Privacy Policy

Thank you for visiting our website and your interest in our products. The protection of your personal data is important to us. Below we inform you about the collection, processing and use of your data when using our website. With regard to the terms used, such as "processing" or "person responsible", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).


1. Responsible and contact details

Responsible for the collection, processing and use of your personal data within the meaning of the GDPR is:

Clean Coder Club
 Philipp Hauptmann (sole proprietorship)
Freibadstr. 13
81543 Munich

Email: hello@cleancoder.club

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection regulations, either as a whole or for individual measures, you can send your objection by letter or e-mail to the aforementioned contact details.

2. Types of Data Collected

  • Inventory data (eg, names, addresses)
  • Contact information (e.g., email, phone numbers)
  • Contract data (e.g. subject matter, term, customer category)
  • Payment data (eg, bank details, payment history)
  • Content data (e.g., text input, photographs, videos)
  • Usage data (e.g. websites visited, referrer URL, interest in content, access times, log files)
  • Meta/communication data (e.g. device information, IP addresses)

    3. Purposes of data processing

    • Provision of the online offer, its functions and content: The processing of personal data is necessary to ensure the smooth functioning of the online offer, for example by personalizing content, providing shopping cart functions, saving user settings or identifying and correcting technical problems .
    • Fulfillment of orders: The processing of personal data is necessary in order to receive, process and send orders and to process payments.
    • Customer care: Data processing is also used to respond to customer inquiries or process returns and to provide general customer care services.
    • Marketing and advertising: Personal data may also be used for marketing purposes, such as B. sending newsletters, offers or promotional communications.
    • Analysis and improvement: The processing of data serves to analyze user behavior in order to improve the shopping experience, to adapt products or services and to optimize the website or app.
    • Compliance with legal obligations: it may be necessary to process personal data in order to comply with legal obligations, such as B. Tax or accounting regulations.
    • Compliance with data protection security measures: The processing of personal data may be necessary in order to implement appropriate data protection and security measures and to ensure that the data is protected against unauthorized access, loss or misuse.
    • As well as all other activities related to the processing of the shop

    4. Legal Basis for Data Processing

    In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 (1) lit. a and Art Answering inquiries is Article 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(c) GDPR 6 Paragraph 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 lit. d GDPR serves as the legal basis.

    4. Disclosure to Third Parties

    Insofar as we disclose data to other people and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this is only done on the basis of legal permission. If we commission third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 DSGVO.

    In general, we only pass on your personal data to third parties if:

    • you have given your express consent to this in accordance with Article 6 (1) sentence 1 lit. a GDPR (e.g. newsletter),
    • the transfer according to Article 6 paragraph 1 sentence 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
    • in the event that there is a legal obligation for the transfer according to Art. 6 Para. 1 S. 1 lit
    • this is legally permissible and required for the processing of contractual relationships with you in accordance with Article 6 Paragraph 1 Sentence 1 lit.

    5. Transfer of data to countries outside the EU

    If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this happens as part of the use of third-party services or disclosure or transmission of data to third parties, this only takes place if it is to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means that the processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

    6. Cookies and Tracking Technologies

    6.1 Cookies

    We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not damage your end device and do not contain viruses, Trojans or other malware. Accepting cookies is not a prerequisite for visiting our websites. However, we would like to point out that our website and service may only have limited functionality if you do not allow us to set cookies.

    Information is stored in the cookie that arises in connection with the specific end device used. However, this does not mean that we are immediately informed of your identity.

    On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies (transient cookies) to recognize that you have already visited individual pages on our website. Session cookies are required, for example, to offer you the shopping cart function across multiple pages. Session cookies are automatically deleted after leaving our site.

    In addition, we also use temporary cookies (persistent cookies) to optimize user-friendliness, which are stored on your end device for a specific period of time. If you visit our site again to make use of our services, it will automatically be recognized that you have already been with us and what inputs and settings you have made so that you do not have to enter them again.

    On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined period of time.

    Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

    Incidentally, only pseudonymous data is stored in the cookies we use. When the cookie is activated, an identification number is assigned to it and your personal data is not assigned to this identification number. Your name, your IP address or similar data that would enable the cookie to be assigned to you will not be placed in the cookie. Based on cookie technology, we only receive pseudonymised information, for example about which pages of our shop were visited, which products were viewed, etc.

    The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) (f) GDPR.

    We also use HTML5 storage objects that are stored on your end device. These objects store the required data regardless of the browser you use and do not have an automatic expiry date. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend manually deleting your browser history on a regular basis. The use of HTML5 storage objects serves to make the use of our offer more pleasant for you. The legal basis for its use is Article 6 Paragraph 1 Sentence 1 Letter f GDPR.

    We use iSenseLabs GDPR/CCPA and cookie management tool on our website. The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to make use of your right of withdrawal for consent that has already been given.

    Data processing serves the purpose of obtaining and documenting the necessary consent to data processing and thus complying with legal obligations. Cookies can be used. The following information, among others, can be collected and transmitted to Cookiebot: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data will not be passed on to other third parties.

    Data processing is carried out to fulfill a legal obligation on the basis of Article 6 (1) (c) GDPR. You can find more information about the terms of use and data protection of iSenseLabs here.

    6.2 Google Analytics

    On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO) we use Google Analytics, a web analysis service provided by Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.

    Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law .

    Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and internet usage. Pseudonymous user profiles can be created from the processed data.

    We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

    The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; In addition, users can prevent the data generated by the cookie and related to their use of the online offer from being collected and processed by Google by downloading and installing the browser plug-in available under the following link: http:// tools .google.com/dlpage/gaoptout?hl=de .

    You can find more information on data use by Google, setting and objection options in Google's data protection declaration and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated ).

    The personal data of the users are automatically deleted after 26 months.

    6.3 Google Adwords Conversion Tracking

    We also use Google Conversion Tracking to statistically record the use of our website and to evaluate it for you in order to optimize our website. Google Adwords places a cookie on your computer if you have reached our website via a Google ad.

    These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

    Each Adwords customer receives a different cookie. This means that cookies cannot be tracked via the websites of Adwords customers. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers are informed of the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

    You can also deactivate cookies for conversion tracking by setting your browser so that cookies from the domain " www.googleadservices.com " are blocked. Google's privacy policy on conversion tracking can be found here .

    6.4 Use of Google Tag Manager

    We use the Google Tag Manager from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.

    This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimization of our website.

    The Google Tag Manager itself does not store cookies, nor is personal data processed as a result. However, it enables the triggering of additional tags that can collect and process personal data.

    More information on terms of use and data protection can be found here.

    6.5 Newsletter success measurement

    The newsletters contain a so-called "web beacon", ie a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, are initially collected.

    This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor, if used, that of the shipping service provider to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

    Unfortunately, it is not possible to revoke the success measurement separately. In this case, the entire newsletter subscription must be canceled (see Section 7.3).

    7. Advertising Services

    7.1 Meta Pixels

    On our website we use the remarketing function "Custom Audiences" from Meta Platforms Ireland Limited (hereafter "Meta").

    In order to send retargeting ads, we have activated the meta pixel on our website. This function is used to present interest-based advertisements to visitors to our website when they visit the social networks Facebook and Instagram. This is used to establish a direct connection to the Facebook servers when you visit the website. It is transmitted to the meta-server that you have visited our website and assigns this information to your personal user account.

    You can find more detailed information on the collection and use of data by Meta and on your rights in this regard and options for protecting your privacy in Meta's data protection information . Alternatively, you can deactivate the "Custom Audiences" remarketing function here . To do this, you must be logged in to a Facebook or Instagram account.

    7.2 Google AdSense

    Our website uses the online advertising service Google AdSense, through which advertising tailored to your interests can be presented to you. We are interested in showing you advertisements that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is recorded, which is processed by our advertising partners. These advertisements can be recognized by the reference "Google ads" in the respective ad.

    By visiting our website, Google receives the information that you have accessed our website. To do this, Google uses a web beacon to place a cookie on your computer. Usage data is transmitted. We have no influence on the data collected, nor do we know the full extent of the data collection and the storage period. Your data will be transferred to the USA and evaluated there. If you are logged in with your Google account, your data can be assigned directly to this. If you do not wish to be associated with your Google profile, you must log out. It is possible that this data will be passed on to Google's contractual partners, third parties and authorities.

    The legal basis for the processing of your data is Article 6 Paragraph 1 Clause 1 Letter a GDPR.

    This website does not serve third-party ads through Google AdSense.

    You can also prevent the installation of Google AdSense cookies in various ways: a) by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party ads; b) by deactivating interest-based ads on Google via the link http://www.google.de/ads/preferences, whereby this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers who are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.

    Further information on the purpose and scope of data collection and processing, as well as further information on your rights in this regard and setting options for protecting your privacy can be obtained from: Google LLC, 1600 Amphitheater Parkway, Mountain View, California 94043, USA; Privacy Policy for Advertising. Google has submitted to the EU-US Privacy Shield .

    7.3 Newsletters

    With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you agree to receive it and the procedures described.

    Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter "newsletter") only with the consent of the recipient or legal permission. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the consent of the user. Our newsletter also contains information about our services and us.

    Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else's e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

    Registration data: In order to register for the newsletter, it is sufficient if you enter your e-mail address. Optionally, we ask you to enter a name so that we can address you personally in the newsletter.

    The sending of the newsletter and the success measurement associated with it are based on the consent of the recipient in accordance with Article 6 Paragraph 1 Letter a, Article 7 GDPR in conjunction with Section 7 Paragraph 2 No. 3 UWG or if consent is not required , on the basis of our legitimate interests in direct marketing in accordance with Article 6 Paragraph 1 of the GDPR in conjunction with Article 7 Paragraph 3 of the UWG.

    The registration process is logged on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system that serves our business interests as well as meets user expectations and also allows us to prove consent.

    Termination/Revocation – You can terminate the receipt of our newsletter at any time, ie revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We can store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.

    8. Social Plugins

    We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place in the process serve the purpose of optimizing advertising for our products.

    When social plug-ins are integrated, a link is established between your computer and the servers of the social network provider and the plug-in is displayed on the page by notifying your browser, provided you have expressly consented to this. Both your IP address and the information about which of our pages you have visited are transmitted to the provider's server. This applies regardless of whether you are registered or logged in to the social network. Transmission also takes place for users who are not registered or not logged in. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.

    Cookies or comparable technologies are used with your consent on the basis of Section 15 (3) sentence 1 TMG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

    The social networks named below are integrated into our website using social plug-ins. You can find more detailed information on the scope and purpose of the collection and use of the data as well as your rights in this regard and options for protecting your privacy in the linked data protection notices of the providers.

    Facebook and Instagram:

    Our websites contain plugins from the social networks Facebook and Instagram from Meta Platforms Ireland Limited ("Meta") (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

    As soon as you access our site, these plugins establish a direct connection between your browser and the Meta servers. That means: Meta learns that our website was accessed from your IP address. If you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to a Meta server and stored there. However, Meta can also determine that you (as a known user) have visited our pages. This information (including your IP address) is transmitted from your browser directly to a Meta server in the USA or other Meta data center locations and stored there. We expressly point out that we do not know which data is transmitted to Meta in detail and how Meta uses this data. If you do not want Meta to be able to associate your user accounts with the use of our website, you should log out of your Facebook and Instagram account while you are on our website.

    Meta's data protection declaration provides information on the purpose and handling of personal data at Meta itself. For your rights and setting options to protect your privacy, please refer to the data protection information from:

    If you do not want Meta to directly assign the data collected via our website to your Facebook or Instagram account, you must log out of Facebook and Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading with add-ons for your browser, e.g. B. with the script blocker “NoScript” ( http://noscript.net/ ).

    9. Rights of data subjects

    If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing and to data portability.

    You also have the right, in accordance with Article 77 GDPR, to lodge a complaint with the competent supervisory authority.

    10. Duration of storage

    The data processed by us will be deleted or their processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

    According to legal requirements in Germany, storage takes place in particular for 10 years in accordance with §§ 147 Paragraph 1 AO, 257 Paragraph 1 No. 1 and 4, Paragraph 4 HGB (books, records, management reports, accounting documents, trading books, relevant for taxation documents, etc.) and 6 years in accordance with Section 257 Paragraph 1 Nos. 2 and 3, Paragraph 4 HGB (commercial letters).

    11. Right of objection and revocation

    You can object to the future processing of data relating to you at any time in accordance with Art. 21 GDPR. The objection can be made in particular against processing for direct advertising purposes.

    You have the right to revoke your consent in accordance with Article 7 (3) GDPR with effect for the future. If you would like to make use of your right of revocation or objection, an e-mail to: hello@cleancoder.club is sufficient

    12. Data Security

    In accordance with Art. 32 GDPR, we take appropriate technical measures, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk.

    The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, transfer, securing availability and their separation. Furthermore, we have set up procedures that ensure the exercise of data subject rights, deletion of data and reaction to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Article 25 GDPR).

    When you visit our website, we use the widespread SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

    13. Online social media presence

    We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to be able to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

    Unless otherwise stated in our data protection declaration, we process user data if they communicate with us within social networks and platforms, e.g. write posts on our online presence or send us messages.

    14. Changes to the Privacy Policy

    This data protection declaration is currently valid and has the status of May 2023.

    Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on our website at www.cleancoder.club/pages/privacy.