This privacy policy informs you:

• When or for which actions we process data
• Which data we process and for what reasons
• Who receives the data
• What rights you have in relation to your personal data

You can access this privacy policy at any time and permanently here.

I. Contact information

Responsible body:

dacoso GmbH

Robert-Bosch-Straße 25a

63225 Langen

Represented by the managing directors: Felix Pohl, Thomas Joswig

    E-mail info(at)dacoso.com 
    Phone +49 6103 404569 0
    Fax +49 6103 404569 9

Data Protection Officer:

You can contact the data protection officer by post at: dacoso GmbH, Data Protection Officer, Robert-Bosch-Straße 25a, 63225 Langen, Germany, and by email at: datenschutz(at)dacoso.com

II General information on data processing

1. scope of the processing of personal data 
The provision of our services requires the processing of various information. In addition, the scope of data processing depends on your activities in connection with our services. You are not subject to automated decision-making within the meaning of GDPR Art. 22.

2. Legal basis for the processing of personal data 
The following legal bases exist for the processing of personal data, unless otherwise specified

3.    Data deletion and storage period
We erase personal data as soon as the legal basis for its processing no longer applies. If there are several legal bases for a situation, the deletion takes place when the last legal basis ceases to apply, for example only when all statutory retention obligations have been fulfilled.

III.    Data processing for website provision and usage analysis

In order for us to display the website to you, it is necessary to process certain information. This already takes place when you access our website. In addition, our website uses functionalities that require further data processing.

1.    Accessing the website and log files
When you visit our website, your browser sends various pieces of information to our server. This is required in order to deliver the information requested by your browser appropriately. The data also includes the IP address from which your request is made. The following data is also transmitted:

• the name of your internet service provider
• the website from which you are visiting us
• the pages you visit on our site
• the amount of data transferred
• Internet protocol address (IP address pseudonymised)
• the date and duration of your visit

This data is not merged with other data about you. The processing of the data serves the legitimate interest of providing our website. The data is stored in a log file in order to detect, analyze and prevent misuse. Log files are deleted after 14 days, unless longer storage is necessary to fulfill the aforementioned purposes.

2.    Cookies

The dacoso website is operated in a data protection-friendly manner, no cookies are set. Therefore, no consent tool (consent for cookies) is required.

3.    Analysis of the website - Matomo

For the purpose of analysis, we use the open source software Matomo (formerly Piwik) in the version without cookies, which only stores IP addresses in pseudonymized form. The pseudonymization is carried out by shortening the IP address. This means that no conclusions can be drawn about website visitors from the Internet. Matomo collects certain technical information based on the data transmitted by the browser, such as Browser type/version, operating system used, device type, model and brand, screen resolution, the search engine used by the device, the dacoso websites visited including length of stay, the day, time and location of your visit (continent, country, region, city) as well as the browser language. This information can no longer be traced back to personal data due to the pseudonymization of the IP address and is only evaluated for statistical purposes. The information obtained in this way is not passed on to third parties.

4.    Request by e-mail or contact form
You can send us an inquiry at any time using the contact form on our website or by e-mail. Mandatory fields are marked as such in the contact form. All other data that you transmit to us as part of the inquiry, including via the free text field or in the email, is provided voluntarily. The transmission of your message to us is TLS-encrypted.

We use this data exclusively for answering your inquiry and the associated communication. We may select the contact channels specified by you to reply, unless otherwise requested in your inquiry. The legal basis for this processing of your data depends on the content of your request. In principle, our legitimate interest in providing the contact functionalities and responding to your request transmitted via them applies here. If your request is aimed at the conclusion of a contract with us, the processing takes place within the framework of this pre-contractual obligation.

Your data will be deleted as soon as your inquiry has been finally processed, provided there are no further storage obligations. If a contract is concluded, we may process the data further to fulfill the contract.

5.    Hosting and configuration
We use the services of ion2s GmbH from Darmstadt for the hosting and configuration of the website. We have concluded an agreement with this provider for order processing in accordance with GDPR Art. 28.

IV.    Ticket opening for dacoso GmbH customers

Customers of dacoso GmbH have the option of calling our hotline. The data and information (e.g. name, telephone number, name of the company, reason for the call) required for the execution of the respective support and maintenance contracts are recorded. In addition, the hotline employee checks whether a support or maintenance contract has been concluded. Only in this case will the data required to fulfill the contract be processed. We use the services of CDS Call Dispatch Scholz GmbH from Mainz to operate a 24/7 hotline. We have concluded an agreement with this provider for order processing in accordance with GDPR Art. 28.

If you have not concluded a support or maintenance contract, please submit a corresponding request via our e-mail address info(at)dacoso.com.

V.    Processing of applicant data

dacoso GmbH uses an applicant management tool from softgarden e-Recruiting GmbH in Berlin to handle the application processes. We have concluded an agreement with this provider for order processing in accordance with GDPR Art. 28. Further information can also be found in the dacoso privacy policy Applicant management at Softgarden.

VI.    Visitor management

dacoso GmbH uses the visitor management tool "Welcome" from Entersmart GmbH in Munich to process visits and increase operational security. We have concluded a data processing agreement with this provider in accordance with GDPR Art. 28. All visitors are invited via "Welcome" and registered at reception on arrival. Information such as: First name and surname, company, e-mail address, time and date of visit of visitors.

VII.    Social media, map service and other services used

dacoso GmbH maintains publicly accessible presences in the social media portals listed below, including the map service also listed below. The operators of the respective portals/map services can comprehensively analyze your user behavior when you visit our presence on their portal/map service. Before your first visit or after deleting your browser history and all cookies, you can use the consent query tool provided by the respective operator to select whether and to what extent you consent to the processing of your personal data. Depending on your selection, when you visit the social media presences of dacoso GmbH listed below and the map service used by us, various data protection-relevant processing activities are carried out by the respective operator, over which we have no or only limited influence. If you have an account on the respective platform, are logged into it and visit our social media presence there or use the map service, the operator of the social media portal/map service can assign this visit to your user account.However, your personal data (e.g. IP address, browser type, date and time of the visit, length of stay, etc.) can also be processed if you are not logged in or do not have an account with the respective platform operator.In this way, the operators of the respective social media portal and the map service can, for example, create user profiles in which your preferences or interests are stored.As a result, this data can be displayed, for example, for interest-based advertising both within and outside the respective social media portal and map service.If you have an account with the respective portal/map service, this interest-based advertising may also be displayed to you on other end devices on which you are or were logged in. Depending on the provider, other processing activities may also be carried out by the operators of the respective social media portal and/or map service. Details on this can be found in the data protection and terms of use of the respective social media portal and map service.

The legal basis for the processing of your personal data carried out by dacoso GmbH is to ensure the most comprehensive possible Internet presence for advertising purposes and to initiate contracts and, with regard to the map service, to make it easy for visitors to find our locations. This constitutes a legitimate interest within the meaning of GDPR Art. 6 para. 1 lit. f. The processing activities carried out by the social networks and the map service may be based on other legal bases (e.g. consent in accordance with GDPR Art. 6 para. 1 lit. a), which must be listed by the respective operators of these platforms.

If you visit one of dacoso GmbH's social media presences (e.g. on XING, LinkedIn or YouTube) or use the map service, we may be jointly responsible with the operator of the respective social media platform and/or map service for the processing activities associated with this visit in accordance with GDPR Article 26. In this case, you can assert your rights with regard to information, correction, deletion, restriction of processing, data portability and complaint both against us and against the respective operator of the social media portal and/or map service you have visited.

If you wish to exercise your rights as a data subject with regard to a specific processing activity over which we have influence, you are welcome to contact us by sending an informal message to our data protection officer using the contact details provided above. We will then either check your request (e.g. for information or objection) ourselves or forward it to the respective social media portal and/or map service as required, provided that your request concerns a processing activity by one of the providers listed below and provided that this request is related to a visit to a dacoso GmbH website. Further details on the processing activities of the providers we use can be found in the data protection declarations of these providers listed below.

The social media portals, map service and other services we use are:

XING and Kununu:
dacoso GmbH has a social media presence on XING and Kununu. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on the handling of your personal data can be found in XING's privacy policy at https://privacy.xing.com/de/datenschutzerklaerung  . According to information from XING (as of April 2023), there is no joint responsibility in connection with the company profiles on XING.

LinkedIn:
dacoso GmbH has a social media presence on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

You can view details relating to joint responsibility for processing at the following link: https://legal.linkedin.com/pages-joint-controller-addendum  

Data transfer to the USA is based on the currently applicable standard contractual clauses of the European Commission. Details can be found here: www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs .

Details on how LinkedIn handles your personal data can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy 

YouTube, Google Maps:
dacoso GmbH has a social media presence on YouTube and a company profile on the map service Google Maps with the entries of all locations in the maps of Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on joint responsibility can be found here: https://business.safety.google/intl/de/controllerterms . Data transfer to the USA is based on the currently applicable standard contractual clauses of the European Commission. You can find details here: https://business.safety.google/gdprcontrollerterms/sccs/eu-c2c/. Details on the handling of your personal data can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de .

Google Ads:
We also use the Google Ads service to place keyword-related advertisements on the Internet. When an interested party clicks on an ad, an (encrypted) Google Click ID is generated from data such as time, session duration and ad format and sent to the respective landing page (target URL) in a URL parameter called gclid. Data such as source, medium, campaign, content, keyword and gad_source parameters are also added to the respective link called up with the landing page (target URL). This data cannot be traced back to natural persons. We use the Google Click ID to be able to assign the interactions resulting from the visit to our website to the respective campaign. The Google Click ID is transferred to Matomo's conversion tracker together with the data from the link accessed. Matomo collects data such as conversion name, conversion time, conversion value and currency via Matomo tracking (depending on the interaction of the website visitor) on our website and transmits it back to Google Ads via the Matomo conversion linker together with the Google Click ID and the associated data from Matomo. To transfer the data from Google Ads to Matomo, we use so-called Urchin Tracking Modules (UTM parameters), which process data on keyword, campaign, advertising platform and advertising type. The above data is analyzed for the purpose of reviewing the effectiveness of our Ad Words campaigns and improving our website. As Matomo is configured in such a way that the IP addresses of visitors are pseudonymized, it is not possible to trace this data back to natural persons. For further details on Matomo, see section III, paragraph 3 of this privacy policy. Depending on whether you are logged in with a Google account when you enter a keyword or depending on your consent status when you access Google Search for the first time, Google may process data in its own interest. Since this processing depends directly on the consent you have given to Google, we have no influence on the resulting processing by Google in this case. If you are not logged in with a Google account and have not given your consent to processing when you first call up Google Search, Google Ads works in this configuration without cookies and it is not possible to trace the data processed by us back to natural persons. The provider of Google Ads is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on this processing and the protection of your data can be found here: https://www.google.com/analytics/terms/dpa/dataprocessingamendment_20200816.html .Furthermore, we use the services of Seokratie GmbH from Munich for the configuration and placement of Google Ads and Matomo. We have concluded a data processing agreement with this provider in accordance with GDPR Art. 28.

XIII Protection of minors

Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. dacoso GmbH does not request personal data from children and young people. We do not knowingly process such data. The services offered by dacoso GmbH are aimed exclusively at tradespeople or job seekers.

IX. Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of GDPR Art. 4 para. 1. As a data subject, you are entitled to the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details provided above.

Right to withdraw consent and to object pursuant to GDPR Art. 21
If the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. These declarations take effect upon receipt by us. To exercise your right of objection or revocation, you can contact us or our data protection officer using the contact details above. If you object to processing based on our legitimate interest, we may only continue the processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Right to information in accordance with GDPR Art. 15
You have a right to information about your personal data processed by us. This includes the mandatory information set out in GDPR Art. 15.

Right to rectification in accordance with GDPR Art. 16
You have the right to obtain without undue delay the rectification of inaccurate personal data and the completion of incomplete personal data.

Right to erasure in accordance with GDPR Art. 17
You have the right to request the erasure of your personal data if one of the grounds specified in GDPR Art. 17 applies, in particular if there is no longer a legal basis for the processing.

Right to restriction of processing in accordance with GDPR Art. 18
You have the right to request the restriction of the processing of your personal data if one of the reasons stated in GDPR Art. 18 applies, in particular at your request instead of deletion of the data.

Right to data portability in accordance with GDPR Art. 20
You have the right to receive all personal data we have stored about you in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from the controller to which the personal data has been provided.

Right to lodge a complaint with the competent supervisory authority, GDPR Art. 77
In accordance with GDPR Art. 77, you have the right to lodge a complaint with the supervisory authority responsible for you.

X. Recipients of data

The recipients of data are the service providers listed in sections III to VIII. All service providers used by us are carefully checked in advance and used exclusively on the basis of the provisions of the GDPR: In the event of commissioned processing, we have concluded an agreement with the respective service provider on the order agreement in accordance with GDPR Art. 28 para. 3. In the event that data is transferred to third countries, this is done on the basis of the provisions of GDPR Art. 44 to 50.

May 2024