Privacy Policy Design Offices App

We regard data privacy as a customer-oriented quality feature. The protection of your personal data and your personal rights are important to us. The aim of this Privacy Policy is to provide all visitors to our website with transparent information as to the type, scope and purpose of the personal data we collect, use and process, and to inform you about the rights to which you are entitled.

It is generally possible to use our website without providing personal data. However, if you use our company's services via our website, it may be necessary to process your personal data. The data automatically collected when you visit our website or personal data entered by you when using our services is processed in accordance with the current legal provisions for the protection of personal data. If it is necessary to process your personal data and there is no legal basis for such processing, we will always obtain your consent for the necessary purpose of processing. As the company responsible for processing, we have established technical and organizational measures to ensure the highest possible level of protection of your personal data. However, we would like to point out that data transmission via the internet may have security gaps.

If you wish to use the services of our company and do not wish to use the internet as a means of data transmission, you can contact us by telephone.

Design Offices GmbH
Königstorgraben 11
90402 Nürnberg
Telephone: +49 (0)911 323950
Mail: info@designoffices.de

Herr Stephan Hartinger
Coseco GmbH
Telephone: +49 (0)8232 8098870
Mail: datenschutz@coseco.de

Every time you visit our website, server log file information that your browser sends to us is automatically recorded. This information is as follows:

IP address (Internet Protocol address) of the accessing computer
the website from which you are visiting us
the page you visit on our website
the date and duration of the visit
browser type and browser settings
operating system

We would like to point out that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:

to improve the attractiveness and usability of our websites,
to detect technical problems on our website at an early stage,
to deliver the contents of our website correctly,
and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorized access.

We use your personal data only for the purposes stated on this information page on data protection.

Our website offers the option to place bookings online. For usage and requests we use the services of Performance Buildings, Limmatquai 4, 8001 Zurich, Switzerland.

Personal data about the user is collected to enable Design Offices GmbH to provide its service and also to comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of the user or third parties), and detect malicious and fraudulent activities.

We transmit as personal data the data that is entered during the registration process:

Salutation
Name and surname
Phone number
Company
Email
Address
Postcode
Location
Profile picture

In addition, data is collected for the following purposes: Analytics, contacting the user, registration and authentication and management of support and contact requests. Users can find more detailed information about these processing purposes and the personal data used for each purpose in the section of this document entitled “Detailed information on the processing of personal data”.

In addition, the personal data is transmitted to us, Design Offices GmbH, for the purpose of establishing contact. This data is only used to organize and execute the requested booking and is not be passed on to third parties. For more information about Performance Buildings' data privacy practices, please visit https://performancebuildings.ch/.

Users are responsible for all personal data of third parties that is obtained, published or passed on by Design Offices and confirm that they have obtained consent to the transfer of personal data of any third parties to Design Offices.
The data is processed at the offices of the provider and at all other places where the offices involved in data processing are located.

Personal data is processed and stored for as long as required for the purpose for which it was collected.

Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user is stored until such time as the contract is fulfilled in full.
Personal data collected to protect the legitimate interests of the provider is stored for as long as necessary to fulfill these purposes. Users can obtain more detailed information about the provider’s legitimate interests in the relevant sections of this document or by contacting the provider.

Furthermore, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked. In addition, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.

After the retention period has expired, personal data is deleted. The right of access, the right to erasure, the right to rectification and the right to data portability cannot be exercised after the retention period has expired.

Salutation
Name and surname
Phone number
Company
Email
Address
Postcode
Location
Profile picture

For the processing and provision of services, we collaborate with defacto BE/ONE GmbH, Auenstraße 37, 80469 Munich, Germany, which is under obligation to process orders in accordance with Art. 28 GDPR.

We transmit as personal data the data that you enter and upload during the registration process.

In addition, the data you have entered is transmitted to us for the purpose of contacting you. This data is only used to organize and execute the requested booking. Also your data is passed on by defacto BE/ONE to the following printers for the production of the DO.Member-Card :

For the Welcome Packages:
SpintlerDigital GmbH
Alexander Klett / Maik Mies
Hochstraße 21, 92637 Weiden (Germany)
CEO: Dr. Renate Freuding-Spintler

For the DO.Membercard:
Manhillen Drucktechnik GmbH
Frank Manhillen
Schillerstraße 90
71277 Rutesheim (Germany)

Your data is not passed on to third parties in any other way, unless disclosure is required by law. The legal basis for data processing is Art. 6 Para. 1 (b) GDPR, processing for the provision of services (DO.Member).

When you use the online booking facility on the website, we offer you the option of online payment. For this we use the services of Six Payment Services AG, Hardturmstrasse 201, 8021 Zurich, Switzerland.

For more effective communication and optimization of its user experience Design Offices, uses a live chat system provided by the company Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne, Germany.

You can use the live chat like a contact form to chat with our employees virtually in real time. When you start the chat, the following personal data is generated:

date and time of your visit
IP address (Internet Protocol address) of the accessing computer
browser type and browser settings
operating system
the website URL from which you are visiting us
the amount of data you send
if registered: name, surname and email address

Depending on the course of the conversation with our employees, further personal data may be collected during the chat, which you will enter. The type of this data depends very much on your request or the problem you describe to us. The processing of all this data serves the purpose of providing you with a quick and efficient way of contacting us, thereby improving our customer service.

All our employees have been and are trained on the subject of data privacy and receive instruction regarding the secure and confidential handling of customer data. All our employees are obliged to maintain confidentiality and have signed an addendum to their employment contracts to this effect obliging them to maintain confidentiality and observe data protection.

When you access the website www.designoffices.de, the chat widget is loaded in the form of a JavaScript file from AWS Cloudfront. The chat widget technically constitutes the source code that runs on your computer and enables the chat.

If you would like to receive the newsletter offered on the website containing regular information about our offers and products, we require your e-mail address as mandatory information. We use the so-called double opt-in procedure for sending out the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed to us that you agree to receive newsletters. The first step involves you receiving an e-mail with a link that you can use to confirm that you, as the owner of the relevant e-mail address, wish to receive newsletters in the future. By confirming, you give us your consent according to Art. 6 Para. 1 (a) GDPR to use your personal data for the purpose of the sending out the newsletter as you requested.

When you register for the newsletter, in addition to the e-mail address required for sending the newsletter we store the IP address by which you have registered for the newsletter as well as the date and time of registration and confirmation in order to be able to trace possible misuse at a later date.

You can unsubscribe from the newsletter at any time using the link included in every newsletter or by sending an e-mail to the person responsible for the newsletter mentioned above (or to newsletter@designoffices.de). Once you have canceled your subscription, your e-mail address is deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the data collected or continued processing is otherwise permitted by law.

In order to send out the newsletter, we use the services of CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. We transmit the e-mail address and name to CleverReach for the purpose of sending the newsletter. CleverReach organizes and analyzes the sending of our newsletters. CleverReach is certified according to the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the USA which is intended to guarantee compliance with European data protection standards in the USA. We have concluded a so-called Data Processing Agreement with CleverReach, in which we require CleverReach to protect our customers’ data and not to pass it on to third parties. For further information on data privacy at CleverReach, see: www.cleverreach.com/de/datenschutz/.

If you provide us with personal data as part of the application process, this is stored for collection, processing and/or use.

3.7 This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a tool for analyzing your user behavior on our website. With Hotjar we can, among other things. Record your mouse and scroll movements and clicks. Hotjar can also determine how long you stayed with the mouse pointer on a certain point. From this information, Hotjar creates so-called heat maps, which can be used to determine which website areas are preferred by website visitors.

We can also determine how long you stayed on a page and when you left it. We can also determine at which point you canceled your entries in a contact form (so-called conversion funnels).

In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offers.

Hotjar uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our offer more user-friendly, more effective and safer. These cookies can be used in particular to determine whether our website has been visited with a specific device or whether the Hotjar functions have been deactivated for the browser in question. Hotjar cookies remain on your device until you delete them.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

The use of Hotjar and the storage of Hotjar cookies are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

Deactivating Hotjar

If you would like to deactivate data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/opt-out

Please note that Hotjar must be deactivated separately for each browser or for each end device.

For more information about Hotjar and the data collected, please refer to Hotjar's data protection declaration under the following link: https://www.hotjar.com/privacy

When you contact us by email, we will collect and store the information from your enquiry. We will delete these data as soon as their storage is no longer necessary, or restrict any processing if statutory retention periods apply.

These data serve the process of communicating with you. The email address and other information from the enquiry will be processed to enable us to answer your email enquiry.

The legal basis for processing the data is given by Art. 6 para. 1 p. 1 (f) GDPR. The justified interest lies in the purposes specified above.

If you use the online contact form to contact us, the data communicated by you (your email address and the information from your message) will be collected and saved by us. We will delete these data as soon as their storage is no longer necessary, or restrict any processing if statutory retention periods apply.

The contact form serves to make contact with us quickly and easily, and it represents a service on our part. Your email address is registered to enable your enquiry to be sent to us and allow us to reply to it.

The personal data listed above are collected on the basis of Art. 6 para. 1 p. 1 (f) GDPR. The justified interest lies in the purposes specified above.

As a further service, we also offer an online enquiry form on certain sub-pages of our website which present our various offices. We collect personal data through this form. We will delete these data as soon as their storage is no longer necessary, or restrict any processing if statutory retention periods apply.

When you contact us via the online enquiry form, the only mandatory information to be collected is your email address.

Salutation
Name
Phone number
Possibly further personal data taken from details of the enquiry

The enquiry form serves to contact us quickly and easily, and it represents a service on our part. Your email address is registered to enable your enquiry to be sent to us and allow us to reply to it. Your form of address and your name are collected to enable us to address you personally. We collect your telephone number to enable us to contact you quickly.

The personal data listed above are collected on the basis of Art. 6 para. 1 p. 1 (f) GDPR. The justified interest lies in the purposes specified above.

This website uses the following types of cookies whose scope and function are explained below:

Transient cookies
Persistent cookies

Transient cookies are automatically deleted when you close the web browser. In particular, they include session cookies. These save a so-called session ID with which different enquiries from your browser can be assigned to the common session. This enables your PC to be recognised when you return to our website. These session cookies are deleted when you close the web browser.

Persistent cookies are automatically deleted after a specified period which may be different depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

Cookie	Kategorie	Anbieter	Typ	Ablauf
Cb-enabled	Notwendig	Designoffices.de	http	1 Jahr
_ga	Statistiken	Designoffices.de	http	2 Jahre
_gat	Statistiken	Designoffices.de	http	1 Tag
_gid	Statistiken	Designoffices.de	http	1 Tag
_pinterest_CM	Statistiken	Pinterest.com	http	1 Jahr
collect	Statistiken	Google Analytics.com	Pixel	1 Jahr
_fbp	Marketing	Designoffices.de	http	1 Tag
Ads/ga-audience	Marketing	Google.com	Pixel	Session
Fr Marketing	Marketing	Facebook.com	http	3 Monate
Tr Marketing	Marketing	Facebook.com	Pixel	Session

to display and use the website without restrictions,
to optimize user-friendliness and ease of use,
to derive purely statistical information,
to set preferences (e.g. language or region),
to evaluate user habits (tracking) and
direct mail marketing.

Rechtsgrundlage ist Art. 6 Abs. 1 S. 1 lit. f DSGVO. Die berechtigten Interessen folgen aus den oben genannten Zwecken.

Die meisten Browser akzeptieren Cookies automatisch. Sie können Ihren Browser jedoch so konfigurieren, dass keine Cookies auf Ihrem Computer gespeichert werden oder stets ein Hinweis erscheint, bevor ein neues Cookie angelegt wird. Die vollständige Deaktivierung von Cookies kann jedoch dazu führen, dass Sie nicht alle Funktionen unserer Website nutzen können.

Unless otherwise stated in this Privacy Policy, the operator of all Google services mentioned here is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

On this website, the “Google Tag Manager” service is used. The Tag Manager is a tool for the administration of so-called tags, which are used for tracking in online marketing. The Tag Manager itself does not process any personal data, as it is only used for the administration of other services such as Google Analytics, etc.

The “Google Ads” service is used on this website. This service has the purpose of so-called “conversion tracking”, i.e. it enables to see what happened after you clicked on one of our ads. Cookies are applied for this purpose which have a limited validity (30 days) and do not contain any personal data. Personal identification of the user is therefore not possible.

The legal basis for using the service is Art. 6 (f) GDPR – legitimate interest. Our legitimate interest in using this service is to analyze and optimize the operation of our website.

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google").

Google Analytics uses so-called “cookies” (see Item 4.2 above) which are text files placed on your computer to enable your use of the website to be analysed.

The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the USA and stored there. However, if IP-anonymization is activated on this website, your IP address will be truncated beforehand within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the whole IP address be transferred to a Google server in the USA and truncated there.

For those exceptional cases in which personal data are transmitted to the USA, Google has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The IP address transmitted from your browser by Google Analytics is not combined with other Google data.

This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in abbreviated form making it impossible to identify them with a person. If the data collected about you establishes a personal connection, this is immediately precluded and the personal data thereby promptly deleted.

We use Google Analytics to analyse the use of our website and to enable us to regularly improve it. We can use the statistics received to improve our product and to make our website more attractive to you as the user.

You can prevent the storage of cookies by means of a corresponding setting in your browser software; however, we would like to point out that in this case you might not be able to use all the functions of this website to their full extent. You can also prevent the data generated by the cookie relating to your use of the website (incl. your IP address) from being transmitted to Google and processed by Google by downloading and installing the browser plug-in which is available on the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

This website also uses Google Analytics for the cross-device analysis of visitor streams, carried out via a user ID. You can deactivate the cross-device analysis of your use in your customer account under “My Data”, “Personal Data”.

Information on the external supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

User conditions: http://www.google.com/analytics/terms/de.html,
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html,
and data protection notice: http://www.google.de/intl/de/policies/privacy.

We use the products of Google Maps on this website. This enables us to directly display interactive maps on the website, thereby enabling you to use the map function with ease.

When you visit the website, Google receives the information that you have called up the relevant page on our website. In addition, the data specified in 4.2 of this notice (Use of cookies) are transmitted. This happens regardless of whether Google provides a user account through which you are logged in or there is no user account. If you are logged on to Google, your data will be directly linked to your account. If you do not want your data to be associated with your Google profile, you must log out before clicking on the button. Google will store your data as a user profile and it will use them for the purpose of advertising, market research and/or adapting the layout of its website. Any such evaluation is performed in particular to provide relevant advertising (even for users who are not logged in), and to inform other users of the social network of your activities on our website. You have the right to object to the creation of such user profiles but you must address Google in order to exercise this right.

You can find further information on the purpose and scope of the data collected and their processing by the provider of the plug-in in the provider’s Data Protection Notices. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

On our website, we use the analysis and conversion tracking technology of the LinkedIn platform, a service offered by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2 (Ireland). With the help of this LinkedIn technology, you can be shown more relevant advertising, based on your interests. LinkedIn also provides us with aggregated and anonymous reports on advertising activities and information on how you interact with our website.

To do this, LinkedIn uses cookies, which serve for clear identification of a web browser on a certain computer, have a life span of 30 days and do not contain any personal data. Thus they do not permit the personal identification of our website users. There is analysis via the cookie of how you interact with our website (e.g. via which website you accessed ours, the time you spent on the website, which offers you were interested in) and whether you are a member of the LinkedIn platform. The data gathered with the help of the cookie serve to prepare the above anonymous statistics and reports and to supply ads based on your interests.

Further information on LinkedIn’s privacy policy can be found here. Irrespective of whether you are a registered member of LinkedIn or not, you can opt out from the analysis of your user behaviour by LinkedIn and from the receipt of interest-based recommendations; to do this click on "Opt out on LinkedIn" (for LinkedIn members) or "Opt out" (for other users) at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Please note that opting-out from such advertising does not remove ads from the website you access. It only means that the ads which you are shown are not necessarily oriented to your personal interests.

On this website we use the Facebook pixel provided by Facebook, a social media network operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Furthermore, the website uses the remarketing function “Custom Audiences” provided by Facebook Inc. (“Facebook”). This enables users of the website to be presented with interest-related advertisements (“Facebook Ads”) when they visit the social network Facebook or other websites that also use the process. 

We use the marketing tool via a so-called Facebook pixel, which is integrated on our website. When you visit our website, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore provide you with the following information based on the state of our knowledge: through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the page in question on our websites or clicked on one of our advertisements. If you are registered with a Facebook service, Facebook is able to link the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifying features. You can find out how the Facebook pixel is used for advertising campaigns at https://www.facebook.com/business/learn/facebook-ads-pixel.

In doing so, we are pursuing the objective of showing you advertising of interest to you in order to make our website more interesting to you.

The legal basis for processing your data is set out in Art. 6 para. 1 p. 1 (f) GDPR. The justified interest lies in direct mail marketing.

We have incorporated YouTube videos in our website which are stored at http://www.YouTube.com and can be played directly from our website. These are incorporated in “extended data protection mode”. This means that data about you are transmitted to YouTube even if you do not play the videos. We have no control over this data transmission.

When you visit the website, YouTube receives the information that you have called up the relevant page on our website. In addition, the data specified in 4.2 of this notice (Use of cookies) are transmitted. This happens regardless of whether YouTube provides a user account through which you are logged in or there is no user account.

If you are logged on to Google, your data will be directly linked to your account. If you do not want your data to be associated with your YouTube profile, you must log out before clicking on the button. YouTube will store your data as a user profile and it will use them for the purpose of advertising, market research and/or adjusting the layout of its website. Any such evaluation is performed in particular to provide relevant advertising (even for users who are not logged in), and to inform other users of the social network of your activities on our website. You have the right to object to the creation of such user profiles but you must address YouTube in order to exercise this right.

You can find further information on the purpose and scope of the data collected and their processing by YouTube in the Data Protection Notice. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

Our website also uses the “share function” of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. If you click on the XING “Share Button” (plug-in), you will – if you are logged into your XING account – be redirected to your user account in a separate browser window and can share the electronic publication deposited on our website by adding a comment. The plug-in establishes a direct connection between your browser and the XING server. XING thereby receives information that you have visited our website using your IP address. We would like to point out that we have no knowledge of the content of the (personal) data transmitted or how XING uses it.

Our site also uses social plug-ins provided by Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plug-ins are marked with an Instagram logo, for example in the form of an “Instagram Camera”. When you access a page on our website that contains such a plug-in, your browser establishes a direct connection with Instagram's servers. The content of the plug-in is transmitted by Instagram directly to your browser and integrated in the page. This integration informs Instagram that your browser has accessed the relevant page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can immediately attribute your visit to our website to your Instagram account. When you interact with the plug-ins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts. If you do not want Instagram to attribute the information collected through our website directly to your Instagram account, you must log out of Instagram before visiting our website.

If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to attribute your visit to our pages to your account. We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data or its use by Instagram. For more information, please refer to Instagram's privacy policy: https://instagram.com/about/legal/privacy/

Functions of the Twitter service are integrated on our website. These functions are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data or its use by Twitter. For further information, please refer to the Twitter privacy policy at https://twitter.com/privacy?lang=en. You can change your privacy settings on Twitter in the account settings at http://twitter.com/account/settings.

We process and store your personal data only for the period of time required to fulfill the respective storage purpose or as required by the various retention periods stipulated by law.

After a storage purpose has ceased to exist or after the retention period provided for by law has expired, the personal data is routinely blocked or erased for further processing in accordance with statutory provisions.

If you have any questions about your personal data, you can contact us in writing at any time. You have the following rights according to GDPR:

The right of access (sub-item Art. 15 GDPR)
The right to rectification (Art. 16 GDPR)
The right to erasure (Art. 17 GDPR)
The right to restriction (Art. 18 GDPR)
The right to data transferability (Art. 20 GDPR)
The right to object (Art. 21 GDPR)
The right of appeal to the data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG – Federal Data Protection Act)
Right to withdraw consent under data protection law (Article 7 Para. 3 GDPR)

When processing personal data for which we obtain the consent of the data subject, Art. 6 Para. 1, Sentence 1 (a) of the General Data Protection Regulation (GDPR) serves as the legal basis.

When processing the personal data required for the fulfillment of a contract to which the data subject is a party, Art. 6 Para. 1, Sentence 1 (b) of the General Data Protection Regulation serves as the legal basis.  This provision also covers processing operations which are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1, Sentence 1 (c) (GDPR) serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 Para. 1 Sentence 1 (f) (GDPR) serves as the legal basis for the processing. The legitimate interest of our company lies in the execution of our business activities as well as in the analysis, optimization and maintenance of the security of our website

We generally do not sell or lend user data. Any transfer to third parties beyond the scope described in this privacy policy only takes place if it is necessary for the processing of the respective service as requested.

We only transfer data if there is a legal obligation to do so. This is the case if state institutions (e.g. criminal prosecution authorities) request information in writing or a court order is available.

Personal data is not transferred to so-called third countries outside the EU/EEA area.

10. Legal or contractual provisions on the provision of personal data and the possible consequences of not providing such data

We hereby point out that in certain cases (e.g. tax regulations) the provision of personal data is required by law or may result from contractual regulations (e.g. information on the contractual partner(s)). For example, it may be necessary for the conclusion of a contract that the person concerned/the contractual partner is required to provide their personal data so that their request (e.g. order) can be processed by us in the first place. An obligation to provide personal data arises primarily when a contract is concluded. If in this case no personal data is provided, the contract cannot be concluded with the person concerned. Prior to the provision of personal data by the data subject, the data subject may contact our Data Privacy Officer or the Data Controller. The Data Privacy Officer or the Controller then informs the data subject whether the provision of the required personal data is required by law or contract or is necessary for the conclusion of the contract and whether the data subject's concerns give rise to an obligation to provide the personal data or what the consequences are for the data subject if the required data is not provided.

As a responsible company, we refrain from automated decision making or profiling in our business relationships.

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries or booking information that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

In addition to these web-specific data protection notices, it is also possible to view our transparent information.

Privacy Policy App