Privacy Policy
§ 1 General
Your personal data (e.g. title, name, address, email address, phone number) will be processed in compliance with the regulations of the German data privacy law and the European Union data privacy law. The following regulations inform you about the purpose of the data processing, recipients, legal basis, storage period, as well as about your rights and about the responsible persons for the data processing. This privacy policy only applies to our websites. If you enter a new website via our website, please inform yourself about the terms of privacy policy on this external website. Your data will neither be sold, let nor traded. Our websites are hosted on our own servers in a security data center in Frankfurt, Germany. To optimize our service continuously we collect, store and process incoming data. This data will be analyzed anonymously for internal evaluation such as statistical purposes. We do not use personal data. It is still possible to contact us via the declared address on our imprint.
§ 2 Contact
(1) Purpose of data processing
Your personal data, which you provide us via e-mail, contact form etc., will be processed to answer and manage your requests. You are not obligated to provide us your personal data. But without the information about your e-mail address we won’t be able to answer you via email.
(2) Legal basis
a) If you have agreed explicitly upon the processing of your data, then Art. 6 Par. 1a) of the GDPR is the legal basis of this processing.
b) If we process your data for pre-contractual actions, then Art. 6 Par. 1b) of the GDPR is the legal basis.
c) In all other cases (especially by using a contact form) Art. 6 Par. 1f) GDPR builds the legal basis.
RIGHT OF OBJECTION: You have the right to object the processing of your data, which is based on Art. 6 Par. 1 f) GDPR and is not conducive to direct advertising because of reasons, which emerge based on your individual situation. In case of direct advertising, you can object the processing of your data anytime without giving reasons.
(3) Substantial interest
Our legitimate interest in data processing is based on the interest to communicate with you as fast as possible and to answer your request in the most economic way.
You can preserve your interest in data protection by economical data transfer (e.g. usage of pseudonyms).
(4) Recipients or categories of recipients
Support employees; sales employees
(5) Storage period
Your data will be deleted, if we can assess that your request or issue was solved conclusively.
In the event of a contract conclusion, the required data, in accord with commercial and tax law, will be stored by us within the legally defined time period, thus regularly ten years (cf. § 257 HGB, § 147 AO).
(6) Cancellation right
You have the right to revoke your agreement anytime.
§ 3 Web analysis via Google Analytics
This website uses Google Analytics, a web analysis tool of Google Inc. (“Google”). Google Analytics uses “Cookies”, small text files, which are stored on your computer and allow the analysis of your individual usage of websites. Those generated information about your usage of this website are usually transferred to a server of Google in the United States and are saved there as well. In case of the activation of the IP-anonymization on this website, your IP-address will be shortened by Google within the member states of the European Union or other contract states of this convention of the European Economic Area. The full IP-address will be transferred to a Google server only in exceptional cases and shortened later on. On behalf of the operator of this website, Google will use this information to analyze your usage of the website to create reports about the website activities and to provide further services, related to the website and internet usage. This transferred IP-address of your browser by Google Analytics will not be merged with other data of Google. Although you can adjust your browser software to prevent the installation of cookies, we would point out that if you do so, you might not be able to make full use of all the functions on this website. You can prevent the processing of your data via Cookies (incl. your IP-address) by downloading and installing the following browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en Our website uses Google Analytics with the extension “anonymizeIP()”, so your IP-Adressen will only be processed shortened to exclude a direct personal connection to your data.
§ 4 Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution operated by Google LLC. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) that allows marketed website tags to be managed using an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not register personal data. The tool causes other tags to be activated which may, for their part, register data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated on domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager.
§5 Use of Facebook-Pixel / Custom Audiences
This website uses the remarketing function “Custom Audiences” of Facebook Inc,. 1601 Willow Road, Menlo Park, CA, USA “(“Facebook”). This function is used to present interest-based advertisements to visitors to this website when they visit the social network Facebook. For this purpose, Facebook’s remarketing tag has been implemented on this website. This tag establishes a direct connection to the Facebook servers when you visit the website. This information is transmitted to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account. We are not using advanced matching (creating Custom Audiences from Customer Lists). For more information about Facebook’s collection and use of the data and your rights and choices about protecting your privacy, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy/. You can deactivate the remarketing function “Custom Audiences” at https://www.facebook.com/settings. You must be logged into Facebook to do this.
§6 LinkedIn Conversion Tracking and Insight Tag
The LinkedIn Insight Tag is a piece of lightweight JavaScript code that we have added to our websites to enable in-depth campaign reporting and to help us unlock valuable insights about our website visitors. We use the LinkedIn Insight Tag to track conversions, retarget website visitors, and unlock additional insights about members interacting with our LinkedIn adverts.
The LinkedIn Insight Tag enables the collection of metadata such as IP address information, timestamp, and events such as page views. All data is encrypted. The LinkedIn browser cookie is stored in a visitor’s browser until they delete the cookie or the cookie expires (there’s a rolling six-month expiration from the last time the visitor’s browser loaded the Insight Tag).
You can opt out of cookies from LinkedIn on your LinkedIn settings page and recommend you read their Cookie Policy for more information
§7 Hotjar
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
The LinkedIn Insight Tag enables the collection of metadata such as IP address information, timestamp, and events such as page views. All data is encrypted. The LinkedIn browser cookie is stored in a visitor’s browser until they delete the cookie or the cookie expires (there’s a rolling six-month expiration from the last time the visitor’s browser loaded the Insight Tag).
You can opt out of cookies from LinkedIn on your LinkedIn settings page and recommend you read their Cookie Policy for more information
§8 Google Ads and Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.
Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy: https://www.google.de/policies/privacy/.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
§9 Information about cookies
(1) Purpose of processing
We use technical necessary cookies on this website. These cookies are small text files, which will not be saved permanently within or by your internet browser and allow the functionality of the website. Other cookies are saved persistently and recognize your browser within the next visit of the site to optimize the usability of the website.
(2) Legal basis
The legal basis for the processing is Art. 6 Par.1 f) GDPR.
(3) Substantial interest
Our legitimate interest in data processing is based on the interest to optimize the functionality and usability of our website. The user data, compiled by technical necessary cookies and the described persistent cookies, will not be used to create user profiles. Your interest in data protection is preserved.
(4) Storage period
The technical needed cookies usually get deleted by closing the browser. The cookies which are saved persistently have different life cycles of a few minutes to several years.
(5) RIGHT OF OBJECTION
If you do not want to allow the storage of those cookies, please deactivate the acceptance of this cookies in your internet browser. This might lead to functional limitation of our website. Cookies which are saved persistently can be deleted anytime via your browser.
§ 10 Newsletter
(1) Purpose of processing
By registration for our newsletter you agree that your e-mail address will be used for advertising purposes, that means that we inform you within the newsletter about our services. We can evaluate for statistical purposes e.g. how often the newsletter was opened and which of its links got clicked. It’s not identifiable for us which exact person clicked it. You have given the following consent separately or within the process of purchase order: Yes, I want to subscribe to the codario newsletter.
(2) Legal basis
The legal basis for the processing is Art. 6 Par. 1 a) GDPR.
(3) Recipients or categories of recipients
Newsletter vendor; sales employees
(4) Storage period
Your e-mail address will be saved for the desired duration of the newsletter sending.
(5) Right of objection
You can revoke your consent anytime with future effect. If you don’t want to receive the newsletter furthermore, you can cancel the subscription by clicking the unsubscription link.
§ 11 Integration of third party contents
Based on our legitimate interest, we integrate with services or contents of third party tools, such as videos or fonds on our blog, hereafter mentioned as „contents“. This assumes that the third party providers detect your IP-address, as they can not send the contents to your browser without the IP-address, which is required to display the contents. We make an effort to use only those kind of contents whose respective providers only use your IP-address to provide the contents.
Third party providers might use pixel-tags (invisible graphics, also known as „web beacons“) for statistical or marketing related purposes. The pseudonymous information might be saved within cookies (§ 4 Information about cookies) on your devices.
§ 12 Rights to the affected person
If your personal data get processed, you are an affected person within the meaning of GDPR and you can take advantage of the following rights:
1. Right to information and access
You can claim a confirmation if we process personal data, which are related to you. If such a process documentation exist, you can claim the following information:
(1)the purposes, for which the personal data are processed;
(2)the categories of personal data, which are processed;
(3) the recipients or categories of recipients, which received the information related to you or will receive in the future;
(4) the period of storage of your personal data or, if explicit details can’t be provided, the criteria for the storage period determination;
(5) the existence of the right of correction or deletion of your personal data, the existence of the right of restrictions of the processing by us or the right to object to this processing;
(6) the existence of the right to appeal at a supervisory authority;
(7) all available information of the source of the data, if the data was not collected directly with the collaboration of the affected person;
(8) the existence of an automated decision-making including profiling as per Art. 22 Par. 1 and 4 GDPR and – at least in those cases – significant information about the involved logic as well as the consequences and the pursued impact of this kind of processing for the affected person.
You have the right to receive the information if your personal data will be transferred to a third country or to an international organization. Within this context, you are allowed to claim to get informed about the appropriate guaranties as per Art. 46 GDPR in connection with the transfer.
2. Right to adjustment
You have the right of adjustment and/or completion towards us, if your processed personal data is incorrect or incomplete. We have to correct the data immediately.
3. Right to limitation of processing
Under the following conditions, you can claim the restriction of the processing of your personal data:
(1) if you deny the correctness of your personal data within a certain period, which allows us to determine the correctness of your personal data;
(2) if the processing is illegitimate and you deny the deletion of your personal data and claim a restriction of the usage of your personal data instead;
(3) if we do not need personal data anymore for the purpose of processing, though you need the data for the establishment, exercise or defence of legal claims, or
(4) if you filed an appeal as per Art. 21 Par. 1 GDPR and it has not been defined if the valid reasons, to which we are entitled, overweight your reasons.
If the processing of your personal data got restricted, the data – apart from its storage – can only be processed with your permission or for the establishment, exercise or defence of legal claims or for protection of the rights of another natural or legal person or for reasons of an important official interest of the union or of a member state.
If the restriction of the processing was processed in terms of the conditions mentioned above, you will be informed by us before the restriction will be cancelled.
4. Right to erase
a) Obligation of deletion
You can claim that we delete your personal data immediately, and we are obligated to delete them without delay, if one of the following reasons applies:
(1) Your personal data are not required anymore for the purposes they have been processed for or got processed otherwise.
(2) You revoke your acceptance, on which the processing was based as per Art. 6 Par. 1 lit. a or Art. 9 Par. 2 lit. a GDPR, and a ulterior legal basis for further processing is missing.
(3) You appeal as per Art. 21 Par. 1 GDPR against the processing and no legitimate reasons for the processing of the data exist, or you appeal as per Art. 21 Par. 2 GDPR against the processing.
(4) Your personal data was processed illegitimate.
(5) The deletion of your personal data is essential for the compliance of the legal obligation as per European Union law or the law of member states, to which we are subject to.
(6) Your personal data were collected according to offered services of the information society as per Art. 8 Par. 1 GDPR.
b) Information to third parties
If we have published your personal data and if we are obligated to delete them as per Art. 17 Par. 1 GDPR, we will take appropriate measures, also of technical kind, in consideration of the available technologies and implementation costs, to inform the responsible persons for data processing, which process the personal data, that you, as person concerned, claimed the deletion of all links that lead to your personal data or of copies or replications of this personal data.
c) Exceptions
The right of deletion shall not exist, as long as the processing is required
(1) for exercising the right of freedom to speech and to information;
(2) for compliance of a legal obligation, which requires the processing in accordance with the right of the Union or of the member states, to which we are subject to, or if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
(3) for reasons of public interest on health related policies as per Art. 9 Par. 2 lit. h and i as well as Art. 9 Par. 3 GDPR;
(4) for the public interest archiving purposes, scientific or historical researches or for statistical researches as per Art. 89 Par. 1 GDPR, as long as in section a) the stated right makes it prospectively impossible to achieve the purposes of the processing or impair it seriously, or
(5) for the establishment, exercise or defence of legal claims.
5. Right to information
If you have claimed your right to correct, delete or restrict the processing towards us, we are obligated to inform all recipients of your personal data about the legitimacy or deletion of the data or the restriction of the processing, unless it got proved that it is impossible or cause disproportionate effort. You have the right to get informed about these recipients.
6. Right to data portability
You have the right to obtain your personal data, which you provided us, in a structured, common and machine readable format. Furthermore, you have the right to transmit these data to a person responsible without restriction, as long as
(1) the processing is based on a consent as per Art. 6 Par. 1 lit. a GDPR or Art. 9 Par. 2 lit. a GDPR or on a contract as per Art. 6 Par. 1 lit. b GDPR and
(2) the processing is performed with assistance of automated methods.
In the exercise of this right you also have the right to obtain that your personal data will be transmitted by us to another person responsible, as far as technically feasible. Freedom and rights of other individuals shall not be affected.
The right to data portability does not apply to a processing of personal data that are essential for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to object
You have the right to object the processing of your personal data anytime, on compelling legitimate grounds relating to your particular situation, that is based on Art. 6 Par. 1 lit. e or f GDPR; that also applies to a profiling which is based on this provision. We do not process your personal data anymore, unless we can provide compelling legitimate grounds that outweigh your interests, rights and freedom, or the processing serves the assertion, exertion or defence of legal claims. If your personal data got processed to conduct direct advertising, you have the right to object the processing of your personal data for the purpose of direct advertising, same applies to profiling as far as it is associated with that kind of direct advertising. If you object the processing for the purpose of direct advertising your personal data won’t be processed anymore. You have the possibility, in connection with the usage of services of the information society – notwithstanding Directive 2002/58/EG – to exercise your objection with automated methods, with whom technical specification are used.
6. Right to data portability
You have the right to obtain your personal data, which you provided us, in a structured, common and machine readable format. Furthermore, you have the right to transmit these data to a person responsible without restriction, as long as
(1) the processing is based on a consent as per Art. 6 Par. 1 lit. a GDPR or Art. 9 Par. 2 lit. a GDPR or on a contract as per Art. 6 Par. 1 lit. b GDPR and
(2) the processing is performed with assistance of automated methods.
In the exercise of this right you also have the right to obtain that your personal data will be transmitted by us to another person responsible, as far as technically feasible. Freedom and rights of other individuals shall not be affected.
The right to data portability does not apply to a processing of personal data that are essential for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
8. Right to object the data protection law declaration of consent
You have the right to object your declaration of consent of the data protection law anytime. By the revocation of the declaration of consent the legality of the data processing within the period between consent and objection will not be affected.
9. Automated decision in individual case, including profiling
You have the right not to be subject of a decision which is exclusively based on automated processing – including profiling- that produces legal effects towards you or affects you similarly. This does not apply, if the decision
(1)for the conclusion or the performance of a contract between you and us is required,
(2)is permitted based on regulations of the Union or member states, to which we are subject to, and these regulations contain appropriate measures for the protection of your rights and freedom as well as your legitimate interest or
(3) was made with your express consent.
Though these decisions shall not base on special categories of personal data as per Art. 9 Par. 1 GDPR, unless Art. 9 Par. 2 lit. a or g do not apply and appropriate measures for the protection of your rights and freedom as well as your legitimate interest were not made.
With respect to the cases mentioned in (1) and (3), we are taking appropriate measures to protect the rights and freedom and your legitimate interest.
10. Right to appeal at a supervisory authority
Notwithstanding ulterior administrative or judicial action, you have the right to appeal at a supervisory authority, especially within the member state of your abode, your workplace or of the place of the putative breach, if you consider that the processing of your personal conflicts with the GDPR. The supervisory authority, towards whom the complaint was filed, informs the complainant about the status and the results of the appeal, including the possibility to apply to the courts as per Art. 78 GDPR.
Responsible for the data processing:
Codario GmbH
Herdweg 60
64285 Darmstadt
Contact of our privacy person responsible:
Thomas Sauer
thomas.sauer@codario.io