This privacy notice describes the processing of personal data in the context of using the website www.codexaureus.de. It also contains information about your rights and how you can contact us.
Who is responsible for processing personal data?
Responsible for this website and the related processing of personal data is:
CodeXaureus GmbH
Kaulbachstraße 51 A
80539 Munich, Germany
Managing Director: Alexander Riedl
Email: datenschutz@codexaureus.de
Commercial Register: Amtsgericht München
Registration Number: HRB 301510
If you have questions regarding the processing of your personal data on this website or on data protection matters, please contact us at datenschutz@codexaureus.de.
II. What data is processed and for what purpose when visiting the website?
1. Data processing when accessing the website
When accessing our website, the following general information (so-called log file data) is automatically collected:
-
Date and time of access
-
IP address
-
Website from which our website was accessed
-
Websites accessed via our website
-
Pages visited on our website
-
Information about browser type and version
-
Operating system
Temporary storage of this data is technically necessary for proper delivery of our website. These data are inevitably generated when using the internet and accessing a website. We store log file data to ensure the functionality and security of our IT systems. This constitutes our legitimate interest in storing the data.
Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR
2. Data processing when using the contact form or sending email inquiries
If you use the contact form on our website or contact us via the provided email address, we collect the data you provide in order to process and respond to your inquiry.
Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR
3. Data processing through web analytics tools
3.1. Facebook Pixel
We use Facebook Pixel, a web analytics service from Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA.
Facebook Pixel uses tracking code and text files to trace user actions (e.g., newsletter subscriptions or purchases). Based on your visit to our site, Facebook or other websites using Facebook Pixel may show interest-based ads. Facebook Pixel establishes a direct, automated connection with Facebook’s servers. Facebook receives information about which of our ads you clicked and may link the visit to your Facebook account, even if you’re not logged in or registered.
Legal basis: Art. 6 para. 1 lit. f GDPR
We do not have influence over the content or scope of data collected by Facebook. For more details, please refer to Facebook’s privacy policy:
https://www.facebook.com/about/privacy/your-info-on-other#applications
https://www.facebook.com/policy.php
https://www.facebook.com/help/186325668085084
https://www.facebook.com/about/privacy/your-info#everyoneinfo4
3.2. Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses “cookies” and possibly “web beacons” (invisible graphics) to collect data on website usage. The information generated (including your IP address) is transmitted to Google servers, potentially in the USA or other third countries, and stored there. Google may share this data with its partners.
Google Ireland is certified under the Privacy Shield framework and thus provides a guarantee of compliance with European data protection law.
We use Google Analytics with IP anonymization enabled (“anonymize IP”). This ensures your IP address is shortened within the EU or EEA before processing. Only in exceptional cases will the full IP address be sent to a Google server in the US and then shortened.
We have signed a data processing agreement (Art. 28 GDPR) with Google. Google processes this data on our behalf to analyze website usage and compile reports. Google may transfer this data to third parties when legally required or when third parties process data on its behalf.
Purpose: Analyze user behavior to improve our offering.
Legal basis: Art. 6 para. 1 lit. a GDPR
Google is allowed to use subcontractors, listed here:
https://privacy.google.com/businesses/subprocessors/
Right of Withdrawal:
You have the right to withdraw your consent at any time without giving reasons by emailing us at datenschutz@codexaureus.de.
The collected information is stored only as long as necessary for the purpose or as legally required.
More information:
https://support.google.com/analytics/answer/6004245?hl=de
Google privacy settings: https://privacy.google.com/take-control.html?categories_activeEl=sign-in
The provision of your personal data is not legally or contractually required, nor necessary for concluding a contract. However, failure to provide data may result in the website not functioning fully.
4. Cookies
We use cookies — small text files exchanged between your web browser and our server. Cookies are stored on your device and sent to our website. You can disable or restrict cookies in your browser settings. Already stored cookies can be deleted at any time. Disabling cookies may impact full website functionality.
Legal basis: Art. 6 para. 1 lit. f GDPR
Cookies are used for:
-
Collecting statistics like site visits
-
Ensuring secure and proper site functionality
Many cookies contain a unique cookie ID, allowing websites and servers to recognize and distinguish your browser from others.
Purpose:
Cookies improve usability. For example, users don’t have to re-enter login data on each visit. Cookies help us optimize offerings and recognize returning users.
5. Data Security
We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse, and to ensure secure data transfer. Data transfer occurs using the standard (non-secure) SSL (Secure Socket Layer). You can recognize a secure SSL connection by the “https://” in the URL and a padlock icon in the browser address bar.
Please note that due to the internet’s structure, unauthorized access by third parties cannot be fully ruled out. It’s your responsibility to protect your data, e.g., through encryption. Unencrypted data — especially via email — may be read by third parties.
6. Processing of Contact and Payment Data
We store your company name, payment data, contract data, address, first and last name, phone number, and email address.
Temporary storage of this data is necessary for fulfilling contractual obligations. This data is only collected upon contract conclusion or quote request.
Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR
III. How long are your data stored?
In general, data is deleted when it is no longer necessary for the purposes for which it was collected.
-
Log file data (from website access): stored for 14 days to detect and analyze potential attacks.
-
Inquiries and provided data: stored for 1 month for documentation purposes.
-
Web analytics data: stored for 1 month, then deleted.
IV. To whom are your data disclosed?
Our website is hosted by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur, Germany
No further data is shared with other recipients.
V. Your Data Subject Rights
As a data subject, you have the following rights. To exercise them, contact: datenschutz@codexaureus.de
-
Right of access – Art. 15 GDPR
-
Right to rectification – Art. 16 GDPR
-
Right to erasure – Art. 17 GDPR
-
Right to restriction of processing – Art. 18 GDPR
-
Right to data portability – Art. 20 GDPR
You can object to processing for advertising purposes at any time without giving reasons.
Under Art. 21 para. 1 GDPR, you also have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 para. 1 lit. f GDPR. Such objections must be justified.
VI. Right to Lodge a Complaint with a Supervisory Authority
If you believe your personal data has been processed unlawfully, you have the right to file a complaint with a data protection authority under Art. 77 para. 1 GDPR. This includes the competent authority for the controller:
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach, Germany
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
Email: poststelle@lda.bayern.de
VII. Existence of Automated Decision-Making
No automated decision-making – including profiling – takes place under Art. 22 para. 1 and 4 GDPR.
Last updated: 10.06.2025