Privacy Policy

Controller

Code17 GmbH
Philipp-Reis-Str. 11b
04179 Leipzig
hello@getml.com

Questions about privacy and your rights

For questions on data protection or if you wish to exercise your rights under data protection law, please contact us using the above mentioned contact details.

Our website

When you visit our website, the following data of the device or the browser you are using is collected and stored in a log file:

  • IP address
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the first access takes place (referrer URL)
  • browser and operating system used

We use this information for technical purposes in order to deliver the contents of our website to you and to ensure the safe operation of our services.

Furthermore, we use this data for statistical purposes, to understand which devices with which characteristics and settings are used to visit our website, in order to optimise it. These statistics do not contain any personal information. The legal basis for the use of data for the compilation of statistics is Article 6 (1) (f) GDPR.

The IP address of your terminal device is anonymised if the complete storage is no longer necessary for the technical purposes you have initiated. The complete address will therefore not be stored for non-technical purposes unless this is necessary to detect and prevent attacks (e.g. preventing unlawful access, spying on data, spreading malware (e.g. viruses) or other unlawful purposes) against the systems used for our website. Such attacks would impair the proper functioning of the technology, the use of our website or its functionality and the security of visitors to our website. We herewith pursue the legitimate interest of ensuring the operability of our website and to ward off illegal attacks against us and the visitors to our website. The legal basis for the processing is Art. 6 Para. 1 f) GDPR. Also in this case the stored IP data are deleted (by anonymization), if they are no longer needed for the recognition or defense of an attack.

Customer account

When you create a customer account, we process the information you provide to us to create and manage the account and to enable you to use the services associated with your customer account. The legal basis for the processing is Art. 6 Para. 1 b GDPR. If you create a customer account in order to conclude a contract with us, the legal basis for the corresponding processing of your data is also Art. 6 para. 1 b GDPR.

These data are stored until the deletion of the customer account. If we are required by law to store the data for a longer period of time (e.g. to fulfil accounting obligations) or if we are legally entitled to store the data for a longer period of time (e.g. due to a current legal dispute against the owner of a user account), the data will be deleted after expiry of the storage obligation or legal entitlement.

Software licence

If you receive a license to use the software provided by us this license is linked with your customer account. At each launch of the software and periodically while running the software the software will verify that your license is still active and that you do use the software within the license granted by inquiring our license server over the internet. For these purposes the following information will be send to our license server:

  • IP address
  • Date and time of access
  • User and System Identifier

The legal basis for the processing is Art. 6 Para. 1 f GDPR as these measures protect us against illegal use of our software.

The data will be deleted within seven days when our license server has verified the request. If the software is used outside the license granted the software will stop running and can not be launched anymore.

Processing of data based on your consent for the grant of a Trial Licence

If you declare your consent in the processing of data during the application for a trial licence we process the data as agreed based on Art. 6 Sec. 1 a) GDPR. Your consent can be revoked anytime.

Newsletter

If you subscribe to our email newsletter, the data you provide will be processed for the creation and dispatch of the newsletter and for proof of subscription to our newsletter until your revocation. The legal basis for the processing is Art. 6 Para. 1 a) GDPR. To receive the newsletter, you must click on the confirmation link in the verification e-mail which we will send to you after your registration. When you click on the link provided in the verification email, we process the public IP address of the terminal from which the link is accessed together with the date and time of the click and your email address. We process this data in order to provide proof that you have confirmed your consent. The legal basis for this processing is Art. 6 para. 1 f) GDPR. Our legitimate interest in this is the fulfilment of our obligation to document and prove your consent.

For the creation and dispatch of our newsletter we use an external service provider who works for us as a processor: SendGrid, Inc., 1801 California Street, Suite 500, Denver, Colorado 80202, USA

Privacy policy: https://sendgrid.com/policies/privacy/services-privacy-policy/

Notice of Privacy Shield Certification: https://sendgrid.com/policies/privacy/privacy-shield-certification/

Contact inquiries

If you send us a message via one of the contact options offered, we will use the data you provide to us to process your request. The legal basis for this is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 f) GDPR. If your inquiry is used for the conclusion of a contract with us, additional legal basis for the processing is Art. 6 para. 1 b) GDPR. The data will be deleted after your request has been completed. If we are obliged by law to store data for a longer period of time, the data will be deleted after expiry of the corresponding period.

For the chat function on our website we do use crisp.chat offered by Crisp IM SARL, 2 Boulevard de Launay, 44100 Nantes, France under a processor agreement.

Use of cookies

We use Cookies to ensure the technical functionality of our website, to understand how visitors use our website and to store preferences that a user has made in his browser.

A cookie is a small text file that is stored in the browser on your device when you visit our website. If you later call up our website again, we or the service provider setting the cookie can read the respective cookie again.

Cookies are stored for different lengths of time. A distinction must be made between so-called session cookies and temporary cookies. Session cookies are deleted from your browser when you leave our website or close your browser. Permanent cookies are stored for the duration specified when they are stored.

At any time you have the possibility to set your browser which cookies it should accept, but this may result in our website no longer functioning correctly. You can also delete cookies yourself at any time.

We use cookies for the following purposes:

  • Technically necessary cookies, which are absolutely necessary for the use of the functions of our website. Without these cookies, certain functions could not be provided. This is a session cookie.
  • Functional cookies that are used to technically carry out certain functions that you wish to use.
  • Analysis cookies that are used to analyze your user behavior. For details please read the information on "Google Analytics“, „Hot Jar“ and „HubSpot“.

Most browsers used by our users allow you to choose which cookies to store and to delete (certain) cookies. If you limit the storage of cookies to certain websites or do not allow cookies from third party websites, it is possible that our website can no longer be used to its full extent. Here you will find information on how to adjust the cookie settings for the most common browsers:

User support

We use Zendesk Chat, a product of Zendesk Inc., 1019 Market St, San Francisco, CA 94103, USA, for the support of our users. Zendesk works for us under a contract processing agreement and is a member of Privacy Shields, https://www.privacyshield.gov/participant?id=a2zt0000000TOjeAAG&status=Active

Please also note Zendesk’s privacy policy at https://www.zendesk.de/company/customers-partners/eu-data-protection/ in this respect.

Marketing

We use HubSpot for our online marketing activities, also on this website. HubSpot is an offer from HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

HubSpot enables us to provide email marketing, social media publishing & reporting, website usage reporting, contact management (e.g. user segmentation & CRM), as well as the operation of landing pages and contact forms.

The legal basis for the use of Hubspot is Art. 6 Abs. 1 f, GDPR. Our justified interest in the use of this service is the optimisation of our marketing measures and the improvement of our customer service.

HubSpot is certified under the conditions of the “EU - U.S. Privacy Shield Framework”.

The HubSpot data protection regulations can be found here: https://legal.hubspot.com/privacy-policy

Information on the cookies used by HubSpot can be found here: https://knowledge.hubspot.com/articles/kcs_article/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser

If you click here, a cookie is stored in your browser with which you object to the use of HubSpot during the use of our website. The opt-out only applies to the browser you are using now. If you delete the cookie, you must opt out again.

Applications

We are always looking forward to new colleagues! If you apply for one of the positions offered by us, or on your own initiative, we process your data in order to carry out the application process and for the decision on the establishment of an employment relationship. The legal basis for the processing is § 26 BDSG and subordinated to Art. 6 Para. 1 b GDPR.

Should we unfortunately not consider your application, we will delete your application together with the submitted documents three months after our rejection, unless we are legally obliged to store it for a longer period of time or further storage is in our legitimate interest in order to be able to prove that we comply with our legal obligations, e.g. under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG). In this case, the deletion will take place at the end of the statutory retention period or at the end of the corresponding reason. The legal basis for further storage is Art. 6 Para. 1 c. if storage periods exist. GDPR and in the rest § 26 BDSG and subordinated Art. 6 para. 1 b. GDPR.

You can object to the further processing of your data at any time by withdrawing your application.

If we establish an employment relationship with you, separate information will be provided on the processing of your data and the rights to which you are entitled.

If we are unable to consider your application for a position, we will include you in our applicant pool with your consent, which must be declared separately, in order to be able to consider your application for future vacancies. You can object to the corresponding use of your data at any time. In this case, the data will be deleted immediately unless we are entitled or obliged to store the data for a longer period of time for the reasons stated above. In this case the deletion takes place with omission of the appropriate reason. The legal basis for the processing of your data is Art. 6 Para. 1 a. GDPR.

Tools to analyze the use of our website

We use the tools mentioned below to compile statistics and evaluations of how our website is found and used for purposes of optimizing our website and advertising, as well as identifying demographic information about visitors and their user behavior.

We also collect information such as which pages you have visited, technical information about the device you are using (e.g. browser type/version, operating system and browser) and your approximate location.

The tools we use for this purpose use cookies and/or the public IP address of the device you are using in anonymous form.

With this processing, we pursue the legitimate interest of being able to improve our website as well as our advertising measures. The legal basis for the processing is Art. 6 Para. 1 f) GDPR.

If you do not wish this for yourself, you can object to this here. If you click here, an opt-out cookie will be stored in your browser with which you object to the use of any analytics tools during the use of our website. The opt-out only applies to the browser you are currently using. If you delete the cookie, you must opt out again.

We use the following tools for this purpose:

Google Analytics

We use Google Analytics, a service of Google Ireland Limited, https://www.google.com/contact/impressum.html.

Google’s privacy policy, and how Google uses your data, can be found at https://policies.google.com/privacy?hl=en#about and https://support.google.com/analytics/answer/6004245?hl=en. Information in respect to the so-called IP mask can be found t https://support.google.com/analytics/answer/2905384/.

You can find information on how to opt out of using Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=en.

The pseudonymous data will be deleted after 26 months.

hotjar

We use hotjar, a services of Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, hotjar.com

hotjar´s privacy policy and how hotjar uses you data, can be found at https://www.hotjar.com/legal/policies/privacy and https://www.hotjar.com/legal/compliance/gdpr-commitment.

You can find information on how to opt out of using hotjar at https://www.hotjar.com/legal/compliance/opt-out

Note on opt-out options

The opt-out options referred to above are offered by the respective operators, so that we must refer to the information of the respective operator for their mode of operation. As a rule, a cookie is used by the operator to store your opt-out in the browser of the end device you are using, so that an opt-out must be carried out in every browser you are using. If you should delete these cookies later, the opt-out would have to be performed again.

Your rights

In particular, you have the following rights in connection with your personal data. For the details we refer to the legal regulations.

Right of access

According to Art. 15 GDPR, you have the right to ask us for confirmation whether personal data relating to you are being processed. If this is the case, you have a right to information about this personal data and to further information, which is mentioned in Art. 15 GDPR.

Right to rectification

Pursuant to Art. 16 GDPR, you have the right to demand immediate correction of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to erasure

You have the right to demand that we delete your personal data immediately. We are obliged to delete personal data immediately if the corresponding requirements of Art. 17 GDPR are met. Please refer to Art. 17 GDPR for details.

Right to restriction of processing

In accordance with Art. 18 GDPR, you have the right under certain conditions to demand that we restrict the processing of your personal data.

Right to data portability

Pursuant to Art. 20 GDPR, you have the right to receive the personal data that you have provided us in a structured, common and machine-readable format, and you have the right to transfer this data to another person without hindrance, provided that the processing is based on a consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or a contract pursuant to Article 6 (1) (b) GDPR and the processing is carried out by automated means.

Existence of a right of appeal to the supervisory authority

According to Art. 77 GDPR, without prejudice to any other administrative or judicial remedy, you have the right to complain to the supervisory authority. This right shall apply, in particular, at the Member State of your place of residence, at your place of work or at the place of the alleged infringement, if you consider that the processing of the personal data concerning you is contrary to the GDPR.

Right of objection

Pursuant to Art. 21 GDPR, you have the right to object to the processing of personal data concerning you, which is based on Article 6 (1) (e) or (f) of the GDPR. this also applies to profiling based on these provisions.
If we process your personal data for the purpose of direct advertising, you have the right at any time to object to the processing of your personal data for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.