The following informs you about the processing of personal data by us as the data controller, in particular relating to the use of our website. The processing of personal data (e.g. name, address, email address or telephone number of a data subject) is carried out in accordance with the statutory provisions, in particular in accordance with the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
This Data Privacy Policy uses terms based on the wording of the GDPR. The definitions for some of these terms can be found at the end of this policy.
1. Name and address of data controller
The data controller pursuant to Art. 4 (7) GDPR is:
CODIALIST GmbH
Friedrichstraße 236
10969 Berlin
Represented by:
Sven-René Friedel
Managing Director
Email: privacy@codialist.de
Tel.: +49 30 586939 100
2. How personal data is processed when you visit our website
2.1. When you use the website for information purposes only, we process only the personal data that your browser transmits to our server. When you attempt to view our website, we process the following data. This is technically necessary in order for us to display our website to you and to ensure its stability and security (legal basis: Art. 6 (1) sentence 1 lit. f GDPR):
- IP address
- Date and time of request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of request (specific page)
- Access status/HTTP status code
- Amount of data transferred
- Website from which the request originated
- Browser
- Operating system and interface
- Language and version of browser software
2.2. This data will be deleted after 14 days at the latest, provided that continued storage is not required for evidentiary purposes. In this case, the data is completely or partially excluded from deletion until final clarification of an incident has been achieved.
3. How personal data is processed when you contact us
If you contact us via email, post, contact form or any other method, the data you provide (e.g. your email address and, where applicable, your name and telephone number) will be processed by us in order to handle or answer your request (legal basis: Art. 6 (1) sentence 1 lit. a, f GDPR). Any data obtained in this context is deleted as soon as its storage is no longer necessary. If the data is subject to statutory retention requirements, we may alternatively restrict its processing.
4. How personal data is processed during the application process
4.1. If you provide us with personal data as part of the job application process, the data you provide will only be processed for the purpose of facilitating the application process and enabling us to assess your application (legal basis: Art. 6 (1) sentence 1 lit. a, f GDPR).
4.2. If a contractual relationship is established between you and us, the data transmitted will be processed for the purpose of entering into and executing the employment relationship in accordance with the statutory provisions. Otherwise, the application documents will be automatically deleted six months after the conclusion of the application process, provided that there are no other legitimate interests on our part (e.g. procedures under the AGG [General Equal Treatment Act]).
5. Processing of personal data of contractual partners
If you enter into a contractual relationship with us - e.g. as a customer or supplier - or if we are in the initiation phase of such a contractual relationship, we process the data you transmit sent to us, including the data of any contact persons named by you. This data is processed to facilitate the conclusion and execution of the contractual relationship. The legal basis for this is Art. 6 (1) sentence 1 lit. b GDPR; the legal basis for data that is provided by you but not required for this purpose is Art. 6 (1) sentence 1 lit. a GDPR.
6. Cookies
6.1. Further to the aforementioned data processing, cookies are stored on your computer when you visit our website. Cookies are small text files that are saved on your hard drive and assigned to the browser you are using. Among other things, they enable the frequency of use and number of website users to be determined and website usage behaviour to be analyzed. We also use cookies to make our website more user-friendly. Some cookies remain saved after your visit to the website has ended. If you then return to the website, we can retrieve these saved cookies.
6.2. You can configure your browser settings according to your preferences and (for example) refuse to accept third-party cookies or all cookies. Please note that if you choose to reject cookies, you may not be able to access all the functions of this website.
6.3. Insofar as cookies process personal data and you have consented to this processing, the processing is based on Art. 6 (1) sentence 1 lit. a. GDPR. Where personal data is processed by technically necessary cookies, Art. 6 (1) sentence 1 lit. f GDPR applies.
7. Analysis tools
7.1. This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics also uses cookies (see above) - that is, text files that are stored on your computer and enable your use of the website to be analyzed. Generally, cookie-generated information about your use of the website is transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened by Google prior to transmission within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. We have no influence over this. Google uses this information on our behalf to analyze your use of the website, compile reports on website activities and provide us with other services related to website and internet use.
7.2. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
7.3. You can prevent the storage of these cookies by making the corresponding adjustments to your browser settings and restricting cookies to those that are technically necessary; however, please note that if you choose to do so, you may not be able to access all functions of this website in full. You can also prevent Google from collecting and processing cookie-generated data about your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
7.4. This website uses Google Analytics with the extension "_anonymizeIp()". This means IP addresses are processed in a shortened form and thus cannot be linked to a specific individual. Insofar as the data collected about you allows you to be personally identified, it is immediately excluded from processing and deleted.
7.5. We use Google Analytics to analyze and regularly improve the use of our website. The statistical information we obtain allows us to improve our website and make it more interesting for users. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the requirements of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) sentence 1 lit. f GDPR.
7.6. Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: http://www.google.com/analytics/terms/de.html, data privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, privacy policy: http://www.google.de/intl/de/policies/privacy.
7.7. This website also uses Google Tag Manager. Google Tag Manager controls which tags (scripts) are executed on our website and when. The Tag Manager itself does not process any personal data. It also does not access the personal data processed by the tags. If the Tag Manager is deactivated, this deactivation also applies to all tracking tags that are implemented using Google Tag Manager. More information about this Google tool can be found at: https://www.google.de/tagmanager/use-policy.html
8. Recipients of personal data
Personal data is only be transferred to third parties in the instances described in this Data Privacy Policy or in instances expressly outlined elsewhere. In addition, we sometimes use external processors (Art. 28 GDPR) to render certain services on our behalf (e.g. hosting provider, email provider). However, these providers process personal data exclusively within the European Union.
9. Your rights
9.1. You have the following rights with regard to our use of your personal data:
- Right to information (Art. 15 GDPR),
- Right to correction and deletion (Art. 16, 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to object to processing (Art. 21 GDPR),
- Right to withdraw previously issued consent to processing,
- Right to data portability (Art. 19 GDPR).
9.2. If you believe that we have failed to observe your rights to the extent required under law, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us. Before you take this step, however, we would be grateful if you notify us of your criticism so that we can rectify the cause of the complaint ourselves.
9.3. Information about your right to object pursuant to Art. 21 GDPR
At any time, you have the right, for reasons arising from your particular situation, to object to processing of your personal data based on Art. 6 (1) sentence 1 lit. e GDPR (data processing in the public interest) and Art. 6 (1) sentence 1 lit. f GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision pursuant to Art. 4 (4) GDPR.
If you file an objection, we will cease to process your personal data, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
9.4. If your objection is directed against the processing of data for the purpose of direct advertising, we will cease to process the data immediately. In this case, it is not necessary to outline special reasons. This also applies in regard to profiling, insofar as it occurs in connection with direct advertising.
9.5. If you wish to make use of your right to object, you can send an email to the following address: privacy@codialist.de
10. Deletion of data by the data controller
10.1. We process and store your personal data only for the period of time necessary to achieve the purpose of storage or - insofar as we are legally obliged to do so - until the expiry of the statutory retention period.
10.2. If the purpose of storage is no longer applicable or the statutory retention period expires, the personal data is blocked or deleted in accordance with statutory regulations. It is not necessary for you to take any action in this regard.
11. Profiling, transmission of data to third countries
We do not undertake any automated decision-making, including profiling, within the meaning of the GDPR. Personal data is only transferred to third countries in the instances expressly mentioned in this declaration or elsewhere, or with the corresponding consent.
12. Definitions in the GDPR:
Within the meaning of the GDPR, this Data Privacy Policy and this website, the following terms are defined as follows:
- "Personal data" means any information relating to an identified or identifiable natural person ("data subject" in the following); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
- "'Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
- "Restriction of processing" means the marking of stored personal data with the aim of limiting their processing in the future;
- "Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
- "Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
- "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
- "Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
- "Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
- "Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.