You are here: Home / Privacy Policy

Privacy Policy

In the following we provide information about the collection of personal data when using our website(s). Personal data are all data that can be related to you personally, e.g. name, address, email addresses, user behavior. We have taken extensive technical and operational precautions to protect your data from accidental or deliberate manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress

Responsible party for data processing:


The responsible party in accordance with Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is catworkx GmbH, Schellerdamm 16, 21079 Hamburg, Germany, 
[Email protection active, please enable JavaScript.] (see legal notice). 

How to contact the data protection officer:

You can reach our data protection officer at [Email protection active, please enable JavaScript.] as well as via our postal address with the addition "for the attention of the data protection officer". 

Your rights:

You have the following rights with regard to the personal data concerning you:

General rights:

You have a right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), opposition to processing (Art. 21 GDPR) and data transferability (Art. 20 GDPR). Insofar as processing is based on your consent, you have the right to revoke this consent with effect for the future.

Rights in data processing according to legitimate interest:

Pursuant to Art. 21 para. 1 GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Art. 6 para. 1 e GDPR (data processing in the public interest) or Art. 6 para. 1 f GDPR (data processing to safeguard a legitimate interest); this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data, unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Rights for direct marketing:

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is connected with such direct marketing, in accordance with Article 21 para. 2 of the GDPR.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Right of appeal to a supervisory authority:

You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us.

 

Collection of personal data when visiting our website:

In the case of purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security. The legal basis for this is Art. 6 para. 1 f GDPR:

IP address of your request, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system and its interface, language and version of the browser software.

 

Contact by email or contact form:

When you contact us by email or via a contact form, the data you provide (your email address, your name and telephone number if applicable) will be stored by us in order to answer your questions. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the execution of our business activities. The information required to answer your request is specially marked. If we ask you to enter data via our contact form which are not absolutely necessary for processing your enquiry, these details will help us to specify your request and to improve the processing of your enquiry. Any communication of this information is expressly on a voluntary basis and with your consent, Art. 6 para.1 lit. a GDPR. As far as this involves information on communication channels (e.g. email address, telephone number), you also agree that we may contact you via these communication channels in order to answer your request. You can of course revoke this consent at any time in the future.

Your data, which we have received in the course of contacting you, will be deleted as soon as they are no longer required for the purpose of their collection, your request is fully processed and no further communication with you is necessary or desired.

 

catworkx ticket system - https://jira.catworkx.de:

As a customer you have the possibility to register with us and create a customer account. The customer account gives you access to our support system. For the registration we collect and store the following data:

Title, first name, last name, email (username), password.

We use the so-called double-opt-in procedure for registration, i.e. your registration is not complete until you have confirmed your registration by clicking on the link contained in a confirmation email sent to you for this purpose. The provision of the above-mentioned data is obligatory; you can provide all further information voluntarily by using our portal.

After successful registration you will receive personal, password-protected access and can view and manage the data you have stored. Registration is voluntary but may be a prerequisite for using our services. If you use our portal, we store the data required for the fulfilment of the contract, including details of the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the time of your use of the portal, unless you delete them first. You can manage and change all data in the protected customer area. Legal basis is Art. 6 para. 1 a, b and f GDPR.  

 

catworkx project system - https://confluence.catworkx.de:

As a customer you have the possibility to register with us and create a customer account. The customer account gives you access to our Wiki system. For the registration we collect and store the following data from you: title, first name, last name, email (username), password.

We use the so-called double-opt-in procedure for registration, i.e. your registration is not complete until you have confirmed your registration by clicking on the link contained in a confirmation email sent to you for this purpose. The provision of the above-mentioned data is obligatory; you can provide all further information voluntarily by using our portal.

After successful registration you will receive personal, password-protected access and can view and manage the data you have stored. Registration is voluntary but may be a prerequisite for using our services.

If you use our portal, we will store the data required for the fulfilment of the contract, including details of the method of payment, until you finally delete your access. In addition, we store the voluntary data provided by you for the time of your use of the portal, unless you delete them first. You can manage and change all data in the protected customer area. Legal basis is Art. 6 para. 1 a, b and f GDPR. 

 

Events - https://events.catworkx.com:

You have the possibility to register for various events (webinars, trainings, events etc.) via our website or our catworkx event & ticket portal. Certain personal data are required for registration. When you register for an event via our website, we collect the following data from you:

Name, first name, business email address, address and a password.

After successful registration you will receive personal, password-protected access and can view and manage the data you have stored. Registration is voluntary but may be a prerequisite for using our services.

If you use our portal, we will store the data required for the fulfilment of the contract, including details of the method of payment, until you finally delete your access. In addition, we store the voluntary data provided by you for the time of your use of the portal, unless you delete them first. You can manage and change all data in the protected customer area. Legal basis is Art. 6 para. 1 a, b and f GDPR.

 

Trainings - https://trainings.catworkx.com:

You have the possibility to register for various official trainings via our website or our catworkx training portal. Certain personal data are required for registration. When you register for an event via our website, we collect the following data from you:

Name, first name, business email address, address and a password.

 After successful registration you will receive personal, password-protected access and can view and manage the data you have stored. Registration is voluntary but may be a prerequisite for using our services.

If you use our portal, we will store the data required for the fulfilment of the contract, including details of the method of payment, until you finally delete your access. In addition, we store the voluntary data provided by you for the time of your use of the portal, unless you delete them first. You can manage and change all data in the protected customer area. Legal basis is Art. 6 para. 1 a, b and f GDPR.

For the provision of the virtual test environment, we provide CloudShare with the surname, first name and email address of the course participants. We also provide this information to Atlassian for the creation of the participant certificates. 

 

Offers - https://offers.catworkx.com:

You have the possibility to register via our website or our catworkx offers portal. Certain personal data are required for registration. When you register for an event via our website, we collect the following data from you: 

Name, first name, business email address, address and a password.

After successful registration you will receive personal, password-protected access and can view and manage the data you have stored. Registration is voluntary but may be a prerequisite for using our services. 

If you use our portal, we will store the data required for the fulfilment of the contract, including details of the method of payment, until you finally delete your access. In addition, we store the voluntary data provided by you for the time of your use of the portal, unless you delete them first. You can manage and change all data in the protected customer area. Legal basis is Art. 6 para. 1 a, b and f GDPR. 

 

catworkx documentation - https://documentation.catworkx.com:

This website does not offer a customer-related login. For this reason, the website is used purely for information purposes. 

Therefore, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data which is technically necessary for us to display our website and to ensure its stability and security. The legal basis for this is Art. 6 para. 1 f GDPR:

IP address of your request, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system and its interface, language and version of the browser software.

 

catworkx helpdesk - https://servicedesk.catworkx.com:

If you are using an application developed by us for the Atlassian environment (Marketplace Apps), you have the possibility to contact our helpdesk at any time if technical problems occur while using our application or if you need any other support. Following an inquiry to our helpdesk, a Jira ticket with your request is usually generated automatically which is then processed by us. Through our helpdesk we only process the information that is necessary to process your request. Your personal data will not be passed on to third parties. The legal basis for data processing is Art. 6 para. 3 lit. b GDPR. Your data will be deleted three years after the final reply to your request.

 

Newsletter

General information

We offer you the possibility of subscribing to a newsletter on our website which will inform you about the activities of our company, current information about our services, special offers, promotions, events, etc. The legal basis for sending the respective newsletter is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 7 para. 2 no. 3 German Unfair Competition Act (UWG) or the legal permission according to § 7 para. 3 UWG.

We use the so-called double-opt-in procedure for the registration to our newsletters. This means that after your registration, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after 3 days.

Only your email address, your title and your last name are required for sending the newsletter. The provision of further data is voluntary: This data is used to address you personally. After your confirmation, we will save your email address for the purpose of sending the newsletter until revoked. We also store your IP address current at the time of registration, the time of registration and the confirmation up to four years after revocation or objection (limitation period). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for the recording of the registration is our legitimate interest according to Art. 6 para. 1 lit. f GDPR in the proof of a previously given consent, see also Art. 7 para. 1 GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter email or by sending an email to [Email protection active, please enable JavaScript.]

Newsletter tracking:

We would like to point out that when the newsletter is sent, we evaluate the opening rate, click rate and click-through rate to determine whether and when a newsletter was opened. For this evaluation, the emails sent contain so-called web beacons or tracking pixels which are stored on our server and are loaded when the newsletter is opened. Technical information such as browser type, time of opening and IP address are transmitted. There is no link between opening rates or click rates and individual email addresses. Opening and click rates are not assigned by us to individual recipients so we are not able to evaluate them by email address, for example.

The legal basis for this data processing is your consent Art. 6 paragraph 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In this case, the revocation covers the entire newsletter, as a separate revocation of the tracking is unfortunately technically not possible. To do this, simply click on the unsubscribe link provided in each email.

The information from the tracking is stored as long as you have subscribed to the newsletter. After you unsubscribe, the data will be made anonymous and used for purely statistical purposes.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you cancel the newsletter. Data which is necessary to prevent you from receiving newsletters from us after cancellation will be stored even after cancellation. Data that has been saved for other purposes remains unaffected by this.

Sendinblue

We use Sendinblue (formerly Newsletter2Go) for the dispatch and analysis of newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Sendinblue is a service that can be used to organize and analyze the sending of newsletters, among other things. The data collected from you for the purpose of sending newsletters is stored on Sendinblue's servers in Germany. For this purpose, an agreement has been made with Sendinblue for order processing. 

Applications:

You can apply online via our website. If you should nevertheless apply to us by email, we expressly point out that sending unencrypted emails or email attachments is not secure.

Your details will be processed for the purpose of carrying out the application process. The legal basis for the data processing is § 26 paragraph 1 in conjunction with paragraph 8 S.2 Federal Data Protection Act. In addition, your personal data may be processed to the extent that this is necessary to defend against legal claims asserted against us in connection with the application process. The legal basis for this is Art. 6 para. 1 S.1 lit. f GDPR. The stated purposes also include the legitimate interest in processing. In the event of an employment relationship between you and us, we may process the personal data already received from you for the purposes of the employment relationship in accordance with § 26 paragraph 1 Federal Data Protection Act.

With your consent, we will also pass on your application data to affiliated companies or store your application data for a longer period of time if we consider your application suitable but cannot offer you a position. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.

Processing of your application data beyond the described use does not take place.

Your personal data will be deleted at the latest 6 months after the end of the application process, provided that no other legitimate interests on our part stand in the way of deletion or you have not given us permission for longer storage. Other legitimate interests in this sense are, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG).

If you would like us to contact you first or if you have questions about open positions or the application process, you can contact us at any time using the contact form provided. We process the personal data provided by you exclusively to answer your request. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR. The purpose also represents our legitimate interest. The information required to answer your request is specially marked. If we ask you to enter information on the contact form that is not absolutely necessary for us to answer your request, this information is used to specify your request. Any communication of this information is expressly on a voluntary basis and with your consent, Art. 6 para. 1 lit. a GDPR. Insofar as this involves information on communication channels (e.g. email address, telephone number), you also agree that we may contact you via this communication channel in order to answer your request. You can of course revoke this consent at any time in the future.

Your data, which we have received in the course of contacting you, will be deleted as soon as they are no longer required for the purpose of their collection, your request is fully processed and no further communication with you is necessary or desired.

 

Provision of expert contributions and initial consultation

As part of our company presence on various platforms (e.g. LinkedIn or Xing), we occasionally make technical articles available or offer an initial consultation on technical topics. In order to be able to offer these technical contributions and consulting services in a cost-effective manner, we collect certain personal data from you in return which we use for advertising purposes. In this context, it is required that you consent to being contacted for advertising purposes (by email or direct message in a professional network such as LinkedIn or Xing). If you do not provide us with your personal data and do not wish to give your consent to being contacted for advertising purposes, you are free not to take advantage of our offers. Your consent is voluntary and can be revoked at any time with effect for the future. You can send your revocation to the following email address: [Email protection active, please enable JavaScript.]. We will implement your advertising revocation immediately. The legal basis for the processing of your personal data is your consent (Art. 6 para. 1 lit. a GDPR). We store the data collected in this way until you revoke your consent to us.

 

Use of cookies:

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information flows to the site that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the internet offer altogether more user-friendly and effective. We also use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.

This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies:

These cookies are automatically deleted when you close the browser. This includes, in particular, cookies that save the language of the website. catworkx does not use session cookies in contrast to other providers.

Persistent cookies:

These cookies are automatically deleted after a preset period of time which can vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time. 

Flash cookies:

catworkx does not use Flash content on its websites. For this reason, no Flash cookies are collected.

Prevention of cookies:

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website if you do so. 

 

Legal basis and storage period:

The legal bases for possible processing of personal data and their storage period vary and are presented in the following sections:

YouTube:

We are interested in providing you with a wide range of multimedia information. Therefore, we integrate videos from YouTube (YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA). The legal basis for this is Art. 6 para. 1 lit. f GDPR.

The integration takes place in the extended data protection mode or the no-cookie solution, i.e. cookies and pixel tags are only set by YouTube when the video is played in order to personalize advertising and search results. 

When the YouTube video is played, the following data is transmitted to Google as the YouTube operator:

  • the IP address
  • the specific address of the page called up by us
  • the transmitted identification of the browser and
  • system date and time of the call
  • already existing cookies, by which your browser can be clearly identified 

Google as the operator of YouTube is solely responsible for this data processing. You can find further information here

We would like to point out that Google may receive further data about cookies already stored by you. The extent to which these are used by Google is beyond our control.

The privacy policy of YouTube can be found here.

 

Google reCaptcha:

We use reCaptcha v2 on our websites. reCaptcha is an offering from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and serves to prevent abusive automated entries in web forms and thus to protect the technical systems of the host. It is used by us for this purpose and this is also in our legitimate interest, Art. 6 para. 1 f GDPR. 

When you call up one of our websites in which reCaptcha is integrated, a connection to the servers of Google is established. A reCaptcha cookie is set. Your IP address is transferred to Google.

In addition, reCaptcha captures the following data using "fingerprinting":

  • used browser plugins
  • the cookies set by Google in the last 6 months
  • number of mouse clicks and touches you have made on this screen
  • CSS information for the called page
  • Javascript objects
  • the date
  • the browser language

Insofar as personal data is transferred to Google in the USA, this is done under the EU-US Privacy Shield on the basis of the appropriateness decision of the European Commission. You can download the certificate here.

You may refuse the use of cookies and fingerprinting by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website.

The privacy policy and terms of use of Google can be found here: https://www.google.com/policies/privacy/ and here: https://policies.google.com/terms.

 

Data transfer:

Your data will not be transferred to third parties, unless we are legally obliged to do so, or the transfer of data is necessary for the execution of the contractual relationship, or you have expressly consented to the transfer of your data in advance.

External service providers and partner companies only receive your data as far as this is necessary for the processing of contractual relationships. In these cases, however, the scope of the data transmitted is limited to the required minimum. As far as our service providers come into contact with your personal data, we ensure within the scope of order processing in accordance with Art. 28 GDPR that they comply with the provisions of the data protection laws in the same way. Please also note the respective data protection notices of the providers. The respective service provider is responsible for the content of external services, whereby we check the services for compliance with the legal requirements within the bounds of what is reasonable.

We attach great importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection is established at the recipient prior to the transfer of your personal data. This means that by the use of EU standard contracts or an adequacy decision, such as the EU Privacy Shield, a level of data protection is achieved that is comparable to the standards within the EU.

Data security:

We have taken extensive technical and operational precautions to protect your data from accidental or deliberate manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

Links to other websites:

Our websites may contain links to websites of other providers. We would like to point out that this data protection declaration applies exclusively to the websites of catworkx GmbH, catworkx AG (Germany, Austria & Switzerland). We have no influence on and do not control the compliance of other providers with the applicable data protection regulations. 

Changes to the privacy policy:

We reserve the right to change or adapt this data protection declaration at any time in accordance with the applicable data protection regulations.

 

Status: July 2020 

Contact:

catworkx Gesellschaft mit beschränkter Haftung
Schellerdamm 16
21079 Hamburg, Germany
Tel: +49 40 890646-0
Email: [Email protection active, please enable JavaScript.]

Our external data protection officer will be happy to answer your questions, so feel free to contact us.