Privacy Policy

Privacy Policy of beabee

We, as the operators of this website, take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the applicable data protection laws as well as this Privacy Policy.

When you use this website, various personal data may be collected. Personal data is information that can be used to identify you personally. This Privacy Policy explains which data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating via email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Data Controller

CORRECTIV – Recherchen für die Gesellschaft gemeinnützige GmbH

Huyssenallee 11

45128 Essen

Managing Director: David Schraven

info@correctiv.org

Data Protection Officer

Dr. Michael Funke

Friedrichstraße 95

10117 Berlin

datenschutzbeauftragter@correctiv.org

Purpose of Processing

The temporary storage of the IP address by the system is necessary to deliver the website to the user’s device. For this purpose, the user’s IP address must be stored for the duration of the session.

In addition, the data is used to optimize the website and to ensure the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.

These purposes also constitute our legitimate interest in processing the data pursuant to Art. 6(1)(f) GDPR.

The email address is processed for the purpose of sending our newsletter or for sending an invitation to a software demo.

Cookies

This website uses only technically necessary cookies. These cookies do not track you and are not used for marketing or analytics purposes.

Cookie namePurposeDuration
wp_langStores your language preferenceSession

No cookie consent banner is required for these cookies, as they serve no tracking or marketing purpose and are strictly necessary for the website to function. You can disable cookies in your browser settings, but this may affect website functionality.

Beabee

The demo request form on this website is hosted at community.beabee.io, which is operated by us under the same data protection terms. Beabee enables the creation and evaluation of surveys and online forms. Only personal data that you enter into the respective forms is collected. Your personal data is processed exclusively by us and is not shared with third parties.

Processing of the data takes place exclusively within Germany.

Hosting

The website is hosted in Germany by Hetzner Online GmbH, located in Industriestr. 25, 91710 Gunzenhausen.

Server Log Files

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address
  • These data are not merged with other data sources.

The collection of these data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of the website – for this purpose, the server log files must be recorded.

Inquiry via email, telephone, or fax

If you contact us via email, telephone, or fax, your inquiry, including all personal data resulting from it (such as your name and the content of your inquiry), will be stored and processed by us for the purpose of handling your request. These data will not be shared without your consent.

The processing of these data is based on Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective handling of inquiries addressed to us.

The data you provide to us through contact inquiries will remain with us until you request their deletion, withdraw your consent for storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory statutory provisions – in particular, statutory retention periods – remain unaffected.

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only to the extent necessary to establish, design, or modify the legal relationship (master data). This is based on Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. Personal data regarding the use of our website (usage data) is collected, processed, and used only to the extent necessary to enable the user to use the service or for billing purposes.

The collected customer data is deleted after the completion of the order or the termination of the business relationship. Statutory retention periods remain unaffected.

Data retention period

Data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected to provide the website, this is the case once the respective session has ended.

For data stored in log files, this is the case no later than seven days. Further storage is possible; in such cases, users’ IP addresses are deleted or anonymized so that identification of the requesting client is no longer possible.

Your Rights

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

If such processing exists, you may request the following information from us:

(1) The purposes for which your personal data are being processed;

(2) The categories of personal data being processed;

(3) The recipients or categories of recipients to whom your personal data have been or will be disclosed;

(4) The planned retention period of your personal data or, if specific information is not possible, the criteria used to determine the retention period;

(5) The existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the controller, or a right to object to such processing;

(6) The existence of a right to lodge a complaint with a supervisory authority;

(7) All available information about the source of the data if the personal data were not collected from the data subject;

(8) The existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR, and, at least in these cases, meaningful information about the logic involved, as well as the significance and the intended consequences of such processing for the data subject.

You also have the right to request information on whether your personal data has been transferred to a third country or an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

You have the right to request the correction and/or completion of your personal data if it is inaccurate or incomplete. We are obliged to make such corrections without undue delay.

Right to Restriction of Processing

You may request the restriction of processing of your personal data under the following conditions:

(1) If you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of the data;

(2) If the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use;

(3) If we no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims; or

(4) If you have objected to the processing pursuant to Art. 21(1) GDPR, and it has not yet been determined whether our legitimate grounds override yours.

Where processing of your personal data has been restricted, such data may only be processed – aside from storage – with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been applied under the above conditions, you will be informed by us before the restriction is lifted.

Right to Erasure

You may request that your personal data be deleted without undue delay, and we are obliged to delete such data immediately if one of the following applies:

(1) Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21(2) GDPR.

(4) Your personal data have been unlawfully processed.

(5) The deletion of your personal data is required to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject.

(6) Your personal data have been collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.

Disclosure to Third Parties

If we have made your personal data public and are obliged to delete them pursuant to Art. 17(1) GDPR, we will take appropriate measures, considering the available technology and implementation costs, including technical measures, to inform controllers who are processing the personal data that you, as the data subject, have requested the deletion of any links to, copies, or replications of your personal data.

Exceptions

The right to erasure does not apply insofar as the processing is necessary:

(1) For exercising the right of freedom of expression and information;

(2) To comply with a legal obligation under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) For reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;

(4) For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right mentioned under point (a) is likely to make the achievement of the objectives of such processing impossible or seriously impaired; or

(5) For the establishment, exercise, or defense of legal claims.

Right to be informed

If you have exercised your right to rectification, erasure, or restriction of processing with us, we are obliged to notify all recipients to whom your personal data have been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed by us about these recipients.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that:

(1) The processing is based on your consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR; and

(2) The processing is carried out by automated means.

In exercising this right, you also have the right to request that your personal data be transmitted directly from us to another controller, where technically feasible. The freedoms and rights of other persons must not be adversely affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Kavalleriestr. 2-4

40213 Düsseldorf

Phone: 0211/38424-0

Fax: 0211/38424-10

E-Mail: poststelle@ldi.nrw.de

The supervisory authority with which the complaint has been lodged will inform you about the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DSGVO.