Privacy Policy

Who we are:

The domain name of our website is: https://cactus-competence.com

Name and address of the person responsible: see Legal notice

We respect your data!

We are pleased that you are interested in our website. The trust of all visitors and customers, the security of your data and the protection of your privacy are of central importance to us. Your personal data will therefore be treated by us in accordance with the applicable statutory data protection regulations and this data protection declaration. Personal data is information that can be used to determine your identity, such as your real name, address or telephone number.

If you view and use our site without registering or otherwise expressly providing us with any information, we process the data that is sent to us with each request from your browser (see “Log Data” below). If you expressly send us personal data (e.g. via our contact form), this is done exclusively for the purpose of the inquiry or the respective order. We would like to point out that data transmission on the Internet can never be completely protected against access by third parties.

In the following, we would like to explain to you in more detail which data we process when and for what purpose. It explains how the services we offer work and how the protection of your personal data is guaranteed.

Legal basis for processing personal data

If we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) GDPR serves as the legal basis.

Article 6(1)(b) GDPR serves as the legal basis for the processing of personal data required to fulfil a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.

If processing of personal data is required to fulfil a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 Paragraph 1 Letter f GDPR serves as the legal basis for data processing.

Data Erasure and Storage Duration

The personal data of the person concerned will be deleted as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by European or national laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the regulations mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Your Rights

You have a right to free information about the data we have stored about you and, if necessary, a right to correction, restriction of processing or deletion of this data. You also have the right to data portability. Finally, you also have the right to complain to the data protection supervisory authority about the processing of your personal data by us.

We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements of Article 21 GDPR. The objection can be made in particular against processing for direct advertising purposes.

Provision of information

If you have any questions about the collection, processing or use of your personal data, for information, for the correction, blocking or deletion of data and to revoke any consent you may have given or to object to a specific use of data, please contact us using the following e-mail address to us:

info@cactus-competence.com

Log Data

The automatic collection and storage of log data by the provider of the Internet service (provider) is carried out because the processing of this data is technically necessary to display our website to you and to ensure stability and security. The log data includes the following information:

  • Date and time of the respective request
  • Internet address (URL) that was requested
  • URL that the visitor visited immediately before
  • Browser and language used
  • Operating system used and its interface
  • Visitor’s IP address and hostname
  • Access status / http status code
  • Amount of data transferred in each case

This data is transmitted to us automatically and cannot be assigned to you personally with a reasonable effort. The legal basis for the processing of this data is our legitimate interest in accordance with Art. 6 Paragraph 1 Sentence 1 lit. f GDPR, because this data processing is necessary for the operation and display of the website. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

Cookies

Please read our Cookie Policy.

Encryption by SSL

For security reasons, our website uses SSL encryption (Secure Sockets Layer). This protects transmitted data and cannot be read by third parties. You can recognize successful encryption by the fact that the protocol designation in the browser’s status bar changes from “http://” to “https://” and that a closed padlock symbol is visible there.

Web hosting via SiteGround

We use the services of SiteGround Hosting Ltd. for web hosting for our websites. Find out about the SiteGround Privacy Policy at https://www.siteground.com/privacy.htm. The legal basis is our legitimate interest in the operation and maintenance of the operational security of this website in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.

Comments

If you leave a comment on our website, the following data will be stored in connection with it:

  • The chosen username
  • Date and time of the comment
  • Your email address
  • your IP address

Your IP address will be deleted after a week. The storage of the IP address is necessary for us in order to be able to defend ourselves against third-party liability claims if possible publications in the comments represent illegal content. We need your e-mail address so that we can contact you if third parties complain that your comments are illegal. The legal basis is Art. 6 Paragraph 1 lit. b and f GDPR.

Sending our e-mail newsletter via “MailerLite”

With the information provided in this section, we explain to you how the registration, the dispatch as well as the evaluation and the content of our e-mail newsletter are designed.

If you would like to subscribe to our e-mail newsletter and read it regularly, you must register with a valid e-mail address and thus give your consent to the processing of your personal data by us. Please note the declaration of consent on the registration form for the newsletter.

Before sending the newsletter, you must expressly confirm to us as part of the so-called double opt-in procedure that we should activate the e-mail newsletter service for you. We do this to avoid using third-party e-mail addresses for registrations. You will receive a confirmation and authorization email from us asking you to click on the link contained in this email and thereby confirm that you would like to receive our newsletter. If you do not confirm, your personal data will be deleted within 7 days.

In connection with the registration, in addition to the e-mail address, the time of registration, the time of confirmation, the IP address and the text of consent are stored and we use the e-mail address exclusively for the delivery of the newsletter unless you expressly consent to another use have agreed.

Small, “invisible” files (beacons) that are sent with the newsletter can be used to carry out various evaluations to improve our offers. The IP address, browser and time of retrieval and opening of the newsletter and click behavior on links contained in the newsletter are recorded and statistically evaluated.

The newsletter is sent on the basis of the consent of the recipient in accordance with Article 6 Paragraph 1 Letter a, Article 7 GDPR in conjunction with Section 7 Paragraph 2 No. 3 UWG. The opening and click rates are analyzed on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR. It is in our interest to create offers that are as suitable as possible for our users and to achieve this by analyzing user behavior and continuously optimizing it.

Dispatch service provider: The newsletter is dispatched using MailerLite Limited, an Irish registered company at 38 Mount Street Upper, Dublin 2, D02 PR89 Ireland (hereinafter referred to as “dispatch service provider”). You can view the privacy policy of the shipping service provider at https://www.mailerlite.com/legal/privacy-policy. The shipping service provider is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European level of data protection. The associated information can be found at: https://www.dataprivacyframework.gov/list

We have concluded a data processing agreement with the provider in accordance with a contract for order processing in accordance with Art. 28 GDPR.

You can cancel the receipt by revoking your consent. You can unsubscribe from the newsletter at any time. Please use the link provided in the newsletter or send us a corresponding e-mail message to the following address: info@cactus-competence.com

A separate revocation of the dispatch or evaluation of the user behavior is unfortunately not possible.

“Share” function for social networks

We use the share function on our website for the following social media channels:

Facebook, Pinterest, LinkedIn, Instagram

To share our content on social networks, we use the data protection-compliant WordPress plugin “Social Media and Share Icons (Ultimate Social Media)”, which does not process any personal data. The information is only transferred to the social network when you actively click on the corresponding button. This ensures that no unwanted and automatic data transfer to the relevant social networks takes place when you visit our site. The legal basis for this processing is our legitimate interest (according to Art. 6 Para. 1 lit. f GDPR)

YouTube

Our website uses YouTube functions to display videos. If you visit one of our pages that contains a video, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you give YouTube the opportunity to assign your user behavior directly to your personal YouTube profile. You can avoid this by logging out of your YouTube account. The data collected by YouTube is transmitted to the USA, which according to the GDPR is considered a third country with an insecure level of data protection. We have no knowledge of further processing and the duration of storage.

The legal basis for processing the data is our legitimate interest in accordance with Article 6 Paragraph 1 Letter f GDPR, as we would like to offer you an attractive website.

For more information on how YouTube handles user data, see YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

The operator of the service is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; a company belonging to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Google Analytics

This website does not use Google Analytics.

Cloudflare

We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 para. 1 lit. f DSGVO). A CDN is a network of [globally] distributed servers that is able to deliver optimised content to the website user. For this purpose, personal data may be processed in server log files by Cloudflare. Please compare the explanations under „Hosting“.

Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) sentence 1 lit. f DSGVO not to operate a content delivery network ourselves.

You have the right to object to the processing. Whether the objection is successful is to be determined within the framework of a balancing of interests.

The processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.

Your personal data will be stored by Cloudflare for as long as necessary for the purposes described.

Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf

Amazon Affiliate Program

We participate in the Amazon EU Affiliate Program. Our site includes advertisements and links from Amazon.de, from which we can earn money through reimbursement of advertising costs. Amazon uses cookies to be able to identify the origin of the orders. This allows Amazon to understand that you clicked on the partner link or the partner ad on our website. This processing (storage of “Amazon cookies”) is based on Art. 6 lit. f GDPR. As the operator of the website, we have a legitimate interest in this, as this is the only technical way of determining the amount of your partner remuneration.

We have no knowledge of the further type of processing or the duration of the storage of the data. We cannot rule out that data will be transferred to the USA, which is considered a third country with an insecure level of data protection in the GDPR. For more information on how Amazon uses data, see Amazon’s privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.

Google Web Fonts

This website does not use so-called web fonts provided by Google. All fonts used by this website are stored locally on our server.

System and information security

We secure our website and our other systems through technical and organizational measures against loss, destruction, access, modification or distribution of the stored data by unauthorized persons. However, despite controls, complete protection against all hazards is not possible. Simply because of the connection to the Internet and the resulting technical possibilities, no guarantee can be given that the content and the flow of information will not be viewed and recorded by third parties.

Objection to unauthorized advertising by e-mail

As part of the imprint obligation according to § 5 TMG, we have published general contact details and an e-mail address on our website. We hereby object to the use of this contact data for the unsolicited sending of information material, advertising or spam mails that we have not explicitly requested.

Status of the data protection declaration: 13.05.2025