Privacy

Privacy Policy

This Privacy Statement gives you an overview of the processing of your personal data in the context of the use of the offers and online services in connection with the Websites on codifycrm.com (the “Website”). This Privacy Statement also informs you about your rights under the EU Data Protection Regulation (“GDPR”) and the means to control your personal data and protect your privacy. Personal data is defined as all information that makes it possible to identify you as a person.

Responsible for data processing within the framework of the Website is CodifyCRM (hereinafter “CodifyCRM” or “we”). If you have any questions regarding this data protection declaration or data processing within the framework of the Website, you can also contact our company privacy officer, at contacto@codifycrm.com.

Please note:

You may not use the Website or use it only to a limited extent if you do not provide us with certain data or if you object to the use of this data.

Which personal data we process on our Website and from which sources they originate: When we make our Website available to you, we process personal data from various sources. On the one hand, this is data that we automatically process for each visitor when the Website is accessed. However, this may also include data which you have voluntarily provided to us or which is only processed when you use our services.

Data that we automatically collect when you visit our Website:

As soon as you visit the Website, you send technical information to our web servers, which we store in server log files. This happens regardless of whether you subsequently contact us (e.g. via the contact form). In any case, we collect the following access and web access data (which we call “Usage Data”):

• The date and time of the visit and the duration of the use of the Website;

• The IP address of your device;

• The referral URL (the website from which you may have been referred);

• The visited subpages of the Website; and

• More information about your device (device type, browser type and version, settings, installed plug-ins, operating system).

We process the Usage Data to enable you to use the Website and to ensure the functionality of the Website. In addition, we process Usage Data in order to analyze the performance of the Website, to continuously improve the Website and to correct errors or to personalize the content on the Website for you. We also process the Usage Data to ensure IT security and the operation of our systems and to prevent or detect misuse, in particular, fraud. These server log files are deleted after a maximum of 7 days. Our legal basis for the processing of this data is Art. 6 (1) lit. f) GDPR.

Cookies and other tracking tools: We use cookies for the automatic processing of Usage Data. Cookies are small text files that you upload to your device when you visit our web pages and store the above information about you. You can find out more about the use of cookies on the Website [here](link a la política de cookies).

Data that you transmit to us yourself:

In addition to the data we receive from all visitors, we also process other data when you use our contact form and/or download media from our website. You can see the details in the contact form. We process this data in order to process your request and will process the correspondence in accordance with the applicable rules for business letters under German law for a period of 6 years from the end of the calendar year during which your request has been submitted. The legal basis in each case is Art. 6 (1) GDPR and § 25 TTDSG.

Data we process when providing the CodifyCRM cloud integration to our customers:

Please note that the provider who has implemented the integration in her online shop or services is solely responsible for data processing using the CodifyCRM integrations. In this case, CodifyCRM will only act as an order processor. This means that CodifyCRM, according to a contractual agreement, is strictly subject to the customer’s instructions and will process all data as the customer’s technical service provider without its own decision-making authority with regard to the processing of personal data by the customer. In this respect, please access the data protection information of the customer for more information.

The purposes for which we process your data:

We have already informed you above for which purposes we process your data in individual cases. In addition, we may process your data for other purposes. This includes, for example, passing on your personal data to third parties if we are legally obliged to do so, but also the assertion of legal claims on our part or the defence against legal disputes. The legal basis in these cases is either a legal obligation (Art. 6 (1) lit. c) GDPR) or our legitimate interests.

To whom we forward your data:

Your personal data will only be passed on to third parties if this is necessary for the provision of the Website or the CodifyCRM integration. The data recipients also include the third-party providers mentioned in our overview of cookies and analytics tools. For information about the third parties we use, such as for processing customer inquiries or web analytics, please see the information about cookies, web analytics and other third-party technologies at the end of this Privacy Statement. All third-party providers have made contractual agreements with us to process data exclusively within the scope of our instructions (so-called data processing agreements).

We also transmit your data to our hosting service provider, which enables us to provide the Website. This is Digital Ocean.

Data processing outside the EEA: We do not transmit your access and account data to any third parties without implementing appropriate safeguards.

We do host your data on Digital Ocean. Although the servers of Digital Ocean are located in Frankfurt, Germany, your data are still legally transmitted to the USA, i.e. a country outside the EEA (a so-called “Third Country”). For some of the services of our other service providers (the list can be found at the end of this Privacy Statement), a transfer to the USA is required as well. In all cases, we will ensure that an adequate level of data protection is guaranteed at all times. However, for some specific services, CodifyCRM may use data processors or business partners located outside of the EU. Some of your Personal Data may therefore be transferred to them for the strict purposes of their services. In such cases and in accordance with the regulations in force, CodifyCRM requires its data processors to provide the necessary safeguards to ensure regulated, secure transfers, mainly by requiring them to sign the European Commission’s standard contractual clauses. Where required, an applicable Transfer Impact Assessment will be conducted to ensure the security of the data transferred.

Storage duration:

We process and store your personal data to the extent necessary to fulfil our contractual or legal obligations. Therefore, we store the data as long for as our contractual relationship with you exists and after termination only to the extent and for as long as legally required. If data is no longer required to fulfil legal obligations (e.g. under tax or commercial law), it is deleted regularly unless further processing is necessary to preserve evidence or defend against legal claims against us. For the preservation of evidence necessary is e.g. your IP address and the exact time of the granting, if you have given us a consent.

User profiles:

We use your data to create a user profile. This means that we use your information to provide you with a personalized Website based on your personal preferences and interests and to provide you with customized offers based on your previous behavior. However, we will never process and analyze your personal data within the framework of this user profile in such a way that this leads to an automated decision which is legally valid for you or which similarly significantly affects you.

Your legal rights under the GDPR:

You can assert the following rights against us within the framework of the GDPR with regard to your personal data:

• Your right to information and access pursuant to Article 15 GDPR,

• Your right to rectification pursuant to Article 16 GDPR,

• Your right to erasure pursuant to Article 17 GDPR,

• Your right to restriction of processing pursuant to Article 18 GDPR and

• Your right to data portability pursuant to Article 20 GDPR.

You also have the right to lodge a complaint with the competent data protection supervisory authority (Article 77 GDPR).

In addition, you can also revoke your consent to the processing of your personal data at any time. However, this revocation only applies for the future. Any processing that took place before the revocation remains unaffected by this. If you would like to exercise your rights as a data subject, you can also do so (as well as receive further information) by contacting us at: contacto@codifycrm.com.

Information about your right of objection according to article 21 GDPR:

In addition to the rights already mentioned, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which takes place on the basis of Article 6 (1) lit. f) GDPR (Data Processing on the basis of a balance of interests). If you object, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweighs your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

You also have the right at any time to object to the processing of your personal data for the purpose of direct marketing (including the subscription to our newsletter) without incurring any costs other than the transmission costs according to the basic tariffs; this also applies to the creation of a user profile (so-called “profiling”), insofar as this is associated with direct marketing. If you object, we will no longer process your personal data in the future.

Please note that if you do not provide us with certain data or if you object to the use of this data, you will not use the Website or only use it to a limited extent.

The objection can be filed informally and is to be addressed to: contacto@codifycrm.com.

Modification of this Privacy Statement:

In order to keep this information up to date, this Privacy Statement will be modified when the underlying data processing is changed. We will publish any intended changes to this Privacy Statement in advance if its content changes and not only editorial changes (e.g. to correct typographical errors) are made.