Privacy policy

Who is responsible and how do I reach you?

Responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

CODE LEAP AG
Marie-Curie-Str. 6
D-47475 Kamp-Lintfort
+49 (0) 69 8700634 30
hello@codeleap.de

Data Protection Officer

bridge4IT e.K.
Volker Wassermann
Siemensstraße 18
47608 Geldern
privacy@codeleap.de

What is it about?

This privacy policy meets the legal requirements for transparency in the processing of personal data, which is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We will inform you in the individual processing operations about the specific storage periods or criteria for storage. Irrespective of this, we store your personal data in individual cases for the purpose of asserting, exercising or defending legal claims and in the event of statutory retention obligations.

Who gets my data?

We only disclose your personal data that we process on our website to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis in the individual case (e.g. consent or safeguarding legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website, who process personal data on our behalf within the scope of commissioned processing in accordance with Art. 28 DSGVO, these may be recipients of your personal data. For more information on the use of processors and web services, please refer to the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your end device when you visit our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. You can find detailed information about the cookies used in the cookie settings or in the Consent Manager of this website.

Domain

www.codeleap.de

Name

_dd_s

Description

Not available

Storage duration

15 minutes

‍

Domain

codeleap.com

Name

_ga

Description

This cookie name is associated with Google Universal Analytics - an important update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client ID. It is included in every page request in a website and used to calculate visitor, session, and campaign data for website analytics reports. By default, it expires after 2 years, although this can be customized by website owners.

Storage duration

approx. 2 years

‍

Domain

codeleap.com

Name

_gat_gtag_UA_234218468_1

Description

Google Analytics

Storage duration

29 seconds

‍

Domain

codeleap.com

Name

_gid

Description

This cookie name is associated with google Universal Analytics. This seems to be a new cookie and as of spring 2017 no information is available from google. It seems to store and update a unique value for each page visited.

Storage duration

24 hours

What rights do I have?

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

Information according to Art. 15 DSGVO about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
Correction according to Art. 16 DSGVO of incorrect or incomplete data stored by us;
Deletion pursuant to Art. 17 DSGVO of the data stored by us, insofar as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
Restriction of processing pursuant to Art. 18 DSGVO, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.
Data portability pursuant to Art. 20 DSGVO, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) a DSGVO or on the basis of a contract pursuant to Art. 6 (1) b DSGVO and these have been processed by us with the aid of automated processes. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.
Objection according to Art. 21 DSGVO against the processing of your personal data, insofar as this is based on Art. 6 para. 1 lit. e, f DSGVO and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the assertion, exercise or defense of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
Revocation according to Art. 7 para. 3 DSGVO of your given consent with effect for the future.
Complaint pursuant to Art. 77 DSGVO to a supervisory authority if you are of the opinion that the processing of your personal data violates the DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

How is my data processed in detail?

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

Type and scope of processing

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 DSGVO.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 para. lit. f DSGVO. The collection of data and storage in log files is mandatory for the operation of the website. A right to object to the processing does not exist due to the exception according to Art. 21 para. 1 DSGVO.Insofar as the further storage of the log files is required by law, the processing is based on Art. 6 para. 1 lit. c DSGVO. There is no legal or contractual obligation to provide the data, however, the call of our website is not technically possible without providing the data.

Storage duration

The aforementioned data is stored for the duration of the website display and for technical reasons for a maximum of 7 days.

Contact form

Type and scope of processing

On our website we offer you to contact us via a prepared form. The information collected via mandatory fields is required to process the request. Furthermore, you can voluntarily provide additional information that is necessary from your point of view for the processing of the contact request.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

The processing of your data by using our contact form is carried out for the purpose of communication and processingyour request on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO.Insofar as your request relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b DSGVO. There is no legal or contractual obligation to provide your data, but the processing of your request is not possible without the provision of the information of the mandatory fields.As far as you do not want to provide this data, please contact us by other means.

Storage duration

If you use the contact form on the basis of your consent, we store the data collected for each inquiry for a period of three years, starting with the completion of your request or until you revoke your consent.

If you use the contact form in the context of a contractual relationship, we store the data collected for each inquiry for a period of three years from the end of the contractual relationship.

Talent pool for applicants / candidates

Nature and scope of processing

We collect and process the personal data of applicants. Corresponding data processing may also take place electronically, for example, when applicants submit application documents to us via the application portal (talent pool) on our website. On our website, we offer you the opportunity to submit applications to us for advertised vacancies via our application portal.

Your data will also only be stored in an applicant database beyond the scope of the current application process if you have given us your separate consent to do so.

Purpose and legal basis

The processing of your data in connection with your application is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of § 26 BDSG. In the event that your application documents are forwarded to third parties, in particular to companies affiliated with us, and your data is stored beyond the current application process, your data will be processed on the basis of Art. 6 (1) sentence 1 lit. a DSGVO. There is no legal or contractual obligation to provide your data, but the processing ofyour application is not possible without the provision of the information.

Storage duration

We store the collected data with your consent for a period of twelve months from the date of your registration.

Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to provide you with information and offers also within social networks and to offer you further ways to contact us and to inform yourself about our offers. In the following, we inform you about which data we or the respective social network process from you in connection with the call and use of our fan pages/accounts.

Data we process from you

If you wish to contact us via Messenger or DirectMessage via the respective social network, we generally process your user name via which you contact us and, if necessary, store other data provided by you insofar as this is required to process/respond to your request.

The legal basis is Art. 6 para. 1 sentence 1 f) DSGVO (processing is necessary to protect the legitimate interests of the controller).

(Static) usage data that we receive from the social networks

We receive automated statistics regarding our accounts via Insights functionalities. The statistics include, among other things, the total number of page views, likes, page activity and post interactions, reach, video views, and the percentage of men/women among our fans/followers.

The statistics contain only aggregated data that cannot be related to individual persons. You are not identifiable to us through this.

What data the social networks process from you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and therefore no user account for the respective social network is required.

Please note, however, that the social networks also collect and store data from website visitors without a user account when the respective social network is called up (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no influence whatsoever.You can find details on this in the privacy policy of the respective social network (see the corresponding links above).

If you want to interact with the content on our fan pages/accounts, e.g. comment on, share or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required.

To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is played both within and outside the respective social network. It cannot be ruled out that your data will be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the privacy policy/cookie policy of the social networks. There you will also find information on your rights and objection options.

Facebook page

When you visit our Facebook page, Facebook (Meta) collects, among other things, your IP address and other information that is present in the form of cookies on your PC. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: https://facebook.com/help/pages/insights.

It is not possible for us to draw conclusions about individual users by means of the statistical information transmitted. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect your data via our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content and the profile information you provide "publicly".

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 para. 1 f) DSGVO. If you as a user have given your consent to the data processing to the respective provider of the social network, the legal basis for the processing extends to Art. 6 (1) a), Art. 7 DSGVO.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

We are jointly responsible with Facebook for the personal content of the fan page. Data subject rights can be asserted with MetaPlatforms Ireland Ltd. as well as with us.

The primary responsibility for the processing of Insights Data lies with Facebook under the GDPR and Facebook complies with all obligations under the GDPR with respect to the processing of Insights Data, Meta Platforms Ireland Ltd. provides the essence of the Page Insights Supplement to Data Subjects.

We do not make any decisions regarding the processing of Insights data and storage duration of cookies on user terminals.

You can find further instructions directly atFacebook (Supplemental Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

For more information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use, please refer to the privacy policy/cookie policy of Facebook:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies

Instagram page

When you visit our Instagram page, Instagram collects, among other things, your IP address and other information that is present in the form of cookies on your PC. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more detailed information on this at the following link: https://facebook.com/help/pages/insights.

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 para. 1 f) DSGVO. If you, as a user, have given your consent to the respective provider of the social network, the legal basis for the processing extends to Art. 6 (1) a), Art. 7 DSGVO.

We are jointly responsible with Instagram for the personal content of the fan page. Data subject rights can be asserted with FacebookIreland as well as with us.

The primary responsibility for the processing of Insights data lies with Instagram under the GDPR and Instagram complies with all obligations under the GDPR with respect to the processing of Insights data, Facebook Ireland provides the essence of the Page Insights Supplement to Data Subjects.

We do not make any decisions regarding the processing of Insights data and any other information resulting from Art. 13 GDPR, including legal basis, identity of the controller and storage period of cookies on user terminals.

For further guidance, please refer directly toInstagram (Supplemental Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

LinkedIn page

LinkedIn is a social network ofLinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles of natural persons and company profiles. Users can maintain their existing contacts and make new ones within the social network. Businesses and other organizations can create profiles on which photos and other company information are uploaded to present themselves as employers and recruit employees. Other LinkedIn users have access to this information and can write their own articles and share this content with others. The focus of the network is on professional exchange on specialist topics with people who have the same professional interests.

When using or visiting the network, LinkedIn automatically collects data from the users or visitors, for example user name, job title and IP address. This is done with the help of various tracking technologies. LinkedIn provides information, offers and recommendations to users on the basis of the data collected in this way.

We collect your data via our company profile only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content and the profile information you provide "publicly".

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) fDSGVO. If you, as a user, have given your consent to the data processing vis-à-vis the respective provider of the social network, the legal basis for the processing extends to Art. 6 (1) a, Art. 7 DSGVO.

We are jointly responsible with LinkedIn for the personal content of our company profile. Data subject rights can be asserted with LinkedInInc. as well as with us.

We do not make any decisions regarding the data collected on LinkedIn's site using tracking technologies.

For more information on LinkedIn, visit: https://about.linkedin.com.

For more information aboutLinkedIn privacy, please visit: https://www.linkedin.com/legal/privacy-policy.

Further information on storage duration/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use atLinkedIn can be found at: https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy.

AWS CloudFront

Nature and scope of processing

We use AWS CloudFront to properly deliver the content on our website. AWS CloudFront is a service provided by Amazon Web Services, Inc. that acts as a content delivery network (CDN) on our website.

A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Amazon Web Services, Inc. whereby yourIP address and, if applicable, browser data such as your user agent are transmitted. This data is processed solely for the purposes described above and to maintain the security and functionality of AWS CloudFront.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by AmazonWeb Services, Inc. Further information can be found in the privacy policy for AWS CloudFront: https://aws.amazon.com/de/privacy/.

Google Fonts

Nature and scope of processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you establish a connection to servers of Google Ireland Limited, whereby yourIP address is transmitted.

Purpose and legal basis

The use of Google Fonts is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by GoogleIreland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

Google ReCaptcha

Nature and scope of processing

We use Google Analytics from GoogleIreland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of views of our online offer, visited pages and the length of stay of visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

The use of Google Analytics is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

Storage duration

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google IrelandLimited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Tag Manager

Nature and scope of processing

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GoogleTag Manager is used to manage website tags through one interface and allows us to control the exact integration of services on our website.

This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

Storage duration

The concrete storage period of the processed data cannot be influenced by us, but is determined by GoogleIreland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

JSDelivr CDN

Nature and scope of processing

We use JSDelivr CDN to properly deliver the content of our website. JSDelivr CDN is a service of ProspectOne, which acts as a content delivery network (CDN) on our website.

A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Prospect One, Krolewska 65a, Krakow,Malopolskie 30-081, Poland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of JSDelivr CDN.

Purpose and legal basis

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Prospect One. Further information can be found in the privacy policy for JSDelivr CDN:https://www.jsdelivr.com/privacy-policy-jsdelivr-net.

Webflow

Nature and scope of processing

Our website was created using the Webflow website building system. Webflow is a service of Webflow,Inc. and offers web development technology, web design and layout tools,domain hosting and other applications for marketing and workflow management.

We use Webflow, among other things, forWeb hosting and the presentation of our website. In addition, Webflow collects statistical data about visits to our website.

The following data is usually transmitted: the website accessed, the date and time of access, the volume of data transmitted, whether a request was successful, the browser type and version, the user's operating system, the website previously visited (referrer) and the IP address.

These log data are processed exclusively for the above-mentioned purposes, as well as for maintaining the security, functionality and optimization of the Webflow offer.

Purpose and legal basis

The use of the service is based on our legitimate interests, i.e. interest in a secure and efficient provision, as well as the optimization of our online offer in accordance with Art. 6 para. 1 lit.f. DSGVO.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined byWebflow, Inc. Further information can be found in the privacy policy for Webflow:https://webflow.com/legal/privacy.

weglot

Type and scope of processing

We have integrated components of weglot on our website. weglot is a service of Weglot SAS and offers translation solutions for websites andWeb applications.

When you use the translation function of our website, you establish a connection to servers of Weglot SAS, 138 Rue Pierre Joigneaux, 92270 Bois-Colombes, France, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of weglot.

Purpose and legal basis

The use of weglot is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

Storage duration

The concrete storage period of the processed data cannot be influenced by us, but is determined by weglotSAS. Further information can be found in the privacy policy for weglot: https://weglot.com/privacy/.