Privacy Policy

1. General information

We take the protection of your personal data very seriously. This Privacy Policy explains which personal data we collect and for what purposes we use it. You have the right at any time to obtain information about, and to request the deletion of, the data we hold about you.

2. Hosting

We host the content of our website with an external service provider. The personal data collected in this context is stored on that provider's servers.

Provider: terralink networks GmbH, Wendenstraße 375, 20537 Hamburg.

Processing is carried out on the basis of Art. 6(1)(b) and (f) DSGVO (GDPR). A data processing agreement has been concluded with the provider.

3. General information and mandatory disclosures

Controller

REDCODE.DE® – Jan-Sören Steen und Christiane Glaser GbR
Hummelsbütteler Landstraße 116, 22339 Hamburg
Phone: +49 40 40188751
Email: info@redcode.de

Data Protection Officer

Anne-Rose Sieland
Hummelsbütteler Landstraße 116, 22339 Hamburg
Phone: +49 40 40188751
Email: datenschutz@redcode.org

Storage period

Your personal data is deleted once the purpose of processing no longer applies, provided that no statutory retention periods stand in the way.

Legal bases

Depending on the case, the processing of your data is based on Art. 6 DSGVO (GDPR) (consent, performance of a contract, legal obligations or legitimate interests) as well as on § 25 TDDDG (German Telecommunications Digital Services Data Protection Act).

Your rights

Within the scope of the applicable statutory provisions, you have the following rights:

• Right of access to the data processed
• Right to rectification and erasure
• Right to restriction of processing
• Right to object to processing
• Right to withdraw consent that has been given
• Right to data portability
• Right to lodge a complaint with a supervisory authority

SSL and TLS encryption

For security reasons, this website uses SSL or TLS encryption to protect the data transmitted.

Objection to advertising emails

We hereby object to the use of contact data published in connection with the mandatory imprint obligation for the purpose of sending advertising that has not been expressly requested.

4. Data collection on this website

Server log files

The provider automatically collects and stores information in server log files, including browser type, operating system, referrer URL, host name, time of the request and IP address. Processing is carried out on the basis of Art. 6(1)(f) DSGVO (GDPR) (legitimate interest in a technically error-free presentation).

Contact form

When you submit an inquiry via the contact form, your details are stored for the purpose of processing the inquiry. The legal basis is Art. 6(1)(b) or (f) DSGVO (GDPR). The data is deleted once the inquiry has been dealt with or you request its deletion, provided that no statutory retention periods stand in the way.

Inquiry by email, phone or fax

If you contact us by email, phone or fax, your inquiry, including all resulting personal data, is stored by us. The legal basis is Art. 6(1)(b) or (f) DSGVO (GDPR). The data is stored until you request its deletion or the purpose no longer applies.

Communication via WhatsApp

Provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Communication is end-to-end encrypted; however, WhatsApp receives metadata. Any data transfer to the USA is carried out on the basis of standard contractual clauses and DPF certification. A data processing agreement is in place. The legal basis is Art. 6(1)(f) DSGVO (GDPR) or your consent.

5. Analytics tools and advertising

Google Ads

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables keyword and audience targeting. Any data transfer to the USA is carried out on the basis of standard contractual clauses and DPF certification. The legal basis is Art. 6(1)(a) DSGVO (GDPR) and § 25(1) TDDDG (consent, revocable at any time).

Google conversion tracking

Conversion tracking records user actions without identifying the individual. The legal basis is Art. 6(1)(a) DSGVO (GDPR) and § 25(1) TDDDG (consent, revocable at any time). DPF certification is in place.

6. Newsletter

Newsletter data

For the newsletter, we collect your email address and confirmation information on the basis of your consent (Art. 6(1)(a) DSGVO (GDPR)). The data is stored until you unsubscribe. After that, your address is added to a blocklist in order to prevent future mailings (legitimate interest, Art. 6(1)(f) DSGVO (GDPR)). You may object to this storage where your interests outweigh ours.

Sending the newsletter to existing customers

We send direct advertising to existing customers on the basis of Art. 6(1)(f) DSGVO (GDPR) in conjunction with § 7(3) UWG (German Act Against Unfair Competition). You may unsubscribe at any time. After you unsubscribe, your data is stored in a blocklist (legitimate interest). A right to object exists.

7. Plugins and tools

Google Fonts (local hosting)

The fonts used (Google Fonts) are installed locally. No connection to Google's servers is established in the process.

8. eCommerce and payment providers

Customer and contract data

We collect and process customer and contract data in order to establish and give effect to our contractual relationships, on the basis of Art. 6(1)(b) DSGVO (GDPR). The data is deleted after completion of the order and expiry of the statutory retention periods.

9. Audio and video conferencing

For communication, we sometimes use online conferencing tools. Depending on the case, this involves processing your email address, phone number, conference duration, number of participants, metadata, IP addresses, device IDs, technical connection data and the content exchanged (recordings, chats, files).

The processing serves communication with contractual partners (Art. 6(1)(b) DSGVO (GDPR)) and the simplification of communication (legitimate interest, Art. 6(1)(f) DSGVO (GDPR)). Where consent is given, it forms the legal basis. Data collected by us is deleted at your request. The storage period at the tool providers is beyond our control.

Google Meet

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. DPF certification is in place, and a data processing agreement has been concluded.