Contracts
Camunda Privacy Policy
Effective June 19th 2025
DownloadTable of Contents
This Camunda Privacy Policy, hereby referred to as “Policy,” explains how Camunda Services GmbH, and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, share and process Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person,” and that Camunda uses to manage the business and business relationships with customers, users, visitors, applicants, event attendees, etc.
Interaction Specific Policies
Camunda supplements this Camunda Privacy Policy with the following interaction specific Policies:
Applicant Privacy Policy. This Policy explains how Camunda processes Personal Data from Applicants applying for jobs within Camunda.
California Specific Privacy Policy. This is a Privacy Policy specifically addressed to California residents.
Cookie Policy. This Policy explains how Camunda uses cookies and similar tracking tools.
Product Privacy Policy. This Policy applies to the information Camunda collects and uses in connection with customer deployments of Camunda products and services.
Camunda Privacy Policy
Scope
This Camunda Privacy Policy explains user rights and choices related to the personal data Camunda collects when:
- users visit or use any of Camunda’s websites, social media pages, forum, online events, online advertisements, or marketing communications, hereby referred to as “Online Properties”
- users visit, interact with or use any of Camunda’s offices, events, sales, marketing or other non-web related activities, hereby referred to as “Properties.”
This Camunda Privacy Policy does not cover:
Applicant Information: See Camunda’s Applicant Privacy Policy.
Automatic collection from Camunda products and services: See Camunda’s Product Privacy Policy.
Service Data: Certain Camunda products permit the customer organization to consume or upload and submit content to the products, hereby referred to as “Service Data”. This Privacy Policy does not cover Service Data, including any personal data about customers that may be contained in Service Data. Service Data processing questions should be addressed to the customer organization directly.
Organizational Use: When customers use Camunda products or services on behalf of an organization (e.g., an employer), customer use is administered and provisioned by the customer’s organization under its policies regarding the use and protection of personal data. Refer to the appropriate organization’s privacy policy and direct inquiries to the organization directly.
Camunda determines the purposes and means for processing personal data as described in this Privacy Policy unless specified otherwise.
Contact Camunda
Camunda Services GmbH is responsible within the meaning of the GDPR and other data protection laws or regulations that apply in the member states of the European Union.
If you have any questions or concerns about this policy, you have three ways to contact Camunda:
Via our web form
by mail:
Via our web form
by mail:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Zossener Strasse 55-58
10961 Berlin
or by telephone on: +030 664 04 09 – 00
Camunda has appointed an external data protection officer for German data subjects.
Camunda's data protection officer is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
If you have any questions about the collection, storage, transfer and use of data or about exercising the rights of the data subject, you can also contact our data protection officer at
Information Camunda Collects & How It's Collected
Camunda collects personal data and other information from users or customers directly, through automated means, and from third parties.
Personal Data Users and Customers provide directly: Camunda collects personal data when users or customers voluntarily provide it, which includes service providers or third parties who collect it on Camunda’s behalf, such as when signing up for our newsletter, downloading whitepapers, filling out contact forms, taking part in webinars, training courses and events, when placing an order, registering a product, completing surveys, writing in our forum, or requesting information about Camunda products, services, and events via sales representatives or customer support agents.
The personal data Camunda collects may include personal contact information, professional information, such as name, employer name, address, or job title telephone number, or email address, user IDs, contact preferences, and billing/transactional data.
Camunda also collects personal data disclosed by users when completing any “free text” boxes on forms such as survey feedback or event sign-up, on message boards, chat features, and other services or platforms, including third party services and platforms.
In this category, Camunda obtains personal data usually from the following sources:
- Contacting us by phone, e-mail or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Data in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
Data Collected Automatically: Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection.
- Online Properties. Camunda automatically collects Personal Data information when users or customers use, access, or interact with Online Properties, including unique identification numbers, Internet Protocol (IP) address, hardware settings, browser language, the date and time of the request and referral of the URL, broad geographic location, etc. See Camunda’s Cookie Policy for more information.
- Camunda Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
Data Collected from Third-Party Sources: Camunda may acquire data from affiliates in Camunda’s corporate group, via Camunda’s partners, or others third-parties used to make information provided more useful, such as geographic information acquired with the IP address that was collected automatically, as noted above. Information may be linked via a unique identifier, such as a cookie or account number.
Cookies and Automatic Data Collection on the Website
Detailed information about the use of cookies and automatic data collection tools (first-party cookies, third-party cookies, web beacons and APIs) can be found in Camunda's Cookie Policy.
How Camunda Uses Information Collected
Camunda may use customer or user information for the following purposes:
- Communications and Transaction Processing. Camunda uses customer and user Personal Data for communication purposes, to respond to customer and user requests, process transactions, and provide the information requested, which may include financial, credit card, and payment information.
- Offering and facilitating certain services and interaction possibilities. Camunda uses customer and user Personal Data for the purpose of offering certain services, such as providing a forum where users can exchange on Camunda’s products or providing the download of whitepapers or offering a newsletter.
- Conferences and Events. Camunda and its partners may use customer and user Personal Data to conduct and communicate about events and post-events, and may include sharing attendance information with conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests customer or user personal data, the information will be handled per their privacy practices.
- Education and Training. If you sign up for a Camunda certification course or training, Camunda uses customer and user Personal Data to facilitate the delivery of such course or training.
- Establish, Administer, and Support Accounts. Camunda uses customer and user Personal Data to provide products and manage customer accounts, such as managing product downloads, providing consulting, support and recommendations, and sending account-related communications.
- Manage Customer Experience. Camunda uses customer and user Personal Data to maintain accurate contact and cataloging data, deliver support, and offer products, services, and features.
- Marketing and Advertising. Camunda may use customer or user Personal Data to provide advertising per customer and user privacy preferences settings and applicable law, and may share some information with marketing service providers in order to present advertisements that might be of interest, which can occur with Automatic Data Collection Tools. See the Camunda’s Cookie Policy for more information.
- Facilitate and Evaluate Use of Online Properties. Camunda uses customer and user Personal Data to provide Online Properties, facilitate use of the Online Properties, such as navigation, logging in, and enhancing security in order to improve quality, evaluate page response rates and personalize content.
- Business Operations. Camunda uses customer and user Personal Data to conduct ordinary business operations, such as business research, corporate reporting, staff training, quality assurance, and general outreach.
- Security. Camunda uses customer and user Personal Data to maintain the integrity and security of Online Properties, products and services to prevent and detect security threats, fraud, or other criminal and malicious activity that might compromise customer or user information.
- Third Party Social Networks. Camunda may use personal data to interact with customers or users on third party social networks (subject to that network’s terms of use).
- Research and Innovation. Camunda uses customer and user Personal Data to develop new products, features, and services via research and development tools.
- Complying with Law. Camunda uses customer and user Personal Data as required to be compliant with applicable laws, regulations, and government and law enforcement requests.
- Other Legitimate Business Purposes. We may use Personal Data when it is necessary for other legitimate purposes, such as protecting Camunda’s confidential and proprietary information.
How Camunda Shares Information
Camunda shares customer and user personal data with the following, and with appropriate contractual obligations in place:
With Camunda Companies. Camunda may transfer customer and user Personal Data to other Camunda entities in the U.S. and worldwide for the purposes outlined in this Privacy Policy. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Service Providers. Camunda may share customer and user Personal Data with third parties, such as vendors, consultants, agents and other service providers, such as IT and system administration, processing transactions, marketing and research, targeted advertising, training, customer support, and data enrichment as described below. Camunda service providers are contractually required to safeguard personal data received and are prohibited from using personal data for any purpose other than to perform the services as instructed by Camunda. These service providers may be located outside of the EEA, in the U.S. or other locations worldwide. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Competent Authorities. Camunda may share customer and user personal data when believed, in good faith, that Camunda is: (i) responding accordingly to authorized requests by law enforcement agencies, regulators, courts, and other public authorities; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and assist in preventing security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of Camunda and its affiliates; or (v) protect the rights or personal safety of Camunda’s and its affiliates’ employees, and third parties on or using Camunda property in line with the requirements of applicable law.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security.
Data Retention
Camunda retains Personal Data collected in connection with the Online and Offline Properties for as long as necessary to fulfill the purposes outlined in this Privacy Policy or where there is an ongoing, legitimate business need to do so.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Privacy Rights and Choices
Users have the right to:
- request information about Personal Data stored by Camunda,
- request correction, deletion and restriction of personal data,
- complain to Camunda about the processing of personal data,
- object to the processing of personal data at any time, in which Camunda will no longer process personal data unless there are compelling reasons worthy of protection that outweigh customer or user interests,
- complain to any data protection supervisory authority, in particular in the Member State in which the customer or user is resident, if it is suspected that the processing of data is in breach of GDPR or other data protection legislation.
At the customer’s or user’s request, and as required by law, Camunda will:
- inform of what personal data is on file;
- amend or correct personal data or any previous privacy preferences the customer or user selected; and/or
- delete personal data.
To exercise your rights, email Camunda via our web form. Camunda uses reasonable efforts to delete personal data as required and retains records necessary to comply with governmental authority or applicable federal, state, or local laws. Where legally permitted, Camunda may decline to process requests that are excessively repetitive or methodical, require unreasonable technical effort, or risk the privacy of others.
If Camunda is unable to resolve your concerns, users have the right to contact their local data privacy supervisory authority or seek a remedy through the courts if the users believes his or her requests to exercise privacy rights have not been honored.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Singapore Privacy Rights
This privacy policy also applies to and informs individuals under the jurisdiction of Singapore. You are entitled to your rights from the Personal Data Protection Act (PDPA) that are listed above under the title “Privacy Rights and Choices”. To exercise your rights please use our webform.
Security
Camunda is committed to protecting the security of personal data. We use appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. Despite these measures, Camunda cannot eliminate security risks associated with personal data, and mistakes and security breaches may happen. Please contact us with security questions at privacy@Camunda.com.
Changes to this Policy
This Privacy Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
February 2023: This privacy policy has been updated to introduce a new web form to make it easier to contact Camunda with privacy-related questions.
Previous versions
October 2020: This privacy policy has been updated and restructured. In particular, we have updated the information about the data Camunda collects during users’ and customers’ use of Camunda’s products. In addition, we now present the information relevant to the respective data subjects in user-specific Policies (such as General, Applicant, Cookie, California specific and Product Privacy Policy) so that information is user-friendly presented and easily accessible.
July 2020: This privacy statement has been completely revised to conform to the requirements set out in the CCPA and was first published in this form on the 2 of July 2020.
May 2020: This privacy statement has been updated to describe data processing of Camunda Cloud
April 2020: This privacy statement has been updated to describe data processing of Camunda Cloud and to describe updates of data processing during the Job application process.
January 2020: This privacy statement has been updated to describe the data processing of Camunda Modeler.
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
April 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Stripe (billing of events) and Bizzabo (event management platform).
August 2018: This privacy statement has been updated to describe the usage of Cookies and Web Beacons and to reflect the implementation of our new marketing tools HubSpot and Clearbit.
May 2018: This privacy statement has been completely revised to conform to the requirements set out in the GDPR and was first published in this form on the 25th of May 2018.
Effective May 16th 2025 to June 19th 2025
DownloadTable of Contents
This Camunda Privacy Policy, hereby referred to as “Policy,” explains how Camunda Services GmbH, and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, share and process Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person,” and that Camunda uses to manage the business and business relationships with customers, users, visitors, applicants, event attendees, etc.
Interaction Specific Policies
Camunda supplements this Camunda Privacy Policy with the following interaction specific Policies:
Applicant Privacy Policy. This Policy explains how Camunda processes Personal Data from Applicants applying for jobs within Camunda.
California Specific Privacy Policy. This is a Privacy Policy specifically addressed to California residents.
Cookie Policy. This Policy explains how Camunda uses cookies and similar tracking tools.
Product Privacy Policy. This Policy applies to the information Camunda collects and uses in connection with customer deployments of Camunda products and services.
Camunda Privacy Policy
Scope
This Camunda Privacy Policy explains user rights and choices related to the personal data Camunda collects when:
- users visit or use any of Camunda’s websites, social media pages, forum, online events, online advertisements, or marketing communications, hereby referred to as “Online Properties”
- users visit, interact with or use any of Camunda’s offices, events, sales, marketing or other non-web related activities, hereby referred to as “Properties.”
This Camunda Privacy Policy does not cover:
Applicant Information: See Camunda’s Applicant Privacy Policy.
Automatic collection from Camunda products and services: See Camunda’s Product Privacy Policy.
Service Data: Certain Camunda products permit the customer organization to consume or upload and submit content to the products, hereby referred to as “Service Data”. This Privacy Policy does not cover Service Data, including any personal data about customers that may be contained in Service Data. Service Data processing questions should be addressed to the customer organization directly.
Organizational Use: When customers use Camunda products or services on behalf of an organization (e.g., an employer), customer use is administered and provisioned by the customer’s organization under its policies regarding the use and protection of personal data. Refer to the appropriate organization’s privacy policy and direct inquiries to the organization directly.
Camunda determines the purposes and means for processing personal data as described in this Privacy Policy unless specified otherwise.
Contact Camunda
Camunda Services GmbH is responsible within the meaning of the GDPR and other data protection laws or regulations that apply in the member states of the European Union.
If you have any questions or concerns about this policy, you have three ways to contact Camunda:
Via our web form
by mail:
Via our web form
by mail:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Zossener Strasse 55-58
10961 Berlin
or by telephone on: +030 664 04 09 – 00
Camunda has appointed an external data protection officer for German data subjects.
Camunda's data protection officer is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
If you have any questions about the collection, storage, transfer and use of data or about exercising the rights of the data subject, you can also contact our data protection officer at
Information Camunda Collects & How It's Collected
Camunda collects personal data and other information from users or customers directly, through automated means, and from third parties.
Personal Data Users and Customers provide directly: Camunda collects personal data when users or customers voluntarily provide it, which includes service providers or third parties who collect it on Camunda’s behalf, such as when signing up for our newsletter, downloading whitepapers, filling out contact forms, taking part in webinars, training courses and events, when placing an order, registering a product, completing surveys, writing in our forum, or requesting information about Camunda products, services, and events via sales representatives or customer support agents.
The personal data Camunda collects may include personal contact information, professional information, such as name, employer name, address, or job title telephone number, or email address, user IDs, contact preferences, and billing/transactional data.
Camunda also collects personal data disclosed by users when completing any “free text” boxes on forms such as survey feedback or event sign-up, on message boards, chat features, and other services or platforms, including third party services and platforms.
In this category, Camunda obtains personal data usually from the following sources:
- Contacting us by phone, e-mail or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Data in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
Data Collected Automatically: Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection.
- Online Properties. Camunda automatically collects Personal Data information when users or customers use, access, or interact with Online Properties, including unique identification numbers, Internet Protocol (IP) address, hardware settings, browser language, the date and time of the request and referral of the URL, broad geographic location, etc. See Camunda’s Cookie Policy for more information.
- Camunda Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
Data Collected from Third-Party Sources: Camunda may acquire data from affiliates in Camunda’s corporate group, via Camunda’s partners, or others third-parties used to make information provided more useful, such as geographic information acquired with the IP address that was collected automatically, as noted above. Information may be linked via a unique identifier, such as a cookie or account number.
Cookies and Automatic Data Collection on the Website
Detailed information about the use of cookies and automatic data collection tools (first-party cookies, third-party cookies, web beacons and APIs) can be found in Camunda's Cookie Policy.
How Camunda Uses Information Collected
Camunda may use customer or user information for the following purposes:
- Communications and Transaction Processing. Camunda uses customer and user Personal Data for communication purposes, to respond to customer and user requests, process transactions, and provide the information requested, which may include financial, credit card, and payment information.
- Offering and facilitating certain services and interaction possibilities. Camunda uses customer and user Personal Data for the purpose of offering certain services, such as providing a forum where users can exchange on Camunda’s products or providing the download of whitepapers or offering a newsletter.
- Conferences and Events. Camunda and its partners may use customer and user Personal Data to conduct and communicate about events and post-events, and may include sharing attendance information with conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests customer or user personal data, the information will be handled per their privacy practices.
- Education and Training. If you sign up for a Camunda certification course or training, Camunda uses customer and user Personal Data to facilitate the delivery of such course or training.
- Establish, Administer, and Support Accounts. Camunda uses customer and user Personal Data to provide products and manage customer accounts, such as managing product downloads, providing consulting, support and recommendations, and sending account-related communications.
- Manage Customer Experience. Camunda uses customer and user Personal Data to maintain accurate contact and cataloging data, deliver support, and offer products, services, and features.
- Marketing and Advertising. Camunda may use customer or user Personal Data to provide advertising per customer and user privacy preferences settings and applicable law, and may share some information with marketing service providers in order to present advertisements that might be of interest, which can occur with Automatic Data Collection Tools. See the Camunda’s Cookie Policy for more information.
- Facilitate and Evaluate Use of Online Properties. Camunda uses customer and user Personal Data to provide Online Properties, facilitate use of the Online Properties, such as navigation, logging in, and enhancing security in order to improve quality, evaluate page response rates and personalize content.
- Business Operations. Camunda uses customer and user Personal Data to conduct ordinary business operations, such as business research, corporate reporting, staff training, quality assurance, and general outreach.
- Security. Camunda uses customer and user Personal Data to maintain the integrity and security of Online Properties, products and services to prevent and detect security threats, fraud, or other criminal and malicious activity that might compromise customer or user information.
- Third Party Social Networks. Camunda may use personal data to interact with customers or users on third party social networks (subject to that network’s terms of use).
- Research and Innovation. Camunda uses customer and user Personal Data to develop new products, features, and services via research and development tools.
- Complying with Law. Camunda uses customer and user Personal Data as required to be compliant with applicable laws, regulations, and government and law enforcement requests.
- Other Legitimate Business Purposes. We may use Personal Data when it is necessary for other legitimate purposes, such as protecting Camunda’s confidential and proprietary information.
How Camunda Shares Information
Camunda shares customer and user personal data with the following, and with appropriate contractual obligations in place:
With Camunda Companies. Camunda may transfer customer and user Personal Data to other Camunda entities in the U.S. and worldwide for the purposes outlined in this Privacy Policy. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Service Providers. Camunda may share customer and user Personal Data with third parties, such as vendors, consultants, agents and other service providers, such as IT and system administration, processing transactions, marketing and research, targeted advertising, training, customer support, and data enrichment as described below. Camunda service providers are contractually required to safeguard personal data received and are prohibited from using personal data for any purpose other than to perform the services as instructed by Camunda. These service providers may be located outside of the EEA, in the U.S. or other locations worldwide. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Competent Authorities. Camunda may share customer and user personal data when believed, in good faith, that Camunda is: (i) responding accordingly to authorized requests by law enforcement agencies, regulators, courts, and other public authorities; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and assist in preventing security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of Camunda and its affiliates; or (v) protect the rights or personal safety of Camunda’s and its affiliates’ employees, and third parties on or using Camunda property in line with the requirements of applicable law.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security.
Data Retention
Camunda retains Personal Data collected in connection with the Online and Offline Properties for as long as necessary to fulfill the purposes outlined in this Privacy Policy or where there is an ongoing, legitimate business need to do so.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Privacy Rights and Choices
Users have the right to:
- request information about Personal Data stored by Camunda,
- request correction, deletion and restriction of personal data,
- complain to Camunda about the processing of personal data,
- object to the processing of personal data at any time, in which Camunda will no longer process personal data unless there are compelling reasons worthy of protection that outweigh customer or user interests,
- complain to any data protection supervisory authority, in particular in the Member State in which the customer or user is resident, if it is suspected that the processing of data is in breach of GDPR or other data protection legislation.
At the customer’s or user’s request, and as required by law, Camunda will:
- inform of what personal data is on file;
- amend or correct personal data or any previous privacy preferences the customer or user selected; and/or
- delete personal data.
To exercise your rights, email Camunda via our web form. Camunda uses reasonable efforts to delete personal data as required and retains records necessary to comply with governmental authority or applicable federal, state, or local laws. Where legally permitted, Camunda may decline to process requests that are excessively repetitive or methodical, require unreasonable technical effort, or risk the privacy of others.
If Camunda is unable to resolve your concerns, users have the right to contact their local data privacy supervisory authority or seek a remedy through the courts if the users believes his or her requests to exercise privacy rights have not been honored.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Singapore Privacy Rights
This privacy policy also applies to and informs individuals under the jurisdiction of Singapore. You are entitled to your rights from the Personal Data Protection Act (PDPA) that are listed above under the title “Privacy Rights and Choices”. To exercise your rights please use our webform.
Security
Camunda is committed to protecting the security of personal data. We use appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. Despite these measures, Camunda cannot eliminate security risks associated with personal data, and mistakes and security breaches may happen. Please contact us with security questions at privacy@Camunda.com.
Changes to this Policy
This Privacy Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
February 2023: This privacy policy has been updated to introduce a new web form to make it easier to contact Camunda with privacy-related questions.
Previous versions
October 2020: This privacy policy has been updated and restructured. In particular, we have updated the information about the data Camunda collects during users’ and customers’ use of Camunda’s products. In addition, we now present the information relevant to the respective data subjects in user-specific Policies (such as General, Applicant, Cookie, California specific and Product Privacy Policy) so that information is user-friendly presented and easily accessible.
July 2020: This privacy statement has been completely revised to conform to the requirements set out in the CCPA and was first published in this form on the 2 of July 2020.
May 2020: This privacy statement has been updated to describe data processing of Camunda Cloud
April 2020: This privacy statement has been updated to describe data processing of Camunda Cloud and to describe updates of data processing during the Job application process.
January 2020: This privacy statement has been updated to describe the data processing of Camunda Modeler.
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
April 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Stripe (billing of events) and Bizzabo (event management platform).
August 2018: This privacy statement has been updated to describe the usage of Cookies and Web Beacons and to reflect the implementation of our new marketing tools HubSpot and Clearbit.
May 2018: This privacy statement has been completely revised to conform to the requirements set out in the GDPR and was first published in this form on the 25th of May 2018.
Effective September 28th 2023 to May 16th 2025
DownloadTable of Contents
This Camunda Privacy Policy, hereby referred to as “Policy,” explains how Camunda Services GmbH, and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, share and process Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person,” and that Camunda uses to manage the business and business relationships with customers, users, visitors, applicants, event attendees, etc.
Interaction Specific Policies
Camunda supplements this Camunda Privacy Policy with the following interaction specific Policies:
Applicant Privacy Policy. This Policy explains how Camunda processes Personal Data from Applicants applying for jobs within Camunda.
California Specific Privacy Policy. This is a Privacy Policy specifically addressed to California residents.
Cookie Policy. This Policy explains how Camunda uses cookies and similar tracking tools.
Product Privacy Policy. This Policy applies to the information Camunda collects and uses in connection with customer deployments of Camunda products and services.
Camunda Privacy Policy
Scope
This Camunda Privacy Policy explains user rights and choices related to the personal data Camunda collects when:
- users visit or use any of Camunda’s websites, social media pages, forum, online events, online advertisements, or marketing communications, hereby referred to as “Online Properties”
- users visit, interact with or use any of Camunda’s offices, events, sales, marketing or other non-web related activities, hereby referred to as “Properties.”
This Camunda Privacy Policy does not cover:
Applicant Information: See Camunda’s Applicant Privacy Policy.
Automatic collection from Camunda products and services: See Camunda’s Product Privacy Policy.
Service Data: Certain Camunda products permit the customer organization to consume or upload and submit content to the products, hereby referred to as “Service Data”. This Privacy Policy does not cover Service Data, including any personal data about customers that may be contained in Service Data. Service Data processing questions should be addressed to the customer organization directly.
Organizational Use: When customers use Camunda products or services on behalf of an organization (e.g., an employer), customer use is administered and provisioned by the customer’s organization under its policies regarding the use and protection of personal data. Refer to the appropriate organization’s privacy policy and direct inquiries to the organization directly.
Camunda determines the purposes and means for processing personal data as described in this Privacy Policy unless specified otherwise.
Contact Camunda
Camunda Services GmbH is responsible within the meaning of the GDPR and other data protection laws or regulations that apply in the member states of the European Union.
If you have any questions or concerns about this policy, you have three ways to contact Camunda:
Via our web form
by mail:
Via our web form
by mail:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Zossener Strasse 55-58
10961 Berlin
or by telephone on: +030 664 04 09 – 00
Camunda has appointed an external data protection officer for German data subjects.
Camunda's data protection officer is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
If you have any questions about the collection, storage, transfer and use of data or about exercising the rights of the data subject, you can also contact our data protection officer at
Information Camunda Collects & How It's Collected
Camunda collects personal data and other information from users or customers directly, through automated means, and from third parties.
Personal Data Users and Customers provide directly: Camunda collects personal data when users or customers voluntarily provide it, which includes service providers or third parties who collect it on Camunda’s behalf, such as when signing up for our newsletter, downloading whitepapers, filling out contact forms, taking part in webinars, training courses and events, when placing an order, registering a product, completing surveys, writing in our forum, or requesting information about Camunda products, services, and events via sales representatives or customer support agents.
The personal data Camunda collects may include personal contact information, professional information, such as name, employer name, address, or job title telephone number, or email address, user IDs, contact preferences, and billing/transactional data.
Camunda also collects personal data disclosed by users when completing any “free text” boxes on forms such as survey feedback or event sign-up, on message boards, chat features, and other services or platforms, including third party services and platforms.
In this category, Camunda obtains personal data usually from the following sources:
- Contacting us by phone, e-mail or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Data in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
Data Collected Automatically: Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection.
- Online Properties. Camunda automatically collects Personal Data information when users or customers use, access, or interact with Online Properties, including unique identification numbers, Internet Protocol (IP) address, hardware settings, browser language, the date and time of the request and referral of the URL, broad geographic location, etc. See Camunda’s Cookie Policy for more information.
- Camunda Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
Data Collected from Third-Party Sources: Camunda may acquire data from affiliates in Camunda’s corporate group, via Camunda’s partners, or others third-parties used to make information provided more useful, such as geographic information acquired with the IP address that was collected automatically, as noted above. Information may be linked via a unique identifier, such as a cookie or account number.
Cookies and Automatic Data Collection on the Website
Detailed information about the use of cookies and automatic data collection tools (first-party cookies, third-party cookies, web beacons and APIs) can be found in Camunda's Cookie Policy.
How Camunda Uses Information Collected
Camunda may use customer or user information for the following purposes:
- Communications and Transaction Processing. Camunda uses customer and user Personal Data for communication purposes, to respond to customer and user requests, process transactions, and provide the information requested, which may include financial, credit card, and payment information.
- Offering and facilitating certain services and interaction possibilities. Camunda uses customer and user Personal Data for the purpose of offering certain services, such as providing a forum where users can exchange on Camunda’s products or providing the download of whitepapers or offering a newsletter.
- Conferences and Events. Camunda and its partners may use customer and user Personal Data to conduct and communicate about events and post-events, and may include sharing attendance information with conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests customer or user personal data, the information will be handled per their privacy practices.
- Education and Training. If you sign up for a Camunda certification course or training, Camunda uses customer and user Personal Data to facilitate the delivery of such course or training.
- Establish, Administer, and Support Accounts. Camunda uses customer and user Personal Data to provide products and manage customer accounts, such as managing product downloads, providing consulting, support and recommendations, and sending account-related communications.
- Manage Customer Experience. Camunda uses customer and user Personal Data to maintain accurate contact and cataloging data, deliver support, and offer products, services, and features.
- Marketing and Advertising. Camunda may use customer or user Personal Data to provide advertising per customer and user privacy preferences settings and applicable law, and may share some information with marketing service providers in order to present advertisements that might be of interest, which can occur with Automatic Data Collection Tools. See the Camunda’s Cookie Policy for more information.
- Facilitate and Evaluate Use of Online Properties. Camunda uses customer and user Personal Data to provide Online Properties, facilitate use of the Online Properties, such as navigation, logging in, and enhancing security in order to improve quality, evaluate page response rates and personalize content.
- Business Operations. Camunda uses customer and user Personal Data to conduct ordinary business operations, such as business research, corporate reporting, staff training, quality assurance, and general outreach.
- Security. Camunda uses customer and user Personal Data to maintain the integrity and security of Online Properties, products and services to prevent and detect security threats, fraud, or other criminal and malicious activity that might compromise customer or user information.
- Third Party Social Networks. Camunda may use personal data to interact with customers or users on third party social networks (subject to that network’s terms of use).
- Research and Innovation. Camunda uses customer and user Personal Data to develop new products, features, and services via research and development tools.
- Complying with Law. Camunda uses customer and user Personal Data as required to be compliant with applicable laws, regulations, and government and law enforcement requests.
- Other Legitimate Business Purposes. We may use Personal Data when it is necessary for other legitimate purposes, such as protecting Camunda’s confidential and proprietary information.
How Camunda Shares Information
Camunda shares customer and user personal data with the following, and with appropriate contractual obligations in place:
With Camunda Companies. Camunda may transfer customer and user Personal Data to other Camunda entities in the U.S. and worldwide for the purposes outlined in this Privacy Policy. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Service Providers. Camunda may share customer and user Personal Data with third parties, such as vendors, consultants, agents and other service providers, such as IT and system administration, processing transactions, marketing and research, targeted advertising, training, customer support, and data enrichment as described below. Camunda service providers are contractually required to safeguard personal data received and are prohibited from using personal data for any purpose other than to perform the services as instructed by Camunda. These service providers may be located outside of the EEA, in the U.S. or other locations worldwide. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Competent Authorities. Camunda may share customer and user personal data when believed, in good faith, that Camunda is: (i) responding accordingly to authorized requests by law enforcement agencies, regulators, courts, and other public authorities; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and assist in preventing security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of Camunda and its affiliates; or (v) protect the rights or personal safety of Camunda’s and its affiliates’ employees, and third parties on or using Camunda property in line with the requirements of applicable law.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security.
Data Retention
Camunda retains Personal Data collected in connection with the Online and Offline Properties for as long as necessary to fulfill the purposes outlined in this Privacy Policy or where there is an ongoing, legitimate business need to do so.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Privacy Rights and Choices
Users have the right to:
- request information about Personal Data stored by Camunda,
- request correction, deletion and restriction of personal data,
- complain to Camunda about the processing of personal data,
- object to the processing of personal data at any time, in which Camunda will no longer process personal data unless there are compelling reasons worthy of protection that outweigh customer or user interests,
- complain to any data protection supervisory authority, in particular in the Member State in which the customer or user is resident, if it is suspected that the processing of data is in breach of GDPR or other data protection legislation.
At the customer’s or user’s request, and as required by law, Camunda will:
- inform of what personal data is on file;
- amend or correct personal data or any previous privacy preferences the customer or user selected; and/or
- delete personal data.
To exercise your rights, email Camunda via our web form. Camunda uses reasonable efforts to delete personal data as required and retains records necessary to comply with governmental authority or applicable federal, state, or local laws. Where legally permitted, Camunda may decline to process requests that are excessively repetitive or methodical, require unreasonable technical effort, or risk the privacy of others.
If Camunda is unable to resolve your concerns, users have the right to contact their local data privacy supervisory authority or seek a remedy through the courts if the users believes his or her requests to exercise privacy rights have not been honored.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Singapore Privacy Rights
This privacy policy also applies to and informs individuals under the jurisdiction of Singapore. You are entitled to your rights from the Personal Data Protection Act (PDPA) that are listed above under the title “Privacy Rights and Choices”. To exercise your rights please use our webform.
Security
Camunda is committed to protecting the security of personal data. We use appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. Despite these measures, Camunda cannot eliminate security risks associated with personal data, and mistakes and security breaches may happen. Please contact us with security questions at privacy@Camunda.com.
Changes to this Policy
This Privacy Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
February 2023: This privacy policy has been updated to introduce a new web form to make it easier to contact Camunda with privacy-related questions.
Previous versions
October 2020: This privacy policy has been updated and restructured. In particular, we have updated the information about the data Camunda collects during users’ and customers’ use of Camunda’s products. In addition, we now present the information relevant to the respective data subjects in user-specific Policies (such as General, Applicant, Cookie, California specific and Product Privacy Policy) so that information is user-friendly presented and easily accessible.
July 2020: This privacy statement has been completely revised to conform to the requirements set out in the CCPA and was first published in this form on the 2 of July 2020.
May 2020: This privacy statement has been updated to describe data processing of Camunda Cloud
April 2020: This privacy statement has been updated to describe data processing of Camunda Cloud and to describe updates of data processing during the Job application process.
January 2020: This privacy statement has been updated to describe the data processing of Camunda Modeler.
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
April 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Stripe (billing of events) and Bizzabo (event management platform).
August 2018: This privacy statement has been updated to describe the usage of Cookies and Web Beacons and to reflect the implementation of our new marketing tools HubSpot and Clearbit.
May 2018: This privacy statement has been completely revised to conform to the requirements set out in the GDPR and was first published in this form on the 25th of May 2018.
Effective July 19th 2023 to September 28th 2023
DownloadTable of Contents
This Camunda Privacy Policy, hereby referred to as “Policy,” explains how Camunda Services GmbH, and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, share and process Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person,” and that Camunda uses to manage the business and business relationships with customers, users, visitors, applicants, event attendees, etc.
Interaction Specific Policies
Camunda supplements this Camunda Privacy Policy with the following interaction specific Policies:
Applicant Privacy Policy. This Policy explains how Camunda processes Personal Data from Applicants applying for jobs within Camunda.
California Specific Privacy Policy. This is a Privacy Policy specifically addressed to California residents.
Cookie Policy. This Policy explains how Camunda uses cookies and similar tracking tools.
Product Privacy Policy. This Policy applies to the information Camunda collects and uses in connection with customer deployments of Camunda products and services.
Camunda Privacy Policy
Scope
This Camunda Privacy Policy explains user rights and choices related to the personal data Camunda collects when:
- users visit or use any of Camunda’s websites, social media pages, forum, online events, online advertisements, or marketing communications, hereby referred to as “Online Properties”
- users visit, interact with or use any of Camunda’s offices, events, sales, marketing or other non-web related activities, hereby referred to as “Properties.”
This Camunda Privacy Policy does not cover:
Applicant Information: See Camunda’s Applicant Privacy Policy.
Automatic collection from Camunda products and services: See Camunda’s Product Privacy Policy.
Service Data: Certain Camunda products permit the customer organization to consume or upload and submit content to the products, hereby referred to as “Service Data”. This Privacy Policy does not cover Service Data, including any personal data about customers that may be contained in Service Data. Service Data processing questions should be addressed to the customer organization directly.
Organizational Use: When customers use Camunda products or services on behalf of an organization (e.g., an employer), customer use is administered and provisioned by the customer’s organization under its policies regarding the use and protection of personal data. Refer to the appropriate organization’s privacy policy and direct inquiries to the organization directly.
Camunda determines the purposes and means for processing personal data as described in this Privacy Policy unless specified otherwise.
Contact Camunda
Camunda Services GmbH is responsible within the meaning of the GDPR and other data protection laws or regulations that apply in the member states of the European Union.
If you have any questions or concerns about this policy, you have three ways to contact Camunda:
Via our web form
by mail:
Via our web form
by mail:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Zossener Strasse 55-58
10961 Berlin
or by telephone on: +030 664 04 09 – 00
Camunda has appointed an external data protection officer for German data subjects.
Camunda's data protection officer is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
If you have any questions about the collection, storage, transfer and use of data or about exercising the rights of the data subject, you can also contact our data protection officer at
Information Camunda Collects & How It's Collected
Camunda collects personal data and other information from users or customers directly, through automated means, and from third parties.
Personal Data Users and Customers provide directly: Camunda collects personal data when users or customers voluntarily provide it, which includes service providers or third parties who collect it on Camunda’s behalf, such as when signing up for our newsletter, downloading whitepapers, filling out contact forms, taking part in webinars, training courses and events, when placing an order, registering a product, completing surveys, writing in our forum, or requesting information about Camunda products, services, and events via sales representatives or customer support agents.
The personal data Camunda collects may include personal contact information, professional information, such as name, employer name, address, or job title telephone number, or email address, user IDs, contact preferences, and billing/transactional data.
Camunda also collects personal data disclosed by users when completing any “free text” boxes on forms such as survey feedback or event sign-up, on message boards, chat features, and other services or platforms, including third party services and platforms.
In this category, Camunda obtains personal data usually from the following sources:
- Contacting us by phone, e-mail or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Data in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
Data Collected Automatically: Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection.
- Online Properties. Camunda automatically collects Personal Data information when users or customers use, access, or interact with Online Properties, including unique identification numbers, Internet Protocol (IP) address, hardware settings, browser language, the date and time of the request and referral of the URL, broad geographic location, etc. See Camunda’s Cookie Policy for more information.
- Camunda Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
Data Collected from Third-Party Sources: Camunda may acquire data from affiliates in Camunda’s corporate group, via Camunda’s partners, or others third-parties used to make information provided more useful, such as geographic information acquired with the IP address that was collected automatically, as noted above. Information may be linked via a unique identifier, such as a cookie or account number.
Cookies and Automatic Data Collection on the Website
Detailed information about the use of cookies and automatic data collection tools (first-party cookies, third-party cookies, web beacons and APIs) can be found in Camunda's Cookie Policy.
How Camunda Uses Information Collected
Camunda may use customer or user information for the following purposes:
- Communications and Transaction Processing. Camunda uses customer and user Personal Data for communication purposes, to respond to customer and user requests, process transactions, and provide the information requested, which may include financial, credit card, and payment information.
- Offering and facilitating certain services and interaction possibilities. Camunda uses customer and user Personal Data for the purpose of offering certain services, such as providing a forum where users can exchange on Camunda’s products or providing the download of whitepapers or offering a newsletter.
- Conferences and Events. Camunda and its partners may use customer and user Personal Data to conduct and communicate about events and post-events, and may include sharing attendance information with conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests customer or user personal data, the information will be handled per their privacy practices.
- Education and Training. If you sign up for a Camunda certification course or training, Camunda uses customer and user Personal Data to facilitate the delivery of such course or training.
- Establish, Administer, and Support Accounts. Camunda uses customer and user Personal Data to provide products and manage customer accounts, such as managing product downloads, providing consulting, support and recommendations, and sending account-related communications.
- Manage Customer Experience. Camunda uses customer and user Personal Data to maintain accurate contact and cataloging data, deliver support, and offer products, services, and features.
- Marketing and Advertising. Camunda may use customer or user Personal Data to provide advertising per customer and user privacy preferences settings and applicable law, and may share some information with marketing service providers in order to present advertisements that might be of interest, which can occur with Automatic Data Collection Tools. See the Camunda’s Cookie Policy for more information.
- Facilitate and Evaluate Use of Online Properties. Camunda uses customer and user Personal Data to provide Online Properties, facilitate use of the Online Properties, such as navigation, logging in, and enhancing security in order to improve quality, evaluate page response rates and personalize content.
- Business Operations. Camunda uses customer and user Personal Data to conduct ordinary business operations, such as business research, corporate reporting, staff training, quality assurance, and general outreach.
- Security. Camunda uses customer and user Personal Data to maintain the integrity and security of Online Properties, products and services to prevent and detect security threats, fraud, or other criminal and malicious activity that might compromise customer or user information.
- Third Party Social Networks. Camunda may use personal data to interact with customers or users on third party social networks (subject to that network’s terms of use).
- Research and Innovation. Camunda uses customer and user Personal Data to develop new products, features, and services via research and development tools.
- Complying with Law. Camunda uses customer and user Personal Data as required to be compliant with applicable laws, regulations, and government and law enforcement requests.
- Other Legitimate Business Purposes. We may use Personal Data when it is necessary for other legitimate purposes, such as protecting Camunda’s confidential and proprietary information.
How Camunda Shares Information
Camunda shares customer and user personal data with the following, and with appropriate contractual obligations in place:
With Camunda Companies. Camunda may transfer customer and user Personal Data to other Camunda entities in the U.S. and worldwide for the purposes outlined in this Privacy Policy. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Service Providers. Camunda may share customer and user Personal Data with third parties, such as vendors, consultants, agents and other service providers, such as IT and system administration, processing transactions, marketing and research, targeted advertising, training, customer support, and data enrichment as described below. Camunda service providers are contractually required to safeguard personal data received and are prohibited from using personal data for any purpose other than to perform the services as instructed by Camunda. These service providers may be located outside of the EEA, in the U.S. or other locations worldwide. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Competent Authorities. Camunda may share customer and user personal data when believed, in good faith, that Camunda is: (i) responding accordingly to authorized requests by law enforcement agencies, regulators, courts, and other public authorities; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and assist in preventing security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of Camunda and its affiliates; or (v) protect the rights or personal safety of Camunda’s and its affiliates’ employees, and third parties on or using Camunda property in line with the requirements of applicable law.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security.
Data Retention
Camunda retains Personal Data collected in connection with the Online and Offline Properties for as long as necessary to fulfill the purposes outlined in this Privacy Policy or where there is an ongoing, legitimate business need to do so.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Privacy Rights and Choices
Users have the right to:
- request information about Personal Data stored by Camunda,
- request correction, deletion and restriction of personal data,
- complain to Camunda about the processing of personal data,
- object to the processing of personal data at any time, in which Camunda will no longer process personal data unless there are compelling reasons worthy of protection that outweigh customer or user interests,
- complain to any data protection supervisory authority, in particular in the Member State in which the customer or user is resident, if it is suspected that the processing of data is in breach of GDPR or other data protection legislation.
At the customer’s or user’s request, and as required by law, Camunda will:
- inform of what personal data is on file;
- amend or correct personal data or any previous privacy preferences the customer or user selected; and/or
- delete personal data.
To exercise your rights, email Camunda via our web form. Camunda uses reasonable efforts to delete personal data as required and retains records necessary to comply with governmental authority or applicable federal, state, or local laws. Where legally permitted, Camunda may decline to process requests that are excessively repetitive or methodical, require unreasonable technical effort, or risk the privacy of others.
If Camunda is unable to resolve your concerns, users have the right to contact their local data privacy supervisory authority or seek a remedy through the courts if the users believes his or her requests to exercise privacy rights have not been honored.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Security
Camunda is committed to protecting the security of personal data. We use appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. Despite these measures, Camunda cannot eliminate security risks associated with personal data, and mistakes and security breaches may happen. Please contact us with security questions at privacy@Camunda.com.
Changes to this Policy
This Privacy Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
February 2023: This privacy policy has been updated to introduce a new web form to make it easier to contact Camunda with privacy-related questions.
Previous versions
October 2020: This privacy policy has been updated and restructured. In particular, we have updated the information about the data Camunda collects during users’ and customers’ use of Camunda’s products. In addition, we now present the information relevant to the respective data subjects in user-specific Policies (such as General, Applicant, Cookie, California specific and Product Privacy Policy) so that information is user-friendly presented and easily accessible.
July 2020: This privacy statement has been completely revised to conform to the requirements set out in the CCPA and was first published in this form on the 2 of July 2020.
May 2020: This privacy statement has been updated to describe data processing of Camunda Cloud
April 2020: This privacy statement has been updated to describe data processing of Camunda Cloud and to describe updates of data processing during the Job application process.
January 2020: This privacy statement has been updated to describe the data processing of Camunda Modeler.
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
April 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Stripe (billing of events) and Bizzabo (event management platform).
August 2018: This privacy statement has been updated to describe the usage of Cookies and Web Beacons and to reflect the implementation of our new marketing tools HubSpot and Clearbit.
May 2018: This privacy statement has been completely revised to conform to the requirements set out in the GDPR and was first published in this form on the 25th of May 2018.
Effective July 14th 2023 to July 19th 2023
DownloadTable of Contents
This Camunda Privacy Policy, hereby referred to as “Policy,” explains how Camunda Services GmbH, and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, share and process Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person,” and that Camunda uses to manage the business and business relationships with customers, users, visitors, applicants, event attendees, etc.
Interaction Specific Policies
Camunda supplements this General Privacy Policy with the following interaction specific Policies:
Applicant Privacy Policy. This Policy explains how Camunda processes Personal Data from Applicants applying for jobs within Camunda.
California Specific Privacy Policy. This is a Privacy Policy specifically addressed to California residents.
Cookie Policy. This Policy explains how Camunda uses cookies and similar tracking tools.
Product Privacy Policy. This Policy applies to the information Camunda collects and uses in connection with customer deployments of Camunda products and services.
General Privacy Policy
Scope
This General Privacy Policy explains user rights and choices related to the personal data Camunda collects when:
- users visit or use any of Camunda’s websites, social media pages, forum, online events, online advertisements, or marketing communications, hereby referred to as “Online Properties”
- users visit, interact with or use any of Camunda’s offices, events, sales, marketing or other non-web related activities, hereby referred to as “Properties.”
This General Privacy Policy does not cover:
Applicant Information: See Camunda’s Applicant Privacy Policy.
Automatic collection from Camunda products and services: See Camunda’s Product Privacy Policy.
Service Data: Certain Camunda products permit the customer organization to consume or upload and submit content to the products, hereby referred to as “Service Data”. This Privacy Policy does not cover Service Data, including any personal data about customers that may be contained in Service Data. Service Data processing questions should be addressed to the customer organization directly.
Organizational Use: When customers use Camunda products or services on behalf of an organization (e.g., an employer), customer use is administered and provisioned by the customer’s organization under its policies regarding the use and protection of personal data. Refer to the appropriate organization’s privacy policy and direct inquiries to the organization directly.
Camunda determines the purposes and means for processing personal data as described in this Privacy Policy unless specified otherwise.
Contact Camunda
Camunda Services GmbH is responsible within the meaning of the GDPR and other data protection laws or regulations that apply in the member states of the European Union.
If you have any questions or concerns about this policy, you have three ways to contact Camunda:
Via our web form
by mail:
Via our web form
by mail:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Zossener Strasse 55-58
10961 Berlin
or by telephone on: +030 664 04 09 – 00
Camunda has appointed an external data protection officer for German data subjects.
Camunda's data protection officer is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
If you have any questions about the collection, storage, transfer and use of data or about exercising the rights of the data subject, you can also contact our data protection officer at
Information Camunda Collects & How It's Collected
Camunda collects personal data and other information from users or customers directly, through automated means, and from third parties.
Personal Data Users and Customers provide directly: Camunda collects personal data when users or customers voluntarily provide it, which includes service providers or third parties who collect it on Camunda’s behalf, such as when signing up for our newsletter, downloading whitepapers, filling out contact forms, taking part in webinars, training courses and events, when placing an order, registering a product, completing surveys, writing in our forum, or requesting information about Camunda products, services, and events via sales representatives or customer support agents.
The personal data Camunda collects may include personal contact information, professional information, such as name, employer name, address, or job title telephone number, or email address, user IDs, contact preferences, and billing/transactional data.
Camunda also collects personal data disclosed by users when completing any “free text” boxes on forms such as survey feedback or event sign-up, on message boards, chat features, and other services or platforms, including third party services and platforms.
In this category, Camunda obtains personal data usually from the following sources:
- Contacting us by phone, e-mail or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Data in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
Data Collected Automatically: Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection.
- Online Properties. Camunda automatically collects Personal Data information when users or customers use, access, or interact with Online Properties, including unique identification numbers, Internet Protocol (IP) address, hardware settings, browser language, the date and time of the request and referral of the URL, broad geographic location, etc. See Camunda’s Cookie Policy for more information.
- Camunda Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
Data Collected from Third-Party Sources: Camunda may acquire data from affiliates in Camunda’s corporate group, via Camunda’s partners, or others third-parties used to make information provided more useful, such as geographic information acquired with the IP address that was collected automatically, as noted above. Information may be linked via a unique identifier, such as a cookie or account number.
Cookies and Automatic Data Collection on the Website
Detailed information about the use of cookies and automatic data collection tools (first-party cookies, third-party cookies, web beacons and APIs) can be found in Camunda's Cookie Policy.
How Camunda Uses Information Collected
Camunda may use customer or user information for the following purposes:
- Communications and Transaction Processing. Camunda uses customer and user Personal Data for communication purposes, to respond to customer and user requests, process transactions, and provide the information requested, which may include financial, credit card, and payment information.
- Offering and facilitating certain services and interaction possibilities. Camunda uses customer and user Personal Data for the purpose of offering certain services, such as providing a forum where users can exchange on Camunda’s products or providing the download of whitepapers or offering a newsletter.
- Conferences and Events. Camunda and its partners may use customer and user Personal Data to conduct and communicate about events and post-events, and may include sharing attendance information with conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests customer or user personal data, the information will be handled per their privacy practices.
- Education and Training. If you sign up for a Camunda certification course or training, Camunda uses customer and user Personal Data to facilitate the delivery of such course or training.
- Establish, Administer, and Support Accounts. Camunda uses customer and user Personal Data to provide products and manage customer accounts, such as managing product downloads, providing consulting, support and recommendations, and sending account-related communications.
- Manage Customer Experience. Camunda uses customer and user Personal Data to maintain accurate contact and cataloging data, deliver support, and offer products, services, and features.
- Marketing and Advertising. Camunda may use customer or user Personal Data to provide advertising per customer and user privacy preferences settings and applicable law, and may share some information with marketing service providers in order to present advertisements that might be of interest, which can occur with Automatic Data Collection Tools. See the Camunda’s Cookie Policy for more information.
- Facilitate and Evaluate Use of Online Properties. Camunda uses customer and user Personal Data to provide Online Properties, facilitate use of the Online Properties, such as navigation, logging in, and enhancing security in order to improve quality, evaluate page response rates and personalize content.
- Business Operations. Camunda uses customer and user Personal Data to conduct ordinary business operations, such as business research, corporate reporting, staff training, quality assurance, and general outreach.
- Security. Camunda uses customer and user Personal Data to maintain the integrity and security of Online Properties, products and services to prevent and detect security threats, fraud, or other criminal and malicious activity that might compromise customer or user information.
- Third Party Social Networks. Camunda may use personal data to interact with customers or users on third party social networks (subject to that network’s terms of use).
- Research and Innovation. Camunda uses customer and user Personal Data to develop new products, features, and services via research and development tools.
- Complying with Law. Camunda uses customer and user Personal Data as required to be compliant with applicable laws, regulations, and government and law enforcement requests.
- Other Legitimate Business Purposes. We may use Personal Data when it is necessary for other legitimate purposes, such as protecting Camunda’s confidential and proprietary information.
How Camunda Shares Information
Camunda shares customer and user personal data with the following, and with appropriate contractual obligations in place:
With Camunda Companies. Camunda may transfer customer and user Personal Data to other Camunda entities in the U.S. and worldwide for the purposes outlined in this Privacy Policy. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Service Providers. Camunda may share customer and user Personal Data with third parties, such as vendors, consultants, agents and other service providers, such as IT and system administration, processing transactions, marketing and research, targeted advertising, training, customer support, and data enrichment as described below. Camunda service providers are contractually required to safeguard personal data received and are prohibited from using personal data for any purpose other than to perform the services as instructed by Camunda. These service providers may be located outside of the EEA, in the U.S. or other locations worldwide. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Competent Authorities. Camunda may share customer and user personal data when believed, in good faith, that Camunda is: (i) responding accordingly to authorized requests by law enforcement agencies, regulators, courts, and other public authorities; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and assist in preventing security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of Camunda and its affiliates; or (v) protect the rights or personal safety of Camunda’s and its affiliates’ employees, and third parties on or using Camunda property in line with the requirements of applicable law.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security.
Data Retention
Camunda retains Personal Data collected in connection with the Online and Offline Properties for as long as necessary to fulfill the purposes outlined in this Privacy Policy or where there is an ongoing, legitimate business need to do so.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Privacy Rights and Choices
Users have the right to:
- request information about Personal Data stored by Camunda,
- request correction, deletion and restriction of personal data,
- complain to Camunda about the processing of personal data,
- object to the processing of personal data at any time, in which Camunda will no longer process personal data unless there are compelling reasons worthy of protection that outweigh customer or user interests,
- complain to any data protection supervisory authority, in particular in the Member State in which the customer or user is resident, if it is suspected that the processing of data is in breach of GDPR or other data protection legislation.
At the customer’s or user’s request, and as required by law, Camunda will:
- inform of what personal data is on file;
- amend or correct personal data or any previous privacy preferences the customer or user selected; and/or
- delete personal data.
To exercise your rights, email Camunda via our web form. Camunda uses reasonable efforts to delete personal data as required and retains records necessary to comply with governmental authority or applicable federal, state, or local laws. Where legally permitted, Camunda may decline to process requests that are excessively repetitive or methodical, require unreasonable technical effort, or risk the privacy of others.
If Camunda is unable to resolve your concerns, users have the right to contact their local data privacy supervisory authority or seek a remedy through the courts if the users believes his or her requests to exercise privacy rights have not been honored.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Security
Camunda is committed to protecting the security of personal data. We use appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. Despite these measures, Camunda cannot eliminate security risks associated with personal data, and mistakes and security breaches may happen. Please contact us with security questions at privacy@Camunda.com.
Changes to this Policy
This Privacy Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
February 2023: This privacy policy has been updated to introduce a new web form to make it easier to contact Camunda with privacy-related questions.
Previous versions
October 2020: This privacy policy has been updated and restructured. In particular, we have updated the information about the data Camunda collects during users’ and customers’ use of Camunda’s products. In addition, we now present the information relevant to the respective data subjects in user-specific Policies (such as General, Applicant, Cookie, California specific and Product Privacy Policy) so that information is user-friendly presented and easily accessible.
July 2020: This privacy statement has been completely revised to conform to the requirements set out in the CCPA and was first published in this form on the 2 of July 2020.
May 2020: This privacy statement has been updated to describe data processing of Camunda Cloud
April 2020: This privacy statement has been updated to describe data processing of Camunda Cloud and to describe updates of data processing during the Job application process.
January 2020: This privacy statement has been updated to describe the data processing of Camunda Modeler.
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
April 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Stripe (billing of events) and Bizzabo (event management platform).
August 2018: This privacy statement has been updated to describe the usage of Cookies and Web Beacons and to reflect the implementation of our new marketing tools HubSpot and Clearbit.
May 2018: This privacy statement has been completely revised to conform to the requirements set out in the GDPR and was first published in this form on the 25th of May 2018.
Effective July 3rd 2023 to July 14th 2023
DownloadTable of Contents
This Camunda Privacy Policy, hereby referred to as “Policy,” explains how Camunda Services GmbH, and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, share and process Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person,” and that Camunda uses to manage the business and business relationships with customers, users, visitors, applicants, event attendees, etc.
Interaction Specific Policies
Camunda supplements this General Privacy Policy with the following interaction specific Policies:
Applicant Privacy Policy. This Policy explains how Camunda processes Personal Data from Applicants applying for jobs within Camunda.
California Specific Privacy Policy. This is a Privacy Policy specifically addressed to California residents.
Cookie Policy. This Policy explains how Camunda uses cookies and similar tracking tools.
Product Privacy Policy. This Policy applies to the information Camunda collects and uses in connection with customer deployments of Camunda products and services.
General Privacy Policy
Scope
This General Privacy Policy explains user rights and choices related to the personal data Camunda collects when:
- users visit or use any of Camunda’s websites, social media pages, forum, online events, online advertisements, or marketing communications, hereby referred to as “Online Properties”
- users visit, interact with or use any of Camunda’s offices, events, sales, marketing or other non-web related activities, hereby referred to as “Properties.”
This General Privacy Policy does not cover:
Applicant Information: See Camunda’s Applicant Privacy Policy.
Automatic collection from Camunda products and services: See Camunda’s Product Privacy Policy.
Service Data: Certain Camunda products permit the customer organization to consume or upload and submit content to the products, hereby referred to as “Service Data”. This Privacy Policy does not cover Service Data, including any personal data about customers that may be contained in Service Data. Service Data processing questions should be addressed to the customer organization directly.
Organizational Use: When customers use Camunda products or services on behalf of an organization (e.g., an employer), customer use is administered and provisioned by the customer’s organization under its policies regarding the use and protection of personal data. Refer to the appropriate organization’s privacy policy and direct inquiries to the organization directly.
Camunda determines the purposes and means for processing personal data as described in this Privacy Policy unless specified otherwise.
Contact Camunda
Camunda Services GmbH is responsible within the meaning of the GDPR and other data protection laws or regulations that apply in the member states of the European Union.
If you have any questions or concerns about this policy, you have three ways to contact Camunda:
Via our web form
by mail:
Via our web form
by mail:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Zossener Strasse 55-58
10961 Berlin
or by telephone on: +030 664 04 09 – 00
Camunda has appointed an external data protection officer for German data subjects.
Camunda's data protection officer is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
If you have any questions about the collection, storage, transfer and use of data or about exercising the rights of the data subject, you can also contact our data protection officer at
Information Camunda Collects& How It's Collected
Camunda collects personal data and other information from users or customers directly, through automated means, and from third parties.
Personal Data Users and Customers provide directly: Camunda collects personal data when users or customers voluntarily provide it, which includes service providers or third parties who collect it on Camunda’s behalf, such as when signing up for our newsletter, downloading whitepapers, filling out contact forms, taking part in webinars, training courses and events, when placing an order, registering a product, completing surveys, writing in our forum, or requesting information about Camunda products, services, and events via sales representatives or customer support agents.
The personal data Camunda collects may include personal contact information, professional information, such as name, employer name, address, or job title telephone number, or email address, user IDs, contact preferences, and billing/transactional data.
Camunda also collects personal data disclosed by users when completing any “free text” boxes on forms such as survey feedback or event sign-up, on message boards, chat features, and other services or platforms, including third party services and platforms.
In this category, Camunda obtains personal data usually from the following sources:
- Contacting us by phone, e-mail or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Data in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
Data Collected Automatically: Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection.
- Online Properties. Camunda automatically collects Personal Data information when users or customers use, access, or interact with Online Properties, including unique identification numbers, Internet Protocol (IP) address, hardware settings, browser language, the date and time of the request and referral of the URL, broad geographic location, etc. See Camunda’s Cookie Policy for more information.
- Camunda Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
Data Collected from Third-Party Sources: Camunda may acquire data from affiliates in Camunda’s corporate group, via Camunda’s partners, or others third-parties used to make information provided more useful, such as geographic information acquired with the IP address that was collected automatically, as noted above. Information may be linked via a unique identifier, such as a cookie or account number.
Cookies and Automatic Data Collection on the Website
Detailed information about the use of cookies and automatic data collection tools (first-party cookies, third-party cookies, web beacons and APIs) can be found in Camunda's Cookie Policy.
How Camunda Uses Information Collected
Camunda may use customer or user information for the following purposes:
- Communications and Transaction Processing. Camunda uses customer and user Personal Data for communication purposes, to respond to customer and user requests, process transactions, and provide the information requested, which may include financial, credit card, and payment information.
- Offering and facilitating certain services and interaction possibilities. Camunda uses customer and user Personal Data for the purpose of offering certain services, such as providing a forum where users can exchange on Camunda’s products or providing the download of whitepapers or offering a newsletter.
- Conferences and Events. Camunda and its partners may use customer and user Personal Data to conduct and communicate about events and post-events, and may include sharing attendance information with conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests customer or user personal data, the information will be handled per their privacy practices.
- Education and Training. If you sign up for a Camunda certification course or training, Camunda uses customer and user Personal Data to facilitate the delivery of such course or training.
- Establish, Administer, and Support Accounts. Camunda uses customer and user Personal Data to provide products and manage customer accounts, such as managing product downloads, providing consulting, support and recommendations, and sending account-related communications.
- Manage Customer Experience. Camunda uses customer and user Personal Data to maintain accurate contact and cataloging data, deliver support, and offer products, services, and features.
- Marketing and Advertising. Camunda may use customer or user Personal Data to provide advertising per customer and user privacy preferences settings and applicable law, and may share some information with marketing service providers in order to present advertisements that might be of interest, which can occur with Automatic Data Collection Tools. See the Camunda’s Cookie Policy for more information.
- Facilitate and Evaluate Use of Online Properties. Camunda uses customer and user Personal Data to provide Online Properties, facilitate use of the Online Properties, such as navigation, logging in, and enhancing security in order to improve quality, evaluate page response rates and personalize content.
- Business Operations. Camunda uses customer and user Personal Data to conduct ordinary business operations, such as business research, corporate reporting, staff training, quality assurance, and general outreach.
- Security. Camunda uses customer and user Personal Data to maintain the integrity and security of Online Properties, products and services to prevent and detect security threats, fraud, or other criminal and malicious activity that might compromise customer or user information.
- Third Party Social Networks. Camunda may use personal data to interact with customers or users on third party social networks (subject to that network’s terms of use).
- Research and Innovation. Camunda uses customer and user Personal Data to develop new products, features, and services via research and development tools.
- Complying with Law. Camunda uses customer and user Personal Data as required to be compliant with applicable laws, regulations, and government and law enforcement requests.
- Other Legitimate Business Purposes. We may use Personal Data when it is necessary for other legitimate purposes, such as protecting Camunda’s confidential and proprietary information.
How Camunda Shares Information
Camunda shares customer and user personal data with the following, and with appropriate contractual obligations in place:
With Camunda Companies. Camunda may transfer customer and user Personal Data to other Camunda entities in the U.S. and worldwide for the purposes outlined in this Privacy Policy. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Service Providers. Camunda may share customer and user Personal Data with third parties, such as vendors, consultants, agents and other service providers, such as IT and system administration, processing transactions, marketing and research, targeted advertising, training, customer support, and data enrichment as described below. Camunda service providers are contractually required to safeguard personal data received and are prohibited from using personal data for any purpose other than to perform the services as instructed by Camunda. These service providers may be located outside of the EEA, in the U.S. or other locations worldwide. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Competent Authorities. Camunda may share customer and user personal data when believed, in good faith, that Camunda is: (i) responding accordingly to authorized requests by law enforcement agencies, regulators, courts, and other public authorities; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and assist in preventing security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of Camunda and its affiliates; or (v) protect the rights or personal safety of Camunda’s and its affiliates’ employees, and third parties on or using Camunda property in line with the requirements of applicable law.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security.
Data Retention
Camunda retains Personal Data collected in connection with the Online and Offline Properties for as long as necessary to fulfill the purposes outlined in this Privacy Policy or where there is an ongoing, legitimate business need to do so.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Privacy Rights and Choices
Users have the right to:
- request information about Personal Data stored by Camunda,
- request correction, deletion and restriction of personal data,
- complain to Camunda about the processing of personal data,
- object to the processing of personal data at any time, in which Camunda will no longer process personal data unless there are compelling reasons worthy of protection that outweigh customer or user interests,
- complain to any data protection supervisory authority, in particular in the Member State in which the customer or user is resident, if it is suspected that the processing of data is in breach of GDPR or other data protection legislation.
At the customer’s or user’s request, and as required by law, Camunda will:
- inform of what personal data is on file;
- amend or correct personal data or any previous privacy preferences the customer or user selected; and/or
- delete personal data.
To exercise your rights, email Camunda via our web form. Camunda uses reasonable efforts to delete personal data as required and retains records necessary to comply with governmental authority or applicable federal, state, or local laws. Where legally permitted, Camunda may decline to process requests that are excessively repetitive or methodical, require unreasonable technical effort, or risk the privacy of others.
If Camunda is unable to resolve your concerns, users have the right to contact their local data privacy supervisory authority or seek a remedy through the courts if the users believes his or her requests to exercise privacy rights have not been honored.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Security
Camunda is committed to protecting the security of personal data. We use appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. Despite these measures, Camunda cannot eliminate security risks associated with personal data, and mistakes and security breaches may happen. Please contact us with security questions at privacy@Camunda.com.
Changes to this Policy
This Privacy Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
February 2023: This privacy policy has been updated to introduce a new web form to make it easier to contact Camunda with privacy-related questions.
Previous versions
October 2020: This privacy policy has been updated and restructured. In particular, we have updated the information about the data Camunda collects during users’ and customers’ use of Camunda’s products. In addition, we now present the information relevant to the respective data subjects in user-specific Policies (such as General, Applicant, Cookie, California specific and Product Privacy Policy) so that information is user-friendly presented and easily accessible.
July 2020: This privacy statement has been completely revised to conform to the requirements set out in the CCPA and was first published in this form on the 2 of July 2020.
May 2020: This privacy statement has been updated to describe data processing of Camunda Cloud
April 2020: This privacy statement has been updated to describe data processing of Camunda Cloud and to describe updates of data processing during the Job application process.
January 2020: This privacy statement has been updated to describe the data processing of Camunda Modeler.
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
April 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Stripe (billing of events) and Bizzabo (event management platform).
August 2018: This privacy statement has been updated to describe the usage of Cookies and Web Beacons and to reflect the implementation of our new marketing tools HubSpot and Clearbit.
May 2018: This privacy statement has been completely revised to conform to the requirements set out in the GDPR and was first published in this form on the 25th of May 2018.
Effective May 15th 2023 to July 3rd 2023
DownloadTable of Contents
This General Privacy Policy, hereby referred to as “Policy,” explains how Camunda Services GmbH, and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, share and process Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person,” and that Camunda uses to manage the business and business relationships with customers, users, visitors, applicants, event attendees, etc.
Interaction Specific Policies
Camunda supplements this General Privacy Policy with the following interaction specific Policies:
Applicant Privacy Policy. This Policy explains how Camunda processes Personal Data from Applicants applying for jobs within Camunda.
California Specific Privacy Policy. This is a Privacy Policy specifically addressed to California residents.
Cookie Policy. This Policy explains how Camunda uses cookies and similar tracking tools.
Product Privacy Policy. This Policy applies to the information Camunda collects and uses in connection with customer deployments of Camunda products and services.
General Privacy Policy
Scope
This General Privacy Policy explains user rights and choices related to the personal data Camunda collects when:
- users visit or use any of Camunda’s websites, social media pages, forum, online events, online advertisements, or marketing communications, hereby referred to as “Online Properties”
- users visit, interact with or use any of Camunda’s offices, events, sales, marketing or other non-web related activities, hereby referred to as “Properties.”
This General Privacy Policy does not cover:
Applicant Information: See Camunda’s Applicant Privacy Policy.
Automatic collection from Camunda products and services: See Camunda’s Product Privacy Policy.
Service Data: Certain Camunda products permit the customer organization to consume or upload and submit content to the products, hereby referred to as “Service Data”. This Privacy Policy does not cover Service Data, including any personal data about customers that may be contained in Service Data. Service Data processing questions should be addressed to the customer organization directly.
Organizational Use: When customers use Camunda products or services on behalf of an organization (e.g., an employer), customer use is administered and provisioned by the customer’s organization under its policies regarding the use and protection of personal data. Refer to the appropriate organization’s privacy policy and direct inquiries to the organization directly.
Camunda determines the purposes and means for processing personal data as described in this Privacy Policy unless specified otherwise.
Contact Camunda
Camunda Services GmbH is responsible within the meaning of the GDPR and other data protection laws or regulations that apply in the member states of the European Union.
If you have any questions or concerns about this policy, you have three ways to contact Camunda:
Via our web form
by mail:
Via our web form
by mail:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Zossener Strasse 55-58
10961 Berlin
or by telephone on: +030 664 04 09 – 00
Camunda has appointed an external data protection officer for German data subjects.
Camunda's data protection officer is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstrasse 95
10117 Berlin
If you have any questions about the collection, storage, transfer and use of data or about exercising the rights of the data subject, you can also contact our data protection officer at
Information Camunda Collects& How It's Collected
Camunda collects personal data and other information from users or customers directly, through automated means, and from third parties.
Personal Data Users and Customers provide directly: Camunda collects personal data when users or customers voluntarily provide it, which includes service providers or third parties who collect it on Camunda’s behalf, such as when signing up for our newsletter, downloading whitepapers, filling out contact forms, taking part in webinars, training courses and events, when placing an order, registering a product, completing surveys, writing in our forum, or requesting information about Camunda products, services, and events via sales representatives or customer support agents.
The personal data Camunda collects may include personal contact information, professional information, such as name, employer name, address, or job title telephone number, or email address, user IDs, contact preferences, and billing/transactional data.
Camunda also collects personal data disclosed by users when completing any “free text” boxes on forms such as survey feedback or event sign-up, on message boards, chat features, and other services or platforms, including third party services and platforms.
In this category, Camunda obtains personal data usually from the following sources:
- Contacting us by phone, e-mail or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Data in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
Data Collected Automatically: Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection.
- Online Properties. Camunda automatically collects Personal Data information when users or customers use, access, or interact with Online Properties, including unique identification numbers, Internet Protocol (IP) address, hardware settings, browser language, the date and time of the request and referral of the URL, broad geographic location, etc. See Camunda’s Cookie Policy for more information.
- Camunda Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
Data Collected from Third-Party Sources: Camunda may acquire data from affiliates in Camunda’s corporate group, via Camunda’s partners, or others third-parties used to make information provided more useful, such as geographic information acquired with the IP address that was collected automatically, as noted above. Information may be linked via a unique identifier, such as a cookie or account number.
Cookies and Automatic Data Collection on the Website
Detailed information about the use of cookies and automatic data collection tools (first-party cookies, third-party cookies, web beacons and APIs) can be found in Camunda's Cookie Policy.
How Camunda Uses Information Collected
Camunda may use customer or user information for the following purposes:
- Communications and Transaction Processing. Camunda uses customer and user Personal Data for communication purposes, to respond to customer and user requests, process transactions, and provide the information requested, which may include financial, credit card, and payment information.
- Offering and facilitating certain services and interaction possibilities. Camunda uses customer and user Personal Data for the purpose of offering certain services, such as providing a forum where users can exchange on Camunda’s products or providing the download of whitepapers or offering a newsletter.
- Conferences and Events. Camunda and its partners may use customer and user Personal Data to conduct and communicate about events and post-events, and may include sharing attendance information with conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests customer or user personal data, the information will be handled per their privacy practices.
- Education and Training. If you sign up for a Camunda certification course or training, Camunda uses customer and user Personal Data to facilitate the delivery of such course or training.
- Establish, Administer, and Support Accounts. Camunda uses customer and user Personal Data to provide products and manage customer accounts, such as managing product downloads, providing consulting, support and recommendations, and sending account-related communications.
- Manage Customer Experience. Camunda uses customer and user Personal Data to maintain accurate contact and cataloging data, deliver support, and offer products, services, and features.
- Marketing and Advertising. Camunda may use customer or user Personal Data to provide advertising per customer and user privacy preferences settings and applicable law, and may share some information with marketing service providers in order to present advertisements that might be of interest, which can occur with Automatic Data Collection Tools. See the Camunda’s Cookie Policy for more information.
- Facilitate and Evaluate Use of Online Properties. Camunda uses customer and user Personal Data to provide Online Properties, facilitate use of the Online Properties, such as navigation, logging in, and enhancing security in order to improve quality, evaluate page response rates and personalize content.
- Business Operations. Camunda uses customer and user Personal Data to conduct ordinary business operations, such as business research, corporate reporting, staff training, quality assurance, and general outreach.
- Security. Camunda uses customer and user Personal Data to maintain the integrity and security of Online Properties, products and services to prevent and detect security threats, fraud, or other criminal and malicious activity that might compromise customer or user information.
- Third Party Social Networks. Camunda may use personal data to interact with customers or users on third party social networks (subject to that network’s terms of use).
- Research and Innovation. Camunda uses customer and user Personal Data to develop new products, features, and services via research and development tools.
- Complying with Law. Camunda uses customer and user Personal Data as required to be compliant with applicable laws, regulations, and government and law enforcement requests.
- Other Legitimate Business Purposes. We may use Personal Data when it is necessary for other legitimate purposes, such as protecting Camunda’s confidential and proprietary information.
How Camunda Shares Information
Camunda shares customer and user personal data with the following, and with appropriate contractual obligations in place:
With Camunda Companies. Camunda may transfer customer and user Personal Data to other Camunda entities in the U.S. and worldwide for the purposes outlined in this Privacy Policy. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Service Providers. Camunda may share customer and user Personal Data with third parties, such as vendors, consultants, agents and other service providers, such as IT and system administration, processing transactions, marketing and research, targeted advertising, training, customer support, and data enrichment as described below. Camunda service providers are contractually required to safeguard personal data received and are prohibited from using personal data for any purpose other than to perform the services as instructed by Camunda. These service providers may be located outside of the EEA, in the U.S. or other locations worldwide. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Competent Authorities. Camunda may share customer and user personal data when believed, in good faith, that Camunda is: (i) responding accordingly to authorized requests by law enforcement agencies, regulators, courts, and other public authorities; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and assist in preventing security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of Camunda and its affiliates; or (v) protect the rights or personal safety of Camunda’s and its affiliates’ employees, and third parties on or using Camunda property in line with the requirements of applicable law.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security.
Data Retention
Camunda retains Personal Data collected in connection with the Online and Offline Properties for as long as necessary to fulfill the purposes outlined in this Privacy Policy or where there is an ongoing, legitimate business need to do so.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Privacy Rights and Choices
Users have the right to:
- request information about Personal Data stored by Camunda,
- request correction, deletion and restriction of personal data,
- complain to Camunda about the processing of personal data,
- object to the processing of personal data at any time, in which Camunda will no longer process personal data unless there are compelling reasons worthy of protection that outweigh customer or user interests,
- complain to any data protection supervisory authority, in particular in the Member State in which the customer or user is resident, if it is suspected that the processing of data is in breach of GDPR or other data protection legislation.
At the customer’s or user’s request, and as required by law, Camunda will:
- inform of what personal data is on file;
- amend or correct personal data or any previous privacy preferences the customer or user selected; and/or
- delete personal data.
To exercise your rights, email Camunda via our web form. Camunda uses reasonable efforts to delete personal data as required and retains records necessary to comply with governmental authority or applicable federal, state, or local laws. Where legally permitted, Camunda may decline to process requests that are excessively repetitive or methodical, require unreasonable technical effort, or risk the privacy of others.
If Camunda is unable to resolve your concerns, users have the right to contact their local data privacy supervisory authority or seek a remedy through the courts if the users believes his or her requests to exercise privacy rights have not been honored.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Security
Camunda is committed to protecting the security of personal data. We use appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. Despite these measures, Camunda cannot eliminate security risks associated with personal data, and mistakes and security breaches may happen. Please contact us with security questions at privacy@Camunda.com.
Changes to this Policy
This Privacy Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
February 2023: This privacy policy has been updated to introduce a new web form to make it easier to contact Camunda with privacy-related questions.
Previous versions
October 2020: This privacy policy has been updated and restructured. In particular, we have updated the information about the data Camunda collects during users’ and customers’ use of Camunda’s products. In addition, we now present the information relevant to the respective data subjects in user-specific Policies (such as General, Applicant, Cookie, California specific and Product Privacy Policy) so that information is user-friendly presented and easily accessible.
July 2020: This privacy statement has been completely revised to conform to the requirements set out in the CCPA and was first published in this form on the 2 of July 2020.
May 2020: This privacy statement has been updated to describe data processing of Camunda Cloud
April 2020: This privacy statement has been updated to describe data processing of Camunda Cloud and to describe updates of data processing during the Job application process.
January 2020: This privacy statement has been updated to describe the data processing of Camunda Modeler.
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
April 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Stripe (billing of events) and Bizzabo (event management platform).
August 2018: This privacy statement has been updated to describe the usage of Cookies and Web Beacons and to reflect the implementation of our new marketing tools HubSpot and Clearbit.
May 2018: This privacy statement has been completely revised to conform to the requirements set out in the GDPR and was first published in this form on the 25th of May 2018.
Effective April 5th 2023 to May 15th 2023
DownloadTable of Contents
This General Privacy Policy, hereby referred to as “Policy,” explains how Camunda Services GmbH, and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, share and process Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person,” and that Camunda uses to manage the business and business relationships with customers, users, visitors, applicants, event attendees, etc.
Interaction Specific Policies
Camunda supplements this General Privacy Policy with the following interaction specific Policies:
Applicant Privacy Policy. This Policy explains how Camunda processes Personal Data from Applicants applying for jobs within Camunda.
California Specific Privacy Policy. This is a Privacy Policy specifically addressed to California residents.
Cookie Policy. This Policy explains how Camunda uses cookies and similar tracking tools.
Product Privacy Policy. This Policy applies to the information Camunda collects and uses in connection with customer deployments of Camunda products and services.
General Privacy Policy
Scope
This General Privacy Policy explains user rights and choices related to the personal data Camunda collects when:
- users visit or use any of Camunda’s websites, social media pages, forum, online events, online advertisements, or marketing communications, hereby referred to as “Online Properties”
- users visit, interact with or use any of Camunda’s offices, events, sales, marketing or other non-web related activities, hereby referred to as “Properties.”
This General Privacy Policy does not cover:
Applicant Information: See Camunda’s Applicant Privacy Policy.
Automatic collection from Camunda products and services: See Camunda’s Product Privacy Policy.
Service Data: Certain Camunda products permit the customer organization to consume or upload and submit content to the products, hereby referred to as “Service Data”. This Privacy Policy does not cover Service Data, including any personal data about customers that may be contained in Service Data. Service Data processing questions should be addressed to the customer organization directly.
Organizational Use: When customers use Camunda products or services on behalf of an organization (e.g., an employer), customer use is administered and provisioned by the customer’s organization under its policies regarding the use and protection of personal data. Refer to the appropriate organization’s privacy policy and direct inquiries to the organization directly.
Camunda determines the purposes and means for processing personal data as described in this Privacy Policy unless specified otherwise.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this Policy please contact Camunda’s email at privacy@camunda.com or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Information Camunda Collects& How It's Collected
Camunda collects personal data and other information from users or customers directly, through automated means, and from third parties.
Personal Data Users and Customers provide directly: Camunda collects personal data when users or customers voluntarily provide it, which includes service providers or third parties who collect it on Camunda’s behalf, such as when signing up for our newsletter, downloading whitepapers, filling out contact forms, taking part in webinars, training courses and events, when placing an order, registering a product, completing surveys, writing in our forum, or requesting information about Camunda products, services, and events via sales representatives or customer support agents.
The personal data Camunda collects may include personal contact information, professional information, such as name, employer name, address, or job title telephone number, or email address, user IDs, contact preferences, and billing/transactional data.
Camunda also collects personal data disclosed by users when completing any “free text” boxes on forms such as survey feedback or event sign-up, on message boards, chat features, and other services or platforms, including third party services and platforms.
In this category, Camunda obtains personal data usually from the following sources:
- Contacting us by phone, e-mail or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Data in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
Data Collected Automatically: Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection.
- Online Properties. Camunda automatically collects Personal Data information when users or customers use, access, or interact with Online Properties, including unique identification numbers, Internet Protocol (IP) address, hardware settings, browser language, the date and time of the request and referral of the URL, broad geographic location, etc. See Camunda’s Cookie Policy for more information.
- Camunda Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
Data Collected from Third-Party Sources: Camunda may acquire data from affiliates in Camunda’s corporate group, via Camunda’s partners, or others third-parties used to make information provided more useful, such as geographic information acquired with the IP address that was collected automatically, as noted above. Information may be linked via a unique identifier, such as a cookie or account number.
Cookies and Website Automatic Data Collection
See Camunda’s Cookie Policy for detailed information on Camunda’s use of cookies and Automatic Data Collection Tools (First-Party cookies, Third-Party cookies, Web Beacons and APIs).
How Camunda Uses Information Collected
Camunda may use customer or user information for the following purposes:
- Communications and Transaction Processing. Camunda uses customer and user Personal Data for communication purposes, to respond to customer and user requests, process transactions, and provide the information requested, which may include financial, credit card, and payment information.
- Offering and facilitating certain services and interaction possibilities. Camunda uses customer and user Personal Data for the purpose of offering certain services, such as providing a forum where users can exchange on Camunda’s products or providing the download of whitepapers or offering a newsletter.
- Conferences and Events. Camunda and its partners may use customer and user Personal Data to conduct and communicate about events and post-events, and may include sharing attendance information with conference sponsors and partners, where legally permitted to do so. If a partner or conference sponsor directly requests customer or user personal data, the information will be handled per their privacy practices.
- Education and Training. If you sign up for a Camunda certification course or training, Camunda uses customer and user Personal Data to facilitate the delivery of such course or training.
- Establish, Administer, and Support Accounts. Camunda uses customer and user Personal Data to provide products and manage customer accounts, such as managing product downloads, providing consulting, support and recommendations, and sending account-related communications.
- Manage Customer Experience. Camunda uses customer and user Personal Data to maintain accurate contact and cataloging data, deliver support, and offer products, services, and features.
- Marketing and Advertising. Camunda may use customer or user Personal Data to provide advertising per customer and user privacy preferences settings and applicable law, and may share some information with marketing service providers in order to present advertisements that might be of interest, which can occur with Automatic Data Collection Tools. See the Camunda’s Cookie Policy for more information.
- Facilitate and Evaluate Use of Online Properties. Camunda uses customer and user Personal Data to provide Online Properties, facilitate use of the Online Properties, such as navigation, logging in, and enhancing security in order to improve quality, evaluate page response rates and personalize content.
- Business Operations. Camunda uses customer and user Personal Data to conduct ordinary business operations, such as business research, corporate reporting, staff training, quality assurance, and general outreach.
- Security. Camunda uses customer and user Personal Data to maintain the integrity and security of Online Properties, products and services to prevent and detect security threats, fraud, or other criminal and malicious activity that might compromise customer or user information.
- Third Party Social Networks. Camunda may use personal data to interact with customers or users on third party social networks (subject to that network’s terms of use).
- Research and Innovation. Camunda uses customer and user Personal Data to develop new products, features, and services via research and development tools.
- Complying with Law. Camunda uses customer and user Personal Data as required to be compliant with applicable laws, regulations, and government and law enforcement requests.
- Other Legitimate Business Purposes. We may use Personal Data when it is necessary for other legitimate purposes, such as protecting Camunda’s confidential and proprietary information.
How Camunda Shares Information
Camunda shares customer and user personal data with the following, and with appropriate contractual obligations in place:
With Camunda Companies. Camunda may transfer customer and user Personal Data to other Camunda entities in the U.S. and worldwide for the purposes outlined in this Privacy Policy. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Service Providers. Camunda may share customer and user Personal Data with third parties, such as vendors, consultants, agents and other service providers, such as IT and system administration, processing transactions, marketing and research, targeted advertising, training, customer support, and data enrichment as described below. Camunda service providers are contractually required to safeguard personal data received and are prohibited from using personal data for any purpose other than to perform the services as instructed by Camunda. These service providers may be located outside of the EEA, in the U.S. or other locations worldwide. Camunda protects personal data per this Policy wherever it is processed and takes appropriate measures to protect personal data under applicable laws, including implementing the European Commission’s standard contractual clauses and relying on the European Commission’s adequacy decisions about certain countries, as applicable, for data transfers from the EEA to the United States and other countries.
With Competent Authorities. Camunda may share customer and user personal data when believed, in good faith, that Camunda is: (i) responding accordingly to authorized requests by law enforcement agencies, regulators, courts, and other public authorities; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and assist in preventing security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of Camunda and its affiliates; or (v) protect the rights or personal safety of Camunda’s and its affiliates’ employees, and third parties on or using Camunda property in line with the requirements of applicable law.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security.
Data Retention
Camunda retains Personal Data collected in connection with the Online and Offline Properties for as long as necessary to fulfill the purposes outlined in this Privacy Policy or where there is an ongoing, legitimate business need to do so.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Privacy Rights and Choices
Users have the right to:
- request information about Personal Data stored by Camunda,
- request correction, deletion and restriction of personal data,
- complain to Camunda about the processing of personal data,
- object to the processing of personal data at any time, in which Camunda will no longer process personal data unless there are compelling reasons worthy of protection that outweigh customer or user interests,
- complain to any data protection supervisory authority, in particular in the Member State in which the customer or user is resident, if it is suspected that the processing of data is in breach of GDPR or other data protection legislation.
At the customer’s or user’s request, and as required by law, Camunda will:
- inform of what personal data is on file;
- amend or correct personal data or any previous privacy preferences the customer or user selected; and/or
- delete personal data.
To exercise your rights, email Camunda at privacy@camunda.com. Camunda uses reasonable efforts to delete personal data as required and retains records necessary to comply with governmental authority or applicable federal, state, or local laws. Where legally permitted, Camunda may decline to process requests that are excessively repetitive or methodical, require unreasonable technical effort, or risk the privacy of others.
If Camunda is unable to resolve your concerns, users have the right to contact their local data privacy supervisory authority or seek a remedy through the courts if the users believes his or her requests to exercise privacy rights have not been honored.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Security
Camunda is committed to protecting the security of personal data. We use appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. Despite these measures, Camunda cannot eliminate security risks associated with personal data, and mistakes and security breaches may happen. Please contact us with security questions at privacy@Camunda.com.
Changes to this Policy
This Privacy Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
October 2020: This privacy policy has been updated and restructured. In particular, we have updated the information about the data Camunda collects during users’ and customers’ use of Camunda’s products. In addition, we now present the information relevant to the respective data subjects in user-specific Policies (such as General, Applicant, Cookie, California specific and Product Privacy Policy) so that information is user-friendly presented and easily accessible.
Previous versions
July 2020: This privacy statement has been completely revised to conform to the requirements set out in the CCPA and was first published in this form on the 2 of July 2020.
May 2020: This privacy statement has been updated to describe data processing of Camunda Cloud
April 2020: This privacy statement has been updated to describe data processing of Camunda Cloud and to describe updates of data processing during the Job application process.
January 2020: This privacy statement has been updated to describe the data processing of Camunda Modeler.
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
September 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Go ToMeeting (scheduling and conducting Webinars) and Auth0 (password management).
April 2019: This privacy statement has been updated to describe the usage of our Third-Party providers Stripe (billing of events) and Bizzabo (event management platform).
August 2018: This privacy statement has been updated to describe the usage of Cookies and Web Beacons and to reflect the implementation of our new marketing tools HubSpot and Clearbit.
May 2018: This privacy statement has been completely revised to conform to the requirements set out in the GDPR and was first published in this form on the 25th of May 2018.
Allgemeine Datenschutzrichtlinie
Effective May 16th 2025
DownloadTable of Contents
Diese Allgemeine Datenschutzrichtlinie („Richtlinie“) erklärt, wie die Camunda Services GmbH und ihre Tochtergesellschaften („Camunda“, „wir“, „uns“ und „unser“) personenbezogene Daten erhebt, verwendet, teilt und verarbeitet.
Im Folgenden wird beschrieben, wie Camunda personenbezogene Daten im Rahmen der Geschäfte und Geschäftsbeziehungen mit Kunden, Nutzern, Besuchern, Bewerbern, Veranstaltungsteilnehmern etc. verarbeitet, erhebt, verwaltet, verwendet und teilt. Personenbezogene Daten sind in der Datenschutz-Grundverordnung (DSGVO) als „sämtliche Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person beziehen“, definiert.
Interaktionsspezifische Richtlinien
Camunda ergänzt diese allgemeine Datenschutzrichtlinie durch die folgenden interaktionsspezifischen Richtlinien:
Datenschutzrichtlinie für Bewerber – Diese Richtlinie erklärt, wie Camunda personenbezogene Daten von Bewerbern verarbeitet, die sich auf Stellen bei Camunda bewerben.
Spezifische Datenschutzrichtlinie für Kalifornien – Dies ist eine Datenschutzrichtlinie, die sich speziell an kalifornische Einwohner richtet.
Cookie-Richtlinie – Diese Richtlinie erklärt, wie Camunda Cookies und ähnliche Tracking-Tools verwendet.
Datenschutzrichtlinie für Produkte – Diese Richtlinie bezieht sich auf die Daten, die Camunda im Zusammenhang mit Kundeneinsätzen von Camunda-Produkten und -Dienstleistungen erhebt und verwendet.
Geltungsbereich
Diese Allgemeine Datenschutzerklärung erläutert die Nutzerrechte und Wahlmöglichkeiten im Zusammenhang mit den personenbezogenen Daten, die Camunda erhebt:
- wenn Nutzer eine der Websites, Social-Media-Seiten, Foren, Online-Veranstaltungen, Online-Werbungen oder Marketingmitteilungen von Camunda (im Folgenden als „Internetauftritt“ bezeichnet) besuchen oder nutzen,
- wenn Nutzer die Büros, Veranstaltungen, Verkaufs-, Marketing- oder sonstige Angebote von Camunda, die nicht mit dem Web in Verbindung stehen, wahrnehmen, interagieren oder sie nutzen (diese werden im Folgenden als „Auftritt“ bezeichnet).
Diese allgemeine Datenschutzrichtlinie gilt nicht:
Für Bewerberdaten: Siehe Applicant Privacy Policy von Camunda.
Die automatische Erhebung von Daten von Camunda-Produkten und -Dienstleistungen: Siehe Product Privacy Policy von Camunda.
Servicedaten: Bestimmte Produkte von Camunda ermöglichen es der Kundenorganisation, Inhalte zu nutzen oder hochzuladen und an die Produkte zu übermitteln („Servicedaten“). Diese Datenschutzrichtlinie gilt nicht für Servicedaten, einschließlich aller personenbezogenen Daten über Kunden, die in Servicedaten enthalten sein können. Fragen zur Servicedatenverarbeitung sind direkt an die Kundenorganisation zu richten.
Organisatorische Verwendung: Wenn Kunden Camundas Produkte oder -Dienstleistungen im Namen einer Organisation (z. B. eines Arbeitgebers) verwenden, wird die Nutzung durch den Kunden von der Organisation des Kunden gemäß deren Richtlinien zur Verwendung und zum Schutz personenbezogener Daten verwaltet und bereitgestellt. Bitte lesen Sie dazu die Datenschutzrichtlinien der entsprechenden Organisation und wenden Sie sich bei Anfragen direkt an die Organisation.
Sofern nicht anders angegeben, bestimmt Camunda die Zwecke und Mittel zur Verarbeitung personenbezogener Daten entsprechend den Angaben in dieser Datenschutzerklärung.
Wie Sie Camunda kontaktieren können
Die Camunda Services GmbH ist der Verantwortliche im Sinne der DSGVO und sonstiger Datenschutzgesetze oder -bestimmungen, die in den Mitgliedstaaten der Europäischen Union gelten.
Sollten Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, stehen Ihnen drei Wege offen, sich an Camunda zu wenden:
Über unsere Webform
per Post:
Über unsere Webform
per Post:
Camunda Services GmbH
Zossener Straße 55-58
10961 Berlin
Zossener Straße 55-58
10961 Berlin
oder telefonisch unter der Nummer: +030 664 04 09 – 00
Camunda hat einen externen Datenschutzbeauftragten für deutsche betroffene Personen ernannt.
Der Datenschutzbeauftragte von Camunda ist:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Bei Fragen zur Erhebung, Speicherung, Weitergabe und Verwendung von Daten oder zur Ausübung der Rechte der betroffenen Persone können Sie sich auch an unseren Datenschutzbeauftragten wenden unter:
Daten, die Camunda erhebt & wie sie erhoben werden
Camunda erhebt personenbezogene Daten und weitere Informationen von Nutzern oder Kunden direkt, mit automatisierten Mitteln und über Dritte.
Personenbezogene Daten, die Nutzer und Kunden direkt angeben: Camunda erhebt personenbezogene Daten, wenn Nutzer oder Kunden diese freiwillig zur Verfügung stellen, wozu auch Dienstleister oder Dritte gehören, die diese Daten im Auftrag von Camunda erheben. Dies kann beispielsweise bei der Anmeldung für unseren Newsletter, beim Herunterladen von Whitepapers, beim Ausfüllen von Kontaktformularen, bei der Teilnahme an Webinaren, Schulungen und Veranstaltungen, bei der Bestellung, bei der Registrierung eines Produkts, beim Ausfüllen von Umfragen, beim Schreiben in unserem Forum oder bei der Anforderung von Informationen über Produkte, Dienstleistungen und Veranstaltungen von Camunda durch Vertriebsmitarbeiter oder Kundenbetreuer der Fall sein.
Die von Camunda erhobenen personenbezogenen Daten können persönliche Kontaktinformationen, berufliche Informationen, wie Name, Name des Arbeitgebers, Adresse oder Stellenbezeichnung, Telefonnummer oder E-Mail-Adresse, Nutzer-IDs, Kontaktpräferenzen und Rechnungs-/Transaktionsdaten umfassen.
Camunda erhebt auch personenbezogene Daten, die von den Nutzern beim Ausfüllen von „Freitext“-Feldern in Formularen wie Umfrage-Feedback oder Veranstaltungsanmeldung, auf Message Boards, Chat-Funktionen und anderen Diensten oder Plattformen, einschließlich Diensten und Plattformen Dritter, von Nutzern eingegeben werden.
In dieser Kategorie bezieht Camunda personenbezogene Daten in der Regel aus den folgenden Quellen:
- Kontaktaufnahme mit uns per Telefon, E-Mail oder anderweitig – Wenn Nutzer mit Camunda über unsere Kontaktseite kommunizieren, Umfragen ausfüllen oder alle „freien“ Felder ausfüllen, geben Nutzer Inhalt, den vollständigen Namen, die E-Mail-Adresse, die Stellenbezeichnung, den Firmennamen, die Branche, die Telefonnummer und die Anzahl der Mitarbeiter des Unternehmens an.
- Rundbriefe und Whitepapers – Camunda bietet den Nutzern die Möglichkeit, sich über unsere Newsletter und Whitepapers über die bevorstehenden Camunda-Treffen und Entwicklungen im Bereich der Workflow-Automation auf dem Laufenden zu halten.
- Schulungen, Veranstaltungen und Webinare – Wenn sich Kunden über unsere Website für unsere Schulungen, Veranstaltungen oder Webinare anmelden, erhebt Camunda personenbezogene Daten, um diese Dienste bereitzustellen und zu verwalten.
- Forum – Nutzer haben die Möglichkeit, sich mit anderen Interessenten über Fragen zu Camundas Software auszutauschen. Wenn sich ein Nutzer für das Forum registriert, speichert Camunda die E-Mail-Adresse und Nutzernamen. Wenn ein Nutzer einen Beitrag in einem Forum postet, ist der Beitrag für die Öffentlichkeit sichtbar. Der von ihm eingereichte Beitrag kann von jedem Interessierten zusammen mit dem Zeitpunkt der Veröffentlichung heruntergeladen werden. Die E-Mail-Adresse des Nutzers wird jedoch nicht veröffentlicht.
- Seiten sozialer Medien – Durch die Nutzung von sozialen Medien und/oder anderen Websites wie Twitter, GitHub, Stack overflow, Vimeo, Facebook oder LinkedIn durch die Nutzer, je nach den Einstellungen der Nutzer oder den Datenschutzrichtlinien dieser Websites. Um die Einstellungen dieser Dienste zu ändern, lesen Sie bitte die jeweiligen Datenschutzhinweise.
- Karriere – Wenn Bewerber einen Lebenslauf oder andere Informationen über unsere Karriereseite einreichen, https://camunda.com/career/. Wenn Sie uns über die Website per E-Mail kontaktieren, können wir Ihre E-Mail-Adresse und Ihre Korrespondenz aufzeichnen und diese Informationen verwenden, um Ihnen zu antworten. Wir können auch Lebensläufe von Personalvermittlern, Camunda-Mitarbeitern oder sonstigen Dritten erhalten. Siehe Datenschutzerklärung des Antragstellers von Camunda für weitere Informationen.
Automatisch erhobene Daten: Camunda verwendet integrierte Technologien wie Cookies, Zählpixel und eingebettete URLs, um eine automatisierte Datenerhebung zu ermöglichen.
- Internetauftritt – Camunda erhebt automatisch Informationen über personenbezogene Daten, wenn Nutzer oder Kunden Internetauftritte nutzen, darauf zugreifen oder mit ihnen interagieren, einschließlich eindeutiger Identifikationsnummern, der Internet-Protokoll (IP)-Adresse, der Hardware-Einstellungen, der Browser-Sprache, des Datum und der Uhrzeit der Anfrage und der Weiterleitung der URL, des allgemeinen geographischen Standortes usw. Weitere Informationen finden Sie in der Cookie-Richtlinie von Camunda.
- Camunda-Produkte – Um die Stabilität und Funktionalität unserer Produkte zu verbessern und zu gewährleisten, erheben wir technische Daten, die in manchen Fällen auch als personenbezogene Daten eingestuft werden können. Wir verwenden diese personenbezogenen Daten auch zur Analyse von Trends und Nutzungsmustern. Siehe Datenschutzrichtlinie für Produkte von Camunda.
Daten aus Drittquellen: Camunda kann Daten von verbundenen Unternehmen der Camunda-Unternehmensgruppe, über Partner von Camunda oder andere Drittparteien erwerben, die verwendet werden, um die zur Verfügung gestellten Informationen nützlicher zu gestalten, z.B. geografische Informationen, die mit der IP-Adresse erhoben wurden, die, wie oben erwähnt, automatisch erhoben wurde. Daten können über einen eindeutigen Identifikator, z. B. ein Cookie oder eine Kontonummer, verknüpft werden.
Cookies und automatische Datenerhebung auf der Website
Detaillierte Informationen über die Verwendung von Cookies und von automatischen Datenerhebungswerkzeugen (First-Party-Cookies, Third-Party-Cookies, Zählpixel und APIs) finden Sie in der Cookie-Richtlinie von Camunda.
Wie Camunda die erhobenen Daten nutzt
Camunda kann Kunden- oder Nutzerdaten für die folgenden Zwecke verwenden:
- Kommunikation und Transaktionsverarbeitung – Camunda verwendet personenbezogene Kunden- und Nutzerdaten zu Kommunikationszwecken, um auf Kunden- und Nutzeranfragen zu antworten, Transaktionen zu bearbeiten und die angeforderten Informationen bereitzustellen, zu denen Finanz-, Kreditkarten- und Zahlungsinformationen gehören können.
- Anbieten und Erleichtern bestimmter Dienstleistungen und Interaktionsmöglichkeiten – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern, um bestimmte Dienstleistungen anzubieten, z. B. die Bereitstellung eines Forums, in dem sich Nutzer über die Produkte von Camunda austauschen können, oder das Herunterladen von Whitepapers oder das Anbieten eines Newsletters.
- Konferenzen und Veranstaltungen – Camunda und seine Partner können personenbezogene Daten von Kunden und Nutzern zur Durchführung von und zur Kommunikation über Veranstaltungen und Post-Events verwenden. Dies kann auch den Austausch von Teilnahmeinformationen mit Konferenzsponsoren und Partnern umfassen, sofern dies gesetzlich zulässig ist. Fordert ein Partner oder Konferenzsponsor direkt personenbezogene Daten von Kunden oder Nutzern an, so werden die Informationen gemäß den Datenschutzbestimmungen dieser Partner oder Konferenzsponsoren behandelt.
- Bildung und Schulung – Wenn Sie sich für einen Zertifizierungskurs oder eine Schulung von Camunda anmelden, verwendet Camunda die personenbezogenen Kunden- und Nutzerdaten, um die Durchführung eines solchen Kurses oder einer solchen Schulung zu erleichtern.
- Einrichten, Verwalten und Support für Konten – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern zur Bereitstellung von Produkten und zur Verwaltung von Kundenkonten, wie z. B. zur Verwaltung von Produkt-Downloads, zur Bereitstellung von Beratung, Support und Empfehlungen sowie zum Versenden kontobezogener Mitteilungen.
- Kundenerfahrung verwalten – Camunda verwendet personenbezogene Daten von Kunden und Nutzern, um genaue Kontakt- und Katalogisierungsdaten zu pflegen, Support zu liefern und Produkte, Dienstleistungen und Funktionen anzubieten.
- Marketing und Werbung – Camunda kann personenbezogene Daten von Kunden oder Nutzern verwenden, um Werbung in Übereinstimmung mit den Datenschutzeinstellungen der Kunden und Nutzer sowie mit dem anwendbaren Recht bereitzustellen, und kann einige Informationen an Marketing-Dienstleister weitergeben, um Werbung zu präsentieren, die von Interesse sein könnte, was mit Tools zur automatischen Datenerhebung geschehen kann. Weitere Informationen dazu finden Sie in derCookie-Richtlinie von Camunda.
- Erleichterung und Evaluierung der Nutzung des Internetauftritts – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern, um den Internetauftritt bereitzustellen, die Nutzung des Internetauftritts zu erleichtern, wie beispielsweise Navigation, Anmeldung und Erhöhung der Sicherheit, um damit die Qualität zu verbessern, die Antwortquoten der Seiten auszuwerten und den Inhalt zu personalisieren.
- Geschäftsbetrieb – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern zur Durchführung der gewöhnlichen Geschäftsvorgänge, wie z. B. Unternehmensforschung, Unternehmensberichte, Mitarbeiterschulungen, Qualitätssicherung und allgemeine Öffentlichkeitsarbeit.
- Sicherheit – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern, um die Integrität und Sicherheit von Internetauftritt, Produkten und Dienstleistungen aufrechtzuerhalten, um Sicherheitsbedrohungen, Betrug oder andere kriminelle und böswillige Aktivitäten, die Kunden- oder Nutzerdaten gefährden könnten, zu verhindern und zu erkennen.
- Soziale Netzwerke Dritter – Camunda kann personenbezogene Daten zur Interaktion mit Kunden oder Nutzern in sozialen Netzwerken Dritter verwenden (vorbehaltlich der Nutzungsbedingungen dieses Netzwerks).
- Forschung und Innovation – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern, um mit Hilfe von Forschungs- und Entwicklungstools neue Produkte, Funktionen und Dienstleistungen zu entwickeln.
- Einhaltung von Gesetzen – Camunda verwendet personenbezogene Daten von Kunden und Nutzern, soweit dies erforderlich ist, um den geltenden Gesetzen, Vorschriften sowie staatlichen und Strafverfolgungsanforderungen gerecht zu werden.
- Andere legitime Geschäftszwecke – Wir können personenbezogene Daten verwenden, wenn dies für andere legitime Zwecke erforderlich ist, wie zum Beispiel zum Schutz der vertraulichen und geschützten Informationen von Camunda.
Wie Camunda Daten weitergibt
Camunda gibt personenbezogene Kunden- und Nutzerdaten an die folgenden Parteien weiter, sofern entsprechende vertragliche Verpflichtungen bestehen:
Camunda-Unternehmen – Camunda kann personenbezogene Daten von Kunden und Nutzern an andere Camunda-Gesellschaften in den USA und weltweit für die in dieser Datenschutzerklärung genannten Zwecke übermitteln. Camunda schützt personenbezogene Daten gemäß dieser Richtlinie überall dort, wo sie verarbeitet werden, und ergreift geeignete Maßnahmen zum Schutz personenbezogener Daten nach geltendem Recht, einschließlich der Umsetzung der Standardvertragsklauseln der Europäischen Kommission und der Berufung auf die Angemessenheitsentscheidungen der Europäischen Kommission über bestimmte Länder, soweit anwendbar, für Datenübermittlungen aus dem EWR in die Vereinigten Staaten und andere Länder.
Dienstanbieter – Camunda kann personenbezogene Kunden- und Nutzerdaten an Dritte, wie z. B. Verkäufer, Berater, Agenturen und andere Dienstleistungsanbieter, z. B. IT- und Systemadministration, zum Zwecke der Verarbeitung von Transaktionen, für Marketing und Forschung, gezielte Werbung, Schulung, Kundensupport und Datenanreicherung, wie unten beschrieben, weitergeben. Die Dienstanbieter von Camunda sind vertraglich verpflichtet, die erhaltenen personenbezogenen Daten zu schützen, und es ist ihnen untersagt, personenbezogene Daten zu einem anderen Zweck zu verwenden als zur Durchführung der von Camunda beauftragten Dienstleistungen. Diese Dienstleistungsanbieter können außerhalb des EWR, in den USA oder an anderen Standorten weltweit ansässig sein. Camunda schützt personenbezogene Daten gemäß dieser Richtlinie überall dort, wo sie verarbeitet werden, und ergreift geeignete Maßnahmen zum Schutz personenbezogener Daten nach geltendem Recht, einschließlich der Umsetzung der Standardvertragsklauseln der Europäischen Kommission und der Berufung auf die Angemessenheitsentscheidungen der Europäischen Kommission über bestimmte Länder, soweit anwendbar, für Datenübermittlungen aus dem EWR in die Vereinigten Staaten und andere Länder.
Zuständige Behörden – Camunda kann personenbezogene Daten von Kunden und Nutzern weitergeben, wenn in gutem Glauben davon ausgegangen wird, dass Camunda: (i) auf berechtigte Anfragen von Strafverfolgungsbehörden, Aufsichtsbehörden, Gerichten und anderen öffentlichen Behörden entsprechend reagiert; (ii) Gesetze, Vorschriften, Vorladungen oder Gerichtsbeschlüsse befolgt; (iii) Untersuchungen durchführt und bei der Verhinderung von Sicherheitsbedrohungen, Betrug oder anderen kriminellen oder böswilligen Aktivitäten hilft; (iv) die Rechte und das Eigentum von Camunda und ihren Tochtergesellschaften durchsetzt/schützt; oder (v) die Rechte oder die persönliche Sicherheit der Mitarbeiter von Camunda und ihren Tochtergesellschaften sowie Dritter auf oder unter Verwendung von Eigentum von Camunda in Übereinstimmung mit den Anforderungen des anwendbaren Rechts schützt.
Rechtliche Grundlagen der Datenverarbeitung
Camunda verwendet personenbezogene Daten von Kunden und Benutzern ausschließlich in rechtmäßiger, ersichtlicher und angemessener Weise und verarbeitet die Daten nur unter den folgenden Bedingungen gemäß den angeführten Rechtsgrundlagen
- Camunda verarbeitet Daten gemäß Art. 6 I a DSGVO ausschließlich in Übereinstimmung mit den spezifischen widerruflichen Einwilligungen des Nutzers;
- Camunda verarbeitet die Daten gemäß Art. 6 I b DSGVO nur dann, wenn dies zur Vorbereitung, zum Abschluss oder zur Erfüllung eines Vertrages erforderlich ist;
- die Verarbeitung erfolgt gemäß Art. 6 I c DSGVO, d. h. nur, wenn sie zur Erfüllung der gesetzlichen Verpflichtungen erforderlich ist;
- die Verarbeitung erfolgt gemäß Art. 6 I d DSGVO, d. h. nur dann, wenn dies für den Schutz der grundlegenden Interessen von Kunden und Benutzern oder sonstiger Personen erforderlich ist; und
- soweit es für die berechtigten Interessen von Camunda im Einklang mit Art. 6 I f DSGVO, wie z.B. Management der Kundenerfahrung, Erleichterung und Bewertung der Nutzung von Internetauftritt, Geschäftsbetrieb, Marketing und Werbung (falls zutreffend), Forschung, Innovation oder Sicherheit erforderlich ist.
Aufbewahrung von Daten
Camunda bewahrt personenbezogene Daten, die in Verbindung mit dem Online- und Offline-Auftritt erhoben werden, so lange auf, wie dies zur Erfüllung der in dieser Datenschutzrichtlinie dargelegten Zwecke erforderlich ist oder sofern ein ständiger, legitimer Geschäftsbedarf besteht.
Internationale Datenübermittlungen
Die personenbezogenen Daten eines Benutzers können auch in Länder übermittelt und dort abgerufen, gespeichert und verarbeitet werden, die nicht mit dem Land identisch sind, in dem die Person wohnt. Als international tätiges Unternehmen verarbeitet Camunda personenbezogene Daten in Ländern außerhalb des Europäischen Wirtschaftsraums („EWR“), einschließlich der USA. Diese Länder können Datenschutzgesetze haben, die sich von den Gesetzen des Landes, in dem die Person wohnt, unterscheiden. Wir haben angemessene Sicherheitsvorkehrungen getroffen, damit solche personenbezogenen Daten in Übereinstimmung mit dieser Richtlinie geschützt bleiben, und wir haben angemessene Mechanismen zum Schutz personenbezogener Daten in Vereinbarungen mit den Dienstleistern von Camunda eingerichtet, wie z. B. die Verwendung der Standardvertragsklauseln der EU-Kommission gemäß Art. 46 Abs. 2 Buchstabe c DSGVO.
Datenschutzrechte und Wahlmöglichkeiten
Die Nutzer haben die folgenden Rechte:
- Sie können Auskunft über die von Camunda gespeicherten personenbezogenen Daten verlangen.
- Sie können die Berichtigung, Löschung und Einschränkung der Verarbeitung von personenbezogenen Daten verlangen.
- Sie können sich bei Camunda über die Verarbeitung personenbezogener Daten beschweren.
- Sie können der Verarbeitung personenbezogener Daten jederzeit widersprechen, wobei Camunda keine personenbezogenen Daten mehr verarbeitet, es sei denn, es liegen zwingende schutzwürdige Gründe vor, die die Kunden- oder Nutzerinteressen überwiegen,
- Sie können sich bei jeder Datenschutzaufsichtsbehörde, insbesondere in dem Mitgliedstaat, in dem der Kunde oder Nutzer ansässig ist, beschweren, wenn der Verdacht besteht, dass die Verarbeitung von Daten gegen die DSGVO oder sonstige Datenschutzgesetze verstößt.
Auf Verlangen des Kunden oder Nutzers und im Rahmen der gesetzlichen Bestimmungen
- gibt Camunda Auskunft darüber, welche personenbezogenen Daten gespeichert sind;
- ändert oder berichtigt Camunda die personenbezogenen Daten oder alle früheren Datenschutzeinstellungen, die der Kunde oder Nutzer ausgewählt hat;
- und/oder löscht Camunda personenbezogene Daten.
Zur Wahrnehmung Ihrer Rechte wenden Sie sich bitte über unsere Webform an Camunda. Camunda bemüht sich in angemessenem Umfang, personenbezogene Daten bei Bedarf zu löschen, und bewahrt die Aufzeichnungen auf, die zur Erfüllung behördlicher Auflagen oder zur Einhaltung von geltenden Gesetzen auf Bundes-, Landes- oder kommunaler Ebene erforderlich sind. Soweit gesetzlich zulässig, kann Camunda die Bearbeitung von Anfragen ablehnen, die sich zu häufig wiederholen oder systematisch erfolgen, einen unangemessenen technischen Aufwand erfordern oder die Privatsphäre anderer gefährden.
Kann Camunda Ihre Bedenken nicht ausräumen, haben die Nutzer das Recht, sich an ihre örtliche Datenschutzaufsichtsbehörde zu wenden oder einen Rechtsbehelf bei Gericht einzulegen, wenn die Nutzer der Meinung sind, dass ihren Anträgen auf Ausübung ihrer Datenschutzrechte nicht stattgegeben wurde.
Datenschutzrechte in Kalifornien
Weitere Informationen über die Datenschutzrechte von Einwohnern Kaliforniens und andere erforderliche Offenlegungen finden Sie unter Spezifische Datenschutzrichtlinie für Kalifornien
Sicherheit
Camunda setzt sich für den Schutz der Sicherheit personenbezogener Daten ein. Wir setzen geeignete technische und organisatorische Mittel ein, um personenbezogene Daten vor unbefugtem Zugriff, unbefugter Nutzung oder Offenlegung zu schützen. Trotz dieser Maßnahmen kann Camunda Sicherheitsrisiken im Zusammenhang mit personenbezogenen Daten nicht ausschließen, und Fehler und Sicherheitsverletzungen können auftreten. Bei Sicherheitsfragen wenden Sie sich bitte gemäß den Anweisungen in unserem Trust Center an uns.
Änderungen dieser Richtlinie
Diese Datenschutzrichtlinie wird von Zeit zu Zeit überarbeitet. Bei wesentlichen Änderungen an der Art und Weise, wie Camunda personenbezogene Daten verwendet, werden entsprechende Maßnahmen zur Information der Kunden ergriffen, die der Bedeutung der vorgenommenen Änderungen entsprechen, und Camunda wird Sie über alle wesentlichen Änderungen der Richtlinie informieren, sofern dies nach den geltenden Datenschutzgesetzen erforderlich ist.
Datum des Inkrafttretens: 12. Oktober 2020
Änderungsprotokoll
Februar 2023: Diese Datenschutzrichtlinie wurde aktualisiert, um ein neues Webformular einzuführen, das die Kontaktaufnahme mit Camunda bei datenschutzrelevanten Fragen erleichtert.
frühere Versionen
Oktober 2020: Diese Datenschutzrichtlinie wurde aktualisiert und neu strukturiert. Insbesondere haben wir die Informationen über die Daten aktualisiert, die Camunda während der Nutzung der Produkte von Camunda durch Nutzer und Kunden erhebt. Darüber hinaus stellen wir nun die für die jeweiligen betroffenen Personen relevanten Informationen in nutzerspezifischen Richtlinien (wie z. B. Allgemeine Datenschutzrichtlinie, Datenschutzrichtlinie für Bewerber, Cookie-Richtlinie, Datenschutzrichtlinie für Kalifornien und Produktdatenschutzrichtlinie) dar, so dass die Informationen benutzerfreundlich präsentiert werden und leicht zugänglich sind.
Juli 2020: Diese Datenschutzerklärung wurde vollständig überarbeitet, um den Anforderungen des CCPA zu entsprechen, und wurde erstmals am 2. Juli 2020 in dieser Form veröffentlicht.
Mai 2020: Diese Datenschutzerklärung wurde aktualisiert, um die Datenverarbeitung der Camunda Cloud zu beschreiben.
April 2020: Diese Datenschutzerklärung wurde aktualisiert, um die Datenverarbeitung der Camunda Cloud sowie Aktualisierungen der Datenverarbeitung während des Bewerbungsprozesses zu beschreiben.
Januar 2020: Diese Datenschutzerklärung wurde aktualisiert, um die Datenverarbeitung von Camunda Modeler zu beschreiben.
September 2019: Diese Datenschutzerklärung wurde aktualisiert, um die Nutzung unserer Drittanbieter GoTo Meeting (Planung und Durchführung von Webinaren) und Auth0 (Passwortverwaltung) zu beschreiben.
April 2019: Diese Datenschutzerklärung wurde aktualisiert, um die Nutzung unserer Drittanbieter Stripe (Abrechnung von Veranstaltungen) und Bizzabo (Veranstaltungsmanagement-Plattform) zu beschreiben.
August 2018: Diese Datenschutzerklärung wurde aktualisiert, um die Verwendung von Cookies und Zählpixeln zu beschreiben und die Implementierung unserer neuen Marketingtools HubSpot und Clearbit widerzuspiegeln.
Mai 2018: Diese Datenschutzerklärung wurde vollständig überarbeitet, um den Anforderungen der DSGVO zu entsprechen, und wurde in dieser Form erstmals am 25. Mai 2018 veröffentlicht.
Effective April 7th 2023 to May 16th 2025
DownloadTable of Contents
Diese Allgemeine Datenschutzrichtlinie („Richtlinie“) erklärt, wie die Camunda Services GmbH und ihre Tochtergesellschaften („Camunda“, „wir“, „uns“ und „unser“) personenbezogene Daten erhebt, verwendet, teilt und verarbeitet.
Im Folgenden wird beschrieben, wie Camunda personenbezogene Daten im Rahmen der Geschäfte und Geschäftsbeziehungen mit Kunden, Nutzern, Besuchern, Bewerbern, Veranstaltungsteilnehmern etc. verarbeitet, erhebt, verwaltet, verwendet und teilt. Personenbezogene Daten sind in der Datenschutz-Grundverordnung (DSGVO) als „sämtliche Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person beziehen“, definiert.
Interaktionsspezifische Richtlinien
Camunda ergänzt diese allgemeine Datenschutzrichtlinie durch die folgenden interaktionsspezifischen Richtlinien:
Datenschutzrichtlinie für Bewerber – Diese Richtlinie erklärt, wie Camunda personenbezogene Daten von Bewerbern verarbeitet, die sich auf Stellen bei Camunda bewerben.
Spezifische Datenschutzrichtlinie für Kalifornien – Dies ist eine Datenschutzrichtlinie, die sich speziell an kalifornische Einwohner richtet.
Cookie-Richtlinie – Diese Richtlinie erklärt, wie Camunda Cookies und ähnliche Tracking-Tools verwendet.
Datenschutzrichtlinie für Produkte – Diese Richtlinie bezieht sich auf die Daten, die Camunda im Zusammenhang mit Kundeneinsätzen von Camunda-Produkten und -Dienstleistungen erhebt und verwendet.
Geltungsbereich
Diese Allgemeine Datenschutzerklärung erläutert die Nutzerrechte und Wahlmöglichkeiten im Zusammenhang mit den personenbezogenen Daten, die Camunda erhebt:
- wenn Nutzer eine der Websites, Social-Media-Seiten, Foren, Online-Veranstaltungen, Online-Werbungen oder Marketingmitteilungen von Camunda (im Folgenden als „Internetauftritt“ bezeichnet) besuchen oder nutzen,
- wenn Nutzer die Büros, Veranstaltungen, Verkaufs-, Marketing- oder sonstige Angebote von Camunda, die nicht mit dem Web in Verbindung stehen, wahrnehmen, interagieren oder sie nutzen (diese werden im Folgenden als „Auftritt“ bezeichnet).
Diese allgemeine Datenschutzrichtlinie gilt nicht:
Für Bewerberdaten: Siehe Applicant Privacy Policy von Camunda.
Die automatische Erhebung von Daten von Camunda-Produkten und -Dienstleistungen: Siehe Product Privacy Policy von Camunda.
Servicedaten: Bestimmte Produkte von Camunda ermöglichen es der Kundenorganisation, Inhalte zu nutzen oder hochzuladen und an die Produkte zu übermitteln („Servicedaten“). Diese Datenschutzrichtlinie gilt nicht für Servicedaten, einschließlich aller personenbezogenen Daten über Kunden, die in Servicedaten enthalten sein können. Fragen zur Servicedatenverarbeitung sind direkt an die Kundenorganisation zu richten.
Organisatorische Verwendung: Wenn Kunden Camundas Produkte oder -Dienstleistungen im Namen einer Organisation (z. B. eines Arbeitgebers) verwenden, wird die Nutzung durch den Kunden von der Organisation des Kunden gemäß deren Richtlinien zur Verwendung und zum Schutz personenbezogener Daten verwaltet und bereitgestellt. Bitte lesen Sie dazu die Datenschutzrichtlinien der entsprechenden Organisation und wenden Sie sich bei Anfragen direkt an die Organisation.
Sofern nicht anders angegeben, bestimmt Camunda die Zwecke und Mittel zur Verarbeitung personenbezogener Daten entsprechend den Angaben in dieser Datenschutzerklärung.
Wie Sie Camunda kontaktieren können
Die Camunda Services GmbH ist der Verantwortliche im Sinne der DSGVO und sonstiger Datenschutzgesetze oder -bestimmungen, die in den Mitgliedstaaten der Europäischen Union gelten.
Sollten Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, stehen Ihnen drei Wege offen, sich an Camunda zu wenden:
Über unsere Webform
per Post:
Über unsere Webform
per Post:
Camunda Services GmbH
Zossener Straße 55-58
10961 Berlin
Zossener Straße 55-58
10961 Berlin
oder telefonisch unter der Nummer: +030 664 04 09 – 00
Camunda hat einen externen Datenschutzbeauftragten für deutsche betroffene Personen ernannt.
Der Datenschutzbeauftragte von Camunda ist:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Bei Fragen zur Erhebung, Speicherung, Weitergabe und Verwendung von Daten oder zur Ausübung der Rechte der betroffenen Persone können Sie sich auch an unseren Datenschutzbeauftragten wenden unter:
Daten, die Camunda erhebt & wie sie erhoben werden
Camunda erhebt personenbezogene Daten und weitere Informationen von Nutzern oder Kunden direkt, mit automatisierten Mitteln und über Dritte.
Personenbezogene Daten, die Nutzer und Kunden direkt angeben: Camunda erhebt personenbezogene Daten, wenn Nutzer oder Kunden diese freiwillig zur Verfügung stellen, wozu auch Dienstleister oder Dritte gehören, die diese Daten im Auftrag von Camunda erheben. Dies kann beispielsweise bei der Anmeldung für unseren Newsletter, beim Herunterladen von Whitepapers, beim Ausfüllen von Kontaktformularen, bei der Teilnahme an Webinaren, Schulungen und Veranstaltungen, bei der Bestellung, bei der Registrierung eines Produkts, beim Ausfüllen von Umfragen, beim Schreiben in unserem Forum oder bei der Anforderung von Informationen über Produkte, Dienstleistungen und Veranstaltungen von Camunda durch Vertriebsmitarbeiter oder Kundenbetreuer der Fall sein.
Die von Camunda erhobenen personenbezogenen Daten können persönliche Kontaktinformationen, berufliche Informationen, wie Name, Name des Arbeitgebers, Adresse oder Stellenbezeichnung, Telefonnummer oder E-Mail-Adresse, Nutzer-IDs, Kontaktpräferenzen und Rechnungs-/Transaktionsdaten umfassen.
Camunda erhebt auch personenbezogene Daten, die von den Nutzern beim Ausfüllen von „Freitext“-Feldern in Formularen wie Umfrage-Feedback oder Veranstaltungsanmeldung, auf Message Boards, Chat-Funktionen und anderen Diensten oder Plattformen, einschließlich Diensten und Plattformen Dritter, von Nutzern eingegeben werden.
In dieser Kategorie bezieht Camunda personenbezogene Daten in der Regel aus den folgenden Quellen:
- Kontaktaufnahme mit uns per Telefon, E-Mail oder anderweitig – Wenn Nutzer mit Camunda über unsere Kontaktseite kommunizieren, Umfragen ausfüllen oder alle „freien“ Felder ausfüllen, geben Nutzer Inhalt, den vollständigen Namen, die E-Mail-Adresse, die Stellenbezeichnung, den Firmennamen, die Branche, die Telefonnummer und die Anzahl der Mitarbeiter des Unternehmens an.
- Rundbriefe und Whitepapers – Camunda bietet den Nutzern die Möglichkeit, sich über unsere Newsletter und Whitepapers über die bevorstehenden Camunda-Treffen und Entwicklungen im Bereich der Workflow-Automation auf dem Laufenden zu halten.
- Schulungen, Veranstaltungen und Webinare – Wenn sich Kunden über unsere Website für unsere Schulungen, Veranstaltungen oder Webinare anmelden, erhebt Camunda personenbezogene Daten, um diese Dienste bereitzustellen und zu verwalten.
- Forum – Nutzer haben die Möglichkeit, sich mit anderen Interessenten über Fragen zu Camundas Software auszutauschen. Wenn sich ein Nutzer für das Forum registriert, speichert Camunda die E-Mail-Adresse und Nutzernamen. Wenn ein Nutzer einen Beitrag in einem Forum postet, ist der Beitrag für die Öffentlichkeit sichtbar. Der von ihm eingereichte Beitrag kann von jedem Interessierten zusammen mit dem Zeitpunkt der Veröffentlichung heruntergeladen werden. Die E-Mail-Adresse des Nutzers wird jedoch nicht veröffentlicht.
- Seiten sozialer Medien – Durch die Nutzung von sozialen Medien und/oder anderen Websites wie Twitter, GitHub, Stack overflow, Vimeo, Facebook oder LinkedIn durch die Nutzer, je nach den Einstellungen der Nutzer oder den Datenschutzrichtlinien dieser Websites. Um die Einstellungen dieser Dienste zu ändern, lesen Sie bitte die jeweiligen Datenschutzhinweise.
- Karriere – Wenn Bewerber einen Lebenslauf oder andere Informationen über unsere Karriereseite einreichen, https://camunda.com/career/. Wenn Sie uns über die Website per E-Mail kontaktieren, können wir Ihre E-Mail-Adresse und Ihre Korrespondenz aufzeichnen und diese Informationen verwenden, um Ihnen zu antworten. Wir können auch Lebensläufe von Personalvermittlern, Camunda-Mitarbeitern oder sonstigen Dritten erhalten. Siehe Datenschutzerklärung des Antragstellers von Camunda für weitere Informationen.
Automatisch erhobene Daten: Camunda verwendet integrierte Technologien wie Cookies, Zählpixel und eingebettete URLs, um eine automatisierte Datenerhebung zu ermöglichen.
- Internetauftritt – Camunda erhebt automatisch Informationen über personenbezogene Daten, wenn Nutzer oder Kunden Internetauftritte nutzen, darauf zugreifen oder mit ihnen interagieren, einschließlich eindeutiger Identifikationsnummern, der Internet-Protokoll (IP)-Adresse, der Hardware-Einstellungen, der Browser-Sprache, des Datum und der Uhrzeit der Anfrage und der Weiterleitung der URL, des allgemeinen geographischen Standortes usw. Weitere Informationen finden Sie in der Cookie-Richtlinie von Camunda.
- Camunda-Produkte – Um die Stabilität und Funktionalität unserer Produkte zu verbessern und zu gewährleisten, erheben wir technische Daten, die in manchen Fällen auch als personenbezogene Daten eingestuft werden können. Wir verwenden diese personenbezogenen Daten auch zur Analyse von Trends und Nutzungsmustern. Siehe Datenschutzrichtlinie für Produkte von Camunda.
Daten aus Drittquellen: Camunda kann Daten von verbundenen Unternehmen der Camunda-Unternehmensgruppe, über Partner von Camunda oder andere Drittparteien erwerben, die verwendet werden, um die zur Verfügung gestellten Informationen nützlicher zu gestalten, z.B. geografische Informationen, die mit der IP-Adresse erhoben wurden, die, wie oben erwähnt, automatisch erhoben wurde. Daten können über einen eindeutigen Identifikator, z. B. ein Cookie oder eine Kontonummer, verknüpft werden.
Cookies und automatische Datenerhebung auf der Website
Detaillierte Informationen über die Verwendung von Cookies und von automatischen Datenerhebungswerkzeugen (First-Party-Cookies, Third-Party-Cookies, Zählpixel und APIs) finden Sie in der Cookie-Richtlinie von Camunda.
Wie Camunda die erhobenen Daten nutzt
Camunda kann Kunden- oder Nutzerdaten für die folgenden Zwecke verwenden:
- Kommunikation und Transaktionsverarbeitung – Camunda verwendet personenbezogene Kunden- und Nutzerdaten zu Kommunikationszwecken, um auf Kunden- und Nutzeranfragen zu antworten, Transaktionen zu bearbeiten und die angeforderten Informationen bereitzustellen, zu denen Finanz-, Kreditkarten- und Zahlungsinformationen gehören können.
- Anbieten und Erleichtern bestimmter Dienstleistungen und Interaktionsmöglichkeiten – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern, um bestimmte Dienstleistungen anzubieten, z. B. die Bereitstellung eines Forums, in dem sich Nutzer über die Produkte von Camunda austauschen können, oder das Herunterladen von Whitepapers oder das Anbieten eines Newsletters.
- Konferenzen und Veranstaltungen – Camunda und seine Partner können personenbezogene Daten von Kunden und Nutzern zur Durchführung von und zur Kommunikation über Veranstaltungen und Post-Events verwenden. Dies kann auch den Austausch von Teilnahmeinformationen mit Konferenzsponsoren und Partnern umfassen, sofern dies gesetzlich zulässig ist. Fordert ein Partner oder Konferenzsponsor direkt personenbezogene Daten von Kunden oder Nutzern an, so werden die Informationen gemäß den Datenschutzbestimmungen dieser Partner oder Konferenzsponsoren behandelt.
- Bildung und Schulung – Wenn Sie sich für einen Zertifizierungskurs oder eine Schulung von Camunda anmelden, verwendet Camunda die personenbezogenen Kunden- und Nutzerdaten, um die Durchführung eines solchen Kurses oder einer solchen Schulung zu erleichtern.
- Einrichten, Verwalten und Support für Konten – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern zur Bereitstellung von Produkten und zur Verwaltung von Kundenkonten, wie z. B. zur Verwaltung von Produkt-Downloads, zur Bereitstellung von Beratung, Support und Empfehlungen sowie zum Versenden kontobezogener Mitteilungen.
- Kundenerfahrung verwalten – Camunda verwendet personenbezogene Daten von Kunden und Nutzern, um genaue Kontakt- und Katalogisierungsdaten zu pflegen, Support zu liefern und Produkte, Dienstleistungen und Funktionen anzubieten.
- Marketing und Werbung – Camunda kann personenbezogene Daten von Kunden oder Nutzern verwenden, um Werbung in Übereinstimmung mit den Datenschutzeinstellungen der Kunden und Nutzer sowie mit dem anwendbaren Recht bereitzustellen, und kann einige Informationen an Marketing-Dienstleister weitergeben, um Werbung zu präsentieren, die von Interesse sein könnte, was mit Tools zur automatischen Datenerhebung geschehen kann. Weitere Informationen dazu finden Sie in derCookie-Richtlinie von Camunda.
- Erleichterung und Evaluierung der Nutzung des Internetauftritts – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern, um den Internetauftritt bereitzustellen, die Nutzung des Internetauftritts zu erleichtern, wie beispielsweise Navigation, Anmeldung und Erhöhung der Sicherheit, um damit die Qualität zu verbessern, die Antwortquoten der Seiten auszuwerten und den Inhalt zu personalisieren.
- Geschäftsbetrieb – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern zur Durchführung der gewöhnlichen Geschäftsvorgänge, wie z. B. Unternehmensforschung, Unternehmensberichte, Mitarbeiterschulungen, Qualitätssicherung und allgemeine Öffentlichkeitsarbeit.
- Sicherheit – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern, um die Integrität und Sicherheit von Internetauftritt, Produkten und Dienstleistungen aufrechtzuerhalten, um Sicherheitsbedrohungen, Betrug oder andere kriminelle und böswillige Aktivitäten, die Kunden- oder Nutzerdaten gefährden könnten, zu verhindern und zu erkennen.
- Soziale Netzwerke Dritter – Camunda kann personenbezogene Daten zur Interaktion mit Kunden oder Nutzern in sozialen Netzwerken Dritter verwenden (vorbehaltlich der Nutzungsbedingungen dieses Netzwerks).
- Forschung und Innovation – Camunda verwendet die personenbezogenen Daten von Kunden und Nutzern, um mit Hilfe von Forschungs- und Entwicklungstools neue Produkte, Funktionen und Dienstleistungen zu entwickeln.
- Einhaltung von Gesetzen – Camunda verwendet personenbezogene Daten von Kunden und Nutzern, soweit dies erforderlich ist, um den geltenden Gesetzen, Vorschriften sowie staatlichen und Strafverfolgungsanforderungen gerecht zu werden.
- Andere legitime Geschäftszwecke – Wir können personenbezogene Daten verwenden, wenn dies für andere legitime Zwecke erforderlich ist, wie zum Beispiel zum Schutz der vertraulichen und geschützten Informationen von Camunda.
Wie Camunda Daten weitergibt
Camunda gibt personenbezogene Kunden- und Nutzerdaten an die folgenden Parteien weiter, sofern entsprechende vertragliche Verpflichtungen bestehen:
Camunda-Unternehmen – Camunda kann personenbezogene Daten von Kunden und Nutzern an andere Camunda-Gesellschaften in den USA und weltweit für die in dieser Datenschutzerklärung genannten Zwecke übermitteln. Camunda schützt personenbezogene Daten gemäß dieser Richtlinie überall dort, wo sie verarbeitet werden, und ergreift geeignete Maßnahmen zum Schutz personenbezogener Daten nach geltendem Recht, einschließlich der Umsetzung der Standardvertragsklauseln der Europäischen Kommission und der Berufung auf die Angemessenheitsentscheidungen der Europäischen Kommission über bestimmte Länder, soweit anwendbar, für Datenübermittlungen aus dem EWR in die Vereinigten Staaten und andere Länder.
Dienstanbieter – Camunda kann personenbezogene Kunden- und Nutzerdaten an Dritte, wie z. B. Verkäufer, Berater, Agenturen und andere Dienstleistungsanbieter, z. B. IT- und Systemadministration, zum Zwecke der Verarbeitung von Transaktionen, für Marketing und Forschung, gezielte Werbung, Schulung, Kundensupport und Datenanreicherung, wie unten beschrieben, weitergeben. Die Dienstanbieter von Camunda sind vertraglich verpflichtet, die erhaltenen personenbezogenen Daten zu schützen, und es ist ihnen untersagt, personenbezogene Daten zu einem anderen Zweck zu verwenden als zur Durchführung der von Camunda beauftragten Dienstleistungen. Diese Dienstleistungsanbieter können außerhalb des EWR, in den USA oder an anderen Standorten weltweit ansässig sein. Camunda schützt personenbezogene Daten gemäß dieser Richtlinie überall dort, wo sie verarbeitet werden, und ergreift geeignete Maßnahmen zum Schutz personenbezogener Daten nach geltendem Recht, einschließlich der Umsetzung der Standardvertragsklauseln der Europäischen Kommission und der Berufung auf die Angemessenheitsentscheidungen der Europäischen Kommission über bestimmte Länder, soweit anwendbar, für Datenübermittlungen aus dem EWR in die Vereinigten Staaten und andere Länder.
Zuständige Behörden – Camunda kann personenbezogene Daten von Kunden und Nutzern weitergeben, wenn in gutem Glauben davon ausgegangen wird, dass Camunda: (i) auf berechtigte Anfragen von Strafverfolgungsbehörden, Aufsichtsbehörden, Gerichten und anderen öffentlichen Behörden entsprechend reagiert; (ii) Gesetze, Vorschriften, Vorladungen oder Gerichtsbeschlüsse befolgt; (iii) Untersuchungen durchführt und bei der Verhinderung von Sicherheitsbedrohungen, Betrug oder anderen kriminellen oder böswilligen Aktivitäten hilft; (iv) die Rechte und das Eigentum von Camunda und ihren Tochtergesellschaften durchsetzt/schützt; oder (v) die Rechte oder die persönliche Sicherheit der Mitarbeiter von Camunda und ihren Tochtergesellschaften sowie Dritter auf oder unter Verwendung von Eigentum von Camunda in Übereinstimmung mit den Anforderungen des anwendbaren Rechts schützt.
Rechtliche Grundlagen der Datenverarbeitung
Camunda verwendet personenbezogene Daten von Kunden und Benutzern ausschließlich in rechtmäßiger, ersichtlicher und angemessener Weise und verarbeitet die Daten nur unter den folgenden Bedingungen gemäß den angeführten Rechtsgrundlagen
- Camunda verarbeitet Daten gemäß Art. 6 I a DSGVO ausschließlich in Übereinstimmung mit den spezifischen widerruflichen Einwilligungen des Nutzers;
- Camunda verarbeitet die Daten gemäß Art. 6 I b DSGVO nur dann, wenn dies zur Vorbereitung, zum Abschluss oder zur Erfüllung eines Vertrages erforderlich ist;
- die Verarbeitung erfolgt gemäß Art. 6 I c DSGVO, d. h. nur, wenn sie zur Erfüllung der gesetzlichen Verpflichtungen erforderlich ist;
- die Verarbeitung erfolgt gemäß Art. 6 I d DSGVO, d. h. nur dann, wenn dies für den Schutz der grundlegenden Interessen von Kunden und Benutzern oder sonstiger Personen erforderlich ist; und
- soweit es für die berechtigten Interessen von Camunda im Einklang mit Art. 6 I f DSGVO, wie z.B. Management der Kundenerfahrung, Erleichterung und Bewertung der Nutzung von Internetauftritt, Geschäftsbetrieb, Marketing und Werbung (falls zutreffend), Forschung, Innovation oder Sicherheit erforderlich ist.
Aufbewahrung von Daten
Camunda bewahrt personenbezogene Daten, die in Verbindung mit dem Online- und Offline-Auftritt erhoben werden, so lange auf, wie dies zur Erfüllung der in dieser Datenschutzrichtlinie dargelegten Zwecke erforderlich ist oder sofern ein ständiger, legitimer Geschäftsbedarf besteht.
Internationale Datenübermittlungen
Die personenbezogenen Daten eines Benutzers können auch in Länder übermittelt und dort abgerufen, gespeichert und verarbeitet werden, die nicht mit dem Land identisch sind, in dem die Person wohnt. Als international tätiges Unternehmen verarbeitet Camunda personenbezogene Daten in Ländern außerhalb des Europäischen Wirtschaftsraums („EWR“), einschließlich der USA. Diese Länder können Datenschutzgesetze haben, die sich von den Gesetzen des Landes, in dem die Person wohnt, unterscheiden. Wir haben angemessene Sicherheitsvorkehrungen getroffen, damit solche personenbezogenen Daten in Übereinstimmung mit dieser Richtlinie geschützt bleiben, und wir haben angemessene Mechanismen zum Schutz personenbezogener Daten in Vereinbarungen mit den Dienstleistern von Camunda eingerichtet, wie z. B. die Verwendung der Standardvertragsklauseln der EU-Kommission gemäß Art. 46 Abs. 2 Buchstabe c DSGVO.
Datenschutzrechte und Wahlmöglichkeiten
Die Nutzer haben die folgenden Rechte:
- Sie können Auskunft über die von Camunda gespeicherten personenbezogenen Daten verlangen.
- Sie können die Berichtigung, Löschung und Einschränkung der Verarbeitung von personenbezogenen Daten verlangen.
- Sie können sich bei Camunda über die Verarbeitung personenbezogener Daten beschweren.
- Sie können der Verarbeitung personenbezogener Daten jederzeit widersprechen, wobei Camunda keine personenbezogenen Daten mehr verarbeitet, es sei denn, es liegen zwingende schutzwürdige Gründe vor, die die Kunden- oder Nutzerinteressen überwiegen,
- Sie können sich bei jeder Datenschutzaufsichtsbehörde, insbesondere in dem Mitgliedstaat, in dem der Kunde oder Nutzer ansässig ist, beschweren, wenn der Verdacht besteht, dass die Verarbeitung von Daten gegen die DSGVO oder sonstige Datenschutzgesetze verstößt.
Auf Verlangen des Kunden oder Nutzers und im Rahmen der gesetzlichen Bestimmungen
- gibt Camunda Auskunft darüber, welche personenbezogenen Daten gespeichert sind;
- ändert oder berichtigt Camunda die personenbezogenen Daten oder alle früheren Datenschutzeinstellungen, die der Kunde oder Nutzer ausgewählt hat;
- und/oder löscht Camunda personenbezogene Daten.
Zur Wahrnehmung Ihrer Rechte wenden Sie sich bitte über unsere Webform an Camunda. Camunda bemüht sich in angemessenem Umfang, personenbezogene Daten bei Bedarf zu löschen, und bewahrt die Aufzeichnungen auf, die zur Erfüllung behördlicher Auflagen oder zur Einhaltung von geltenden Gesetzen auf Bundes-, Landes- oder kommunaler Ebene erforderlich sind. Soweit gesetzlich zulässig, kann Camunda die Bearbeitung von Anfragen ablehnen, die sich zu häufig wiederholen oder systematisch erfolgen, einen unangemessenen technischen Aufwand erfordern oder die Privatsphäre anderer gefährden.
Kann Camunda Ihre Bedenken nicht ausräumen, haben die Nutzer das Recht, sich an ihre örtliche Datenschutzaufsichtsbehörde zu wenden oder einen Rechtsbehelf bei Gericht einzulegen, wenn die Nutzer der Meinung sind, dass ihren Anträgen auf Ausübung ihrer Datenschutzrechte nicht stattgegeben wurde.
Datenschutzrechte in Kalifornien
Weitere Informationen über die Datenschutzrechte von Einwohnern Kaliforniens und andere erforderliche Offenlegungen finden Sie unter Spezifische Datenschutzrichtlinie für Kalifornien
Sicherheit
Camunda setzt sich für den Schutz der Sicherheit personenbezogener Daten ein. Wir setzen geeignete technische und organisatorische Mittel ein, um personenbezogene Daten vor unbefugtem Zugriff, unbefugter Nutzung oder Offenlegung zu schützen. Trotz dieser Maßnahmen kann Camunda Sicherheitsrisiken im Zusammenhang mit personenbezogenen Daten nicht ausschließen, und Fehler und Sicherheitsverletzungen können auftreten. Bei Sicherheitsfragen wenden Sie sich bitte gemäß den Anweisungen in unserem Trust Center an uns.
Änderungen dieser Richtlinie
Diese Datenschutzrichtlinie wird von Zeit zu Zeit überarbeitet. Bei wesentlichen Änderungen an der Art und Weise, wie Camunda personenbezogene Daten verwendet, werden entsprechende Maßnahmen zur Information der Kunden ergriffen, die der Bedeutung der vorgenommenen Änderungen entsprechen, und Camunda wird Sie über alle wesentlichen Änderungen der Richtlinie informieren, sofern dies nach den geltenden Datenschutzgesetzen erforderlich ist.
Datum des Inkrafttretens: 12. Oktober 2020
Änderungsprotokoll
Februar 2023: Diese Datenschutzrichtlinie wurde aktualisiert, um ein neues Webformular einzuführen, das die Kontaktaufnahme mit Camunda bei datenschutzrelevanten Fragen erleichtert.
frühere Versionen
Oktober 2020: Diese Datenschutzrichtlinie wurde aktualisiert und neu strukturiert. Insbesondere haben wir die Informationen über die Daten aktualisiert, die Camunda während der Nutzung der Produkte von Camunda durch Nutzer und Kunden erhebt. Darüber hinaus stellen wir nun die für die jeweiligen betroffenen Personen relevanten Informationen in nutzerspezifischen Richtlinien (wie z. B. Allgemeine Datenschutzrichtlinie, Datenschutzrichtlinie für Bewerber, Cookie-Richtlinie, Datenschutzrichtlinie für Kalifornien und Produktdatenschutzrichtlinie) dar, so dass die Informationen benutzerfreundlich präsentiert werden und leicht zugänglich sind.
Juli 2020: Diese Datenschutzerklärung wurde vollständig überarbeitet, um den Anforderungen des CCPA zu entsprechen, und wurde erstmals am 2. Juli 2020 in dieser Form veröffentlicht.
Mai 2020: Diese Datenschutzerklärung wurde aktualisiert, um die Datenverarbeitung der Camunda Cloud zu beschreiben.
April 2020: Diese Datenschutzerklärung wurde aktualisiert, um die Datenverarbeitung der Camunda Cloud sowie Aktualisierungen der Datenverarbeitung während des Bewerbungsprozesses zu beschreiben.
Januar 2020: Diese Datenschutzerklärung wurde aktualisiert, um die Datenverarbeitung von Camunda Modeler zu beschreiben.
September 2019: Diese Datenschutzerklärung wurde aktualisiert, um die Nutzung unserer Drittanbieter GoTo Meeting (Planung und Durchführung von Webinaren) und Auth0 (Passwortverwaltung) zu beschreiben.
April 2019: Diese Datenschutzerklärung wurde aktualisiert, um die Nutzung unserer Drittanbieter Stripe (Abrechnung von Veranstaltungen) und Bizzabo (Veranstaltungsmanagement-Plattform) zu beschreiben.
August 2018: Diese Datenschutzerklärung wurde aktualisiert, um die Verwendung von Cookies und Zählpixeln zu beschreiben und die Implementierung unserer neuen Marketingtools HubSpot und Clearbit widerzuspiegeln.
Mai 2018: Diese Datenschutzerklärung wurde vollständig überarbeitet, um den Anforderungen der DSGVO zu entsprechen, und wurde in dieser Form erstmals am 25. Mai 2018 veröffentlicht.
Applicant Privacy Policy
Effective June 25th 2025
DownloadTable of Contents
This Applicant Privacy Policy, hereby referred to as the “Policy,” describes the privacy practices that apply to Camunda Services GmbH and its subsidiaries’, hereby referred to as “Camunda,” “we,” “us” and “our”; collection, use and disclosure of information relating to how an identified or identifiable applicant, hereby referred to as the “Applicant” engage with Camunda for employment or internship opportunities, via any method, as well as how Camunda uses and shares that information.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this Policy please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects. The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH Friedrichstraße 95
10117 Berlin Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Tel.: +49.30.20962282
E-mail: hoeppner@jbbdataconsult.de Web pages: www.jbbdataconsult.de
Personal Data Camunda Collects
In order to process applications, Camunda asks the Applicant to provide Personal Data. This information is provided voluntarily, and the Applicant determines the amount and type of information provided; however, some information may be necessary to complete an evaluation of the application and for the Applicant to be considered as a candidate.
The Applicant usually provides Camunda with personal data, including educational and employment background, contact information, work permit or visa information, and other career opportunities for which the Applicant would like to submit to. This personal data may come in the form of a CV, resume, cover letter, educational transcripts, and employment references.
Camunda does not require any information from the Applicant that the German General Equal Treatment Act (AGG) prohibits or information that would qualify as sensitive personal data under GDPR, including information relating to race, ethnicity, gender, religion
or world-views, disability, age or sexual orientation. Information about illnesses, pregnancy, political views, philosophical or religious convictions, membership of a trade union, physical or mental health or sexual preferences are similarly not to be transferred.
How Camunda Uses Personal Data
Camunda uses Applicant Personal Data (as set out above) in the application and recruitment process for purposes including:
Assessing qualifications, skills, and interests against current Camunda career opportunities;
Verifying the information the Applicant provides and completing reference checks;
Facilitating the recruitment and interview process;
Preparing an offer letter, if applicable;
Complying with applicable laws, regulations, legal processes or enforceable governmental requests, including protecting the rights and property of Camunda, Camunda users, applicants, candidates, employees or the public;
Producing reports related to recruitment metrics;
Managing and improving Camunda’s recruitment processes;
Application data of promising candidates may be kept, for those who opted into the Camunda TalentPool, in order to notify the Applicant of a suitable position.
Information collected during the application and recruitment process will become part of the Applicant’s employment record, if offered and accepted employment with Camunda.
How Camunda Shares Personal Data
Camunda limits access to the Applicant’s Personal Data to only those who need access to perform recruitment tasks and duties, and to third parties who have a legitimate purpose for accessing it such as in the following circumstances:
service providers: Applicant Personal Data may be shared with service providers, agents or other third parties, e.g., recruiters, consultants, and attorneys, when the Applicant applies via Camunda’s online applicant platform, and the data is transferred directly to Camunda’s third party provider, Ashby, Inc.. Camunda requires third parties to protect the information they receive and prohibits them from using the information for their own purposes.
Compliance with laws, regulatory bodies, or government agencies: Camunda may disclose Applicant information when disclosure is necessary or required by law or regulation, to comply with legal process or government requests, or to exercise, establish or defend our legal rights.
With Applicant consent: Camunda may disclose Personal Data for any purpose with the Applicant’s consent.
Legal Basis for Processing Applicant Personal Data
Camunda’s legal bases for processing Applicant Personal Data include:
The purpose of the data processing is to support the decision on whether an applicant is suitable for a post at Camunda and whether a contract of employment can be entered into with them.
The legal base to keep data in the talent pool is Art. 6 I a GDPR.
The legal basis for processing the data after the user has submitted the application is Art. 88 GDPR in conjunction with section 26 of the Federal Data Protection Act (BDSG).
Consistent with specific Applicant consents (e.g. for Camunda’s TalentPool), which the Applicant may revoke at any time in accord with Art. 6 I a GDPR.
As necessary to comply with Camunda’s legal obligations in accord with Art. 6 I c GDPR.
To protect the Applicant’s interests or the interests of others in accord with Art. 6 I d GDPR.
The forwarding of application data to Ashby, Inc. is similarly justified pursuant to Art. 28 GDPR and Art. 6 I f GDPR. As necessary for Camunda’s legitimate interests in considering candidates for current and future employment opportunities in accord with Art. 6 I f GDPR.
For transferring and storing personal data in the US, Camunda will collect a user’s consent in accord with Art. 49 I a GDPR.
Retention of Applicant’s Personal Data
Camunda retains Applicant Personal Data for as long as required to comply with legal obligations, resolve disputes, and to enforce our contractual agreements or as necessary for our legitimate interests.
If the Applicant is successful in their application for a position at Camunda, we retain the information that is provided during the application process, and information about the application process, as part of the Applicant’s employee records.
If the applicant is not offered employment, all application data will be automatically deleted six months after notifying them that their application was unsuccessful, unless the Applicant requests to be in Camunda’s TalentPool to be considered for other roles. Applicant data is stored in Camunda’s TalentPool for a period of up to two years.
The Applicant can withdraw the application, the consent to store their personal data or ask to update their data at any time by contacting Camunda via our webform. Further information on data collection, evaluation and processing of the Applicant’s data by Ashby, Inc. and on their rights in relation to this can be obtained from Ashby, Inc.’s privacy statement, which is available at https://www.ashbyhq.com/resources/privacy.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda may have to access, transfer or process Applicant’s Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 II c GDPR.
We work with the application platform provider Ashby, Inc.. When a user applies for a job at Camunda and uploads application data to the platform, Ashby, Inc. stores the users’ application data in the US on our behalf. We inform about this and ask for a user’s consent for this in accord with Art. 49 I a GDPR. Please also see Ashby, Inc.’s privacy policy and Ashby, Inc.’s Trust Center for more information about Ashby, Inc. and its data protection standards. Ashby, Inc. holds the EU-US, the Swiss-US, and the UK Extention to the EU-US Data Protection Framework Certificates.
Use of AI/ML Features in Application Processes
Camunda may use artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications. These AI/ML tools assess applications against the characteristics and qualifications relevant to the job requisition. These tools are designed to help identify potentially qualified candidates, and to assist human recruiters. We do not make automated hiring decisions (including per Article 22 of the GDPR). Every hiring decision is closely reviewed and made by a human recruiter.
We take the following steps to ensure fairness, transparency, and data protection:
- Redaction of Personal Identifiers: Before your application is processed by any AI system, personal identifiers such as name, contact details, gender, and photo are removed or anonymized to minimize bias.
- Transparency: Recruiters can see which sections of your application triggered an AI tool suggestion and are instructed to verify or override any AI output.
- No Model Training on Applicant Data: Your personal data is not used to train or improve the AI model.
- Bias Monitoring and Compliance: Ashby, Inc. conducts internal assessments and may engage third parties to evaluate the AI system for compliance with the EU AI Act (Annex III – Employment) and other relevant regulations.
If you prefer not to have your application assessed using AI/ML features, you may opt out by completing the form linked here. After submitting your request, you will receive a confirmation email containing a link to finalize your opt-out. You must click the confirmation link to complete the process. Once your opt-out is confirmed, your application will be reviewed manually by our recruitment team, without the use of AI/ML technologies. Opting out will not negatively impact your application.
Applicant Privacy Rights
The Applicant may have a legal right under applicable law such as the European Union’s (“EU”) General Data Protection Regulation (GDPR), or the California Consumer Privacy Act of 2018, to access the Personal Data Camunda maintains. Applicants have the right to review, correct, or update Personal Data, or withdraw consent for Camunda to collect any information. Please contact Camunda via our webform to submit a request.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Applicant Responsibilities
The Applicant is responsible for the information made available to Camunda, and must ensure it is truthful and accurate. In the case information provided concerns another person, such as individuals provided as references, the effected individual must receive notice and give consent in order for Camunda to collect and use that information.
Security
Camunda is committed to protecting the security of Applicant’s Personal Data, by using appropriate technical and organizational measures to protect Personal Data from unauthorized access, use, or disclosure, but cannot eliminate security risks and breaches associated with Personal Data. Please contact us with security questions using the instructions in our Trust Center.
Changes to this Policy
Camunda reviews and updates this Policy periodically in response to changing legal, technical, and business developments. Material changes made
to this Policy may require Camunda to inform the Applicant in a manner that is consistent with the significance of the changes made.
Change Log
June 2025: This privacy policy has been revised to reflect the adoption of Ashby, Inc. as the new platform for hosting job applications.
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Effective June 19th 2025 to June 25th 2025
DownloadTable of Contents
This Applicant Privacy Policy, hereby referred to as the “Policy,” describes the privacy practices that apply to Camunda Services GmbH and its subsidiaries’, hereby referred to as “Camunda,” “we,” “us” and “our”; collection, use and disclosure of information relating to how an identified or identifiable applicant, hereby referred to as the “Applicant” engage with Camunda for employment or internship opportunities, via any method, as well as how Camunda uses and shares that information.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this Policy please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Personal Data Camunda Collects
In order to process applications, Camunda asks the Applicant to provide Personal Data. This information is provided voluntarily, and the Applicant determines the amount and type of information provided; however, some information may be necessary to complete an evaluation of the application and for the Applicant to be considered as a candidate.
The Applicant usually provides Camunda with personal data, including educational and employment background, contact information, work permit or visa information, and other career opportunities for which the Applicant would like to submit to. This personal data may come in the form of a CV, resume, cover letter, educational transcripts, and employment references.
Camunda does not require any information from the Applicant that the German General Equal Treatment Act (AGG) prohibits or information that would qualify as sensitive personal data under GDPR, including information relating to race, ethnicity, gender, religion or world-views, disability, age or sexual orientation. Information about illnesses, pregnancy, political views, philosophical or religious convictions, membership of a trade union, physical or mental health or sexual preferences are similarly not to be transferred.
How Camunda Uses Personal Data
Camunda uses Applicant Personal Data (as set out above) in the application and recruitment process for purposes including:
- Assessing qualifications, skills, and interests against current Camunda career opportunities;
- Verifying the information the Applicant provides and completing reference checks;
- Facilitating the recruitment and interview process;
- Preparing an offer letter, if applicable;
- Complying with applicable laws, regulations, legal processes or enforceable governmental requests, including protecting the rights and property of Camunda, Camunda users, applicants, candidates, employees or the public;
- Producing reports related to recruitment metrics;
- Managing and improving Camunda’s recruitment processes;
Application data of promising candidates may be kept, for those who opted into the Camunda TalentPool, in order to notify the Applicant of a suitable position.
Information collected during the application and recruitment process will become part of the Applicant’s employment record, if offered and accepted employment with Camunda.
How Camunda Shares Personal Data
Camunda limits access to the Applicant’s Personal Data to only those who need access to perform recruitment tasks and duties, and to third parties who have a legitimate purpose for accessing it such as in the following circumstances:
- service providers: Applicant Personal Data may be shared with service providers, agents or other third parties, e.g., recruiters, consultants, and attorneys, when the Applicant applies via Camunda’s online applicant platform, and the data is transferred directly to Camunda’s third party provider, Greenhouse. Camunda requires third parties to protect the information they receive and prohibits them from using the information for their own purposes.
- Compliance with laws, regulatory bodies, or government agencies: Camunda may disclose Applicant information when disclosure is necessary or required by law or regulation, to comply with legal process or government requests, or to exercise, establish or defend our legal rights.
- With Applicant consent: Camunda may disclose Personal Data for any purpose with the Applicant’s consent.
Legal Basis for Processing Applicant Personal Data
Camunda’s legal bases for processing Applicant Personal Data include:
The purpose of the data processing is to support the decision on whether an applicant is suitable for a post at Camunda and whether a contract of employment can be entered into with them.
- The legal base to keep data in the talent pool is Art. 6 I a GDPR.
- The legal basis for processing the data after the user has submitted the application is Art. 88 GDPR in conjunction with section 26 of the Federal Data Protection Act (BDSG).
- Consistent with specific Applicant consents (e.g. for Camunda’s TalentPool), which the Applicant may revoke at any time in accord with Art. 6 I a GDPR.
- As necessary to comply with Camunda’s legal obligations in accord with Art. 6 I c GDPR.
- To protect the Applicant’s interests or the interests of others in accord with Art. 6 I d GDPR.
- The forwarding of application data to Greenhouse is similarly justified pursuant to Art. 28 GDPR and Art. 6 I f GDPR. As necessary for Camunda’s legitimate interests in considering candidates for current and future employment opportunities in accord with Art. 6 I f GDPR.
- For transferring and storing personal data in the US, Camunda will collect a user’s consent in accord with Art. 49 I a GDPR.
Retention of Applicant’s Personal Data
Camunda retains Applicant Personal Data for as long as required to comply with legal obligations, resolve disputes, and to enforce our contractual agreements or as necessary for our legitimate interests.
If the Applicant is successful in their application for a position at Camunda, we retain the information that is provided during the application process, and information about the application process, as part of the Applicant’s employee records.
If the Applicant is not extended an offer of employment, the total storage period of Personal Data will not exceed one year, unless the Applicant requests to be in Camunda’s TalentPool to be considered for other roles. Applicant data is stored in Camunda’s TalentPool for a period of up to two years.
The Applicant can withdraw the application, the consent to store their personal data or ask to update their data at any time by contacting Camunda via our webform. Further information on data collection, evaluation and processing of the Applicant’s data by Greenhouse and on their rights in relation to this can be obtained from Greenhouse’s privacy statement, which is available at https://www.greenhouse.io/privacy-policy.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda may have to access, transfer or process Applicant’s Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 II c GDPR.
We work with the application platform provider Greenhouse. When a user applies for a job at Camunda and uploads application data to the platform, Greenhouse stores the users’ application data in the US on our behalf. We inform about this and ask for a user’s consent for this in accord with Art. 49 I a GDPR. Please also see Greenhouse’s privacy policy and Greenhouse’s statement on IT Security for more information about Greenhouse and its data protection standards.
Applicant Privacy Rights
The Applicant may have a legal right under applicable law such as the European Union’s (“EU”) General Data Protection Regulation (GDPR), or the California Consumer Privacy Act of 2018, to access the Personal Data Camunda maintains. Applicants have the right to review, correct, or update Personal Data, or withdraw consent for Camunda to collect any information. Please contact Camunda via our webform to submit a request.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Applicant Responsibilities
The Applicant is responsible for the information made available to Camunda, and must ensure it is truthful and accurate. In the case information provided concerns another person, such as individuals provided as references, the effected individual must receive notice and give consent in order for Camunda to collect and use that information.
Security
Camunda is committed to protecting the security of Applicant’s Personal Data, by using appropriate technical and organizational measures to protect Personal Data from unauthorized access, use, or disclosure, but cannot eliminate security risks and breaches associated with Personal Data. Please contact us with security questions using the instructions in our Trust Center.
Changes to this Policy
Camunda reviews and updates this Policy periodically in response to changing legal, technical, and business developments. Material changes made
to this Policy may require Camunda to inform the Applicant in a manner that is consistent with the significance of the changes made.
to this Policy may require Camunda to inform the Applicant in a manner that is consistent with the significance of the changes made.
Change Log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Effective May 16th 2025 to June 19th 2025
DownloadTable of Contents
This Applicant Privacy Policy, hereby referred to as the “Policy,” describes the privacy practices that apply to Camunda Services GmbH and its subsidiaries’, hereby referred to as “Camunda,” “we,” “us” and “our”; collection, use and disclosure of information relating to how an identified or identifiable applicant, hereby referred to as the “Applicant” engage with Camunda for employment or internship opportunities, via any method, as well as how Camunda uses and shares that information.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this Policy please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Personal Data Camunda Collects
In order to process applications, Camunda asks the Applicant to provide Personal Data. This information is provided voluntarily, and the Applicant determines the amount and type of information provided; however, some information may be necessary to complete an evaluation of the application and for the Applicant to be considered as a candidate.
The Applicant usually provides Camunda with personal data, including educational and employment background, contact information, work permit or visa information, and other career opportunities for which the Applicant would like to submit to. This personal data may come in the form of a CV, resume, cover letter, educational transcripts, and employment references.
Camunda does not require any information from the Applicant that the German General Equal Treatment Act (AGG) prohibits or information that would qualify as sensitive personal data under GDPR, including information relating to race, ethnicity, gender, religion or world-views, disability, age or sexual orientation. Information about illnesses, pregnancy, political views, philosophical or religious convictions, membership of a trade union, physical or mental health or sexual preferences are similarly not to be transferred.
How Camunda Uses Personal Data
Camunda uses Applicant Personal Data (as set out above) in the application and recruitment process for purposes including:
- Assessing qualifications, skills, and interests against current Camunda career opportunities;
- Verifying the information the Applicant provides and completing reference checks;
- Facilitating the recruitment and interview process;
- Preparing an offer letter, if applicable;
- Complying with applicable laws, regulations, legal processes or enforceable governmental requests, including protecting the rights and property of Camunda, Camunda users, applicants, candidates, employees or the public;
- Producing reports related to recruitment metrics;
- Managing and improving Camunda’s recruitment processes;
Application data of promising candidates may be kept, for those who opted into the Camunda TalentPool, in order to notify the Applicant of a suitable position.
Information collected during the application and recruitment process will become part of the Applicant’s employment record, if offered and accepted employment with Camunda.
How Camunda Shares Personal Data
Camunda limits access to the Applicant’s Personal Data to only those who need access to perform recruitment tasks and duties, and to third parties who have a legitimate purpose for accessing it such as in the following circumstances:
- service providers: Applicant Personal Data may be shared with service providers, agents or other third parties, e.g., recruiters, consultants, and attorneys, when the Applicant applies via Camunda’s online applicant platform, and the data is transferred directly to Camunda’s third party provider, Greenhouse. Camunda requires third parties to protect the information they receive and prohibits them from using the information for their own purposes.
- Compliance with laws, regulatory bodies, or government agencies: Camunda may disclose Applicant information when disclosure is necessary or required by law or regulation, to comply with legal process or government requests, or to exercise, establish or defend our legal rights.
- With Applicant consent: Camunda may disclose Personal Data for any purpose with the Applicant’s consent.
Legal Basis for Processing Applicant Personal Data
Camunda’s legal bases for processing Applicant Personal Data include:
The purpose of the data processing is to support the decision on whether an applicant is suitable for a post at Camunda and whether a contract of employment can be entered into with them.
- The legal base to keep data in the talent pool is Art. 6 I a GDPR.
- The legal basis for processing the data after the user has submitted the application is Art. 88 GDPR in conjunction with section 26 of the Federal Data Protection Act (BDSG).
- Consistent with specific Applicant consents (e.g. for Camunda’s TalentPool), which the Applicant may revoke at any time in accord with Art. 6 I a GDPR.
- As necessary to comply with Camunda’s legal obligations in accord with Art. 6 I c GDPR.
- To protect the Applicant’s interests or the interests of others in accord with Art. 6 I d GDPR.
- The forwarding of application data to Greenhouse is similarly justified pursuant to Art. 28 GDPR and Art. 6 I f GDPR. As necessary for Camunda’s legitimate interests in considering candidates for current and future employment opportunities in accord with Art. 6 I f GDPR.
- For transferring and storing personal data in the US, Camunda will collect a user’s consent in accord with Art. 49 I a GDPR.
Retention of Applicant’s Personal Data
Camunda retains Applicant Personal Data for as long as required to comply with legal obligations, resolve disputes, and to enforce our contractual agreements or as necessary for our legitimate interests.
If the Applicant is successful in their application for a position at Camunda, we retain the information that is provided during the application process, and information about the application process, as part of the Applicant’s employee records.
If the Applicant is not extended an offer of employment, the total storage period of Personal Data will not exceed one year, unless the Applicant requests to be in Camunda’s TalentPool to be considered for other roles. Applicant data is stored in Camunda’s TalentPool for a period of up to two years.
The Applicant can withdraw the application, the consent to store their personal data or ask to update their data at any time by contacting Camunda via our webform. Further information on data collection, evaluation and processing of the Applicant’s data by Greenhouse and on their rights in relation to this can be obtained from Greenhouse’s privacy statement, which is available at https://www.greenhouse.io/privacy-policy.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda may have to access, transfer or process Applicant’s Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 II c GDPR.
We work with the application platform provider Greenhouse. When a user applies for a job at Camunda and uploads application data to the platform, Greenhouse stores the users’ application data in the US on our behalf. We inform about this and ask for a user’s consent for this in accord with Art. 49 I a GDPR. Please also see Greenhouse’s privacy policy and Greenhouse’s statement on IT Security for more information about Greenhouse and its data protection standards.
Applicant Privacy Rights
The Applicant may have a legal right under applicable law such as the European Union’s (“EU”) General Data Protection Regulation (GDPR), or the California Consumer Privacy Act of 2018, to access the Personal Data Camunda maintains. Applicants have the right to review, correct, or update Personal Data, or withdraw consent for Camunda to collect any information. Please contact Camunda via our webform to submit a request.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Applicant Responsibilities
The Applicant is responsible for the information made available to Camunda, and must ensure it is truthful and accurate. In the case information provided concerns another person, such as individuals provided as references, the effected individual must receive notice and give consent in order for Camunda to collect and use that information.
Security
Camunda is committed to protecting the security of Applicant’s Personal Data, by using appropriate technical and organizational measures to protect Personal Data from unauthorized access, use, or disclosure, but cannot eliminate security risks and breaches associated with Personal Data. Please contact us with security questions using the instructions in our Trust Center.
Changes to this Policy
Camunda reviews and updates this Policy periodically in response to changing legal, technical, and business developments. Material changes made
to this Policy may require Camunda to inform the Applicant in a manner that is consistent with the significance of the changes made.
to this Policy may require Camunda to inform the Applicant in a manner that is consistent with the significance of the changes made.
Change Log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Effective April 5th 2023 to May 16th 2025
DownloadTable of Contents
This Applicant Privacy Policy, hereby referred to as the “Policy,” describes the privacy practices that apply to Camunda Services GmbH and its subsidiaries’, hereby referred to as “Camunda,” “we,” “us” and “our”; collection, use and disclosure of information relating to how an identified or identifiable applicant, hereby referred to as the “Applicant” engage with Camunda for employment or internship opportunities, via any method, as well as how Camunda uses and shares that information.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this Policy please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Personal Data Camunda Collects
In order to process applications, Camunda asks the Applicant to provide Personal Data. This information is provided voluntarily, and the Applicant determines the amount and type of information provided; however, some information may be necessary to complete an evaluation of the application and for the Applicant to be considered as a candidate.
The Applicant usually provides Camunda with personal data, including educational and employment background, contact information, work permit or visa information, and other career opportunities for which the Applicant would like to submit to. This personal data may come in the form of a CV, resume, cover letter, educational transcripts, and employment references.
Camunda does not require any information from the Applicant that the German General Equal Treatment Act (AGG) prohibits or information that would qualify as sensitive personal data under GDPR, including information relating to race, ethnicity, gender, religion or world-views, disability, age or sexual orientation. Information about illnesses, pregnancy, political views, philosophical or religious convictions, membership of a trade union, physical or mental health or sexual preferences are similarly not to be transferred.
How Camunda Uses Personal Data
Camunda uses Applicant Personal Data (as set out above) in the application and recruitment process for purposes including:
- Assessing qualifications, skills, and interests against current Camunda career opportunities;
- Verifying the information the Applicant provides and completing reference checks;
- Facilitating the recruitment and interview process;
- Preparing an offer letter, if applicable;
- Complying with applicable laws, regulations, legal processes or enforceable governmental requests, including protecting the rights and property of Camunda, Camunda users, applicants, candidates, employees or the public;
- Producing reports related to recruitment metrics;
- Managing and improving Camunda’s recruitment processes;
Application data of promising candidates may be kept, for those who opted into the Camunda TalentPool, in order to notify the Applicant of a suitable position.
Information collected during the application and recruitment process will become part of the Applicant’s employment record, if offered and accepted employment with Camunda.
How Camunda Shares Personal Data
Camunda limits access to the Applicant’s Personal Data to only those who need access to perform recruitment tasks and duties, and to third parties who have a legitimate purpose for accessing it such as in the following circumstances:
- service providers: Applicant Personal Data may be shared with service providers, agents or other third parties, e.g., recruiters, consultants, and attorneys, when the Applicant applies via Camunda’s online applicant platform, and the data is transferred directly to Camunda’s third party provider, Greenhouse. Camunda requires third parties to protect the information they receive and prohibits them from using the information for their own purposes.
- Compliance with laws, regulatory bodies, or government agencies: Camunda may disclose Applicant information when disclosure is necessary or required by law or regulation, to comply with legal process or government requests, or to exercise, establish or defend our legal rights.
- With Applicant consent: Camunda may disclose Personal Data for any purpose with the Applicant’s consent.
Legal Basis for Processing Applicant Personal Data
Camunda’s legal bases for processing Applicant Personal Data include:
The purpose of the data processing is to support the decision on whether an applicant is suitable for a post at Camunda and whether a contract of employment can be entered into with them.
- The legal base to keep data in the talent pool is Art. 6 I a GDPR.
- The legal basis for processing the data after the user has submitted the application is Art. 88 GDPR in conjunction with section 26 of the Federal Data Protection Act (BDSG).
- Consistent with specific Applicant consents (e.g. for Camunda’s TalentPool), which the Applicant may revoke at any time in accord with Art. 6 I a GDPR.
- As necessary to comply with Camunda’s legal obligations in accord with Art. 6 I c GDPR.
- To protect the Applicant’s interests or the interests of others in accord with Art. 6 I d GDPR.
- The forwarding of application data to Greenhouse is similarly justified pursuant to Art. 28 GDPR and Art. 6 I f GDPR. As necessary for Camunda’s legitimate interests in considering candidates for current and future employment opportunities in accord with Art. 6 I f GDPR.
- For transferring and storing personal data in the US, Camunda will collect a user’s consent in accord with Art. 49 I a GDPR.
Retention of Applicant’s Personal Data
Camunda retains Applicant Personal Data for as long as required to comply with legal obligations, resolve disputes, and to enforce our contractual agreements or as necessary for our legitimate interests.
If the Applicant is successful in their application for a position at Camunda, we retain the information that is provided during the application process, and information about the application process, as part of the Applicant’s employee records.
If the Applicant is not extended an offer of employment, the total storage period of Personal Data will not exceed one year, unless the Applicant requests to be in Camunda’s TalentPool to be considered for other roles. Applicant data is stored in Camunda’s TalentPool for a period of up to two years.
The Applicant can withdraw the application, the consent to store their personal data or ask to update their data at any time by contacting Camunda via our webform. Further information on data collection, evaluation and processing of the Applicant’s data by Greenhouse and on their rights in relation to this can be obtained from Greenhouse’s privacy statement, which is available at https://www.greenhouse.io/privacy-policy.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda may have to access, transfer or process Applicant’s Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 II c GDPR.
We work with the application platform provider Greenhouse. When a user applies for a job at Camunda and uploads application data to the platform, Greenhouse stores the users’ application data in the US on our behalf. We inform about this and ask for a user’s consent for this in accord with Art. 49 I a GDPR. Please also see Greenhouse’s privacy policy and Greenhouse’s statement on IT Security for more information about Greenhouse and its data protection standards.
Applicant Privacy Rights
The Applicant may have a legal right under applicable law such as the European Union’s (“EU”) General Data Protection Regulation (GDPR), or the California Consumer Privacy Act of 2018, to access the Personal Data Camunda maintains. Applicants have the right to review, correct, or update Personal Data, or withdraw consent for Camunda to collect any information. Please contact Camunda via our webform to submit a request.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Applicant Responsibilities
The Applicant is responsible for the information made available to Camunda, and must ensure it is truthful and accurate. In the case information provided concerns another person, such as individuals provided as references, the effected individual must receive notice and give consent in order for Camunda to collect and use that information.
Security
Camunda is committed to protecting the security of Applicant’s Personal Data, by using appropriate technical and organizational measures to protect Personal Data from unauthorized access, use, or disclosure, but cannot eliminate security risks and breaches associated with Personal Data. Please contact us with security questions using the instructions in our Trust Center.
Changes to this Policy
Camunda reviews and updates this Policy periodically in response to changing legal, technical, and business developments. Material changes made
to this Policy may require Camunda to inform the Applicant in a manner that is consistent with the significance of the changes made.
to this Policy may require Camunda to inform the Applicant in a manner that is consistent with the significance of the changes made.
Change Log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
California Specific Privacy Policy
Effective May 16th 2025
DownloadTable of Contents
This California Privacy Notice for California Residents (“Privacy Notice”) explains how Camunda Services GmbH and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, and disclose personal information relating to California residents including but not limited to, offline and online, covered by the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Acts of 2020 (“CPRA”), from hereon referred to as CCPA.
Any terms defined in the CCPA have the same meaning when used in this notice. California residents with disabilities may access this notice in an alternative format by contacting us via our webform.
As the CCPA is not yet final, this Privacy Notice reflects our good faith understanding of the CCPA as of the date of last revision reflected in the Change Log in Section VI below. Camunda will continue to revise our Privacy Notice to reflect the development of the CCPA as well as our understanding as to how it relates to our data practices.
Scope
This Statement provides the categories of Personal Information Camunda collected, disclosed, sold (if any), and a description of users’ rights over the past 12 months.
This Statement does not cover Personal Information processed as a CCPA “service provider” in connection with the use of Camunda’s products and services that have been deployed by one of Camunda’s business customers. The agreement between Camunda and the applicable organization outlines Camunda’s commitments as a service provider.
Collection and Disclosure of Personal Information
The specific Personal Information that Camunda collects, uses, and discloses depends on our relationship or interaction with the user. In the past 12 months, Camunda may have collected, and disclosed the following categories of Personal Information to third parties for our business purposes:
- Identifiers, such as name, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address or other similar identifiers;
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as contact information and financial information, name, signature, employment;
- Protected classification characteristics under California or federal law, such as sex and marital status;
- Commercial information, such as transaction information and products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
- Internet or network activity information, such as browsing history and information on a consumer’s interaction with a website, application, or advertisement;
- Geolocation data, such as approximate device location (derived from an IP address);
- Sensory data, audio, electronic, visual and similar information, such as call and video recordings;
- Professional or employment-related information, such as work history and prior employer;
- Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99), such as student records and directory information.
- Inferences drawn from any of the Information identified about a consumer reflecting the consumer's product preferences, and behavior.
We obtain the categories of Personal Information listed above from the following categories of sources:
- Contacting us by phone, email or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Information in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen username is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
- Cookies and Automated Data Collection Tools. Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection in order to enhance and ensure stability and functionality of our products and online premises, to analyze trends and usage patterns and in some cases to provide improved marketing and advertising. Please see Camunda’s Cookie Policy for more information.
- Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
If you decide that you do not wish to receive communications from us, simply follow the opt-out or unsubscribe instructions contained in any of our communications or contact Camunda via our webform.
Note, if you do not provide the mandatory Personal Information for a particular activity, we may not be able to offer the required information for you to engage in that activity. Data processing agreements exist with all these third-party providers, based on the current standards prescribed in the California Consumer Privacy Act.
How Camunda uses the collected information
If you elect to provide Camunda with Personal Information, we may use it as needed to provide services to you. These uses are based in our legitimate business interests in providing services to you and/or fulfillment of our contractual obligation to deliver services you have requested. We have balanced these business needs carefully with your privacy rights and these uses do not improperly infringe on your privacy and confidentiality rights. We may use your Personal Information in the following ways:
- to quickly process user requests for information and to allow us to respond efficiently to user questions;
- to enhance your user experience of the website, improve the operation of the website, our service offerings and our marketing efforts;
- to respond to employment inquiries or applications. Our online job applications are made available via an applicant portal provided by “Workable”;
- to monitor the website statistics;
- to provide information to service providers or such companies who provide support for the operations of our website and who do not use or disclose the information for any other purpose; or
- to allow us to disclose your information to the extent permitted by law.
How Camunda shares information
- to enable trusted third-parties that provide services on our behalf or with whom we have collaborated to offer a particular service;
- we use internet analysis and marketing services (such as Google Analytics and Google Tag Manager) to assess our website call-ups and to optimize our services. With Google Analytics, the user’s IP address is processed and transferred in an anonymized form.
- we use Inbound-Marketing and Sales Software to optimize our marketing campaigns. Information generated by the cookie regarding use of the website may be transmitted to our Service Provider’s server and stored there. Personal Information will only be collected and enriched if the user completes a form on one of the websites. In this case, in addition to the Personal Information the user enters himself, the user’s IP address will also be saved.
- for scheduling and conducting our Online Events, Webinars and Online Trainings and Workshops, we use service providers. Service Providers also help manage registrations, reminders and webinar attendee information (e.g. how to attend the webinar) or provide a platform;
- we also allow users to follow us on different social media platforms via a link to social media profiles (Twitter, LinkedIn, GitHub, Stack Overflow and Vimeo). We have not implemented Like- Share- or other social media buttons. Please note that any information you disclose through such services or otherwise on the website becomes public information, and may be available to visitors to the website and to the general public. In addition, when you choose to make a posting on such services certain Personal Information will be available for other users to view. We urge you to exercise discretion and caution when deciding to disclose Personal Information about you, or any other information, on the website. WE ARE NOT RESPONSIBLE FOR THE USE BY ANY THIRD PARTY OF ANY PERSONAL INFORMATION YOU VOLUNTARILY DISCLOSE THROUGH ANY SUCH SERVICES OR OTHERWISE ON THE SITE;
- if we believe in good faith that it is required by law enforcement or judicial authorities, or if it is necessary to comply with other legal requirements;
- to help prevent the instigation of a crime, to help facilitate an investigation related to public safety, to help protect the safety of a child using our website, to help protect the security or integrity of our website, or to enable us to take precautions against liability;
- to prevent or investigate suspected fraud, illegal activity, violations of this Privacy Notice, or activity that we believe in good faith may expose us to legal liability;
- during any merger, acquisition, or transfer of substantially all our assets, or during negotiations for such an event; or
- with your express consent.
Cookies and Website Automatic Data Collection
See Camunda’s Cookie Policy for detailed information on Camunda’s use of cookies and Automatic Data Collection Tools (First-Party cookies, Third-Party cookies, Web Beacons and APIs).
Data Retention
Camunda retains Personal Information collected in connection with the Online and Offline Properties for as long as necessary based retention criteria including: the time required to fulfill the business or commercial purposes for which personal information is processed, to fulfil the purposes outlined in this Privacy Policy, the time required to comply with legal and regulatory retention requirements, and the time required to maintain contractual and customer relationships.
Access to specific information and data portability rights
You have the right to request that we disclose certain information about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of Personal Information we collected about you.
- The categories of sources for the Personal Information we collected about you.
- Our business or commercial purpose for collecting or selling that Personal Information.
- The categories of third parties with whom we share that Personal Information.
- The specific pieces of Personal Information we collected about you (also called a data portability request).
- If we sold or disclosed your Personal Information for a business purpose, a separate list disclosing:
- sales, identifying the Personal Information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.
- We do not sell Personal Information.
Incorrect Data Correction Rights
You have the right to correct any inaccurate data that you have provided us with. You can request a correction via our webform. We will comply with all reasonable verifiable requests. According to the law, we can add cases in which this is not reasonable or proportionate for us, as well as how often correction requests are possible.
Deletion request rights
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.
You may object to Camunda using your Personal Information for the above purposes at any time by contacting Camunda via our webform. If you do so, Camunda will cease using your Personal Information for the above purposes (i.e., under a legitimate interest set out above) and remove it from its systems unless such Personal Information is permitted to be used by Camunda for another purpose set out in this Privacy Notice or Camunda determines and demonstrates a compelling legitimate interest to continue in processing your Personal Information.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the Personal Information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Exercising access, data portability and deletion rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by contacting Camunda via our webform.
To prevent the third-party technologies mentioned in the respective sections from being stored in the future when visiting the website camunda.com, please click on the “Opt-out from all tracking” button at the following link: https://camunda.com/opt-out/. Your opt-out request will set an opt-out cookie in your browser. This serves solely to assign your opt-out request and prevents Camunda from storing cookies on the user’s computer in the future. In addition, the user can always configure his browser setting according to your wishes and decline acceptance of either third-party cookies or all cookies. This way you also have the option to delete previously stored cookies. The user should be aware that in these cases you may not be able to use all features of the website. Please see Camunda’s Cookie Policy for more options.
Authorized agents
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your Personal Information if you provide the authorized agent written permission signed by you or pursuant to a valid Power of Attorney. You may also make a verifiable consumer request on behalf of your minor child. When you use an authorized agent to submit a request, we may require you to:
- Provide the authorized agent signed permission to do so.
- Verify their own identity directly with the business.
- Directly confirm with the business that they provided the authorized agent permission to submit the request.
Verifiable Consumer Requests
The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative (such as your name and email address).
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information related to you. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
Response timing and format
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Sale of Personal Information
We do not sell Personal Information. For purposes of this Privacy Notice, “sell” means the disclosure of Personal Information to a third-party for monetary or other valuable consideration.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you services.
- Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of services.
- Suggest that you may receive a different price or rate for services or a different level or quality of services.
Changes to this Privacy Notice
We may, in our sole discretion, modify or revise this Privacy Notice at any time. Such changes or updates are effective immediately after we give notice of the change or update, which we may do by revising the Change Log in Section VI or by otherwise posting on the website, by email, conventional mail and/or by any other means that provides reasonable notice. If you are subscribed to one of our mailings, you must provide us with your correct email address and make sure that emails from us are not filtered from your inbox by your ISP or email software. You agree that your use of the website, after the date such notice is posted, means that you accept and agree to be bound by such modifications or revisions to the Privacy Notice. You agree that we shall not be liable to you for any damages that might result from any changes to this Privacy Notice, if any.
How to Exercise Your Rights
If you are a California resident, you may submit a request by contacting Camunda via our webform or via postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Effective Date: October 12, 2020
Change log
June 2023: This privacy policy has been updated to update data processing and CPRA information.
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Effective July 4th 2023 to May 16th 2025
DownloadTable of Contents
This California Privacy Notice for California Residents (“Privacy Notice”) explains how Camunda Services GmbH and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, and disclose personal information relating to California residents including but not limited to, offline and online, covered by the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Acts of 2020 (“CPRA”), from hereon referred to as CCPA.
Any terms defined in the CCPA have the same meaning when used in this notice. California residents with disabilities may access this notice in an alternative format by contacting us via our webform.
As the CCPA is not yet final, this Privacy Notice reflects our good faith understanding of the CCPA as of the date of last revision reflected in the Change Log in Section VI below. Camunda will continue to revise our Privacy Notice to reflect the development of the CCPA as well as our understanding as to how it relates to our data practices.
Scope
This Statement provides the categories of Personal Information Camunda collected, disclosed, sold (if any), and a description of users’ rights over the past 12 months.
This Statement does not cover Personal Information processed as a CCPA “service provider” in connection with the use of Camunda’s products and services that have been deployed by one of Camunda’s business customers. The agreement between Camunda and the applicable organization outlines Camunda’s commitments as a service provider.
Collection and Disclosure of Personal Information
The specific Personal Information that Camunda collects, uses, and discloses depends on our relationship or interaction with the user. In the past 12 months, Camunda may have collected, and disclosed the following categories of Personal Information to third parties for our business purposes:
- Identifiers, such as name, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address or other similar identifiers;
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as contact information and financial information, name, signature, employment;
- Protected classification characteristics under California or federal law, such as sex and marital status;
- Commercial information, such as transaction information and products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
- Internet or network activity information, such as browsing history and information on a consumer’s interaction with a website, application, or advertisement;
- Geolocation data, such as approximate device location (derived from an IP address);
- Sensory data, audio, electronic, visual and similar information, such as call and video recordings;
- Professional or employment-related information, such as work history and prior employer;
- Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99), such as student records and directory information.
- Inferences drawn from any of the Information identified about a consumer reflecting the consumer's product preferences, and behavior.
We obtain the categories of Personal Information listed above from the following categories of sources:
- Contacting us by phone, email or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Information in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen username is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
- Cookies and Automated Data Collection Tools. Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection in order to enhance and ensure stability and functionality of our products and online premises, to analyze trends and usage patterns and in some cases to provide improved marketing and advertising. Please see Camunda’s Cookie Policy for more information.
- Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
If you decide that you do not wish to receive communications from us, simply follow the opt-out or unsubscribe instructions contained in any of our communications or contact Camunda via our webform.
Note, if you do not provide the mandatory Personal Information for a particular activity, we may not be able to offer the required information for you to engage in that activity. Data processing agreements exist with all these third-party providers, based on the current standards prescribed in the California Consumer Privacy Act.
How Camunda uses the collected information
If you elect to provide Camunda with Personal Information, we may use it as needed to provide services to you. These uses are based in our legitimate business interests in providing services to you and/or fulfillment of our contractual obligation to deliver services you have requested. We have balanced these business needs carefully with your privacy rights and these uses do not improperly infringe on your privacy and confidentiality rights. We may use your Personal Information in the following ways:
- to quickly process user requests for information and to allow us to respond efficiently to user questions;
- to enhance your user experience of the website, improve the operation of the website, our service offerings and our marketing efforts;
- to respond to employment inquiries or applications. Our online job applications are made available via an applicant portal provided by “Workable”;
- to monitor the website statistics;
- to provide information to service providers or such companies who provide support for the operations of our website and who do not use or disclose the information for any other purpose; or
- to allow us to disclose your information to the extent permitted by law.
How Camunda shares information
- to enable trusted third-parties that provide services on our behalf or with whom we have collaborated to offer a particular service;
- we use internet analysis and marketing services (such as Google Analytics and Google Tag Manager) to assess our website call-ups and to optimize our services. With Google Analytics, the user’s IP address is processed and transferred in an anonymized form.
- we use Inbound-Marketing and Sales Software to optimize our marketing campaigns. Information generated by the cookie regarding use of the website may be transmitted to our Service Provider’s server and stored there. Personal Information will only be collected and enriched if the user completes a form on one of the websites. In this case, in addition to the Personal Information the user enters himself, the user’s IP address will also be saved.
- for scheduling and conducting our Online Events, Webinars and Online Trainings and Workshops, we use service providers. Service Providers also help manage registrations, reminders and webinar attendee information (e.g. how to attend the webinar) or provide a platform;
- we also allow users to follow us on different social media platforms via a link to social media profiles (Twitter, LinkedIn, GitHub, Stack Overflow and Vimeo). We have not implemented Like- Share- or other social media buttons. Please note that any information you disclose through such services or otherwise on the website becomes public information, and may be available to visitors to the website and to the general public. In addition, when you choose to make a posting on such services certain Personal Information will be available for other users to view. We urge you to exercise discretion and caution when deciding to disclose Personal Information about you, or any other information, on the website. WE ARE NOT RESPONSIBLE FOR THE USE BY ANY THIRD PARTY OF ANY PERSONAL INFORMATION YOU VOLUNTARILY DISCLOSE THROUGH ANY SUCH SERVICES OR OTHERWISE ON THE SITE;
- if we believe in good faith that it is required by law enforcement or judicial authorities, or if it is necessary to comply with other legal requirements;
- to help prevent the instigation of a crime, to help facilitate an investigation related to public safety, to help protect the safety of a child using our website, to help protect the security or integrity of our website, or to enable us to take precautions against liability;
- to prevent or investigate suspected fraud, illegal activity, violations of this Privacy Notice, or activity that we believe in good faith may expose us to legal liability;
- during any merger, acquisition, or transfer of substantially all our assets, or during negotiations for such an event; or
- with your express consent.
Cookies and Website Automatic Data Collection
See Camunda’s Cookie Policy for detailed information on Camunda’s use of cookies and Automatic Data Collection Tools (First-Party cookies, Third-Party cookies, Web Beacons and APIs).
Data Retention
Camunda retains Personal Information collected in connection with the Online and Offline Properties for as long as necessary based retention criteria including: the time required to fulfill the business or commercial purposes for which personal information is processed, to fulfil the purposes outlined in this Privacy Policy, the time required to comply with legal and regulatory retention requirements, and the time required to maintain contractual and customer relationships.
Access to specific information and data portability rights
You have the right to request that we disclose certain information about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of Personal Information we collected about you.
- The categories of sources for the Personal Information we collected about you.
- Our business or commercial purpose for collecting or selling that Personal Information.
- The categories of third parties with whom we share that Personal Information.
- The specific pieces of Personal Information we collected about you (also called a data portability request).
- If we sold or disclosed your Personal Information for a business purpose, a separate list disclosing:
- sales, identifying the Personal Information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.
- We do not sell Personal Information.
Incorrect Data Correction Rights
You have the right to correct any inaccurate data that you have provided us with. You can request a correction via our webform. We will comply with all reasonable verifiable requests. According to the law, we can add cases in which this is not reasonable or proportionate for us, as well as how often correction requests are possible.
Deletion request rights
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.
You may object to Camunda using your Personal Information for the above purposes at any time by contacting Camunda via our webform. If you do so, Camunda will cease using your Personal Information for the above purposes (i.e., under a legitimate interest set out above) and remove it from its systems unless such Personal Information is permitted to be used by Camunda for another purpose set out in this Privacy Notice or Camunda determines and demonstrates a compelling legitimate interest to continue in processing your Personal Information.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the Personal Information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Exercising access, data portability and deletion rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by contacting Camunda via our webform.
To prevent the third-party technologies mentioned in the respective sections from being stored in the future when visiting the website camunda.com, please click on the “Opt-out from all tracking” button at the following link: https://camunda.com/opt-out/. Your opt-out request will set an opt-out cookie in your browser. This serves solely to assign your opt-out request and prevents Camunda from storing cookies on the user’s computer in the future. In addition, the user can always configure his browser setting according to your wishes and decline acceptance of either third-party cookies or all cookies. This way you also have the option to delete previously stored cookies. The user should be aware that in these cases you may not be able to use all features of the website. Please see Camunda’s Cookie Policy for more options.
Authorized agents
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your Personal Information if you provide the authorized agent written permission signed by you or pursuant to a valid Power of Attorney. You may also make a verifiable consumer request on behalf of your minor child. When you use an authorized agent to submit a request, we may require you to:
- Provide the authorized agent signed permission to do so.
- Verify their own identity directly with the business.
- Directly confirm with the business that they provided the authorized agent permission to submit the request.
Verifiable Consumer Requests
The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative (such as your name and email address).
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information related to you. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
Response timing and format
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Sale of Personal Information
We do not sell Personal Information. For purposes of this Privacy Notice, “sell” means the disclosure of Personal Information to a third-party for monetary or other valuable consideration.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you services.
- Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of services.
- Suggest that you may receive a different price or rate for services or a different level or quality of services.
Changes to this Privacy Notice
We may, in our sole discretion, modify or revise this Privacy Notice at any time. Such changes or updates are effective immediately after we give notice of the change or update, which we may do by revising the Change Log in Section VI or by otherwise posting on the website, by email, conventional mail and/or by any other means that provides reasonable notice. If you are subscribed to one of our mailings, you must provide us with your correct email address and make sure that emails from us are not filtered from your inbox by your ISP or email software. You agree that your use of the website, after the date such notice is posted, means that you accept and agree to be bound by such modifications or revisions to the Privacy Notice. You agree that we shall not be liable to you for any damages that might result from any changes to this Privacy Notice, if any.
How to Exercise Your Rights
If you are a California resident, you may submit a request by contacting Camunda via our webform or via postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Effective Date: October 12, 2020
Change log
June 2023: This privacy policy has been updated to update data processing and CPRA information.
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Effective April 5th 2023 to July 4th 2023
DownloadTable of Contents
This California Privacy Notice for California Residents (“Privacy Notice”) explains how Camunda Services GmbH and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use, and disclose personal information relating to California residents including but not limited to, offline and online, covered by the California Consumer Privacy Act of 2018 (“CCPA”) and the California Civil Code section 1798.83.
Any terms defined in the CCPA have the same meaning when used in this notice. California residents with disabilities may access this notice in an alternative format by contacting us via our webform.
As the CCPA is not yet final, this Privacy Notice reflects our good faith understanding of the CCPA as of the date of last revision reflected in the Change Log in Section VI below. Camunda will continue to revise our Privacy Notice to reflect the development of the CCPA and our understanding as to how it relates to our data practices.
Scope
This Statement provides the categories of Personal Information Camunda collected, disclosed, sold (if any), and a description of users’ rights over the past 12 months.
This Statement does not cover Personal Information processed as a CCPA “service provider” in connection with the use of Camunda’s products and services that have been deployed by one of Camunda’s business customers. The agreement between Camunda and the applicable organization outlines Camunda’s commitments as a service provider.
Collection and Disclosure of Personal Information
The specific Personal Information that Camunda collects, uses, and discloses depends on our relationship or interaction with the user. In the past 12 months, Camunda may have collected, and disclosed the following categories of Personal Information to third parties for our business purposes:
- Identifiers, such as name, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address or other similar identifiers;
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as contact information and financial information, name, signature, employment;
- Protected classification characteristics under California or federal law, such as sex and marital status;
- Commercial information, such as transaction information and products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
- Internet or network activity information, such as browsing history and information on a consumer’s interaction with a website, application, or advertisement;
- Geolocation data, such as approximate device location (derived from an IP address);
- Sensory data, audio, electronic, visual and similar information, such as call and video recordings;
- Professional or employment-related information, such as work history and prior employer;
- Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99), such as student records and directory information.
We obtain the categories of Personal Information listed above from the following categories of sources:
- Contacting us by phone, email or otherwise. When users communicate with Camunda via our Contact page, complete surveys, fill out any “free” boxes, users provide content, full name, email address, job title, company name, industry, phone number and company number of employees.
- Newsletters and White Papers. Camunda provides users with the opportunity to stay informed about Camunda’s upcoming meetings and developments in the workflow-automation field via our newsletters and white papers.
- Training, Events and Webinars. When customers register for our training, events or webinars through our website, Camunda collects Personal Information in order to provide and manage these services.
- Forum. Users have the opportunity to exchange information with other interested parties about questions relating to Camunda software. When a user registers for the forum, Camunda records their email address and their user name. If a user posts to a forum, the user’s chosen username is displayed, and is therefore viewable by the public. The contribution they have submitted can also be downloaded by any interested party, together with the time of posting. However, the user’s email address is not published.
- Social Media Pages. Through users’ use of social media and/or other websites such as Twitter, GitHub, Stack overflow, Vimeo, Facebook or LinkedIn, depending on users’ settings or the privacy policies of these websites. To change settings on these services, please refer to their respective privacy notices.
- Careers. When applicants submit a CV or other information via our career site, https://camunda.com/career/. If you contact us via email through the website, we may keep a record of your email address and correspondence and use such information to respond to you. We may also receive resumes from recruiters, Camunda employees or other third parties. Please see Camunda’s Applicant Privacy Policy for more information.
- Cookies and Automated Data Collection Tools. Camunda uses integrated technology such as cookies, web beacons, and embedded URLs to provide automated data collection in order to enhance and ensure stability and functionality of our products and online premises, to analyze trends and usage patterns and in some cases to provide improved marketing and advertising. Please see Camunda’s Cookie Policy for more information.
- Products. In order to enhance and ensure stability and functionality of our products, we collect technical data that may in come cases also be classified as Personal Information. We also use this Personal Information to analyze trends and usage patterns. Please see Camunda’s Product Privacy Policy.
If you decide that you do not wish to receive communications from us, simply follow the opt-out or unsubscribe instructions contained in any of our communications or contact Camunda via our webform.
Note, if you do not provide the mandatory Personal Information for a particular activity, we may not be able to offer the required information for you to engage in that activity. Data processing agreements exist with all these third-party providers, based on the current standards prescribed in the California Consumer Privacy Act.
How Camunda uses the collected information
If you elect to provide Camunda with Personal Information, we may use it as needed to provide services to you. These uses are based in our legitimate business interests in providing services to you and/or fulfillment of our contractual obligation to deliver services you have requested. We have balanced these business needs carefully with your privacy rights and these uses do not improperly infringe on your privacy and confidentiality rights. We may use your Personal Information in the following ways:
- to quickly process user requests for information and to allow us to respond efficiently to user questions;
- to enhance your user experience of the website, improve the operation of the website, our service offerings and our marketing efforts;
- to respond to employment inquiries or applications. Our online job applications are made available via an applicant portal provided by “Workable”;
- to monitor the website statistics;
- to provide information to service providers or such companies who provide support for the operations of our website and who do not use or disclose the information for any other purpose; or
- to allow us to disclose your information to the extent permitted by law.
How Camunda shares information
- to enable trusted third-parties that provide services on our behalf or with whom we have collaborated to offer a particular service;
- we use internet analysis and marketing services (such as Google Analytics and Google Tag Manager) to assess our website call-ups and to optimize our services. With Google Analytics, the user’s IP address is processed and transferred in an anonymized form.
- we use Inbound-Marketing and Sales Software to optimize our marketing campaigns. Information generated by the cookie regarding use of the website may be transmitted to our Service Provider’s server and stored there. Personal Information will only be collected and enriched if the user completes a form on one of the websites. In this case, in addition to the Personal Information the user enters himself, the user’s IP address will also be saved.
- for scheduling and conducting our Online Events, Webinars and Online Trainings and Workshops, we use service providers. Service Providers also help manage registrations, reminders and webinar attendee information (e.g. how to attend the webinar) or provide a platform;
- we also allow users to follow us on different social media platforms via a link to social media profiles (Twitter, LinkedIn, GitHub, Stack Overflow and Vimeo). We have not implemented Like- Share- or other social media buttons. Please note that any information you disclose through such services or otherwise on the website becomes public information, and may be available to visitors to the website and to the general public. In addition, when you choose to make a posting on such services certain Personal Information will be available for other users to view. We urge you to exercise discretion and caution when deciding to disclose Personal Information about you, or any other information, on the website. WE ARE NOT RESPONSIBLE FOR THE USE BY ANY THIRD PARTY OF ANY PERSONAL INFORMATION YOU VOLUNTARILY DISCLOSE THROUGH ANY SUCH SERVICES OR OTHERWISE ON THE SITE;
- if we believe in good faith that it is required by law enforcement or judicial authorities, or if it is necessary to comply with other legal requirements;
- to help prevent the instigation of a crime, to help facilitate an investigation related to public safety, to help protect the safety of a child using our website, to help protect the security or integrity of our website, or to enable us to take precautions against liability;
- to prevent or investigate suspected fraud, illegal activity, violations of this Privacy Notice, or activity that we believe in good faith may expose us to legal liability;
- during any merger, acquisition, or transfer of substantially all our assets, or during negotiations for such an event; or
- with your express consent.
Cookies and Website Automatic Data Collection
See Camunda’s Cookie Policy for detailed information on Camunda’s use of cookies and Automatic Data Collection Tools (First-Party cookies, Third-Party cookies, Web Beacons and APIs).
Access to specific information and data portability rights
You have the right to request that we disclose certain information about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of Personal Information we collected about you.
- The categories of sources for the Personal Information we collected about you.
- Our business or commercial purpose for collecting or selling that Personal Information.
- The categories of third parties with whom we share that Personal Information.
- The specific pieces of Personal Information we collected about you (also called a data portability request).
- If we sold or disclosed your Personal Information for a business purpose, a separate list disclosing:
- sales, identifying the Personal Information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.
- We do not sell Personal Information.
Deletion request rights
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.
You may object to Camunda using your Personal Information for the above purposes at any time by contacting Camunda via our webform. If you do so, Camunda will cease using your Personal Information for the above purposes (i.e., under a legitimate interest set out above) and remove it from its systems unless such Personal Information is permitted to be used by Camunda for another purpose set out in this Privacy Notice or Camunda determines and demonstrates a compelling legitimate interest to continue in processing your Personal Information.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the Personal Information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Exercising access, data portability and deletion rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by contacting Camunda via our webform.
To prevent the third-party technologies mentioned in the respective sections from being stored in the future when visiting the website camunda.com, please click on the “Opt-out from all tracking” button at the following link: https://camunda.com/opt-out/. Your opt-out request will set an opt-out cookie in your browser. This serves solely to assign your opt-out request and prevents Camunda from storing cookies on the user’s computer in the future. In addition, the user can always configure his browser setting according to your wishes and decline acceptance of either third-party cookies or all cookies. This way you also have the option to delete previously stored cookies. The user should be aware that in these cases you may not be able to use all features of the website. Please see Camunda’s Cookie Policy for more options.
Authorized agents
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your Personal Information if you provide the authorized agent written permission signed by you or pursuant to a valid Power of Attorney. You may also make a verifiable consumer request on behalf of your minor child. When you use an authorized agent to submit a request, we may require you to:
- Provide the authorized agent signed permission to do so.
- Verify their own identity directly with the business.
- Directly confirm with the business that they provided the authorized agent permission to submit the request.
Verifiable Consumer Requests
The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative (such as your name and email address).
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information related to you. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
Response timing and format
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Sale of Personal Information
We do not sell Personal Information. For purposes of this Privacy Notice, “sell” means the disclosure of Personal Information to a third-party for monetary or other valuable consideration.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you services.
- Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of services.
- Suggest that you may receive a different price or rate for services or a different level or quality of services.
Changes to this Privacy Notice
We may, in our sole discretion, modify or revise this Privacy Notice at any time. Such changes or updates are effective immediately after we give notice of the change or update, which we may do by revising the Change Log in Section VI or by otherwise posting on the website, by email, conventional mail and/or by any other means that provides reasonable notice. If you are subscribed to one of our mailings, you must provide us with your correct email address and make sure that emails from us are not filtered from your inbox by your ISP or email software. You agree that your use of the website, after the date such notice is posted, means that you accept and agree to be bound by such modifications or revisions to the Privacy Notice. You agree that we shall not be liable to you for any damages that might result from any changes to this Privacy Notice, if any.
How to Exercise Your Rights
If you are a California resident, you may submit a request by contacting Camunda via our webform or via postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Effective Date: October 12, 2020
Change log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Cookie Policy
Effective May 16th 2025
DownloadTable of Contents
This Cookie Policy, hereby referred to as the “Policy,” explains how Camunda Services GmbH and its subsidiaries (“Camunda,” “we,” “us” and “our”) use cookies, web beacons, and other similar tools, hereby referred to as “Automatic Data Collection Tools,” when customers or users visit or use any of Camunda’s websites, social media pages, online advertisements, or marketing communications, hereby referred to as “Online Properties.” This Policy explains Automatic Data Collection Tools and why Camunda uses them, as well as user and customer rights to control Camunda’s use of them.
For details regarding the Automatic Data Collection Tools Camunda uses in connection with products and services, see Camunda’s Product Privacy Policy. This Policy does not cover Camunda’s use of Automatic Data Collection Tools to collect, use and share information in connection with the use of products and services.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this policy, please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Cookies Camunda Uses and Why They Are Used
When a user or customer visits any Camunda online property, Camunda may store or retrieve information from the browser used. Camunda uses the following types of cookies for the following purposes:
Strictly Necessary: Essential cookies that enable Camunda’s websites and associated features to operate, and which allow Camunda to provide services that depend on these websites and features (e.g., remembering cookie permission settings, session logins, etc.).
Convenience and Personalization: Enables Camunda to remember choices user’s make via Camunda’s Online Properties, including preferred language/region, and enables the ability to suggest content that matches user navigation patterns.
Performance and Analysis: These cookies collect statistical-type information (aggregated, pseudonymous) used to measure, enhance, and improve the content, quality, and performance of Camunda Online Properties.
Advertising and Retargeting: These cookies are set by Camunda or by Camunda’s advertising services to provide users or customers with relevant advertising, and to allow Camunda to collect data related to the page visited and activities performed on the page. Cookies may also be used when information is shared using a social media feature or service on Camunda’s Online Properties. Social media companies’ privacy policies govern how information is used.
Other Automatic Data Collection Tools and Why They Are Used
Web Beacons and Pixels: Camunda may use and permit select third-parties to use web beacons and pixels (often in combination with cookies) to compile information about user website usage and interactions to provide relevant content and ads. Those are characteristically transparent graphic images embedded in online content, pictures, videos, and emails that allow a server to read information from a device, track when a user has viewed specific content or email messages, determines the date and time the beacon was viewed, and the IP address of the device used. As an example, Camunda may use web beacons in our Online Properties, newsletters or emails to understand whether our mailing system is functioning effectively, and whether emails were opened.
We also use third-party technologies of NextRoll to help us recognize your device and understand how users use our sites so that we can improve our services to reflect user’s interests and serve advertisements about the services that are likely to be of more interest to the user. Specifically, Nextroll collects information about user’s activity on our site(s) to enable us to measure and analyze traffic and browsing activity on our site(s). Please see Nextroll’s privacy policy here: https://www.nextroll.com/privacy. Specific information on Nextroll’s obligations under the California Consumer Privacy Act of 2018, Cal. Civil Code §1798.100 et seq, (“CCPA”) can be found here: https://www.nextroll.com/privacy#service-13
Embedded Web Links: Camunda emails often include links designed to redirect users to specific areas of the Online Properties via Camunda servers, and are used to determine which links in the email have been clicked. The redirection system allows Camunda to change the destination URL, if necessary, and helps determine the effectiveness of Camunda communications and marketing initiatives. Information about email and other interactions may be connected to users’ personal identities.
Options to Control the Use of Cookies and Automatic Data Collection Tools
Cookie Preferences: Users can control and adapt cookie settings by clicking “cookie preferences” at the bottom of our website.
In addition, users can configure the browser setting accordingly and decline acceptance of either third-party cookies or all cookies. This way the user also has the option to delete previously stored cookies, but might not be able to use all features of our Online Properties.
Opt-Out: Most advertising networks offer a way to opt-out of interest-based advertising. Some third party technologies such as NextRoll may use non-cookie technologies that may not be impacted by browser settings that block cookies. Your browser may not permit you to block such technologies. For this reason you can use the following third party tools to decline the collection and use of information for the purpose of serving you interest based advertising
- If you would like to opt-out of third party cookies relating to interest-based advertising and you are an EU-resident, please see www.youronlinechoices.eu.
- The NAI’s opt-out platform: www.networkadvertising.org/choices
- The EDAA’s opt-out platform: www.youronlinechoices.com
- The DAA’s opt-out platform: optout.aboutads.info/?c=2⟨=EN
- Google Opt-out page: adssettings.google.com
- Facebook Opt-out page: www.facebook.com/help/568137493302217
- LinkedIn Opt-out page: www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences
Disabling web beacons: Users may be able to disable web beacons in email messages by not downloading images contained in Camunda messages. This may not always disable a web beacon or other Automatic Data Collection Tools in the email message due to specific email software capabilities. Refer to the details provided by the email service provider. Amending cookie settings or opting out in a web browser may also render web beacons ineffective.
Disabling embedded web links: Configure privacy settings in web browser and email client that will restrict Camunda from collecting information on links clicked.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security or other legitimate interests stated in the sections Cookies Camunda Uses and Why They Are Used and Other Automatic Data Collection Tools and Why They Are Used.
Data Retention
Camunda retains Personal Data collected in connection with the Automatic Data Collection Tools and Cookies only for as long as necessary to fulfill the purposes outlined in this Policy.
Links to social media platforms
On our sites we offer links to the social media platforms Twitter, GitHub, Stack Overflow, LinkedIn, Youtube and Vimeo where you can follow Camunda.
If the user calls up a page containing a follow me button, indicated using the respective social media logo, a direct connection with the social media servers is established by their browser. Information is then transferred to the respective social media platform indicating that the page was called up.
Twitter: is a micro-blogging service from the American company Twitter, Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107). Further information on data collection, evaluation and processing of the user’s data by Twitter and on their rights in relation to this can be obtained by the user from Twitter’s privacy statement, downloadable from twitter.com/privacy.
GitHub: is a web-based hosting service for version control using git (88 Colin P Kelly Jr Street, San Francisco, CA 94107). Further information on data collection, evaluation and processing of the user’s data by GitHub and on their rights in relation to this can be obtained by the user from GitHubs’ privacy statement, downloadable from help.github.com/articles/github-privacy-statement/
LinkedIn: is a social network and online platform for professionals to find and be found for business opportunities, to connect with others and find information (in EU: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). Further information on data collection, evaluation and processing of the user’s data by LinkedIn and on their rights in relation to this can be obtained by the user from LinkedIn’s privacy statement, downloadable from www.linkedin.com/legal/privacy-policy
Youtube: is a video portal and social network which belongs to Google (in EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Further information on data collection, evaluation and processing of the user’s data by LinkedIn and on their rights in relation to this can be obtained by the user from Google’s privacy statement, downloadable from policies.google.com/privacy
Stack Overflow: is an online community for developers to learn, share their knowledge, and build their careers (110 William Street 28th Floor, New York, NY 10038). Further information on data collection, evaluation and processing of the user’s data by Stack Overflow and on their rights in relation to this can be obtained by the user from Stack Overflow’s privacy statement, downloadable from stackexchange.com/legal/privacy-policy
Vimeo: is operated by Vimeo, LLC, with its registered office at 555 West 18th Street, New York, New York 1001. Further information on data collection, evaluation and processing of the user’s data by Vimeo and on their rights in relation to this can be obtained by the user from Vimeo´s privacy statement, downloadable from vimeo.com/privacy.
Please note that any information you disclose through such services or otherwise on the website becomes public information, and may be available to visitors to the website and to the general public. In addition, when you choose to make a posting on such services certain Personal Information will be available for other users to view.
Changes to this Policy
This Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change Log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Effective April 5th 2023 to May 16th 2025
DownloadTable of Contents
This Cookie Policy, hereby referred to as the “Policy,” explains how Camunda Services GmbH and its subsidiaries (“Camunda,” “we,” “us” and “our”) use cookies, web beacons, and other similar tools, hereby referred to as “Automatic Data Collection Tools,” when customers or users visit or use any of Camunda’s websites, social media pages, online advertisements, or marketing communications, hereby referred to as “Online Properties.” This Policy explains Automatic Data Collection Tools and why Camunda uses them, as well as user and customer rights to control Camunda’s use of them.
For details regarding the Automatic Data Collection Tools Camunda uses in connection with products and services, see Camunda’s Product Privacy Policy. This Policy does not cover Camunda’s use of Automatic Data Collection Tools to collect, use and share information in connection with the use of products and services.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this policy, please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Cookies Camunda Uses and Why They Are Used
When a user or customer visits any Camunda online property, Camunda may store or retrieve information from the browser used. Camunda uses the following types of cookies for the following purposes:
Strictly Necessary: Essential cookies that enable Camunda’s websites and associated features to operate, and which allow Camunda to provide services that depend on these websites and features (e.g., remembering cookie permission settings, session logins, etc.).
Convenience and Personalization: Enables Camunda to remember choices user’s make via Camunda’s Online Properties, including preferred language/region, and enables the ability to suggest content that matches user navigation patterns.
Performance and Analysis: These cookies collect statistical-type information (aggregated, pseudonymous) used to measure, enhance, and improve the content, quality, and performance of Camunda Online Properties.
Advertising and Retargeting: These cookies are set by Camunda or by Camunda’s advertising services to provide users or customers with relevant advertising, and to allow Camunda to collect data related to the page visited and activities performed on the page. Cookies may also be used when information is shared using a social media feature or service on Camunda’s Online Properties. Social media companies’ privacy policies govern how information is used.
Other Automatic Data Collection Tools and Why They Are Used
Web Beacons and Pixels: Camunda may use and permit select third-parties to use web beacons and pixels (often in combination with cookies) to compile information about user website usage and interactions to provide relevant content and ads. Those are characteristically transparent graphic images embedded in online content, pictures, videos, and emails that allow a server to read information from a device, track when a user has viewed specific content or email messages, determines the date and time the beacon was viewed, and the IP address of the device used. As an example, Camunda may use web beacons in our Online Properties, newsletters or emails to understand whether our mailing system is functioning effectively, and whether emails were opened.
We also use third-party technologies of NextRoll to help us recognize your device and understand how users use our sites so that we can improve our services to reflect user’s interests and serve advertisements about the services that are likely to be of more interest to the user. Specifically, Nextroll collects information about user’s activity on our site(s) to enable us to measure and analyze traffic and browsing activity on our site(s). Please see Nextroll’s privacy policy here: https://www.nextroll.com/privacy. Specific information on Nextroll’s obligations under the California Consumer Privacy Act of 2018, Cal. Civil Code §1798.100 et seq, (“CCPA”) can be found here: https://www.nextroll.com/privacy#service-13
Embedded Web Links: Camunda emails often include links designed to redirect users to specific areas of the Online Properties via Camunda servers, and are used to determine which links in the email have been clicked. The redirection system allows Camunda to change the destination URL, if necessary, and helps determine the effectiveness of Camunda communications and marketing initiatives. Information about email and other interactions may be connected to users’ personal identities.
Options to Control the Use of Cookies and Automatic Data Collection Tools
Cookie Preferences: Users can control and adapt cookie settings by clicking “cookie preferences” at the bottom of our website.
In addition, users can configure the browser setting accordingly and decline acceptance of either third-party cookies or all cookies. This way the user also has the option to delete previously stored cookies, but might not be able to use all features of our Online Properties.
Opt-Out: Most advertising networks offer a way to opt-out of interest-based advertising. Some third party technologies such as NextRoll may use non-cookie technologies that may not be impacted by browser settings that block cookies. Your browser may not permit you to block such technologies. For this reason you can use the following third party tools to decline the collection and use of information for the purpose of serving you interest based advertising
- If you would like to opt-out of third party cookies relating to interest-based advertising and you are an EU-resident, please see www.youronlinechoices.eu.
- The NAI’s opt-out platform: www.networkadvertising.org/choices
- The EDAA’s opt-out platform: www.youronlinechoices.com
- The DAA’s opt-out platform: optout.aboutads.info/?c=2⟨=EN
- Google Opt-out page: adssettings.google.com
- Facebook Opt-out page: www.facebook.com/help/568137493302217
- LinkedIn Opt-out page: www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences
Disabling web beacons: Users may be able to disable web beacons in email messages by not downloading images contained in Camunda messages. This may not always disable a web beacon or other Automatic Data Collection Tools in the email message due to specific email software capabilities. Refer to the details provided by the email service provider. Amending cookie settings or opting out in a web browser may also render web beacons ineffective.
Disabling embedded web links: Configure privacy settings in web browser and email client that will restrict Camunda from collecting information on links clicked.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- To comply with legal obligations, in accord with Art. 6 I c GDPR, as necessary;
- To protect customer and user vital interests or those of others; and
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as Management of Customer Experience, Facilitating and Evaluating Use of Online Properties, Business Operations, Marketing and Advertising (if applicable), Research, Innovation or Security or other legitimate interests stated in the sections Cookies Camunda Uses and Why They Are Used and Other Automatic Data Collection Tools and Why They Are Used.
Data Retention
Camunda retains Personal Data collected in connection with the Automatic Data Collection Tools and Cookies only for as long as necessary to fulfill the purposes outlined in this Policy.
Links to social media platforms
On our sites we offer links to the social media platforms Twitter, GitHub, Stack Overflow, LinkedIn, Youtube and Vimeo where you can follow Camunda.
If the user calls up a page containing a follow me button, indicated using the respective social media logo, a direct connection with the social media servers is established by their browser. Information is then transferred to the respective social media platform indicating that the page was called up.
Twitter: is a micro-blogging service from the American company Twitter, Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107). Further information on data collection, evaluation and processing of the user’s data by Twitter and on their rights in relation to this can be obtained by the user from Twitter’s privacy statement, downloadable from twitter.com/privacy.
GitHub: is a web-based hosting service for version control using git (88 Colin P Kelly Jr Street, San Francisco, CA 94107). Further information on data collection, evaluation and processing of the user’s data by GitHub and on their rights in relation to this can be obtained by the user from GitHubs’ privacy statement, downloadable from help.github.com/articles/github-privacy-statement/
LinkedIn: is a social network and online platform for professionals to find and be found for business opportunities, to connect with others and find information (in EU: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). Further information on data collection, evaluation and processing of the user’s data by LinkedIn and on their rights in relation to this can be obtained by the user from LinkedIn’s privacy statement, downloadable from www.linkedin.com/legal/privacy-policy
Youtube: is a video portal and social network which belongs to Google (in EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Further information on data collection, evaluation and processing of the user’s data by LinkedIn and on their rights in relation to this can be obtained by the user from Google’s privacy statement, downloadable from policies.google.com/privacy
Stack Overflow: is an online community for developers to learn, share their knowledge, and build their careers (110 William Street 28th Floor, New York, NY 10038). Further information on data collection, evaluation and processing of the user’s data by Stack Overflow and on their rights in relation to this can be obtained by the user from Stack Overflow’s privacy statement, downloadable from stackexchange.com/legal/privacy-policy
Vimeo: is operated by Vimeo, LLC, with its registered office at 555 West 18th Street, New York, New York 1001. Further information on data collection, evaluation and processing of the user’s data by Vimeo and on their rights in relation to this can be obtained by the user from Vimeo´s privacy statement, downloadable from vimeo.com/privacy.
Please note that any information you disclose through such services or otherwise on the website becomes public information, and may be available to visitors to the website and to the general public. In addition, when you choose to make a posting on such services certain Personal Information will be available for other users to view.
Changes to this Policy
This Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change Log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Cookie Richtlinie
Effective May 16th 2023
DownloadTable of Contents
Diese Cookie-Richtlinie („Richtlinie“) erklärt, wie und warum die Camunda Services GmbH und ihre Tochtergesellschaften („Camunda“, „wir“, „uns“ und „unser“) Cookies und ähnliche Tools („Tools zur automatischen Datenerhebung“) verwenden.
Im Folgenden beschreiben wir die Verwendung von Tools zur automatischen Datenerhebung, wenn Kunden oder Nutzer eine der Websites, Social- Media-Seiten, Online-Werbungen oder Marketingmitteilungen von Camunda (im Folgenden als „Internetauftritt“ bezeichnet) besuchen oder verwenden und erläutern die Rechte und Kontrollmöglichkeiten von Nutzern und Kunden.
Einzelheiten zu den Tools zur automatischen Datenerhebung, die Camunda in Verbindung mit Produkten und Dienstleistungen verwendet, finden Sie in der Product Privacy Policy von Camunda.
Wie Sie Camunda kontaktieren können
Die Camunda Services GmbH ist Verantwortliche im Sinne der DSGVO und sonstiger Datenschutzgesetze oder -bestimmungen, die in den Mitgliedstaaten der Europäischen Union gelten.
Sollten Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, stehen Ihnen drei Wege offen, sich an Camunda zu wenden: per E-Mail: privacy@Camunda.com
per Post an:
Camunda Services GmbH
Zossener Straße 55-58
10961 Berlin
oder telefonisch unter der Nummer: 030 664 04 09 – 00
Camunda hat einen externen Datenschutzbeauftragten für deutsche betroffene Personen ernannt. Der Datenschutzbeauftragte von Camunda ist:
Julian Höppner
JBB Data Consult GmbH Friedrichstraße 95
10117 Berlin
Bei Fragen zur Erhebung, Speicherung, Weitergabe und Verwendung von Daten oder zur Ausübung der Rechte der betroffenen Personen können Sie sich auch an unseren Datenschutzbeauftragten wenden:
Tel.: 030 20962282
E-Mail: hoeppner@jbbdataconsult.de
Website: www.jbbdataconsult.de
Welche Cookies Camunda verwendet und warum sie verwendet werden
Wenn Nutzer einen beliebigen Internetauftritt von Camunda besuchen, kann Camunda Daten über den verwendeten Browser speichern oder abrufen. Camunda verwendet die folgenden Arten von Cookies für die folgenden Zwecke:
Unbedingt erforderliche Cookies: Unverzichtbare Cookies, die den Betrieb der Websites von Camunda und der damit verbundenen Funktionen ermöglichen und mit deren Hilfe Camunda Dienstleistungen anbieten kann, die von diesen Websites und Funktionen abhängen (z. B. Speichern von Cookie-Zulassungseinstellungen, Session-Logins usw.).
Cookies zur Erhöhung der Nutzerfreundlichkeit und zur Personalisierung: Mithilfe dieser Cookies kann gespeichert werden, welche Eingaben Nutzer beim Besuch von Camundas Internetauftritt vorgenommen haben, beispielsweise die bevorzugte Sprache oder Region des Nutzers oder bestimmte Inhalte,die dem Navigationsmuster des Nutzers entsprechen.
Cookies zur Leistungsmessung und Analyse: Diese Cookies sammeln statistische Daten (aggregiert, pseudonymisiert), die zur Messung, Erweiterung und Verbesserung des Inhalts, der Qualität und der Leistung des Internetauftritts von Camunda verwendet werden.
Cookies für die Zwecke von Werbung und Retargeting: Diese Cookies werden von Camunda oder von den Werbediensten von Camunda gesetzt, um den Nutzern oder Kunden passende Werbung anzubieten und Camunda zu ermöglichen, Daten in Bezug auf die besuchte Seite und die auf der Seite ausgeführten Aktivitäten zu erheben. Cookies können auch verwendet werden, wenn Daten über eine Social-Media-Funktion oder
-Dienstleistung im Internetauftritt von Camunda weitergegeben werden. Die Datenschutzrichtlinien von Social-Media-Unternehmen regeln, wie solche Daten verarbeitet werden.
Weitere Tools zur automatischen Datenerhebung und warum sie verwendet werden
Web Beacons und Pixel: Camunda kann Web-Beacons und Pixel (oft in Kombination mit Cookies) verwenden und ausgewählten Dritten erlauben, diese zu verwenden, um Informationen über die Nutzung der Website und Interaktionen der Nutzer zu sammeln, um relevante Inhalte und Werbung bereitzustellen. Dies sind typischerweise transparente Grafiken, die in Online-Inhalte, Bilder, Videos und E-Mails eingebettet sind, die es einem Server ermöglichen, Informationen von einem Gerät auszulesen, zu verfolgen, wann ein Nutzer bestimmte Inhalte oder E-Mail-Nachrichten angesehen hat, das Datum und die Uhrzeit des Betrachtens des Beacons zu ermitteln und die IP-Adresse des verwendeten Geräts zu bestimmen.
Beispielsweise kann Camunda so in Internetauftritten, Newslettern oder E-Mails Zählpixel verwenden, um herauszufinden, ob unser Mailing-System effektiv funktioniert und ob E-Mails geöffnet wurden.
Wir verwenden auch Technologien von Drittanbietern wie NextRoll, die uns helfen, Geräte zu erkennen und zu verstehen, wie Nutzer unsere Seiten nutzen, damit wir unsere Dienste verbessern können und sie den Interessen der Nutzer entsprechen und Camunda Werbung über die Dienste anzeigen kann, die für Nutzer wahrscheinlich von größerem Interesse sein werden. Insbesondere sammelt Nextroll Informationen über die Aktivitäten der Nutzer auf unseren Seiten, um den Datenverkehr und die Browsing-Aktivitäten messen und analysieren zu können. Die Datenschutzrichtlinie von Nextroll finden Sie hier: https: /www.nextroll.com/privacy. Spezifische Informationen zu den Verpflichtungen von Nextroll gemäß dem California Consumer Privacy Act von 2018, Cal. Civil Code §1798.100 et seq, („CCPA“) finden Sie hier:
Eingebettete Weblinks: E-Mails von Camunda enthalten häufig Links, mit deren Hilfe Nutzer über die Server von Camunda zu bestimmten Bereichen der Internetauftritte umgeleitet werden. Auf diese Weise erfährt Camunda, welche Links in der E-Mail angeklickt wurden. Mithilfe des Umleitungssystems kann Camunda bei Bedarf die Ziel-URL ändern und die Effektivität der Kommunikations- und Marketinginitiativen von Camunda ermitteln. Informationen über E-Mail- und andere Interaktionen können mit den persönlichen Identitäten der Nutzer in Verbindung gebracht werden.
Optionen zur Kontrolle der Verwendung von Cookies und Tools zur automatischen Datenerhebung
Cookie-Einstellungen: Nutzer können die Cookie-Einstellungen in einem Auswahlmenü kontrollieren und anpassen, wenn sie auf „Cookie Preferences“ am unteren Rand unserer Website klicken. Darüber hinaus können Nutzer die Browser-Einstellung entsprechend konfigurieren und entweder die Annahme von Drittanbieter-Cookies oder aller Cookies ablehnen. Auf diese Weise haben Nutzer auch die Möglichkeit, bereits gespeicherte Cookies zu löschen, können dann aber möglicherweise nicht alle Funktionen unserer Online-Eigenschaften nutzen.
Opt-Out: Die meisten Werbenetzwerke bieten eine Möglichkeit zum Opt-Out von interessenbasierter Werbung. Einige Technologien von Drittanbietern, wie z. B. NextRoll, können Technologien ohne Cookies verwenden, die durch Browsereinstellungen, die Cookies blockieren, nicht beeinträchtigt werden. Ihr Browser erlaubt Ihnen möglicherweise nicht, solche Technologien zu blockieren. In dem Fall können Sie die folgenden Tools von Drittanbietern verwenden, um die Sammlung und Verwendung von Informationen zum Zwecke der Bereitstellung von interessenbasierter Werbung abzulehnen:
Wenn Sie Cookies von Drittanbietern im Zusammenhang mit interessenbezogener Werbung ablehnen möchten und Sie in der EU ansässig sind, besuchen Sie bitte www.youronlinechoices.eu.
Die Opt-Out-Plattform der NAI: www.networkadvertising.org/choices/
Die Deaktivierungsplattform der DAA: optout.aboutads.info/?c=2⟨=EN
Google Opt-Out: adssettings.google.com
Facebook-Abmeldeseite: www.facebook.com/help/568137493302217
LinkedIn Opt-out-Seite: www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences
Zählpixel und Web Beacons: Nutzer können möglicherweise Zählpixel in E-Mail-Nachrichten deaktivieren, indem sie die in den Mitteilungen von Camunda enthaltenen Bilder nicht herunterladen. Aufgrund spezifischer Funktionen der E-Mail-Software werden dadurch Zählpixel oder sonstige Tools zur automatischen Datenerhebung in der E-Mail-Nachricht jedoch nicht unbedingt deaktiviert. Lesen Sie dazu die Angaben des E-Mail- Anbieters. Auch eine Änderung der Cookie-Einstellungen oder die Deaktivierung in einem Webbrowser kann dazu führen, dass die Zählpixel unwirksam werden.
Deaktivieren eingebetteter Weblinks: Konfigurieren Sie die Datenschutzeinstellungen in Webbrowser und E-Mail-Client so, dass die Erfassung von Daten über angeklickte Links durch Camunda eingeschränkt wird.
Internationale Datenübermittlung
Die personenbezogenen Daten eines Nutzers können auch in Länder übermittelt und dort abgerufen, gespeichert und verarbeitet werden, die nicht mit dem Land identisch sind, in dem die Person wohnt. Als international tätiges Unternehmen verarbeitet Camunda personenbezogene Daten in Ländern außerhalb des Europäischen Wirtschaftsraums („EWR“), einschließlich der USA. Diese Länder können Datenschutzgesetze haben, die sich von den Gesetzen des Landes, in dem die Person wohnt, unterscheiden. Wir haben angemessene Sicherheitsvorkehrungen getroffen, damit solche personenbezogenen Daten in Übereinstimmung mit dieser Richtlinie geschützt bleiben, und wir haben angemessene Mechanismen zum Schutz personenbezogener Daten in Vereinbarungen mit den Dienstleistern von Camunda eingerichtet, wie z.B. die Verwendung der Standardvertragsklauseln der EU-Kommission gemäß Art. 46 Abs. 2 Buchstabe c DSGVO.
Rechtliche Grundlagen der Datenverarbeitung
Camunda verwendet personenbezogene Daten von Kunden und Nutzern ausschließlich in rechtmäßiger, ersichtlicher und angemessener Weise und verarbeitet die Daten nur unter den folgenden Bedingungen gemäß den angeführten Rechtsgrundlagen:
Camunda verarbeitet Daten gemäß Art. 6 I a DSGVO ausschließlich in Übereinstimmung mit den spezifischen widerruflichen Einwilligungen des Nutzers;
Camunda verarbeitet die Daten gemäß Art. 6 I b DSGVO nur dann, wenn dies zur Vorbereitung, zum Abschluss und zur Erfüllung eines Vertrages erforderlich ist;
die Verarbeitung erfolgt gemäß Art. 6 I c DSGVO, d. h. nur, wenn sie zur Erfüllung der gesetzlichen Verpflichtungen erforderlich ist;
die Verarbeitung erfolgt gemäß Art. 6 I d DSGVO, d. h. nur dann, wenn dies für den Schutz der grundlegenden Interessen von Kunden und Nutzern oder sonstiger Personen erforderlich ist; und
die Verarbeitung erfolgt im Einklang mit Art. 6 I f DSGVO, d. h. sofern dies zur Wahrung der berechtigten Interessen von Camunda erforderlich ist. Zu diesen berechtigten Interessen zählen z.B. Management der Kundenerfahrung, Erleichterung und Auswertung der Nutzung von Internetauftritten, Geschäftsbetrieb, Marketing und Werbung (falls zutreffend), Forschung, Innovation oder Sicherheit oder sonstige berechtigte Interessen, die in den Abschnitten Welche Cookies Camunda verwendet und warum sie verwendet werden und Weitere Tools zur automatischen Datenerhebung und warum sie verwendet werden angeführt sind.
Aufbewahrung von Daten
Camunda bewahrt personenbezogene Daten, die in Verbindung mit den Tools zur automatischen Datenerhebung und den Cookies erhoben wurden, nur so lange auf, wie dies zur Erfüllung der in dieser Richtlinie dargelegten Zwecke erforderlich ist.
Links zu Social-Media-Plattformen
Auf unseren Seiten bieten wir Links zu den Social-Media-Plattformen Twitter, GitHub, Stack Overflow, LinkedIn, Youtube und Vimeo, wo Sie Camunda folgen können.
Rufen Nutzer eine Seite auf indem sie auf das entsprechende Social-Media-Logo klicken, wird von seinem Browser eine direkte Verbindung zu den Social-Media-Servern hergestellt. Anschließend werden Daten an die jeweilige Social-Media-Plattform übermittelt, aus denen hervorgeht, dass die Seite aufgerufen wurde.
Twitter: ist ein Mikro-Blogging-Dienst der amerikanischen Firma Twitter, Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107). Weitere Informationen zur Erhebung, Auswertung und Verarbeitung der Daten der Nutzer durch Twitter und zu deren Rechten in diesem Zusammenhang können Nutzer der Datenschutzerklärung von Twitter entnehmen. Diese Datenschutzerklärung kann unter twitter.com/privacy heruntergeladen werden.
GitHub: ist ein webbasierter Hosting-Dienst für die Versionskontrolle mit Git (88 Colin P Kelly Jr Street, San Francisco, CA 94107). Weitere Informationen zur Erhebung, Auswertung und Verarbeitung der Daten der Nutzer durch GitHub und zu deren Rechten in diesem Zusammenhang erhält der Nutzer in der Datenschutzerklärung von GitHubs, die unter help.github.com/articles/github-privacy-statement/ heruntergeladen werden kann.
LinkedIn:: ist ein soziales Netzwerk und Online-Plattform, um geschäftliche und berufliche Kontakte zu knüpfen und zu pflegen, sich mit anderen zu vernetzen und Informationen zu finden (in EU: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland). Weitere Informationen zur Datenerhebung, -auswertung und -verarbeitung von Nutzerdaten durch LinkedIn sowie über die diesbezüglichen Rechte können Nutzer der Datenschutzerklärung von LinkedIn entnehmen, die unter www.linkedin.com/legal/privacy-policy abrufbar ist.
Youtube:: ist ein Videoportal und soziales Netzwerk, das zu Google gehört (in EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland). Weitere Informationen zur Datenerhebung, -auswertung und -verarbeitung von Nutzerdaten durch LinkedIn sowie über die diesbezüglichen Rechte können Nutzer der Datenschutzerklärung von Google entnehmen, die unter policies.google.com/privacy abrufbar ist.
Stack Overflow: ist eine Online-Community für Entwickler, mit der diese ihre Kenntnisse erweitern, austauschen und ihre Karriere vorantreiben können (110 William Street 28th Floor, New York, NY 10038). Weitere Informationen zur Erhebung, Auswertung und Verarbeitung der Daten der Nutzer durch Stack Overflow und zu deren Rechten in diesem Zusammenhang kann der Nutzer der Datenschutzerklärung von Stack Overflow entnehmen, die unter stackexchange.com/legal/privacy-policy heruntergeladen werden kann.
Vimeo: wird von Vimeo, LLC, mit eingetragenem Firmensitz in 555 West 18th Street, New York, New York 1001, betrieben. Weitere Informationen zur Erhebung, Auswertung und Verarbeitung der Daten der Nutzer durch Vimeo und zu deren Rechten in diesem Zusammenhang kann der Nutzer der Datenschutzerklärung von Vimeo entnehmen, die unter vimeo.com/privacy heruntergeladen werden kann.
Bitte beachten Sie, dass alle Daten, die Sie über solche Dienste oder anderweitig auf der Website offenlegen, zu öffentlichen Daten werden und Besuchern der Website und der allgemeinen Öffentlichkeit zugänglich sein können. Sollten Sie darüber hinaus einen Kommentar zu solchen Diensten posten, sind bestimmte personenbezogene Daten für andere Nutzer einsehbar.
Änderungen dieser Richtlinie
Diese Richtlinie wird von Zeit zu Zeit überarbeitet. Bei wesentlichen Änderungen an der Art und Weise, wie Camunda personenbezogene Daten verwendet, werden entsprechende Maßnahmen zur Information der Kunden ergriffen, die der Bedeutung der vorgenommenen Änderungen entsprechen, und Camunda wird Sie über alle wesentlichen Änderungen der Richtlinie informieren, sofern dies nach den geltenden Datenschutzgesetzen erforderlich ist.
Datum des Inkrafttretens: 12. Oktober 2020
Change Log:
Mai 2021: Diese Richtlinie wurde geändert, um über ein neues Cookie-Einwilligungsmanagement sowie über eine neue Drittanbietertechnologie Nextroll zu informieren.
Oktober 2020: Diese Richtlinie wurde umstrukturiert.
Product Privacy Policy
Effective June 19th 2025
DownloadTable of Contents
This Product Privacy Policy hereby referred to as “Policy” explains how Camunda Services GmbH and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use and share information, including Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person” from customers or users when using or demoing Camunda’s community, trial or paid products such as Camunda BPM, Camunda Cloud, Camunda Modeler or Cawemo and any other services maintained by Camunda, such as support services, hereby referred to as “the Products”.
Scope
This Policy applies to the information Camunda collects in connection with customer use of the Products, for which we determine the means and purpose of processing. This information includes Product Usage Data (defined below) and Operations Data (defined below), which are generally technical but may include limited Personal Data.
This Policy does not cover:
Service Data. Certain Camunda Products permit customers to consume, or upload and submit, content, including Personal Data to the Products, referred to as Service Data. This Policy does not cover Service Data or any Personal Data contained in Service Data, because the customer’s organization (not Camunda) controls how Service Data is processed.
Processing of Personal Data on our Websites. Processed according to Camunda’s General Privacy Policy, such as Personal Data collected through Camunda websites, hereby referred to as “Sites,” product feedback or surveys; the sales and provisioning process; and in connection with Camunda events, sales and marketing activities. See Camunda’s General Privacy Policy for details on how this information is processed.
Organizational Users: When users use Camunda Products on behalf of an organization (e.g., an employer), the use is administered and provisioned by the user’s organization per its own policies regarding the use and protection of Personal Data. Refer to the organization’s privacy policy for questions relating to how data is accessed and used by the organization.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this Policy please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Information Camunda Collects from Products
Camunda automatically collects “Operations Data” and “Product Usage Data” from customer use of the Products. Operations Data is information Camunda uses to facilitate the delivery of the Products, manage and monitor the Products, and provide support. Product Usage Data is information Camunda uses for product analytics and improvement, which may contain Personal Data such as IP addresses, email addresses, and identifiers, including cookies, but is generally technical, aggregated or pseudonymized. Depending on the Product, the information may include:
Products and System Data: Information about the Products being used and the systems and related environment from which customers access the Service. Examples include Product type and version, license information, installed plug-ins, UUID, and third-party systems used in connection with the Product.
Operations Data: Statistics related to uptime, indexes, shards, and segments and similar data points.
Performance Data: Information about the performance of the Products, such as response times and metrics on the performance and scale of the Products.
Feature Usage Data: Information about how the Products are used, including user interface metrics and details about which features are used or paths users take.
How Camunda Uses Product Usage Data
Camunda uses Product Usage Data in order to improve Products, support Customers and business to business marketing and sales, comply with legal requirements and other legitimate purposes. Camunda may use Product Usage Data for the following purposes:
Product Improvement: To analyze the use of the Products, prioritize testing and development of new features and functionality, improve support responses and forecasting, make pricing decisions, and identify, understand, and anticipate performance issues that affect the Products.
Customer Support: To provide support to our customers, such as guidance that will help optimize usage, identify product improvement opportunities and prioritize future product features, personalize customer’s experience, and suggest related Camunda Products to increase engagement and adoption of Camunda Products.
Business to Business Marketing and Sales: To market additional Products to customers, where permitted by law, and to advise sales discussions.
Legal Requirements: Camunda may be required to access Personal Data contained in Product Usage Data as required by law, such as to comply with legal processes, when Camunda believes, in good faith, that disclosure is necessary to protect or defend Camunda rights, property, or users of the Products in order to protect the safety of others, to investigate fraud, or respond to government requests, including public and government authorities outside a user’s country of residence, for national security or law enforcement purposes.
Other Legitimate Business Purposes: Camunda may use Product Usage Data when it is necessary for other legitimate purposes.
How Camunda Uses Operations Data
Camunda uses Operations Data to facilitate Product delivery, administer accounts, provide support, maintain security, administer disaster recovery plans, detect fraud, and comply with legal requirements. Camunda may use Operations Data for the following purposes:
Conduct account administration: To provide account management on Products, including managing product downloads, updates, and resolutions, and distributing administrative or account-related communications, including release notes and billing information.
Provide support: When users or individuals contact Camunda via a Camunda support channel so that Camunda may contact them about support requests, in which users may be asked to provide copies of affected files, logs, or other information that will enable Camunda to assist with the support request. In such cases, Camunda uses the requested information to respond to, troubleshoot, and resolve the support request.
Maintain the security of Camunda infrastructure and Products: Maintains security monitoring and incident management, handles the performance and stability of the Products, and addresses technical issues.
Administer disaster recovery plans and policies: To activate Camunda’s back-up disaster recovery plans and policies.
Detect fraud: To help monitor, prevent and detect fraud, improve security, monitor and confirm identity or access, and prevent malware or security risks.
Comply with legal obligations: To comply with applicable laws and regulations, including complying with legally mandated reporting, disclosure or other legal process requests, for mergers and acquisitions, finance and accounting, insurance purposes, legal and business consulting and dispute resolution.
Other legitimate business purposes: Camunda may use Operations Data when it is necessary for other legitimate purposes.
How Camunda Shares Information Collected from Products
Camunda makes every effort to ensure that Product Usage Data and Operations Data is accessed internally only by individuals that require access to perform applicable tasks and duties, and externally only by service providers with a legitimate purpose for accessing it. External service providers are contractually required to protect any Personal Data accessed and are prohibited from reprocessing the Personal Data for any purpose other than to perform the services as instructed by Camunda. Camunda will not sell Personal Data or allow third-parties to use Personal Data for its own commercial purpose. See How Camunda Shares the Information in Camunda’s General Privacy Policy for more information.
How Camunda Uses Cookies and Automatic Data Collection Tools
Depending on the Product used, Camunda may use cookies or other tracking tools for the purposes described in this Policy. Some of these tools are essential for the delivery of the Products, such as account access and authentication, performance and functionality of services, and the ability to analyze and customize the Products. For instance, Camunda uses a tool called Mixpanel in our cloud products to provide a better user experience and diagnose user issues. It records and captures user sessions so that we can monitor user actions like mouse clicks, movements, etc.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with customer’s or user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as perform, improve, maintain, and secure the Products, providing support for users and customers of the Products, and operate the business efficiently and appropriately.
Please contact Camunda via our webform with questions about the legal basis on which Camunda collects and uses Personal Data.
Data Retention
Camunda retains information collected in connection with the Automatic Data Collection Tools and Cookies only for as long as necessary to fulfill the purposes outlined in this Policy.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
User Privacy Rights and Choices
Camunda collects a limited amount of Personal Data to fulfill the purposes outlined in this Policy. Users may exercise their choices with regards to Personal Data, such as the request to accessing, correcting, updating or deleting Personal Data, by contacting us via our webform.
Users have the right to complain to a data protection authority about Camunda’s collection and use of Personal Data. For more information, please contact a local data protection authority. For more information about rights as a data subject, please see Camunda’s General Privacy Policy.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Security
If you have any questions about security, please contact us via our Webform. Camunda is committed to protect the security of Personal Data, by using appropriate technical and organizational measures to protect Personal Data from unauthorized access, use, or disclosure, but cannot eliminate security risks and breaches associated with Personal Data.
Changes to this Policy
This Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Effective May 16th 2025 to June 19th 2025
DownloadTable of Contents
This Product Privacy Policy hereby referred to as “Policy” explains how Camunda Services GmbH and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use and share information, including Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person” from customers or users when using or demoing Camunda’s community, trial or paid products such as Camunda BPM, Camunda Cloud, Camunda Modeler or Cawemo and any other services maintained by Camunda, such as support services, hereby referred to as “the Products”.
Scope
This Policy applies to the information Camunda collects in connection with customer use of the Products, for which we determine the means and purpose of processing. This information includes Product Usage Data (defined below) and Operations Data (defined below), which are generally technical but may include limited Personal Data.
This Policy does not cover:
Service Data. Certain Camunda Products permit customers to consume, or upload and submit, content, including Personal Data to the Products, referred to as Service Data. This Policy does not cover Service Data or any Personal Data contained in Service Data, because the customer’s organization (not Camunda) controls how Service Data is processed.
Processing of Personal Data on our Websites. Processed according to Camunda’s General Privacy Policy, such as Personal Data collected through Camunda websites, hereby referred to as “Sites,” product feedback or surveys; the sales and provisioning process; and in connection with Camunda events, sales and marketing activities. See Camunda’s General Privacy Policy for details on how this information is processed.
Organizational Users: When users use Camunda Products on behalf of an organization (e.g., an employer), the use is administered and provisioned by the user’s organization per its own policies regarding the use and protection of Personal Data. Refer to the organization’s privacy policy for questions relating to how data is accessed and used by the organization.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this Policy please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Information Camunda Collects from Products
Camunda automatically collects “Operations Data” and “Product Usage Data” from customer use of the Products. Operations Data is information Camunda uses to facilitate the delivery of the Products, manage and monitor the Products, and provide support. Product Usage Data is information Camunda uses for product analytics and improvement, which may contain Personal Data such as IP addresses, email addresses, and identifiers, including cookies, but is generally technical, aggregated or pseudonymized. Depending on the Product, the information may include:
Products and System Data: Information about the Products being used and the systems and related environment from which customers access the Service. Examples include Product type and version, license information, installed plug-ins, UUID, and third-party systems used in connection with the Product.
Operations Data: Statistics related to uptime, indexes, shards, and segments and similar data points.
Performance Data: Information about the performance of the Products, such as response times and metrics on the performance and scale of the Products.
Feature Usage Data: Information about how the Products are used, including user interface metrics and details about which features are used or paths users take.
How Camunda Uses Product Usage Data
Camunda uses Product Usage Data in order to improve Products, support Customers and business to business marketing and sales, comply with legal requirements and other legitimate purposes. Camunda may use Product Usage Data for the following purposes:
Product Improvement: To analyze the use of the Products, prioritize testing and development of new features and functionality, improve support responses and forecasting, make pricing decisions, and identify, understand, and anticipate performance issues that affect the Products.
Customer Support: To provide support to our customers, such as guidance that will help optimize usage, identify product improvement opportunities and prioritize future product features, personalize customer’s experience, and suggest related Camunda Products to increase engagement and adoption of Camunda Products.
Business to Business Marketing and Sales: To market additional Products to customers, where permitted by law, and to advise sales discussions.
Legal Requirements: Camunda may be required to access Personal Data contained in Product Usage Data as required by law, such as to comply with legal processes, when Camunda believes, in good faith, that disclosure is necessary to protect or defend Camunda rights, property, or users of the Products in order to protect the safety of others, to investigate fraud, or respond to government requests, including public and government authorities outside a user’s country of residence, for national security or law enforcement purposes.
Other Legitimate Business Purposes: Camunda may use Product Usage Data when it is necessary for other legitimate purposes.
How Camunda Uses Operations Data
Camunda uses Operations Data to facilitate Product delivery, administer accounts, provide support, maintain security, administer disaster recovery plans, detect fraud, and comply with legal requirements. Camunda may use Operations Data for the following purposes:
Conduct account administration: To provide account management on Products, including managing product downloads, updates, and resolutions, and distributing administrative or account-related communications, including release notes and billing information.
Provide support: When users or individuals contact Camunda via a Camunda support channel so that Camunda may contact them about support requests, in which users may be asked to provide copies of affected files, logs, or other information that will enable Camunda to assist with the support request. In such cases, Camunda uses the requested information to respond to, troubleshoot, and resolve the support request.
Maintain the security of Camunda infrastructure and Products: Maintains security monitoring and incident management, handles the performance and stability of the Products, and addresses technical issues.
Administer disaster recovery plans and policies: To activate Camunda’s back-up disaster recovery plans and policies.
Detect fraud: To help monitor, prevent and detect fraud, improve security, monitor and confirm identity or access, and prevent malware or security risks.
Comply with legal obligations: To comply with applicable laws and regulations, including complying with legally mandated reporting, disclosure or other legal process requests, for mergers and acquisitions, finance and accounting, insurance purposes, legal and business consulting and dispute resolution.
Other legitimate business purposes: Camunda may use Operations Data when it is necessary for other legitimate purposes.
How Camunda Shares Information Collected from Products
Camunda makes every effort to ensure that Product Usage Data and Operations Data is accessed internally only by individuals that require access to perform applicable tasks and duties, and externally only by service providers with a legitimate purpose for accessing it. External service providers are contractually required to protect any Personal Data accessed and are prohibited from reprocessing the Personal Data for any purpose other than to perform the services as instructed by Camunda. Camunda will not sell Personal Data or allow third-parties to use Personal Data for its own commercial purpose. See How Camunda Shares the Information in Camunda’s General Privacy Policy for more information.
How Camunda Uses Cookies and Automatic Data Collection Tools
Depending on the Product used, Camunda may use cookies or other tracking tools for the purposes described in this Policy. Some of these tools are essential for the delivery of the Products, such as account access and authentication, performance and functionality of services, and the ability to analyze and customize the Products. For instance, Camunda uses a tool called Mixpanel in our cloud products to provide a better user experience and diagnose user issues. It records and captures user sessions so that we can monitor user actions like mouse clicks, movements, etc.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with customer’s or user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as perform, improve, maintain, and secure the Products, providing support for users and customers of the Products, and operate the business efficiently and appropriately.
Please contact Camunda via our webform with questions about the legal basis on which Camunda collects and uses Personal Data.
Data Retention
Camunda retains information collected in connection with the Automatic Data Collection Tools and Cookies only for as long as necessary to fulfill the purposes outlined in this Policy.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
User Privacy Rights and Choices
Camunda collects a limited amount of Personal Data to fulfill the purposes outlined in this Policy. Users may exercise their choices with regards to Personal Data, such as the request to accessing, correcting, updating or deleting Personal Data, by contacting us via our webform.
Users have the right to complain to a data protection authority about Camunda’s collection and use of Personal Data. For more information, please contact a local data protection authority. For more information about rights as a data subject, please see Camunda’s General Privacy Policy.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Security
If you have any questions about security, please contact us via our Webform. Camunda is committed to protect the security of Personal Data, by using appropriate technical and organizational measures to protect Personal Data from unauthorized access, use, or disclosure, but cannot eliminate security risks and breaches associated with Personal Data.
Changes to this Policy
This Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Effective April 5th 2023 to May 16th 2025
DownloadTable of Contents
This Product Privacy Policy hereby referred to as “Policy” explains how Camunda Services GmbH and its subsidiaries (“Camunda,” “we,” “us” and “our”) collect, use and share information, including Personal Data, defined by the General Data Protection Regulation (GDPR) as “any information related to an identified or identifiable natural person” from customers or users when using or demoing Camunda’s community, trial or paid products such as Camunda BPM, Camunda Cloud, Camunda Modeler or Cawemo and any other services maintained by Camunda, such as support services, hereby referred to as “the Products”.
Scope
This Policy applies to the information Camunda collects in connection with customer use of the Products, for which we determine the means and purpose of processing. This information includes Product Usage Data (defined below) and Operations Data (defined below), which are generally technical but may include limited Personal Data.
This Policy does not cover:
Service Data. Certain Camunda Products permit customers to consume, or upload and submit, content, including Personal Data to the Products, referred to as Service Data. This Policy does not cover Service Data or any Personal Data contained in Service Data, because the customer’s organization (not Camunda) controls how Service Data is processed.
Processing of Personal Data on our Websites. Processed according to Camunda’s General Privacy Policy, such as Personal Data collected through Camunda websites, hereby referred to as “Sites,” product feedback or surveys; the sales and provisioning process; and in connection with Camunda events, sales and marketing activities. See Camunda’s General Privacy Policy for details on how this information is processed.
Organizational Users: When users use Camunda Products on behalf of an organization (e.g., an employer), the use is administered and provisioned by the user’s organization per its own policies regarding the use and protection of Personal Data. Refer to the organization’s privacy policy for questions relating to how data is accessed and used by the organization.
Contact Camunda
Camunda Services GmbH is Controller within the meaning of the GDPR and of other data protection laws or provisions applicable in the Member States of the European Union.
If you have any questions or concerns regarding this Policy please contact Camunda via our webform or by postal mail to:
Camunda Services GmbH
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Zossener Strasse 55-58
10961 Berlin
Germany
Or phone: +49 30 664 04 09 – 00
Camunda has appointed an external Data Protection Officer for German data subjects.
The Data Protection Officer for Camunda is:
Julian Höppner
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
JBB Data Consult GmbH
Friedrichstraße 95
10117 Berlin
Germany
For questions about how information is gathered, stored, shared, used, or to exercise any data subject rights, please contact our Data Protection Officer as follows:
Information Camunda Collects from Products
Camunda automatically collects “Operations Data” and “Product Usage Data” from customer use of the Products. Operations Data is information Camunda uses to facilitate the delivery of the Products, manage and monitor the Products, and provide support. Product Usage Data is information Camunda uses for product analytics and improvement, which may contain Personal Data such as IP addresses, email addresses, and identifiers, including cookies, but is generally technical, aggregated or pseudonymized. Depending on the Product, the information may include:
Products and System Data: Information about the Products being used and the systems and related environment from which customers access the Service. Examples include Product type and version, license information, installed plug-ins, UUID, and third-party systems used in connection with the Product.
Operations Data: Statistics related to uptime, indexes, shards, and segments and similar data points.
Performance Data: Information about the performance of the Products, such as response times and metrics on the performance and scale of the Products.
Feature Usage Data: Information about how the Products are used, including user interface metrics and details about which features are used or paths users take.
How Camunda Uses Product Usage Data
Camunda uses Product Usage Data in order to improve Products, support Customers and business to business marketing and sales, comply with legal requirements and other legitimate purposes. Camunda may use Product Usage Data for the following purposes:
Product Improvement: To analyze the use of the Products, prioritize testing and development of new features and functionality, improve support responses and forecasting, make pricing decisions, and identify, understand, and anticipate performance issues that affect the Products.
Customer Support: To provide support to our customers, such as guidance that will help optimize usage, identify product improvement opportunities and prioritize future product features, personalize customer’s experience, and suggest related Camunda Products to increase engagement and adoption of Camunda Products.
Business to Business Marketing and Sales: To market additional Products to customers, where permitted by law, and to advise sales discussions.
Legal Requirements: Camunda may be required to access Personal Data contained in Product Usage Data as required by law, such as to comply with legal processes, when Camunda believes, in good faith, that disclosure is necessary to protect or defend Camunda rights, property, or users of the Products in order to protect the safety of others, to investigate fraud, or respond to government requests, including public and government authorities outside a user’s country of residence, for national security or law enforcement purposes.
Other Legitimate Business Purposes: Camunda may use Product Usage Data when it is necessary for other legitimate purposes.
How Camunda Uses Operations Data
Camunda uses Operations Data to facilitate Product delivery, administer accounts, provide support, maintain security, administer disaster recovery plans, detect fraud, and comply with legal requirements. Camunda may use Operations Data for the following purposes:
Conduct account administration: To provide account management on Products, including managing product downloads, updates, and resolutions, and distributing administrative or account-related communications, including release notes and billing information.
Provide support: When users or individuals contact Camunda via a Camunda support channel so that Camunda may contact them about support requests, in which users may be asked to provide copies of affected files, logs, or other information that will enable Camunda to assist with the support request. In such cases, Camunda uses the requested information to respond to, troubleshoot, and resolve the support request.
Maintain the security of Camunda infrastructure and Products: Maintains security monitoring and incident management, handles the performance and stability of the Products, and addresses technical issues.
Administer disaster recovery plans and policies: To activate Camunda’s back-up disaster recovery plans and policies.
Detect fraud: To help monitor, prevent and detect fraud, improve security, monitor and confirm identity or access, and prevent malware or security risks.
Comply with legal obligations: To comply with applicable laws and regulations, including complying with legally mandated reporting, disclosure or other legal process requests, for mergers and acquisitions, finance and accounting, insurance purposes, legal and business consulting and dispute resolution.
Other legitimate business purposes: Camunda may use Operations Data when it is necessary for other legitimate purposes.
How Camunda Shares Information Collected from Products
Camunda makes every effort to ensure that Product Usage Data and Operations Data is accessed internally only by individuals that require access to perform applicable tasks and duties, and externally only by service providers with a legitimate purpose for accessing it. External service providers are contractually required to protect any Personal Data accessed and are prohibited from reprocessing the Personal Data for any purpose other than to perform the services as instructed by Camunda. Camunda will not sell Personal Data or allow third-parties to use Personal Data for its own commercial purpose. See How Camunda Shares the Information in Camunda’s General Privacy Policy for more information.
How Camunda Uses Cookies and Automatic Data Collection Tools
Depending on the Product used, Camunda may use cookies or other tracking tools for the purposes described in this Policy. Some of these tools are essential for the delivery of the Products, such as account access and authentication, performance and functionality of services, and the ability to analyze and customize the Products. For instance, Camunda uses a tool called Mixpanel in our cloud products to provide a better user experience and diagnose user issues. It records and captures user sessions so that we can monitor user actions like mouse clicks, movements, etc.
Legal Basis for Processing Information
Camunda only uses customer and user Personal Data in a lawful, apparent, and reasonable manner. Camunda relies on the following legal bases:
- Consistent with customer’s or user’s specific revocable consents in accord with Art. 6 I a GDPR;
- To prepare, enter into and fulfill a contract in accord with Art. 6 I b GDPR, as necessary;
- As necessary for Camunda’s legitimate interests in accord with Art. 6 I f GDPR, such as perform, improve, maintain, and secure the Products, providing support for users and customers of the Products, and operate the business efficiently and appropriately.
Please contact Camunda via our webform with questions about the legal basis on which Camunda collects and uses Personal Data.
Data Retention
Camunda retains information collected in connection with the Automatic Data Collection Tools and Cookies only for as long as necessary to fulfill the purposes outlined in this Policy.
International Data Transfers
A user’s personal data may be accessed, stored, transferred to and processed in countries other than the country in which the person resides. As an internationally operating company, Camunda processes Personal Data in countries outside the European Economic Area (“EEA“), including the USA. These countries may have data protection laws that differ from the laws of the country where the person resides. We have taken adequate security precautions to ensure that such personal data remains protected in accordance with this Policy and we have established adequate mechanisms to protect personal data in agreements with Camunda’s service providers such as use the standard contractual clauses of the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.
User Privacy Rights and Choices
Camunda collects a limited amount of Personal Data to fulfill the purposes outlined in this Policy. Users may exercise their choices with regards to Personal Data, such as the request to accessing, correcting, updating or deleting Personal Data, by contacting us via our webform.
Users have the right to complain to a data protection authority about Camunda’s collection and use of Personal Data. For more information, please contact a local data protection authority. For more information about rights as a data subject, please see Camunda’s General Privacy Policy.
California Privacy Rights
Please see California Specific Privacy Policy for information about Privacy Rights of California residents, and other required disclosures.
Security
If you have any questions about security, please contact us via our Webform. Camunda is committed to protect the security of Personal Data, by using appropriate technical and organizational measures to protect Personal Data from unauthorized access, use, or disclosure, but cannot eliminate security risks and breaches associated with Personal Data.
Changes to this Policy
This Policy is subject to occasional revision. If substantial changes are made in the way Camunda uses personal data, appropriate measures will be taken to inform customers, consistent with the significance of the changes made, and Camunda will provide notice of any material Policy changes where required by applicable data protection laws.
Effective Date: October 12, 2020
Change log
October 2022: This privacy policy has been updated to introduce a new webform to facilitate contacting Camunda around privacy related issues.
Produktdatenschutzrichtlinie
Effective June 19th 2025
DownloadTable of Contents
Diese Produktdatenschutzrichtlinie, im Folgenden als „Richtlinie“ bezeichnet, erklärt, wie die Camunda Services GmbH und ihre Tochtergesellschaften („Camunda“, „wir“, „uns“ und „unser“) Informationen, einschließlich personenbezogener Daten, sammeln, verwenden und weitergeben, definiert durch die General Data Protection Regulation (GDPR) als „alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person beziehen“, von Kunden oder Nutzern, wenn diese Camundas Community-, Test- oder kostenpflichtige Produkte wie Camunda BPM, Camunda Cloud, Camunda Modeler oder Cawemo und andere von Camunda unterhaltene Dienste, z. B. Support-Services, nutzen oder testen, im Folgenden als „die Produkte“ bezeichnet.
Geltungsbereich
Diese Richtlinie gilt für die Informationen, die Camunda im Zusammenhang mit der Nutzung der Produkte durch den Kunden erhebt und für die wir die Mittel und den Zweck der Verarbeitung bestimmen. Zu diesen Informationen gehören Produktnutzungsdaten (siehe unten) und Betriebsdaten (siehe unten), die im Allgemeinen technischer Natur sind, aber in begrenztem Umfang auch personenbezogene Daten enthalten können.
Diese Richtlinie gilt nicht für:
Servicedaten: Bestimmte Camunda-Produkte erlauben es den Kunden, Inhalte, einschließlich personenbezogener Daten, an unsere Produkte zu übermitteln oder hochzuladen, die als Servicedaten bezeichnet werden. Diese Richtlinie bezieht sich nicht auf Servicedaten oder personenbezogene Daten, die in Servicedaten enthalten sind, da dies die Daten unserer Kunden sind und unsere Kunden (nicht Camunda) diese Daten kontrollieren und bestimmen, wie Servicedaten verarbeitet werden.
Verarbeitung personenbezogener Daten auf unseren Websites: Diese Daten werden gemäß Camundas Allgemeiner Datenschutzrichtlinie verarbeitet und können beispielsweise personenbezogene Daten sein, die über die Camundas Webseiten (im Folgenden als „Seiten“ bezeichnet) erhoben werden, im Rahmen der Erhebung von Produktfeedback oder Umfragen, dem Verkauf und der Bereitstellung unserer Produkte oder Daten, die in Verbindung mit Veranstaltungen, Verkaufs- und Marketingaktivitäten von Camunda verarbeitet werden. Einzelheiten zur Verarbeitung dieser Informationen sind in Camundas Allgemeiner Datenschutzrichtlinie einsehbar.
Organisatorische Nutzer: Wenn Nutzer Camunda-Produkte im Namen einer Organisation (z. B. eines Arbeitgebers) nutzen, wird die Nutzung von der Organisation des Nutzers gemäß ihrer eigenen Richtlinien bezüglich der Nutzung und des Schutzes von persönlichen Daten verwaltet und bereitgestellt. In den Datenschutzrichtlinien der Organisation finden Sie Informationen darüber, wie die Organisation auf Daten zugreift und sie verwendet.
Kontakt zu Camunda
Die Camunda Services GmbH ist Verantwortlicher im Sinne der DSGVO und anderer in den Mitgliedstaaten der Europäischen Union geltenden Datenschutzgesetze oder -bestimmungen.
Wenn Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, kontaktieren Sie uns bitte über unser Webformular oder auf dem Postweg:
Camunda Services GmbH Zossener Straße 55-58 10961 Berlin Deutschland Telefonnummer: +49 30 664 04 09 – 00 Camunda hat einen externen Datenschutzbeauftragten für deutsche betroffene Personen ernannt.
Der Datenschutzbeauftragte von Camunda ist:
Julian Höppner JBB Data Consult GmbH Friedrichstraße 95 10117 Berlin Deutschland
Wenn Sie Fragen dazu haben, wie Informationen erhoben, gespeichert, weitergegeben und verwendet werden, oder wenn Sie Ihre Rechte als Betroffener ausüben möchten, wenden Sie sich bitte an unseren Datenschutzbeauftragten:
Tel.: +49 30 20962282 E-Mail: hoeppner@jbbdataconsult.de Webseiten: www.jbbdataconsult.de
Informationen, die Camunda durch Produkte erhebt
Camunda sammelt automatisch „Betriebsdaten“ und „Produktnutzungsdaten“ aus der Nutzung der Produkte durch den Kunden. Betriebsdaten sind Informationen, die Camunda verwendet, um die Lieferung der Produkte zu erleichtern, die Produkte zu verwalten, zu überwachen und Support zu leisten. Produktnutzungsdaten sind Informationen, die Camunda für Produktanalysen und -verbesserungen verwendet und die personenbezogene Daten wie IP-Adressen, E-Mail-Adressen und Identifikatoren, einschließlich Cookies, enthalten können, aber die im Allgemeinen technisch, zusammengefasst oder pseudonymisiert sind. Je nach Produkt können die Informationen Folgendes umfassen:
Produkte und Systemdaten: Informationen über die verwendeten Produkte und die Systeme und die zugehörige Umgebung, von denen aus die Kunden auf den Dienst zugreifen. Beispiele hierfür sind Produkttyp und -version, Lizenzinformationen, installierte Plug-ins, UUID und Systeme von Drittanbietern, die in Verbindung mit dem Produkt verwendet werden.
Betriebsdaten: Statistiken in Bezug auf Betriebszeit, Indizes, Shards und Segmente und ähnliche Datenpunkte.
Leistungsdaten: Informationen über die Leistung der Produkte, z. B. Antwortzeiten und Metriken zur Leistung und zum Umfang der Produkte.
Daten durch Nutzung von Funktionen: Informationen darüber, wie die Produkte genutzt werden, einschließlich Metriken der Benutzeroberfläche und Details darüber, welche Funktionen genutzt werden oder welche Pfade die Benutzer verwenden.
Wie Camunda die Produktnutzungsdaten verwendet
Camunda verwendet Produktnutzungsdaten, um Produkte zu verbessern, Kunden und Business-to-Business-Marketing und -Sales zu unterstützen, gesetzliche Anforderungen zu erfüllen und andere rechtmäßige Zwecke zu erfüllen. Camunda kann Produktnutzungsdaten für die folgenden Zwecke verwenden:
Produktverbesserung: Analyse der Produktnutzung, Priorisierung von Tests und Entwicklung neuer Funktionen, Verbesserung von Support- Reaktionen und Prognosen, Preisentscheidungen und Identifizierung, Verständnis und Vorwegnahme von Leistungsproblemen, die die Produkte betreffen.
Customer Support: Um unseren Kunden Unterstützung zu bieten, z. B. Anleitung zur Optimierung der Nutzung, Identifizierung von Möglichkeiten zur Produktverbesserung und Priorisierung zukünftiger Produktfunktionen, Personalisierung der Kundenerfahrung und Vorschläge für verwandte Camunda-Produkte, um das Engagement mit und die Akzeptanz der Camunda-Produkte(n) zu erhöhen.
Business-to-Business-Marketing und -Sales: Zur Vermarktung zusätzlicher Produkte an Kunden, soweit gesetzlich zulässig, und zur Beratung in Verkaufsgesprächen.
Gesetzliche Anforderungen: Camunda kann verpflichtet sein, auf personenbezogene Daten, die in den Produktnutzungsdaten enthalten sind, zuzugreifen, wenn dies gesetzlich vorgeschrieben ist, z. B. um rechtlichen Verfahren nachzukommen, wenn Camunda in gutem Glauben davon ausgeht, dass die Offenlegung notwendig ist, um die Rechte, das Eigentum oder die Nutzer der Produkte von Camunda zu schützen oder zu verteidigen, um die Sicherheit anderer zu schützen, um Betrug zu untersuchen oder um auf staatliche Anfragen zu reagieren, einschließlich öffentlicher und staatlicher Behörden außerhalb des Wohnsitzlandes eines Nutzers, für Zwecke der nationalen Sicherheit oder der Strafverfolgung.
Andere rechtmäßige Geschäftszwecke: Camunda kann Produktnutzungsdaten verwenden, wenn dies für andere rechtmäßige Zwecke erforderlich ist.
Wie Camunda Betriebsdaten verwendet
Camunda verwendet Betriebsdaten, um die Produktlieferung zu erleichtern, Konten zu verwalten, Support zu leisten, die Sicherheit aufrechtzuerhalten, Notfallpläne zu verwalten, Betrug aufzudecken und gesetzliche Anforderungen zu erfüllen. Camunda kann Betriebsdaten für die folgenden Zwecke verwenden:
Durchführung der Kontoverwaltung: Kontoverwaltung für Produkte, einschließlich der Verwaltung von Produktdownloads, -updates und - auflösungen sowie der Verteilung von administrativen oder kontobezogenen Mitteilungen, einschließlich Versionshinweisen und Rechnungsinformationen.
Support bereitstellen: Wenn Benutzer oder Einzelpersonen Camunda über einen Camunda-Supportkanal kontaktieren, damit Camunda sie bezüglich Supportanfragen kontaktieren kann, in denen Benutzer möglicherweise gebeten werden, Kopien der entsprechenden Dateien, Protokolle oder andere Informationen bereitzustellen, die es Camunda ermöglichen, bei der Supportanfrage zu helfen. In solchen Fällen verwendet Camunda die angeforderten Informationen, um auf die Supportanfrage zu reagieren, Fehler zu beheben und die Probleme zu lösen.
Aufrechterhaltung der Sicherheit der Infrastruktur und Produkte von Camunda: Überwachung der Sicherheit und Verwaltung von Zwischenfällen, Überwachung der Leistung und Stabilität der Produkte und Behebung technischer Probleme.
Verwalten von Disaster-Recovery-Plänen und -Richtlinien: So aktivieren Sie Camundas Backup-Disaster-Recovery-Pläne und -Richtlinien.
Erkennung von Betrug: Zur Überwachung, Verhinderung und Aufdeckung von Betrug, zur Verbesserung der Sicherheit, zur Überwachung und Bestätigung der Identität oder des Zugangs und zur Verhinderung von Malware oder Sicherheitsrisiken.
Erfüllung rechtlicher Verpflichtungen: Zur Einhaltung geltender Gesetze und Vorschriften, einschließlich der Erfüllung gesetzlich vorgeschriebener Melde-, Offenlegungs- oder sonstiger rechtlicher Anforderungen, für Fusionen und Übernahmen, Finanz- und Rechnungswesen, Versicherungszwecke, Rechts- und Unternehmensberatung und Streitbeilegung.
Andere rechtmäßige Geschäftszwecke: Camunda kann Betriebsdaten verwenden, wenn dies für andere rechtmäßige Zwecke erforderlich ist.
Wie Camunda durch Produkte erhobene Informationen weitergibt
Camunda unternimmt alle Anstrengungen, um sicherzustellen, dass der Zugriff auf Produktnutzungs- und Betriebsdaten intern nur von Personen erfolgt, die den Zugriff benötigen, um die entsprechenden Aufgaben und Pflichten zu erfüllen, und extern nur von Dienstleistern, die einen rechtmäßigen Grund für den Zugriff auf diese Daten haben. Externe Dienstleister sind vertraglich verpflichtet, alle personenbezogenen Daten zu schützen, auf die sie Zugriff haben, und es ist ihnen untersagt, die personenbezogenen Daten zu anderen Zwecken als zur Erbringung der von Camunda angewiesenen Dienstleistungen weiterzuverarbeiten. Camunda wird keine persönlichen Daten verkaufen oder Dritten erlauben, persönliche Daten für ihre eigenen kommerziellen Zwecke zu nutzen. Wie Camunda Informationen weitergibt, erfahren Sie auf der folgenden Webseite: Allgemeine Datenschutzrichtlinie.
Wie Camunda Cookies und Tools zur automatischen Datenerfassung verwendet
Je nach verwendetem Produkt kann Camunda Cookies oder andere Tracking-Tools für die in dieser Richtlinie beschriebenen Zwecke verwenden. Einige dieser Tools sind für die Bereitstellung der Produkte unerlässlich, z. B. für den Kontozugriff und die Authentifizierung, die Leistung und Funktionalität der Dienste sowie die Möglichkeit, die Produkte zu analysieren und anzupassen. Wir verwenden zum Beispiel ein Tool namens Mixpanel in unseren Cloud-Produkten, um ein besseres Nutzererlebnis zu bieten und Nutzerprobleme zu diagnostizieren. Es zeichnet Benutzersitzungen auf und erfasst sie, so dass wir Benutzeraktionen wie Mausklicks, Bewegungen usw. überwachen können.
Rechtsgrundlage für die Verarbeitung von Informationen
Camunda verwendet die persönlichen Daten von Kunden und Nutzern nur auf rechtmäßige, offensichtliche und angemessene Weise. Camunda stützt sich auf die folgenden Rechtsgrundlagen:
In Übereinstimmung mit den spezifischen widerruflichen Einwilligungen des Kunden oder Nutzers gemäß Art. 6 I a GDPR; Zur Vorbereitung, zum Abschluss und zur Erfüllung eines Vertrages gemäß Art. 6 I b GDPR, soweit erforderlich;
Soweit dies für die berechtigten Interessen von Camunda gemäß Art. 6 I f GDPR, z.B. die Durchführung, Verbesserung, Wartung und Sicherung der Produkte, die Bereitstellung von Support für Nutzer und Kunden der Produkte und der effiziente und angemessene Betrieb des Geschäfts.
Wenn Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, kontaktieren Sie uns bitte über unser Webformular oder auf dem Postweg:
Speicherung von Daten
Camunda speichert Informationen, die in Verbindung mit den automatischen Datenerfassungstools und Cookies gesammelt werden, nur so lange, wie es für die Erfüllung der in dieser Richtlinie beschriebenen Zwecke erforderlich ist.
Internationale Datenübermittlung
Die personenbezogenen Daten eines Nutzers können in andere Länder (nicht das Land, in dem die Person ansässig ist) übermittelt werden und in diesen abgerufen, gespeichert und verarbeitet werden. Als international tätiges Unternehmen verarbeitet Camunda personenbezogene Daten in Ländern außerhalb des Europäischen Wirtschaftsraums („EWR“), darunter auch in den USA. In diesen Ländern gelten möglicherweise andere Datenschutzgesetze als in dem Land, in dem die Person ansässig ist. Wir haben angemessene Sicherheitsvorkehrungen getroffen, um sicherzustellen, dass solche personenbezogenen Daten in Übereinstimmung mit dieser Richtlinie geschützt bleiben, und wir haben angemessene Verfahren zum Schutz personenbezogener Daten in Vereinbarungen mit Camundas Dienstleistern eingerichtet, z. B. die Verwendung der Standardvertragsklauseln der EU-Kommission gemäß Art. 46 Abs. 2 lit. c GDPR.
Datenschutzrechte und Rechte der Nutzer
Camunda erhebt eine begrenzte Menge an personenbezogenen Daten, um die in dieser Richtlinie beschriebenen Zwecke zu erfüllen. Die Nutzer können bestimmte Rechte in Bezug auf personenbezogene Daten ausüben, z. B. den Antrag auf Zugang, Berichtigung, Aktualisierung oder Löschung personenbezogener Daten, indem sie unser Camunda-Webformular verwenden.
Nutzer haben das Recht, sich bei einer Datenschutzbehörde über die Erhebung und Verwendung personenbezogener Daten durch Camunda zu beschweren. Weitere Informationen erhalten Sie von einer lokalen Datenschutzbehörde. Weitere Informationen über die Rechte als betroffene Person finden Sie in Camundas allgemeiner Datenschutzrichtlinie.
Datenschutzrechte in Kalifornien
Informationen über die Datenschutzrechte von Einwohnern Kaliforniens und andere erforderliche Angaben finden Sie in der speziellen Datenschutzrichtlinie für Kalifornien.
Sicherheit
Wenn Sie Fragen zur Sicherheit haben, kontaktieren Sie uns bitte unter infosec@Camunda.com. Camunda verpflichtet sich, die Sicherheit personenbezogener Daten zu schützen, indem angemessene technische und organisatorische Maßnahmen ergriffen werden, um personenbezogene Daten vor unbefugtem Zugriff, unbefugter Nutzung und unbefugter Offenlegung zu schützen, kann jedoch Sicherheitsrisiken und Verstöße im Zusammenhang mit personenbezogenen Daten nicht ausschließen.
Änderungen an dieser Richtlinie
Diese Richtlinie wird gelegentlich überarbeitet. Wenn wesentliche Änderungen in der Art und Weise vorgenommen werden, wie Camunda personenbezogene Daten verwendet, werden angemessene Maßnahmen ergriffen, um die Kunden zu informieren, die dem Ausmaß der vorgenommenen Änderungen entsprechen, und Camunda wird über alle wesentlichen Änderungen der Richtlinien informieren, sofern dies von den geltenden Datenschutzgesetzen verlangt wird.
Datum des Inkrafttretens: 12. Oktober 2020
Änderungsprotokoll
Oktober 2022: Diese Datenschutzrichtlinie wurde aktualisiert, um ein neues Webformular einzuführen, das die Kontaktaufnahme mit Camunda bei datenschutzrelevanten Fragen erleichtert.
Effective May 16th 2025 to June 19th 2025
DownloadTable of Contents
Diese Produktdatenschutzrichtlinie, im Folgenden als „Richtlinie“ bezeichnet, erklärt, wie die Camunda Services GmbH und ihre Tochtergesellschaften („Camunda“, „wir“, „uns“ und „unser“) Informationen, einschließlich personenbezogener Daten, sammeln, verwenden und weitergeben, definiert durch die General Data Protection Regulation (GDPR) als „alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person beziehen“, von Kunden oder Nutzern, wenn diese Camundas Community-, Test- oder kostenpflichtige Produkte wie Camunda BPM, Camunda Cloud, Camunda Modeler oder Cawemo und andere von Camunda unterhaltene Dienste, z. B. Support-Services, nutzen oder testen, im Folgenden als „die Produkte“ bezeichnet.
Geltungsbereich
Diese Richtlinie gilt für die Informationen, die Camunda im Zusammenhang mit der Nutzung der Produkte durch den Kunden erhebt und für die wir die Mittel und den Zweck der Verarbeitung bestimmen. Zu diesen Informationen gehören Produktnutzungsdaten (siehe unten) und Betriebsdaten (siehe unten), die im Allgemeinen technischer Natur sind, aber in begrenztem Umfang auch personenbezogene Daten enthalten können.
Diese Richtlinie gilt nicht für:
Servicedaten: Bestimmte Camunda-Produkte erlauben es den Kunden, Inhalte, einschließlich personenbezogener Daten, an unsere Produkte zu übermitteln oder hochzuladen, die als Servicedaten bezeichnet werden. Diese Richtlinie bezieht sich nicht auf Servicedaten oder personenbezogene Daten, die in Servicedaten enthalten sind, da dies die Daten unserer Kunden sind und unsere Kunden (nicht Camunda) diese Daten kontrollieren und bestimmen, wie Servicedaten verarbeitet werden.
Verarbeitung personenbezogener Daten auf unseren Websites: Diese Daten werden gemäß Camundas Allgemeiner Datenschutzrichtlinie verarbeitet und können beispielsweise personenbezogene Daten sein, die über die Camundas Webseiten (im Folgenden als „Seiten“ bezeichnet) erhoben werden, im Rahmen der Erhebung von Produktfeedback oder Umfragen, dem Verkauf und der Bereitstellung unserer Produkte oder Daten, die in Verbindung mit Veranstaltungen, Verkaufs- und Marketingaktivitäten von Camunda verarbeitet werden. Einzelheiten zur Verarbeitung dieser Informationen sind in Camundas Allgemeiner Datenschutzrichtlinie einsehbar.
Organisatorische Nutzer: Wenn Nutzer Camunda-Produkte im Namen einer Organisation (z. B. eines Arbeitgebers) nutzen, wird die Nutzung von der Organisation des Nutzers gemäß ihrer eigenen Richtlinien bezüglich der Nutzung und des Schutzes von persönlichen Daten verwaltet und bereitgestellt. In den Datenschutzrichtlinien der Organisation finden Sie Informationen darüber, wie die Organisation auf Daten zugreift und sie verwendet.
Kontakt zu Camunda
Die Camunda Services GmbH ist Verantwortlicher im Sinne der DSGVO und anderer in den Mitgliedstaaten der Europäischen Union geltenden Datenschutzgesetze oder -bestimmungen.
Wenn Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, kontaktieren Sie uns bitte über unser Webformular oder auf dem Postweg:
Camunda Services GmbH Zossener Straße 55-58 10961 Berlin Deutschland Telefonnummer: +49 30 664 04 09 – 00 Camunda hat einen externen Datenschutzbeauftragten für deutsche betroffene Personen ernannt.
Der Datenschutzbeauftragte von Camunda ist:
Julian Höppner JBB Data Consult GmbH Friedrichstraße 95 10117 Berlin Deutschland
Wenn Sie Fragen dazu haben, wie Informationen erhoben, gespeichert, weitergegeben und verwendet werden, oder wenn Sie Ihre Rechte als Betroffener ausüben möchten, wenden Sie sich bitte an unseren Datenschutzbeauftragten:
Tel.: +49 30 20962282 E-Mail: hoeppner@jbbdataconsult.de Webseiten: www.jbbdataconsult.de
Informationen, die Camunda durch Produkte erhebt
Camunda sammelt automatisch „Betriebsdaten“ und „Produktnutzungsdaten“ aus der Nutzung der Produkte durch den Kunden. Betriebsdaten sind Informationen, die Camunda verwendet, um die Lieferung der Produkte zu erleichtern, die Produkte zu verwalten, zu überwachen und Support zu leisten. Produktnutzungsdaten sind Informationen, die Camunda für Produktanalysen und -verbesserungen verwendet und die personenbezogene Daten wie IP-Adressen, E-Mail-Adressen und Identifikatoren, einschließlich Cookies, enthalten können, aber die im Allgemeinen technisch, zusammengefasst oder pseudonymisiert sind. Je nach Produkt können die Informationen Folgendes umfassen:
Produkte und Systemdaten: Informationen über die verwendeten Produkte und die Systeme und die zugehörige Umgebung, von denen aus die Kunden auf den Dienst zugreifen. Beispiele hierfür sind Produkttyp und -version, Lizenzinformationen, installierte Plug-ins, UUID und Systeme von Drittanbietern, die in Verbindung mit dem Produkt verwendet werden.
Betriebsdaten: Statistiken in Bezug auf Betriebszeit, Indizes, Shards und Segmente und ähnliche Datenpunkte.
Leistungsdaten: Informationen über die Leistung der Produkte, z. B. Antwortzeiten und Metriken zur Leistung und zum Umfang der Produkte.
Daten durch Nutzung von Funktionen: Informationen darüber, wie die Produkte genutzt werden, einschließlich Metriken der Benutzeroberfläche und Details darüber, welche Funktionen genutzt werden oder welche Pfade die Benutzer verwenden.
Wie Camunda die Produktnutzungsdaten verwendet
Camunda verwendet Produktnutzungsdaten, um Produkte zu verbessern, Kunden und Business-to-Business-Marketing und -Sales zu unterstützen, gesetzliche Anforderungen zu erfüllen und andere rechtmäßige Zwecke zu erfüllen. Camunda kann Produktnutzungsdaten für die folgenden Zwecke verwenden:
Produktverbesserung: Analyse der Produktnutzung, Priorisierung von Tests und Entwicklung neuer Funktionen, Verbesserung von Support- Reaktionen und Prognosen, Preisentscheidungen und Identifizierung, Verständnis und Vorwegnahme von Leistungsproblemen, die die Produkte betreffen.
Customer Support: Um unseren Kunden Unterstützung zu bieten, z. B. Anleitung zur Optimierung der Nutzung, Identifizierung von Möglichkeiten zur Produktverbesserung und Priorisierung zukünftiger Produktfunktionen, Personalisierung der Kundenerfahrung und Vorschläge für verwandte Camunda-Produkte, um das Engagement mit und die Akzeptanz der Camunda-Produkte(n) zu erhöhen.
Business-to-Business-Marketing und -Sales: Zur Vermarktung zusätzlicher Produkte an Kunden, soweit gesetzlich zulässig, und zur Beratung in Verkaufsgesprächen.
Gesetzliche Anforderungen: Camunda kann verpflichtet sein, auf personenbezogene Daten, die in den Produktnutzungsdaten enthalten sind, zuzugreifen, wenn dies gesetzlich vorgeschrieben ist, z. B. um rechtlichen Verfahren nachzukommen, wenn Camunda in gutem Glauben davon ausgeht, dass die Offenlegung notwendig ist, um die Rechte, das Eigentum oder die Nutzer der Produkte von Camunda zu schützen oder zu verteidigen, um die Sicherheit anderer zu schützen, um Betrug zu untersuchen oder um auf staatliche Anfragen zu reagieren, einschließlich öffentlicher und staatlicher Behörden außerhalb des Wohnsitzlandes eines Nutzers, für Zwecke der nationalen Sicherheit oder der Strafverfolgung.
Andere rechtmäßige Geschäftszwecke: Camunda kann Produktnutzungsdaten verwenden, wenn dies für andere rechtmäßige Zwecke erforderlich ist.
Wie Camunda Betriebsdaten verwendet
Camunda verwendet Betriebsdaten, um die Produktlieferung zu erleichtern, Konten zu verwalten, Support zu leisten, die Sicherheit aufrechtzuerhalten, Notfallpläne zu verwalten, Betrug aufzudecken und gesetzliche Anforderungen zu erfüllen. Camunda kann Betriebsdaten für die folgenden Zwecke verwenden:
Durchführung der Kontoverwaltung: Kontoverwaltung für Produkte, einschließlich der Verwaltung von Produktdownloads, -updates und - auflösungen sowie der Verteilung von administrativen oder kontobezogenen Mitteilungen, einschließlich Versionshinweisen und Rechnungsinformationen.
Support bereitstellen: Wenn Benutzer oder Einzelpersonen Camunda über einen Camunda-Supportkanal kontaktieren, damit Camunda sie bezüglich Supportanfragen kontaktieren kann, in denen Benutzer möglicherweise gebeten werden, Kopien der entsprechenden Dateien, Protokolle oder andere Informationen bereitzustellen, die es Camunda ermöglichen, bei der Supportanfrage zu helfen. In solchen Fällen verwendet Camunda die angeforderten Informationen, um auf die Supportanfrage zu reagieren, Fehler zu beheben und die Probleme zu lösen.
Aufrechterhaltung der Sicherheit der Infrastruktur und Produkte von Camunda: Überwachung der Sicherheit und Verwaltung von Zwischenfällen, Überwachung der Leistung und Stabilität der Produkte und Behebung technischer Probleme.
Verwalten von Disaster-Recovery-Plänen und -Richtlinien: So aktivieren Sie Camundas Backup-Disaster-Recovery-Pläne und -Richtlinien.
Erkennung von Betrug: Zur Überwachung, Verhinderung und Aufdeckung von Betrug, zur Verbesserung der Sicherheit, zur Überwachung und Bestätigung der Identität oder des Zugangs und zur Verhinderung von Malware oder Sicherheitsrisiken.
Erfüllung rechtlicher Verpflichtungen: Zur Einhaltung geltender Gesetze und Vorschriften, einschließlich der Erfüllung gesetzlich vorgeschriebener Melde-, Offenlegungs- oder sonstiger rechtlicher Anforderungen, für Fusionen und Übernahmen, Finanz- und Rechnungswesen, Versicherungszwecke, Rechts- und Unternehmensberatung und Streitbeilegung.
Andere rechtmäßige Geschäftszwecke: Camunda kann Betriebsdaten verwenden, wenn dies für andere rechtmäßige Zwecke erforderlich ist.
Wie Camunda durch Produkte erhobene Informationen weitergibt
Camunda unternimmt alle Anstrengungen, um sicherzustellen, dass der Zugriff auf Produktnutzungs- und Betriebsdaten intern nur von Personen erfolgt, die den Zugriff benötigen, um die entsprechenden Aufgaben und Pflichten zu erfüllen, und extern nur von Dienstleistern, die einen rechtmäßigen Grund für den Zugriff auf diese Daten haben. Externe Dienstleister sind vertraglich verpflichtet, alle personenbezogenen Daten zu schützen, auf die sie Zugriff haben, und es ist ihnen untersagt, die personenbezogenen Daten zu anderen Zwecken als zur Erbringung der von Camunda angewiesenen Dienstleistungen weiterzuverarbeiten. Camunda wird keine persönlichen Daten verkaufen oder Dritten erlauben, persönliche Daten für ihre eigenen kommerziellen Zwecke zu nutzen. Wie Camunda Informationen weitergibt, erfahren Sie auf der folgenden Webseite: Allgemeine Datenschutzrichtlinie.
Wie Camunda Cookies und Tools zur automatischen Datenerfassung verwendet
Je nach verwendetem Produkt kann Camunda Cookies oder andere Tracking-Tools für die in dieser Richtlinie beschriebenen Zwecke verwenden. Einige dieser Tools sind für die Bereitstellung der Produkte unerlässlich, z. B. für den Kontozugriff und die Authentifizierung, die Leistung und Funktionalität der Dienste sowie die Möglichkeit, die Produkte zu analysieren und anzupassen. Wir verwenden zum Beispiel ein Tool namens Mixpanel in unseren Cloud-Produkten, um ein besseres Nutzererlebnis zu bieten und Nutzerprobleme zu diagnostizieren. Es zeichnet Benutzersitzungen auf und erfasst sie, so dass wir Benutzeraktionen wie Mausklicks, Bewegungen usw. überwachen können.
Rechtsgrundlage für die Verarbeitung von Informationen
Camunda verwendet die persönlichen Daten von Kunden und Nutzern nur auf rechtmäßige, offensichtliche und angemessene Weise. Camunda stützt sich auf die folgenden Rechtsgrundlagen:
In Übereinstimmung mit den spezifischen widerruflichen Einwilligungen des Kunden oder Nutzers gemäß Art. 6 I a GDPR; Zur Vorbereitung, zum Abschluss und zur Erfüllung eines Vertrages gemäß Art. 6 I b GDPR, soweit erforderlich;
Soweit dies für die berechtigten Interessen von Camunda gemäß Art. 6 I f GDPR, z.B. die Durchführung, Verbesserung, Wartung und Sicherung der Produkte, die Bereitstellung von Support für Nutzer und Kunden der Produkte und der effiziente und angemessene Betrieb des Geschäfts.
Wenn Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, kontaktieren Sie uns bitte über unser Webformular oder auf dem Postweg:
Speicherung von Daten
Camunda speichert Informationen, die in Verbindung mit den automatischen Datenerfassungstools und Cookies gesammelt werden, nur so lange, wie es für die Erfüllung der in dieser Richtlinie beschriebenen Zwecke erforderlich ist.
Internationale Datenübermittlung
Die personenbezogenen Daten eines Nutzers können in andere Länder (nicht das Land, in dem die Person ansässig ist) übermittelt werden und in diesen abgerufen, gespeichert und verarbeitet werden. Als international tätiges Unternehmen verarbeitet Camunda personenbezogene Daten in Ländern außerhalb des Europäischen Wirtschaftsraums („EWR“), darunter auch in den USA. In diesen Ländern gelten möglicherweise andere Datenschutzgesetze als in dem Land, in dem die Person ansässig ist. Wir haben angemessene Sicherheitsvorkehrungen getroffen, um sicherzustellen, dass solche personenbezogenen Daten in Übereinstimmung mit dieser Richtlinie geschützt bleiben, und wir haben angemessene Verfahren zum Schutz personenbezogener Daten in Vereinbarungen mit Camundas Dienstleistern eingerichtet, z. B. die Verwendung der Standardvertragsklauseln der EU-Kommission gemäß Art. 46 Abs. 2 lit. c GDPR.
Datenschutzrechte und Rechte der Nutzer
Camunda erhebt eine begrenzte Menge an personenbezogenen Daten, um die in dieser Richtlinie beschriebenen Zwecke zu erfüllen. Die Nutzer können bestimmte Rechte in Bezug auf personenbezogene Daten ausüben, z. B. den Antrag auf Zugang, Berichtigung, Aktualisierung oder Löschung personenbezogener Daten, indem sie unser Camunda-Webformular verwenden.
Nutzer haben das Recht, sich bei einer Datenschutzbehörde über die Erhebung und Verwendung personenbezogener Daten durch Camunda zu beschweren. Weitere Informationen erhalten Sie von einer lokalen Datenschutzbehörde. Weitere Informationen über die Rechte als betroffene Person finden Sie in Camundas allgemeiner Datenschutzrichtlinie.
Datenschutzrechte in Kalifornien
Informationen über die Datenschutzrechte von Einwohnern Kaliforniens und andere erforderliche Angaben finden Sie in der speziellen Datenschutzrichtlinie für Kalifornien.
Sicherheit
Wenn Sie Fragen zur Sicherheit haben, kontaktieren Sie uns bitte unter infosec@Camunda.com. Camunda verpflichtet sich, die Sicherheit personenbezogener Daten zu schützen, indem angemessene technische und organisatorische Maßnahmen ergriffen werden, um personenbezogene Daten vor unbefugtem Zugriff, unbefugter Nutzung und unbefugter Offenlegung zu schützen, kann jedoch Sicherheitsrisiken und Verstöße im Zusammenhang mit personenbezogenen Daten nicht ausschließen.
Änderungen an dieser Richtlinie
Diese Richtlinie wird gelegentlich überarbeitet. Wenn wesentliche Änderungen in der Art und Weise vorgenommen werden, wie Camunda personenbezogene Daten verwendet, werden angemessene Maßnahmen ergriffen, um die Kunden zu informieren, die dem Ausmaß der vorgenommenen Änderungen entsprechen, und Camunda wird über alle wesentlichen Änderungen der Richtlinien informieren, sofern dies von den geltenden Datenschutzgesetzen verlangt wird.
Datum des Inkrafttretens: 12. Oktober 2020
Änderungsprotokoll
Oktober 2022: Diese Datenschutzrichtlinie wurde aktualisiert, um ein neues Webformular einzuführen, das die Kontaktaufnahme mit Camunda bei datenschutzrelevanten Fragen erleichtert.
Effective May 16th 2023 to May 16th 2025
DownloadTable of Contents
Diese Produktdatenschutzrichtlinie, im Folgenden als „Richtlinie“ bezeichnet, erklärt, wie die Camunda Services GmbH und ihre Tochtergesellschaften („Camunda“, „wir“, „uns“ und „unser“) Informationen, einschließlich personenbezogener Daten, sammeln, verwenden und weitergeben, definiert durch die General Data Protection Regulation (GDPR) als „alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person beziehen“, von Kunden oder Nutzern, wenn diese Camundas Community-, Test- oder kostenpflichtige Produkte wie Camunda BPM, Camunda Cloud, Camunda Modeler oder Cawemo und andere von Camunda unterhaltene Dienste, z. B. Support-Services, nutzen oder testen, im Folgenden als „die Produkte“ bezeichnet.
Geltungsbereich
Diese Richtlinie gilt für die Informationen, die Camunda im Zusammenhang mit der Nutzung der Produkte durch den Kunden erhebt und für die wir die Mittel und den Zweck der Verarbeitung bestimmen. Zu diesen Informationen gehören Produktnutzungsdaten (siehe unten) und Betriebsdaten (siehe unten), die im Allgemeinen technischer Natur sind, aber in begrenztem Umfang auch personenbezogene Daten enthalten können.
Diese Richtlinie gilt nicht für:
Servicedaten: Bestimmte Camunda-Produkte erlauben es den Kunden, Inhalte, einschließlich personenbezogener Daten, an unsere Produkte zu übermitteln oder hochzuladen, die als Servicedaten bezeichnet werden. Diese Richtlinie bezieht sich nicht auf Servicedaten oder personenbezogene Daten, die in Servicedaten enthalten sind, da dies die Daten unserer Kunden sind und unsere Kunden (nicht Camunda) diese Daten kontrollieren und bestimmen, wie Servicedaten verarbeitet werden.
Verarbeitung personenbezogener Daten auf unseren Websites: Diese Daten werden gemäß Camundas Allgemeiner Datenschutzrichtlinie verarbeitet und können beispielsweise personenbezogene Daten sein, die über die Camundas Webseiten (im Folgenden als „Seiten“ bezeichnet) erhoben werden, im Rahmen der Erhebung von Produktfeedback oder Umfragen, dem Verkauf und der Bereitstellung unserer Produkte oder Daten, die in Verbindung mit Veranstaltungen, Verkaufs- und Marketingaktivitäten von Camunda verarbeitet werden. Einzelheiten zur Verarbeitung dieser Informationen sind in Camundas Allgemeiner Datenschutzrichtlinie einsehbar.
Organisatorische Nutzer: Wenn Nutzer Camunda-Produkte im Namen einer Organisation (z. B. eines Arbeitgebers) nutzen, wird die Nutzung von der Organisation des Nutzers gemäß ihrer eigenen Richtlinien bezüglich der Nutzung und des Schutzes von persönlichen Daten verwaltet und bereitgestellt. In den Datenschutzrichtlinien der Organisation finden Sie Informationen darüber, wie die Organisation auf Daten zugreift und sie verwendet.
Kontakt zu Camunda
Die Camunda Services GmbH ist Verantwortlicher im Sinne der DSGVO und anderer in den Mitgliedstaaten der Europäischen Union geltenden Datenschutzgesetze oder -bestimmungen.
Wenn Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, kontaktieren Sie uns bitte über unser Webformular oder auf dem Postweg:
Camunda Services GmbH Zossener Straße 55-58 10961 Berlin Deutschland Telefonnummer: +49 30 664 04 09 – 00 Camunda hat einen externen Datenschutzbeauftragten für deutsche betroffene Personen ernannt.
Der Datenschutzbeauftragte von Camunda ist:
Julian Höppner JBB Data Consult GmbH Friedrichstraße 95 10117 Berlin Deutschland
Wenn Sie Fragen dazu haben, wie Informationen erhoben, gespeichert, weitergegeben und verwendet werden, oder wenn Sie Ihre Rechte als Betroffener ausüben möchten, wenden Sie sich bitte an unseren Datenschutzbeauftragten:
Tel.: +49 30 20962282 E-Mail: hoeppner@jbbdataconsult.de Webseiten: www.jbbdataconsult.de
Informationen, die Camunda durch Produkte erhebt
Camunda sammelt automatisch „Betriebsdaten“ und „Produktnutzungsdaten“ aus der Nutzung der Produkte durch den Kunden. Betriebsdaten sind Informationen, die Camunda verwendet, um die Lieferung der Produkte zu erleichtern, die Produkte zu verwalten, zu überwachen und Support zu leisten. Produktnutzungsdaten sind Informationen, die Camunda für Produktanalysen und -verbesserungen verwendet und die personenbezogene Daten wie IP-Adressen, E-Mail-Adressen und Identifikatoren, einschließlich Cookies, enthalten können, aber die im Allgemeinen technisch, zusammengefasst oder pseudonymisiert sind. Je nach Produkt können die Informationen Folgendes umfassen:
Produkte und Systemdaten: Informationen über die verwendeten Produkte und die Systeme und die zugehörige Umgebung, von denen aus die Kunden auf den Dienst zugreifen. Beispiele hierfür sind Produkttyp und -version, Lizenzinformationen, installierte Plug-ins, UUID und Systeme von Drittanbietern, die in Verbindung mit dem Produkt verwendet werden.
Betriebsdaten: Statistiken in Bezug auf Betriebszeit, Indizes, Shards und Segmente und ähnliche Datenpunkte.
Leistungsdaten: Informationen über die Leistung der Produkte, z. B. Antwortzeiten und Metriken zur Leistung und zum Umfang der Produkte.
Daten durch Nutzung von Funktionen: Informationen darüber, wie die Produkte genutzt werden, einschließlich Metriken der Benutzeroberfläche und Details darüber, welche Funktionen genutzt werden oder welche Pfade die Benutzer verwenden.
Wie Camunda die Produktnutzungsdaten verwendet
Camunda verwendet Produktnutzungsdaten, um Produkte zu verbessern, Kunden und Business-to-Business-Marketing und -Sales zu unterstützen, gesetzliche Anforderungen zu erfüllen und andere rechtmäßige Zwecke zu erfüllen. Camunda kann Produktnutzungsdaten für die folgenden Zwecke verwenden:
Produktverbesserung: Analyse der Produktnutzung, Priorisierung von Tests und Entwicklung neuer Funktionen, Verbesserung von Support- Reaktionen und Prognosen, Preisentscheidungen und Identifizierung, Verständnis und Vorwegnahme von Leistungsproblemen, die die Produkte betreffen.
Customer Support: Um unseren Kunden Unterstützung zu bieten, z. B. Anleitung zur Optimierung der Nutzung, Identifizierung von Möglichkeiten zur Produktverbesserung und Priorisierung zukünftiger Produktfunktionen, Personalisierung der Kundenerfahrung und Vorschläge für verwandte Camunda-Produkte, um das Engagement mit und die Akzeptanz der Camunda-Produkte(n) zu erhöhen.
Business-to-Business-Marketing und -Sales: Zur Vermarktung zusätzlicher Produkte an Kunden, soweit gesetzlich zulässig, und zur Beratung in Verkaufsgesprächen.
Gesetzliche Anforderungen: Camunda kann verpflichtet sein, auf personenbezogene Daten, die in den Produktnutzungsdaten enthalten sind, zuzugreifen, wenn dies gesetzlich vorgeschrieben ist, z. B. um rechtlichen Verfahren nachzukommen, wenn Camunda in gutem Glauben davon ausgeht, dass die Offenlegung notwendig ist, um die Rechte, das Eigentum oder die Nutzer der Produkte von Camunda zu schützen oder zu verteidigen, um die Sicherheit anderer zu schützen, um Betrug zu untersuchen oder um auf staatliche Anfragen zu reagieren, einschließlich öffentlicher und staatlicher Behörden außerhalb des Wohnsitzlandes eines Nutzers, für Zwecke der nationalen Sicherheit oder der Strafverfolgung.
Andere rechtmäßige Geschäftszwecke: Camunda kann Produktnutzungsdaten verwenden, wenn dies für andere rechtmäßige Zwecke erforderlich ist.
Wie Camunda Betriebsdaten verwendet
Camunda verwendet Betriebsdaten, um die Produktlieferung zu erleichtern, Konten zu verwalten, Support zu leisten, die Sicherheit aufrechtzuerhalten, Notfallpläne zu verwalten, Betrug aufzudecken und gesetzliche Anforderungen zu erfüllen. Camunda kann Betriebsdaten für die folgenden Zwecke verwenden:
Durchführung der Kontoverwaltung: Kontoverwaltung für Produkte, einschließlich der Verwaltung von Produktdownloads, -updates und - auflösungen sowie der Verteilung von administrativen oder kontobezogenen Mitteilungen, einschließlich Versionshinweisen und Rechnungsinformationen.
Support bereitstellen: Wenn Benutzer oder Einzelpersonen Camunda über einen Camunda-Supportkanal kontaktieren, damit Camunda sie bezüglich Supportanfragen kontaktieren kann, in denen Benutzer möglicherweise gebeten werden, Kopien der entsprechenden Dateien, Protokolle oder andere Informationen bereitzustellen, die es Camunda ermöglichen, bei der Supportanfrage zu helfen. In solchen Fällen verwendet Camunda die angeforderten Informationen, um auf die Supportanfrage zu reagieren, Fehler zu beheben und die Probleme zu lösen.
Aufrechterhaltung der Sicherheit der Infrastruktur und Produkte von Camunda: Überwachung der Sicherheit und Verwaltung von Zwischenfällen, Überwachung der Leistung und Stabilität der Produkte und Behebung technischer Probleme.
Verwalten von Disaster-Recovery-Plänen und -Richtlinien: So aktivieren Sie Camundas Backup-Disaster-Recovery-Pläne und -Richtlinien.
Erkennung von Betrug: Zur Überwachung, Verhinderung und Aufdeckung von Betrug, zur Verbesserung der Sicherheit, zur Überwachung und Bestätigung der Identität oder des Zugangs und zur Verhinderung von Malware oder Sicherheitsrisiken.
Erfüllung rechtlicher Verpflichtungen: Zur Einhaltung geltender Gesetze und Vorschriften, einschließlich der Erfüllung gesetzlich vorgeschriebener Melde-, Offenlegungs- oder sonstiger rechtlicher Anforderungen, für Fusionen und Übernahmen, Finanz- und Rechnungswesen, Versicherungszwecke, Rechts- und Unternehmensberatung und Streitbeilegung.
Andere rechtmäßige Geschäftszwecke: Camunda kann Betriebsdaten verwenden, wenn dies für andere rechtmäßige Zwecke erforderlich ist.
Wie Camunda durch Produkte erhobene Informationen weitergibt
Camunda unternimmt alle Anstrengungen, um sicherzustellen, dass der Zugriff auf Produktnutzungs- und Betriebsdaten intern nur von Personen erfolgt, die den Zugriff benötigen, um die entsprechenden Aufgaben und Pflichten zu erfüllen, und extern nur von Dienstleistern, die einen rechtmäßigen Grund für den Zugriff auf diese Daten haben. Externe Dienstleister sind vertraglich verpflichtet, alle personenbezogenen Daten zu schützen, auf die sie Zugriff haben, und es ist ihnen untersagt, die personenbezogenen Daten zu anderen Zwecken als zur Erbringung der von Camunda angewiesenen Dienstleistungen weiterzuverarbeiten. Camunda wird keine persönlichen Daten verkaufen oder Dritten erlauben, persönliche Daten für ihre eigenen kommerziellen Zwecke zu nutzen. Wie Camunda Informationen weitergibt, erfahren Sie auf der folgenden Webseite: Allgemeine Datenschutzrichtlinie.
Wie Camunda Cookies und Tools zur automatischen Datenerfassung verwendet
Je nach verwendetem Produkt kann Camunda Cookies oder andere Tracking-Tools für die in dieser Richtlinie beschriebenen Zwecke verwenden. Einige dieser Tools sind für die Bereitstellung der Produkte unerlässlich, z. B. für den Kontozugriff und die Authentifizierung, die Leistung und Funktionalität der Dienste sowie die Möglichkeit, die Produkte zu analysieren und anzupassen. Wir verwenden zum Beispiel ein Tool namens Mixpanel in unseren Cloud-Produkten, um ein besseres Nutzererlebnis zu bieten und Nutzerprobleme zu diagnostizieren. Es zeichnet Benutzersitzungen auf und erfasst sie, so dass wir Benutzeraktionen wie Mausklicks, Bewegungen usw. überwachen können.
Rechtsgrundlage für die Verarbeitung von Informationen
Camunda verwendet die persönlichen Daten von Kunden und Nutzern nur auf rechtmäßige, offensichtliche und angemessene Weise. Camunda stützt sich auf die folgenden Rechtsgrundlagen:
In Übereinstimmung mit den spezifischen widerruflichen Einwilligungen des Kunden oder Nutzers gemäß Art. 6 I a GDPR; Zur Vorbereitung, zum Abschluss und zur Erfüllung eines Vertrages gemäß Art. 6 I b GDPR, soweit erforderlich;
Soweit dies für die berechtigten Interessen von Camunda gemäß Art. 6 I f GDPR, z.B. die Durchführung, Verbesserung, Wartung und Sicherung der Produkte, die Bereitstellung von Support für Nutzer und Kunden der Produkte und der effiziente und angemessene Betrieb des Geschäfts.
Wenn Sie Fragen oder Bedenken bezüglich dieser Richtlinie haben, kontaktieren Sie uns bitte über unser Webformular oder auf dem Postweg:
Speicherung von Daten
Camunda speichert Informationen, die in Verbindung mit den automatischen Datenerfassungstools und Cookies gesammelt werden, nur so lange, wie es für die Erfüllung der in dieser Richtlinie beschriebenen Zwecke erforderlich ist.
Internationale Datenübermittlung
Die personenbezogenen Daten eines Nutzers können in andere Länder (nicht das Land, in dem die Person ansässig ist) übermittelt werden und in diesen abgerufen, gespeichert und verarbeitet werden. Als international tätiges Unternehmen verarbeitet Camunda personenbezogene Daten in Ländern außerhalb des Europäischen Wirtschaftsraums („EWR“), darunter auch in den USA. In diesen Ländern gelten möglicherweise andere Datenschutzgesetze als in dem Land, in dem die Person ansässig ist. Wir haben angemessene Sicherheitsvorkehrungen getroffen, um sicherzustellen, dass solche personenbezogenen Daten in Übereinstimmung mit dieser Richtlinie geschützt bleiben, und wir haben angemessene Verfahren zum Schutz personenbezogener Daten in Vereinbarungen mit Camundas Dienstleistern eingerichtet, z. B. die Verwendung der Standardvertragsklauseln der EU-Kommission gemäß Art. 46 Abs. 2 lit. c GDPR.
Datenschutzrechte und Rechte der Nutzer
Camunda erhebt eine begrenzte Menge an personenbezogenen Daten, um die in dieser Richtlinie beschriebenen Zwecke zu erfüllen. Die Nutzer können bestimmte Rechte in Bezug auf personenbezogene Daten ausüben, z. B. den Antrag auf Zugang, Berichtigung, Aktualisierung oder Löschung personenbezogener Daten, indem sie unser Camunda-Webformular verwenden.
Nutzer haben das Recht, sich bei einer Datenschutzbehörde über die Erhebung und Verwendung personenbezogener Daten durch Camunda zu beschweren. Weitere Informationen erhalten Sie von einer lokalen Datenschutzbehörde. Weitere Informationen über die Rechte als betroffene Person finden Sie in Camundas allgemeiner Datenschutzrichtlinie.
Datenschutzrechte in Kalifornien
Informationen über die Datenschutzrechte von Einwohnern Kaliforniens und andere erforderliche Angaben finden Sie in der speziellen Datenschutzrichtlinie für Kalifornien.
Sicherheit
Wenn Sie Fragen zur Sicherheit haben, kontaktieren Sie uns bitte unter infosec@Camunda.com. Camunda verpflichtet sich, die Sicherheit personenbezogener Daten zu schützen, indem angemessene technische und organisatorische Maßnahmen ergriffen werden, um personenbezogene Daten vor unbefugtem Zugriff, unbefugter Nutzung und unbefugter Offenlegung zu schützen, kann jedoch Sicherheitsrisiken und Verstöße im Zusammenhang mit personenbezogenen Daten nicht ausschließen.
Änderungen an dieser Richtlinie
Diese Richtlinie wird gelegentlich überarbeitet. Wenn wesentliche Änderungen in der Art und Weise vorgenommen werden, wie Camunda personenbezogene Daten verwendet, werden angemessene Maßnahmen ergriffen, um die Kunden zu informieren, die dem Ausmaß der vorgenommenen Änderungen entsprechen, und Camunda wird über alle wesentlichen Änderungen der Richtlinien informieren, sofern dies von den geltenden Datenschutzgesetzen verlangt wird.
Datum des Inkrafttretens: 12. Oktober 2020
Änderungsprotokoll
Oktober 2022: Diese Datenschutzrichtlinie wurde aktualisiert, um ein neues Webformular einzuführen, das die Kontaktaufnahme mit Camunda bei datenschutzrelevanten Fragen erleichtert.