CM Partner uses cookies to give you the best possible service. If you continue browsing, you agree to the use of cookies.

Privacy Policy

I. General indications and legal bases
The following declaration informs you about what kind of personal data is collected for what purpose on this website by us as the responsible body and to what extent this data is made accessible to third parties.

1. Responsible body:
C&M Partner GmbH
Pfuhlstraße 5a
32805 Horn Bad Meinberg
phone: 05257 94 795 20

2. Legal bases of processing:
The processing of personal data requires a legal basis, which we would like to present to you below.
In the case of processing of personal data for which we obtain the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) DSGVO serves as the legal basis. This also includes processing operations that are necessary for the performance of pre-contractual measures.
If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Article 6 (1) lit. f DSGVO serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimization and maintenance of the security of our online offer.

II. Log-files, hosting
In the server statistics,data is automatically stored that the browser transmits to us as part of our legitimate interest in analysis and for security reasons (so-called "log files")./p> In detail, these are the following data:

  • language and version of the browser-software
  • used operating-system and its interface
  • referrer URL (the previously visited page)
  • host name of the accessing computer (IP address)
  • date and time of the server-enquiry
  • time zone difference from Greenwich Mean Time (GMT)
  • content of the request (concrete page)
  • transferred data-volume
  • status of access/ status code http.
As a rule, we cannot assign this data to specific persons. This data is not combined with other data sources. The data is also deleted after a statistical evaluation within 190 days. Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident is finally clarified.

We make use of hosting services. These services serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services in order to maintain the operation of this online offer.

We or our hosting provider hereby process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.

III. Contractual agreement
The personal data provided by you for contractual purposes in the case of e.g. quotation requests, such as name, address or e-mail address, will only be used internally to answer your queries, process your orders or provide you with access to certain contractual information.

IV. Contact
When you contact us by e-mail or via the contact form, your details will be stored by us in order to answer your questions.
As a matter of principle, your data will not be passed on to third parties unless applicable data protection regulations justify such a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately unless there is a legal exception for further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage has ceased to apply and there are no other legal exceptions to the contrary.

V. Cookies
This site uses cookies. Cookies are small text files that are stored on your computer and through which the body that sets the cookie receives certain information. They are used to make the website more user-friendly and effective and/or to make it easier for you to navigate on our website.

We only set cookies that are not absolutely necessary with your consent. You can revoke this consent at any time for future use.

Consent is voluntary and you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, refuse to accept third party cookies or all cookies or delete cookies that have already been stored. If you do not accept cookies, please note that in this case our website may not function properly. Unless we provide other information on the individual topics mentioned in this privacy declaration or in the cookie banner, the life of the cookies refers to 24 months.
You can find out which function on our website sets cookies below under the individual functions.

VI. Newsletter
If you would like to receive the newsletter offered on our website, we require a valid e-mail address from you that allows us to verify that you are the owner of the specified e-mail address or that the owner agrees to receive the newsletter.
After providing the e-mail address, we will send you a confirmation e-mail to the address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data relating to the newsletter dispatch will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe.
We only send newsletters with your consent or legal permission.

Your personal data will not be passed on to third parties.

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons, also known as tracking pixels. These are single-pixel image files that link to our website and thus enable us to evaluate your user behaviour. This is done by collecting your email address and web beacons, which are assigned to your email address and linked to a unique ID. We store the data collected in this way on our server. You can object to this tracking at any time by sending us an e-mail.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. You will find a link to cancel the newsletter at the end of each newsletter. If users have only registered for the newsletter and cancelled this registration, their personal data will be deleted.

VII. Registration
Our website offers a registration option. The personal data entered during registration will be transmitted to the data controller. The data is stored exclusively for internal use by us.
During registration, the user's IP address and the date and time of registration are stored. This serves to prevent misuse of the services. The data will not be passed on to third parties. An exception to this is if there is a legal obligation to pass on the data.
The registration of data is necessary for the provision of content or services. Registered persons have the option of having the stored data deleted or modified at any time. The person concerned can obtain information about the personal data stored about him or her at any time.

VIII. Our presences in social media
You can find us under online presences within social networks and platforms. We would like to use these presences to communicate with our customers, interested parties and active users there and to inform them about our services and our company in this way.
The processing of the personal data of the active users there is based on our legitimate interests in communicating and providing information to and with the users. If users have given their consent to data processing within the framework of the respective social platform, the processing is carried out on the basis of this consent.

We would like to point out that despite the joint responsibility, we do not have full influence on the data processing operations of the social platform and, if necessary, forward the rights request to the respective operator for better processing of the data subject rights. Our options are basically based on the company policy of the respective provider.

You can find our storage details below. We have no influence on the storage period of your data that is stored by the operator of the social platform for its own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Depending on the social platform named below, user data processing may also take place outside the area of the European Union. EU standard contractual clauses have been agreed upon with the US companies, so that we have taken possible measures to ensure compliance with European data protection law.

User data is usually processed by the platforms for market research and advertising purposes. For example, usage profiles can be created from the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Data can also be stored in the user profiles independently of the devices used by the users. This occurs in particular if the users are members of the respective platforms and are logged in to them.

For a detailed presentation of the respective processing and the objection options, we refer to the linked information of the providers below:

  • Facebook(Seiten, -Gruppen)
    (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland)
    The basis is an agreement on joint processing of personal data:
    privacy declaration:
    Opt-Out: und
  • Google/ YouTube
    (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland)
    privacy declaration:
  • Instagram
    (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
    privacy declaration/ Opt-Out:

IX. Disclosure of data to third parties: general and contractual purpose
We pass on data to third parties if this is necessary for the fulfilment of the contract and / or we are legally obliged and / or entitled to do so in individual cases.

X. Disclosure of data to third parties: tools for the economic operation of the website.
In some cases, we use external service providers within the scope of your consent or our legitimate interests with regard to the analysis, optimization and economic operation of the online offer. If you have given your consent for tools that are not necessary for the operation of the website, you can have these settings changed again at any time. We list our service providers below.

If your data is to be used for other purposes, we will inform you in advance and only use the data if you have previously given your express consent.

1. Service provider Google
Within the scope of your consent, we use services for the optimization and economic operation of our online offer for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is responsible.
EU standard contractual clauses have been agreed upon with „google“ so that we have taken possible measures to ensure compliance with European data protection law.

a. Google Webfonts
Google web fonts are used to improve the visual presentation of various information on this website. The web fonts are transferred to the browser's cache when the page is called up so that they can be used for the display. If the browser does not support Google Web Fonts or prevents access, the text is displayed in a standard font. When the page is called up, no cookies are set for the website visitor. Data transmitted in connection with the page call are sent to resource-specific domains such as or It is hereby transmitted to us which of our internet pages you have visited. The IP address of the browser of the end device of the visitor to these Internet pages is also stored by Google. It will not be associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
You can set your browser so that the fonts are not loaded from Google servers. Information on the data protection conditions of Google Web Fonts is available at: General information on data protection is available in the Google Privacy Center at:

XI. Data storage outside the EU/EEA
As can be seen from the individual tool descriptions above, we use tools from US third-party providers. Insofar as this is necessary for the notified purposes, it may happen that your IP address is processed in this course outside the European Economic Area, where a level of data protection that corresponds to the European standard is not consistently guaranteed and confirmed (for example, by means of an appropriate guarantee within the meaning of Art. 46 of the Data Protection Regulation or an adequacy decision of the European Commission). In particular, it cannot therefore be ruled out that security authorities in a third country may gain access to your IP address without you being able to take legally effective action against this.

The transfer of the IP address to these third party providers takes place in accordance with Art. 49 (1) lit. a DSGVO on the basis of your consent expressly given for this in the consent banner. This consent is voluntary. You can revoke it at any time with effect for the future. You will not suffer any disadvantages as a result.

In the opinion of some US third-party providers, the conclusion of so-called standard contractual clauses and additional measures taken in accordance with the Schrems II case law already ensure a level of protection that corresponds to the European standard. However, as the suitability of such measures to guarantee a sufficient level of data protection is disputed, we have decided to transmit your IP address only with your consent.

XII.Rights of the concerned person
You have a right to information about the personal data we have stored about you. According to the legal provisions, you also have the right to correct incorrect data, block data, transfer data and delete your personal data. To do this, send us an e-mail with the subject "data protection".
You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of personal data concerning you violates the legal provisions.

If you have given your consent, you have the right to revoke your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You can object to the future processing of your personal data in accordance with the legal requirements at any time. The objection can be made in particular against the processing for purposes of direct advertising.

XIII. Rights of the concerned person
If we have not provided storage information on the specific points, the following information applies: we store personal data for the duration of the respective statutory retention period or as long as the purpose of the collection exists. After expiry of the retention period, the data is routinely deleted unless it is necessary for the initiation or fulfilment of a contract. If user data is not deleted because it is required for other and legally permissible purposes, its processing is restricted as far as possible. Accordingly, the data will be blocked if possible and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.

XIV. Safety information
We make every effort to process your personal data by taking all technical and organisational measures to comply with the provisions of data protection laws and thus to protect this data. Our website or the communication via our website with us is encrypted via HTTPS.

This privacy policy was provided by the Sieling law firm - Fachanwaltskanzlei für IT-Recht.