Retention period: Until the enquiry has been fully resolved, unless statutory retention obligations apply. Business records subject to statutory requirements are retained for up to 10 years.


5. Cookies and Consent Management

Our website uses two types of cookies and comparable storage methods:

a) Strictly necessary cookies (no consent required):

  • Session cookies
  • Security and form cookies
  • comcept-consent-v2 (localStorage) - stores your cookie decision
  • comcept-demo-popup-v1 (localStorage) - remembers whether the demo notice popup has already been shown

Legal basis: Art. 6(1)(f) GDPR and Section 25(2)(2) TTDSG.

b) Analytics cookies (consent required): Cookies set by Google Tag Manager and Google Analytics 4 (see sections 6 and 7) are activated only after your explicit consent via our cookie banner. Until you consent, Google Consent Mode v2 runs with the default "denied"; no analytics data is collected.

Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TTDSG (consent).
Withdrawal: You can withdraw your consent at any time: Show cookie settings again.


6. Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The Tag Manager itself does not collect personal data; however, it manages downstream tags such as Google Analytics 4. These tags are activated only after you have granted consent via the cookie banner (Google Consent Mode v2).

Container ID: GTM-KSRJ3LCH
Purpose: Management of analytics and marketing tags.
Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TTDSG (consent).
Recipient: Google Ireland Limited; data may be transferred to Google LLC (USA) on the basis of EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
Further information: policies.google.com/privacy


7. Google Analytics 4

Subject to your consent, this website uses Google Analytics 4 (provider: Google Ireland Limited). Google Analytics uses cookies and similar technologies to analyse the use of the website.

Measurement ID: G-16PRNH6WYQ
Data processed: IP address (truncated via IP anonymisation), device and browser information, referrer, date/time, pages viewed, click and conversion events, approximate region.
Purpose: Audience measurement, optimisation of content and user experience.
Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TTDSG (consent).
Retention: 14 months by default; data is deleted automatically thereafter.
International transfers: Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework and the EU Standard Contractual Clauses also apply (Art. 46 GDPR).
Data processing agreement: A data processing agreement with Google is in place (Art. 28 GDPR).
Withdrawal: Manage cookie settings or use the Google Analytics opt-out browser add-on.


8. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, manipulation or unauthorised access. All data transmission is encrypted exclusively via HTTPS.


9. Your Rights as a Data Subject

You have the following rights under the GDPR:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to withdraw consent (Art. 7(3))

You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.

To exercise your rights, please contact us at any time: info@comcept.eu


10. Changes to this Privacy Policy

We reserve the right to update this privacy policy in response to technical or legal changes. The current version is always available on this website.


As of: May 2026