§ 1 General
This Cookie Policy explains which cookies and similar technologies Calmaroi GmbH ("Calmaroi", "we") uses in operating the Calmaroi Applicant Portal and for what purpose. It applies to apply.calmaroi.de.
§ 2 What are cookies and similar technologies?
Cookies are small text files that are stored on the user's device when visiting a website. Among other things, they make it possible to maintain a session, save settings or technically secure the platform.
Similar technologies may transmit technical information about page views or processes without themselves storing a cookie on the device. The technologies actually used by the Applicant Portal are described in the following sections.
§ 3 Cookies Used by Calmaroi
The Applicant Portal currently uses only the following technically necessary first-party cookie:
| Cookie | Purpose | Storage period | Provider |
|---|---|---|---|
cal_apply_session | Login, session management and secure assignment to the Applicant Portal used | A maximum of 8 hours; after more than 15 minutes of inactivity the session becomes invalid; deleted on logout | Calmaroi (first party) |
The cookie is technically protected against access by client-side scripts (HttpOnly), is used exclusively for the host apply.calmaroi.de and, in the production environment, is transmitted only via encrypted HTTPS connections.
Separate cookies for CSRF protection, cookie settings or load balancing are currently not set by the Applicant Portal.
§ 4 Legal Basis
The cookie cal_apply_session is strictly necessary in order to provide the Applicant Portal expressly requested by the user, including login and session management. Its storage therefore does not require consent pursuant to Section 25 (2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).
Where personal data is processed in this context, this is done on the basis of Art. 6(1)(b) GDPR for carrying out the registration and application process and on the basis of Art. 6(1)(f) GDPR to ensure secure and functional operation of the portal.
§ 5 No External Analytics or Marketing Services
The Applicant Portal currently does not integrate any external analytics or marketing services, social media integrations or third-party tracking services. No analytics, marketing or social media cookies are set.
The internal, pseudonymised process tracking described in § 5a takes place without an additional tracking cookie and without disclosure of the information collected to external tracking providers.
Should the use of such technologies change in future, this policy will be updated before they are activated. Where legally required, the technologies will only be used after separate consent has been obtained.
§ 5a Internal, Pseudonymised Process Tracking
The Applicant Portal internally records technical usage and process events in order to provide the application process, track processing progress, detect errors and misuse, and improve user guidance and the technical reliability of the platform.
Depending on the respective event, in particular the following information is processed:
- page or function area accessed,
- time and duration of use,
- screen and window size and device presentation,
- browser language and time zone,
- portal profile used,
- application type, technical application status and processing step,
- technical process events such as loading the application status, saving a draft or submitting an application.
Once an application has been created, related events can be linked via a pseudonymised process identifier. This identifier is generated from an internal application identifier by means of a cryptographic procedure. The event data does not contain any names, e-mail addresses, telephone numbers, document names, document contents, free-text form entries or unaltered applicant and application identifiers.
The pseudonymised process identifier is held in the browser only in memory during current use. It is not stored in cookies, Local Storage, Session Storage or the URL.
Processing takes place within the technical logging and analysis infrastructure operated by Calmaroi. No external tracking providers are used for this purpose.
The legal basis is Art. 6(1)(b) GDPR, insofar as the processing is necessary for carrying out the application and placement process, and Art. 6(1)(f) GDPR on the basis of the legitimate interest in process quality, error analysis, misuse detection and system security.
§ 6 Managing and Disabling Cookies
Users can delete existing cookies or prevent the storage of new cookies at any time in their browser settings.
If the technically necessary cookie cal_apply_session is deleted or blocked, in particular login, maintaining the session and continuing or viewing an application may not work, or may no longer work properly.
§ 7 Changes to this Policy
Calmaroi reserves the right to amend this Cookie Policy in the event of changes to the technologies used or to the legal situation. The current version published on the platform applies.
§ 8 Contact
If you have any questions about this Cookie Policy, please contact:
Calmaroi GmbH
Römerstraße 15
63450 Hanau
E-mail: info@calmaroi.de