Privacy Policy
As of October 2020
Introduction and General Information
Thank you very much for your interest in our website. The protection of your personal data is very important to us. Below you will find information about how we handle the data collected through your use of our website. Your data is processed in accordance with applicable data protection laws.
Data controller as defined by data protection law
codebites GbR Kretz und Schlimbach
Disternicher Weg 1a
52391 Vettweiß
info@codebites.de
Definitions
Our Privacy Policy is intended to be simple and easy to understand for everyone. This Privacy Policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Article 4 of the GDPR.
Data Processing When You Visit Our Website
When you visit our websites, it is technically necessary for data to be transmitted from your web browser to our web server. The following data is recorded during an active connection for communication between your web browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access Status
- Web browser and operating system used
- (Full) IP address of the requesting computer
- Amount of Data Transferred
We collect the listed data to ensure that the website connects smoothly and to enable users to use our website conveniently. In addition, the log file is used to evaluate system security and stability, as well as for administrative purposes. The legal basis for the temporary storage of the data and log files is Article 6(1)(f) of the GDPR.
For technical security reasons, particularly to defend against attempted attacks on our web server, we store this data temporarily. We cannot use this data to identify individual persons. After 7 days at the latest, the data is anonymized by truncating the IP address to the domain level, so that it is no longer possible to link it to an individual user.
In addition, the data may be processed in anonymized form for statistical purposes, if applicable. This data is never stored together with other personal data belonging to the user, compared with other databases, or disclosed to third parties.
Contact Form and Contacting Us by Email
If you submit inquiries to us via the contact form or by email, we will store the information you provide in the inquiry form or in your email—including the first and last name you provide there—for the purpose of processing your inquiry and in case of follow-up questions. Providing an email address is required for contact purposes; providing your name and phone number is optional. We will not disclose this data under any circumstances without your consent. The legal basis for processing the data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR and, if applicable, Article 6(1)(b) of the GDPR, provided that your inquiry is aimed at entering into a contract. Your data will be deleted once your inquiry has been fully processed, provided there are no legal retention requirements to the contrary. In cases covered by Article 6(1)(f) of the GDPR, you may object to the processing of your personal data at any time.
Use of Matomo
This website uses the web analytics software Matomo (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) to automatically collect data for the purpose of website analysis, based on your consent pursuant to Article 6(1)(a) of the GDPR.
Cloudflare Turnstile
We use “Cloudflare Turnstile” on our website, a service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”). Turnstile is used to protect our website—and forms in particular—from spam, automated submissions, misuse, and attacks.
When accessing protected forms or pages, a connection is established with Cloudflare. In doing so, Cloudflare may process technical information, specifically the IP address, user agent, TLS fingerprint, site key, the associated origin page, and other client-side signals from the browser and device. Cloudflare describes these signals as necessary to distinguish between human use and automated bot traffic.
Data processing is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure provision of our website, the prevention of spam, misuse, and automated attacks, as well as the protection of our technical systems. To the extent that Turnstile stores or reads information on your device, this is done, where necessary, on the basis of Section 25(2)(2) of the German Telecommunications Data Protection Act (TDDDG), as this processing is necessary for the provision of the security function.
According to Cloudflare, it processes the signals used to provide Turnstile as a data processor on behalf of website operators. To improve bot detection, Cloudflare also states that it processes these signals as a data controller in its own right. Cloudflare states that it does not use the collected signals to identify, profile, or track individual users for advertising purposes.
Personal data may also be processed in the United States. We have entered into a data processing agreement with Cloudflare. Cloudflare provides a Data Processing Addendum for this purpose, which describes, among other things, data processing, technical and organizational measures, and provisions regarding international data transfers.
For more information about data processing by Cloudflare Turnstile, please see Cloudflare's Turnstile Privacy Policy and Cloudflare's General Privacy Policy.
Cookies [cookies_revoke]
Our website uses cookies and similar technologies, such as local storage technologies or scripts, that can store or read information on your device. Cookies are small text files that your browser stores on your device.
We distinguish between technically necessary cookies and similar technologies, and optional cookies and similar technologies.
Technically necessary cookies and similar technologies are required for our website to function securely and reliably. These may include, in particular, cookies or technical storage mechanisms that are necessary for displaying the website, saving cookie settings, ensuring technical security, preventing spam, providing form functions, or preventing unauthorized access. The use of these technically necessary technologies is based on Section 25(2)(2) of the German Telemedia Act (TDDDG). To the extent that personal data is processed in this context, the processing is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest lies in the secure, stable, and user-friendly provision of our website. To the extent that processing is necessary for the implementation of pre-contractual measures or for the performance of a contract, it is additionally based on Article 6(1)(b) of the GDPR.
We use optional cookies and similar technologies—particularly for analytical or statistical purposes—only if you have given your prior consent. In this case, the storage of information on your device or access to such information is based on Section 25(1) of the TDDDG. The subsequent processing of personal data is based on Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.
We use Cloudflare Turnstile on our website to prevent spam and bots. To the extent that Cloudflare Turnstile stores or reads information on your device, this is done to provide the security feature and is therefore based on Section 25(2)(2) of the TDDDG. For more information, please see the “Cloudflare Turnstile” section of this Privacy Policy.
You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to block cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. Please note that disabling technically necessary cookies or similar technologies may limit the functionality of this website.
You can change or revoke your cookie settings at any time by clicking the following link:
Data Disclosure and Recipients
Your personal data will not be disclosed to third parties, except
- if we have explicitly noted this in the description of the respective data processing.
- if you have given your express consent pursuant to Article 6(1)(a) of the GDPR,
- the disclosure is necessary pursuant to Article 6(1)(f) of the GDPR for the establishment, exercise, or defense of legal claims, and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed,
- if there is a legal obligation to disclose the data pursuant to Article 6(1)(c) of the GDPR, and
- to the extent necessary pursuant to Article 6(1)(b) of the GDPR for the performance of contractual relationships with you.
We also use external service providers to deliver our services. We have carefully selected and engaged these providers in writing. They are bound by our instructions and are regularly monitored by us. Where required, we have entered into data processing agreements with them pursuant to Article 28 of the GDPR. These providers perform services such as web hosting, email delivery, and the maintenance and support of our IT systems. The service providers will not disclose this data to third parties.
Data Security
In accordance with Article 32 of the GDPR, and taking into account the state of the art, the costs of implementation, the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of risks to the rights and freedoms of individuals, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. For security purposes and to protect the transmission of confidential information, this website uses SSL encryption.
Retention Period for Personal Data
The retention period for personal data is determined by the applicable statutory retention requirements, such as those under commercial and tax law. Once the applicable retention period has expired, the relevant data is routinely deleted. If the data is required for the performance or initiation of a contract, or if we have a legitimate interest in retaining it, the data will be deleted once it is no longer required for these purposes or you have exercised your right to withdraw your consent or object to the processing.
Your Rights
Below you will find information on the rights granted to you under applicable data protection law with respect to the controller regarding the processing of your personal data:
The right, pursuant to Article 15 of the GDPR, to request information about your personal data that we process.
In particular, you may request information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.
The right, pursuant to Article 16 of the GDPR, to request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us.
The right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
The right, pursuant to Article 18 of the GDPR, to request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure, and if we no longer need the data but you require it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR.
The right, pursuant to Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller.
The right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a general rule, you may contact the supervisory authority of the federal state where our registered office is located, as indicated above, or, if applicable, the supervisory authority of your usual place of residence or workplace.
Right to Withdraw Consent Pursuant to Article 7(3) of the GDPR: You have the right to withdraw your consent to the processing of your data at any time, with effect for the future. In the event of withdrawal, we will delete the relevant data without delay, unless further processing can be based on a legal basis that does not require consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to the withdrawal.
Right to Object
If we process your personal data on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right under Article 21 of the GDPR to object to the processing of your personal data, provided that such objection is based on reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without having to specify a particular situation. If you wish to exercise your right to withdraw consent or object, simply send an email to info@codebites.de.
External Links
Social networks (Facebook, Twitter, Xing, etc.) are integrated into our website solely as links to the corresponding services. When you click on the embedded text or image link, you will be redirected to the respective provider’s website. User information is transmitted to the respective provider only after the redirection. For information on how your personal data is handled when using these websites, please refer to the respective privacy policies of the providers you use.
Subject to Change
We reserve the right to amend or update this Privacy Policy as necessary, in accordance with applicable data protection regulations. This allows us to bring it into line with current legal requirements and to reflect changes to our services, such as the introduction of new services. The most recent version applies to your visit.
This privacy policy was created by datenschutzexperte.de