Privacy Policy

LAST UPDATED - 2023-05-27

Basic Rules

1. In Website Coins

We will be not responsible for your coins before getting Payment withdrawal.

2. Illegal ways to get coins

If you use vpn or proxy or if you try to do something else unethically to get coins then you will lost your all coins or can get banned.

3. Cashout for Gift Cards

If you don't collect your Withdrawal Gift Card for long time, Your withdrawal Gift Card could be expired or used.


A. General Information

I. Scope of Application of this Data Privacy Notice

This Data Privacy Notice applies to the (Data-)Processing of your Personal Data when you visit and interact with the website ”cpaxpro.com” (hereinafter referred to as “the Website”). On the Website, the following functions are available: the creation of an account, newsletter and other information subscription(s), user support, and our marketing services with and on third-party websites, including its sub-pages and when you contact us via these sites. However, (Data-)Processing that takes place on linked or other websites are not covered by this Data Privacy Notice.
We process Personal Data of website visitors only insofar as this is necessary for the provision of a functional website, our content, and services. The Processing of Personal Data on a regular basis only takes place after Consent of the visitors of the Website. An exemption applies in those cases in which it is not possible to obtain prior Consent for factual reasons and the (Data-)Processing is allowed by legal regulations.
Sections A. II.-D refers to information pertaining EU-General Data Protection Regulation (EU-GDPR). For other Privacy regulations please refer to E. (CCPA)

II. Name and Address of the Controller of the Processing of your Personal Data

Unless otherwise specified in this Data Privacy Notice, the Controller for the processing of your Personal Data is:
contact@cpaxpro.com

III. Definitions

For this Data Privacy Notice the below key terms shall have the defined meanings:
a) Personal Data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) (Data-)Processing means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
c) Controller means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
d) Processor means a natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the controller.
e) Recipient a natural or legal person, public authority, agency, or another body, to which the Personal Data are disclosed, whether a Third Party or not. However, public authorities which may receive Personal Data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
f) Third Party means a natural or legal person, public authority, agency, or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process Personal Data.
g) Consent of the data subject is any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal Data relating to him or her.

B. Processing of your Personal Data

I. Visit and use of the Website

1. Provision of the Website

General information: For the provision and the secure operation of the Website, we process your below Personal Data and store it in log files based on our legitimate interest.
Categories of data processed: IP address and Internet service provider of the user - End device-specific data (e.g., browser type and version; operating system and platform) - Usage data (e.g., addresses (URLs) of the page accessed and the page previously visited; date and time of access; amount of data transferred)
Purposes and legal basis: Provision and the secure operation of the Website - (legal basis Art. 6 (1) (1) lit. f) GDPR)
Storage period: After seven (7) days, the stored server log files are either deleted or the (potential) personal reference is removed by deleting the IP address.
Recipients (categories): The hosting provider of the Website - The information collected is stored on a server of the provider, in the case of international provider outside Europe. We have agreed so-called EU-standard contractual clauses (EU-EU-EU-SCCs) with the provider. - Further information on the purpose and scope of the data collection and its processing and your rights can be found in the data privacy notices of the provider.

2. Registration of an Account

General information: If you like, you can create a user account under "Create Account" in order to save your personal settings and other information with the Website. Categories of data processed, purposes and legal basis: Your name, email address and password – The purpose of the (Data-)Processing is to save your data for the next website visit and the performance of a contract with you. The legal basis for the (Data-)Processing of your Personal Data is Art. 6 (1) (1) lit. b) GDPR.
Storage period: You can always delete all further data, including your user account, in the customer area. We are required by commercial and tax law to store your address, payment, and order data for a period of ten (10) years. However, we will restrict processing after three (3) years, i.e., your Personal Data will only be used from this point on to comply with legal obligations. Recipients (categories): The Personal Data will not be transferred to any Third Parties.

3. Support Request

General information: On our website it is possible to contact us through a support tool. Categories of data processed: Name, email address and subject and content of the request Purposes and legal basis: Answering your request (legal basis: Art. 6 (1) (1) lit. b) GDPR; Art. 6 (1) (1) lit. f) GDPR)
Storage period: Requests received are deleted after they have been answered in regular deletion routines (at least once a year). Recipients (categories): Beside the employees of the Controller entrusted with responding to the request, the Website hosting provider - The information collected is stored on a server of the provider, in the case of international provider outside Europe. We have agreed so-called EU-EU-SCCs with the provider - Further information on the purpose, scope of the data collection and its processing by the provider and your rights can be found in the data privacy notices of the hosting provider.

4. Customer Experience via Trustpilot

General information: In order for us to improve, enhance, and extend our services for you it is of utmost importance to us to better understand your customer needs with the Website. Therefore, we send you an email invitation to participate in a survey via Trustpilot (Trustpilot Legal - Privacy Policy).

Categories of data processed and purpose: For the purpose to improve, enhance, and extend our services we process your contact information (e.g. your name and email address), device and location information (e.g. your IP address, browser settings (the type of browser you use, browser language, time zone), and location, user account information: (e.g. your username, password), business account information, usage and profiling information, information about reviews and ratings, verification data.

Legal basis: We conduct and offer this customer experience survey based on our legitimate interests to continuously improve and extend our relevant services for you (legal basis: Art. 6 (1) (1) lit. f) GDPR).

Objection option(s): You can object to receiving such invitation emails via our [Consent Manageror via the opt-out function of Trustpilot. In case that you already have received an email inviting you to participate in the customer experience survey via Trustpilot, you have the right to opt-out of receiving further emails by clicking on the "unsubscribe" button/link included in each communication

Storage Period: Third Parties engaged by us will store your data on their systems for as long as is necessary in connection with the provision of services for us in accordance with the respective order.

Recipients (Categories): Trustpilot A/S, Pilestraede 58, 5th floor, DK-1112 Copenhagen K

5. Website analysis and statistics for Marketing Purposes

a. Microsoft Clarity, Facebook Conversion Tracking, Google Analytics

General information: We use Microsoft Clarity (Microsoft Privacy Statement – Microsoft privacy), Facebook Conversion Tracking, (Meta Privacy Policy - How Meta collects and uses user data | Privacy Center | Manage your privacy on Facebook, Instagram and Messenger | Facebook Privacy), as well as Google Analytics (Privacy Policy – Privacy & Terms – Google) on the Website. These tools record certain user interactions with the Website using cookies and pixel tags (see section B. III. for more details) and evaluate these on our behalf in general, non-personal reports. For easier administration of Google Analytics, we use the Google Tag Manager.

Categories of data processed: Page URL, HTTP Referer, Data on usage behavior on the website, Browser, Operating system, Device type, Country, region, city (e.g., visits, length of stay, etc.)

Purpose and legal basis: For the purpose of creating general, non-personal statistics on the use of the Website, in order to constantly improve the Website and make it more interesting for you as a user, we process your Personal Data. The legal basis for the collection and further processing of the information is our legitimate interest (Art. 6 (1) (1) lit. f) GDPR).

Objection option(s): You can object to the Data Processing via our [Consent Manager] or via the opt-out function of Microsoft, Facebook, or Google.

Storage Period: Regarding the use and storage duration of cookies, please note point (B. III).

Recipients (Categories): Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (Facebook) - Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland - Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") - By integrating Facebook and Google services, data may also be transferred to Google LLC and Facebook Inc. in the USA - We have agreed so-called EU-EU-SCCs with the provider. - Further information on data processing by the above-mentioned providers can be found on their Data Privacy Notices (see links above).

b. Facebook Pixel and Facebook Custom Audiences

General information: We use advertising measures of Facebook Inc ("Facebook") on the Website. By integrating the so-called "Facebook Pixel" and “Facebook Custom Audiences” (Meta Privacy Policy - How Meta collects and uses user data | Privacy Center | Manage your privacy on Facebook, Instagram and Messenger | Facebook Privacy) on the Website, we can display our advertising measures ("Facebook Ads") to users of our website and the social network Facebook and measure and evaluate the success ("Conversion Tracking"). This connection of Facebook and our website is technically carried out via the "Facebook Pixel" and “Facebook Custom Audiences”.

Categories of data processed, purpose and legal basis: Legal basis for the processing of your data is Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent. The purpose is to show advertising measures and to measure and evaluate the success of the advertising measures. - Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server when you visit our website. We have no influence on the scope and further use of the data collected by Facebook using this tool and therefore present you with the processes known to us: Through the integration of Facebook Pixel and Facebook Custom Audiences, Facebook receives the information that you have called up the corresponding web page of our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider may learn your IP address and other identifying features and use them to create a profile.

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager]. In addition, you can withdraw (only logged in users) via the provider's function at the following link: www.facebook.com/settings/?tab=ads#_.

Recipients (categories): (Facebook) Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland) - By integrating Facebook services, data may also be transferred to Facebook Inc. in the USA. - We have agreed to so-called EU-EU-SCCs with Facebook. Further information on data processing by Facebook is available in Facebook's Data Privacy Notice (see link above).

c. Sentry JavaScript Bug Tracking Software

General information: We use the Sentry JavaScript Bug Tracking Software (Privacy Policy 2.2.1 (November 10, 2020) | Sentry) on our website. The Sentry JavaScript Bug Tracking Software is a real-time error tracking for the Website.

Categories of data processed and purpose: IP address, Page URL, HTTP Referer, Data on usage behavior on the website, Browser, Operating system, Device type, Country, region, city (e.g., visits, length of stay, etc.), Use data (e.g., features used, visited websites). – The purpose is to tracking bugs

Legal basis: Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent.

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager].

Recipients (categories): Sentry, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105 - By integrating Sentry services, data may also be transferred in the USA. We have agreed to so-called EU-EU-SCCs with the provider. Further information on data processing by Sentry is available in Sentry's Data Privacy Notice (see link above).

d. Split - A/B Testing

General information: We use the A/B testing by Split (Privacy Policy - Split) on our website. A/B testing, otherwise known as split testing, is the process of testing two different versions of a web page or product feature to optimize conversion rate or improve upon a certain business metric. The two versions can be very similar, with only a change in button color, or very different, with a total change in the way a feature behaves.

Categories of data processed and purpose: IP address, Devide ID, Page URL, HTTP Referer, Data on usage behavior on the Website, Non-identifiable request IDs, Browser, Operating system, Device type, Country, region, city (e.g. visits, length of stay, etc.), Web Analytics (e.g. Web page interactions), Social Network Data (e.g. user name), IP-address-based location information, Points of Presence (POPs) location, Recordings of your environment – The Purpose of the (Data-)Processing is to optimize the conversion rate or improve a specific business metric.

Legal basis: Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent.

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager].

Recipients (categories): Split Software, Inc., Ballindamm 39, 20095 Hamburg, Germany - By integrating Split services, data may also be transferred in the USA (Split Software, 2317 Broadway, Redwood City, CA 94063): We have agreed to so-called EU-EU-SCCs with the provider. Further information on data processing by Split is available in Split's Data Privacy Notice (see link above).

6. Integration of Third-Party Services / Plug-Ins

a. Integration of Google Fonts

General information: We use Google Fonts (www.google.de/intl/de/policies/privacy) on the Website. The use of Google Fonts allows us to display the Website correctly in any browser and to implement its typographic design in an appealing way.

The categories of data processed, purpose and legal basis: The legal basis for the processing of your data is Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent. - The purpose of the data processing is to ensure that the website is displayed correctly in every browser and that its typographic design is implemented in an appealing manner. - By visiting the Website Google receives the information that you have called up the corresponding sub-page of our website. In addition, the basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to be associated with your Google profile, you must log out before activating the offer. Google stores your data as usage profiles and uses them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The aforementioned possibility of data collection by Google theoretically also exists when using Google Fonts, especially since the plug-in also transmits the aforementioned basic data such as your IP address to the provider, insofar as we have not integrated the service locally on our server for technical reasons.

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager].

Recipients (categories): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") - By integrating Google services, data may also be transferred to Google LLC in the USA - We have agreed so-called standard contractual clauses with the provider. Further information on data processing by Google is available in Google's Data Privacy Notice (see link above).

b. Adobe Typekit Fonts

General information: We use Adobe Typekite Fonts (Adobe Privacy Center) on our website. The use of Adobe Fonts allows us to display our website correctly in any browser and to implement its typographic design in an appealing way.

Categories of data processed and purpose: Fonts served, Service providing the fonts (e.g., Adobe Fonts), Server serving the fonts (e.g., Adobe Fonts servers or Enterprise CDN), IP address (while the Fonts service receives IP address so that it knows where to deliver the font, it does not store it) - The purpose of the data processing is to ensure that the website is displayed correctly in every browser and that its typographic design is implemented in an appealing manner.

Legal basis: Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager].

Recipients (categories): Adobe Inc., 345 Park Avenue, San Jose, California 95110-2704, USA - By integrating Adobe services, data may also be transferred in the USA - We have agreed so-called standard contractual clauses with the provider. Further information on data processing by Adobe is available in Adobe's Data Privacy Notice (see link above).

c. JsDelivr and Cloudflare Content-Distribution-Network

General information: We use the (public) content delivery network “CDN” by “jsDelivr” (Privacy Policy - cdn.jsdelivr.net) and “Cloudflare” (Cloudflare's Privacy Policy | Cloudflare) on our website. A CDN allows for the quick transfer of assets needed for loading internet content including HTML pages, javascript files, stylesheets, images, and videos. JSDelivr is a public content delivery network for open-source software projects, including packages hosted on GitHub, npm, and WordPress.org.

Categories of data processed and purpose: Page URL, HTTP Referer, Data on usage behavior on the website, Browser, Operating system, Device type, Country, region, city (e.g. visits, length of stay, etc.) The Purpose of the (Data-)Processing is the quick transfer of assets needed for loading the internet content.

Legal basis: Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager].

Recipients (categories): jsDelivr - Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA - By integrating Cloudflare services, data may also be transferred in the USA - We have agreed so-called EU-EU-SCCs with the provider. Further information on data processing by jsDelivr and Cloudflare is available in their Data Privacy Notice (see link above).

d. Digital Ocean Spaces

General information: We use Digital Ocean Spaces, which is a cloud-based file storage service offered by Digital Ocean (Legal - Privacy Policy (digitalocean.com)) on our website. Digital Ocean Spaces provides a simple interface for managing and accessing files.

Categories of data processed and purpose: IP addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, clickstream data, landing page, and referring URL, Usage of our Services, information on Third-Party Accounts – The purpose of the (Data-(Processing) is to manage and access files.

Legal basis: Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager].

Recipients (categories): Digital Ocean, 101 6th Ave New York, NY 10013 - We have agreed so-called EU-EU-SCCs with the provider. - For more information, please refer to the provider's Data Privacy Notice (see link above).

e. Google DoubleClick

General information: We use Google DoubleClick Digital Marketing (DDM) and Google DoubleClick Rich Media on our website (Privacy Policy – Privacy & Terms – Google). DDM is an integrated ad technology platform that enables advertisers to create, manage and grow high-impact digital marketing campaigns more effectively. DoubleClick Rich Media is an end-to-end system for producing, managing, and reporting on rich media advertising.

Categories of data processed and purpose: Your apps, browsers & devices (GPS and other sensor data from your device, IP address, Activity on Google services, such as your searches and places you label like home or work, Information about things near your device, such as Wi-Fi access points, cell towers, and Bluetooth-enabled devices), Your activity (Terms you search for, Videos you watch, Views and interactions with content and ads, Voice and audio information, Purchase activity, People with whom you communicate or share content, Activity on third-party sites and apps that use our services, Chrome browsing history you’ve synced with your Google Account), Your location information (GPS and other sensor data from your device, IP address, Activity on Google services, such as your searches and places you label like home or work, Information about things near your device, such as Wi-Fi access points, cell towers, and Bluetooth-enabled devices) -  The purpose of the (Data-)Processing is to create, manage and grow high-impact digital marketing campaigns.

Legal basis: Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent. - By visiting the website Google receives the information that you have called up the corresponding sub-page of our website. In addition, the basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to be associated with your Google profile, you must log out before activating the offer. Google stores your data as usage profiles and uses them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The aforementioned possibility of data collection by Google theoretically also exists when using DDM and Google Double Click Rich Media, especially since the plug-in also transmits the aforementioned basic data such as your IP address to the provider, insofar as we have not integrated the service locally on our server for technical reasons.

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager].

Recipients (categories): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - - By integrating Google services, data may also be transferred to Google LLC in the USA) - We have agreed so-called EU-EU-SCCs with the provider. - For more information, please refer to the provider's Data Privacy Notice (see link above).

f. Facebook Signal

General information: We use “Facebook Signal” on our website. It is a free discovery and curation tool for journalists who want to source, gather, and embed newsworthy content from Facebook and Instagram, across news, culture, entertainment, sports, and more—all in one place (Meta Privacy Policy - How Meta collects and uses user data | Privacy Center | Manage your privacy on Facebook, Instagram and Messenger | Facebook Privacy).

Categories of data processed and purposes: Activities (e.g. content that you create on Facebook, such as posts or comments or the types of content you view or interact with); Information about friends, subscribers, groups, accounts, Facebook pages, and other users and communities you network and interact with; App, browser, and device information (e.g. email address, and ID, the device(s) or software used and other device features, signals from your device, information you've shared with us through device settings, such as GPS location, camera access, photos, and information from partners, suppliers and third parties, websites you visit and cookie data, such as through social plugins or the meta pixel – The purpose is to source, gather, and embed newsworthy content from Facebook and Instagram.

Legal basis: Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent. - Due to the third-party tools used, your browser automatically establishes a direct connection with the Facebook server when you visit our website. We have no influence on the scope and further use of the data collected by Facebook using this tool and therefore present you with the processes known to us: Through the integration of the Facebook Signal, Facebook receives the information that you have called up the corresponding web page of our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider may learn your IP address and other identifying features and use them to create a profile.

Withdraw Consent: The withdrawal of your Consent is possible at any time without affecting the permissibility of the processing until the withdrawal. The easiest way to revoke your Consent is to use our [Consent Manager]. In addition, you can withdraw (only logged in users) via the provider's function at the following link: www.facebook.com/settings/?tab=ads#_.

Recipients (categories): (Facebook) Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland) - By integrating Facebook services, data may also be transferred to Facebook Inc. in the USA: We have agreed to so-called EU-SCCs with Facebook. Further information on data processing by Facebook is available in the Data Privacy Notice (see link above).

g. Use of Google, Steam and other Social Media Plug-Ins

General information: We use the following third-party services and social media plug-ins on the Website: Google (Privacy Policy – Privacy & Terms – Google) und Steam (Privacy Policy Agreement (steampowered.com)), Trustpilot (Trustpilot Legal - Privacy Policy), Discord (Privacy Policy | Discord), Twitter (Twitter Privacy Policy), Facebook (Meta Privacy Policy - How Meta collects and uses user data | Privacy Center | Manage your privacy on Facebook, Instagram and Messenger | Facebook Privacy), Instagram (Data Policy | Instagram Help Center), Reddit (Reddit Privacy Policy).

Categories of data processed, purposes and legal basis: The third-party services and social media plug-ins are only loaded if you have previously activated the function by giving your Consent. Via these plug-ins, we offer you the opportunity to interact with those social networks and other users. The legal basis for the use of the plug-ins is Art. 6 (1) (1) lit. a) GDPR, i.e., the integration only takes place after your Consent. The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you avoid being assigned to your profile with the plug-in provider.

Withdraw Consent: The withdrawal of your Consent is possible at any time, without affecting the permissibility of the processing until the withdrawal. The easiest way to withdraw your Consent is via our [Consent Manager] or via the functions of the above-mentioned social media providers.

Recipients (categories): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") - By integrating Google services, data may also be transferred to Google LLC in the USA – Steam is a service of Valve Corp., Valve GmbH, Rödingsmarkt 9, D-20459 Hamburg, Germany - By integrating Steam services, data may also be transferred to a Washington Corporation having its registered offices at NE 4th St., Bellevue, WA 98004, USA – Trustpilot A/S, Pilestraede 58, 5th floor, DK-1112 Copenhagen K - Discord Inc., 444 De Haro Street #200, San Francisco, CA 94107, USA – (Facebook) Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland - Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland - (Instagram) Meta Platforms Ireland Limited, 4 Grand Canal, Square, Grand Canal Harbour, Dublin 2 Ireland - Reddit, Inc., 1455 Market Street, Suite 1600 San Francisco, CA 94103, United States;

We have agreed so-called EU-SCCs with each provider. - Further information on the purpose and scope of the data processing by the plug-in provider can be found in the Data Privacy Notices of these providers (see links above).

II. Newsletter

General information: On the Website you can subscribe to our newsletter.  

Categories of data processed: IP address and date and time of registration, email address

Purposes and legal basis: The collection of the user's email address serves to deliver the newsletter. The collection of other Personal Data as part of the registration process serves to prevent misuse of the services or the email address used prevent. The legal basis for the processing of your Personal Data is Art 6 (1) (1) lit. a) GDPR.

Withdraw Consent: The Consent to the newsletter subscription can be withdrawn at any time, without affecting the permissibility of the processing until withdrawal. The easiest way to withdraw is via the corresponding link, which can be found in each newsletter or via our [Consent Manager].

Storage period: The Personal Data will be deleted as soon as they are no longer required for the purpose for which they were collected. Accordingly, the user's email address is stored for as long as the subscription to the newsletter is active. The other Personal Data collected during the registration process is usually deleted after a period of seven (7) days.

Recipients (categories):

III. Cookies and Bots

General information: On the Website we use cookies and bots. 
Cookies are small text files that are stored in the browser of your end device when you visit our websites. With the help of cookies, your actions and your settings on our websites can be stored and read for the duration of a browser session or possibly beyond. In this respect, however, there is no direct personal allocation to you, but only to a so-called cookie ID (pseudonym). This means that your name, your IP address or similar data that could enable the cookie to be assigned to you are not stored in the cookie. We use cookies that are set by servers on our domains. We may also use cookies set by third-party servers whose code/content we embed on our website.           
A bot is a software application that is programmed to do certain tasks. Bots are automated, which means they run according to their instructions without a human user needing to manually start them up every time. Bots often imitate or replace a human user's behavior. Typically, they do repetitive tasks, and they can do them much faster than human users could. By means of a bot, the information and offers on our website can be optimized in the sense of the user or can serve IT security.

Purposes and legal basis of the cookies and bots used:

  • Necessary cookies: Cookies that are necessary for the operation of our website and their core functions (legal basis: 6 (1) (1) lit. b) GDPR; Art. 6 (1) (1) lit. f) GDPR; Sec. 25 (2) Data Protection and Privacy in Telecommunications and Telemedia Act (Gesetz über den Datenschutz und den Schutz der Privatsphäre in der Telekommunikation und bei Telemedien, TTDSG)).
  • Preference cookies:
  • Analyze and Statistical cookies and pixel tags: By means of these cookies and pixel tags, we collect information about your website visits in order to create anonymous evaluations and statistics about the use of our website (example: cookies and pixel tag for Google Analytics) (legal basis: Art. 6 (1) (1) lit. a) GDPR; Sec. 25 (2) TTDSG).
  • Marketing cookies and pixel tags: These cookies and pixel tags are set by third-party providers (e.g., Google; Facebook) in order to show you more relevant advertising on other websites or to measure the success of advertising campaigns (legal basis: Art. 6 (1) (1) lit. a) GDPR; Sec. 25 (2) TTDSG).

Storage period and deletion of cookies Our cookies are automatically deleted either after the browser session has expired (so-called "session cookies") or after a defined period of time (so-called "persistent cookies"). Details on the possible duration of the cookies used can be found in the cookie declaration in the cookie banner or in the detailed information on the cookies and bots used below. There you also have the possibility to change or withdraw your Consent to individual or all cookies at any time.  

Withdraw Consent: Withdrawal of your Consent is possible at any time without affecting the permissibility of (Data-)Processing until your withdrawal. The easiest way to withdraw your Consent is to use our [Consent Manager]. You can restrict or completely prevent the storage of (certain) cookies and bots via your browser settings. For more detailed information, please refer to the instructions or help function of your browser. In principle, our website can still be visited and used after cookies have been restricted/deactivated in the browser settings. Please note, however, that a complete deactivation of cookies in particular can lead to limited functionality of our website. As a rule, your browser also has the option of preventing activity tracking (e.g. by means of JavaScript). For more detailed information, please also refer to the instructions or help function of your browser.

C. Your Data Protection Rights

You can exercise the following data protection rights against us (clause I.- IV.). Additionally, you have the right to complaint to the data protection supervisory authority (clause V.).

I. Right to withdraw Consent

If you have given us your Consent for the Processing of your Personal Data, you have the right to withdraw this Consent at any time pursuant to Art. 7 (3) GDPR. The withdrawal of your Consent is effective for the future and shall not affect the lawfulness of (Data- )Processing based on Consent before your withdrawal. Unless specifically regulated in Section B. “Processing of your Personal Data”, please send your withdrawal of Consent to contact@cpaxpro.com . If you withdraw your Consent, we process your Personal Data in this connection to answer your request. This (Data-)Processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) (1) lit. c) GDPR).

II. Right of Access, Rectification, Erasure, Restriction of (Data-)Processing and Portability of your Personal Data

In accordance with the GDPR, you have the right to request at any time that we - provide you with information about the Personal Data relating to you that we process (Art. 15 GDPR), - correct Personal Data relating to you that is inaccurate (Art. 16 GDPR), - delete your Personal Data stored by us (Art. 17 GDPR), restrict its Processing (Art. 18 GDPR) and/or surrender or transfer your Personal Data (Art. 20 GDPR).

III. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of your Personal Data which is carried out on the basis of our legitimate interests pursuant to Art. 6 (1) (1) lit. f) GDPR. We will then no longer process your Personal Data for this (these) purpose(s), unless our legitimate interests are overridden, or the processing serves the assertion, exercise, or defense of legal claims.

If you object to the (Data-)Processing of your Personal Data, we will process any collected Personal Data in this context to respond to your request. This (Data-)Processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) (1) lit. c) GDPR).

IV. Assertion of your Rights

To exercise the aforementioned data protection rights against us, please address your request, stating your first and last name, either by email to contact@cpaxpro.com, or by post to Almedia GmbH, Arnstadt Street 50, 99096 Erfurt, Germany. If you assert your rights against the Controller, we will process your Personal Data in this context to respond to your request. This (Data) Processing is necessary for the fulfilment of legal obligations (legal basis: Art. 6 (1) (1) lit. c) GDPR).

V. Right of Complaint to the Data Protection Supervisory Authority

Irrespective of your abovementioned rights, you can lodge a complaint with a data protection supervisory authority, if you are of the opinion that the processing of your personal data by the Controller violates the GDPR (Art. 77 GDPR).

D. Changes to this data protection information

We reserve the right to amend and modify the content of this Data Privacy Notice. The updated Data Privacy Notice will apply from the time we make it available to you.

E. For Californian Residents

The California Code of Regulations defines a "resident" as:

Every individual who is in the State of California for other than a temporary or transitory purpose and every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.
All other individuals are defined as non-residents. If this definition of "resident" applies to you, we must adhere to certain rights and obligations regarding your personal information. To the extent those rights apply to you, they are described below. The Company also handles certain personal information on behalf of third-parties and/or partners of the Company. You should contact these third-parties and/or partners to exercise any rights you may have with respect to that personal information.
Pursuant to the California Consumer Protection Act of 2018 (“CCPA”), and subject to certain exceptions and limitations, residents of California are able to contact the Company to exercise the rights described below with respect to certain personal information that the Company holds about them.
You are entitled to receive the following:
Whether we collect and use your personal information The business purpose for collecting personal information

The categories of your personal information that the Company has collected in the preceding 12 months
The categories of sources from which that information was collected
The categories of personal information that we disclosed for a business purpose
The categories of third parties to whom the personal information was disclosed for a business purpose
The specific pieces of personal information the Company has collected about you.
You also hold the entitlement to request the deletion of your personal information, just like any other user of the Site. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another user of his or her right to free speech, our compliance requirements resulting from a legal obligation or any processing that may be required to protect against illegal activities. Furthermore, residents of California are also subject to the following other privacy rights:

We will not discriminate against if you exercise your privacy rights.
You may object to the processing of your personal data You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the data.
You can designate an authorized agent to make a request under the CCPA on your behalf.
If you are a California resident and would like to make such a request to exercise any of these rights, please submit your request in writing to us using the contact information provided in Section (11).