cleversoft group GmbH+49(0)89 288 51110
Open a Support Ticket Support
Join our newsletter
Join our newsletter

Privacy Policy

We, as cleversoft group, value your privacy and security of your personal data. In this Privacy Policy, we inform you about the collection, usage, storage and transfer of your personal data when visiting our website as well as when interacting us with regards to our products and services.

 

 


Questions? Our team will answer them all.


We are happy to answer all your questions about cleversoft and our services.

Get in touch

Questions? Our team will answer them all.


We are happy to answer all your questions about cleversoft and our services.

Get in touch

The controller of your personal data within the meaning of Article 4 (7) EU General Data Protection Regulation (GDPR) is:

cleversoft group GmbH
Luise-Ullrich-Str. 14,
80636 Munich
Germany 
E-Mail: info@clever-soft.com

See our imprint

Оur data protection officer is:

Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH 
Alexander Bugl 
Eifelstraße 55 
93057 Regensburg, Germany 
E-Mail: kontakt@buglundkollegen.de 

You are entitled to the following rights vis-à-vis the controller:

  • Right of access by the data subject (Art. 15 GDPR)
  • Right to rectification or right to erasure (Art. 16, 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Notification obligation regarding rectification of erasure of personal data or restriction of processing (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to revoke given declarations of consent. The lawfulness of the processing carried out until the revocation remains unaffected on the basis of the content valid to date. (Art. 7 (3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

The competent supervisory authority in data protection matters can be found under the following link.

1. Hosting

The hosting services we use are intended to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, email dispatch, security services and technical maintenance services, which we use for the purpose of operating this online presence.

For this purpose, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, metadata and communication data of customers, interested parties and visitors of this online presence on the basis of our legitimate interests in an efficient and secure provision of this online presence, in accordance with Art. 6 para.1 lit. f GDPR. The data is processed in the data centers in the EU.

2. Website visit

When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to us. If you wish to view our website, we collect the following data, which are necessary for us in technical terms in order to display our website to you and to ensure its stability and security:

  • IP address
  • Date and time of query
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Volume of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

We collect and store this data on the basis of our legitimate interest for a limited time in order to initiate a derivation to personal data in the event of unauthorized access or attempted access to local servers (Art. 6 (1) point (f) GDPR).

3. Use of cookies

Cookies are very small text documents or pieces of code that often contain a unique identification code. When you visit a website or use a mobile application, a computer asks your computer or mobile device for permission to store this file on your computer or mobile device and access information. Information collected through cookies may include the date and time of your visit and how you use a particular website or mobile application. Please visit our Cookie Policy for the details of the collection and processing of data via cookies included in our Cookie Policy.

Which cookie banner do we use?

This website uses the cookie consent technology of cookiebot provided by Cybot A/S Havnegade 39 1058 Copenhagen Denmark in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) point (c) GDPR.

When you enter our website, the following personal data is stored in the data centers in the EU:

  • Date and time of your consent(s)
  • Your anonymized IP number
  • Browser user agent
  • Website URL
  • An anonymous, random and encrypted key value
  • Your consent state, serving as a proof of consent

The data collected in this way is stored until you request us to delete it, delete the cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention obligations remain unaffected.

4. Language settings

Our website uses wpml plugin, the service provided by OnTheGoSystems Ltd., 22/F Lockhart Road Wanchai Hong Kong for showing the translated versions of the pages on this website. The plugin is loaded when you visit the website so that you can change the language to a language via the language icon in the header of the website. The plugin is technically necessary and used for storing current/selected language only.

5. Use of Cloudflare

a. Nature and purpose of the processing 

We use Cloudflare, the service provided by Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107 USA for Content Delivery Network (CDN) which helps us to provide you with the website content faster, uninterrupted. It also contributes enhancing the security of the website.

b. Legal basis of the processing

The processing of the entered data is based on our legitimate interest (Art. 6 para.1 lit. f GDPR).

c. Data categories
  • IP-Address (anonymized)
d. Recipients
  • Employees of IT and marketing departments
  • Cloudflare as data processor
e. Storage duration 

The data is deleted when it is no longer required for the purpose for which it was collected.  

f. Legal / contractual requirement 

The provision of personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be limited. 

g. Third country transfer 

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, Standard Contractual Clauses have been agreed with Cloudflare.  

h. Automatic decision-making and profiling 

As a responsible company, we do not use automatic decision-making or profiling in this data processing. 

6. Contact Forms

a. Nature and purpose of the processing

The data you provide in the contact form will be stored for the purpose of individual communication with you. For this purpose, it is necessary that you provide us your salutation, business contact information and short description of the reason of your contact. This serves the assignment of the request and the subsequent response to it. The provision of additional data is optional. If you contact us by email, the data you provide (email address, your name and telephone number, if applicable) will also be processed for individual communication. By submitting the contact form, you subscribe for receiving marketing communications from us. This website uses Gravity Forms provided by Rocketgenius Inc., 1620 Centerville Turnspike, Suite 102 Virginia Beach VA 23464-6500 USA for creating the contact forms.

In order to interconnect our tools and thus to be able to respond to the request for information and documents via the contact form, we use the integration service provider Clickdimensions LLC., 5901 Peachtree Dunwoody Road, NE Suite B500, Atlanta, USA. To ensure quick processing and response to your request, it is necessary for us to transfer the stored data of the contact forms to our CRM system in order to ensure a quick processing and response to your request. Therefore, the use of an integration service provider is essential in this regard.

b. Legal basis of the processing

Data provided is processed on the basis of a legitimate interest (Art 6 para 1 lit. f GDPR). By providing the contact form and our email address, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. If you contact us to request an offer, we will process the data provided to implement pre-contractual measures (Art. 6 (1) point (b) GDPR).

The use of the integration service provider is based on our legitimate interest pursuant to Art. 6 (1) point (f) GDPR which guarantees a fast processing of/response to your request as well as cost-efficient design and optimization.

c. Data categories
  • Salutation
  • Business contact information
  • Your field of interest
  • Content of the message
  • IP Address
d. Recipients
  • Recipients of the data are internal employees of the relevant departments
  • Gravity Forms and Clickdimensions as data processors
e. Storage duration

Data will be erased no later than six months after the request has been processed. If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (Handelsgesetzbuch, HGB) and erase your data after these periods have expired.

f. Legal / contractual requirement

Providing your personal data is entirely voluntary. However, we can only process your request if you provide us with the required information.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). In order to guarantee the level of data protection in this third country, Standard Contractual Clauses have been agreed with Clickdimensions.

h. Automated decision-making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

7. Newsletter

a. Nature and purpose of the processing

We will use data to deliver the subscribed newsletter to you by email. The information is used in order for us to be able to address you personally in the newsletter and, if necessary, to identify you if you choose to exercise your rights as a data subject. To receive the newsletter, it is sufficient that you provide us with your salutation, email address. When you subscribe to our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by email about circumstances relevant to the service or subscription (e.g. changes to the newsletter offer or technical circumstances). The email address you provide has to be valid for successful subscription validation. In order to verify that a subscription was actually initiated by the owner of an email address, we use the “double-opt-in” procedure. For this purpose, we log the subscription submission to the newsletter, the sending of a confirmation email and the receipt of the response requested herewith.

We would like to inform you that we evaluate your user behavior upon sending our newsletter. For this evaluation, the emails you receive contain so-called web beacons or tracking pixels, which are single-pixel image files stored by our service provider ClickDimensions. To perform these evaluations, we associate the data and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID. The data obtained in this way enables us to create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on in them and infer your personal interests from this. We link this data to actions you have taken on our website.

b. Legal basis of the processing

On the basis of your expressly given consent (Art. 6 (1) point (a) GDPR), we will regularly send our newsletter or equivalent information by email to your specified email address. The evaluation of user behavior is only carried out on the basis of your aforementioned expressly given consent.

c. Data categories
  • Salutation
  • Business contact details
  • Your field of interest
  • User behavior
d. Recipients
  • Recipients of the data are internal employees of corresponding departments
  • ClickDimensions as data processor.
e. Storage duration

This data will only be processed for the duration of the required consent. Upon revocation of the consent the data will be erased.

f. Legal / contractual requirement

Providing your personal data is entirely voluntary. Without your explicit consent, we do not send you our newsletter.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in the third country, Standard Contractual Clauses have been agreed with ClickDimensions.

h. Revocation of consent

You can revoke your consent to the storage of your personal data, its use for newsletter dispatch and tracking at any time with effect for the future. You will find an opt-out link in every newsletter. In addition, you can inform us of your revocation by contacting us.

i. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

8. Use of Google Analytics and Tag Manager

a. Nature and purpose of the processing

We use Google Analytics, a web analytics service provided by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyse how visitors use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of this website’s operator, Google will use this information to analyse your use of the website, compile reports on website activity and provide further services relating to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The purposes of data processing are to evaluate the use of the website and to compile reports on website activities. Based on the use of the website and the Internet, other related services shall then be provided.

We also use Google Tag Manager which uses tags incorporated into the HTML/JavaScript code and delivered to a web browser when a web page loads. Once the tags are triggered according to the predefined conditions, they collect relevant information from your interaction with the website and send to Google Analytics, where it can be analyzed and utilized for various purposes, including website optimization, marketing campaigns, and user tracking.

b. Legal basis of the processing

The processing of the entered data is based on the user’s consent (Art. 6 (1) point a GDPR).

c. Data categories
  • Pageviews
  • Clicks and interactions
  • Form submissions
  • Conversations
  • User behaviour
  • IP address (anonymized)
d. Recipients
  • Employees of the IT and marketing department
  • Google as data processor
e. Storage duration

Data will only be processed in this context as long as the necessary consent has been given. Afterwards, they will be erased, provided that there are no legal retention obligations that prevent erasure. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you do not grant your permission, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, Standard Contractual Clauses have been agreed with Google (Analytics).

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the available browser plugin: “Browser Add-On to disable Google Analytics”.

i. Automatic decision-making and profiling

With the help of the tracking tool Google Analytics, the behavior and interests of visitors of this website can be analyzed. For this purpose, we create a pseudonymous user profile.

9. Webinar

a. Nature and purpose of the processing

We use GoTo Technologies Ireland Unlimited Company, The Reflector 10 Hanover Quay Dublin 2 DO2R573 Ireland, as a tool for organizing and holding webinars. To register for a webinar, you need to provide us with the required information. The email address you provide must be valid for successful registration. After submitting the registration form, you will receive an invitation email from GoTo. Registration for webinars is free of charge and you can register for webinars in exchange with your data. The data you provide will be used for registering you for the respective webinar. You may also be contacted for marketing purposes. (e.g., about our services or upcoming webinars). This consent can be revoked at any time via the opt-out link in each newsletter. Information about data processing by GoTo in general can be found here: https://www.goto.com/company/legal.

In order to interconnect our tools and thus to be able to respond to the request for information and documents via the registration form, we use the integration service provider Clickdimensions LLC., 5901 Peachtree Dunwoody Road, NE Suite B500, Atlanta, USA. To ensure quick processing and response to your request, it is necessary for us to transfer the stored data of the registration forms to our CRM system in order to ensure a quick processing and response to your request. Therefore, the use of an integration service provider is essential in this regard.

b. Legal basis of the processing

The processing of the entered data is based on the user’s consent (Art. 6 (1) point (a) GDPR).

c. Data Categories
  • Salutation
  • Business contact details
  • IP address
  • Type of device or endpoint
  • Geolocation data
  • Duration of service use
  • Time zone
  • Other data which may be shared by you voluntarily during webinar
d. Recipients
  • Employees of IT and marketing departments
  • GoTo Technologies Ireland Unlimited Company as data processor
  • Clickdimensions as data processor
e. Storage duration

Data will only be processed in this context as long as the necessary consent has been given. Afterwards, they will be erased, provided that there are no legal retention obligations that prevent erasure. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.

f. Legal/ contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you do not grant your permission, we do not register you for our webinars.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, Standard Contractual Clauses have been agreed with Clickdimensions.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Automatic decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

10. Online Presence in Social Media

We use our social network accounts in order to inform social network users about our services and to communicate directly via the platforms if they are interested. We are currently represented in the following social networks:

  • Twitter
  • LinkedIn

Our social media channels can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website than the respective networks offer for embedding the offers on websites.
We have no influence on data collection and its further use by the social networks. Hence, we have no knowledge about the extent to which, where and for how long the data is stored, to what extent the networks comply with existing erasure obligations, what evaluations and links are created with the data and to whom the data is forwarded. We therefore expressly draw attention to the fact that user data (e.g. personal information, IP address) is stored by the operators of the networks in accordance with their data usage guidelines and used for business purposes.

We only process the data of users in our social media channels to the extent that users contact us and communicate with us, via, for example, comments or direct messages. The legal basis for the processing of user data is Art. 6 (1) point b and f GDPR.

  • Twitter
  • LinkedIn

No functions and contents of the service Twitter, offered by Twitter Inc., 795 Folsom Street, Suite600, San Francisco, CA 94107 or 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, are part of the scope of our online offer. The Twitter channels can only be accessed via an external link. If visitors to the website are members of the Twitter platform, Twitter can match the call to the social media channel with the user’s profile if the user visits our Twitter profile while logged in. We would like to point out that we have neither influence on the content nor the scope of use of the data collected by Twitter Inc. For further information in this regard, please refer to the Twitter Inc. privacy policy.
Furthermore, we would like to point out that you can modify the settings of your Twitter accounts to protect your privacy accordingly.

No functions and contents of the LinkedIn service, offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are part of the scope of our online offer. The LinkedIn channels are only accessible via an external link.
If visitors to our website are members of the LinkedIn platform, LinkedIn can match the call to the social media channel with the user’s profile if the user visits our LinkedIn profile while logged in. We point out that we have neither influence on the content nor the scope of use of the data collected by LinkedIn. For further information in this regard, we refer to the privacy policy of LinkedIn.

a. Nature and purpose of the processing

We may process the personal data of our customers, prospective customers, suppliers, vendors and partners for communication, planning, performing the contractual relationship, marketing, administration and security purposes.

b. Legal basis of the processing

The processing of the data provided is based on a legitimate interest (Art 6 (1) Point (f) GDPR) and contract performance (Art 6 (1) point (b) GDPR).

c. Data Categories
  • Contact Information (full name, job title, work email address, work phone number, work address)
  • Billing information and payment data
  • Further necessary information in a project or contractual relationship or information provided voluntarily to us such as personal data relating to orders, payments, requests, and projects
d. Recipients
  • Recipients of the data are internal employees of the relevant departments and, if applicable, order processors.
e. Storage duration

We delete personal data if the storage of that personal data is no longer necessary for the purposes for which it was collected or processed, or to comply with legal obligations (e.g. German Commercial Code (Handelsgesetzbuch, HGB).

f. Third country transfer

Your personal data may be transferred to third parties established outside the European Union (EU) or the European Economic Area (EEA) which provide hosting services to us. To ensure the level of data protection in the third country, we have agreed to the Standard Contractual Clauses with our respective service providers.

g. Automated decision-making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

 

a. Nature and purpose of the processing

We use Jira Help Center, which is a service provided by Atlassian 341 George Street, Sydney, NSW 2000, Australia, as a tool for supporting our customers regarding our products and services. When you click on the “Open a ticket” button, you will be directed to the Atlassian website, where you will be asked to provide contact information, a summary of your problem and any other documentation, screenshots or information that would be helpful for solving your problem. For more information, please see Privacy Policy | Atlassian. The data you provide will be processed by us for support and communication purposes.

b. Legal basis of the processing

The processing of the data is necessary for the performance of a contract according to the Art. 6 point b GDPR.

c. Data Categories
  • Contact Information
  • IP-Address
  • Language
  • Content of the ticket
d. Recipients
  • Employees of IT, IS and customer support departments
  • Atlassian as data processor
e. Storage duration

Data will only be processed in this context as long as it is necessary to provide our support services as agreed in the service contracts. Afterwards, they will be erased, provided that there are no legal retention obligations that prevent erasure.

f. Legal/ contractual requirement

The provision of your personal data is necessary for us to provide our support services which is an obligation arising from our service contracts.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded the so-called standard data protection clauses with Atlassian.

h. Automatic decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

 

About the data controller and the data protection officer

Information about the data controller:

 

Cleversoft group GmbH and the respective hiring group entity are jointly responsible for your data.

For further details about the controllers and our data protection officer please see our Imprint.

 

Which personal data do we collect and where does it come from?

We process the following personal data as part of the application process:

  • Your basic data (such as first name, last name, name affixes, date of birth)
  • If required, work permit / residence permit
  • Contact details (such as private address, (mobile) phone number, email address),
  • Skill data (e.g. expertise and skills)
  • Further data from the application documents

Your personal data is generally collected directly from your input as part of the recruitment process, in particular from your application documents, your job interview and from the personnel questionnaire.  In addition, we may receive data from third parties (e.g. employment agencies, headhunters).

We also process personal data that we have lawfully obtained from publicly accessible sources (e.g. professional networks).

For what purposes and on what legal basis is data processed?

We process your personal data in accordance with the provisions of the EU Data Protection Basic Regulation (EU GDPR).

The primary purpose of data processing is to establish the employment relationship. The primary legal basis for this is Art. 88 Para. 1 GDPR in conjunction with Art. 26 Para. 1 BDSG (German data protection law). Your data will be processed exclusively for the purpose of filling the specific position for which you have applied.

Should you wish to be included in our pool of applicants in the event of rejection, we would need a declaration of consent from you.

Should your application be considered for other open positions in the company/group, we would need a declaration of consent from you.

How long will your data be stored?

In the event of employment, we will copy your application documents into your personnel file. After termination of the employment relationship, those personal data which we are legally obliged to keep will continue to be stored. This results from legal obligations to provide evidence and to retain data, which are regulated in the German Commercial Code and the German Fiscal Code, among others. The storage periods thereafter are up to ten years. In addition, personal data may be stored for the time during which claims can be made against us (statutory limitation period of three or up to thirty years).

In the event of rejection, your application documents will be deleted generally three months, but no later than six months after completion of the application procedure, unless you have given us permission to retain them for a longer period (applicant pool).

Who will receive your data?

Within our company, only the persons and positions (e.g. division, Works Council, disabled employees’ representative) involved in the decision about your employment will receive your personal data.

What rights are you entitled to assert as a data subject?

You are entitled to the rights under Art. 15 – 21 GDPR:

  • Right of access by the data subject (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to data portability (Art. 20 GDPR)

Where can you complain?

You have the possibility to address a complaint to the above-mentioned data protection officer or to a data protection supervisory authority.

The competent supervisory authority in data protection matters can be found under the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Is your data transferred to a third country?

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have agreed the Standard Contractual Clauses with our service providers which provide us with hosting services.

Is it mandatory to provide your data?

In order to be able to consider your application, we require from you the personal data necessary for the decision on the establishment of the employment relationship.

To what extent do automated individual case decisions or profiling measures take place?

We do not use purely automated processing to make a decision.