Privacy policy

This is a courtesy translation. Only the German version is legally binding.

1. General

Protecting your personal data is important to us. We process your data in accordance with the applicable data protection provisions, in particular the European General Data Protection Regulation (GDPR) and the relevant national regulations.

“Processing” covers any operation in connection with personal data, such as collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, transmission, dissemination, restriction, erasure or destruction.

“Personal data” means any information relating to an identified or identifiable natural person.

2. Controller and data protection officer

Controller:
Code Piraten GmbH
Am Ruhmbach 44, 45149 Essen, Germany
Email: kontakt@codepiraten.com

External data protection officer:
Jens Reininghaus
c/o ETL Rechtsanwälte GmbH Rechtsanwaltsgesellschaft
Eiler Straße 3B, 51107 Köln, Germany
Email: info@dsb-r.de

3. Processing of your data

a) When you visit the website

When you access our website, the following data is automatically stored in server log files:

  • Date and time of access
  • Browser type and version
  • Operating system used
  • Previously visited page (referrer URL)
  • Amount of data transferred and access status
  • IP address and requesting provider

This data is processed to enable use of the website, for statistical purposes, to improve our services and to defend against unlawful cyber attacks. Legal basis: Art. 6(1)(b) and (f) GDPR.

b) When you use our services

Personal data is only processed if this is permitted by law or you have given your consent. Processing takes place for the performance of a contract in accordance with Art. 6(1)(b) GDPR.

In addition, data is processed to assert legal claims (Art. 6(1)(f) GDPR) and to comply with statutory retention obligations (Art. 6(1)(c) GDPR), and may be transferred to carefully selected service providers (Art. 28 GDPR).

For the data that organisations process in the depositoo application about people who borrow items, the respective organisation is the controller; Code Piraten GmbH is the processor on the basis of a data processing agreement.

4. Use of cookies

This website does not set any cookies and does not include any analytics or tracking services. Fonts are loaded from our own server.

5. Storage and deletion periods

Personal data is routinely deleted or blocked as soon as the purpose of processing no longer applies, unless there are statutory retention obligations (Art. 6(1)(c) GDPR).

6. Your rights as a data subject

You have the following rights at any time:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure / “right to be forgotten” (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Protection against decisions based solely on automated processing (Art. 22 GDPR)

Please send requests to the contact details given in section 2.

7. Right to object

You may object at any time, on grounds relating to your particular situation, to the processing of your data where it is based on Art. 6(1)(e) or (f) GDPR. In the case of direct marketing, you may object at any time without giving reasons.

8. Right to withdraw consent

You may withdraw any consent you have given under data protection law at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

9. Right to lodge a complaint with a supervisory authority

If you believe that your data protection rights have been infringed, you can contact the competent supervisory authority of your federal state or the supervisory authority at our company’s registered office.

10. Obligation to notify

We notify all recipients of personal data of any rectification, erasure or restriction of processing pursuant to Art. 16, 17(1) and 18 GDPR, unless this proves impossible or involves disproportionate effort.

11. Necessity of providing data

Personal data is collected and processed for the performance of a contract or to take steps prior to entering into a contract. Without the required data, a contract cannot be concluded.

12. Automated decisions / profiling

No automated decision-making and no profiling within the meaning of Art. 22 GDPR takes place when you visit this website.

13. Data security

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved in line with technological developments.

14. Questions and comments

If you have any questions or comments about data protection, please use the contact details given in section 2.