We will never sell your personal information to any third party.
1. Name and contact details of the controller
Charles GmbH (hereinafter: charles or hello-charles.com)
Managing Director(s): Andreas Tussing, Artjem Weissbeck
2. Name and contact details of the Data Protection Officer (DPO)
Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.
3. Processing of data
In the following, we inform you about our data processing in relation to our site, its purposes and legal basis, the collected data the respective storage period and, if applicable, specific objection and removal options.
a) Log files
When you visit our website www.hello-charles.com, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.
Type of Data
The following information is collected without your intervention:
The data mentioned will be processed by us for the following purposes:
The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the above listed purposes for data processing.
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended. In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses are anonymized by deleting the last eight bits, so that an identification of you is no longer possible.
b) Contact us and request a demo
When you contact us regarding the charles cCom software on our website or request a demo or other provided material, we process personal information about yourself that you provide.
Type of data
We ask you to provide the following information on our website:
The data mentioned will be processed by us for the following purposes:
If you agreed to receive other communications from us, we process your information in addition to request, if you want to sign up to our newsletter (see more below under Section 5).
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a GDPR.
We store your personal data collected within the scope of your consent for the above-mentioned purposes until your consent is revoked. You can revoke your consent at any time with effect for the future by contacting us or unsubscribing from our newsletter via the unsubscribe link.
If you revoke your consent, we will delete your personal data immediately, provided that we process them for marketing purposes on the basis of your consent. Please note that the revocation does not result in the deletion of all your personal data which we process in the course of the business relationship with you, if there is another legal basis for this. The revocation of your consent does not affect the legality of the data processing that has taken place up to that point.
c) Occasional processing
We may request your personal data on our website on occasions, such as for recruitment purposes or to manage your participation in a competition or event. In all cases, we will provide you privacy statements on how we use your personal data.
4. Signing up for the charles Newschat on WhatsApp
On our website, we offer you to sign up for our Newschat on WhatsApp. No data will be sent to WhatsApp until you've scanned the QR code or clicked on the link referring to WhatsApp. Only after doing so, you will be directed to WhatsApp and have the possibility to start a conversation with us.
For offering and using WhatsApp, we use our charles cCom software, where we store all data in the EU. As an official WhatsApp partner, we use the WhatsApp Business API with the consequence that within our responsibility no other third parties or WhatsApp gain access to your communication content.
The respective legal bases are: (i) your consent in accordance with Art. 6 (1) (a) GDPR to answer your requests; and (ii) our outweighing legitimate interest to conduct customized marketing and for business development activities in accordance with Art. 6 (1) (f) GDPR.
You can revoke consent already given at any time, with future effect.
The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted or anonymized as soon as it is no longer needed for the processing purposes.
If you have agreed to receive newsletters or other update services sent via WhatsApp, email or otherwise, we will process your contact data and other data you submitted to us (see above Section 3 b) to provide those services to you.
To further optimise the user experience and in particular to tailor the information provided to you, we process information on your specified preferences, if any, and in some instances, follow your interaction with our newsletter (user statistics). In this context, we use Hubspot as the marketing tool for e-mail newsletter and for deal and/or lead registration.
All newsletter activities and other update services serve marketing purposes and business development.
The processing enabling us to send you newsletter is based on your explicit consent we obtained. In other cases, processing is based on our outweighing legitimate interests to conduct customized marketing and pursue business development activities, or, as the case may be, for the performance of a contract according.
We retain personal data only for as long as there is a legitimate reason or other legal ground to do so, and will keep these legal bases under review. If there is no longer a legal ground for the data to be retained, we will erase personal data securely, or in some cases anonymise it.
There are no negative consequences if you do not provide us the above-mentioned personal data. However, without providing your personal data, you cannot receive our newsletter or other update services.
6. Social media hyperlinks
We refer to our social media accounts (Facebook, Instagram and LinkedIn) on our webpage using hyperlinks. Although the reference links to our social media account are embedded in the corresponding logos, no data about you as a user are transferred to the respective social network provider. You will be directed to the respective website only if you click on the logos. The respective social network provider will collect and process information on your visit to our website for its own business purposes. We have no influence on this data processing on the respective linked websites.
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only pass on your personal data to third parties if:
8. Transfer to third countries
As a company working on a global scale, we share the data we process with recipients (service providers or other third parties) who may be located outside the EEA. To the extent that no statutory level of security comparable to the European data protection laws exists in such countries, we will adopt appropriate measures to ensure that your personal data will be adequately protected in these countries. In particular, we may apply the standard contractual clauses published by the European Commission.
In case we transfer data to the USA, you should be aware that the European Court of Justice (CJEU) evaluated the applicable data protection level providing less protection than the applicable data protection in the EU („Schrems II“ C-311/18). This assessment is based on the US authorities’ intelligence activities concerning the personal data transferred to the United States. According to the CJEU, surveillance programmes cannot be regarded as limited to what is strictly necessary and data subjects have no right to an effective remedy actionable in the courts against the US authorities. Considering these circumstances, we regular monitor the legal requirements of data transfers to the US. In addition, we conduct assessments regarding the risks of the access by US authorities to the personal data we send to the USA and the need to provide additional safeguards.
You may contact our data protection officer for further information, and, in particular, request inspection of the standard contractual contracts concluded.
9. Right of objection
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data if there are reasons for doing so which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without stating a particular situation.
If you would like to make use of your right of revocation or objection, simply send an e-mail to firstname.lastname@example.org
10. Further rights of data subjects
You have the right:
Berliner Beauftragte für Datenschutz und Informationsfreiheit