This privacy policy informs you:

• When or for which actions we process data
• Which data we process and for what reasons
• Who receives the data
• What rights you have in relation to your personal data

You can access this privacy policy at any time and permanently here.

I. Contact information

Responsible body:

dacoso GmbH

Robert-Bosch-Straße 25a

63225 Langen

Represented by the managing directors: Stefan Hofmann, Nick Niermann, Felix Pohl

    E-mail info(at)dacoso.com 
    Phone +49 6103 404569 0
    Fax +49 6103 404569 9

Data Protection Officer:

You can contact the data protection officer by post at: dacoso GmbH, Data Protection Officer, Robert-Bosch-Straße 25a, 63225 Langen, Germany, and by email at: datenschutz(at)dacoso.com

II General information on data processing

1. scope of the processing of personal data 
The provision of our services requires the processing of various information. In addition, the scope of data processing depends on your activities in connection with our services. You are not subject to automated decision-making within the meaning of GDPR Art. 22.

2. Legal basis for the processing of personal data 
The following legal bases exist for the processing of personal data, unless otherwise specified

3.    Data deletion and storage period
We erase personal data as soon as the legal basis for its processing no longer applies. If there are several legal bases for a situation, the deletion takes place when the last legal basis ceases to apply, for example only when all statutory retention obligations have been fulfilled.

III.    Data processing for website provision and usage analysis

In order for us to display the website to you, it is necessary to process certain information. This already takes place when you access our website. In addition, our website uses functionalities that require further data processing.

1.    Accessing the website and log files
When you visit our website, your browser sends various pieces of information to our server. This is required in order to deliver the information requested by your browser appropriately. The data also includes the IP address from which your request is made. The following data is also transmitted:

• the name of your internet service provider
• the website from which you are visiting us
• the pages you visit on our site
• the amount of data transferred
• Internet protocol address (IP address pseudonymised)
• the date and duration of your visit

This data is not merged with other data about you. The processing of the data serves the legitimate interest of providing our website. The data is stored in a log file in order to detect, analyze and prevent misuse. Log files are deleted after 14 days, unless longer storage is necessary to fulfill the aforementioned purposes.

2.    Cookies

This website uses cookies. When you visit our website for the first time (or after deleting the browser cache), you can choose which cookies you wish to accept or whether only the cookies required to operate the website may be set. Within the “Cookiebot” service we use, you can also find out about the categories of cookies, the associated services and the resulting processing activities. Further information on the “Cookiebot” service used on this website and the use of cookies can be found below.

Cookies are text files that are used by websites to make the user experience more efficient and to obtain information about the usage behavior of visitors. Without your consent, we may only store cookies on your device that are absolutely necessary for the operation of this site. We need your consent for all other types of cookies. Necessary cookies help to make a website usable by providing basic functions such as page navigation and access to secure areas of the website. The website will not function properly without these cookies. Necessary cookies are legally permissible even without your consent.

We also use cookies to personalize content and ads, to provide social media features and to analyze traffic to our website. Some cookies are placed by third parties that appear on our pages and therefore information about your use of our website is shared with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them via other channels or that they have collected as part of your use of the respective services. You can change or revoke your consent at any time by clicking on the black settings button symbol at the bottom left side of the browser window, or by clicking on the corresponding button in the next paragraph. The changes or revocation do not apply with retroactive effect.

To manage the cookies on this website, we use the “Cookiebot” service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics). We have concluded an agreement with this provider for order processing in accordance with GDPR Art. 28. Cookiebot enables us to request the consent(s) of visitors to our website to the use of cookies. This processing is necessary pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR to fulfill a legal obligation to which we are subject. The following data is processed for this purpose only:

• Your anonymized IP address (the last three digits are set to '0')
• Status selected by the visitor (refusal or consent) and date and time Date and status
• Date and time of the consent
• Browser information of the URL from which the consent was sent
• An anonymous, random and encrypted key with the consent status of the end user, as proof of consent

The key and consent status are stored in the browser for 12 months using the “CookieConsent” cookie. This means that your cookie preference is retained for subsequent page requests. With the help of the key, your consent can be verified and tracked.

If you activate the “bulk consent” service function to give your consent for multiple services through one consent, the service also stores a separate, random and unique ID with your consent. If the “Do not track” option is deactivated via the browser settings, this key is stored in an additional cookie “CookieConsentBulkTicket” in your browser in encrypted form. Alternatively, you can also only give your consent to the processing of individual, selected services. It follows that only the services and cookies of the providers you have selected are permitted.

The processing of your data by “Cookiebot” takes place in the European Union. You can find further information at: www.cookiebot.com/de/privacy-policy/

You can revoke any consent you have already given at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected by the revocation. To revoke your consent to the setting of cookies that go beyond the cookies required to operate the website, please delete all cookies in your browser under Settings in the corresponding menu item (e.g. “Privacy and security” or “Cookies and website permissions” depending on the browser), then close your browser and click on the “Reject” button for the “Cookiebot” service when you visit our website again.

3.    Analysis of the website and other marketing and sales tools

Matomo

We use the open source software Matomo (formerly Piwik) to analyse the use of our website by visitors. If you give your consent to the setting of cookies in the "Cookiebot" service we use, the Matomo Tag Manager script is executed and a local storage variable ("mtm:tag_...") is stored in the local storage of the respective visitor's browser. You can change or revoke your consent at any time by either clicking on the black settings icon at the bottom left or by clicking on the corresponding button in this privacy policy under section III, sub-section 2. Cookies. In the event of a revocation, the local storage variable ("mtm:tag_...") in the local storage of the respective visitor's browser will also be deleted. The changes or cancellation do not apply retroactively.

The local storage variable is used by Matomo to collect statistical data on the use of our website. The Matomo Tag Manager is also required to measure the success of our advertising campaigns on the Internet, see also section VII of this privacy policy under "Google Ads". The IP addresses of visitors are only processed in pseudonymised form. The pseudonymisation is carried out by shortening the IP address. This means that no conclusions can be drawn about individual visitors to our website. Matomo collects certain technical information based on the data transmitted by the browser, such as Browser type/version, operating system used, device type, model and brand, screen resolution, the search engine used by the device, the dacoso websites visited and the forms accessed there or the phone numbers clicked on, including the length of stay, the day, time and location of the visit (continent, country, region, city) as well as the browser language. This information can no longer be traced back to personal data due to the pseudonymisation of the IP address described above and is only evaluated by us for statistical purposes. The data and information obtained in this way is not passed on to third parties.

HubSpot

We use the integrated software solution “HubSpot” for our own marketing, lead generation, our sales processes, for customer service purposes and also for analysis purposes.

The use of HubSpot by us comprises:

• - the use of the CMS (content management system) for the design of our landing pages, 
• - e-mail marketing, which regulates the sending of newsletters and automated mailings (e.g. to provide downloads)
• - the social media publishing and ad management tool, which we use to publish social media posts and manage our social media ads,
• - the form tool with which we offer forms for this website, e.g. for newsletter registration, content downloads, event registrations, general inquiries and support
• the CRM system (Customer Relationship Management system) for contact management and user segmentation, sales and support, and
• the reporting tool for analyzing any and all collected data

In the event of consent via our consent management platform “Cookiebot” for the use of cookies for analysis or marketing purposes, the scripts js-eu1.hs-scripts.com/xxx.js, js- eu1.hs-banner.com/xxx/banner.js and 

js-eu1.hs-analytics.net/analytics/xxx/xxx.js are loaded and depending on the consent of the visitor to our website, the corresponding cookies are set as described in the table above in section 2. “Cookies”. If all cookies are rejected using Cookiebot, the scripts will not be loaded.

HubSpot, Inc. is a software company from the USA (HubSpot, Inc. Two Canal Park, USA, Cambridge, MA 02141, USA). Our contractual partner is the branch office HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin; (https://legal.hubspot.com/de/impressum).This software provider works on our behalf and may therefore also process your data to the extent necessary. An agreement has been concluded with HubSpot for the protection of personal data (https://legal.hubspot.com/dpa).  In particular, personal data may be transferred to HubSpot, Inc. in the USA and other countries in which HubSpot subsidiaries and sub-processors operate and processed by HubSpot, Inc. If personal customer data is transferred outside its country of origin, each party ensures that such transfers are made in accordance with the requirements of data protection laws.

With the transfer of personal data by HubSpot to affiliated companies and sub-service providers in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection of the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: www.dataprivacyframework.gov/s/participant-search. For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR are also agreed. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in the EU.

Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy.

An overview of HubSpot's policies, technologies and certifications can be found in the Trust Center at: https://trust.hubspot.com/.

An overview of the subcontractors used by HubSpot can be found at: https://legal.hubspot.com/sub-processors-page.

The legal basis for the processing of your personal data carried out by dacoso GmbH is the legitimate interest within the meaning of GDPR Art. 6 para. 1 lit. f. The processing activities may also be based on other legal bases (e.g. consent, performance of a contract or initiation of pre-contractual measures in accordance with GDPR Art. 6 para. 1 lit. a or lit. b).

4.    Request by e-mail or contact form

You can send us an inquiry at any time using the contact form on our website or by e-mail. Mandatory fields are marked as such in the contact form. All other data that you transmit to us as part of the inquiry, including via the free text field or in the email, is provided voluntarily. The transmission of your message to us is TLS-encrypted.

We use this data exclusively for answering your inquiry and the associated communication. We may select the contact channels specified by you to reply, unless otherwise requested in your inquiry. The legal basis for this processing of your data depends on the content of your request. In principle, our legitimate interest in providing the contact functionalities and responding to your request transmitted via them applies here. If your request is aimed at the conclusion of a contract with us, the processing takes place within the framework of this pre-contractual obligation. This constitutes a legitimate interest within the meaning of GDPR Art. 6 para. 1 lit. f. The processing activities may also be based on other legal bases (e.g. consent, performance of a contract or initiation of pre-contractual measures pursuant to GDPR Art. 6 para. 1 lit. a or lit. b).

Your data will be deleted as soon as your inquiry has been finally processed, provided there are no further storage obligations. If a contract is concluded, we may process the data further to fulfill the contract.

5.    Hosting and configuration of the website

We use the services of ion2s GmbH from Darmstadt for the hosting and configuration of the website. We have concluded an agreement with this provider for order processing in accordance with GDPR Art. 28.

IV.    Ticket opening for dacoso GmbH customers

Customers of dacoso GmbH have the option of calling our hotline. The data and information (e.g. name, telephone number, name of the company, reason for the call) required for the execution of the respective support and maintenance contracts are recorded. In addition, the hotline employee checks whether a support or maintenance contract has been concluded. Only in this case will the above-mentioned data required to fulfill the contract actually be processed. This constitutes a legitimate interest within the meaning of GDPR Art. 6 para. 1 lit. f.

We use the services of CDS Call Dispatch Scholz GmbH from Mainz to operate a 24/7 hotline. We have concluded an agreement with this provider for order processing in accordance with GDPR Art. 28.

If you have not yet concluded a support or maintenance contract, please submit a corresponding request via our e-mail address info(at)dacoso.com.

V.    Processing of applicant data

dacoso GmbH uses an applicant management tool from softgarden e-Recruiting GmbH in Berlin to handle the application processes. We have concluded an agreement with this provider for order processing in accordance with GDPR Art. 28. Further information can also be found in the dacoso privacy policy Applicant management at Softgarden.

The legal basis for the processing of personal data of applicants is the implementation of pre-contractual measures in accordance with GDPR Art. 6 para. 1 lit. b. The processing may also be based on other legal bases (e.g. consent, legitimate interest pursuant to GDPR Art. 6 para. 1 lit. a or lit. f).

VI.    Visitor management

dacoso GmbH uses the visitor management tool "Welcome" from Entersmart GmbH in Munich to process visits and increase operational security. We have concluded a data processing agreement with this provider in accordance with GDPR Art. 28. All visitors are invited via "Welcome" and registered at reception on arrival. Information such as: First name and surname, company, e-mail address, time and date of visit of visitors.

The legal basis for the processing of personal data of visitors is the legitimate interest pursuant to GDPR Art. 6 para. 1 lit. f.

VII.    Social media, map service and other services used

dacoso GmbH maintains publicly accessible presences in the social media portals listed below, including the map service also listed below. The operators of the respective portals/map services can comprehensively analyze your user behavior when you visit our presence on their portal/map service. Before your first visit or after deleting your browser history and all cookies, you can use the consent query tool provided by the respective operator to select whether and to what extent you consent to the processing of your personal data. Depending on your selection, when you visit the social media presences of dacoso GmbH listed below and the map service used by us, various data protection-relevant processing activities are carried out by the respective operator, over which we have no or only limited influence. If you have an account on the respective platform, are logged into it and visit our social media presence there or use the map service, the operator of the social media portal/map service can assign this visit to your user account.However, your personal data (e.g. IP address, browser type, date and time of the visit, length of stay, etc.) can also be processed if you are not logged in or do not have an account with the respective platform operator.In this way, the operators of the respective social media portal and the map service can, for example, create user profiles in which your preferences or interests are stored.As a result, this data can be displayed, for example, for interest-based advertising both within and outside the respective social media portal and map service.If you have an account with the respective portal/map service, this interest-based advertising may also be displayed to you on other end devices on which you are or were logged in. Depending on the provider, other processing activities may also be carried out by the operators of the respective social media portal and/or map service. Details on this can be found in the data protection and terms of use of the respective social media portal and map service.

The legal basis for the processing of your personal data carried out by dacoso GmbH is to ensure the most comprehensive possible Internet presence for advertising purposes and to initiate contracts and, with regard to the map service, to make it easy for visitors to find our locations. This constitutes a legitimate interest within the meaning of GDPR Art. 6 para. 1 lit. f. The processing activities carried out by the social networks and the map service may be based on other legal bases (e.g. consent in accordance with GDPR Art. 6 para. 1 lit. a), which must be listed by the respective operators of these platforms.

If you visit one of dacoso GmbH's social media presences (e.g. on XING, LinkedIn or YouTube) or use the map service, we may be jointly responsible with the operator of the respective social media platform and/or map service for the processing activities associated with this visit in accordance with GDPR Article 26. In this case, you can assert your rights with regard to information, correction, deletion, restriction of processing, data portability and complaint both against us and against the respective operator of the social media portal and/or map service you have visited.

If you wish to exercise your rights as a data subject with regard to a specific processing activity over which we have influence, you are welcome to contact us by sending an informal message to our data protection officer using the contact details provided above. We will then either check your request (e.g. for information or objection) ourselves or forward it to the respective social media portal and/or map service as required, provided that your request concerns a processing activity by one of the providers listed below and provided that this request is related to a visit to a dacoso GmbH website. Further details on the processing activities of the providers we use can be found in the data protection declarations of these providers listed below.

The social media portals, map service and other services we use are:

XING and Kununu:
dacoso GmbH has a social media presence on XING and Kununu. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on the handling of your personal data can be found in XING's privacy policy at https://privacy.xing.com/de/datenschutzerklaerung  . According to information from XING (as of April 2023), there is no joint responsibility in connection with the company profiles on XING.

LinkedIn:
dacoso GmbH has a social media presence on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

You can view details relating to joint responsibility for processing at the following link: https://legal.linkedin.com/pages-joint-controller-addendum  

Data transfer to the USA is based on the currently applicable standard contractual clauses of the European Commission. Details can be found here: www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs .

Details on how LinkedIn handles your personal data can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy 

YouTube, Google Maps:
dacoso GmbH has a social media presence on YouTube and a company profile on the map service Google Maps with the entries of all locations in the maps of Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on joint responsibility can be found here: https://business.safety.google/intl/de/controllerterms . Data transfer to the USA is based on the currently applicable standard contractual clauses of the European Commission. You can find details here: https://business.safety.google/gdprcontrollerterms/sccs/eu-c2c/. Details on the handling of your personal data can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de .

Google Ads:
We also use the Google Ads service to place keyword-related advertisements on the Internet. When an interested party clicks on an ad, an (encrypted) Google Click ID is generated from data such as time, session duration and ad format and sent to the respective landing page (target URL) in a URL parameter called gclid. Data such as source, medium, campaign, content, keyword and gad_source parameters are also added to the respective link called up with the landing page (target URL). This data cannot be traced back to natural persons. We use the Google Click ID to be able to assign the interactions resulting from the visit to our website to the respective campaign. The Google Click ID is transferred to Matomo's conversion tracker together with the data from the link accessed. Matomo collects data such as conversion name, conversion time, conversion value and currency via Matomo tracking (depending on the interaction of the website visitor) on our website and transmits it back to Google Ads via the Matomo conversion linker together with the Google Click ID and the associated data from Matomo. To transfer the data from Google Ads to Matomo, we use so-called Urchin Tracking Modules (UTM parameters), which process data on keyword, campaign, advertising platform and advertising type. The above data is analyzed for the purpose of reviewing the effectiveness of our Ad Words campaigns and improving our website. As Matomo is configured in such a way that the IP addresses of visitors are pseudonymized, it is not possible to trace this data back to natural persons. For further details, see also section III of this privacy policy in sub-section 3., Analysis of the website and other marketing and sales tools under Matomo. Depending on whether you are logged in with a Google account when you enter a keyword or depending on your consent status when you access Google Search for the first time, Google may process data in its own interest. Since this processing depends directly on the consent you have given to Google, we have no influence on the resulting processing by Google in this case. If you are not logged in with a Google account and have not given your consent to processing when you first call up Google Search, Google Ads works in this configuration without cookies and it is not possible to trace the data processed by us back to natural persons. The provider of Google Ads is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on this processing and the protection of your data can be found here: https://www.google.com/analytics/terms/dpa/dataprocessingamendment_20200816.html .Furthermore, we use the services of Seokratie GmbH from Munich for the configuration and placement of Google Ads and Matomo. We have concluded a data processing agreement with this provider in accordance with GDPR Art. 28.

XIII Protection of minors

Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. dacoso GmbH does not request personal data from children and young people. We do not knowingly process such data. The services offered by dacoso GmbH are aimed exclusively at tradespeople or job seekers.

IX. Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of GDPR Art. 4 para. 1. As a data subject, you are entitled to the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details provided above.

Right to withdraw consent and to object pursuant to GDPR Art. 21
If the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. These declarations take effect upon receipt by us. To exercise your right of objection or revocation, you can contact us or our data protection officer using the contact details above. If you object to processing based on our legitimate interest, we may only continue the processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Right to information in accordance with GDPR Art. 15
You have a right to information about your personal data processed by us. This includes the mandatory information set out in GDPR Art. 15.

Right to rectification in accordance with GDPR Art. 16
You have the right to obtain without undue delay the rectification of inaccurate personal data and the completion of incomplete personal data.

Right to erasure in accordance with GDPR Art. 17
You have the right to request the erasure of your personal data if one of the grounds specified in GDPR Art. 17 applies, in particular if there is no longer a legal basis for the processing.

Right to restriction of processing in accordance with GDPR Art. 18
You have the right to request the restriction of the processing of your personal data if one of the reasons stated in GDPR Art. 18 applies, in particular at your request instead of deletion of the data.

Right to data portability in accordance with GDPR Art. 20
You have the right to receive all personal data we have stored about you in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from the controller to which the personal data has been provided.

Right to lodge a complaint with the competent supervisory authority, GDPR Art. 77
In accordance with GDPR Art. 77, you have the right to lodge a complaint with the supervisory authority responsible for you.

X. Recipients of data

The recipients of data are the service providers listed in sections III to VIII. All service providers used by us are carefully checked in advance and used exclusively on the basis of the provisions of the GDPR: In the event of commissioned processing, we have concluded an agreement with the respective service provider on the order agreement in accordance with GDPR Art. 28 para. 3. In the event that data is transferred to third countries, this is done on the basis of the provisions of GDPR Art. 44 to 50.

October 2024