Information about the collection and processing of your personal data: Care and transparency is the basis for a trusting cooperation with our customers. Therefore we inform you about how we process your data and how you can exercise your rights, which you are entitled to according to the basic data protection regulation. Which personal data we process and for what purpose depends on the respective contractual relationship.

Responsible body:

catworkx GmbH
Schellerdamm 16
21079 Hamburg, Germany


You can reach our data protection officer at

catworkx GmbH
The Data Protection Officer
Schellerdamm 16
21079 Hamburg, Germany


Processing of personal data:

If you have an inquiry, have us prepare an offer or in the context of the implementation or the initiation of a contractual relationship, we process the personal data of you that you provide us with for this purpose. We also process your personal data for the purpose of carrying out direct advertising for our own similar goods or services. The legal basis for the processing of your personal data is Article 6 paragraph. 1 lit. a), b) and f) DSGVO.


If the processing of your personal data is based on a legitimate interest, our business purpose constitutes the legitimate interest:

  • Central customer data management of the catworkx group
  • Measures for building and plant safety
  • Consultation of and data exchange with credit agencies
  • to determine creditworthiness and default risks
  • Ensuring IT security and IT operation


If you have given us your voluntary consent to the collection, processing or transmission of certain personal data, then this consent forms the legal basis for the processing of this data:

In the following cases, we process your personal data on the basis of your consent:

  • Sending of an e-mail newsletter
  • personalized newsletter tracking
  • Market research (e.g. customer satisfaction surveys)
  • Marketing and Advertising-Building of customer profiles
  • Publication of a customer reference (name and picture)


Within this contractual relationship we will process your data in particular for the purpose of carrying out the following activities:

  • Order related contact
  • Order Management
  • ongoing customer support
  • Service
  • Exercise of warranty claims
  • Receivables Management
  • Contract Termination Management


Depending on the legal basis, the categories of personal data concerned are as follows:

First name, surname, address, communication data (telephone, e-mail address), date of birth, nationality, contract master data, in particular contract number, term, period of notice, type of contract, invoice data/turnover data, creditworthiness data, payment data/account information, account information, in particular registration and logins

We store your personal data as long as it is necessary to fulfil our legal and contractual obligations. If storage of the data is no longer necessary for the fulfilment of contractual or legal obligations, your data will be deleted, unless further processing is necessary for the following purposes:

  • Fulfilment of commercial and tax law retention obligations
  • Preservation of evidence within the framework of the legal statute of limitations. According to the statutes of limitations of the German Civil Code (BGB), these limitation periods can in some cases be up to 30 years, the regular limitation period is three years.


Passing on of personal data:

In order to fulfil our contractual and legal obligations, your personal data may be disclosed to various public or internal bodies, as well as external service providers.


Within the group of companies, data may be passed on to the following companies:

  • catworkx Holding GmbH
  • catworkx GmbH, Germany
  • catworkx GmbH, Austria
  • catworkx AG, Switzerland

Depending on the existing contractual relationship, data can also be passed on to the following recipients:

  • IT service providers (e.g. maintenance service providers, hosting service providers, hardware suppliers)
  • Service provider for file and data destruction
  • Printing services
  • Telecommunications
  • Payment service provider
  • Advice and consulting
  • Service provider for marketing or sales
  • Service provider for telephone support (call center)
  • Auditors


Countries outside the European Union (and the European Economic Area (“EEA”) treat the protection of personal data differently from countries within the European Union. For the processing of your data we also use service providers located in third countries outside the European Union. There is currently no EU Commission decision that these third countries generally offer an adequate level of protection.

We have therefore taken special measures to ensure that your data is processed in third countries as securely as within the European Union. We conclude standard data protection clauses provided by the Commission of the European Union with service providers in third countries. These clauses provide for appropriate safeguards for the protection of your data with service providers in third countries.

Our service providers in the USA are also certified according to the EU-US Privacy Shield Agreement.

If you wish to inspect the existing guarantees, you can contact us at


Your rights:

Every data subject has the right of access in accordance with Art. 15 DSGVO, the right of rectification in accordance with Art. 16 DSGVO, the right of deletion in accordance with Art. 17 DSGVO, the right to limit processing in accordance with Art. 18 DSGVO, the right of objection from Art. 21 DSGVO and the right to data transferability from Art. 20 DSGVO. The right of information and the right of deletion are subject to the restrictions of §§ 34 and 35 BDSG.

Right of objection:

You can object to the use of your data for advertising purposes at any time.

You have gem. Article 21(1) DSGVO has the right to object, at any time, for reasons arising from your specific situation, to the processing of personal data concerning you which is carried out pursuant to Article 6, paragraph 1, letter (f) DSGVO to lodge an appeal. In the event of your objection, we will no longer process your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data in order to carry out direct advertising, you have the right to withdraw your consent in accordance with the provisions of the law. Article 21(2) DSGVO has the right to object at any time to the processing of personal data concerning you for the purposes of such advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Revocation of consent:

You can revoke your consent to the processing of personal data at any time. Please note that the revocation is only valid for the future.

Right to information:

You can request information about whether we have stored personal data about you. If you so wish, we will inform you of the data concerned, the purposes for which the data is processed, to whom the data is disclosed, how long the data is stored and what other rights you have in relation to the data.

Other rights:

In addition, you have the right to have incorrect data corrected or your data deleted. If there is no reason for further storage, we will delete your data, otherwise we will restrict processing. You may also request that we provide any personal information you have provided to us in a structured, common, machine-readable format either to you or to a person or company of your choice.

In addition, there is a right of appeal to the competent data protection supervisory authority (Art. 77 DSGVO in conjunction with § 19 BDSG).


To exercise your rights and if you have any further questions about data protection, you can contact the person responsible or the data protection officer at the contact details provided.