This privacy policy only governs the use of personal data, on our website www.raumhoch.de including sub-pages. If you leave our website via a link or visit our presence on a social media platform, you also leave the scope of this privacy policy. The transmission of information to or from this website is secured with TLS encryption. You can access, print or download this data protection declaration permanently and at any time at the address www.raumhoch.de/datenschutz.
Name and address of the Controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:
raumHOCH GmbH
Managing Director: Andreas Landowski
Liegnitzer Strasse 30, 10999 Berlin
Telephone: +49 (0) 30 346 256 7 – 0
E-mail: info@raumhoch.de
Contact details of the data protection officer
You can reach our data protection officer at datenschutz@raumhoch.com.
General information on data processing
1. Scope of the processing of personal data
As a matter of principle, we only process personal data of our users insofar as this is necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users only takes place with the consent of the user. An exception applies in those cases in which obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) lit. c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d) GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f) GDPR serves as the legal basis for the processing.
3. Data deletion and storage period
The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.
Provision of the website
and creation of log files
1. Description and scope of data processing
Each time our website is accessed, the servers of our web host automatically collect data and information from the computer system of the accessing computer. The following data is collected: The user’s IP address, date and time of access, information about the browser type and version used, the user’s operating system, the name of the website accessed, the amount of data transferred and the http status code. The data is also stored in the log files of our web hoster for three days and then deleted. The data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for the storage of the data is Art. 6 para. 1 lit. f) GDPR.
3. Purpose of the data processing
The temporary collection of data by the system is necessary to enable delivery of the website to the user’s computer. The storage of the collected data in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) GDPR.
4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The log file is deleted after 3 days at the latest.
Use of cookies
1. Description and scope of data processing
Our website uses cookies or other forms of trackers that collect information about visitors to our website.
2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f) GDPR.
3. Google Analytics limited to the analysis of your website behaviour
We use “Google Analytics” on our website, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by a cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymisation, your IP address will be shortened by Google beforehand within the European Economic Area (European Union and other Member States). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by a cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
You can also prevent the collection of your data by Google Analytics by clicking on the following link: Deactivate Google Analytics. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website.
In connection with this service, we process your personal data as follows:
a) Purpose of the processing
We process your personal data to use Google Analytics to analyse your website behaviour.
b) Legal basis of the processing
The processing of your personal data for the use of Google Analytics for the analysis of your website behaviour is based on your consent.
c) Recipients/categories of recipients of your personal data
We disclose your personal data to Google.
d) Storage period of your personal data
We store your personal data for as long as is necessary for the use of Google Analytics to analyse your website behaviour.
e) Third country reference of the processing of your personal data
Google processes your personal data in the USA. The USA does not offer a sufficient level of data protection.
In the exceptional cases where personal data is transferred to the US, an adequate level of data protection is ensured in accordance with the EU standard contractual clauses for the transfer of personal data to data processors in third countries. A copy of the standard contractual clauses prescribed by the EU Commission can be found on the Internet at: http://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32010D0087
The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. a) GDPR
f) Obligation to provide your personal data
You are not obliged to disclose personal data. However, if you have not used any of the above functions to deactivate tracking by Google Analytics, you will not be able to access this website without your personal data being processed by Google Analytics.
E-Mail-Contact
1. Description and scope of data processing
You can contact us via the e-mail addresses we publish on the website or via the mailto links we provide. In this case, your personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. We may forward the e-mail internally to a competent employee if you have contacted a general e-mail address or the address of an incompetent or absent employee.
2. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b) GDPR.
3. Purpose of the data processing
The processing of the personal data from the e-mail serves us solely to process the contact. This also constitutes the necessary legitimate interest in processing the data.
4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.
Applications by e-mail
1. Purpose and scope of data processing
You have the opportunity to apply for jobs directly at raumHOCH via the site by sending an e-mail to bewerbung@raumhoch.de. For the purpose of applicant management, we need your contact details (surname, first name, telephone number, e-mail), your training data and details of your professional career and skills and, if applicable, further education and training data (CV and covering letter).
2. Legal basis for data processing
We process this data insofar as this is necessary to carry out the application process in accordance with Art. 26 (1) of the Federal Data Protection Act (BDSG) or you have given us your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. In addition, we may be obliged to process the data on the basis of statutory provisions, Art. 6 para. 1 lit. c) GDPR.
3. Duration of storage
The data of applicants with whom no employment relationship is established will be deleted after 6 months.
Hosting
1. Description and scope of data processing
We use the following services of a hosting provider: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services. In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of visitors to this online offer and of registered members, as described in this privacy policy for the individual data processing areas.
2. Legal basis for data processing
The legal basis for data processing is Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR. Art. 28 GDPR (order processing agreement). Our legitimate interest is based on the provision of an efficient and secure online offer.
3. Purpose of the data processing
The purpose of the data processing is the operation of this online offer
Possibility of objection and removal
Insofar as the data processing is based on your consent or our legitimate interest, you have the right to object to the processing at any time or to revoke the consent you have given. Your objection or revocation only has effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. To exercise your right of objection or revocation, you can contact info@raumhoch.de at any time. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms.
Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the rights described in more detail below. Please contact us with your request in all cases by e-mail to info@raumhoch.de.
Right to information according to Art. 15 GDPR
You have a right of access to your personal data processed by us. This includes the mandatory information set out in Article 15 of the GDPR.
Right to rectification according to Art. 16 GDPR
You have the right to request the immediate correction of incorrect personal data and the completion of incorrect personal data.
Right to deletion according to Art. 17 GDPR
You have the right to request the erasure of your personal data if one of the reasons listed in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.
Right to restriction of processing according to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data if one of the reasons listed in Art. 18 GDPR applies, in particular at your request instead of deletion of the data.
Right to data portability according to Art. 20 GDPR
IIn accordance with the provisions of Article 20 GDPR, you have the right to request the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.
Right to complain to the competent supervisory authority, Art. 77 GDPR
You have the right to lodge a complaint with the supervisory authority responsible for you in accordance with Art. 77 GDPR.