Privacy policy

This English translation is provided for convenience. Only the German version is legally binding.

1. General

The protection of your personal data is important to us. We process your data in accordance with the applicable data protection provisions, in particular the European General Data Protection Regulation (GDPR) and the relevant national regulations.

“Processing” covers any operation in connection with personal data, such as collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, transmission, dissemination, restriction, erasure or destruction.

“Personal data” means any information relating to an identified or identifiable natural person.

2. Controller and data protection officer

Controller:
Code Piraten GmbH
Am Ruhmbach 44, 45149 Essen
Email: kontakt@codepiraten.com

External data protection officer:
Jens Reininghaus
c/o ETL Rechtsanwälte GmbH Rechtsanwaltsgesellschaft
Eiler Straße 3B, 51107 Köln
Email: info@dsb-r.de

3. Processing of your data

a) When you visit the website

When you access our website, the following data is automatically stored in server log files:

  • Date and time of access
  • Browser type and version
  • Operating system used
  • Previously visited page (referrer URL)
  • Amount of data transferred and access status
  • IP address and requesting provider

This data is processed to enable use of the website, for statistical purposes, to improve our services and to defend against unlawful cyber attacks. Legal basis: Art. 6(1)(b) and (f) GDPR.

b) When you use our services

Personal data is only processed if this is permitted by law or you have given your consent. Processing is carried out for the performance of a contract in accordance with Art. 6(1)(b) GDPR.

In addition, data is processed to assert legal claims (Art. 6(1)(f) GDPR), to comply with statutory retention obligations (Art. 6(1)(c) GDPR) and, where applicable, transferred to carefully selected service providers (Art. 28 GDPR).

For the data that organisations process in the persoo application about their staff and applicants, the respective organisation is the controller; Code Piraten GmbH is the processor on the basis of a data processing agreement.

4. Use of cookies

This website does not set any cookies and does not embed any analytics or tracking services. Fonts are loaded from our own server.

5. Storage and erasure periods

Personal data is routinely erased or blocked as soon as the purpose of the processing no longer applies, unless statutory retention obligations exist (Art. 6(1)(c) GDPR).

6. Your rights as a data subject

You have the following rights at any time:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure / “right to be forgotten” (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Protection against decisions based solely on automated processing (Art. 22 GDPR)

Please send requests to the contact details given in section 2.

7. Right to object

You may object to the processing of your data at any time on grounds relating to your particular situation, provided the processing is based on Art. 6(1)(e) or (f) GDPR. In the case of direct marketing, you may object at any time without giving reasons.

8. Right to withdraw consent

You may withdraw any consent you have given under data protection law at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

9. Right to lodge a complaint with supervisory authorities

If you believe that your data protection rights are being infringed, you can contact the competent supervisory authority of your federal state or the supervisory authority at our company's registered office.

10. Notification obligation

We notify all recipients of personal data of any rectification, erasure or restriction of processing in accordance with Art. 16, 17(1) and 18 GDPR, unless this proves impossible or involves disproportionate effort.

11. Necessity of providing data

Personal data is collected and processed for the performance of a contract or to carry out pre-contractual measures. Without the necessary data being provided, it is not possible to conclude a contract.

12. Automated decisions / profiling

No automated decision-making and no profiling within the meaning of Art. 22 GDPR takes place when you visit this website.

13. Data security

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved in line with technological developments.

14. Questions and comments

If you have any questions or comments about data protection, please contact us using the contact details given in section 2.