Website Privacy Policy
Preamble
Welcome to the Datapods website! We consider the protection of your data and your privacy to be of the utmost importance. Because nobody has the desire (or time) to read complete privacy policies, we will provide a short summary. The short summary can be found next to the legally binding, complete privacy policy for our website and our app. Have fun scrolling!
Datenschutzerklärung Webseite Einleitung
According to Art. 4 No. 1 GDPR, personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly. Further information on this can be found in Art. 4 No. 1 GDPR.
This privacy policy can be accessed, saved and printed at any time at https://www.datapods.app/privacy-policy-website.
Insofar as we cite our legitimate interest or a legitimate interest of a third party (Art. 6 para. 1 lit. f) GDPR) as the legal basis for the processing of personal data, you have the right to object in accordance with Art. 21 GDPR:
In accordance with Art. 21 GDPR, you have the right to object to the processing of personal data at any time. We will then no longer process the personal data for the purposes of direct marketing or related profiling.
We will also not process your personal data for other purposes following an objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (see, for example, Art. 21 (1) GDPR, so-called “limited right to object”). In this case, you must provide reasons for the objection that arise from your particular situation.
You can also object to the processing of your personal data for reasons arising from your particular situation, for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless the processing is necessary for the performance of a task carried out in the public interest (see Art. 21 para. 6 GDPR).
We will also inform you separately about your right to object in the individual sections (e.g. by stating: “You have the right to object”), if this right exists. There you will also find further information on exercising your right to object.
In order to keep the following privacy policy concise, we provide links at various points to information and data protection notices on external websites (see also the section “Social networks & external links” in this privacy policy). We make every effort to keep the links that we list in this privacy policy up to date. Nevertheless, due to the constant updating of the websites, it cannot be ruled out that links may not function correctly. If you notice such a link, we would be pleased if you let us know so that we can update the link.
Who is responsible for processing my personal data and how can I contact the data protection officer?
You can contact our data protection officer by email at finn@datapods.app.
The controller within the meaning of Art. 4 No. 7 GDPR for the processing of personal data is:
Datapods GmbH
Kölnstraße 179b 53111 Bonn
E-mail: kontakt@datapods.app
represented by: Jakob Endler, Lukas Stein, Finn Rübo, David Goldschmidt
Webflow
We use Webflow on our website. Webflow is operated by Webflow, Inc.398 11th Street, 2nd Floor, San Francisco, CA 94103.
Each time you visit our website, Webflow, which is our server host and acts as a sub-processor for us, automatically collects data and information from your device's system and stores it in server log files. This data is information that relates to an identified or identifiable natural person (here: website visitor). The data is automatically transmitted by your browser when you visit our website. The following data is collected:
- Date/time of accessing our website or calling up a function (request to the host provider's server),
- Internet protocol addresses (IP addresses),
- character string of the user agent that identifies the browser or operating system to the server,
- installed fonts,
- Mime types, i.e. which data the web server sends - for example, whether it is a plain text document, an HTML document or a PNG image,
- Browser language and time zone,
- Silverlight data,
- installed plugins,
- HTTP header,
- screen resolution.
The purpose of this processing is to make our website accessible from your device and to enable our website to be displayed correctly on your device or in your browser. Furthermore, we use the data to optimise our website and to ensure the security of our systems. This data is not analysed for marketing purposes.
The legal basis for the processing of personal data described here is Article 6 para. 1 lit. f GDPR. Our legitimate interest is to present you with a website that is optimised for your browser and to enable communication between the server of our host provider and your end device. In particular, the processing of your IP address is necessary for the latter. As we do not host our website ourselves, this would not be possible without the processing of personal data by a processor. In addition, Webflow has a legitimate interest in the (personal) data collected in order to offer its own services, to ensure the security of the product, for analysis purposes and for product development.
The data is stored by Webflow for a maximum of 12 months to ensure the reliability and stability of the website (e.g. to prevent DDOS attacks) and to provide the Webflow service to its customers.
Webflow also transfers the collected personal data to servers in the USA and processes it there. An adequacy decision pursuant to Art. 45 GDPR in the form of the EU-US Data Privacy Framework has been in place since 10 July 2023. According to this, the USA can ensure an adequate level of protection for personal data compared to the EU. As a US company, Webflow is certified by the responsible US Department of Commerce as a participant in the Data Privacy Framework.
Further information on this can be found in Webflow's General Privacy Policy and the EU and Switzerland-specific Privacy Policy.
According to its own information, Webflow uses the following sub-processors: https://webflow.com/legal/subprocessors.
Right to object
You have the right to object to the processing of your data. You can send or inform us of your objection at any time (e.g. by e-mail to kontakt@datapods.app).
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may mean that you will not be able to use our website or will not be able to use it to its full extent.
jsDelivr CDN
We use jsDelivr CDN on our website. jsDelivr CDN is operated by Volentio JSD Limited,Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB.
We use the open source services of jsdelivr CDN so that we can deliver our individual websites to you quickly and flawlessly on any device.
This is a content delivery network (CDN). A CDN is a network of regionally distributed servers that are connected via the Internet. As a result, content, especially large files, can be delivered quickly and optimally, even during large load peaks.
jsDelivr is structured in such a way that JavaScript libraries can be downloaded and hosted on npm and Github servers. However, WordPress plugins can also be loaded, provided they are hosted on WordPress.org. In order to provide this service, your browser can send personal data to jsDelivr. jsDelivr can thus store and collect user data such as:
- IP address,
- browser type,
- browser version,
- which website is loaded,
- time and date of the page visit.
The privacy policy of jsdelivr expressly states that the company does not use cookies or other tracking services and only stores the collected data for a short period of time.
jsDelivr explains further: “The processing of IP addresses is essential for jsDelivr in order to provide the user with the desired data from the jsDelivr servers. In addition, the data is processed solely for statistical purposes in order to determine users' countries of origin, which is important for the expansion of the CDN infrastructure by placing servers in areas of the world where they are particularly in demand. jsDelivr does not process IP addresses for purposes such as marketing or reselling them to others. They are also not stored long-term. Instead, the data is aggregated as quickly as possible, often within hours, and then deleted.”
We have a legitimate interest in using jsdelivr CDN to optimize our online service and make it more secure. Without jsDelivr, certain elements of the website cannot be loaded or rendered and certain functionalities cannot be offered. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests).
Further information on data processing by the software service jsDelivr CDN can be found in the company's privacy policy at: https://www.jsdelivr.com/privacy-policy-jsdelivr-net.
jsDelivr CDN uses the following sub-processors according to its own information: https://www.jsdelivr.com/terms/sub-processors.
Right to object
You have the right to object to the processing of your data. You can send or inform us of your objection at any time (e.g. by e-mail to kontakt@datapods.app).
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may mean that you will not be able to use our website or will not be able to use it to its full extent.
Cookies
Our website does not use cookies.
PostHog
We use PostHog on our website. PostHog is operated by PostHog Inc, 965 Mission Street, San Francisco, CA 94103 USA.
PostHog can record and reproduce your behavior on our website. The storage of this data is limited in time and is used exclusively to improve our service based on your needs. This allows personal data to be stored and evaluated – in particular the user's activity (which subpages have been visited, which elements have been clicked on), device and browser information (in particular the IP address and operating system) and a tracking code (pseudonymized user ID). The information collected in this way is transmitted by PostHog to a server in Germany and stored there.
The personal data in the form of recordings is deleted after 3 months. The user's activities are stored pseudonymized for as long as they are required to fulfill the purpose of processing. The data is deleted as soon as it is no longer required to achieve the purpose.
The legal basis for processing the data that is processed when consent is obtained is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in optimizing our online offering.
Further information on the processing of data by PostHog can be found in PostHog's privacy policy, available at: https://posthog.com/privacy.
According to its own statements, PostHog uses the following sub-processors: https://posthog.com/dpa.
Right to object
You have the right to object to the processing of your data. You can send or inform us of your objection at any time (e.g. by e-mail to kontakt@datapods.app).
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may mean that you will not be able to use our website or will not be able to use it to its full extent.
MailerLite
We use MailerLite on our website to send newsletters. MailerLite is operated by MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89 Ireland.
The data you enter for the purpose of receiving the newsletter (e.g. email address) is stored on MailerLite's servers. MailerLite complies with the requirements of the GDPR. You can find more information on this in MailerLite's Security Statement and Privacy Policy.
MailerLite is a service that can be used to organize and analyse the sending of newsletters. Our newsletters sent with MailerLite enable us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked on. Conversion tracking can also be used to analyze whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. Further information on data analysis by MailerLite newsletters can be found at: https://www.mailerlite.com/features/newsletter-reports.
The legal basis for the processing of personal data described here is the consent given when registering to receive the newsletter in accordance with Art. 6 para. 1 lit. a GDPR.
The legal basis for processing the data that is processed in the context of obtaining consent is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in being able to prove that you have given your consent to receive our newsletter (Art. 7 para. 1 GDPR).
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and MailerLite's servers after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.
You can find more details in MailerLite's privacy policy, available at: https://www.mailerlite.com/legal/privacy-policy.
MailerLite states that it uses the following sub-processors: https://www.mailerlite.com/legal/data-processing-agreement.
Right to object
You have a to object. You can revoke your consent at any time without giving a reason by unsubscribing from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website or by sending an email to kontakt@datapods.app.
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may mean that you will not be able to use our website or will not be able to use it to its full extent.
Contact form
There is a contact form on our website that you can use to contact us electronically. If you contact us via this contact form, the data entered in the input fields will be processed by us.
This includes the following data as mandatory information:
The information you enter in the “Ask away” field
- name,
- e-mail address.
You can also add further data as voluntary information. This may simplify and speed up the processing of your request. The following data is potentially affected:
The information that results from your attached documents. We treat mandatory and voluntary information in the same way. The mandatory information is necessary in order to contact you and process your request.
The following data is also stored when you submit the form:
- your IP address,
- date and time of sending the form.
Please note that the scope of the personal data collected as part of the contact form also depends on what data you yourself disclose in the contact form, in particular in the “Ask away” field and by attaching your documents.
The purpose of processing the personal data within the scope of the mandatory information and the voluntary information is to process the contact request and to be able to contact you for the purpose of your request.
The legal basis for the processing of the personal data provided by you in the context of the contact is Art. 6 para. 1 lit. b GDPR.
The other personal data processed during the sending process (IP address, date and time of sending) serve to prevent misuse of our contact form.
The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in preventing or being able to prove misuse of our contact form.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
The recipient of the data is our server host Webflow, which works for us as part of a data processing agreement. You can find out more about Webflow's data protection practices under the “Webflow” heading of this privacy policy.
Right to object
You have the right to object to the processing of your data. You can send or inform us of your objection at any time (e.g. by e-mail to kontakt@datapods.app).
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may mean that you will not be able to use our contact form.
How to contact us
You have the option of contacting us by post, telephone or e-mail.
If you contact us by post, we may in particular process your address data (e.g. surname, first name, street, place of residence, zip code), the date and time of receipt of the mail and the data resulting from your letter itself. Depending on the data you provide here, we will then contact you by telephone or e-mail and, if necessary, call you back or write to you.
If you contact us by telephone, your telephone number and, if necessary, your name, e-mail address, time of the call and details of your request will be processed during the call.
If you contact us by e-mail, your e-mail address, the time of the e-mail and the data resulting from the message text (including attachments, if applicable) will be processed.
The purpose of processing the above-mentioned data is to process the contact request and to be able to get in touch with the enquirer to respond to the request.
The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to answer your inquiries.
The personal data will only be processed for as long as is necessary to process the contact request.
If you contact us via digital means, the recipient of the data is our server host Webflow, which works for us as part of a data processing agreement. You can find out more about Webflow's data protection practices under the “Webflow” heading of this privacy policy.
Right to object
You have the right to object to the processing of your data. You can send or inform us of your objection at any time (e.g. by e-mail to kontakt@datapods.app).
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may mean that you will not be able to contact us.
Social networks & external links
In addition to this website, we also maintain presences in various social media, which you can access via corresponding buttons on our website. If you visit such a presence, personal data may be transmitted to the provider of the social network.
We would like to point out that user data may also be transmitted to a server in a third country and may therefore be processed outside the European Union.
It is possible that, in addition to storing the specific data you enter in this social medium, further information may also be processed by the social network provider.
In addition, the provider of the social network may process the most important data of the computer system from which you visit it – for example, your IP address, the processor type and browser version used, including plug-ins.
If you are logged in with your personal user account of the respective network while visiting such a website, this network can assign the visit to this account.
The purpose and scope of the data collection by the respective medium as well as the further processing of your data there and your rights in this regard can be found in the respective provisions of the respective controller, e.g. at:
Facebook (Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA): Facebook privacy policy: https://www.facebook.com/about/privacy/,Opt-out option: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com/,
X (Twitter) (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA): Privacy Policy https://twitter.com/de/privacy
Opt-out option:: https://twitter.com/personalization
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
Privacy policy and opt-out option: https://help.instagram.com/155833707900388
Google and YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA):Privacy policy: https://policies.google.com/privacy,Opt-out option: https://adssettings.google.com/authenticated,
Soundcloud (SoundCloud Limited, c/o Third Floor, 20 Old Bailey, London, EC4M 7AN, UK)Privacy policy: https://soundcloud.com/pages/privacy,Cookie policy: https://soundcloud.com/pages/cookies,
Spotify (Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden)Privacy policy: https://www.spotify.com/de/legal/privacy-policy/,Opt-out option: https://www.spotify.com/de/privacy/#privacy-center-control-section,
Linkedin (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)Privacy policy: https://www.linkedin.com/legal/privacy-policy,Cookie policy: https://www.linkedin.com/legal/cookie-policy.
We also point out that our website contains further links to external third-party websites, where we have no influence on the processing of data on these third-party websites.
Data security
We use technical and organizational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Despite regular checks, however, complete protection against all risks is not possible.
Withdrawal
You have the right to withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing based on consent before its withdrawal.
Rights of data subjects
You have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to object (Art. 21 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 et seq. GDPR)
Right to data portability (Art. 20 GDPR)
For requests of this kind, please contact kontakt@datapods.app. Please note that we must ensure that we are actually dealing with the data subject for such requests.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority.
Automated decision-making does not take place on our website.
Status: October 2024