PRIVACY POLICY


DATA PROTECTION

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

Please note that there may be vulnerabilities when transferring data on the internet (for example via email communication). Seamless protection of the data from access by third parties is not possible.

CONTROLLER FOR DATA PROCESSING

The controller within the meaning of data protection legislation for all data processing procedures involving our website is:

Cloudogu GmbH

Brabandtstraße 9–10
38100 Braunschweig
Germany

Phone: +49 (531) 61808880
Email: hello[at]cloudogu[dot]com

We have not appointed a data protection officer since there are no statutory requirements for an appointment in our case.

We ask you to send any requests on the subject of data protection and the assertion of data subject rights (see below) to the previously indicated address.

DATA PROCESSING DURING USE OF OUR WEBSITE

Personal data consist of any information that relates to an identified or identifiable natural person (“data subject”), such as their name, address, phone number, date of birth, bank details and their IP address.

We collect and use personal data of our users as a rule only if this is required for the provision of a functional website and our contents and services. The collection and use of personal data of our users is usually only done after the consent of the user has been given. There is an exception in cases where the prior obtaining of consent is not possible for factual reasons and the processing of the data is allowed by legal provisions.

LOGIN

To use our website, it is required that you register by providing personal data. The data is entered in the input mask, transmitted to us and stored. There is no sharing of the data with third parties. The following data is processed as part of the registration process:

  • User name
  • Email address
  • First and last name

Registration is intended for the fulfillment of the contract concluded with you through registration on our website or the implementation of precontractual measures. The legal basis for the processing of the data is therefore Art. 6 (1) (b) GDPR. This registration is absolutely required for fulfillment of the contract with the user or for the implementation of precontractual measures.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case for data collected during the registration process if the data is no longer required for the implementation of the contract. Fundamentally, your personal data is only stored as long as your user account exists at our website. After the end of the contract, there may also be a requirement to store the personal data of the contracting partner in order to meet contractual or statutory obligations.

As a user, you have the opportunity to deregister at any time. You can change the data stored on you at any time under the user interface “Profile” at our website.

USE DATA

When our websites are used, the provider of the web pages automatically collects and stores information in the server log files that your browser transfers to us automatically. This is:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request

This data cannot be assigned to specific persons. A combination of this data with other data sources does not take place. We reserve the right to review this data at a later time if we become aware of any concrete indications of unlawful use.

COMMUNITY

At our website, it is possible to create posts in the website community or to comment on the posts of other users with the personal data provided during registration (especially user name). If you use this function of our website, your user name will be visible for other users in your community postings.

The legal basis for the processing of the data is also the contract of use concluded with you during registration. The data use is intended for the fulfillment of this contract or the implementation of precontractual measures. The legal basis for the processing of the data is therefore Art. 6 (1) (b) GDPR.

A further legal basis for the use of your data is Art. 6 (1) (f) GDPR. The disclosure of the data in the community is intended on the one hand for the identification of the respective authors of each posting and on the other hand for the security of the community (e.g. by identification and documentation of authorship in the event of potentially illegal postings). These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the event that personal data transmitted by you during registration is disclosed in our community, the erasure of the postings provided by you takes place as soon as you have deregistered from our website.

Since we are always making an effort to minimize data use in accordance with the requirements of the applicable data protection provisions, we ask you not to provide personal data such as names, email addresses or phone numbers in community postings you make. To ensure data minimization, postings that include personal data will be erased by our community moderators without comment. We ask for your understanding in this regard.

TEAMS

On our website, there is the opportunity to join up with other users to create teams. There is the opportunity for each user to set up one or more teams and to invite other users registered at our website to the team by providing their email address. Furthermore, users can join existing teams of other users following an invitation. After joining a team, you as the user have the following functions on our website at your disposal:

  • Private area visible solely to you and other team members

To this end, data already collected about you during registration is used and made visible for other team members (e.g. in team member list, postings in the team area inside the community).

The legal basis for the processing of the data in the team area of our website is also the contract of use concluded with you during registration. The data use is intended for the fulfillment of this contract or the implementation of precontractual measures. The legal basis for the processing of the data is therefore Art. 6 (1) (b) GDPR.

A further legal basis for the use of your data is Art. 6 (1) (f) GDPR. The disclosure of the data in the team area of our website is intended on the one hand for the identification of the respective team members and authors of team area postings among the various authors and on the other hand for the security of the team area (e.g. by identification and documentation of authorship in the event of potentially illegal postings or other illegal conduct by one of the team members). These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In this case, your personal data will no longer be displayed for other team members as soon as they have left the team or you have deregistered on our website. The team area postings made by you are also erased.

COOKIES

Our web pages may use “cookies.” Cookies do not harm your computer and do not contain viruses. Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

The cookies used by us for our website are called transient “session cookies” and persistent cookies. They are automatically erased at the end of your visit. Persistent cookies allow us to analyze the surfing behavior of the users. These cookies are automatically erased after a specified period of time, which can differ depending on the cookie.

The legal basis for the processing of your personal data using technically required session cookies is Art. 6 (1) (1) (f) GDPR.

The purpose of the use of transient cookies is to simplify use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this, it is required that the browser also be recognized after a change of pages.

Persistent analysis cookies are used for the purpose of improving the quality of our website and its contents. The analysis cookies let us find out how the website is used and constantly improve our service. The data is collected after you have consented to the processing of your data for this purpose. The legal basis for the processing of your data in this case is Art. 6 (1) (1) (a) and Art. 7 GDPR.

You can set your browser so that you are notified about the creation of cookies and to only allow cookies in individual cases, to prevent the acceptance of cookies either generally or in certain cases, and enable the automatic deletion of cookies upon closing the browser. When cookies are deactivated, the functionality of this website may be limited.

GOOGLE ANALYTICS

On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and enable an analysis of your use of the website, as already discussed above in the section on cookies. The data generated by the cookie regarding your use of this website is generally transferred to a Google server located in the USA and stored there. In the event that you activate IP anonymization on this website, this causes your IP address to be truncated by Google within Member States of the European Union or in other countries party to the Agreement on the European Economic Area before being transferred. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data. You may refuse the storage of cookies via a corresponding setting in your browser software; however, please note that if you do this, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: (https://tools.google.com/dlpage/gaoptout?hl=en)

You will find more information on how Google Analytics works and on the relevant terms and conditions of use for this service and the data protection requirements at https://www.google.com/analytics/terms/us.html or https://policies.google.com/privacy. We would also like to point out that Google Analytics with the anonymizeIP extension is used on our websites and that IP addresses are therefore only processed in truncated form in order to exclude any personal reference.

If you have consented to this, we will use a so-called “cross device tracking” for the analysis of your user behavior on our websites. This means that we can also recognize you as a registered user on our websites across various devices. An ID is assigned to you during registration on our page. This ID is recognized by Google Analytics when you log in to our website from various devices (e.g. smartphone, tablet). The data recorded on you is collected by Google under the corresponding ID, stored in a pseudonymized manner solely there on the basis of the assigned ID and made available to us. We use these pseudonymized use profiles to coordinate your purchasing experience on our websites in a more personal and individual manner for you.

MATOMO (FORMERLY PIWIK)

This website uses the open source web analytics service Matomo. Your IP address is anonymized prior to storage of data in Matomo. The use of this analysis tool is based on 7 / 10 Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior to optimize both its web service and its marketing.

The collected information on the use of this website is not shared with third parties. If you do not agree with the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie is stored in your browser to prevent Matomo from storing use data. If you erase your cookies, the consequence of this is that the Matomo opt-out cookie is erased. The opt-out must be reactivated when this website is visited again.

CLEVERREACH NEWSLETTER SYSTEM

We use CleverReach for the newsletter service offered by us. The data provided during registration is solely used for the personalization of the newsletter and is not shared with third parties. You can unsubscribe from the newsletter at any time or revoke your consent by sending an email to hello[at]cloudogu[dot]com at any time. Your data is erased within one week after you end the newsletter subscription, if no statutory retention duties prevent erasure. If you have begun or not completed registration for the newsletter, the data provided by you will be erased within one week. To optimize the information sent via the newsletter, we assess the opening rate and click rate of the recipients. These reports are based on anonymized data of the recipients. CleverReach uses the data of the recipients solely for sending the newsletter.

DUTY TO PROVIDE INFORMATION ON THE USE OF THE MEETERGO SOFTWARE PURSUANT to Art. 13/14 DSGVO

Purpose of the processing

Use of the meetergo software as a tool for simplified scheduling, project coordination & communication. The software is a software as a service.

Legal basis (according to Art. 6 / 9 GDPR)

- Fulfilment of a contract (Art. 6 para. 1 b)

Recipient, if applicable (if passed on)

The personal data is passed on to third party companies if necessary in order to be able to guarantee the smooth running of the service. The cooperation with these subcontractors has been specified in a data protection contract.

If applicable, intention of forwarding to a third country or international organisation (incl. information on the adequacy decision of the Commission or suitable guarantees)

A data transfer to a third country is not planned.

Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity. Consequences of non-compliance (if the required data is not provided)

The personal data is collected with the use of meetergo, as a software as a service performance, and is essential for the use of the software.

If applicable, existence of automated decision making

In this context, we do not use automated decisionmaking.

If applicable, origin of the data (if not collected directly from the data subject)

The personal data originates from the data subject, i.e. the user of the software

Categories of personal data

- Personal master data (also from third-party customers) - Communication data (e.g. telephone, e-mail) - Customer history or tracking of usage behaviour - Contract billing and payment data

Right of appeal

In the event of data protection complaints, you can contact the competent supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestr. 2-4 40213 Düsseldorf Telefon: 0211/38424-0 Fax: 0211/38424-999 E-Mail: poststelle@ldi.nrw.de

Change of purpose, if applicable

none

WITHDRAWAL OF CONSENT

You can prevent Google from collecting the data related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: (https://tools.google.com/dlpage/gaoptout?hl=en).

You can also prevent collection by Google Analytics by installing the browser plugin, especially in internet browsers of mobile end devices, by clicking on the following link: [Deactivate Google Analytics]

SOCIAL MEDIA SIGN-IN

On our web page, we offer you the opportunity to log in using your Google or Github account. The providers of these services are Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and Github Inc, 88 Colin P Kelly Jr Street, San Francisco, CA 94107 USA. If you choose to register using Google/Github sign-in and click on the “Google”/”Github” button, you will be automatically redirected to Google/Github’s platform. There, you can sign in using your user data. This will link your Google/Github profile to our website or services. This link gives us access to your data stored with Google/Github. This data is used to set up, provide and personalize your account.

The legal basis for processing your data consists of legitimate interests in accordance with Art. 6 (1) (b) GDPR. The legitimate interests lie in providing you with simplified access to our website and services. You can object to data collection and processing at any time by changing the corresponding settings in your Google/Github account. For more information, please refer to the terms and conditions of use and the privacy policy of the respective services.

Google: Terms and Conditions of Use / Privacy Policy

Github: Terms and Conditions of Use / Privacy Policy

CLOUDFLARE CONTENT DELIVERY NETWORK

We use a so-called “Content Delivery Network” (CDN), offered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active).

A CDN is a service with the help of which the content of our online offer, in particular large media files such as graphics or scripts, can be delivered more quickly with the help of regionally distributed servers connected via the internet. The processing of users’ data is carried out solely for the aforementioned purposes and to maintain the security and functionality of the CDN.

You can find more information on this in the Cloudflare Privacy Policy: https://www.cloudflare.com/security-policy .

Salesforce CRM System

We use the CRM system of the provider salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany, to process user inquiries faster and more efficiently. This is also our legitimate interest in accordance with Art. 6 (1) (f) GDPR.

Help Scout is certified under the Privacy Shield agreement, thereby providing an additional guarantee of compliance with European data protection law, if data is processed in the USA (https://www.privacyshield.gov/participant?id=a2zt0000000KzLyAAK&status=Active).

Salesforce uses users’ data only for the technical processing of requests and does not share them with third parties. To use Salesforce, at least a correct email address is required. Use with a pseudonym is possible. Over the course of the processing of service requests, it is necessary to collect additional data (name, address). The use of Zendesk is optional and is intended for the improvement and acceleration of our customer and user service.

If users do not consent to data collection via data storage in Salesforce’s external system, we provide them with alternative means of contact for submitting service requests via email, phone, fax or mail. Users can find more information in the salesforce Privacy Policy: https://www.salesforce.com/company/privacy/.

SSL ENCRYPTION

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as a site operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the padlock icon on your browser bar.

If SSL encryption is activated, the data that you transfer to us cannot be read by third parties.


RIGHTS OF DATA SUBJECTS

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

INFORMATION, RECTIFICATION, RESTRICTION OF PROCESSING AND ERASURE

You have the right to free information at any time about the data we store on your person, its origin and recipients and the purpose of data processing via our websites. In addition, you have the right to rectification, erasure and restriction of the processing of your personal data, provided that the legal requirements for this are met.

RIGHT TO DATA PORTABILITY

You have the right to receive personal data related to you and provided to us as the controller in a structured, commonly used and machine-readable format. We can fulfill this right by providing a csv export of the customer data processed on you.

RIGHT TO INFORMATION

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obligated to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the controller.

RIGHT TO OBJECTION

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you, which is carried out on the basis of Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you, unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is intended for the assertion, exercise or defense of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.

WITHDRAWAL FROM DECLARATIONS OF CONSENT UNDER DATA PROTECTION LAW

In addition, you can withdraw your consent at any time with effect for the future by contacting us using the contact details provided above. Withdrawal shall not affect the lawfulness of the data processing carried out on the basis of the consent until the revocation.

RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the EU General Data Protection Regulation.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.