Privacy Policy for Website Operators in Accordance with the GDPR

Code and Concept – Erik Ebell and Christian Giese GbR (hereinafter “Code and Concept”) is pleased that you are visiting our website. Data protection and data security when using our website are very important to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes this data is used.

Since changes in the law or changes to our internal company processes may require us to update this Privacy Policy, we ask that you review this Privacy Policy regularly. You can access, save, and print the Privacy Policy at any time by visiting the Privacy Policy page.

 

§ 1 Data Controller and Scope of Application

The data controller within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states, as well as other data protection regulations, is:

CoAnCo Imprint DE

This Privacy Policy applies to the Code and Concept website, which is accessible at the domain codeandconcept.com and its various subdomains (hereinafter referred to as “our website”).

 

§ 2 Principles of Data Processing

Personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, phone number, date of birth, email address, IP address, or user behavior. Information for which we cannot establish a connection to your person (or can do so only with disproportionate effort), e.g., through anonymization of the information, is not personal data. The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis or your consent. Processed personal data is deleted as soon as the purpose of the processing has been fulfilled and there are no longer any legally mandated retention obligations to be observed.

If we process your personal data in order to provide certain services, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing, and the respective retention period.

 

§ 3 Provision and Use of the Website

a.) Nature and Scope of Data Processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:

  • IP address of the requesting computer in anonymized form
  • Date and time of access
  • Name and URL of the file accessed
  • Website from which the access originated (referrer URL)
  • Browser used and, if applicable, your computer’s operating system, as well as, possibly, the name of your Internet service provider

b.) Legal Basis

Article 6(1)(f) of the GDPR serves as the legal basis for the data processing described above. The processing of the data described is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.

c.) Retention period

As soon as the data mentioned is no longer required for the operation of the website, it will be deleted. The collection of data for the purpose of providing the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, users have no right to object. Further storage may occur in individual cases if required by law.

 

§ 4 Disclosure of Data

We will only share your personal information with third parties if:

  • You have given your explicit consent for this purpose pursuant to Article 6(1), first sentence, subparagraph (a) of the GDPR
  • this is permitted by law and necessary, pursuant to Article 6(1), sentence 1, subparagraph (b) of the GDPR, to fulfill a contractual relationship with you
  • there is a legal obligation to disclose the data pursuant to Article 6(1), sentence 1, subparagraph (c) of the GDPR

the disclosure is necessary pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR to safeguard legitimate business interests, as well as to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data.

 

§ 5 Use of Cookies

Nature and Scope of Data Processing

Cookies are small files that we send to the browser on your device during your visit to our website, where they are stored. Some features of our website cannot be provided without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. For example, cookies can recognize the browser you are using when you visit our website again and transmit various pieces of information to us. Among other things, cookies help us make our website more user-friendly and effective for you by, for example, tracking your use of our website and identifying your preferred settings (such as country and language settings). If third parties process information via cookies, they collect this information directly through your browser. Cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses.

No cookies are used on our website.

 

§6 Use and Integration of Google Web Fonts

To ensure that the content on our website is displayed in a visually appealing way across all browsers, we use Google Web Fonts (font libraries) on this website (see also https://www.google.com/webfonts/).
Google Web Fonts are stored in your browser’s cache the first time you visit our website. If your browser does not support the Google Web Fonts we use or blocks access to them, the content will be displayed in a different default font.When you access Google Web Fonts libraries, a connection is automatically established with the library operator. In doing so, the operator of the Google Web Fonts library may collect data.

The privacy policy of Google, the operator of the Google Web Fonts library, can be found at: https://www.google.com/policies/privacy/

 

§ 7 Hyperlinks

Our website contains so-called hyperlinks to websites operated by other providers. When you click on these hyperlinks, you will be redirected directly from our website to the websites of those other providers. You can tell this has happened, among other things, by the change in the URL. We cannot assume any responsibility for the confidential handling of your data on these third-party websites, as we have no control over whether these companies comply with data protection regulations. Please refer directly to these websites for information on how these companies handle your personal data.

 

§ 8 Rights of Affected Individuals

Under the GDPR, you, as a data subject whose personal data is being processed, have the following rights:

  • Pursuant to Article 15 of the GDPR, you may request information about your personal data that we process. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; any transfer to third countries or to international organizations; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.
  • Pursuant to Article 16 of the GDPR, you may request, without delay, the rectification of inaccurate personal data or the completion of your personal data stored by us.
  • Pursuant to Article 17 of the GDPR, you may request the erasure of your personal data stored by us, provided that the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
  • Pursuant to Article 18 of the GDPR, you may request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, if we no longer need the data, and if you object to its erasure because you need it to assert, exercise, or defend legal claims. You are also entitled to the right under Article 18 of the GDPR if you have objected to the processing pursuant to Article 21 of the GDPR.
  • Pursuant to Article 20 of the GDPR, you may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or you may request that it be transferred to another controller.
  • Pursuant to Article 7(3) of the GDPR, you may withdraw your consent at any time by notifying us. As a result, we will no longer be permitted to continue processing your data based on that consent in the future.

Gemäß Art. 77 DSGVO steht Ihnen das Recht zu, sich bei einer Aufsichtsbehörde zu beschweren. In der Regel können Sie sich hierfür an die Aufsichtsbehörde Ihres üblichen Aufenthaltsortes, Ihres Arbeitsplatzes oder unseres Unternehmenssitzes wenden.

 

§ 9 Right to Object

When we process your personal data on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data if there are reasons arising from your particular situation or if the objection is directed against direct marketing. In the case of direct marketing, you have a general right to object, which we will honor without requiring you to specify a particular situation.

 

§ 10 Data Security and Backup Measures

We are committed to protecting your privacy and treating your personal data confidentially. To prevent the manipulation, loss, or misuse of the data we store, we implement comprehensive technical and organizational security measures, which are regularly reviewed and adapted to technological advancements. This includes, among other things, the use of recognized encryption methods (SSL or TLS).
However, we would like to point out that, due to the nature of the Internet, it is possible that data protection rules and the aforementioned security measures may not be observed by other individuals or institutions outside our sphere of responsibility. In particular, data transmitted in unencrypted form—for example, via email—may be read by third parties. We have no technical control over this. It is the user’s responsibility to protect the data they provide against misuse through encryption or other means.