Privacy Statement

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy statement listed below this text.

The data processing on this website is carried out by the website operator. You can find the contact details of the website operator in the section `Information on the Responsible Party` in this privacy statement.

On the one hand, your data is collected when you provide it to us. This could, for example, be data you enter on a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system, or time of page access). The collection of this data is automatic as soon as you enter our website.

Part of the data is collected to ensure error-free provision of the website. Other data can be used to analyse your user behaviour.

You have the right to receive information about the origin, recipient, and purpose of your stored personal data at any time without charge. You also have a right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time for the future. Moreover, you have the right to request the restriction of the processing of your personal data under certain circumstances.

Additionally, you have the right to lodge a complaint with the competent supervisory authority.

For this and other questions on the subject of data protection, you can contact us at any time.

When visiting our website, your surfing behaviour can be statistically evaluated. This is done primarily with so-called analysis programs.

Detailed information on these analysis programs can be found in the following privacy statement.

This website is hosted externally. The personal data collected on this website are stored on the servers of the host(s). This primarily includes IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website accesses, and other data generated through a website.

The external hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR).

If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g., device fingerprinting) in the sense of the TTDSG. The consent can be revoked at any time.

Our hosts will only process your data to the extent necessary to fulfil their performance obligations and follow our instructions with respect to these data.

We use the following hosts:

DigitalOcean LLC, 101 Avenue of the Americas, 10th Floor, New York, NY 10013, USA

Vercel Inc., 340 S Lemon Ave #4133. Walnut, CA 91789, USA

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy statement.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy statement explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the Internet (e.g., when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

The responsible entity for data processing on this website is:

CodexPro GmbH

Schaumburgallee 7

14052 Berlin

Phone: +49 (0) 170-1197825

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Unless a more specific storage period has been mentioned within this privacy statement, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will occur after these reasons cease to apply.

If you have given your consent to processing, we process your personal data based on Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR if special categories of data according to Art. 9 (1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or to access information on your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TTDSG. Consent can be revoked at any time. If your data are required for contract performance or for carrying out pre-contractual measures, we process your data based on Art. 6 (1) (b) GDPR.

Furthermore, we process your data if they are required for fulfilling a legal obligation on the basis of Art. 6 (1) (c) GDPR. Data processing may also be based on our legitimate interest according to Art. 6 (1) (f) GDPR. The respective legal bases in each case are specified in the following sections of this privacy statement.

We utilise, among others, tools from companies located in data protection law non-secure third countries as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. We highlight that in data protection law non-secure third countries, a level of data protection comparable to the EU cannot be guaranteed.

We note that the USA is generally considered a secure third country, having a level of data protection comparable to the EU. Data transfer to the USA is permissible if the recipient has certification under the `EU-US Data Privacy Framework` (DPF) or possesses suitable additional safeguards. Information on transfers to third countries, including data recipients, can be found in this privacy statement.

In the course of our business activities, we collaborate with various external entities. This occasionally requires the transfer of personal data to these external entities. We only pass on personal data to external entities when necessary for contract fulfilment, when we are legally obligated to do so (e.g., transferring data to tax authorities), when we have a legitimate interest under Art. 6 (1) (f) GDPR in passing on the data, or when another legal basis permits the data transfer. When employing processors, we only pass on personal data of our customers based on a valid contract for order processing. In the case of joint processing, a contract for joint processing is concluded.

Many data processing operations are only possible with your explicit consent. You may revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

IF DATA PROCESSING IS BASED ON ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY STATEMENT. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR FOR THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION ACCORDING TO ART. 21 (2) GDPR).

In the event of breaches of the GDPR, the persons affected have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, their place of work, or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

You have the right to have data, which we process based on your consent or in fulfilment of a contract, handed over to yourself or to a third party in a standard, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

Within the framework of the applicable legal provisions, you have the right at any time to access your stored personal data, their source and recipients, and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. For this purpose, as well as for further questions on the topic of personal data, you can contact us at any time.

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing applies in the following cases:

If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from `http://` to `https://` and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

If there is an obligation to send us your payment details (e.g., account number for direct debit authorization) after concluding a chargeable contract, this data is required for payment processing.

Payment transactions using common means of payment (Visa/MasterCard, direct debit procedures) are carried out exclusively via an encrypted SSL or TLS connection. An encrypted connection is indicated by the browser's address line changing from `http://` to `https://` and the lock symbol in your browser line.

In the case of encrypted communication, any payment details you submit to us cannot be read by third parties.

We offer the option to complete the payment process via the payment service provider PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 (1) (f) GDPR). In this context, we pass on the following data to PayPal as far as necessary for the fulfilment of the contract (Art. 6 (1) (b) GDPR):

The processing of the data specified in this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot carry out a payment via PayPal. [You have the option to choose another payment method.]

PayPal performs credit checks for various services such as direct debit payments to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest (according to Art. 6 (1) (f) GDPR) and serves the execution of the contract (according to Art. 6 (1) (b) GDPR). For this purpose, your data (name, address, and date of birth, bank account details) are passed on to credit agencies. We have no control over this process and only receive the result of whether the payment was executed, declined, or is still under review.

Our websites use so-called `cookies`. Cookies are small data packets and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your device until you delete them yourself or an automatic deletion is carried out by your web browser.

Cookies can be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies on websites (e.g., cookies for processing payment services).

Cookies serve various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies can be used to analyse user behaviour or for advertising purposes.

Cookies that are necessary for the execution of the electronic communication process, for providing certain functions you desire (e.g., for the shopping cart function) or for optimizing the website (e.g., cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure a technically flawless and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies was requested, the processing is carried out exclusively on the basis of this consent (Art. 6 (1) (a) GDPR and § 25 (1) TTDSG); the consent can be revoked at any time.

You can set your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Which cookies and services are used on this website can be found in this privacy statement.

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We will not share this information without your consent.

The processing of these data is based on Art. 6 (1) (b) GDPR, if your request is related to the fulfilment of a contract or is necessary for pre-contractual actions. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you ask us to delete them, revoke your consent to storage, or the purpose for the data storage lapses (e.g., after completing your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the use of the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, such as the scope of the offer or necessary technical changes, we will use the email address provided during registration to inform you in this way.

The processing of the data entered during registration is carried out for the purpose of implementing the user relationship established by registration and, if necessary, for initiating further contracts (Art. 6 (1) (b) GDPR).

The data collected during registration will be stored by us as long as you are registered on our website and will thereafter be deleted. Statutory retention periods remain unaffected.

If you contact us by email or telephone, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your matter. We will not share this data without your consent.

The processing of these data is based on Art. 6 (1) (b) GDPR, if your enquiry is related to the fulfilment of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; consent can be revoked at any time.

The data you send to us via contact enquiries remain with us until you request us to delete them, revoke your consent to storage, or the purpose for data storage no longer pertains (e.g., after the completion of your matter). Mandatory statutory provisions – in particular retention periods – remain unaffected.

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar services to those already purchased from our range by email. We do not need to obtain separate consent from you for this in accordance with § 7 (3) UWG. Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send emails to you. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible party mentioned at the beginning. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately discontinued.

This website uses the session recording and heatmap service from Hotjar Ltd, Dragonara Business Centre, Dragonara Road, Paceville St Julian's STJ 3141, Malta.

Heatmap services show the areas with which users who access this application interact most frequently. This way, areas of interest can be identified. These services can monitor and analyse website traffic and track user behaviour.

Some of these services may record user sessions and later visually reproduce them.

Insofar as you have given your consent, this website employs Google Analytics 4, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (`Google`).

Google Analytics uses cookies that enable an analysis of your use of our websites. The information about your use of this website collected by the cookies is generally transmitted to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, Google will truncate your IP address within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behaviour is recorded in the form of `events`. Events can include:

On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activities. The reports provided by Google Analytics serve to analyse the performance of our website.

The recipients of the data can be:

The European Commission has adopted its adequacy decision for the USA on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. As Google servers are distributed worldwide and a transfer to third countries (for example, to Singapore) cannot be completely excluded, we have also concluded the EU standard contractual clauses with the provider.

The data we send and link to cookies are automatically deleted after 2 [OR: 14 months]. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached is carried out automatically once a month.

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform any analyses on its own. It merely serves the management and deployment of the tools integrated through it. However, the Google Tag Manager does collect your IP address, which may be transferred to Google's parent company in the United States.

The use of Google Tag Manager is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. If the corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.

This website uses Google Ads. Ads is an online advertising program by Google Ireland Limited (`Google`), Gordon House, Barrow Street, Dublin 4, Ireland.

Within the scope of Google Ads, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser places on the user's computer. These cookies expire after 30 days and are not used to personally identify users.

If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google Ads customer receives a different cookie. The cookies cannot be tracked through the websites of Ads customers. The information obtained with the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie through your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of `conversion cookies` and the use of this tracking tool are based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour to optimize both its web offering and its advertising.

You can set your browser to inform you about the setting of cookies and allow cookies only on a case-by-case basis, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

This website uses the Meta (formerly Facebook) visitor action pixels for conversion measurement. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data are also transferred to the USA and other third countries.

This allows the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. As a result, the effectiveness of Facebook ads can be evaluated for statistical and market research purposes, and future advertising measures can be optimized.

Consequently, Facebook can enable the display of advertisements on Facebook pages as well as outside of Facebook. We, as the site operator, have no control over this use of data.

The use of this service is based on your consent according to Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. Consent can be revoked at any time.

We utilise the advanced matching feature within the Meta Pixel.

Advanced matching allows us to transmit various types of data (e.g., residence, state, postal code, hashed email addresses, names, gender, date of birth, or telephone number) of our customers and prospects, collected via our website, to Meta (Facebook). This activation enables us to tailor our Facebook advertising campaigns more precisely to individuals interested in our offers. Moreover, advanced matching improves the assignment of website conversions and expands custom audiences.

This website utilizes plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo video, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This applies even if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you allow Vimeo to directly associate your browsing behaviour with your personal profile. You can prevent this by logging out of your Vimeo account.

For the recognition of website visitors, Vimeo uses cookies or similar recognition technologies (e.g., device fingerprinting).

The use of Vimeo is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If the corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g., device fingerprinting) in the sense of the TTDSG. Consent can be revoked at any time.

Cloudflare is a service provided for the optimization and distribution of traffic. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Through the way Cloudflare's functions are integrated, the service filters all data traffic occurring via this application, i.e., communication taking place via this application and the user's browser, while simultaneously enabling the collection of analytical data contained within this application.

We have entered into a data processing agreement with the provider of Google Meet and fully implement the strict requirements of the German data protection authorities when using Google Meet.

We offer you the opportunity to apply to us (e.g., via email, post, or contact form). Below we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data will be in accordance with applicable data protection law and all other statutory provisions and that your data will be treated with strict confidentiality.

If you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes during interviews, etc.) as necessary for the decision on establishing an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 (1) (b) GDPR (general contract initiation), and – if you have given your consent – Art. 6 (1) (a) GDPR. The consent can be revoked at any time. Your personal data will only be disclosed within our company to individuals involved in processing your application.

If the application is successful, the data you have submitted will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 (1) (b) GDPR for the purpose of carrying out the employment relationship.

If we are unable to offer you a position, you reject a job offer, or you withdraw your application, we reserve the right to retain the data you have submitted based on our legitimate interests (Art. 6 (1) (f) GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). Afterwards, the data will be deleted, and physical application documents will be destroyed. This retention is primarily for evidence purposes in case of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), deletion will only take place once the purpose for further storage no longer applies.

A longer retention period may also occur if you have given your consent (Art. 6 (1) (a) GDPR) or if statutory retention obligations prevent deletion.

If we do not make you a job offer, there may be the possibility to include you in our applicant pool. If included, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Inclusion in the applicant pool is based solely on your explicit consent (Art. 6 (1) (a) GDPR). Giving consent is voluntary and is not related to the current application process. The individual can revoke their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool unless there are legal reasons for retention.

Data from the applicant pool will be irrevocably deleted no later than two years after giving consent.