Privacy Statement

1. Controller and Contact

The controller for the processing by cdm-IT described in this statement is:

("cdm-IT", "we", "us")

2. Scope

This privacy statement applies to the software extension cdmTicker (the "App") for Microsoft Dynamics 365 Business Central ("Business Central"). cdmTicker displays a scrolling ticker with key figures (KPIs) in the Business Central role center, such as open entries, revenue, open orders, shipments and tasks, calculated live from the tenant's Business Central data at display time.

Visits to our website cdm-it.de are governed by the general website privacy policy.

3. Roles: Who Is Responsible for Which Data

3.1 cdmTicker runs entirely within the Customer's Business Central environment. The Customer is the controller within the meaning of Art. 4 No. 7 GDPR for all business data processed there. cdm-IT does not receive or process this data; a data processing agreement with cdm-IT is therefore not required.

3.2 cdm-IT itself is the controller for technical operational telemetry (section 5), support communication (section 6) and any lead data from Microsoft AppSource (section 7).

3.3 Microsoft operates the Business Central platform and the marketplace under its own responsibility (Microsoft Privacy Statement, Microsoft Product Terms).

4. Processing within Business Central

4.1 To calculate the key figures, cdmTicker reads from standard Business Central tables, in particular customer ledger entries, detailed customer ledger entries, sales headers and sales lines, sales shipments, purchase headers, user tasks and the standard cue tables (Activities Cue, Warehouse WMS Cue). Only totals and counts are displayed, never individual records.

4.2 The App stores configuration only, in three of its own tables in the Customer's tenant: "CDM Ticker Setup", "CDM Ticker Setup Line" and "CDM Ticker Role Center" (selected KPIs, colors, scroll speed, assigned role centers). Data classification: CustomerContent. Beyond the Business Central system fields (created/modified by) they contain no personal data.

4.3 The display runs as a control add-in in the user's browser. Scripts and stylesheets are included in the App and loaded from Business Central; no external scripts, fonts or resources are loaded.

4.4 cdmTicker calls no external services: no HTTP client, no cdm-IT backend, no interface to third parties. Business data never leaves the tenant.

5. Technical Operational Telemetry (Azure Application Insights)

5.1 The App contains a connection string for Azure Application Insights. Through it, the Business Central platform sends technical telemetry to an Application Insights resource operated by cdm-IT in the Azure region West Europe (EU). This is the only data flow to cdm-IT.

5.2 The telemetry covers lifecycle events (installation, update, uninstallation), errors and runtime information. It contains technical identifiers such as the tenant ID (Azure AD tenant ID), environment name, App version, object IDs and timestamps; Microsoft documents these signals under "Telemetry overview" for Business Central.

5.3 cdmTicker sends no telemetry events of its own. Business data, KPI values or table contents are never part of the telemetry.

5.4 Purpose: error analysis, stability, support cases. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Retention: 90 days, followed by automatic deletion.

6. Support Communication

6.1 When you contact us for support (support@cdm-it.de, see the help page), we process your name, email address, company, details of your Business Central environment and the description of your request in order to handle it.

6.2 Legal basis: Art. 6(1)(b) GDPR. Correspondence is deleted once the statutory retention periods have expired.

7. Acquisition via Microsoft AppSource

cdmTicker is provided free of charge via Microsoft AppSource (no license check, no payment data). Processing related to the acquisition is carried out by Microsoft under its own terms. If the Customer selects "Contact" in the marketplace, cdm-IT receives lead data (name, company, email) via the Partner Center, which we use to respond to the inquiry (Art. 6(1)(f) GDPR).

8. No Further Recipients, No Third-Country Transfers by cdm-IT

cdm-IT does not disclose the data described in sections 5 to 7 to third parties unless legally required to do so. cdmTicker contains no AI features and integrates no AI services. Our telemetry and support systems are operated within the European Union; cdm-IT does not transfer data to third countries.

9. Your Rights

9.1 For data in the Business Central environment (section 4), please contact the respective Customer, usually your employer; cdm-IT has no access to this data.

9.2 For data processed by cdm-IT (sections 5 to 7) you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and objection to processing based on legitimate interest (Art. 21). To exercise these rights, contact support@cdm-it.de.

9.3 You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for cdm-IT is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Düsseldorf.

10. Changes to This Privacy Statement

We update this statement when the data processing of cdmTicker or legal requirements change. The current version is always available at cdm-it.de/en/appsource/cdm-ticker/privacy.

cdm IT & Consulting Services GmbH — Version 1.0, last updated 9 November 2026