Privacy policy according to DSGVO
Privacy policy
We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you which of your personal data we collect when you visit our website and for what purposes it is used.
This privacy policy applies to the website of Black Label - BLP Investments GmbH, which is accessible under the domain www.blacklabelimmobilien.de and the various subdomains ("our website").
Who is responsible and how can I contact you?
Controller for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
BLP Investments GmbH
Rüsternallee 36, 14050 Berlin
e-mail: info@blp-immobilien.com
Tel: +49 30-67948646
Data Protection Officer
Johns Datenschutz GmbH, An der Kolonnade 11, 10117 Berlin,
e-mail: office@datenschutz.immobilien
What is it about?
This privacy policy fulfils the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a connection to your person, e.g. through anonymisation, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you of the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and in the event of statutory retention obligations.
Who receives my data?
We only pass on your personal data that we process on our website to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis (e.g. consent or protection of legitimate interests) in individual cases. In individual cases, we also pass on personal data to third parties if this serves the assertion, exercise or defence of legal claims. Possible recipients may then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.
Insofar as we use service providers for the operation of our website who process personal data on our behalf as part of order processing in accordance with Art. 28 GDPR, they may be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations.
Do you use cookies?
Cookies are small text files that are sent by us to the browser of your end device and stored there when you visit our website. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to carry out various analyses so that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programmes or contain viruses.
We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings of this Privacy Policy / Consent Manager.
We use Complianz as a cookie consent tool. This is an offer from Complianz B.V., Kalmarweg 14-5 9723 JG (NL) and is a European provider that processes data within the EU. You can find further information at complianz.io.
What rights do I have?
Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), you have the following rights as a data subject:
- Information in accordance with Art. 15 GDPR, § 34 BDSG about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
- Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
- erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- restriction of processing pursuant to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose the erasure of the data because you need it for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 GDPR.
- Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transmit the data directly to another controller if this is technically feasible.
- Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is carried out on the basis of Art. 6 para. 1 lit. e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the establishment, exercise or defence of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
- Revocation pursuant to Art. 7 para. 3 GDPR of your consent with effect for the future.
- Complaint to a supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.
How is my data processed in detail?
Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.
Provision of the website
Type and scope of processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which the access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of providing the website.
Purpose and legal basis
Processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 (f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 para. 1 GDPR. Insofar as further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.
Storage duration
The aforementioned data is stored for the duration of the display of the website and, for technical reasons, for a maximum of 28 days.
Contact form
Type and scope of processing
On our website, we offer you the opportunity to contact us using the form provided. The information collected via mandatory fields is required to process the enquiry. You can also voluntarily provide additional information that you believe is necessary to process the contact enquiry.
When using the contact form, your personal data will not be passed on to third parties.
We have also set the telephone number as a mandatory field in our contact form because we usually consult with you by telephone about the enquiries you send us. If you do not wish to provide this information, please send us an e-mail directly.
Purpose and legal basis
Your data is processed when you use our contact form for the purpose of communicating and processing your enquiry on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Insofar as your enquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of contract fulfilment on the basis of Art. 6 para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your enquiry without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.
Storage duration
If you use the contact form on the basis of your consent, we will store the data collected for each enquiry for a period of three years, beginning with the completion of your enquiry or until you withdraw your consent.
Newsletter
Type and scope of processing
If you register on our website to receive our newsletter, we collect your e-mail address and your name and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you must confirm your registration for the newsletter (double opt-in). If you do not confirm your registration within 72 hours, it will automatically expire and the data will not be processed for sending the newsletter.
To send the newsletter, we use a service that processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.
Purpose and legal basis
We process your data for the purpose of sending the newsletter on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. By unsubscribing from the newsletter, you can declare your cancellation at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.
Storage duration
After registering for the newsletter, we store the data for a maximum of 72 hours until the registration is confirmed. After successful confirmation, we will store your data for a maximum of 28 days until you withdraw your consent (unsubscribe from the newsletter) and for technical reasons beyond this period.
Google Ads
Type and scope of processing
We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users.
Google Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of advertising. Google Ads also delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider.
If you are registered with a Google Ireland Limited service, Google Ads can assign the visit to your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features.
In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Purpose and legal basis
The use of Google Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can obtain a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE [https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE] view.
In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.
Google Analytics
Type and scope of processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our website, subpages visited and the time spent by visitors.
Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.
This information is used, among other things, to compile reports on website activity.
Purpose and legal basis
The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE [https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE].
In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.
Google DoubleClick
Type and scope of processing
We have integrated components of DoubleClick by Google on our website. DoubleClick is a Google brand under which special online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with every impression as well as with clicks or other activities.
Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick places a cookie in your browser.
DoubleClick uses a cookie ID that is required for the technical process. The cookie ID is required, for example, to display an advert in a browser. DoubleClick can also use the cookie ID to record which adverts have already been displayed in a browser in order to avoid duplication. The cookie ID also enables DoubleClick to record conversions. Conversions are recorded, for example, if a user has previously been shown a DoubleClick advert and subsequently makes a purchase on the advertiser's website using the same Internet browser.
A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to create commission statements. Among other things, Google can recognise that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection provisions of DoubleClick by Google may be retrieved under https://policies.google.com/privacy.
Purpose and legal basis
We process your data with the help of the double-click cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. The cookie is also used to avoid multiple displays of the same adverts. Each time you access one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and billing of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can visit our website without restriction, but not all functions may be fully available.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE [https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE].
In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.
Google Tag Manager
Type and scope of processing
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services in order to analyse user access to our website.
Purpose and legal basis
The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
Google Maps
Type and scope of processing
We use the map service Google Maps to create directions. Google Maps is a service provided by Google Ireland Limited, which displays a map on our website.
When you access this content on our website, you establish a connection to the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.
Purpose and legal basis
The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.
Google reCAPTCHA
Type and scope of processing
We have integrated Google reCAPTCHA components on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated by means of a programme. When you access this content, you establish a connection to the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. In addition, Google reCAPTCHA records the time spent on the website and the user's mouse movements in order to distinguish between automated and human requests. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.
Purpose and legal basis
The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE [https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE].
In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.
Microsoft Clarity
We use on our website Microsoft Claritya web analytics service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Clarity enables us to analyse the behaviour of website visitors by anonymously recording clicks, scrolling movements and interactions, for example. This information helps us to continuously improve the user-friendliness and functionality of our website.
Legal basis
Your data is processed on the basis of Art. 6 para. 1 lit. a GDPR, provided that you have given us your consent to use Microsoft Clarity in the cookie banner.
Scope of data processing
Microsoft Clarity uses cookies and similar technologies to collect data. The following data may be processed:
- Usage data (e.g. click behaviour, time spent on the website)
- Technical information (e.g. browser type, operating system, screen resolution)
All data collected is anonymised and is not used to identify you personally. Microsoft Clarity stores the information on servers inside and outside the European Union.
Transfer of data to third countries
It cannot be ruled out that Microsoft Clarity will transfer data to third countries, in particular the USA. However, Microsoft has undertaken to provide suitable guarantees in accordance with Art. 46 GDPR to ensure an adequate level of data protection. Further information on this can be found in the Privacy policy from Microsoft.
Opt-out and withdrawal of consent
You can revoke your consent to the use of Microsoft Clarity at any time by adjusting the settings in our cookie banner or deleting cookies in your browser. Further information on deactivating Microsoft Clarity can be found at the following link: Microsoft Clarity Opt-Out.
Please note that Microsoft Clarity will not be activated and no data will be collected without your consent.
LinkedIn Ads
Type and scope of processing
We have integrated LinkedIn Ads on our website. LinkedIn Ads is a service provided by LinkedIn Corporation that displays targeted advertising to users. LinkedIn Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users. LinkedIn Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of advertising. LinkedIn Ads also delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of LinkedIn Ads, LinkedIn Corporation, Sunnyvale, California, US.
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be merged with you as a natural person, but are used, for example, for segmentation when displaying adverts.
Purpose and legal basis
The use of LinkedIn Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by LinkedIn Corporation. Further information can be found in the privacy policy for LinkedIn Ads: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
LinkedIn Insight Tag
Type and scope of processing
We use LinkedIn Insight Tag from LinkedIn Corporation, Sunnyvale, California, US, to create target groups, segment visitor groups of our online offer, determine conversion rates and subsequently optimise them. This happens in particular when you interact with adverts that we have placed with LinkedIn Corporation. For this purpose, LinkedIn Corporation offers retargeting for website visitors in order to display targeted advertising outside of our website.
LinkedIn Insight Tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp. This data is used to provide anonymised reports on website audience and ad performance.
Purpose and legal basis
The use of LinkedIn Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by LinkedIn Corporation. Further information can be found in the privacy policy for LinkedIn Insight Tag: https://www.linkedin.com/legal/privacy-policy.
StackPath CDN
Type and scope of processing
We use StackPath CDN to properly provide the content of our website. StackPath CDN is a service provided by StackPath, LLC, which acts as a content delivery network (CDN) on our website.
A CDN helps to make the content of our online offering, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to the servers of StackPath, LLC, 2021 McKinney Ave. Suite 1100 Dallas, TX 75201, USA, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of StackPath CDN.
Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimisation of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR.
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by StackPath, LLC. Further information can be found in the privacy policy for StackPath CDN: https://www.stackpath.com/legal/privacy-statement/.
HubSpot
We use the customer relationship management software (CRM) HubSpot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA, website for data protection issues) to record contact form enquiries on our website and to synchronise contact enquiries from advertisements: https://legal.hubspot.com/privacy-policy) to manage the contact entries. HubSpot is a service of HubSpot, Inc. based in the United States of America. The transfer of personal data to HubSpot is carried out in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in the efficient management of customer enquiries and the improvement of our customer service.
HubSpot is certified under the EU-US Privacy Shield to ensure an adequate level of data protection in accordance with the requirements of the General Data Protection Regulation (GDPR). Further information on the Privacy Shield and HubSpot's certification can be found on HubSpot's data protection website mentioned above.
By using HubSpot, personal data (such as name, email address, telephone number) may be transferred to HubSpot servers in the USA and stored there. We take appropriate measures to ensure that your data is protected when it is transferred to HubSpot.
You have the right to object to HubSpot's use of your personal data in accordance with HubSpot's Privacy Policy. Please note, however, that this may affect the use of certain functions of our website."
Hotjar
We use Hotjar on our website. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta. This is used to record movements on the website. In this way, we obtain information to make our websites even faster and more customer-friendly, which is also the purpose of the application. The data is stored by us for the purpose of this analysis in accordance with legal requirements and is not passed on to third parties. Hotjar also assures us that only we have access to this data and that Hotjar will not pass it on to third parties. Hotjar has assured us that all data is hosted in Europe and is not transferred to third countries.
We have concluded an order processing contract with the provider of Hotjar.
We are shown: Device type, browser information, location (country), language, buttons that are clicked, mouse history (scroll range), the screen size of the device used. Contents of the website in which personal data may be recorded are hidden by Hotjar and are therefore not traceable or analysable for us.
You can actively switch off the service. You can find instructions for opting out here:
https://www.hotjar.com/opt-out
The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy
