privacy
Privacy Notice
At commercetools, protecting your privacy is a top priority. This Privacy Notice outlines how we collect, use, protect, and share your personal data when you visit our website or interact with our services. “Personal data,” also referred to as “personal information” or “information about you,” means any information that identifies or can be used to identify you—such as your name, address, email, or business contact details. Terms like “you,” “user,” or “customer” refer to any individual whose data we may process.
I. Name and contact details of the Controller
commercetools GmbH
Adams-Lehmann-Str. 44
80797 Munich
Email: info@commercetools.com
Phone: +49 (89) 99 82 996-0
(hereinafter "commercetools", "we", "us").
Depending on the service or purpose, a different commercetools Group company may act as the data controller. You can find the full list of our Group companies here.
II. Contact details of the Data Protection Officer
Holzhofer Consulting GmbH
Martin Holzhofer
Lochhamer Str. 31
82152 Planegg
Email: info@commercetools.com
Phone: +49 (89) 99 82 996-0
If you have questions about data protection, please contact privacy@commercetools.com.
III. Privacy Notice for visitors to our website
In accordance with Articles 13 and following of the GDPR, we are providing this notice to inform you about the collection and use of personal data on our websites. commercetools operates a number of websites, including but not limited to: commercetools.com, modern-commerce-day.com and elevate.commercetools.com. These, along with related subdomains such as docs.commercetools.com, are collectively referred to as “the websites.” This privacy notice explains how and why we process personal data collected through these websites.
1. Data Processing Details
This section outlines the purposes for which personal data is processed, the categories of data involved, and the corresponding legal basis for each processing activity in accordance with the GDPR.
| Purpose of Processing | Data Categories | Legal Basis |
|---|---|---|
| Processing of access and analytics data to ensure the security, stability, and functionality of our websites | Technical and device data (e.g., IP address, browser, OS, screen size) | Legitimate Interests – Art. 6(1)(f) GDPR |
| Cookies and related technologies to improve user experience | Cookies (first-party and third-party, including technically necessary, functional, performance-related) | Consent – Art. 6(1)(a) GDPR |
| Contact form inquiries to handle your inquiry | User identification and metadata (user UUID, job title, company name, first and last name) | Legitimate Interests – Art. 6(1)(f) GDPR Consent – Art. 6(1)(a) GDPR |
| Newsletter registration & content download | User identification (first and last name, email address) | Consent – Art. 6(1)(a) GDPR |
| Registering for a trial version | User identification (user UUID, job title, company name) | Contractual Obligations – Art. 6(1)(b) GDPR: Legitimate Interests – Art. 6(1)(f) GDPR |
| Event registration and online events | User identification and metadata | Legitimate Interests – Art. 6(1)(f) GDPR |
| Usage and registration for the Training Center | User identification and metadata, Profile and authentication info | Legitimate Interests – Art. 6(1)(f) GDPR Contractual Obligations – Art. 6(1)(b) GDPR |
2. Automated decision making including profiling
commercetools GmbH does not engage in automated individual decision-making, including profiling, with legal effect on data subjects.
3. Data transfer to a third country
Personal data is transferred to countries outside the European Union when necessary. Such transfers only occur if appropriate safeguards are in place.
4. Recipients of data and data sources
To process personal data for the purposes described, we engage various data processors, including IT and server service providers. These processors act on our behalf, adhere to our instructions, and are contractually bound to comply with applicable data protection laws.
5. Retention Period or Criteria for Determining Storage Duration
Personal data is stored only as long as necessary to fulfill its intended purpose or as required by law. Once the purpose is no longer relevant, the data is deleted in compliance with legal requirements.
IV. Privacy Notice for our customers, prospective customers and partners
Our offer is addressed exclusively to entrepreneurs, tradesmen, freelancers, and public institutions. Contracts with consumers according to Sec. 13 of the German Civil Code are not concluded.
1. Data Processing Details
| Purpose of Processing | Data Categories | Legal Basis |
|---|---|---|
| Handling of inquiries and preparation of offers | Identity and Contact Information | Contractual Obligations – Art. 6(1)(b) GDPR Legitimate Interests – Art. 6(1)(f) GDPR |
| Implementation and execution of contracts | Identity and Contact Information, Communication and Interaction Data | Contractual Obligations – Art. 6(1)(b) GDPR Legitimate Interests – Art. 6(1)(f) GDPR |
| Implementation of marketing activities | Identity and Contact Information | Consent – Art. 6(1)(a) GDPR Legitimate Interests – Art. 6(1)(f) GDPR |
| Recording and analysis of calls and video calls | Communication and Interaction Data | Consent – Art. 6(1)(a) GDPR Legitimate Interests – Art. 6(1)(f) GDPR |
| Creation and administration of accounts | Identity and Contact Information | Contractual Obligations – Art. 6(1)(b) GDPR Legitimate Interests – Art. 6(1)(f) GDPR |
2. Automated decision making including profiling
commercetools GmbH does not engage in automated individual decision-making, including profiling.
3. Data transfer to a third country
Personal data may be transferred to countries outside the European Union when necessary for operating IT systems.
4. Recipients of data and data sources
To process personal data for the purposes described, we engage various service providers. They process information about you on our behalf.
5. Retention Period or Criteria for Determining Storage Duration
Personal data is retained only for as long as necessary to fulfill the purposes outlined.
V. Privacy Notice for our suppliers and business partners
1. Data Processing Details
| Purpose of Processing | Data Categories | Legal Basis |
|---|---|---|
| Establishment and maintenance of business relationships | Contact information | Contractual Obligations – Art. 6(1)(b) GDPR Legitimate Interests – Art. 6(1)(f) GDPR |
2. Automated decision making including profiling
commercetools GmbH does not engage in automated individual decision-making, including profiling.
3. Data transfer to a third country
Personal data may be transferred to countries outside the European Union when necessary.
4. Recipients of data and data sources
We engage various service providers for processing personal data and ensure they comply with applicable data protection laws.
5. Retention Period or Criteria for Determining Storage Duration
We retain personal data only as long as needed for the stated purposes or as required by law.
VI. Privacy Notice for applicants
1. Data Processing Details
| Purpose of Processing | Data Categories | Legal Basis |
|---|---|---|
| Recruitment and hiring decisions | Personal Identification and Contact Data | Contractual Obligations – Art. 6(1)(b) GDPR Legitimate Interests – Art. 6(1)(f) GDPR Legal Obligation – Art. 6(1)(c) GDPR |
| Voluntary data (e.g., joining talent pool) | Special Categories of Personal Data | Consent – Art. 6(1)(a) GDPR |
2. Automated decision making
commercetools GmbH does not exercise any automated decision-making nor profiling.
3. Data transfer to a third country
Personal data may be transferred to countries outside the European Union and Economic Area during the recruiting process.
4. Recipients of data and data sources
To process personal data for recruitment purposes, we work with selected service providers that are obliged to comply with applicable data protection laws.
5. Retention Period or Criteria for Determining Storage Duration
Your personal data is stored only as long as necessary to complete the recruiting process.
7. Your rights and complaints
You have several rights regarding your personal data under the General Data Protection Regulation (GDPR):
- Right of Access (Art. 15 GDPR)
- Right to Rectification (Art. 16 GDPR)
- Right to Erasure (Art. 17 GDPR)
- Right to Restriction of Processing (Art. 18 GDPR)
- Right to Data Portability (Art. 20 GDPR)
- Right to Object (Art. 21 GDPR)
- Right to Withdraw Consent (Art. 7 Sec. 3 GDPR)
To exercise any of these rights, please send your request via email to privacy@commercetools.com.
VII. Information on your data subject rights
To learn more about your rights and the procedures to exercise those rights, please refer to the relevant sections above.