Privacy Policy

With this privacy policy, we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data is any data that has a personal reference to you, e.g. name, address, e-mail address or user behaviour.

Who is responsible for data processing at our company

.

Who is responsible for data processing:

art’appart Appartementvermietungs GmbH
Kurfürstenstrasse 112
10787 Berlin
Represented by:
Managing Directors: Dirk Gädeke, Felix Gädeke, Moritz Gädeke

Contact details of our data protection officer

You can contact our data protection officer by e-mail at dsgvo@goldmarie.de or at our postal address with the addition of “to the data protection officer”.

Processing your data as part of our company’s core activities

.

We process your personal data transferred to us in the context of the contractual and pre-contractual relationships existing between us. The scope, type, purpose and necessity of the processing depends on the respective underlying contractual relationship. For this purpose, we store and process your data in the computer systems used by us. The data processed by us includes all those data that have been provided by you for the purpose of using the contractual or pre-contractual services and are required to process your enquiry or the contract concluded between us.

This may include, in particular, the following data:

  • Name and address
  • Email address and telephone number
  • Contract details
  • Payment details

    • .

The processing is limited to those data that are necessary and appropriate to answer enquiries and/or to fulfil a contract concluded between you and us. Personal data will only be passed on to third parties if this is necessary for the purpose of providing the service or as part of the organisation of our business to handle financial accounting and to comply with legal obligations. In this case, only those data will be transferred to external service providers that are necessary and expedient for the fulfilment of the contract or for the processing of the financial accounting as well as the compliance with legal obligations. The processing by us is carried out in accordance with your instructions or the statutory provisions.

Legal basis: The processing of your personal data as well as the transfer to third parties is carried out in accordance with Art. 6 para. 1 lit. b) DSGVO and serves to fulfil the contract between you and us. Apart from that, we only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) DSGVO or if there is a legitimate interest in this, Art. 6 para. 1 lit. f. DSGVO. This is the case, for example, if this is necessary to pursue our claims.

Deletion: Your data will be deleted as soon as the data is no longer required for the fulfilment of contractual or legal duties of care and for dealing with any warranty and comparable obligations. This does not affect the statutory retention obligations.

Web hosting

We use an Internet service provider to maintain our online presence, on whose server the website is stored (hosting) and which makes our site available on the Internet. In doing so, the internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Name and address of the Internet service provider: FASTBOOKING SAS 14/16, boulevard Poissonnière, 75009 Paris France You can view its data protection provisions here: https://www.fastbooking.com/legal-notices/ The Internet service provider is based outside the EU. It is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law.

Legal basis: The internet service provider processes the aforementioned data on our behalf, Art. 28 DSGVO. The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO.

.

If you only use our website for information purposes, our internet service provider only collects the personal data that the browser you are using transmits to its server.

.

This is the following data:

  • IP address
  • The date and time of access to our website

    • .

  • Time zone difference from Greenwich Mean Time (GMT)
  • Access status (HTTP status)
  • the amount of data transferred
  • the Internet service provider of the accessing system

    • .

  • the type of browser you are using and its version

    • .

  • the operating system you use
  • the website from which you may have accessed our website

    • .

  • the pages or sub-pages you visit on our website

    • .

The aforementioned data is stored as log files on the servers of our internet service provider. This is necessary in order to be able to display the website on the terminal device you are using, as well as to ensure stability and security. Our legitimate interest in data processing lies in the aforementioned purposes.

Legal basis: The data processing is carried out on the basis of our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO.

Duration: The above data for the provision of our website are stored for a period of 7 days and then deleted.

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are placed and stored on the terminal device you are using. Cookies do not transmit viruses nor can they execute programs. Rather, they primarily serve to exchange information between the end device you are using and our website in order to make our internet offer more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. Transient cookies include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables our website to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You have the option of deleting these cookies at any time in the security settings of your browser.

The cookies are used to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In particular, information on language settings or log-in information may be stored in these cookies.

.

In addition, we also use cookies on our website that enable an analysis of your visit to our internet pages. In particular, information on search terms entered, frequency of page views or use of website functions may be stored in these cookies. These cookies enable us to track how often and in what way the website and its functions are used. They thus serve to improve the quality and user-friendliness of our website, in particular the content and functions. This enables us to continuously optimise our offer. The data collected in this way is pseudonymised by technical precautions. Therefore, it is not possible to assign the data to your person. The data is not stored together with any other personal data relating to you.

Our legitimate interest in data processing lies in the above purposes. The legal basis for this is Art. 6 para. 1 p. 1 lit. f DSGVO.

Since cookies are stored on your computer, you as a user also have full control over the use of cookies. You have the possibility to determine via the security settings of your browser whether cookies are stored at all. For example, you can choose not to accept cookies from the outset, or only accept them on request, or you can specify that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Storage period/deletion

.

We delete or block your personal data as soon as the purpose of the storage has been achieved or is no longer applicable. Any further storage will only take place if we are required to do so by national or European regulations. In this case, the data will be blocked or deleted when the storage period prescribed by the respective regulations has expired, unless we need your data to fulfil a contract concluded between us or if this is necessary to assert, exercise or defend legal claims.

Information about the contact options we provide

.

If you contact us via e-mail, social media, telephone, fax, post, our contact form or otherwise and provide us with personal data such as your name, your telephone number or your e-mail address or give us further information about yourself or your request, this data will be stored and processed in our company in order to process your request.

If you provide us with personal data such as your name, your telephone number or your e-mail address or give us further information about yourself or your request, this data will be stored and processed in our company in order to process your request.

Legal basis: If you have submitted your enquiry via our contact form, the legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. If you submit your enquiry in the context of contractual or pre-contractual relations with us, the legal basis for processing your data is Art. 6 para. 1 lit. b. DSGVO. If your enquiry does not fall under one of the aforementioned categories, our legitimate interest in processing your data is to answer your enquiry properly and in your interest, Art. 6 (1) lit. f DSGVO.

.

Deletion: The personal data we collect will be deleted if it is no longer necessary. We review the necessity every 2 years. In addition, you can revoke the data processing at any time.

.

Registration

You have the option of registering on our website and creating a user account in order to access specific content on our website. For this purpose, it is necessary to provide personal data, which can be found in the input mask. The data requested there includes in particular your name, password and e-mail address. This data is stored and processed by us to enable you to access your user account. You can change or delete the data at any time. The data will not be passed on to third parties unless it is used to process a contract. In order to protect you and us from abusive registrations, we store the IP address used during registration, as well as the date and time of registration. This data will not be passed on to third parties.

Legal basis: We process your data on the basis of Art. 6 para. 1 lit. b DSGVO for the purpose of providing your user account.

Deletion: The personal data, as well as IP address, date and time are stored until the purpose for this no longer applies. The deletion of the data collected as part of the registration will take place as soon as the associated account on our website is deleted or changed: You can delete your account at any time or request deletion by the controller named above.

.

Your rights under the GDPR

.

Under the GDPR, you are entitled to the rights listed below, which you can exercise at any time by contacting the controller referred to in point 1 of this privacy statement:

  • Right of access: Pursuant to Art. 15 of the GDPR, you may request confirmation as to whether and which of your personal data we process. In addition, you can request information from us free of charge about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint and the origin of your data if it has not been collected by us. Furthermore, you have the right to be informed whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to obtain information about the appropriate safeguards in connection with the transfer.
  • Right to rectification: Pursuant to Art. 16 of the GDPR, you may request the rectification of inaccurate or incomplete personal data stored by us and relating to you.
  • Right to erasure: Pursuant to Art. 17 DSGVO, you have the right to request the erasure of your personal data stored by us, insofar as we do not need to process it for the following purposes:
    • to comply with a legal obligation,
    • for the assertion, exercise or defence of legal claims,

      • .

    • to exercise the right to freedom of expression and information,

      • or

      .

    • for reasons of public interest referred to in Art. 17(3)(c) and (d) of the GDPR.
  • Right to restriction: Pursuant to Art. 18 of the GDPR, you have the right to request the restriction of the processing of your personal data if
    • the accuracy of the data is contested by you for a period enabling us to verify the accuracy of the personal data,

      • .

    • the processing of your data is unlawful, but you object to its erasure and request instead the restriction of the use of the data,
    • we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims

      • .

    • you have objected to the processing of your data in accordance with Article 21 of the GDPR, but it is not yet clear whether the legitimate grounds which justify us continuing to process the data despite your objection outweigh your rights.

      • .

  • Right to be informed: Where you have exercised the right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom personal data relating to you has been disclosed of the rectification or erasure of the data or restriction of processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.
  • Right to data portability: Pursuant to Art. 20 of the GDPR, you may request that we receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or that we transfer it to another controller.
  • Right of complaint: According to Art. 77 of the GDPR, you have the right to complain to a supervisory authority. For this purpose, you can contact the supervisory authority of your usual place of residence, your place of work or our registered office.

Right of withdrawal

According to Art. 7 (3) DSGVO, you have the right to revoke your consent to the processing of your data at any time. The revocation declared by you does not change the lawfulness of the processing of your personal data that was carried out until the revocation.

Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of a balance of interests (Article 6(1)(f) DSGVO). This is particularly the case if the data processing is not necessary for the performance of a contract. If you exercise your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons worthy of protection in the data processing outweigh your interests and rights.

Independently of the above, you have the right to object at any time to the processing of your personal data for the purposes of advertising and data analysis.

Please address your objection to the contact address of the data controller indicated above.

YouTube

We use components of YouTube on this website, a service of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

The use of YouTube enables us to embed various videos and clips that are made available on the internet platform www.youtube.de. After a page or sub-page of our website is called up on which such an embedding has taken place, the internet browser used by you is prompted to download video components of the respective embedded video or clip. During your visit to our website and its sub-pages, both YouTube and Google are informed about which page or sub-page you have accessed by transmitting your IP address to Google’s external servers in the USA. This transmission of information takes place regardless of whether the videos or clips displayed are actually viewed or clicked on, or whether you are logged into your Youtube or Google account. Google is a participant in the Privacy Shield agreement and is certified to process data in accordance with European standards. This information is collected and assigned to your Google account, provided that you are logged in to it when you visit.

Purpose: The use of Youtube components on our website serve to make videos and clips from the website www.youtube.de available to you on our website for the purpose of viewing and interaction.

.

Legal basis: We use Youtube on the basis of our legitimate interest in the optimisation and design of our online offer, Art. 6 para. 1 lit. f DSGVO.

Prevention: You can prevent data transmission at any time by logging out of your Youtube account, or by setting an opt-out cookie under the following link https://adssettings.google.com/authenticated after logging in to your Google account by pressing the unsubscribe button.

Third-party information:

Located within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Maps

We use components of “Google Maps”, a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: “Google”), on our website.

Google Maps provides a visual representation of geographical information. Google collects and processes the IP address of the visitor. This is transmitted to Google regardless of whether Google Maps is actually used or you are logged into your Google account. Your IP address will be assigned to your Google account if you are logged in to it when you visit our website. This data is transferred to external Google servers in the USA. Google is a participant in the Privacy Shield agreement and is certified to process data in accordance with European standards. Google may pass on this data collected via the technical procedure to third parties.

Purpose: The integration of Google Maps serves the purpose of simplified visualisation and navigation during a visit to our site. Google processes the data for the purposes of advertising, market research, the design of the website and the provision of needs-based advertising.

.

Legal basis: We use Google Maps on the basis of our legitimate interest in the optimisation and design of our online offer, Art. 6 para. 1 lit. f DSGVO.

Prevention: You can prevent the allocation of data by refraining from using Google Maps on our website and logging out of your Google account before your visit. In addition, you can deactivate JavaScript in your browser to prevent the map display. Furthermore, we refer to Google’s privacy policy at the following link http://www.google.com/intl/de_de/help/terms_maps.html

.

Third Party Provider Information:

Located within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Our online presences on social networks

.

We operate online presences within the social networks listed below. If you visit one of these sites, your usage data will be collected and processed by the respective provider. As a rule, this is done by means of cookies that are stored on the end device you use. For the term “cookie”, see above under the corresponding heading. The cookies are used to store your usage behaviour and interests and to create corresponding usage profiles. In the usage profiles, data can also be stored regardless of the device you use. This is especially the case if you are a member of the respective platform and logged in to it.

We have embedded plugins on our website in the form of “social media buttons” of the providers we use. You can tell which plugin belongs to which provider by the respective logo with which the plugin is marked. We have deactivated the social media plugins on our website by default so that data is not automatically transmitted to the provider of the plugin when our pages are called up. For this purpose, we use the so-called Shariff solution. Only when you click on the “social media button” of the respective provider is the collection of information and its transmission to the provider triggered. If you click on one of these buttons, data can be sent to the operator of the social network even if you do not have an account there or have an account there but are not logged in there at the moment you visit our website.

The data collected is generally used by the provider for the purposes of advertising and market research by creating usage profiles from your usage behaviour. These in turn can be used by the providers to play interest-based advertising to you. You have a right of revocation against the creation of user profiles. To exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data may be linked to it. To prevent such a linking of your data, you can log out of the provider’s service before visiting our page.

For what purpose and to what extent data is collected by the provider, you can find out from the respective data protection declarations of the providers, which are communicated below. We ourselves have no influence on what data is collected and how this data is used by the provider. If you wish to request detailed information or exercise your rights as a data subject, the most effective way to do this is to contact the provider in question yourself, as only the provider in question has access to your data.

We would like to point out that your user data may be transferred and processed outside the area of the European Union. In this case, there is a risk that the enforcement of your data protection rights may become more difficult. Those US providers that are certified under the Privacy Shield have undertaken to comply with EU data protection standards. Information on whether the respective provider has such a certificate can be found in the information on the providers listed below.

Legal basis: If you have been asked for consent to data processing by one of the providers listed below, the legal basis for the processing is Art. 6 (1) lit. a DSGVO. Otherwise, the processing of your data is based on our legitimate interests to contact you and communicate with you, Art. 6 para. 1 lit. f. DSGVO. Prevention: For the respective objection options (opt-out), we refer to the information of the providers linked below.

We maintain online presences on the following social networks:

Twitter

Twitter is a service of Twitter Inc, 795 Folsom St, Suite 600, San Francisco, CA 94107 – USA

Headquarters in the EU: Twitter Inc, 26 Fernian St, Dublin – Ireland

.

Instagram

.

Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 – USA

.

XING

XING is a service of XING AG, Gänsemarkt 43, 20354 Hamburg – Germany

LinkedIn

LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043 – USA

Headquarters in the EU: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 München – Germany

.

Facebook

Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304 – USA.

Located in the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Ireland

.

Google Analytics

We use “Google Analytics”, a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website

.

We use Google Analytics to record and statistically evaluate the flow of visitors to our website. Among other things, Google Analytics collects data about the website from which you accessed our website (so-called referrers), which subpages of the website you accessed or how often and for how long a subpage was viewed and which interactions you carried out. In order to collect and store this data, Google Analytics sets a cookie on the end device you use (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymise your IP address so that it is shortened and can no longer be assigned to your visit to our website. Further information transmitted will not be assigned to or linked with the anonymised IP address by Google. The information generated in this way is transferred to Google servers in the USA and stored there. Google may pass on this personal data collected via the technical procedure to third parties. We have concluded an order processing agreement with Google. According to this contract, Google is entitled and obliged to evaluate the information obtained for us and to create statistical reports for us on the type and scope of website use. These statistics enable us to continuously improve our services, to carry out a cost-benefit analysis of our internet marketing and to make our website more interesting and user-friendly for you as a user. Legal basis: We obtain your consent to the use of this service via a so-called opt-in. This means that the cookie, the tracking pixel or similar procedures with which your personal data is processed via this service will only be activated if you have consented to this. The legal basis is Art. 6 para. 1 lit. a DSGVO. If you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland the age of 14), you are not yet in a position to give effective consent under data protection law according to the evaluation of the respective national legislator. We consider your opt-in as your reasonable expectation regarding the use of cookies. In this case, we invoke Art. 6 (1) lit. f DSGVO as the legal basis. Our legitimate interests in this case lie in the user-friendly design of our online offer as well as our business interest in the collection, storage and evaluation of the data material. Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may subsequently no longer be able to use all the functions of our website to their full extent. Alternatively, you can prevent the storage of cookies by setting a so-called opt-out cookie, which will prevent your data from being collected on our website in the future. To do this, please click on the following . You also have the option of preventing the storage of cookies by setting this in your browser. Cookies that have already been set can be deleted by you at any time.

Information about the third-party provider:

Located within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Ads

We use “Google Ads”, a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

on our website.

Google Ads is a service for displaying Internet advertising in the form of ads. The ads are displayed as search results in the search engine results or in the Google advertising network. Through Google Ads, we specify certain keywords. Our ads are then played out by Google in the search engine results when you use Google’s search engine to retrieve a search result that is related to the keyword. In the display network, the ad is shown on pages related to the topic. If you click on one of the ads, you will be redirected to the website advertised by us. Google Ads sets a cookie (see the term above under the heading Cookies). This enables both Google and us to track whether you have accessed our site via our ad and whether you have taken any further actions here, such as buying something, using a contact form or calling us. For this purpose, the pages you visit, including your IP address, are collected by the cookie and transferred to Google servers in the USA (conversion tracking). Google evaluates this data in order to produce a report with statistical statements about the number of visitors generated by the advertising and the success of the advertising measure. The reports show, among other things, the total number of users who were redirected to our website via our ads. In addition, the reports contain information on the end devices and browsers of the users, at which locations the users were located, at which times the advertisement was clicked. However, the reports do not contain any information that could be used to personally identify you as a user of our site. Purpose: The aforementioned interests constitute the purpose of using Google Ads. Legal basis: We obtain your consent to the use of this service via a so-called opt-in. This means that the cookie, the tracking pixel or similar procedures with which your personal data are processed via this service will only be activated if you have consented to this. The legal basis is Art. 6 para. 1 lit. a DSGVO. If you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland the age of 14), you are not yet in a position to give effective consent under data protection law according to the evaluation of the respective national legislator. We consider your opt-in as your reasonable expectation regarding the use of cookies. In this case, we invoke Art. 6 (1) lit. f DSGVO as the legal basis. Our legitimate interests in this case lie in the user-friendly design of our online offer as well as our business interest in the collection, storage and evaluation of the data material. Prevention: Cookies that have already been set can be deleted at any time via the settings in your browser.

Information on the third-party provider:

Located within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

PayPal

We offer payment processing on our website via the payment service provider PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

If you have decided to pay via PayPal, the following of your data will be transmitted to PayPal as part of the order: First and last name, address, date of birth, email address, telephone number, IP address as well as the data necessary for processing the respective order. This data is transmitted so that PayPal can carry out an identity check to process your purchase. This makes it possible, among other things, to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that PayPal can assess your creditworthiness, if necessary, or so that PayPal can pass the data on to credit agencies to assess your creditworthiness in the form of a credit check. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The collected data may also be used by PayPal for analysis purposes, in particular for customer analysis, risk analysis, data analysis for purposes of developing and improving the services offered by PayPal. Legal basis: The legal basis for the aforementioned use of the data is Art. 6 para. 1 lit b DSGVO. Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months. Revocation: You can revoke your consent to the use of personal data at any time vis-à-vis PayPal. Despite revocation, PayPal may still be entitled to process, use and transmit the personal data that is absolutely necessary for processing payments in accordance with the contract.

.

Information on the third-party provider:

Security measures

We also take technical and organisational security measures in accordance with the state of the art in order to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties

.

Updating and amending this privacy policy

.

This privacy policy is currently valid and was updated in January 2019. Due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy.

.

This privacy policy was created with the help of SOS Recht. The privacy statement generator can be found here. SOS Recht is a service of Mueller.legal Rechtsanwälte Partnerschaft based in Berlin.