The following informs you about the processing of personal data by us as the data controller, in particular relating to the use of our website. The processing of personal data (e.g. name, address, email address or telephone number of a data subject) is carried out in accordance with the statutory provisions, in particular in accordance with the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
This Data Privacy Policy uses terms based on the wording of the GDPR. The definitions for some of these terms can be found at the end of this policy.
1. Name and address of data controller
The data controller pursuant to Art. 4 (7) GDPR is:
CODIALIST GmbH
Friedrichstraße 236
10969 Berlin
Represented by:
Sven-René Friedel
Managing Director
Email: privacy@codialist.de
Tel.: +49 30 586939 100
2. How personal data is processed when you visit our website
2.1. When you use the website for information purposes only, we process only the personal data that your browser transmits to our server. When you attempt to view our website, we process the following data. This is technically necessary in order for us to display our website to you and to ensure its stability and security (legal basis: Art. 6 (1) sentence 1 lit. f GDPR):
- IP address
- Date and time of request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of request (specific page)
- Access status/HTTP status code
- Amount of data transferred
- Website from which the request originated
- Browser
- Operating system and interface
- Language and version of browser software
2.2. This data will be deleted after 14 days at the latest, provided that continued storage is not required for evidentiary purposes. In this case, the data is completely or partially excluded from deletion until final clarification of an incident has been achieved.
3. How personal data is processed when you contact us
If you contact us via email, post, contact form or any other method, the data you provide (e.g. your email address and, where applicable, your name and telephone number) will be processed by us in order to handle or answer your request (legal basis: Art. 6 (1) sentence 1 lit. a, f GDPR). Any data obtained in this context is deleted as soon as its storage is no longer necessary. If the data is subject to statutory retention requirements, we may alternatively restrict its processing.
4. How personal data is processed during the application process
4.1. If you provide us with personal data as part of the job application process, the data you provide will only be processed for the purpose of facilitating the application process and enabling us to assess your application (legal basis: Art. 6 (1) sentence 1 lit. a, f GDPR).
4.2. If a contractual relationship is established between you and us, the data transmitted will be processed for the purpose of entering into and executing the employment relationship in accordance with the statutory provisions. Otherwise, the application documents will be automatically deleted six months after the conclusion of the application process, provided that there are no other legitimate interests on our part (e.g. procedures under the AGG [General Equal Treatment Act]).
5. Processing of personal data of contractual partners
If you enter into a contractual relationship with us - e.g. as a customer or supplier - or if we are in the initiation phase of such a contractual relationship, we process the data you transmit sent to us, including the data of any contact persons named by you. This data is processed to facilitate the conclusion and execution of the contractual relationship. The legal basis for this is Art. 6 (1) sentence 1 lit. b GDPR; the legal basis for data that is provided by you but not required for this purpose is Art. 6 (1) sentence 1 lit. a GDPR.
6. Cookies
6.1. Further to the aforementioned data processing, cookies are stored on your computer when you visit our website. Cookies are small text files that are saved on your hard drive and assigned to the browser you are using. Among other things, they enable the frequency of use and number of website users to be determined and website usage behaviour to be analyzed. We also use cookies to make our website more user-friendly. Some cookies remain saved after your visit to the website has ended. If you then return to the website, we can retrieve these saved cookies.
6.2. You can configure your browser settings according to your preferences and (for example) refuse to accept third-party cookies or all cookies. Please note that if you choose to reject cookies, you may not be able to access all the functions of this website.
6.3. Insofar as cookies process personal data and you have consented to this processing, the processing is based on Art. 6 (1) sentence 1 lit. a. GDPR. Where personal data is processed by technically necessary cookies, Art. 6 (1) sentence 1 lit. f GDPR applies.
7. Analysis tools
7.1 We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.
7.2 This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place.
Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/.
7.3 Google Analytics IP anonymization is active. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
7.4 For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at:
https://support.google.com/analytics/answer/6004245?hl=en.
7.5 We use Google Signals. Whenever you visit our website, Google Analytics records, among other things, your location, the progression of your search and YouTube progression as well as demographic data (site visitor data). This data may be used for customized advertising with the assistance of Google Signal. If you have a Google account, your site visitor information will be linked to your Google account by Google Signal and used to send you customized promotional messages. The data is also used to compile anonymized statistics of our users’ online patterns.
7.6 The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here:
https://policies.google.com/privacy/frameworks?hl=en and https://business.safety.google/controllerterms/.
7.7 This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
For more information about Google Conversion Tracking, please review Google’s data protection policy at:
https://policies.google.com/privacy?hl=en
7.8 You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.
7.9 The company Google is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail
8. Recipients of personal data
Personal data is only be transferred to third parties in the instances described in this Data Privacy Policy or in instances expressly outlined elsewhere. In addition, we sometimes use external processors (Art. 28 GDPR) to render certain services on our behalf (e.g. hosting provider, email provider). However, these providers process personal data exclusively within the European Union.
9. Your rights
9.1. You have the following rights with regard to our use of your personal data:
- Right to information (Art. 15 GDPR),
- Right to correction and deletion (Art. 16, 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to object to processing (Art. 21 GDPR),
- Right to withdraw previously issued consent to processing,
- Right to data portability (Art. 19 GDPR).
9.2. If you believe that we have failed to observe your rights to the extent required under law, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us. Before you take this step, however, we would be grateful if you notify us of your criticism so that we can rectify the cause of the complaint ourselves.
9.3. Information about your right to object pursuant to Art. 21 GDPR
At any time, you have the right, for reasons arising from your particular situation, to object to processing of your personal data based on Art. 6 (1) sentence 1 lit. e GDPR (data processing in the public interest) and Art. 6 (1) sentence 1 lit. f GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision pursuant to Art. 4 (4) GDPR.
If you file an objection, we will cease to process your personal data, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
9.4. If your objection is directed against the processing of data for the purpose of direct advertising, we will cease to process the data immediately. In this case, it is not necessary to outline special reasons. This also applies in regard to profiling, insofar as it occurs in connection with direct advertising.
9.5. If you wish to make use of your right to object, you can send an email to the following address: privacy@codialist.de
10. Deletion of data by the data controller
10.1. We process and store your personal data only for the period of time necessary to achieve the purpose of storage or - insofar as we are legally obliged to do so - until the expiry of the statutory retention period.
10.2. If the purpose of storage is no longer applicable or the statutory retention period expires, the personal data is blocked or deleted in accordance with statutory regulations. It is not necessary for you to take any action in this regard.
11. Profiling, transmission of data to third countries
We do not undertake any automated decision-making, including profiling, within the meaning of the GDPR. Personal data is only transferred to third countries in the instances expressly mentioned in this declaration or elsewhere, or with the corresponding consent.
12. Definitions in the GDPR:
Within the meaning of the GDPR, this Data Privacy Policy and this website, the following terms are defined as follows:
- "Personal data" means any information relating to an identified or identifiable natural person ("data subject" in the following); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
- "'Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
- "Restriction of processing" means the marking of stored personal data with the aim of limiting their processing in the future;
- "Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
- "Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
- "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
- "Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
- "Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
- "Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.