Data Protection

Responsible entity

coeno GmbH
Kolosseumstr. 1a
80469 München
Deutschland

info@coeno.com
Bettina Streit, Markus Kugler
https://coeno.com/impressum/

A. General Information

1. Scope of application

This privacy policy covers information about the processing of personal data in the context of the use of our website "coeno.com".

2. Responsibility and contact person 

The company responsible for processing personal data is Coeno GmbH (hereinafter: Coeno). For address and contact details, please refer to the imprint. For all questions regarding data protection in connection with our products/services or the use of our website, you can contact us at any time by mail or by e-mail at info@coeno.com.

3. Place of data processing

All personal data collected or processed via the website is stored on our own web servers. Insofar as we use the infrastructure of external service providers for this purpose, we have ensured that this is always done on the basis of the necessary agreements on commissioned processing. 

4. Amendment of the data protection information

In the context of the further development of data protection law as well as technological or organizational changes, our data protection information is regularly reviewed for the need for adaptation or supplementation and updated as necessary.

B. General data processing when calling up our website

1. Log files 

When our web pages are called up, a log data record (so-called server log files) is stored on our web server, which also includes, among other things, the IP address of the website visitor. The data within these server log files are required, among other things, to correctly display the content of our websites and to ensure the security of our IT infrastructure (Art. 6 para. 1 lit. f) DSGVO). The log files are deleted regularly and automatically by our hoster. If you would like more information about this, please feel free to contact us at any time using the aforementioned contact details.

2. Tools and cookies   

This website uses various services and applications (collectively, "Tools") that are provided either by us or by third parties. These include, in particular, Tools that use technologies to store or access information in the terminal device (e.g. cookies, Web Storag, JavaScripts or pixels). Details on the tools, in particular the cookies used, can be found in the privacy settings . On the one hand, we distinguish between tools that are absolutely necessary, for example, to provide the basic functions of the website or to provide an expressly requested service (the legal basis for the use of these tools is our legitimate interest pursuant to Art. 6 para. 1 lit. f) DSGVO, or § 25 para. 2 No. 2 TTDSG). On the other hand, we use tools that are not absolutely necessary and allow us, for example, to evaluate the calls and visits to the website or to play out targeted marketing measures. For the use of these tools, we require your prior consent, Art. 6 para. 1 lit. a) DSGVO, or § 25 para. 1 TTDSG).

3. Management and configuration of tools and cookies 

Our website uses a so-called cookie consent management tool in order to be able to manage and control the possibly required consents for the storage or loading of certain tools. The associated data processing is therefore necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis is Art. 6 para. 1 lit. f) DSGVO, justified by our interest in meeting the legal requirements for consent management (Section 25 para. 2 no. 2 TTDSG). You can revoke your consent for certain tools at any time. To do so, click on the privacy settings. There you can also change the selection of tools you wish to consent to using, as well as obtain supplementary information on cookies and the respective storage period. Alternatively, you can assert your revocation for certain tools directly with the provider. If you have any questions about the provider or require further information on this, please feel free to contact us at any time using the aforementioned contact details.

4. Analysis tools

We use tools on our website with which we can better understand user behavior and optimize our offer based on the information collected in the process. Details about these tools can also be found in the privacy settings. It is always ensured that these tools are only used or process data if you have given your prior consent (Art. 6 para. 1 lit. a) DSGVO; § 25 para. 1 TTDSG). If these providers have access to personal data or the tools are hosted by these providers, they have concluded the necessary order processing contracts. If you have any questions about the providers or require further information about any storage and deletion processes, please feel free to contact us at any time using the aforementioned contact details.We currently use the following analysis tools:

4.1 Google Universal Analytics
On our websites, we use Google Universal Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Universal Analytics uses, among other things, JavaScripts and pixels to read information on your terminal device and cookies to store information on your terminal device. This is used to analyze your usage behavior and to improve our website. We will process the information obtained to evaluate your use of the website and to compile reports on website activities for the website operators. We have made various settings to comply with data protection requirements (including in the form of IP anonymization; automatic deletion of old logs). The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO; § 25 para. 1 TTDSG.

4.2 Google Analytics 4
Our website also uses the Google Analytics 4 service ("Google Analytics 4"). "Google Analytics 4" also uses JavaScripts and pixels to read information on your terminal device and cookies to store information on your terminal device. This is used to analyze your usage behavior and improve our website. We will process the information obtained to evaluate your use of the website and to compile reports on website activities for the website operators. As part of the evaluation, "Google Analytics 4" also uses artificial intelligence such as machine learning for automated analysis and enrichment of the data. In particular, this is done for forecast metrics on the future behavior of visitors based on structured event data, such as predicted revenue, purchase likelihood, and churn likelihood. The forecast metrics can also be used for forecast target groups. You can find out more about this at: https://support.google.com/analytics/answer/9846734. In addition, Google Analytics 4 models conversions if not enough data is available to optimize the evaluation and reports. Information on this can be found at: https://support.google.com/analytics/answer/10710245. The data evaluations are automated using artificial intelligence or based on specific individually defined criteria. Further information on Google Analytics 4 cookies can be found at https://support.google.com/analytics/answer/11397207?hl=de..We have also made various settings here to comply with data protection requirements (including in the form of IP anonymization). The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a) DSGVO; § 25 para. 1 TTDSG.For further information on data use by Google, setting and objection options, please refer to Google's privacy policy at https://policies.google.com/privacy.

4.3 Google Tag Manager
On this website we use the Google Tag Manager service, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Through this tool, "website tags" (i.e. keywords that are embedded in HTML elements) can be implemented and managed via an interface. By using the Google Tag Manager, we can automatically track which button, link or personalized image you have actively clicked on and can then record which contents of our website are of particular interest to you. These processing operations are carried out exclusively with the granting of explicit consent in accordance with Art. 6 para. 1 lit. a) DSGVO; § 25 para. 1 TTDSG. Further information on Google Tag Manager and Google's privacy policy can be found at https://www.google.com/intl/de/policies/privacy.

5. Marketing tools

We also use so-called marketing tools on our website. Some of the access data generated during the use of our website is used to create usage profiles, which store in particular your usage behavior, the advertisements you have viewed or clicked on and, based on this, the classification into advertising categories, interests and preferences. By analyzing and evaluating this access data, we are able to present you with personalized advertising, i.e. advertising that corresponds to your actual interests and needs, on our website and on the websites and services of other providers. In doing so, we also analyze your usage behavior in order to recognize you on other sites and to address you in a personalized manner based on your use of our site (so-called retargeting). Details on these applications can also be found in the privacy settings. Here, it is always ensured that these applications are only used or process data if you have given your prior consent (Art. 6 para. 1 lit. a) DSGVO; § 25 para. 1 TTDSG). If you have any questions about the providers or require further information about any storage and deletion processes, please feel free to contact us at any time using the aforementioned contact details. We currently use the following marketing tools:

5.1 Facebook plugins
We use the "visitor action pixel" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook") to evaluate and support online marketing measures. With its help, we can track the actions of users after they have seen or clicked on a Facebook ad. The data collected in this way is anonymous to us, which means that we do not see the personal data of individual users. However, this data is stored and processed by Facebook. Facebook may associate this data with your Facebook account and also use it for its own advertising purposes, according to Facebook's data usage policy (http://www.facebook.com/about/privacy). Advertisers, app developers and publishers may send information through the Facebook business tools they use, including social plugins (such as the "Like" button), Facebook Login, APIs and SDKs, or the Facebook Pixel. These partners provide Facebook with information about your activities outside of Facebook, including information about your device, websites you visit, purchases you make, advertisements you see, and how you use services, regardless of whether you have a Facebook account or are logged into Facebook. These aforementioned processing operations only take place when you give your consent in accordance with Art. 6 (1) a) DSGVO; Section 25 (1) of the TTDSG.

5.2 DoubleClick
This website contains components of DoubleClick by Google. DoubleClick is a brand of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), under which special online marketing solutions are marketed to advertising agencies and publishers. Each time you call up one of the individual pages of this website that is operated by us and on which a DoubleClick component has been integrated, the Internet browser on your IT system is caused by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. As part of this technical process, Google obtains knowledge of data that Google also uses to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 Para. 1 lit. a) DSGVO; § 25 Para. 1 of the TTDSG. You can view the privacy policy of DoubleClick by Google at https://www.google.com/intl/de/policies/.

6. Content delivery network (CDN)

6.1 Fastly
Our website uses the Content Delivery Network (CDN) Fastly to deliver content. The Fastly CDN is operated by Fastly Inc, General Counsel 475 Brannan St, Suite 300 San Francisco, CA 94107. Fastly will act as a subcontractor to Webflow. The Fastly CDN makes content from our website available on various servers distributed around the world. This reduces website loading time, provides greater resilience and increased protection against data loss. The content embedded on this website, such as images and videos, are obtained from Fastly CDN when the page is accessed. The use of Fastly Web Services and the Fastly CDN is in the interest of higher fail-safety, increased protection against data loss and better website loading speed (Art. 6 para. 1 lit. f) DSGVO; § 25 para. 2 no. 2 TTDSG). The current privacy policy of Fastly can be found here: https://www.fastly.com/privacy.

6.2 Amazon CloudFront CDN
We also use the content delivery network Amazon CloudFront CDN. The provider is Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg (hereinafter "Amazon"). Amazon CloudFront CDN is a globally distributed content delivery network. Technically, the information transfer between your browser and our website is routed via the Content Delivery Network. This allows us to increase the global accessibility and performance of our website. The use of Amazon CloudFront CDN is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 lit. f) DSGVO; § 25 para. 2 No. 2 TTDSG). You can find more information about Amazon CloudFront CDN here: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.

6.3 Cloudflare (Content Delivery Network)
Our website uses functions from CloudFlare. The provider is CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. CloudFlare also offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed through CloudFlare's network. CloudFlare is thus able to analyze the data traffic between users and our websites, for example, to detect and defend against attacks on our services (Art. 6 para. 1 lit. f) DSGVO; § 25 para. 2 No. 2 TTDSG). In addition, CloudFlare may store cookies on your computer for optimization and analysis. You can find more information about CloudFlare at: https://www.cloudflare.com/privacypolicy/.

C. Other special data processing

1. Newsletter

1.1 General information about the newsletter
If you subscribe to our e-mail newsletter, we will only process your e-mail address. The data will be used exclusively to send you information about products and promotions from us at regular intervals. The data processing is based on your consent (Art. 6 para. 1 lit. a) DSGVO). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

1.2 MailChimp
Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to whom we pass on the data you provided when registering for the newsletter. This transfer takes place within the framework of order processing by MailChimp. Please note that your data is usually transferred to a MailChimp server in the USA and stored there. MailChimp uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the sent e-mails contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. In addition, technical information is recorded (e.g. the time of the retrieval, the IP address, the browser type and the operating system). The data is collected exclusively pseudonymously and is not linked to your other personal data. A direct personal reference is therefore excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. The legal basis for the processing of your personal data in connection with the analysis is your granted consent within the meaning of Art. 6 (1) a) DSGVO. The consent can be revoked at any time. If you wish to object to the aforementioned data processing, it is necessary to unsubscribe from the newsletter. You can view the privacy policy of MailChimp here: https://mailchimp.com/legal/privacy/.

2. Contact form

We offer a contact form on our website to answer questions of interested parties and users and to provide information about our services. We process the inquiries and information sent to us in this context only to process your inquiry and to contact you (Art. 6 para. 1 lit. f) DSGVO). We store your data at the longest for the duration of a resulting business relationship with you (Art. 6 para. lit. 1 b) DSGVO). If such a business and contractual relationship does not arise as a result of the request, we will delete your data no later than twelve (12) months after the last contact with you. The right to object to the processing beforehand or to request deletion remains unaffected, of course.

3. Google maps

On our website we use Google Maps (API). The operating company of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. When you access a page that embeds Google Maps, your browser loads the web fonts required to display Google Maps into your browser cache. Also for this purpose, the browser you use establishes a connection to Google's servers. Through this, Google obtains knowledge that our website was accessed via your IP address. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. These processing operations will only be carried out if you have given your express consent in accordance with Art. 6 (1) a) DSGVO. You can view the privacy policy of Google Maps at: ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/.

4. Google Fonts

Our website uses so-called web fonts, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly (Art. 6 para. 1 lit. f) DSGVO). However, we have integrated the web fonts locally , i.e. on our web server. As a result, there is no data transmission to the servers of Google/. 

D. Applications

Information about the type and scope of data processing in the event that you send us your application documents via the e-mail address provided will be sent to you immediately after receipt of your application.

E. Social media

We operate presences on online platforms and social networks in order to interact with potential or existing customers, to exchange information with interested parties and users, or to advertise offers and services. We operate our websites under joint responsibility (under data protection law) with the providers. We process data that you directly share or publish via the online platforms and networks (e.g., via comment and chat functions) as the responsible party in order to interact with you in this regard or to exchange information with you. As part of this interaction, we may also receive statistical data from the platform operators on the use of our "channels and fan pages". This includes, for example, information about interactions, likes, comments or aggregate information and statistics (e.g. IP address; origin of followers) that help us learn about interactions with our site. The legal basis for data processing in our area of responsibility is Art. 6 para. 1, p. 1 lit. f) DSGVO. However, the providers also process data under their own responsibility. We have no influence on data that is processed by the provider under its own responsibility in accordance with its own terms of use and data protection conditions. Please note that when you access the aforementioned providers, additional data (e.g. your usage and "surfing behavior") may be collected and possibly transmitted to the provider. Please also note that in the event of interaction via the aforementioned media, data may also be processed outside the area of the European Union. Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. More information on this can be found in the data protection information of the respective providers. If we have personal data from you in connection with the use of the online platforms and networks, please address your concerns to us. If you also wish to assert rights against a specific provider, please contact the respective provider.

F. Your rights

You can assert your rights as a data subject regarding your processed personal data at any time by contacting us using the contact details provided at the beginning. In particular, you have the following rights: Art. 15 DSGVO - Right to information about your data processed by us. In particular, you can request information about the processing purposes, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details. Art. 16 DSGVO - Right to rectification of inaccurate data or the completion of your data stored by us. Art. 17 DSGVO - Right to erasure of your data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;Art. 18 GDPR - right to restrict the processing of data.Art. 20 GDPR - right to have your data returned ("data portability").Art. 21 GDPR - right to object to processing if the processing is carried out on the basis of Art. 6 (1) p. 1 lit. e) or lit. f) GDPR. Art. 77 DSGVO - Right to lodge a complaint with a data protection supervisory authority. 

Status: 25.07.2023