The protection of information relating to you, such as your name and your e-mail address or IP address (so-called “Personal Data”), is important to us. Therefore, we operate this website and platform and offer our services in accordance with the applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (“BDSG”). This document serves to inform our customers about, inter alia, our processing of their personal data and their rights with respect to such data. In addition, this document serves to fulfill our obligations pursuant to Art. 13 of the GDPR, i.e., with respect to our European customers. Certain information, which is expressly related to the GDPR, is marked with “(EU)” in the following text.
You will find below an explanation of how we handle your personal data in this context.
Responsible for this website is
CEEZER Software GmbH
Managing Directors: Magnus Drewelies, Carla Woydt, Hannes Nützmann
Address: Rosenstr. 16, 10178 Berlin, Germany
E-mail: info@ceezer.earth
CEEZER US is a service of CEEZER Inc.,
CEEZER Inc.
60 Charlton St, 12th Floor
New York NY 10014, USA
CEEZER’s Data Protection Officer can be reached as follows:
Olga Stepanova
ByteLaw Rechtsanwälte
Bockenheimer Landstraße 51-53
60325 Frankfurt am Main, Germany
The provision of this website requires the processing of personal data, such as your IP address and details on the relevant request. You are under no legal or contractual obligation to provide this data. If you do not provide this data, you may not be able to view and use the full scope of functionalities provided on the web page.
(1) Legal basis (EU)
The legal basis for the processing is Art. 6 (1) lit. f GDPR. The processing of certain personal data which is provided by you or on your behalf, including via the devices or browsers you are using, is technically necessary to provide this website in a secure manner.
(2) Recipient categories (EU)
We use service providers to operate our website. The service providers process personal data partly in the USA and, therefore, outside the EU / EEA (see the section "Data transfer to third countries (EU)” below). We transfer personal data to the service providers for this purpose.
(3) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose of their processing. All server log files are deleted no later than 7 days after the end of your visit to the website. For the CEEZER Platform, the log files are deleted no later than 90 days after the end of your visit to the CEEZER Platform.
(4) Right of objection (EU)
In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data as this processing is based on a legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR.
You also have the option of contacting us (e.g., via email). For this purpose, we collect the personal data that you provide to us in each case. You are under no legal or contractual obligation to provide this data.
(1) Legal basis (EU)
The legal basis for the processing is Art. 6 (1) lit. b GDPR. The processing of certain personal data which is provided by you or on your behalf is necessary to communicate with you. The processing serves to fulfill our contractual obligations and to take necessary steps prior to entering into a contract.
(2) Recipient categories (EU)
We use service providers for our communication with you. The service providers process personal data partly in the USA and, therefore, outside the EU / EEA (see the section "Data transfer to third countries (EU)” below). We transfer personal data to the service providers for this purpose.
(3) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose of their processing. This is usually the case after the expiration of the statute of limitations, beginning with the end of the year in which the contractual relationship is terminated. After the statute of limitations has expired, your data will be blocked and deleted after expiry of the statutory retention obligations.
You can subscribe to our newsletter on our website by giving the appropriate consent. For this purpose, we collect the personal data that you enter in the registration form. You are under no legal or contractual obligation to provide this data. If you do not provide this data, we will not be able to send you the newsletters.
Furthermore, we evaluate the reach of our newsletter via our service provider HubSpot (see paragraph (iii) (4), Use of HubSpot below). This gives us the opportunity to analyze newsletter behavior.
(1) Legal basis (EU)
Your consent pursuant to Art. 6 para. 1 lit. a. GDPR is the legal basis for our data processing. You can also unsubscribe via the opt-out function at the end of the respective newsletter.
(2) Recipient categories (EU)
We use Hubspot as part of our newsletter service. This service provider processes personal data in the US and, therefore, outside the EU / EEA (see the section "Data transfer to third countries (EU)” below). We transfer personal data to this service provider for this purpose.
(3) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose of their processing. We will retain your data until you unsubscribe from our newsletter. You may unsubscribe simply by clicking the unsubscribe link provided in each newsletter.
(4) Withdrawal of your consent (EU)
You can withdraw your consent to the processing in respect of data you provided in the contact form at any time in accordance with Art. 7 (3) GDPR. The lawfulness of the processing carried out until then on the basis of the consent is not affected by the withdrawal. In the event of withdrawal, your personal data will no longer be processed and will be deleted.
You have the option to register for our platform and create a user account. To do this, you can contact us directly or submit a request via the website. The registration and activation to the platform itself takes place separately. For the creation and operation of user accounts we collect mainly contact data, such as business email addresses. In addition, we may require identification details such as ID copies to onboard customers in accordance with our internal procedures. You are under no legal or contractual obligation to provide this data. If you do not provide this data, you are not able to register on the platform.
(1) Legal basis (EU)
We process your personal data for the purpose of initiating and/or implementing a (potential) contractual relationship pursuant to Art. 6 para. 1 lit. b GDPR. In particular for your registration and the associated verification, it can be necessary for us to process certain personal data.
In addition, we may process your personal data on the basis of our overriding legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
(2) Weighing of interests
Where processing of your personal data as part of our verification procedure is not required pursuant to Art. 6 para. 1 lit. b. GDPR but only possible on the basis of our overriding legitimate interests pursuant to Art. 6 para. 1 lit. f, we will weigh your confidentiality interests against our relevant interests, e.g., our interest in the operation of a platform, where all participants have been registered and verified. In such a case, your confidentiality interest may take a back seat. Otherwise, we would not be able to verify you in accordance with our requirements.
(3) Recipient categories (EU)
We use service providers as part of the registration process. These service providers process personal data partly in the USA and, therefore, outside the EU / EEA (see the section "Data transfer to third countries (EU)” below). We transfer personal data to service providers for this purpose.
(4) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose of their processing. This is usually the case after the expiration of the statute of limitations, beginning with the end of the year in which the contractual relationship is terminated. After the statute of limitations has expired, your data will be blocked and deleted after expiry of the statutory retention obligations. We may be subject to obligations to store business communication and invoices which include contact details in accordance with applicable tax laws. In addition, we may collect and store certain data, such as IP data, to evidence the giving of legally relevant declarations, such as the acceptance of terms or the entering into transactions on the CEEZER Platform.
(5) Right of objection (EU)
In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data as this processing is based on a legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR.
The provision of this platform and its functions requires the processing of personal data, such as your IP address and details on requests made by users. This processing is necessary for the retrieval of the content presented on this platform (including its functions) and due to IT security measures.
In addition, our platform offers you various usage and functional options (e.g., the management of projects or the execution of transactions). We may also send you useful information, such as confirmation or status emails with respect to transactions. You are under no legal or contractual obligation to provide this data. If you do not provide this data, you might not be able to use all functions of the platform.
(1) Legal basis (EU)
The processing of your personal data to provide this platform and its functions is based on Art. 6 para. 1 lit. b GDPR. It serves the fulfillment of our obligations pursuant to the terms agreed with our users.
Where the processing is not necessary to fulfill our contractual obligations, we may also base our processing on overriding legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, such as ensuring a stable website and platform environment as well as IT security.
(2) Weighing of interests
Where processing of your personal data is based on overriding legitimate interests pursuant to Art. 6 para. 1 lit. f, we will weigh your confidentiality interests against our interests in providing this platform in a safe manner and to keep you informed on the status of your transactions. In such a case, your interest in confidentiality may take a back seat. Otherwise, we would not be able to provide you with this platform in its full functionality.
(3) Recipient categories (EU)
We use service providers as part of the provision of the platform. These service providers process personal data partly in the US and, therefore, outside the EU / EEA (see below the section "Data transfer to third countries (EU)"). We transfer personal data to this service provider for this purpose.
(4) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose of their processing. This is usually the case after the expiration of the statute of limitations, beginning with the end of the year in which the contractual relationship is terminated. After the statute of limitations has expired, your data will be blocked and deleted after expiry of the statutory retention obligations.
(5) Right of objection (EU)
In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data as this processing is based on a legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR.
As a buyer, you can start a chat with the respective seller on the corresponding project page. We have insight into the conversation and the personal data which you decide to share via the chat function. You are under no legal or contractual obligation to provide this data.
(1) Legal basis (EU)
The processing of the personal data, which you share via the chat, is based on the fulfillment of our contractual obligations in accordance with Art. 6 para. 1 lit. b. GDPR. To enable the chat communication with the respective other user and any agreements entered into via the chat function in accordance with our platform terms, it is necessary that we collect and transfer your respective personal data.
(2) Weighing of interests
Within the framework of the necessary weighing of interests, we weigh up your interest in confidentiality and our interest in providing the chat function and documenting the content of conversations. In each case, your interest in confidentiality may take a back seat. Otherwise, we would not be able to provide the chat function in a safe and responsible manner.
(3) Recipient categories (EU)
We use a service provider to provide the chat function. The service provider is based in the EU and has undertaken to ensure that every processing operation of personal data that is performed by or on behalf of it is carried out within the European Economic Area (EEA) or to or from countries that offer an adequate level of protection in accordance with the GDPR.
(4) Duration of storage
We delete your personal data when they are no longer required to achieve the purpose of their processing. This is usually the case after the expiration of the statute of limitations, beginning with the end of the year in which the contractual relationship is terminated. After the statute of limitations has expired, your data will be blocked and deleted after expiry of the statutory retention obligations.
We anonymize your personal data in order to evaluate it for statistical purposes.
(1) Legal basis (EU)
The processing of your personal data in the context of such anonymization is based on our overriding legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
(2) Weighing of interests
As part of the necessary weighing of interests, we have weighed up your interest in confidentiality against our interest in anonymization. Your interest in confidentiality takes a back seat, because the anonymization also serves the protection of your personal data. We would otherwise not be able to achieve such anonymization. The GDPR and the BDSG do not apply to properly anonymized data.
(3) Recipient categories (EU)
We may use service providers for the anonymization process and transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in handling personal data as we do ourselves.
(4) Right of objection (EU)
In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data as this processing is based on a legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR.
You can apply for a position with us via our website. For this purpose, we process the personal data that you provide to us as part of your application. Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. You will receive a separate data privacy statement at the beginning of your application process which is also available here. You are under no legal or contractual obligation to provide this data.
(1) Legal basis (EU)
We process your personal data for the initiation, implementation and execution of the corresponding contract in accordance with Art. 6 para. 1 lit. b GDPR.
Where you grant us an explicit consent to process your data, the legal basis is Art. 6 para. 1 lit. a GDPR.
(2) Recipient categories (EU)
We use the service provider Personio GmbH, Seidlstraße 3, 80335 Munich, Germany (“Personio“) to process your application. The database, where your application data is stored, is operated by Personio, which offers a human resource and applicant management software solution (https://www.personio.com/legal-notice/).
(3) Duration of storage
We will retain this data for the duration of the recruitment procedure and, if we reject your application, for another six months following the end of the recruitment procedure. Upon successful recruitment, we will include your personal data in your personnel file.
We use so-called “cookies” and analytics tools to provide our website and platform. Some providers we use also process your personal data outside the EU / EEA (see the section “Data transfer to third countries (EU)” below).
Cookies are data records that are stored by a web server on the user’s end device (e.g. computer, smartphone or tablet). When our platform is called up again with the same end device, these are sent back either to our platform ("First-Party Cookies") or to another website to which the cookie belongs ("Third-Party Cookies").
Switching off the cookie function in your browser does not in principle restrict the use of our platform and the services offered. You are under no legal or contractual obligation to provide data via cookies.
Legal bases (EU)
The legal basis for the use of technically necessary cookies/identifiers is the provision of the platform in accordance with the terms agreed with our users. This means that the technically necessary cookies serve to fulfill our contractual obligations pursuant to Art. 6 para. 1 lit. b GDPR.
In addition, the use of technically necessary cookies/identifiers may be based on overriding legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. In such a case, we will weigh your confidentiality interests against our interests in providing this platform in a safe and stable manner.
In such a case, your interest in not being subject to technically necessary cookies may take a back seat. Otherwise, we might not be able to provide you with this platform in its full functionality and in a safe and stable manner.
The storage of information in your end device or the access to information already stored in your end device is absolutely necessary so that we can provide the telemedia service expressly requested by you as a user (Section 25 para. 2 No. 2 TTDSG; Article 6 para. 1 lit. f GDPR).
Otherwise, the legal basis in each case is generally your consent, if no specific legal basis is mentioned under this lit. g (Section 25 para. 1 TTDSG; Article 6 para. 1 lit. a GDPR). We ask for your consent regarding the use of cookies when you first visit our website. You can withdraw your consent at any time according to Article 7 (3) GDPR with effect for the future, e.g. by deleting cookies set via the browser settings of your end device. You can review and change your consent status and find further information on cookies here. Please note that for technical reasons, this procedure only applies to the specific end device used.
Unless otherwise stated, we will delete the personal information we collect when it is no longer necessary to fulfill the purpose for which it was collected. You can also prevent the collection and processing of your personal data by preventing third-party cookies from being stored on your end device, by using the "Do-Not-Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as Ghostery (https://www.ghostery.com) in your browser.
(1) Use of Usercentrics Cookiebot Consent Management Platform
We use the tool Cookiebot from the company Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany ("Usercentrics") to enable cookie management on our website.
(i) Legal Basis (EU)
We process your personal data within the scope of Usercentrics Cookiebot Consent Managements on the basis of the above data is based on Art. 6 (1) sentence 1 lit. c GDPR in conjunction with paragraph 25 (1) TDDDG.
(ii) Recipient categories (EU)
We use Usercentrics as a data processor. For this purpose, we transmit personal data to Usercentrics. Usercentrics is contractually obliged by us to exercise the same care in handling personal data as we do ourselves.
You will find Usercentrics privacy policy here.
(iii) Duration of storage
We delete your personal data when they are no longer required for the purpose of their processing. This is usually the case after one year, starting from the end of the year in which the data were collected.
You will find Usercentrics privacy policy here.
(2) Use of Google Analytics
We use Google Analytics on our platform, an analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Google Analytics uses cookies that are stored on your end device to help the platform to analyze how users use the platform. The information generated by the cookie about your use of the platform is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization, your IP address will be shortened beforehand by Google within the EU / EEA.
Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the platform, compiling reports on platform activity and providing us with other services relating to platform activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
The service providers process personal data partly in the USA and, therefore, outside the EU / EEA (see the section "Data transfer to third countries (EU)” below).
Legal Basis (EU): Your consent pursuant to Art. 6 para. 1 lit. a. GDPR, which is granted via Usercentrics, is the legal basis for our data processing. You can withdraw your consent at any time, provided that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You may also refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of our platform. You can also prevent the collection of data generated by the cookie and related to your use of the platform (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to this platform: Disable Google Analytics.
(3) Use of Google Tag Manager
We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/)of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
With the Google Tag Manager, tags of Google’s services and of third-party providers can be managed and bundled and embedded on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting of groups, and to test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Information on this can be found in the passages on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data. The service providers process personal data partly in the USA and, therefore, outside the EU / EEA (see the section "Data transfer to third countries (EU)” below).
Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy at https://policies.google.com/privacy?hl=de.
Legal Basis (EU): Your consent pursuant to Art. 6 para. 1 lit. a. GDPR, which is granted via Usercentrics, is the legal basis for our data processing. You can withdraw your consent at any time, provided that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de. Further information on objection and removal options vis-à-vis Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de.
(4) Use of HubSpot
We use functions of HubSpot Inc, 2nd Floor, 25 First Street, Cambridge, MA 02141, USA ("HubSpot").
This is an integrated software solution that we use to cover various aspects of our online marketing. These include, but are not limited to: Email marketing (newsletters as well as automatic mailings, e.g. to provide downloads), reporting (especially traffic sources, accesses, etc.), contact management (especially user segmentation & CRM).
HubSpot sets a cookie on your end device. Personal data can be stored and analyzed, especially the activity of the user (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and the operating system), data about the advertisements displayed and also data from advertising partners. The service providers process personal data partly in the USA and, therefore, outside the EU / EEA (see the section "Data transfer to third countries (EU)” below).
Legal Basis (EU): Your consent pursuant to Art. 6 para. 1 lit. a. GDPR, which is granted via Usercentrics, is the legal basis for our data processing. You can withdraw your consent at any time, provided that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Further information on objection and removal options vis-à-vis can be found here: https://legal.hubspot.com/de/privacy-policy.
(5) Use of LinkedIn Pixel
We use functions of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIN"), namely the “Insight Tag”.
The Insight Tag pixel can be used to track user behavior after they have been redirected to the CEEZER website by clicking on a LinkedIn ad. This allows us to track the effectiveness of LinkedIn ads for statistical and market research purposes. The data collected in this way is anonymous for us, i.e. we do not see the personal data of individual users. However, the data is stored and processed by LinkedIn. LinkedIn can connect this data to LinkedIn accounts and also use the collected information for their own advertising purposes, according to LinkedIn’s data usage policy. You have the option to prohibit LinkedIn and its affiliates from displaying advertisements and you can edit the settings for LinkedIn’s ads using the following link: https://www.linkedin.com/psettings/advertising. More information on the LinkedIN Insight Tag can be found here. LinkedIn’s privacy policy is available here. The service providers process personal data partly in the USA and, therefore, outside the EU / EEA (see the section "Data transfer to third countries (EU)” below).
Legal Basis (EU): Your consent pursuant to Art. 6 para. 1 lit. a. GDPR, which is granted via Usercentrics, is the legal basis for our data processing. You can withdraw your consent at any time, provided that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
(6) Use of Mouseflow
We use functions of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark ("Mouseflow").
Mouseflow is a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback campaigns, and similar features/functionality. Mouseflow may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymized IP address, location (city/country), language, and similar metadata. Mouseflow does not collect any information on pages where it is not installed, nor does it track or collect information outside your web browser. If you'd like to opt-out, you can do so at https://mouseflow.com/opt-out. If you'd like to obtain a copy of your data, make a correction, or have it erased, please contact us first or, as a secondary option, you can contact Mouseflow at privacy@mouseflow.com.
Legal Basis (EU): Your consent pursuant to Art. 6 para. 1 lit. a. GDPR, which is granted via Usercentrics, is the legal basis for our data processing. You can withdraw your consent at any time, provided that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You can find more information on Mouseflow and GDPR here. Mouseflow’s Privacy Policy is available here.
We delete your personal data when the respective purpose of storage ceases to apply and no statutory provision requires retention.
Please contact us at the above contact details to exercise your rights and to withdraw your consent.
(a) You have the right to request information about all personal data we process about you at any time.
(b) If your personal data is incorrect or incomplete, you have the right to have it corrected and completed.
(c) You may request the deletion of your personal data at any time, unless we are legally obliged or entitled to continue processing your data.
(d) If the legal requirements are met, you may request restriction of the processing of your personal data.
(e) You have the right to object to processing at any time.
(f) If the data processing is carried out on the basis of your consent or within the framework of a contract, you have a right to the transfer of the data provided by you, provided that this does not affect the rights and freedoms of other persons.
(g) You also have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that data processing has been carried out in breach of applicable law.
If we process your data on the basis of a declaration of consent, you have the right to withdraw this consent at any time with effect for the future. The processing carried out before a revocation remains unaffected by the revocation.
The following data protection authority is responsible for CEEZER Software GmbH:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219, 10969 Berlin
Tel.: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
E-mail: mailboxdatenschutz-berlin.de
https://www.datenschutz-berlin.de/
We will notify all recipients to whom we have disclosed personal data of any rectification or erasure of your personal data or restriction of the relevant processing, unless this proves impossible or involves a disproportionate effort. We will inform you of the recipients applicable to you if you request this.
We do not create automatic profiles.
In some cases, personal data is transferred to recipients in third countries (see the respective corresponding note within the scope of our data protection information). Third countries are countries outside the EU / EEA. In our case, this affects data transfers to the USA. With respect to data transfers to the USA, a sufficient level of data protection is ensured by the EU-US Data Privacy Framework decided by the EU Commission.
We take appropriate technical and organizational security measures to protect the personal data we process against accidental or intentional manipulation, loss, destruction or against unauthorized access.
