The protection of your personal data is very important to us as the operator of the PLACCES portal. Therefore we want to inform you about how data protection is handled in our company. We always observe the legal provisions of the Federal Data Protection Act (abbreviated as BDSG in German) of the German Telemedia Act (abbreviated as TMG in German) and other data protection regulations. We always endeavor to collect and use any and all personal data in accordance with the applicable data protection laws.
(1) In the following we will inform you about the collection of personal data when using our website. Personal data is all data that can be used to personally identify you such as name, address, e-mail addresses, and user behavior.
(2) The person responsible pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is Places Prime GmbH, Oranienburger Str. 32, 10117 Berlin, Managing Director: Dr. Joachim Köhrich, service@placces.de.
(3) The data you provide when you contact us by e-mail or via contact form (your e-mail address and, if applicable, your name and phone number) will be stored by us in order to answer your questions or to provide the services we offer. We delete the data arising in this context after the storage is no longer necessary, or limit the processing pursuant to statutory retention obligations.
(4) We will inform you in detail about the respective processes below when we commission service providers for individual aspects of our offering or want to use your data for advertising purposes. We also specify the defined criteria for the storage period.
(1) You have the following rights with regard to personal data concerning you:
– Right to information
– Right to correction or deletion
– Right to restriction of processing
– Right to objection of the processing
– Right to data portability
(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
(1) We only collect the personal data that your browser transmits to our server when you visit the website for information purposes only, i.e., if you do not register or otherwise provide us with information. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee its stability and security (legal basis is Art. 6(1)1 point (f) of the GDPR):
– IP address
– Time and date of the request
– Time zone difference compared to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code – Amount of data transmitted
– Origin of requesting website – Browser
– Operating system and interface
– Language and version of the browser software
(2) In addition to the above data, cookies are stored on your computer when you use our website. A cookie is a small text file that is placed by your browser on your hard drive you use and stored there and through which certain information is transmitted to the organization setting the cookie (in this case, by us). Cookies cannot run programs or download viruses onto your computer. They are used to make our online offering more user-friendly and effective overall.
(3) Use of cookies:
a) This website uses the following types of cookies. The scope and how they function are explained below:
– Transient cookies (see b)
– Permanent cookies (see c)
b) Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a session ID with which different requests of your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Permanent cookies are automatically deleted after a specified period. This period may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
d) You can configure your browser settings according to your needs and, for example, refuse to accept all cookies or just third-party cookies. Please note that you may not be able to use all functions of this website.
e) We use cookies to identify you in subsequent visits, provided that you have an account with us. Otherwise, you will have to log in again for each visit.
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. You will generally need to provide further personal data, which we use to provide the respective service and to which the above data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are monitored on a regular basis.
(3) Furthermore, we may pass on your personal data to third parties for the purpose of participation in promotions, sweepstakes, conclusion of contracts, or similar services that we offer together with partners. For more information, please provide your personal data or see the description of the offer below.
(4) We will inform you of the consequences of the circumstance in the description of the offer if our service providers or partners are based in a country outside the European Economic Area (EEA).
(1) You can revoke your consent to the processing of your data at any time if you had given it to us. Such a revocation influences the permissibility of processing your personal data after you have expressed this desire to us.
(2) You may object to the processing of your personal data if we base the processing on the weighing of interests. This is the case if processing is not necessary in particular to fulfill a contract with you, which we lay out in the following description of the functions. When exercising such objection, we ask you to explain the reasons why we should not process your personal data in the manner we have done so. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.
(3) You can naturally object to the processing of your personal data for purposes of advertising and data analysis at any time.
(1) You can subscribe to our newsletter, which we use to inform you about our current offers that may be of interest to you, with your consent. The advertised goods and services are named in the declaration of consent.
(2) The subscription process for our newsletter takes place in a double opt-in procedure, meaning that after you send a request to subscribe to it, we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you want the newsletter to be sent. If you do not confirm your subscription within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses that you use and the time of subscription and confirmation. The purpose of the procedure is to be able to prove your subscription and, if necessary, to clarify a possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your e-mail address. The entry of further, separately listed data is voluntary and is used to be able to address you personally. After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6(1)1 point (a) of the GDPR.
(4) You can revoke your consent to the sending of the newsletter and unsubscribe from it at any time. You can declare the revocation, for example, by clicking the link provided in each newsletter e-mail or by sending a message to the contact data indicated in the legal notice (“Impressum” on the German-language site).
(5) We want to point out that we analyze your user behavior when sending the newsletter. For this analysis, the e-mails we send contain web beacons or tracking pixels, which represent single-pixel image files stored on our website. We link the data mentioned in (3) and the web beacons with your e-mail address and an individual ID for the analysis. Links found in the newsletter also contain this ID. We create a user profile to tailor the newsletter to your individual interests with the data obtained in this way. We capture the time when you read our newsletter and which links in them you click, leveraging this information to deduce your personal interests. We link this data to actions taken by you on our website. You can object to this tracking at any time by clicking the separate link provided in each e-mail or by informing us via another contact method. The information is stored for as long as you have subscribed to the newsletter. After an unsubscription request we store the data purely statistically and anonymously.
1. Integration of Google Analytics
(1) This website uses Google Analytics, a web analysis service of Google, Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help measure user interactions on our website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. However, if IP anonymization has been activated on this website, your IP address will first be shortened by Google within member states of the European Union or in other countries party to the Agreement on the European Economic Area. The full IP address will be transmitted to a Google server in the U.S. and shortened there only in exceptional cases. Google will use this information on our behalf as the operator of this website for the purpose of analyzing your use of the website, compiling reports on website activity, and providing other services relating to website activity and Internet usage for us.
(2) The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. (3) You can prevent cookies from being stored on your computer by making the appropriate settings in your browser; however, note that if you do this you may not be able to use the full functionality of this website. You can also configure your browser to prevent the collection of data generated by cookies and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on provided by Google under the following link: http://tools.google.com/dlpage/gaoptout.
(4) This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in abbreviated form to prevent them from being directly linked to a particular individual. If the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately.
(5) We use Google Analytics to analyze and regularly improve the use of our website. We can improve our offering and make it more interesting for you as a user through the statistics collected. In the event that personal data is transferred to the U.S., Google has submitted to the EU–U.S. Privacy Shield (see https://www.privacyshield.gov/EU-US-Framework). The legal basis for the use of Google Analytics is Art. 6(1)1 point (f) of the GDPR.
(6) Third-party information: Google Dublin, Google Ireland, Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: (+353-1) 436-1001. Terms of service: https://www.google.com/analytics/terms/us.html. Summary of privacy protection: https://support.google.com/analytics/answer/6004245. Privacy policy: https://policies.google.com/privacy.
[(7) This website also uses Google Analytics for a device-independent analysis of visitor counts that is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data,” “Personal data”].
1. Integration of social media plug-ins
(1) We currently use the following social media plug-ins: Facebook, Google+, Twitter, Instagram. We use a two-click solution, which means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the indication on the box above its initial letter or the logo. We offer you the possibility of communicating directly with the provider of the plug-in via the button. The plug-in provider only receives the information that you have accessed the corresponding website of our online offering if you click the selected field, thereby activating it. In addition, the data specified in Sect. 3 of this privacy policy will be transmitted. In the case of Facebook, the IP address is anonymized immediately after collection in Germany according to the information provided by the respective provider. It means that by activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (for U.S. providers, this means in the United States). We recommend using your browser’s security settings to delete all cookies before clicking the grayed-out box since the plug-in provider collects data mainly via cookies.
(2) We neither have influence on the data collected and the processes involved in data processing, nor are we aware of the full extent of data collection, the purposes of processing, or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
(3) The plug-in provider stores this data it collects on you as user profiles and uses it for the purposes of advertising, market research, and/or needs-oriented design of its website. Such an analysis takes place in particular (for users who are not logged in, as well) for displaying needs-oriented advertisement and in order to inform other users of the social media network about your activities on our website. You have the right to objection if you do not agree with the creation of these user profiles; however, you must contact the respective plug-in provider to exercise this right. We implement the plug-ins to offer you the possibility of interacting with social media networks and other users, in an attempt to improve our offering and make it more interesting to you as a user. The legal basis for the use of plug-ins is Art. 6(1)1 point (f) of the GDPR.
(4) The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collected will be directly associated with your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend logging out regularly after using a social media network, especially before activating the button, as this way you can avoid assignment to your profile with the plug-in provider.
(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data privacy policies of these providers listed below. They will also provide you with further information on your rights in this regard and configuration options to protect your privacy.
(6) Addresses of the respective plug-in providers and their URLs with the information on data protection:
a) [Facebook, Inc., 1601 S. California Ave, Palo Alto, California 94304, U.S. (http://www.facebook.com/policy.php). For more information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications, and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU–U.S. Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
b) Google, Inc., 1600 Amphitheater Parkway, Mountain View , California 94043, U.S.; https://policies.google.com/technologies/partner-sites. Google has submitted to the EU–U.S. Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, U.S.; https://twitter.com/privacy. Twitter has submitted to the EU–U.S. Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
d) Instagram, Inc., 1601 Willow Road, Menlo Park, CA, 94025, U.S.; http://instagram.com/about/legal/privacy/.
2. AddThis social bookmark button
(1) Our website also uses web widgets from AddThis. These web widgets allow you to bookmark or share interesting content with other users. We implement these web widgets to offer you the possibility of interacting with social media networks and other users, in an attempt to improve our offering and make it more interesting to you as a user. The legal basis for the use of web widgets and plug-ins is Art. 6(1)1 point (f) of the GDPR.
(2) Your Internet browser uses these plug-ins to establish a direct connection to the servers of AddThis and, if applicable, the selected social media network or bookmarking service. The recipients will be informed that you have accessed the respective website of our online offer and the data listed under Sect. 3 of this privacy policy. This information is processed on AddThis servers in the U.S. [We have concluded standard data protection clauses with AddThis.]. A connection can be established between visiting our website and your user profile on the relevant network when you send content from our website to social media networks or bookmarking services. We neither have influence on the data collected and the processes involved in data processing, nor are we aware of the full extent of data collection, the purposes of processing, or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
(3) The plug-in provider stores this data as user profiles and uses it for the purposes of advertising, market research, and/or needs-oriented design of its website. Such an analysis takes place in particular (for users who are not logged in, as well) for displaying needs-oriented advertisement and in order to inform other users of the social media network about your activities on our website. You have the right to objection if you do not agree with the creation of these user profiles; however, you must contact the respective plug-in provider to exercise this right.
(4) If you do not wish to participate in this process, you can object to the collection and storage of data at any time by using an opt-out cookie with effect for the future: http://www.addthis.com/privacy/opt-out. Alternatively, you can set your browser to prevent a cookie from being placed.
(5) You can obtain further information on the purpose and scope of data collection and processing by the plug-in provider as well as further information on your rights in this context and configuration options to protect your privacy from: AddThis, LLC., 1595 Spring Hill Road, Suite 300, Vienna, Virginia 22182, U.S. (www.addthis.com/privacy).
3. Integration of YouTube videos
(1) We have integrated YouTube videos, which are stored on http://www.YouTube.com, into our online offering and they can be viewed directly on our website. [These are all integrated in the “extended data protection (XDP)” mode, i.e., no data about you as a user will be transmitted to YouTube if you do not play the videos. The data listed in paragraph 2 will only be transmitted when you play the videos. We have no influence on this data transmission.]
(2) By visiting the website, YouTube receives information that you have accessed the corresponding subpage of our website. In addition, the data specified in Sect. 3 of this privacy policy will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. You must log out before activating the button if you do not want to be associated with your profile on YouTube. YouTube stores your data as user profiles and uses it for the purposes of advertising, market research, and/or needs-oriented design of its website. Such an analysis takes place in particular (for users who are not logged in, as well) for displaying needs-oriented advertisement and in order to inform other users of the social media network about your activities on our website. You have the right to objection if you do not agree with the creation of these user profiles; however, you must contact YouTube to exercise this right.
(3) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the data privacy policy. There you will also find further information on your rights and configuration options to protect your privacy: https://policies.google.com/privacy. Google processes your personal data in the U.S., as well, and has submitted to the EU–U.S. Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
4. Integration of Google Maps
(1) We use Google Maps on this website. This enables us to display interactive maps directly on the website and allows you to conveniently use the maps.
(2) By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. In addition, the data specified in Sect. 3 of this privacy policy will be transmitted. This is independent of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. You must log out before activating the button if you do not want to be associated with your profile on Google. Google stores your data as user profiles and uses it for the purposes of advertising, market research, and/or needs-oriented design of its website. Such an analysis takes place in particular (for users who are not logged in, as well) for displaying needs-oriented advertisement and in order to inform other users of the social media network about your activities on our website. You have the right to objection if you do not agree with the creation of these user profiles; however, you must contact Google to exercise this right.
(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s data privacy policy. There you will also find further information on your rights in this context and configuration options to protect your privacy: https://policies.google.com/privacy. Google processes your personal data in the U.S., as well, and has submitted to the EU–U.S. Privacy Shield (https://www.privacyshield.gov/EU-US-Framework
(1) You can make public comments in our blog, where we publish a variety of articles on topics related to our activities. Your comment will be published with your user name alongside the respective post. We recommend using a pseudonym instead of your actual name. A user name and an e-mail address are mandatory, but all other information is voluntary. We continue to store your IP address, which we delete after [one week], when you make a comment. Storing this information is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address in order to contact you if a third party should object to your comment considering it unlawful. The legal basis is Art. 6(1)1 points (b) and (f) of the GDPR. Comments are not moderated before publication. We reserve the right to delete comments if objections are raised by third parties regarding their unlawfulness.
(1) If you wish to use our portal as a provider, you must register with us by entering your e-mail address and a password of your choice. We use the double opt-in procedure for registration, i.e., your registration is not complete until you have previously confirmed it via a confirmation e-mail sent to you for this purpose by clicking the link contained therein. If you do not receive confirmation within seven (7) days, your registration will be automatically deleted from our database. You are required to provide the above data; all further information can be provided voluntarily by using our portal.
(2) If you use our portal, we store your data necessary for the fulfillment of the contract, including information on payment method, until you permanently delete your login credentials. Furthermore, we store the voluntary data provided by you for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all information in the protected customer area. The legal basis is Art. 6(1)1 point (f) of the GDPR.
(3) The connection is encrypted using Transport Layer Security (TLS) technology in order to prevent unauthorized access to your personal data, especially financial data.