Privacy Policy

Antetype macOS, Antetype Cloud, Antetype iOS Viewer, Antetype websites and social media profiles

Change website cookie settings

Data protection information of Cotype GmbH

A. General data protection information

(1) Name and address of the controller

We are the controller of your personal data within the meaning of Art. 4 No. 7 GDPR:

Cotype GmbH (hereinafter: “Cotype”, “the company“, “we” or “us”)

Europaallee 20a, 66113 Saarbrücken, Germany

Phone: +49 681 959 88 20 0

Email: info@antetype.com

For further information on our company, please refer to the imprint details on our website https://www.antetype.com/imprint/.

(2) Data deletion and storage period

For the processing operations carried out by us, we indicate below in each case how long the data will be stored by us and when it will be deleted or blocked. If no explicit storage period is specified below, your personal data will be deleted or blocked as soon as the purpose or legal basis for the storage no longer applies.

However, storage may take place beyond the specified time in the event of a (threatened) legal dispute with you or other legal proceedings or if storage is provided for by statutory regulations to which we are subject as the responsible party (e.g. § 257 HGB, § 147 AO). If the storage period prescribed by the statutory provisions expires, the personal data will be blocked or deleted unless further storage by us is necessary and there is a legal basis for this.

(3) Cooperation with processors

We use external domestic and foreign service providers (e.g. for IT, logistics, telecommunications, sales and marketing) to process our business transactions. They are only active according to our instructions and have been contractually obligated to comply with data protection regulations in accordance with Art. 28 GDPR.

a) AWS hosting

We host our website with AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter: AWS).

When you visit our website, your personal data is processed on the servers of AWS. During this process, personal data may also be transmitted to the parent company of AWS in the USA. The data transfer to the USA is based on the EU standard contractual clauses. Details can be found here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/

For more information, please refer to the AWS privacy policy: https://aws.amazon.com/de/privacy/?nc1=f_pr

The use of AWS is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in the reliable presentation of our website. Insofar as a corresponding consent has been requested, the processing is carried out on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time. If you use our software on a contractual basis, the processing can be also carried out on the basis Art. 6 (1) lit. b GDPR.

We have concluded a processing contract with AWS. This is a contract required by data protection law, which ensures that AWS only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

b) Crisp.chat

For the chat function on this website and as a support system we use the service crisp.chat of the provider Crisp IM SARL, 2 Boulevard de Launay, 44100 Nantes, France (“Crisp”).

When using the chat implementation on our website, your personal data is processed on the servers of Crisp. During this process, data may also be transferred to the USA via services used by Crisp.

For more information, please refer to the Crisp privacy policy: https://crisp.chat/en/privacy/

We have concluded a processing contract with Crisp. This is a contract required by data protection law, which ensures that Crisp only processes the personal data received by our website implementation of crisp.chat in accordance with our instructions and in compliance with the GDPR.

Processing is carried out for the purposes of responding to your enquiries (if you have sent us an enquiry) or communicating with you.

The legal basis for processing for the purpose of answering enquiries that serve a future conclusion of a contract and are initiated by you is Art. 6 (1) lit. a GDPR and Art. 6 (1) lit. b GDPR and in other cases, i.e. for general enquiries, Art. 6 (1) lit. f GDPR.

The legitimate interest is the effective provision of information to users, customers and interested parties and communication with these persons.

c) ActiveCampaign

For the purpose of e-mail marketing, we use ActiveCampaign. The provider of this service is ActiveCampaign, 1 N Dearborn St 5th floor, Chicago, IL 60602, United States.

If you register for Antetype and/or our newsletter, your personal data will be processed on ActiveCampaign’s servers. Personal data may also be transmitted to the USA during this process.

For more information, please refer to the ActiveCampaign privacy policy: https://www.activecampaign.com/legal/gdpr-updates/our-plan

We have concluded a processing contract with ActiveCampaign. This is a contract required by data protection law, which ensures that ActiveCampaign only processes the personal data received by our website implementation of ActiveCampaign in accordance with our instructions and in compliance with the GDPR.

For more information, please visit: https://www.activecampaign.com/legal/newscc

The processing is carried out for the purpose of information and communication with you as an interested party or customer.

The legal basis for processing for the purpose of information and communication is Art. 6 (1) lit. b GDPR and Art. 6 (1) lit. a GDPR and in other cases, i.e. for the purpose of marketing, Art. 6 (1) lit. f GDPR.

The legitimate interest is the effective provision of information to users, customers and interested parties and communication with these persons.

In case you do not want to receive further e-mails, you can unsubscribe from the newsletter at any time without giving reasons.

d) Archbee

For the purpose of documentation of our services, we use archbee.io. The provider of this service is AiurLabs, 2035 Sunset Lake Road, Suite B-2, zip code 19702, Newark, Delaware, United States.

Based on the documentation via archbee.io, personal data is processed on the servers of AiurLabs. In the process, personal data may also be transferred to the USA.

For more information, please see AiurLabs’ privacy policy: https://www.archbee.io/privacy-policy

We have concluded a processing agreement with AiurLabs. This is a contract required by data protection law, which ensures that AiurLabs only processes personal data according to our instructions and in compliance with the GDPR.

Processing is carried out for the purpose of documenting Antetype.

The legal basis for processing for the purpose of documentation is Art. 6 (1) lit. b GDPR and in other cases, i.e. for the improvement of our services, Art. 6 (1) lit. f GDPR.

The legitimate interest is documentation, including for the purpose of contract performance.

(4) Conditions for the transfer of personal data to third countries

In the course of our business relationships, your personal data may be passed on or disclosed to third party companies. These may also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing takes place exclusively for the fulfilment of contractual and business obligations and for the maintenance of your business relationship with us. We will inform you about the respective details of the transfer in the following at the relevant points.

Some third countries are certified by the European Commission through so-called adequacy decisions as having a level of data protection comparable to the EEA standard (a list of these countries and a copy of the adequacy decisions can be obtained here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is sufficiently guaranteed. This is possible through binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognised codes of conduct.

(5) No automated decision-making (including profiling)

We do not intend to use any personal data collected from you for any automated decision-making process (including profiling).

(6) No obligation to provide personal data

We do not make the conclusion of contracts with us dependent on you providing us with personal data in advance. As a customer, you are not under any legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case in the context of the products offered by us presented below, you will be informed of this separately.

(7) Legal obligation to transmit certain data

We may, under certain circumstances, be subject to a specific legal or statutory obligation to make the lawfully processed personal data available to third parties, in particular public bodies (Art. 6 (1) lit. c GDPR).

(8) Your rights

You can assert your rights as a data subject regarding your processed personal data at any time by contacting us using the contact details provided at the beginning of this document. You have the right as a data subject:

in accordance with Art. 15 GDPR to obtain from us confirmation as to whether or not personal data concerning you are being processed. In particular, you can request information about the processing purposes, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
in accordance with Art. 16 GDPR to demand the rectification of inaccurate personal data concerning you by us without delay;
in accordance with Art. 17 GDPR to request the deletion of your data processed by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
to demand the restriction of the processing of your data in accordance with Art. 18 GDPR, insofar as the correctness of the data is disputed by you or the processing is unlawful;
in accordance with Art. 20 GDPR, to receive your data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller (“data portability”);
object to the processing pursuant to Art. 21 GDPR, provided that the processing is carried out on the basis of Art. 6 (1) lit. e or lit. f GDPR. This is particularly the case if the processing is not necessary for the performance of a contract with you. Unless it is an objection to direct marketing, when exercising such an objection, we ask you to explain the reasons why we should not process your data as we have done. In the event of your justified objection, we will review the merits of the case and either cease or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing;
in accordance with Art. 7 (3) GDPR to revoke your consent given once GDPR at any time vis-à-vis us, if you have given such consent. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
complain to a data protection supervisory authority about the processing of your personal data in our company in accordance with Art. 77 GDPR, such as the data protection supervisory authority responsible for us: Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Str. 12, 66111 Saarbrücken, e-mail: poststelle@datenschutz.saarland.de.

(9) Date

This privacy notice is current as of 10.12.2021.

B. Special data protection information for visitors of our website

You can obtain information about our company and the services we offer in particular at www.antetype.com together with the associated sub-pages (hereinafter collectively referred to as “websites”). When you visit our websites, your personal data may be processed.

(1) Personal data processed

During the informative use of the web pages, the following categories of personal data are collected, stored and processed by us:

“Log data”: When you visit our websites, a so-called log data record (so-called server log files) is stored temporarily and anonymously on our web server. This consists of:

the page from which the page was requested (so-called referrer URL)
the name and URL of the requested page
the date and time of the call
the description of the type, language and version of the web browser used
the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established
the amount of data transferred
the operating system
the message whether the call was successful (access status/http status code)
the GMT time zone difference

“Contact form data”: When contact forms are used, the data transmitted through them are processed (e.g. gender, surname and first name, address, company, e-mail address and the time of transmission).

In addition to the purely informational use of our website, we offer the subscription to our newsletter, with which we inform you about current developments and events. If you subscribe to our newsletter, the following “newsletter data” will be collected, stored and processed by us:

the page from which the page was requested (so-called referrer URL)
the date and time of the call
the description of the type of web browser used
the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established
the e-mail address
the date and time of registration and confirmation

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. For the evaluations, we link the aforementioned data and the web beacons with your e-mail address and an individual ID. Links contained in the newsletter also contain this ID.

(2) Purpose and legal basis of data processing

We process the personal data described in more detail above in accordance with the provisions of the GDPR, the other relevant data protection regulations and only to the extent necessary. Insofar as the processing of personal data is based on Art. 6 (1) lit. f GDPR, the aforementioned purposes also represent our legitimate interests.

The processing of the log data serves statistical purposes and the improvement of the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6 (1) lit. f GDPR).

The processing of contact form data takes place for the handling of customer inquiries (legal basis is Art. 6 (1) lit. b or lit. f GDPR).

The newsletter data is processed for the purpose of sending the newsletter. When registering for our newsletter, you consent to the processing of your personal data (legal basis is Art. 6 (1) lit. a GDPR). For the registration to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to info@antetype.com or by sending a message to the contact details given in the imprint.

(3) Duration of data processing

Your data will only be processed for as long as is necessary to achieve the above-mentioned processing purposes; for this purpose, the legal bases stated in the context of the processing purposes apply accordingly. With regard to the use and storage duration of cookies, please note point A.(3).

Third parties engaged by us will store your data on their systems for as long as is necessary in connection with the provision of services for us in accordance with the respective order.

You can find more details on the storage period under A.(3).

(4) Transfer of personal data to third parties

The following categories of recipients, which are usually processors (see A.(4)), may have access to your personal data:

Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security). The legal basis for the transfer is then Art. 6 (1) lit. b or lit. f GDPR, insofar as it does not involve processors;
Government agencies/authorities, insofar as this is necessary for the fulfilment of a legal obligation. The legal basis for the disclosure is then Art. 6 (1) lit. c GDPR;
Persons employed to carry out our business operations (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The legal basis for the disclosure is then Art. 6 (1) lit. b or lit. f GDPR.

For the guarantees of an adequate level of data protection in case of transfer of data to third countries, see A.(5).

Furthermore, we will only pass on your personal data to third parties if you have given your express consent to do so in accordance with Art. 6 (1) lit. a GDPR.

(5) Use of cookies, plugins and other services on our website

a) Cookies

We use cookies on our websites. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive by means of a characteristic character string and through which certain information flows to the agency that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the Internet offer more user-friendly and effective overall, i.e. more pleasant for you.

Cookies can contain data that make it possible to recognize the device used. In some cases, however, cookies only contain information about certain settings that are not personally identifiable. However, cookies cannot directly identify a user.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. With regard to their function, a distinction is made between cookies:

Technical cookies: these are essential to navigate the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they store which web pages you have visited;
Performance cookies: these collect information about how you use our website, which pages you visit and, for example, whether errors occur during website use; they do not collect information that could identify you – all information collected is anonymous and is only used to improve our website and find out what interests our users;
Advertising cookies, targeting cookies: These are used to offer the website user made-to-measure advertising on the website or offers from third parties and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 13 months;
Sharing cookies: these are used to improve the interactivity of our website with other services (e.g. social networks); sharing cookies are stored for a maximum of 13 months.

Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your explicit and active consent pursuant to Art. 6 (1) lit. a GDPR. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we will only share your personal data processed through cookies with third parties if you have given your express consent to do so in accordance with Art. 6 (1) lit. a GDPR.

The functions we use, which you can select and revoke individually via the Consent Manager, are described below.

b) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyse the activities of a user across devices.

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. We would like to point out that on this website Google Analytics has been extended to include IP anonymisation in order to ensure that IP addresses are recorded anonymously (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Here you can find more information on the terms of use (https://marketingplatform.google.com/about/analytics/terms/de/) and data protection (https://policies.google.com/?hl=de).

Purposes and legal basis of data processing

On behalf of Cotype, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to Cotype.

The legal basis for the use of Google Analytics is Art. 6 (1) lit. a GDPR.

Transfer to a third country

Insofar as personal data is transferred to Google servers in the USA and stored and further processed there, we have concluded the standard contractual clauses adopted by the EU Commission with Google, which permit the transfer of personal data to the USA in individual cases.

Duration of data storage

The data processed by Google Analytics can be viewed by us for 14 months.

Withdrawal of consent

You can revoke your consent at any time with effect for the future in our Cookie Consent Manager.

Obligation to provide data

The provision of your data is voluntary. Of course, you can also view our website without cookies in principle. In general, you can deactivate the use of cookies at any time via your browser settings.

Please note that some features of our website may not work if you have disabled the use of cookies.

c) Social media

aa) LinkedIn

For the information service offered here, Cotype uses the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”). We would like to point out that you use this LinkedIn page of Cotype and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

Joint responsibility with LinkedIn

Cotype is only jointly responsible with LinkedIn for the processing of so-called “Insights Data”, insofar as this data is used for the creation of so-called “Page Insights”.

Cotype and LinkedIn have concluded an agreement as part of their joint responsibility, which you can access here (so-called “Page Insights Joint Controller Addendum”) (https://legal.linkedin.com/pages-joint-controller-addendum). The agreement applies to those data processing operations that are collected in connection with a visit to or interaction with our LinkedIn profile, but only insofar as these data are also processed (thereafter) for “Page Insights”. “Page Insights” include analytics services that help the operator of a LinkedIn profile to better understand interactions with his pages. The purpose of the data processing is to create aggregated statistics for LinkedIn profile operators.

This involves the processing of data in the context of a visit to or interaction of persons with a LinkedIn profile, but only insofar as the purpose is the use for “Page Insights”. LinkedIn provides more detailed information on this under this link (https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview?lang=en). The information on data for “Page Insights” available to data subjects indicates how and when “Insights Data” are collected and used to create “Page Insights”:

When a LinkedIn member visits, follows, or engages with the site, LinkedIn processes personal data to provide the site operator with usage insights. Specifically, LinkedIn processes data that the member has provided to LinkedIn, such as job function, country, industry, seniority, company size, and employment status data from a member’s profile. In addition, LinkedIn processes information about how a member has interacted with your company page, such as whether a member is a follower.

When you visit our LinkedIn page, LinkedIn collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as the operator of the LinkedIn page, with statistical information about the use of the LinkedIn page. We do not receive any personal data from LinkedIn in this context.

The data collected about you in this context is processed by LinkedIn and may be transferred to countries outside the European Union. LinkedIn describes in general terms what information it receives and how it is used in its user agreement and privacy policy. There you will also find information on how to contact LinkedIn and on the settings options for advertisements. LinkedIn’s data policy is available at this link (https://de.linkedin.com/legal/privacy-policy).

Should you wish to exercise a data subject right to which you are entitled under the GDPR, we would like to point out that we cannot fully comply with all of these rights without LinkedIn. Surely, therefore, it would be more effective for you to contact LinkedIn directly. However, if you still need assistance, please feel free to contact us.

The respective responsibilities, in particular with regard to the protection of data subject rights, between Cotype and LinkedIn can be found in the Page Insights Addendum.

LinkedIn assumes primary responsibility for compliance with the GDPR obligations for the shared processing of “Insights Data”. This includes the fulfillment of the following data subject rights:

the right of access (Art. 15 GDPR),
the right to erasure (Art. 17 GDPR),
the right to restrict processing (Art. 18 GDPR),
the right to data portability (Art. 20 GDPR) and
the right to object (Art. 21 GDPR).

More details on how to exercise these rights are provided by LinkedIn in its privacy policy under point 4.

Responsibility of Cotype

In addition, Cotype is also solely responsible for certain data processing. We process the following data for communication with LinkedIn users in order to offer our information service:

User interactions (postings, likes, etc.);
Profile name and data provided by the user in the course of the conversation, e.g. for processing service requests;
statistical surveys on target group advertising;
statistical data on user interactions in aggregated form, i.e. without personal reference for Cotype (e.g. page activities, page views, page previews, likes, recommendations, posts, videos, page subscriptions incl. origin, times of day) and
Targeted advertisements based on aggregated demographic data that is not personally identifiable (e.g., age, location, language, or gender).

Purposes and legal basis of data processing

Processing is carried out for the purpose of responding to your enquiries (if you have submitted an enquiry to us) or communicating with you and to publish information about Cotype events and services. The legal basis for processing for the purpose of responding to inquiries that serve a future conclusion of a contract and are initiated by you is Art. 6 (1) lit. b GDPR and in other cases Art. 6 (1) lit. f GDPR.

Legitimate interests in data processing

The legitimate interest is the effective provision of information to users, customers and interested parties and communication with these persons as well as the external presentation of Cotype.

You can find the current version of this privacy policy on the “About Us” page under the “Privacy Policy” section of our LinkedIn page.

Transfer to a third country

Insofar as personal data is transferred to LinkedIn servers in the USA and stored and further processed there, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland has concluded the standard contractual clauses adopted by the EU Commission with the LinkedIn companies located in the USA, which permit the transfer of personal data to the USA in individual cases.

Duration of data storage

After your request has been dealt with, the personal data you have provided will be deleted from our systems. If you interact with us publicly, for example by leaving a comment or “liking” a post, this data remains publicly accessible on the site until it is deleted by us or you. Insofar as legal storage obligations require longer storage, your data will only be stored for this purpose and blocked for other purposes.

Right to object to data processing

To exercise your right to object to us, please contact either info@antetype.com or the above address by post or telephone. We will then process your request immediately.

Obligation to provide data

The provision of your data is voluntary. However, visiting our profile is not possible without us processing personal data jointly with LinkedIn or Cotype and LinkedIn processing personal data under their own, separate responsibility.

bb) Twitter

For the information service offered here, Cotype uses the technical platform and services of the platform Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland (hereinafter “Twitter”).

Responsibility of Twitter

We would like to point out that you use the Twitter short message service offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).

Information on what data is processed by Twitter and for what purposes can be found in Twitter’s privacy policy.

Cotype has no influence on the type and scope of the data processed by Twitter, the type of processing and use, or the transfer of this data to third parties. Cotype also has no effective means of control in this respect.

By using Twitter, your personal information is collected, transferred, stored, disclosed and used by Twitter Inc. and transferred to, and stored and used in, the United States, Ireland and any other country in which Twitter Inc. does business, regardless of your country of residence.

Twitter processes on the one hand your voluntarily entered data such as name and user name, e-mail address, telephone number or the contacts of your address book, if you upload or synchronize it.

Twitter also analyzes the content you share to determine what topics you are interested in, stores and processes confidential messages you send directly to other users, and may use GPS data, wireless network information, or your IP address to determine your location in order to serve you advertisements or other content.

For evaluation purposes, Twitter Inc. may use analysis tools such as Twitter Analytics or Google Analytics. Cotype has no influence on the use of such tools by Twitter Inc. and has not been informed about such potential use. If tools of this type are used by Twitter Inc. for Cotype’s account, Cotype has neither commissioned nor approved this nor otherwise supported it in any way. Nor will Cotype be provided with the data obtained during the analysis. Only certain non-personal information about tweet activity, such as the number of profile or link clicks through a particular tweet, is viewable by Cotype through its account. Moreover, Cotype has no way to prevent or disable the use of such tools on its Twitter account.

Finally, Twitter also receives information when you view content, for example, even if you have not created an account. This so-called “log data” can be the IP address, the browser type, the operating system, information about the website you previously visited and the pages you viewed, your location, your mobile provider, the terminal device you use (including device ID and application ID), the search terms you used and cookie information.

Twitter buttons or widgets integrated into websites and the use of cookies enable Twitter to record your visits to these websites and assign them to your Twitter profile. Based on this data, content or advertising can be offered made-to-measure to you.

You have options for restricting the processing of your data in the general settings of your Twitter account and under the item “Privacy and security”. In addition, you can restrict Twitter’s access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used.

More information on these points is available on the following Twitter support pages:

https://support.twitter.com/articles/105576#

https://help.twitter.com/de/search?q=datenschutz

You can find out about the possibility of viewing your own data on Twitter here (https://help.twitter.com/de/managing-your-account/accessing-your-twitter-data).

Information about Twitter’s inferences about you can be found here (https://twitter.com/settings/your_twitter_data).

Information on the available personalization and privacy setting options can be found here (with further references): https://twitter.com/settings/account/personalization.

You also have the option of requesting information via the Twitter privacy form or archive requests.

Responsibility of Cotype

In addition, Cotype is also solely responsible for certain data processing. We process the following data for communication with Twitter users to offer our information service:

User interactions (postings, likes, etc.);
Profile name and data provided by the user in the course of the conversation, e.g. for processing service requests; and
statistical data on user interactions in aggregated form, i.e. without personal reference for Cotype (e.g. number of impressions of a tweet, number of interactions, number of detailed expansions, number of profile clicks, number of media interactions, number of likes and retweets).

Purposes and legal basis of data processing

The processing is carried out for the purpose of answering your inquiries (if you have sent us an inquiry) or communicating with you and to publish information about events, products and services of Cotype. The legal basis for processing for the purpose of responding to enquiries that serve a future conclusion of a contract and are initiated by you is Art. 6 (1) lit. b GDPR and in other cases, i.e. for general enquiries, Art. 6 (1) lit. f GDPR.

Legitimate interests in data processing

The legitimate interest is the effective provision of information to users, customers and interested parties and communication with these persons as well as the external presentation of Cotype.

You can find the current version of this privacy policy within the profile description on our Twitter profile.

Transfer to a third country

Insofar as personal data is transferred to Twitter servers in the USA and stored and further processed there, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland has concluded the standard contractual clauses adopted by the EU Commission with the Twitter companies based in the USA, which permit the transfer of personal data to the USA in individual cases.

Duration of data storage

Once your request has been dealt with, data will be deleted from our systems. If you interact with us publicly, for example by leaving a comment or “liking” a post, this data remains publicly accessible on the site until it is deleted by us or you. Insofar as legal storage obligations require longer storage, your data will only be stored for this purpose and will be blocked for other purposes.

Right to object to data processing

To exercise your right to object to us, please contact either info@antetype.com or the above address by post or telephone. We will then process your request immediately.

Obligation to provide data

The provision of your data is voluntary. However, visiting our profile is not possible without Cotype and Twitter processing personal data in their own, separate responsibility.

cc) Facebook

Cotype uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered here.

We would like to point out that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

Joint responsibility with Facebook

Cotype is only jointly responsible with Facebook for the processing of so-called “Insights Data”, insofar as this data is used for the creation of so-called “Page Insights”.

Cotype and Facebook have concluded an agreement as part of their joint responsibility, which you can access here (so-called “Page Insights Controller Addendum”) (https://www.facebook.com/legal/terms/page_controller_addendum). The agreement applies to those data processing operations that are collected in connection with a visit to or interaction with our Facebook profile, but only insofar as these data are also processed (thereafter) for “Page Insights”. “Page Insights” include analytics services that help the operator of a Facebook profile to better understand interactions with his pages. The purpose of the data processing is to create aggregated statistics for Facebook profile operators.

This involves the processing of data in the context of a visit to or interaction of persons with a Facebook profile, but only insofar as the purpose is the use for “Page Insights”. Facebook provides more detailed information on this under this link (https://www.facebook.com/legal/terms/information_about_page_insights_data). The information on data for “Page Insights” available to data subjects indicates how and when “Insights Data” are collected and used to create “Page Insights”:

People’s actions. This includes actions like the following:

Viewing a Page, post, video, story or other content associated with a Page
Interacting with a story
Following or unfollowing a Page
Liking or unliking a Page or post
Recommending a Page in a post or comment
Commenting on, sharing or reacting to a Page’s post (including the type of reaction)
Hiding a Page’s post or reporting it as spam
Hovering over a link to a Page or a Page’s name or profile picture to see a preview of the Page’s content
Clicking on the website, phone number, Get Directions button or other button on a Page
Having a Page’s event on screen, responding to an event including type of reaction, clicking on a link for event tickets
Starting a Messenger communication with the Page
Viewing or clicking on items in Page’s shop

Information about the actions, the people taking the actions, and the browsers/apps used for them such as the following:

Date and time of action
Country/city (estimated from IP address or from user profile for logged in users)
Language code (from browser’s http header and/or language setting)
Age/gender group (from user profile for logged in users only)
Website previously visited (from browser’s http header)
Whether the action was taken from a computer or mobile device (from browser’s user agent or app attributes)
FB user ID (for logged in users only)

Facebook determines whether you are logged in to Facebook via cookies in accordance with the Cookies Policy of Facebook (https://www.facebook.com/policies/cookies/). Only a few events can be triggered if you are not logged in to Facebook. This includes visiting a Page or clicking on a photo or video in a post to view it.

Page admins do not have access to the data processed as part of events but only to the aggregated Page Insights.

The data collected about you in this context is processed by Facebook and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its user agreement and privacy policy. There you will also find information on how to contact Facebook and on the settings options for advertisements. Facebook’s data policy is available at this link (https://www.facebook.com/about/privacy/update).

Should you wish to exercise a data subject right to which you are entitled under the GDPR, we would like to point out that we cannot fully comply with all of these rights without Facebook. Surely, therefore, it would be more effective for you to contact Facebook directly. However, if you still need assistance, please feel free to contact us.

The respective responsibilities, in particular with regard to the protection of data subject rights, between Cotype and Facebook can be found in the Page Insights Controller Addendum.

Facebook assumes primary responsibility for compliance with the GDPR obligations for the shared processing of “Insights Data”. This includes the fulfillment of the following data subject rights:

the right of access (Art. 15 GDPR),
the right to erasure (Art. 17 GDPR),
the right to restrict processing (Art. 18 GDPR),
the right to data portability (Art. 20 GDPR) and
the right to object (Art. 21 GDPR).

You will find more details on how to exercise these rights in Facebook’s privacy policy.

Responsibility of Facebook

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: http://de-de.facebook.com/help/pages/insights

The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and on the settings for advertisements. The data usage guidelines are available at the following link: http://de-de.facebook.com/about/privacy

In what way Facebook uses data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us.

When you access a Facebook page, the IP address assigned to your terminal device is transmitted to Facebook. According to Facebook, this IP address is anonymized. Facebook also stores information about the end devices of its users (e.g. as part of the “login notification” function); this may enable Facebook to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is stored on your end device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Via Facebook buttons embedded in websites, it is possible for Facebook to record your visits to these website pages and assign them to your Facebook profile. Based on this data, content or advertising can be offered made-to-measure to you.

If you wish to avoid this, you should log out of Facebook or disable the “stay logged in” feature, delete the cookies present on your device, and exit and restart your browser. This will delete Facebook information that can be used to directly identify you. This will allow you to use our Facebook page without revealing your Facebook identifier. When you access interactive features of the site (Like, Comment, Share, Message, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user.

For information on how to manage or delete information about you, please visit the following Facebook support pages: https://de-de.facebook.com/about/privacy#.

Responsibility of Cotype

We, as the provider of the information service, also collect and process the following Data from your use of our service

User interactions (postings, likes, etc.);
Profile name and data provided by the user in the course of the conversation, e.g. for processing service requests; and
statistical data on user interactions in aggregated form, i.e. without personal reference for Cotype (e.g. number of impressions of a post, number of interactions, number of detailed expansions, number of profile clicks, number of media interactions, number of likes and re-posts).

Purposes and legal basis of data processing

Processing is carried out for the purposes of responding to your enquiries (if you have sent us an enquiry) or communicating with you and to publish information about Cotype events, products and services.

The legal basis for processing for the purpose of answering enquiries that serve a future conclusion of a contract and are initiated by you is Art. 6 (1) lit. b GDPR and in other cases, i.e. for general enquiries, Art. 6 (1) lit. f GDPR.

Legitimate interests in data processing

The legitimate interest is the effective provision of information to users, customers and interested parties and communication with these persons as well as the external presentation of Cotype.

You can find the current version of this data protection declaration under “Data protection” on our Facebook page.

dd) YouTube

We have integrated YouTube videos into our online offer, which are stored on YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission. The legal basis for the display of the videos is Art. 6 (1) lit. a GDPR, i.e. the integration only takes place after your consent.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The information collected is stored on Google servers, also in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy

ee) Instagram

Cotype uses the technical platform and services of Instagram, offered by Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered here.

We would like to point out that you use this Instagram page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

Responsibility of Instagram

When you visit our Instagram page, Instagram collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more detailed information on this at the following link: https://help.instagram.com/1533933820244654

The data collected about you in this context is processed by Instagram and may be transferred to countries outside the European Union. Instagram describes in general terms what information it receives and how it is used in its data policy. There you will also find information on how to contact Instagram and on the settings for advertisements. The data policy is available at the following link: https://help.instagram.com/519522125107875/?helpref=hc_fnav

In what way Instagram uses data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Instagram stores this data and whether data from a visit to the Instagram page is passed on to third parties, is not conclusively and clearly stated by Instagram and is not known to us.

When you access a Instagram page, the IP address assigned to your terminal device is transmitted to Instagram. According to Instagram, this IP address is anonymized. Instagram also stores information about the end devices of its users (e.g. as part of the “login notification” function); this may enable Instagram to assign IP addresses to individual users.

If you are currently logged in to Instagram as a user, a cookie with your Instagram ID is stored on your end device. This enables Instagram to track that you have visited this page and how you have used it. This also applies to all other Instagram pages. Via Instagram buttons embedded in websites, it is possible for Instagram to record your visits to these website pages and assign them to your Instagram profile. Based on this data, content or advertising can be offered made-to-measure to you.

If you wish to avoid this, you should log out of Instagram or disable the “stay logged in” feature, delete the cookies present on your device, and exit and restart your browser. This will delete Instagram information that can be used to directly identify you. This will allow you to use our Instagram page without revealing your Instagram identifier. When you access interactive features of the site (Like, Comment, Share, Message, etc.), a Instagram login screen will appear. After any login, you will again be recognizable to Instagram as a specific user.

Responsibility of Cotype

We, as the provider of the information service, also collect and process the following Data from your use of our service

User interactions (postings, likes, etc.);
Profile name and data provided by the user in the course of the conversation, e.g. for processing service requests; and
statistical data on user interactions in aggregated form, i.e. without personal reference for Cotype (e.g. number of impressions of a post, number of interactions, number of detailed expansions, number of profile clicks, number of media interactions, number of likes and re-posts).

Purposes and legal basis of data processing

Legitimate interests in data processing

The legitimate interest is the effective provision of information to users, customers and interested parties and communication with these persons as well as the external presentation of Cotype.

d) Forum

Our forum https://discourse.antetype.com (“forum”) can be read without the need to register. If you want to actively participate in our forum, you have to register by providing your e-mail address, a password of your choice and your freely selectable username. There is no obligation to use a clear name, a pseudonymous use is possible. For the registration we use the so-called “double-opt-in” process, i.e., you will receive an e-mail in which you must confirm that you are the owner of the specified e-mail address.

We also offer you the possibility to register to our forum via “Facebook-Connect”. To register, you will be redirected to the Facebook page, where you can log in with your user data, after agreeing that we receive certain identifying data from Facebook. This connects your Facebook profile and our forum. Through the link, we automatically receive data from Facebook Inc. The following information is transmitted to and used by us:

Associated Facebook account and user ID
Email address
Name

This information is mandatory for us to be able to identify you. For more information about Facebook Connect and privacy settings, please refer to the Data Policy (https://www.facebook.com/about/privacy/) and Terms of Service (https://www.facebook.com/legal/terms) of Facebook Inc.

Furthermore, we offer you the possibility to register to our forum via “Google Sign-in”. To register, you will be redirected to the Google page, where you can log in with your user data, after agreeing that we receive certain identifying data from Google. This connects your Google account and our forum. Through the link, we automatically receive data from Google. The following information is transmitted to and used by us:

Name
Email address
Language settings
Profile picture

This information is mandatory for us to be able to identify you. For more information about Google Sign-in and privacy settings, please refer to the Data Policy (https://policies.google.com/privacy?hl=en-US) and Terms of Service (https://policies.google.com/terms?hl=en-US) of Google LLC.

Following your registration, you have the option to add a profile picture to your account information.

If you register for a forum account, we store – in order to operate the forum – all the information you provide in the forum, i.e. public posts, private messages, etc., in addition to your registration data until you delete your account. The legal basis is Art. 6 (1) lit. b GDPR.

If you delete your account, your public statements, in particular contributions to the forum, and all other data will be deleted.

e) Paddle

Licences for our products are distributed by the reseller Paddle.com Market Limited (15 Briery Close, Great Oakley, Corby, Northamptonshire, NN18 8JG, United Kingdom).

During the purchase process, personal data is transferred to Paddle (e-mail address, country, postal code, payment details) which is required to process the transaction.

Paddle stores information from you when you make a purchase and uses cookies (even without a purchase). You can block and delete cookies through your browser settings. The cookies are used to improve the service of Paddle.

Cotype has no influence on the type and scope of the data processed by Paddle, the type of processing and use, or the transfer of this data to third parties. Cotype also has no effective means of control in this respect. In this respect, Paddle is not a processor of Cotype, but rather its own controller within the meaning of Art. 4 No. 7 GDPR.

For more information about Paddle’s use of data, please see Paddle’s Privacy Policy (https://paddle.com/privacy).

C) Special data protection information for the application procedure

The implementation of the selection procedure after receipt of your application and, if applicable, the employment relationship established as a result requires that we process some of your personal data. In the following, we will inform you which of your personal data we process and how and for what purpose we process it. This information is provided in order to fulfil our obligation to inform you in accordance with data protection law.

(1) Personal data collected

As part of the employment relationship, we process the following categories of personal data from you:

Master data (including e.g. name, gender, date of birth)
Contact details (including, for example: address, e-mail address, telephone number)
Application documents (including, for example: certificates, curriculum vitae, photo)
Data on professional development and acquired knowledge (including e.g. education and training, work experience, additional qualifications)
In the case of online applications, usage and inventory data (including, for example: IP address, name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser).

(2) Purpose of processing

All personal data will be processed exclusively for the following purposes:

Initiation, establishment, performance and termination of the employment relationship
Issuance of notifications and declarations based on legal obligation or otherwise permitted by law
Fulfilment of our obligations arising from tax and social security law
Protection and enforcement of our legitimate interests
Investigation of criminal offences, where necessary
Control and organization within the company.

Legal bases for the processing of your data are thereby:

6 (1) lit. b GDPR in conjunction with § 26 (1) BDSG
6 (1) lit. c GDPR in conjunction with § 26 BDSG
6 (1) lit. f GDPR, if applicable in conjunction with § 26 (1) s. 2 BDSG
9 (2) lit. b GDPR in conjunction with § 26 (3) BDSG, insofar as special categories of personal data are processed.

(3) Recipients of data

Your data will only be passed on within the company, unless we are legally obliged to pass on your data to other bodies.

(4) Storage period

We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We store your personal data beyond this only insofar as this is required by law or in the specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute.

In the event of an employment relationship, your data will be stored for the duration of the employment relationship and beyond that for a period of three years from the termination of the employment relationship and then deleted. Longer storage only takes place if and insofar as we are legally obliged to do so in individual cases.

D. Special data protection information for the use of the Antetype software

When you use our software Antetype (hereinafter “Antetype” or “Software“), we collect personal data about you.

Personal data is all data that relates to your person (see above under General data protection information). For example, your name, location data, IP address, device identifier, address and email address are personal data, your fingerprint, images, movies, audio recordings, but also your user behavior falls into this category.

(1) Data collected during the use of Antetype

We can only provide you with the benefits of Antetype if we collect certain personal data about you that is necessary for the operation of the software.

We only collect this data if this is necessary for the fulfillment of the contract between you and us (Art. 6 (1) lit. b GDPR). Furthermore, we collect this data if this is necessary for the functionality of Antetype and your interest in the protection of your personal data does not outweigh (Art. 6 (1) lit. f GDPR).

We collect and process the following data from you:

Device information: Access data includes the IP address, device ID, device type, device-specific settings and software settings as well as software properties, the date and time of the retrieval, time zone the amount of data transferred and the message whether the data exchange was complete, crash of the software, browser type and operating system. These access data are processed in order to technically enable the operation of Antetype.
Data that you provide to us: To use Antetype, you must create a user account. For this purpose, you must provide at least your login name.
Information with your consent: We process other information (e.g. GPS location data) if you allow us to do so.
Contact form data: When using contact forms, the data transmitted through them are processed (e.g. gender, surname and first name, address, company, e-mail address and the time of transmission).

(2) Use of cookies

We use cookies when operating Antetype. Cookies are small text files that are stored on the device memory of your mobile device and assigned to the software you are using and through which certain information flows to the agency that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer and therefore cannot cause any damage. They serve to make Antetype more user-friendly and effective overall, i.e. more pleasant for you.

Technical Cookies: These are mandatory to navigate within Antetype, use basic features and ensure the security of Antetype; they do not collect information about you for marketing purposes nor do they store which web pages you have visited;
Performance Cookies: These collect information about how you use Antetype, what pages you visit and, for example, whether errors occur when using the software; they do not collect information that could identify you – all information collected is anonymous and is only used to improve Antetype and find out what interests our users;
Advertising Cookies, Targeting Cookies: These are used to offer the user made-to-measure advertising within Antetype or offers from third parties and to measure the effectiveness of these offers; Advertising and Targeting Cookies are stored for a maximum of 13 months;
Sharing cookies: these are used to improve the interactivity of Antetype with other services (e.g. social networks); sharing cookies are stored for a maximum of 13 months.

(3) Data processing by third parties

It may happen that Antetype uses contracted service providers for individual functions. We use external domestic and foreign service providers to process our business transactions (e.g. for the areas of IT, logistics, telecommunications, sales and marketing). These service providers are only active according to our instructions and are contractually obligated to comply with the data protection regulations according to Art. 28 GDPR.

The following categories of recipients, which are usually processors, may have access to your personal data:

Service providers for the operation of Antetype and the processing of data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security). The legal basis for the transfer is then Art. 6 (1) lit. b or lit. f GDPR, insofar as it does not involve processors;
Government agencies/authorities, insofar as this is necessary for the fulfilment of a legal obligation. The legal basis for the disclosure is then Art. 6 (1) lit. c GDPR;
Persons employed to carry out our business operations (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The legal basis for the disclosure is then Art. 6 (1) lit. b or lit. f GDPR.

Furthermore, we will only pass on your personal data to third parties if you have given your express consent to do so in accordance with Art. 6 (1) lit. a GDPR.