Privacy Policy Statement

Privacy Policy Statement

Thank you for your interest in our website. The protection of your personal data is very important to us. Below you find important information about how we handle your data collected through your use of our website. The processing of your data takes place in accordance with the legal regulations on data protection. Insofar as it is linked to other websites, we have neither influence nor control over the linked contents and the data protection regulations there. We recommend that you check the privacy statements on the linked websites in order to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

Contact details of the data protection officer

Leopoldstr. 21
80802 München

Tel +49 89 2500 392 22


Our privacy policy should be easy and understandable for everyone. The privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

Access to and storage of information in terminal equipment

By using our website, access to information (e.g. IP address) or storage of information (e.g. cookies) in your terminal equipment may occur. This access or storage may involve further processing of personal data pursuant to the GDPR.

In cases where such access to information or such storage of information is strictly necessary for the technically error-free delivery of our services, this is done on the basis of § 25 para. 1 s. 1, para. 2 no. 2 TTDSG.

In cases where such a process serves other purposes (e.g. the needs-based design of our website), this will only be carried out on the basis of § 25 para. 1 TTDSG with your consent pursuant to Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future.

For more information on the processing of your personal data and the relevant legal basis in this context, please refer to the following sections on the specific processing activities on our website.

Data processing by visiting our website


When you visit our websites, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

  • Visited domain
    • Date and time of the request
    • Page from which the file was requested
    • Access status (file transfer, file not found, etc.)
    • Web browser used and operating system used
    • IP address of the requesting computer
    • Transmitted amount of data

We collect the data listed in order to ensure a smooth connection of the website and to facilitate a comfortable use of our website by the users. In addition, the log file serves the evaluation of system security and stability as well as administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to ward off attacks on our web server, this data may be temporarily stored by us. A conclusion to individual persons is not possible on the basis of this data. After seven days at the latest, the data is anonymised by shortening the IP address at the domain level, so that it is no longer possible to relate to the individual user. There is no evaluation of this data except for statistical purposes in anonymous form. A merge of this data with data from other data sources will not be done.

Contact form and contact e-mail

If you send us via contact form or e-mail inquiries, your information from the inquiry form or your e-mail, including the contact details you provided there for the purpose of processing the request and in case of follow-up questions are stored with us. We will never share this information without your consent. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR and Art. 6 para. 1 lit. b GDPR, if your request is for the conclusion of a contract. Your data will be deleted after final processing of your request, provided that no legal storage requirements are in conflict.


You have the possibility to register for certain services provided on our website and to create a user profile. As part of the registration and setup, we collect and use the following personal data:

  • First name, last name, salutation
    • Postal address
    • E-mail address of the user
    • Date and time of registration

In addition, voluntary information may be provided (eg telephone number, etc.). Compulsory information, which is made for the purpose of the registration, are indicated in the input mask with an asterisk indication as obligatory field. Your user account gives you the opportunity to use other parts of our website and to log in for the offers you have purchased. Legal basis of the data processing is with consent Art. 6 Abs. 1 lit. a GDPR or Art. 6 para. 1 lit. b GDPR, if processing is required to provide the requested services. Your data will be deleted as soon as the user account on our website is deleted and there are no statutory storage requirements. A change and / or deletion of your user account, including the data you have provided, can usually be done directly in your user account after logging in or by sending a message to the person named in the introduction.


If you would like to receive the newsletter offered on the website with regular information about our offers and products, we need your e-mail address as a mandatory entry. For sending the newsletter, we use the so-called double-opt-in procedure. This means that we will only send you our newsletter by e-mail if you have expressly confirmed to us that you agree to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive newsletters in the future. With the confirmation, you give us your consent in accordance with Art. 6 para. 1 lit. a GDPR, that we may use your personal data for the purpose of the desired newsletter dispatch.
When registering for the newsletter, we store, in addition to the e-mail address required for the shipment, the IP address you used to subscribe to the newsletter and the date and time of registration and confirmation in order to prevent possible misuse to understand later.

You can unsubscribe from the newsletter at any time via the link inserted in each newsletter or an e-mail to the person named above. After cancellation, your e-mail address will be deleted immediately from our newsletter distribution, as far as you have not expressly consented to a continued use of the collected data or the continued processing is otherwise permitted by law.


Our website uses cookies that are stored by the browser on your device and that contain certain settings for the use of the website (eg during the current session).

Processing of cookie data based on consent: Before we process or let processing data in the context of the use of cookies, we ask the users for a conset, that is revocable at any time. With the confirmation, you give us your consent in accordance with Art. 6 para. 1 lit. a GDPR, that we may use your personal data. Before consent is given, cookies may be used that are necessary for the operation of our online offer. The us is based on our interest and the interest of the user in the expexted functionality of our online offer (in accordance with Art. 6 para. 1 lit. f GDPR).

Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after the browser is closed. Other cookies remain stored on your device until you delete them or the memory expires. These cookies allow us to recognize your browser the next time you visit. In some cases, the cookies are used to simplify website processes by storing settings (eg the provision of already selected options).

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, as well as activate the automatic deletion of cookies when closing the browser. The cookie settings can be managed under the following links for the respective browser.


Internet Explorer :




You can also individually manage the cookies of many companies and functions that are used for advertising. Use the appropriate user tools, available at  or  .

Most browsers also offer a so-called “Do-Not-Track feature” that lets you specify that you do not want to be “tracked” by websites. With this feature enabled, your browser will tell ad networks, websites, and applications that you do not want to be tracked for behavior-based advertising and the like. Information and instructions on how to edit this feature, depending on the provider of your browser, at the following links:

Google Chrome:

Mozilla Firefox:

Internet Explorer:



In addition, you can prevent the loading of so-called scripts by default. NoScript allows you to run JavaScripts, Java and other plug-ins only on the trusted domains of your choice. For information and instructions on how to use this feature, contact your browser provider (eg for Mozilla Firefox:  ).

Please note that disabling cookies may limit the functionality of this website.

Google Analytics

Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies” and web beacons.

Google will use this information on behalf of the operator of this website to evaluate your use of the website and to create reports on website activity. Google will also use this information to provide the website operator with further services related to the use of the website and the internet. The IP address sent by your browser in the context of Google Analytics is not combined with other data from Google. Processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the legal basis of your given consent.

We use Google Analytics only with activated IP anonymisation. This means that your IP address will only be further processed by Google in abbreviated form.

We have concluded a Data Processing Agreement with the service provider in which we oblige him to protect the data of our customers and not to pass them on to third parties.

Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, we have concluded standard contractual clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.

The terms of use of Google Analytics and information on data protection can be accessed via the following links:

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. User and event-level data associated with cookies, user IDs (e.g., User ID), and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA) will be deleted no later than 14 months after collection.

You can prevent cookies from being saved by adjusting the settings of your browser software accordingly. Please note, however, that if you do so you may not be able to use all the functions of this website without restriction. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and processing this data by Google by downloading and installing the browser plugin available at

Google Fonts

We use “Google Fonts” on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: “Google”). Google Fonts enables us to use external fonts. For this purpose, the required Google Fonts are loaded into your browser cache by our web server when you access our website. This is necessary so that your browser can display a visually improved representation of our texts. If your browser does not support this function, a standard font will be used by your computer for display.

The fonts are hosted by us and therefore are not loaded by an external provider. This requires the processing of your IP address.

We use Google Fonts for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The legal basis for the data processing is our legitimate interest (Art. 6 para. 1 lit. f GDPR).

Facebook Pixel

We use “Facebook Pixel” on our website, a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Irland (hereinafter referred to as: “Facebook”).

Provided you have given us your consent in accordance with Art. 6 (1) lit. a GDPR, we use Facebook Pixel for marketing and optimisation purposes, in particular to place relevant and interesting advertisements on Facebook and thus improve our offer, make it more interesting for you as a user and avoid annoying advertisements.

Facebook Pixel enables Facebook to display our ads on Facebook, so-called “Facebook Ads” only to those Facebook users who were visitors to our website, in particular those who showed interest in our online offer. In this case, Facebook Pixel also enables us to check whether a user was redirected to our website after clicking on our Facebook Ads. Among other things, Facebook Pixel uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device. If you are logged into Facebook with your user account, the visit to our online offer will be noted in your user account. The data collected about you is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, this data can be linked by Facebook with your user account there. If you have a user account on Facebook and are registered, Facebook can assign the visit to your user account.

Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, we have concluded standard contractual clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.

Further information on data protection from the third party provider can be found on the following Facebook website:

Information on Facebook Pixel can be found on the following Facebook website:

You can make the relevant settings for which types of advertisements are displayed to you within Facebook on the following Facebook website:

We would like to point out that this setting is deleted when you delete your cookies. In addition, you can deactivate cookies that are used to measure reach and advertising purposes via the following websites:

Please note that this setting is also deleted when you delete your cookies.

Data transfer and recipient

A transfer of your personal data to third parties does not take place, except
– if we have explicitly indicated this in the description of the respective data processing.
– if your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR
– disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
– in the event that the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR is a legal obligation and
– insofar as this is required by Art. 6 para. 1 p. 1 lit. b GDPR is required for the settlement of contractual relationships with you.

We also use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. With which we if necessary order processing contracts gem. Art. 28 GDPR. These are service providers for web hosting, the sending of e-mails as well as maintenance and care of our IT systems etc. The service providers will not pass on this data to third parties.

Duration of storage of personal data

The duration of the storage of personal data is determined by the relevant statutory retention periods (eg from commercial law and tax law). After expiry of the respective deadline, the corresponding data will be routinely deleted. If data is required to fulfill the contract or to initiate an agreement or if we have a legitimate interest in the re-
storage, the data will be deleted if you are no longer required for these purposes or if you make use of your right of revocation or objection.

Your rights

Below you will find information on which data subject rights the applicable data protection law grants you to the person responsible with regard to the processing of your personal data:
The right to request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of a The right to complain, the source of their data, if not collected from us, and the existence of automated decision-making, including profiling and, where appropriate, meaningful information about their details.

The right, in accordance with Art. 16 GDPR, to demand the correction of incorrect or complete personal data stored by us without delay.

The right to demand the deletion of your personal data stored with us, according to Art. 17 GDPR, as far as the processing for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of the public interest or for the assertion, exercise or Defense of legal claims is required.

The right to demand, in accordance with Art. 18 GDPR, the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you Asserting, exercising or defending legal claims or you have lodged an objection against the processing pursuant to Art. 21 GDPR.
The right to receive, in accordance with Art. 20 GDPR, your personal data provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible.

The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our above named seat or, if applicable, your usual place of residence or work place.

Right to revoke granted consent pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent once given in the processing of data at any time with effect for the future. In the case of withdrawal, we will delete the data concerned immediately, as far as further processing can not be based on a legal basis for consentless processing. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to object

If your personal data are processed by us on the basis of legitimate interests in accordance with Article 6 (1) sentence 1 GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR as far as for reasons that arise from your particular situation. Insofar as the opposition is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of specifying a particular situation.

You can revoke your consent to the collection, storage and use of your personal data in writing or electronically with effect for the future at the following address at any time. Likewise, you may object to the use of your inventory data for advertising and marketing measures at any time in writing or electronically at the following address.

CM-Equity AG

Kaufingerstraße 20, 80331 München
Tel.: +49 (0) 89 18904740
Fax: +49 (0) 89 189047499

Changes to our privacy policy statement

We reserve the right, if necessary, to adapt or update this privacy policy in compliance with the applicable data protection regulations. In this way we can adapt them to the current legal requirements and take into account changes in our services, eg., when introducing new services. For your visit the latest version applies.

Status of this Privacy Policy Statement: 04.01.2023