Foreword
We, slashdev SDG UG, hereinafter referred to as “slashdev,” with a registered office at Bornholmer Str. 95, 10439 Berlin, take the protection of your personal data seriously and would like to inform you about data protection in our company.
As part of our responsibility under data protection law, additional obligations have been imposed on us by the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: “GDPR”) to ensure the protection of personal data of the person affected by processing (we also refer to you as the data subject as “the customer,” “the user,” or “data subject”).
Insofar as we decide either alone or jointly with others on the purposes and means of data processing, this includes the obligation to inform you transparently about the type, scope, purpose, duration, and legal basis of the processing (cf. Art. 13 and 14 GDPR). With this declaration (hereinafter: “data protection information”) we inform you about how we process your personal data.
General information
(1) Terms and definitions
Following the example of Art. 4 GDPR, this data protection notice is based on the following definitions:
– “Personal data” (Art. 4 No. 1 GDPR) means any information relating to an identified or identifiable natural person (“data subject”). A person is identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data, or information relating to their physical, physiological, genetic, mental, economic, cultural or social identity. Identifiability can also be achieved by linking such information or other additional knowledge. The origin, form, or embodiment of the information is irrelevant (photos, video, or audio recordings can also contain personal data).
– “Processing” (Art. 4 No. 2 GDPR) means any operation that is performed on personal data, whether or not by automated means (i.e., using technical specifications). This includes, in particular, the collection (i.e., acquisition), recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, alignment or combination with other personal data, or restriction of processing.
– “Controller” (Art. 4 No. 7 GDPR) means the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
– “Third party” (Art. 4 No. 10 GDPR) means any natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data; this also includes other legal entities belonging to the group.
– “Processor” (Art. 4 No. 8 GDPR) is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller, in particular in accordance with the controller’s instructions (e.g., IT service provider). In terms of data protection law, a processor is not a third party.
– “Consent” (Art. 4 No. 11 GDPR) of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
(2) Name and address of the controller responsible for processing
The controller responsible for the processing of your personal data within the meaning of Art. 4 No. 7 GDPR is us:
slashdev SDG UG (haftungsbeschränkt)
Bornholmer Str. 95, 10439 Berlin
VAT number.: DE308609993
For further information about our company, please refer to the imprint information on our website.
(3) Legal basis for data processing
In principle, any processing of personal data is prohibited by law and is only permitted if the data processing falls under one of the following justifications:
– Art. 6 para. 1 sentence 1 lit. a GDPR (“consent”): Where the data subject has voluntarily, in an informed and unambiguous manner, indicated by a statement or other unambiguous affirmative act that he or she consents to the processing of personal data relating to him or her for one or more specific purposes;
– Art. 6 para. 1 sentence 1 lit. b GDPR: If the processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject before entering into a contract;
– Art. 6 para. 1 sentence 1 lit. c GDPR: If processing is necessary for compliance with a legal obligation to which the controller is subject (e.g., a legal obligation to retain data);
– Art. 6 para. 1 sentence 1 lit. d GDPR: Where processing is necessary to protect the vital interests of the data subject or another natural person;
– Art. 6 para. 1 sentence 1 lit. e GDPR: If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or
– Art. 6 para. 1 sentence 1 lit. f GDPR (“Legitimate interests”): If the processing is necessary for the legitimate (in particular legal or economic) interests pursued by the controller or by a third party, except where such interests are overridden by the interests or rights of the data subject which require protection of personal data (in particular where the data subject is a minor).
For the processing operations we carry out, we indicate the applicable legal basis in each case below. Processing may also be based on several legal bases.
(4) Data erasure and storage duration
For the processing operations carried out by us, we indicate below how long the data is stored by us and when it is deleted or blocked. Unless an explicit storage period is specified below, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies. Your data will generally only be stored on our servers in Germany, subject to any disclosure under the provisions in A.(6) and A.(7).
However, data may be stored beyond the specified period in the event of an (impending) legal dispute with you or other legal proceedings or if storage is provided for by statutory provisions to which we are subject as the controller (e.g., Section 257 HGB, Section 147 AO). If the storage period prescribed by the statutory provisions expires, the personal data will be blocked or deleted unless further storage by us is necessary and there is a legal basis for this.
(5) Data security
We use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties (e.g., TSL encryption for our website), taking into account the state of technology, legal requirements, and the legal basis.
We will be happy to provide you with more detailed information on request.
(6) Cooperation with contract processors
As with any large company, we also use external domestic and foreign service providers to process our business transactions (e.g., for IT, logistics, telecommunications, sales, and marketing). These service providers only act in accordance with our instructions and are contractually obliged to comply with data protection regulations under Art. 28 GDPR.
If your personal data is passed on by us to our subsidiaries or is passed on to us by our subsidiaries (e.g., for advertising purposes), this is done based on existing order processing relationships.
(7) Requirements for the transfer of personal data to third countries
As part of our business relationships, your personal data may be passed on or disclosed to third-party companies. These may also be located outside the European Economic Area (EEA), i.e., in third countries. Such processing takes place exclusively to fulfill contractual and business obligations and to maintain your business relationship with us. We will inform you about the respective details of the transfer at the relevant points below.
The European Commission certifies that some third countries have a level of data protection comparable to the EEA standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is adequately guaranteed. This is possible through binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data, certificates, or recognized codes of conduct. Please contact our data protection officer (see A.(3)) if you would like more information on this.
(8) No automated decision-making (including profiling)
We do not intend to use personal data collected from you for automated decision-making (including profiling).
(9) No obligation to provide personal data
We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a customer, you are under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case in the context of the products presented below and offered by us, you will be informed of this separately.
(10) Legal obligation to transmit certain data
Under certain circumstances, we may be subject to a specific legal or statutory obligation to provide the lawfully processed personal data to third parties, in particular public authorities (Art. 6 para. 1 sentence 1 lit. c GDPR).
(11) Your rights
You can assert your rights as a data subject concerning your processed personal data at any time using the contact details provided at the beginning under A.(2). As the data subject, you have the right:
– to request information about your data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
– in accordance with Art. 16 GDPR, to immediately request the correction of incorrect data or the completion of your data stored by us
– in accordance with Art. 17 GDPR, to demand the erasure of your data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or the establishment, exercise or defense of legal claims
– in accordance with Art. 18 GDPR, to demand the restriction of the processing of your data if the accuracy of the data is disputed by you or the processing is unlawful;
– in accordance with Art. 20 GDPR, to receive the data that you have provided to us in a structured, commonly used, and machine-readable format or to request that it be transmitted to another controller (“data portability”)
– pursuant to Art. 21 GDPR, to object to the processing if the processing is based on Art. 6 para. 1 sentence 1 lit. e or lit. f GDPR. This is particularly the case if the processing is not necessary for the performance of a contract with you. If it is not an objection to direct advertising, we ask you to explain the reasons why we should not process your data as we have done when exercising such an objection. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection based on which we will continue the processing;
– in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given (even before the GDPR came into force, i.e., before May 25, 2018) – i.e. your voluntary, informed, and unequivocal declaration or other unambiguous confirmatory act that you consent to the processing of the personal data concerned for one or more specific purposes – at any time if you have given such consent. As a result, we may no longer continue the data processing that was based on this consent in the future and
– in accordance with Art. 77 GDPR, to complain to a data protection supervisory authority about the processing of your personal data in our company, for example to the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, mailbox@datenschutz-berlin.de
(12) Changes to the data protection information
As part of the ongoing development of data protection law and technological or organizational changes, our data protection information is regularly reviewed to determine whether it needs to be adapted or supplemented. You will be informed of any changes, in particular on our website at https://slashdev.team/. This data protection notice is valid as of September 2021.
Visiting our website
(1) Explanation of the function
You can find information about our company and the services we offer at https://slashdev.team/ together with the associated subpages (hereinafter collectively referred to as “websites”). When you visit our websites, your personal data may be processed.
(2) Processed personal data
When using the websites for information purposes, we collect, store, and process the following categories of personal data:
1) “Log data”: when you visit our websites, a so-called log data record (so-called server log files) is temporarily and anonymously stored on our web server. This consists of:
– the page from which the page was requested (so-called referrer URL)
– the name and URL of the requested page
– the date and time of the request
– the description of the type, language, and version of the web browser used
– the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established
– the amount of data transferred
– the operating system
– the message as to whether the request was successful (access status/HTTP status code)
– the GMT time zone difference
2) “Contact form data”: when contact forms are used, the data transmitted through them is processed (e.g., gender, surname and first name, address, company, email address, and the time of transmission).
3) “Analytic data”: when you visit our website, we collect anonymous analytical data. This may include but is not limited to: traffic sources, referring sites, page views, paths taken and conversion rates. This compiled data often forms a part of customer relationship management analytics to facilitate and streamline better business decisions.
(3) Purpose and legal basis of data processing
We process the personal data specified above in accordance with the provisions of the GDPR, the other relevant data protection regulations and only to the extent necessary. Insofar as the processing of personal data is based on Art. 6 para. 1 sentence 1 lit. f GDPR, the purposes mentioned also represent our legitimate interests.
The processing of log data serves statistical purposes and to improve the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR).
The processing of contact form data is carried out to process customer inquiries (legal basis is Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR).
(4) Duration of data processing
Your data will only be processed for as long as is necessary to achieve the above-mentioned processing purposes; the legal bases specified in the context of the processing purposes apply accordingly. With regard to the use and storage duration of cookies, please refer to point A.(5) and the cookie policy.
Third parties used by us will store your data on their system for as long as is necessary in connection with the provision of the services for us in accordance with the respective order.
You can find more details on the storage period under A.(5) and the Cookie Policy [link to the Cookie Policy].
(5) Transfer of personal data to third parties; basis for justification
The following categories of recipients, which are usually processors (see A.(6)), may receive access to your personal data:
– Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g., for data center services, payment processing, IT security). The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR, insofar as these are not processors;
– Government bodies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. c GDPR;
– Persons employed to carry out our business operations (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR.
For the guarantees of an appropriate level of data protection when transferring data to third countries, see A.(8).
In addition, we only pass on your personal data to third parties if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
(6) Use of cookies, plugins, and other services on our website
a) Cookies
We use cookies on our websites. Cookies are small text files that are assigned and stored on your hard disk to the browser you are using a characteristic string of characters through which certain information flows to the body that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the Internet offer more user-friendly and effective overall, i.e., more pleasant for you.
Cookies may contain data that makes it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that are not personally identifiable. However, cookies cannot directly identify a user.
Any use of cookies that is not technically necessary constitutes data processing that is only permitted with your express and active consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. This applies in particular to the use of advertising, targeting or sharing cookies; in addition, we only pass on your personal data processed by cookies to third parties if you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
b) Cookie Policy
For more information about which cookies we use and how you can manage your cookie settings and disable certain types of tracking, please see our Cookie Policy.
c) Calendly
We offer you the option of simply making an appointment online via the Calendly service. The following data is sent to the Calendly calendar (https://calendly.com/de), a service of Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA, based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
The following data entered by you when booking an appointment will be transmitted:
– first name
– last name
– e-mail address
Calendly has submitted to the Privacy Shield Framework, further information on your rights can be found at http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf
You can find more information about Calendly’s privacy policy at https://calendly.com/de/privacy.
d) Elementor Contact Form
The ECF collects only the data provided by the user, that is their e-mail address, company name and message.
e) Beautiful Cookie Consent Banner
The BCCB does not collect data on users. However, is stores on the user’s device cookies encompassing the user’s chosen cookie settings. For more on cookies please refer to our Cookie Policy.
f) Yoast SEO
The Yoast plugins do not process, collect, or store any personal data of slashdev website users at Yoast premises or servers. Every analysis performed on the website’s content is done on our site and none of it is used by Yoast off-site.