Data Privacy Statement

Data Privacy takes an important role at clockodo:
Only the most necessary data will be collected and used.

Data Privacy Statement

Effective September 26th, 2018

1. When you visit our website

When you visit our website, our server will collect the following information about you: browser type and version, operating system, previously visited website, IP address and time at which the site was accessed. The IP address does not enable us to draw conclusions as to your person. We will also not combine your IP address with other data in a way that would enable such conclusions.

We acquire and process these data to ensure trouble-free operation of our website and to enable detection of, protection against and tracking of misuse of our services. Furthermore, we use the data acquired also for statistical purposes, e.g. to detect which terminal devices and browsers are used to access our platform, so that we can use this as a basis for continuously adjusting and improving our offering to the users' needs.

The basis for this data processing is Art. 6 (1) f) of the General Data Protection Regulation (GDPR).

We will delete all the data specified above at the latest six months after they have been acquired.


2. Usage contract, customer account

If you enter into a usage contract with us, we will acquire and process your e-mail address, your name and, if provided by you for the purpose of concluding the contract with us, further personal information, such as your postal address. We use these data to perform the usage contract concluded with you, for invoicing and for booking payments. Should you not provide the data in those input fields that we identify as mandatory fields in our user interface, we cannot offer you the conclusion of a contract regarding our services.

The basis for this data processing is Art. 6 (1) b) GDPR.

We will keep these data stored until all mutual claims under the contractual relationship have been finally settled and the respective commercial-law and tax-law retention periods have expired.


3. Use of cookies

When you log in to your customer account via our website, we place a cookie on your terminal device. Cookies are small text files allowing us to detect, upon your next visit, that you already successfully visited us, so you need not repeat the login. The cookie only allows us to detect the login status. You can prevent the installation of cookies by opening the cookie settings of your internet browser and changing the settings to disallow the installation of cookies for our site or all websites.


4. Data exchange with external applications

In your customer account, you can transmit data from clockodo to various third-party applications, e.g. to conveniently create invoices from your project data. If you use this function, we will transmit the project data you select to the third-party provider you select.

The basis for this data processing is Art. 6 (1) a) GDPR.

You can stop the use of this function at any time.


5. Payments

If you award us a SEPA Direct Debit Mandate for paying our invoices, we will acquire and process the name of the account holder and the account details (IBAN and BIC). We will transmit these data to our bank (Commerzbank AG, Kaiserplatz, 60311 Frankfurt/Main) and to the bank resulting from your bank account details to collect due fees using the SEPA Direct Debit procedure.

If you pay invoices through PayPal, PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg) will transmit to us the name of the PayPal account which you have used to make the payment and the name and e-mail address linked to that account.

If you pay invoices by credit card, we will acquire and process the name of the cardholder, the card number and the expiry date. We have contracted 1&1 Internet SE, Elgendorfer Straße 57, 65410 Montabaur, as a processor to receive from you the abovementioned card data on our behalf and to transmit them to the company issuing the card, so as to enable the payment amount to be credited to us.

We store the abovementioned payment data to comply with our bookkeeping obligations in the context of our contractual relationship with you. The basis for this data processing is Art. 6 (1) c) GDPR.

We will keep these data stored until all mutual claims under the contractual relationship have been finally settled and the respective commercial-law and tax-law retention periods have expired.


6. Use of your e-mail address for newsletters

When you open a customer account with us, we put your e-mail address on our newsletter distribution list. During the free test phase, we may send you up to ten e-mails containing information about the use of clockodo.com. After the test phase, we will occasionally inform you about new functions of our software and new services offered by our company. You will not receive more than four newsletters per month.

You may at any time informally object to the use of your e-mail address for advertising purposes without incurring any costs other than the transmission costs according to the basic rate.

The basis for this data processing is Art. 6 (1) f) GDPR.

If you object to the use of your e-mail address for advertising purposes, we will delete your e-mail address from our newsletter distribution list (cf. Section 12 of this Data Privacy Statement).


7. We use Google Analytics, Google AdWords and Google Tag Manager

On the publicly accessible pages of our website, i.e. on all pages except your customer account area which is identified by the URL 'my.clockodo.com', we, moreover, use the services Google Analytics, Google AdWords and Google Tag Manager provided by Google Inc., 1600 Amphitheatre Parkway
, Mountain View, CA 94043
, USA (hereinafter: 'Google'). In this context, Google Analytics also uses cookies. Cookies are text files which are stored on your computer and enable an analysis of your use of our website. The information generated by the cookie about your use of this website, including your IP address, will be transmitted to and stored by Google on servers in the United States.

Google will use this information to evaluate your use of our website. Also, Google may transmit this information to third parties if this is required by law or a third party processes these data on behalf of Google.

Google may also use the cookies for retargeting. This means that advertisements may be shown on third-party websites that you visit, based on an analysis of your previous use of other sites, e.g. our platform.

In no event will Google connect your IP address with other Google data.

You can prevent the installation of the cookies by adjusting the appropriate settings in your browser software. However, please be aware that if you do this you may not be able to use all the functions of this website.

By using this website, you give your consent to Google processing the data gathered about you in the manner described above and for the purpose specified above.

You can object to the acquisition of the data by Google Analytics with future effect by installing a deactivation add-on (http://tools.google.com/dlpage/gaoptout?hl=de) for your browser.

As an alternative to the browser add-on, or within browsers on mobile devices (e.g. smartphones), please click on this link to prevent acquisition by Google Analytics on this website in the future (the opt-out will work only in this browser and only for this domain). This will place an opt-out cookie on your device. As soon as you delete the cookies in this browser, data transmission to Google will be resumed and you would need to click the above link again to again prevent the transmission of the data.


8. We use Facebook Custom Audience ('Facebook Pixel')

On the publicly accessible pages of our website, i.e. on all pages except your customer account area which is identified by the URL 'my.clockodo.com', we use the Facebook Pixel technology of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (hereinafter: 'Facebook'). Provided that express consent has been given, this allows the tracking of the behaviour of users after they have been shown or have clicked on a Facebook advertisement. This procedure is used to evaluate the efficiency of the Facebook advertisements for statistical and market research purposes and can contribute to optimising future advertising measures.

The data acquired are anonymous to us and hence do not allow any conclusions as to your identity. However, Facebook will store and process the data, so that they can be connected to your Facebook profile and Facebook will be able to use the data for its own advertising purposes in compliance with the Facebook data usage policy (https://www.facebook.com/about/privacy).

You can allow Facebook and its partners to show you advertisements on and outside Facebook. Furthermore, a cookie may be stored on your computer for these purposes. These processing activities will take place exclusively if the express consent pursuant to Art. 6 (1) a) GDPR has been given.

Only users over 13 years of age may give their consent to the use of the Facebook Pixel. If you are younger than this age, please ask your legal guardians for permission.

Facebook Inc., having its registered seat in the USA, is certified under the EU-US Privacy Shield data protection agreement which ensures compliance with the level of protection of personal data that applies within the EU.

To deactivate the use of cookies on your computer, you can adjust settings in your internet browser to will prevent the storage of cookies on your computer in the future or to delete cookies already stored. However, disabling all cookies may result in some functions on our website no longer being able to work. You can also deactivate the use of cookies by third-party providers, such as Facebook, on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices.


9. We use Microsoft Bing Ads

On the publicly accessible pages of our website, i.e. on all pages except your customer account area which is identified by the URL 'my.clockodo.com', we use Bing Ads, which is provided by Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. Phone: (+1) 425-882-8080 (“Microsoft”).

If you click on an advert placed by Microsoft Bing Ads, a cookie is placed on your computer for conversion tracking. This cookie has a limited validity and does not serve purposes of personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Microsoft can recognise that you have clicked on the advert and were forwarded to this page. The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. It does not however enable personal identification of the user.

You can prevent being tracked by choosing the appropriate preference in the privacy options of your browser or disable cookies. For more information about Bing Ads security see https://secure.bingads.microsoft.com. For more information about Microsoft privacy policies see https://privacy.microsoft.com/de-de/privacystatement or contact the data controller office Microsoft Ireland Operations, Ltd., Attn: Data Protection, Carmenhall Road, Sandyford, Dublin 18, Irland.


10. Inquiries to us, customer service

If you contact us online (e.g. by e-mail or by using a contact form or other input mask on our platform), we will store your inquiry including your personal data that you transmit (name, e-mail address and, possibly, other data you freely give us) to respond to your inquiry and also to be able to react to any questions you may ask us subsequently. 

If you use our contact form, the data processing takes place pursuant to Art. 6 (1) a) GDPR. If you use any other channel to contact us, the legal basis of the data processing is Art. 6 (1) f) GDPR. If you send us any declaration regarding your contractual relationship with us (e.g. a notice of termination), the legal basis of the data processing is Art. 6 (1) b) GDPR, regardless of the transmission channel.

Please note that we reserve the right to transmit inquiries we receive by e-mail or via our contact form to the service provider Zendesk Inc., 1019 Market Street, San Francisco, CA 94103, USA, whose software we are using to respond to the inquiries.

We will delete the data acquired due to your inquiry twelve months after the last communication with you regarding the inquiry, unless it contains a declaration regarding your contractual relationship with us (e.g. a notice of termination). In such a case, we will delete your data as soon as all mutual claims under the contractual relationship have been finally settled and the respective commercial-law and tax-law retention periods have expired.


11. Other recipients, data portability

At the same time, another recipient of the data referred to in Sections 1, 7 and 8 is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany, which is working as a processor on our behalf in accordance with Art. 28 GDPR for the web hosting of our publicly accessible website 'www.clockodo.com'.

At the same time, another recipient of the data referred to in Sections 1, 2, 3 and 5 is Microsoft Ireland Operations Ltd., Carmenhall Road, Sandyford, Dublin 18, Ireland, which is working as a processor on our behalf in accordance with Art. 28 GDPR for the web hosting of the customer area at 'my.clockodo.com'.

When you contact us by e-mail or receive an e-mail from us, the abovementioned Mittwald CM Service GmbH & Co. KG and/or the abovementioned Microsoft Ireland Operations Ltd., which operate our mail servers as processors in accordance with Art. 28 GDPR, are also recipients of the personal data contained in the e-mail.

Moreover, those companies may also be recipients to which you transmit data via one of our interfaces, e.g. for issuing invoices or for the further processing by a third party mandated by you. With this, we comply with our legal obligation to enable data portability pursuant to Art. 20 (1) GDPR.


12. Right of access and other rights

You have the right to demand at any time that we provide information to you free of charge as to whether or not we are processing data concerning you and, where that is the case, that we provide information about these personal data and the purposes of the processing, the categories of personal data that are being processed, the recipients or categories of recipient to whom the personal data have been or will be disclosed and, where possible, the envisaged period of storage, or, if not possible, the criteria used to determine that period. Furthermore, you have the right to have inaccurate data rectified and incomplete data completed and, provided that the legal prerequisites exist, the right to demand restriction of the processing or erasure of your personal data. We will inform all recipients to whom we have disclosed personal data concerning you of any rectification or erasure of your personal data and of any restriction of processing, unless this proves to be impossible or involves disproportionate effort. We will also tell you who these recipients are if you request this.

Where we process personal data concerning you on the basis of a consent given by you (Art. 6 (1) a) GDPR), you have the right to revoke your consent at any time. However, such revocation does not affect the lawfulness of the processing done based on your consent prior to your revocation.


13. Right to object to data processing in specific cases

ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, YOU MAY AT ANY TIME OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU. THIS RIGHT TO OBJECT EXISTS IN RELATION TO SUCH DATA PROCESSING THAT IS DONE ON THE BASIS OF ART. 6 (1) F) GDPR TO PROTECT LEGITIMATE INTERESTS OF US OR A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE OVERRIDDEN BY YOUR INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS WHICH REQUIRE PROTECTION OF PERSONAL DATA. If you exercise your right to object, we will no longer process the data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or that the purpose of the processing is the establishment, exercise or defence of legal claims.

WHERE WE PROCESS PERSONAL DATA FOR DIRECT MARKETING PURPOSES (E.G. NEWSLETTERS), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING, THE EFFECT OF THIS BEING THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.


14. Controller

The controller is clickbits GmbH, Friedrich-Ebert-Str. 61, 59425 Unna, telephone (02303) 6766870, e-mail info(at)clickbits.de


15. Options for complaining

You can lodge your complaints with the data protection supervisory authority in North Rhine-Westphalia: Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf, telephone (0211) 38424-0, e-mail poststelle(at)ldi.nrw.de.