Name and contact information for the person responsible
1. General information on data processing
It is not necessary to input any personal data in order to use our website. However, it may be the case that we offer some services for which personalisation is required or permitted. When using these services, rules may differ and, in that case, they will be separately outlined below. We only process your personal data (e.g. name, address, email, telephone number etc.) in accordance with the law on privacy which applies to us. The personal data of our users are only ever collected and used with users’ consent. Exceptions thereto constitute cases where it is not possible to first obtain consent for practical reasons and/or where data processing is permitted by law. Data are classed as personal if it is possible to clearly associate them with a specific individual. The rules outlined below provide information regarding the type, extent and purpose of data collection, use and processing, provided that data is processed.
2. Legal basis for processing personal data
If the individual involved gives us their consent to process their data, this consent serves as the legal basis for processing personal data, as per the law on privacy.
When processing the personal data required to fulfil a contract and the individual involved is a contracting party, the legal basis for data processing shall be contract conclusion. This shall also apply when it is necessary to process data in order to implement pre-contractual measures. Pre-contractual measures may also constitute a legal basis in their own right if a contract is not subsequently concluded.
If it is necessary to process personal data in order to fulfil one of our company’s legal obligations, this may also serve as a legal basis in accordance with the law on privacy.
In the event that the vital interests of the individual involved, or another individual, render it necessary to process personal data, this may also serve as a legal basis in accordance with the law on privacy.
Furthermore, it may also be necessary to process data in order to preserve a legitimate interest of neueRäume GmbH (Gesellschaft mit beschränkter Haftung, limited liability company), or a third party, provided that these interests do not stand in opposition to the main basic rights or freedom of the party involved.
3. Web usage log
When visiting our website, the browser used on your device will automatically send information to our website server. This information will be temporarily stored in a log file. The following information is collected without any action on your part and then stored until it is automatically deleted (after a few days):
• IP address of the computer accessing the site,
• date and time of access,
• name and URL of the file retrieved,
• website via which our website was accessed (Referrer URL),
• browser used and, if applicable, your computer operating system and name of your access provider.
We process the data specified above for the following purposes:
• to guarantee a trouble-free website connection,
• to guarantee that our website is easy to use,
• to evaluate system security and stability and
• for our administrative purposes.
The legal basis for processing data is our legitimate interest. We have a legitimate interest due to the data collection purposes listed above. Under no circumstances will we use the data collected to draw conclusions about yourself. If there are any exceptions, these will be described below.
In order for the website to function, it is strictly necessary to collect data to provide the website, as well as to save data in log files. As such, the user does not have the option to opt-out.
The legal basis for processing personal data by using cookies is our legitimate interest, as per the law on privacy. Please use the browser functions mentioned in order to exercise your right to opt out.
5. Tracking and web analytics services
Our website redirects to Google Maps in order to indicate our company location, as well as to generate directions. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Thanks to being certified as per the EU-US Privacy Shield
Google guarantees that the EU requirements on data protection are observed even when data is being processed in the USA.
If you visit our website, a connection is created to the Google server in the USA. This is done in order to make it possible to show certain text on our website.
If you click on the Google Maps tool integrated into our website, Google will save a cookie on your device via your internet browser. User settings and data are processed so that our company location can be indicated and directions can be generated. When this takes place, we cannot guarantee that the Google server in the USA is not put to use.
The legal basis is Article 6, paragraph 1, item f) of the GDPR. Our legitimate interest is to optimise our website functionality.
Using the connection created, Google is able to determine the website from which the request has been sent and the IP address to which the directions should be forwarded.
If you do not wish for your data to be processed in this way, you may prevent cookies from being installed by changing your browser settings. You can find more details under the item “Cookies” above.
In addition, Google Maps, as well as the information obtained through Google Maps, is used in accordance with Google’s terms of service https://policies.google.com/terms?gl=DE&hl=de and the terms and conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.
Moreover, more information can be found by visiting:
6. Data deletion and storage period
Personal data are either deleted or blocked as soon as the reason for storage ceases to exist. Data may continue to be stored if this has been specified by European or national legislators in Union regulations, laws or other provisions which the person responsible must observe. Data are blocked or deleted when the storage period specified in the relevant standards comes to an end, unless it is necessary for the data to be stored in order to conclude or fulfil a contract. Provided that it is possible to obtain more concrete information, this should take place within the scope of the relevant purpose for processing.
7. Service providers or recipients of data
Your personal data are not transferred to third parties for any reasons other than those specified in this policy. We only pass your personal data onto third parties if:
• you have given your express consent therefor,
• it is necessary to enforce, exercise or defend legal claims and there is no reason to believe that you have an overriding, protectable interest in not disclosing your data,
• passing this information on is a legal obligation, or
• it is permitted by law and is necessary for contractual relations.
We use the following service providers / categories of service providers to process data as specified above:
Webhosting, Google Maps, cookies
8. Rights of affected parties
If your personal data are processed, you are an affected party, as per the law on privacy. As a matter of principle, affected parties have the right to disclosure, to make modifications, to deletion and to restrict or opt out of processing, as well as the right to data portability.
The right to disclosure, information and modifications
You may receive information about the personal data regarding yourself that we process. If your information is no longer correct, you may request for this information to be modified. If your data are incomplete, you may request for them to be completed. If we have passed your information onto third parties, we shall inform these third parties about the modifications made - provided that this is required by law.
The right to have your personal data deleted
You may ask for your personal data to be immediately deleted for the following reasons:
• if your personal data are no longer needed for the purposes they were collected
• if you withdraw your consent and there is no other legal basis for retaining your data
• if you object to your data being processed and there are no other overriding, protectable reasons to process your data
• if your personal data have been illegally processed
• if it is necessary for your personal data to be deleted in order to comply with legal requirements. Please note that your right to deletion depends on whether there is a legitimate reason which makes data processing necessary.
The right to restrict processing
You have the right to ask to restrict the processing of your personal data for one of the following reasons:
• if you contest the accuracy of your personal data and we had the opportunity to check whether these data were accurate
• if your data have been illegally processed and you would like to restrict usage, rather than have your data deleted
• if we no longer need your data for processing purposes, but we do need them to enforce, exercise or defend against legal claims
• if you have opted out, provided that it is yet to be determined whether your interests prevail.
The right to opt out
If we are permitted to process your data by virtue of legitimate interests, or in the legitimate public interest, you have the right to opt out of data processing in certain cases. You shall always have this right if your data are used for direct marketing purposes.
The right to data portability
You have the right to receive the personal data you gave to us in a portable format. Furthermore, you have the right to pass this data on to another responsible person without being impeded by the responsible person to whom this personal data was provided. This shall be the case provided that data are processed by virtue of consent or a contract and provided that automated procedures are used to process data.
By exercising this right, you shall also have the right to have your personal data directly transferred from one responsible person to another, provided that this is technically feasible. It is not permitted to affect the freedom and rights of others in doing so. The right to data portability shall not apply if it is necessary to process personal data in order to carry out a task in the public interest or as part of exercising an official authority assigned to the person responsible.
9. Contact information for the data protection officer
Please contact our data protection officer for any questions regarding privacy.
10. The right to appeal to the supervisory authorities
Without prejudice to any other administrative or judicial appeals, you have the right to lodge an appeal with the supervisory authorities, especially in the member state of your place of residence, workplace or place where the presumed infringement has occurred. This is the case if you believe that your personal data have been processed in breach of the law on privacy.