Thank you for visiting our website. Protecting your privacy is very important to us. You will find information below about how we process your personal data on our website. You can visit our website and look through what we have to offer, without providing any personal information.
1. General information
1.1 Data controller: Creatokia GmbH, Voltastraße 1, 60486 Frankfurt am Main, Germany, phone: +49 (0)69 9072006-0, fax +49 (0)69 9072006-97, email: contact@creatokia.com
2. Visiting our website
You can visit our website without providing any personal information.
2.1 Cookies
We use cookies on our website. Cookies are short text files that are stored by the browser. Some cookies are valid until the end of the browser session and are then automatically deleted (session cookies), others are valid beyond that (persistent cookies). Cookies are used either to provide necessary functions of the website or functions of the website requested by the user (necessary and functional cookies) or to create usage profiles.
The data stored in the cookie will not be combined with other data and does not enable us to identify a specific person.
You can block use of cookies by making the relevant setting in your browser, or by deleting the cookies at any time. However, if you do not allow cookies, you might not be able to use all of the functions of our website.
We use necessary and functional cookies to pursue legitimate interests to make the website user-friendly. In this context no usage profiles are created. The legal basis for processing is Article 6(1)(f) GDPR.
We use necessary and functional cookies for the following purposes:
• to store whether or not you have given consent for cookies used to create usage profiles (this cookie is valid for 12 months if you have given consent, or 6 months if you have not given consent);
• to store whether or not you have turned off the contact information bar so that it will not be displayed again (this cookie is valid for 30 days);
• to store whether you want embedded third-party content to be displayed immediately; otherwise you must first activate such content to be displayed (this cookie is valid for 30 days).
For cookies used by Google Analytics to create usage profiles, see 2.3. below. For cookies when using Facebook Pixel, LinkedIn Insight Tag and Hotjar, see sections 2.4 , 2.5. and 2.6.
2.2 Log files
We collect and store data anonymously for marketing and optimisation purposes, as well as to guarantee system security and to prevent misuse. This data includes, for example, your IP address, the internet browser used, the website from which you reached our site, the offers you have looked at on our website and the date and duration of your visit. A usage profile is created from this data, under a pseudonym. The data is not allocated to a specific person. Cookies can be used for this (see above). The usage profile is not associated with personal data. It is only used for statistical evaluations to optimise what we offer.
We use log files to safeguard legitimate interests, to analyse use of our website and to make the website user-friendly, as well as to guarantee system security and to be able to trace misuse. Data in log files is stored for a maximum of one week, together with full IP addresses that allow specific internet users to be identified. The legal basis for processing is Article 6(1)(f) GDPR.
2.3 Google Analytics
Parts of our website use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google”). Google Analytics uses permanent cookies to create usage profiles. Those cookies will be stored only if you have given your prior consent (see 2.1 above).
The information generated by the cookies about your use of this website is normally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, where it is stored. We have activated IP anonymisation for this website so that Google will first abbreviate your IP address in the Member States of the European Union or in other EEA states („IP masking”). Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there.
Google will use this information on our behalf to evaluate your use of the website, to compile reports about website activities and to provide the website operator with additional services associated with website and internet use. Google does not associate with other data the IP address sent by your browser as part of Google Analytics. You can prevent cookies from being stored by making the relevant setting in your browser software. However, we would like to point out that you might then not be able to use all of the functions of this website. You can also prevent data generated by the cookie that relates to your use of the website (incl. your IP address) from being sent to Google and from being processed by Google, by downloading and installing the browser plugin available at Google Analytics Opt-Out. You can also prevent being tracked by Google Analytics by clicking the following link: disable Google Analytics. This will create an opt-out cookie which will prevent your data from being recorded when you visit this website in future.
You can find more detailed information about conditions of use and privacy at Google Analytics Terms of Service or Privacy & Terms. At How Google uses cookies you can find out the validity period of the cookies.
We only use cookies for Google Analytics with your prior consent. The legal basis of the processing is Article 6(1)(a) GDPR/Section 25(1) German Telecommunications and Online Services Data Protection Act (Telekommunikation-Telemedien-Datenschutzgesetz). You may withdraw your consent at any time by accessing the cookie options again and changing your selection. If you delete all cookies, you will be asked for your consent again the next time you visit our website.
2.4 Facebook Pixel
This website uses "Facebook Pixel", a service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). Facebook Pixel uses permanent cookies to create usage profiles. Those cookies will be stored only if you have given your prior consent (see 2.1 above).
Facebook Pixel enables Facebook to display ads on Facebook, so-called "Facebook Ads", only to those Facebook users who have visited our website, in particular those who have shown interest in our online offering or in certain topics or products. Facebook Pixel also allows us to check whether a user was redirected to our website after clicking on our Facebook Ads (conversion tracking).
If you are logged into Facebook with your user account, the fact that you visit our website is recorded in your user account. We have no influence on the scope and further use of data collected by Facebook.
We use Facebook Pixel only with your prior consent: The legal basis of the processing is Article 6(1)(a) GDPR/Section 25(1) German Telecommunications and Online Services Data Protection Act (Telekommunikation-Telemedien-Datenschutzgesetz). You may withdraw your consent at any time by accessing the cookie options again and changing your selection. If you delete all cookies, you will be asked for your consent again the next time you visit our website.
Settings regarding which types of advertisements are displayed to you on Facebook can be made on the following website: https://www.facebook.com/settings?tab=ads. We would like to point out that this setting will be deleted when you delete your cookies. For more information on data processing by Facebook, please visit: https://www.facebook.com/about/privacy. Information on Facebook Pixel can be found at: https://www.facebook.com/business/help/651294705016616.
2.5 LinkedIn Insight Tag
This website uses LinkedIn Insights Tag, a service provided by LinkedIn Ireland Unlimited Comapy, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn). LinkedIn Insight Tag uses permanent cookies to create usage profiles. Those cookies will be stored only if you have given your prior consent (see 2.1 above).
LinkedIn Insight Tag enables LinkedIn to display ads on LinkedIn only to those LinkedIn users who have visited our website, in particular those who have shown interest in our online offering or in specific topics or products. LinkedIn Insight Tag also allows us to check whether a user was redirected to our website after clicking on our LinkedIn ads (conversion tracking).
If you are logged into LinkedIn with your user account, the fact that you visit our website is recorded in your user account. We have no influence on the scope and further use of data collected by LinkedIn.
We use LinkedIn Insight Tag only with your prior consent: The legal basis of the processing is Article 6(1)(a) GDPR/Section 25(1) German Telecommunications and Online Services Data Protection Act (Telekommunikation-Telemedien-Datenschutzgesetz). You may withdraw your consent at any time by accessing the cookie options again and changing your selection. If you delete all cookies, you will be asked for your consent again the next time you visit our website.
You can prevent the analysis of your usage behavior by LinkedIn as well as the display of interest-based recommendations via https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further information on data processing by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy. For more information on conversion tracking, please visit https://www.linkedin.com/help/linkedin/answer/67595/.
2.6. Hotjar
We use Hotjar, Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta, Europe, in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
3. Processing of personal data that you make available to us
We process personal data when you register and use our platform.
3.1 User account
If you set up a user account for using the platform, your name and contact details will be collected. We process this data in order to communicate with you. The legal basis is Article 6(1)(b) GDPR.
3.2 Contact
Unless the subject-matter of your message is a job application (for which see 3.3 below), the following applies: When you contact us by email or using the contact form, we process the data you provide, in order to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR (pre-contractual measures).
3.3 Job applications
When you apply to us for a job in response to a job advertisement or on your own initiative, we process the data you provide us with in order to review your application and carry out the selection process. This includes in particular the following data: salutation, name, address, and data such as telephone numbers, fax number, email address; documents submitted with the application or subsequently on request, such as curriculum vitae and certificates; where applicable, payment data for the reimbursement of travel expenses.
The legal basis for the processing is the first sentence of Section 26(1) of the German Federal Data Protection Act (processing for the purposes of the employment relationship if this is necessary for hiring decisions).
3.4 Email newsletter
When you register for an email newsletter, you give us your consent to use your data for sending the respective newsletter. You may withdraw this consent at any time by unsubscribing. The legal basis of the processing is Article 6(1)(a) GDPR (consent of the data subject).
3.5 Pursuit of legitimate interests
We process personal data in the context of the regulatory provisions for the pursuit of legitimate interests. This includes customer care and direct marketing as well as asserting or defending legal claims. The legal basis is Article 6(1)(f) GDPR.
3.6 Retention period
We delete your data if it is no longer necessary once your enquiry has been dealt with or the contract has ended. This does not include data that we are not yet permitted to delete because of a statutory obligation (e.g. documents that must be kept pursuant to tax and commercial law), and data that we need in order to safeguard legitimate interests, in particular to assert claims or for direct marketing.
4. Processing of data by third parties
4.1 Service providers (processors)
In addition to Google, Facebook, LinkedIn and Hotjar (see 2.3, 2.4, 2.5, 2.6), we also use the following service providers that are given access to personal data as part of their activity. These service providers work for us as processors according to Art 28 GDPR and do not process personal data for their own purposes.
We use the CRM system from „Salesforce” for administration of address data. It is provided by salesforce.com, inc., One Market Street, San Francisco, CA 94105, USA. Since no adequate
• We employ Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA (www.stripe.com) for processing payments.
• We use the system Mailchimp provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA (www.mailchimp.com), for sending newsletters.
• We use Jimdo Service Management provided by Atlassian Atlassian Pty Ltd, Level 6, 341 George Street, Sydney NSW 2000 (www.atlassian.com), for customer support.
• We use the content management system strapi provided by Strapi Solutions SAS, rue de la Boétie, 75008 Paris, France (strapi.io).
• We employ domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany and Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany, as hosting providers.
4.2 Transfer of personal data to third countries outside the territorial scope of application of the GDPR
Since no adequate level of data protection has been established for the USA and Australia pursuant to Article 45 GDPR, we use the standard contractual clauses as an appropriate safeguard pursuant to Article 46 GDPR. The standard contractual clauses are part of our data processing agreements with Stripe, The Rocket Science Group and Atlassian. The standard contractual clause are available at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
The same applies if – provided you have given your consent – we use the services Google Analytics, Facebook Pixel and/or LinkedIn Insight Tag services with your consent. For the transfer of personal data from Google, Facebook and LinkedIn to the respective parent company in the USA (Google LLC, Meta Platforms Inc. [formerly Facebook Inc.], LinkedIn Inc.), we also use the standard contractual protection clauses are also used as an appropriate safeguard pursuant to Article 46 GDPR.
5. Disclosure to third parties
Apart from the cases described above, we will only disclose your data to third parties without your consent in the following cases:
• If it is necessary for performing our contractual obligations, in particular disclosure to the bank employed for invoicing. The legal basis in this case is Article 6(1)(b) GDPR.
• If it is necessary for pursuing legitimate interests. Our legitimate interests include, in particular, assertion of claims. The legal basis in this case is Article 6(1)(f) GDPR.
• To comply with a statutory obligation, e.g. in respect of the tax authorities. The legal basis in this case is Article 6(1)(c) GDPR.
6. Your rights
If the relevant statutory conditions exist, you have the following rights:
• You have the right to receive information about the personal data stored about you (Article 15 GDPR).
• You have the right to request correction of incorrect data (Article 16 GDPR).
• You have the right to request deletion (Article 17) or restricted processing (Article 18 GDPR) of data that is no longer required. If statutory retention obligations exist, e.g. for business correspondence pursuant to commercial and tax law, or if another statutory exemption exists, data will not be deleted, but its processing will be restricted.
• You have the right to data portability (Article 20 GDPR), i.e. the right to request the data that you have made available to us, in a structured, common and machine-readable format, and to transmit this data to another data controller without obstruction by us. If applicable, you also have the right to request that we transmit data straight to another data controller, providing that this is technically feasible.
• You can object at any time to processing of your data for direct advertising. You can also object to other processing of your data for specific reasons (Article 21 GDPR).
To exercise your rights, please contact us at the address given in section 1 above.
If you consider that the processing of your data breaches data protection laws, you can appeal to a regulatory body (Article 77 GDPR). The regulatory body responsible for our area is: Der Hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Tel.: + 49 (0) 611-1408 0, Fax: + 49 (0) 611-1408 611, email: poststelle@datenschutz.hessen.de.