Privacy

As of December 2022

Table of contents

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

COREDINATE GmbH
Ringstraße 25
97215 Uffenheim
Germany
+49 9842 80491 0
datenschutz@coredinate.de
coredinate.de

II. Contact details of the data protection officer

The data protection officer of the controller is:

DataCo GmbH
Dachauer Straße 65
80335 Munich
Germany
+49 89 7400 45840
dataguard.de

III. General information on data processing

1. Scope of the processing of personal data

We process personal data of our users only insofar as this is necessary for the provision of a functional website and our content and services. The processing of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is required by legal regulations.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) p. 1 lit. a DSGVO serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) sentence 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) sentence 1 lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Article 6 (1) sentence 1 lit. d DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) sentence 1 lit. f DSGVO serves as the legal basis for the processing.

3. Data deletion and storage period

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

IV. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. The right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

If this is the case, you have a right of access to this data and to the following information:

• Processing purposes
• Categories of personal data
• Recipients or categories of recipients
• Planned storage duration or the criteria for determining this duration
• the existence of the rights of rectification, cancellation or restriction or opposition
• Right of complaint to the competent supervisory authority
• If applicable, origin of the data (if collected from a third party)
• If applicable, existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the effects to be expected
• If applicable, transfer of personal data to a third country or international organization
• Categories of personal data
• Recipients or categories of recipients
• Planned storage duration or the criteria for determining this duration
• the existence of the rights of rectification, cancellation or restriction or opposition
• Right of complaint to the competent supervisory authority
• If applicable, origin of the data (if collected from a third party)
• If applicable, existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the effects to be expected
• If applicable, transfer of personal data to a third country or international organization

2. Right of rectification (Art. 16 DSGVO)

If your personal data is incorrect or incomplete, you have the right to request that the personal data be corrected or supplemented without delay.

3. Right to restriction of processing (Art. 18 DSGVO)

If one of the following conditions is met, you have the right to request restriction of the processing of your personal data:

• You dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy of the personal data.
• In the context of unlawful processing, refuse to erase the personal data and instead request the restriction of the use of the personal data.
• We no longer need your personal data for the purposes of processing, but you need your personal data for the assertion, exercise or defense of your legal claims or
• after you have objected to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.

4. Right to erasure ("right to be forgotten") (Art. 17 GDPR)

If one of the following reasons applies, you have the right to request immediate deletion of your personal data:

• Your data is no longer necessary for the processing purposes for which it was originally collected.
• You withdraw your consent and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) DSGVO.
• Your personal data is processed unlawfully.
• The deletion is necessary for compliance with a legal obligation under Union law or the law of the member state to which we are subject.
• The personal data was collected in relation to information society services offered pursuant to Article 8 (1) DSGVO.

Please note that the above reasons do not apply insofar as the processing is necessary:

• To exercise the right to freedom of expression and information;
• To fulfill a legal obligation or to perform a task that is in the public interest and to which we are subject.
• For reasons of public interest in the area of public health.
• For archival purposes in the public interest, scientific or historical research purposes, or statistical purposes.
• For the assertion, exercise or defense of legal claims.

5. Right to restrict processing (Art. 18 DSGVO)

You have the right to receive your personal data in a structured, common and machine-readable format or to request the transfer to another controller.

6. Right to object to certain data processing (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 (1) sentence 1 lit. e or f DSGVO. This also applies to profiling based on these provisions.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

7. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR. A list of the supervisory authorities with local jurisdiction in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

V. Provision of the website and creation of the log files

1. Right to object to certain data processing (Art. 21 GDPR)

Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

• Information about the browser type and version used
• The operating system of the user
• The Internet service provider of the user
• The partially anonymized IP address of the user
  
• Date and time of access
• Websites from which the user's system accesses our website
• Web pages that are called up by the user's system via our website

This data is stored in the log files in Hubspot. This data is not stored together with other personal data of the user.

2. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f DSGVO.

3. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f DSGVO.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

5. Possibility of opposition

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. The user can object to this. Whether the objection is successful is to be determined in the context of a balancing of interests.

VI. Use of cookies

1. Description and scope of data processing

When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your terminal device. When you call up our website and at any time later, you have the choice of whether you generally permit the setting of cookies or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the entity that sets the cookie. 

We use cookies on our website that are not technically necessary. Technically unnecessary cookies are text files that are not solely used for the functionality of the website, but also collect other data.

You can find more information about our cookies in our Cookie Policy.   

2. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

• Adoption of language settings
• Remember search terms

The use of technically unnecessary cookies is for the purpose of improving the quality of our website, its content and thus our reach and profitability. By setting these cookies, we learn how the website is used and can thus constantly optimize our offer. In particular, these cookies serve us for the following purposes:

• Measurement of the number of visitors
• Segment website users by factors such as demographics and geography to structure target audiences
• Measurement and analysis of link clicks to improve our website content
• Collection of data on visitor behavior on websites in order to be able to present more relevant advertising or limit the number of displays of the same advertising.

3. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 p. 1 lit. f DSGVO.
Insofar as cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. The basis for the storage and access to information in this case is § 25 para. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a), Art. 7 DSGVO. You can revoke your consent at any time with effect for the future or subsequently grant it again by configuring your settings for cookies accordingly. Alternatively, you can prevent the storage of cookies by making appropriate settings in your browser software. Please note that the browser settings you make only affect the browser you are using. If personal data is processed following the storage of and access to the information on your terminal equipment, the provisions of the DSGVO are relevant. Information on this can be found in the following sections of this privacy policy.

VII. Newsletter

1. Description and scope of data processing

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us.

• E-mail address
• Name
• First name
• Phone / mobile number
• Address
• IP address of the calling computer
• Date and time of registration
• Salutation, company name, country, position
  

No data is passed on to third parties in connection with the data processing for sending newsletters. The data is used by order processors exclusively for sending the newsletter.

2. Purpose of data processing

The collection of the user's e-mail address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

3. Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 p. 1 lit. a DSGVO if the user has given his consent.  

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address will be stored as long as the subscription to the newsletter is active.

The other personal data collected during the registration process is usually deleted after a period of seven days.  

5. Possibility of revocation

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter.

This also enables the revocation of consent to the storage of personal data collected during the registration process.

VIII. E-mail contact

1. E-mail contact
2. Description and scope of data processing

On our website, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.

The data will be used exclusively for the processing of the conversation.

2. Purpose of data processing

In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

3. Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DSGVO. Our legitimate interest is to optimally answer your inquiry that you send by e-mail.

If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of opposition

If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

by e-mail and by Hubspot form embedded on the website

All personal data stored in the course of contacting us will be deleted in this case.

IX. Contact form

1. Description and scope of data processing

Our website contains a contact form that can be used for electronic contact. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

At the time of sending the message, the following data will be stored:

• E-mail address
• Name
• First name
• Address
• Phone / mobile number
• IP address of the calling computer
• Date and time of contact
• Salutation, company name, country

2. Purpose of data processing

The processing of personal data from the input mask of the contact form or via the provided e-mail address serves us solely to process the contact.

The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest is to optimally answer your inquiry that you send to us via contact form. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of opposition

If the user contacts us via the input mask in the contact form, he or she can object to the storage of his or her personal data at any time by e-mail and via the Hubspot form embedded on the website.

All personal data stored in the course of contacting us will be deleted in this case.

X. Hosting

The website is hosted on servers of a service provider contracted by us.

Our service provider is:

Hubspot

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. Our legitimate interest for processing this data is to present our website error-free and to optimize its functions.

The location of the website's server is geographically in the United States of America.

1. Geotargeting

We use the IP address and other information provided by the user (in particular zip code in the context of registration or ordering) for regional targeting (so-called "geotargeting").

Regional targeting is used, for example, to automatically show you regional offers or advertising that are often more relevant to users. The legal basis for the use of the IP address and, if applicable, other information provided by the user (in particular zip code) is Art. 6 (1) lit. f DSGVO, based on our interest in ensuring more precise targeting and thus providing offers and advertising with higher relevance for users.

In the process, part of the IP address and the additional information provided by the user (in particular zip code) are merely read out and not stored separately.

You can prevent geotargeting by, for example, using a VPN or proxy server that prevents precise localization. In addition, depending on the browser used, you can also deactivate location localization in the corresponding browser settings (insofar as the respective browser supports this).

We use geotargeting on our website for the following purposes:

• Customer approach
  

XII. Registration for the download area

1. Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:

• E-mail address
• Name
• First name
• Phone / mobile number
• IP address of the calling computer
• Date and time of registration
• Company name, country, title, position

As part of the registration process, the user's consent to the processing of this data is obtained.

2. Purpose of data processing

User registration is required for the provision of certain content and services on our website, as this content is intended to serve customer acquisition and be made available to interested parties.

3. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. a DSGVO if the user has given his consent.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

This is the case for the data collected during the registration process, if the registration on our website is cancelled or modified.

5. Possibility of revocation in case of consent

As a user, you have the option to cancel the registration at any time. You can change the data stored about you at any time and send us an e-mail via: datenschutz@coredinate.de.

XIII. Used plugins

We use plugins for various purposes. The plugins used are listed below:

1. Duration of storage

Your personal information will be retained for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.  

2. Transfer to third countries

When using plugins and services marked with third country transfer or USA, personal data may be transferred to servers in third countries outside the EU, such as the USA. The legal basis for this transfer is consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. The United States of America does not provide an adequate level of data protection based on a decision of the European Union. The essential risk of the transfer lies in the obligation of the plugin providers to make user data accessible to American authorities under certain circumstances.

We currently have an order processing agreement with standard contractual clauses with all providers in order to make the third country transfer as data protection-friendly and secure as possible. Adjustments to the ECJ ruling of 16.07.2020 (Schrems II, ref. C-311/18) including additional security measures are currently being sought by us.

3. Possibility of revocation

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

You can prevent the collection as well as the processing of your personal data by the respective providers by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. 

XIV. Application by e-mail

1. Scope of the processing of personal data

You can send us your application by e-mail. We will collect your e-mail address and the data you provide in the e-mail.

• Salutation
• First name
• Name
• Address
• Phone / mobile number
• E-mail address
• Resume
• Testimonials

2. Purpose of data processing

The processing of personal data from your application e-mail serves us solely to process your application.

3. Legal basis for data processing

The legal basis for the processing of your data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 p.1 lit. b Alt. 1 DSGVO and § 26 para. 1 p. 1 BDSG.

4. Duration of storage

After completion of the application process, the data will be stored for up to six months. Your data will be deleted after the six months at the latest. In the event of a legal obligation, the data will be stored within the scope of the applicable provisions.

5. Possibility of objection and removal

The applicant has the possibility to object to the processing of personal data at any time. In such a case, the application can no longer be considered.

To do so, please send us an informal e-mail to datenschutz@coredinate.de
All personal data stored in the course of electronic applications will be deleted in this case.

This privacy policy was created with the support of DataGuard. DataGuard.