Privacy Policy

This statement covers not only data collected through this website but also any data collection via provided software, apps, and other programs from Code8 GmbH that you use. In the following, we use the term 'platforms' to refer to all of the aforementioned software. By using these, you agree to the processing. At Code8, we generally apply the principle of data minimisation and only collect personal data when absolutely necessary. If personal data (e.g. email addresses) is collected, processed, or used on our platforms, this happens solely for the purpose of providing the services offered on these platforms. Furthermore, we do not share your personal data with third parties for commercial or non-commercial purposes without your explicit consent.

You can reach the person responsible for data protection via mail@code8.dev. Alternatively, via the email datenschutz@code8.dev.

Vercel: We use the hosting and analytics services of Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (‘Vercel’), for hosting our platforms and processing technical usage data. This may include anonymised IP addresses, browser information, referrer URL, time of access, page content and time spent.

Google Analytics: We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland / Google LLC, USA) to analyse website usage and improve our offering. Depending on your consent settings, usage data and identifiers (e.g. cookie IDs) may be processed.

Mixpanel: We use Mixpanel (Mixpanel, Inc., One Front Street, 28th Floor, San Francisco, CA 94111, USA) for product and funnel analytics, including event-based usage tracking and conversion analysis. Depending on your consent settings, pseudonymous identifiers and interaction events may be processed.

Mailtrap: We use Mailtrap (Railsware Products Studio LLC, 251 Little Falls Drive, Wilmington, DE 19808, USA) to send transactional emails submitted via our forms (e.g. contact and application confirmations). This includes the contact data and message content you provide.

Legal basis: Processing is based on Art. 6 (1) (f) GDPR (legitimate interest in secure operation, communication and service improvement) and, where required, Art. 6 (1) (a) GDPR (consent, especially for analytics/cookies).

Data transfer to third countries: Some providers are based in the USA. Where required, transfers are safeguarded by appropriate mechanisms such as EU Standard Contractual Clauses.

Retention: Data is stored for a maximum of 12 months and then automatically deleted.

Right to object / withdraw consent: You may object to processing based on legitimate interests and may withdraw previously granted consent at any time (e.g. analytics consent). To do so, contact us at datenschutz@code8.dev. Please note that this may affect parts of the website functionality.

Sending the form on this website transmits your name, your agency, your email address and the answers you gave to us. It arrives as an email and is kept in our mailbox. We use it to reply to you and for nothing else: there is no database behind this form, and your answers are not added to any list. Write to datenschutz@code8.dev to have them deleted.

Legal basis: Art. 6 (1) (b) GDPR — steps taken at your request prior to entering into a contract.

This website itself sets no cookies except the one that remembers which language you chose, and runs no analytics. The services named above describe code8.dev; the only one involved here is the hosting.

Agencies use AgencyOS to share single pages by link with people outside their workspace. When you open such a link, you give your name and email address, and we send a code to that address to confirm it. From then on we keep your name, your confirmed email address, when and how often you opened the page, and the comments you write there. We do not store your IP address with your opens.

Some links ask only for your name. Then you give no email address and receive no code: we keep your name, when and how often you opened the page, and the comments you write there, and the agency sees your name and your opens. Your browser remembers the name you gave, so that the next such link opens without asking again.

The agency that shared the link sees your name, your email address if you gave one, and your opens. Your name and your comments are also seen by anyone allowed to read the page — including the contacts of the agency’s client — but your email address is not.

The controller for this data is the agency that shared the page; we process it on their behalf (Art. 28 GDPR). It is kept for as long as the agency keeps the page in AgencyOS. Your browser remembers the confirmation for 30 days so that you do not have to enter a code on every visit. For access, correction or deletion, contact the agency or datenschutz@code8.dev; we pass your request on to the agency.

In AgencyOS you can record a voice note or add an audio file — in a form, a message, a work item or a page. The recording is stored like any other file and is heard by exactly the people who may read the place it was added to.

If you, or the agency, ask for a transcript, the recording is sent to Scaleway (Scaleway SAS, Paris, France), which hosts AgencyOS, and turned into text by a speech-recognition model in its data centres in the EU. Scaleway keeps neither the recording nor the text and does not use either to train its models. The transcript is stored next to the recording and is seen by the same people. In a form, you see the text first and can correct it before sending.

The controller for these recordings is the agency whose workspace they are in; we process them on its behalf (Art. 28 GDPR), with Scaleway as our sub-processor. They are kept for as long as the agency keeps the message, item or page. For access, correction or deletion, contact the agency or datenschutz@code8.dev; we pass your request on to the agency.

Under the EU General Data Protection Regulation, you have the following rights: If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR). If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR). If the legal requirements are met, you can request the deletion or restriction of processing and object to the processing (Art. 17, 18, and 21 GDPR). If you have consented to data processing or there is a contract for data processing and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR). If you exercise your above-mentioned rights, we will check whether the legal requirements are met.