Skip to content
Codamai

Legal

Privacy

Controller

Codamic AG
Dwight-D.-Eisenhower-Str. 9
65197 Wiesbaden
Germany

Phone: +49 611 944961-0
Email: info@codamic.ag

Represented by Daniel Alexander Mertins, Executive Board. Further details in the legal notice.

Data protection officer

DEUDAT GmbH, Nick Neffgen
www.deudat.de

Technical state of this website

  • No external fonts: Manrope is served locally from this domain.
  • No external JavaScript libraries, CDNs or tag managers.
  • Audience measurement with a self-hosted Matomo instance – without cookies, without marketing tracking and without sharing data with third parties.
  • No external form services; the contact form is processed server-side.

Audience measurement with Matomo

This website uses the open source analytics software Matomo. Matomo runs on our own infrastructure at analytics.codamic.ag; no data flows to an external analytics provider.

  • Measurement is cookie-free: no cookies are set and no identifiers are stored in the browser or on the device.
  • The browser's “Do Not Track” signal is respected; in that case no measurement takes place.
  • Without JavaScript enabled, only a counting pixel is requested.
  • What is recorded: pages visited, time on page, referring page, approximate location, device and browser type, and the truncated IP address.

The purpose of the processing is the statistical analysis of how this website is used, in order to improve its content, structure and technical delivery.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in designing this website to meet actual needs and in analysing its use statistically. Consent under § 25(1) TDDDG is not required, because the measurement neither stores nor reads information on your device.

IP addresses are truncated by two bytes before any storage (203.0.113.42 becomes 203.0.0.0). The full IP address is never stored.

Retention: the raw data of individual visits is deleted automatically after six months. Aggregated, non-personal analyses are kept beyond that.

Objection: if you enable the “Do Not Track” setting in your browser, no measurement takes place. Independently of that, you may object to the processing at any time under Art. 21 GDPR by contacting the controller.

Server log files

When this website is accessed, the web server we operate automatically creates log entries. These record the IP address, date and time of access, the address requested, the HTTP status code, the volume of data transferred, the referring page and the browser and operating system identifier.

The purpose is the secure and stable operation of the website, troubleshooting, and detecting and investigating abusive access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security and availability of our systems.

Retention: log entries are deleted after twelve months. They are not combined with other data sources. Audience measurement with Matomo is separate from this and works with truncated IP addresses.

Contact and quote request form

Through the contact and quote request form we process the details you enter there: first and last name, business email address, company, position, optionally your company website, and your description of the project. Optionally you can also state the size of your engineering team, the use case, the modules you are interested in, the deployment model, whether the environment is regulated, and your preferred start date.

The purpose is handling your enquiry and preparing a quote or a technical conversation.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give explicitly when submitting, and – where the enquiry aims at concluding a contract – Art. 6(1)(b) GDPR (pre-contractual measures).

Recipients: the details are delivered by email to an internal CodamAI address and handled there by the responsible people. They are not passed on to third parties for advertising purposes, and no external form services are used.

Retention: we keep your enquiry until it has been dealt with conclusively and delete it afterwards, unless statutory retention periods apply.

Abuse protection: to fend off automated submissions we limit the number of submissions per connection. For this your IP address is not stored in clear text but only as a non-reversible hash together with a timestamp, kept on the server for at most one hour. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protection against misuse.

Session cookie: when you open the form we set the technically necessary cookie codamai_session. It holds the security token against cross-site request forgery and the values you have already entered in case submission fails. It contains no identifier for advertising purposes and expires with the session. Consent is not required for this under § 25(2) no. 2 TDDDG.

Hosting

This website runs on server infrastructure provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner supplies the infrastructure only and processes personal data solely on our behalf, on the basis of a data processing agreement under Art. 28 GDPR.

We operate the web server ourselves. The log files described above are created and held within our own area of responsibility and are analysed by us alone, not by Hetzner.

Your rights

You have the following rights towards the controller:

  • Access to whether and which data we process about you (Art. 15 GDPR),
  • Rectification of inaccurate or incomplete data (Art. 16 GDPR),
  • Erasure (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Objection to processing based on a legitimate interest (Art. 21 GDPR).

You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out until then is not affected.

An informal message to info@codamic.ag is enough to exercise these rights.

Independently of that, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden, Germany
datenschutz.hessen.de