HV Vintage Hotels & Investments Gmbh

Karlheinz-Steimel-Weg 15
50969 Cologne
Germany

Tel.: +49 (0) 2238 – 949480
E-Mail: kontakt@vintage-hotels.de

Register court
Local Court Cologne

Register number
HRB 103400

Board of directors authorized to represent the company:
Melina Durgut, Samir Durgut

Sales tax identification number according to § 27 a sales tax law:
DE 333 804 732

Platform of the EU Commission for online dispute resolution:
https://ec.europa.eu/odr

We are neither obliged nor willing to participate in a dispute resolution procedure before a consumer arbitration board.

Responsible person in the sense of § 55 Abs. 2 RStV: Melina Durgut, Karlheinz-Steimel-Weg 15, 50969 Cologne, Germany

Data protection:
  1. Privacy policy

    Information about the collection of personal data and contact details of the person responsible.

    We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data in this context are all data with which you can be personally identified.

    The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is HV VINTAGE HOTELS & INVESTMENTS GMBH, KARLHEINZ-STEIMEL-WEG15, 50969 Cologne, Germany, Tel: 015120448883 e-mail: kontakt@vintage-hotels.de The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

    This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the controller). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.

  2. Data collection when visiting our website

    During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

    • Our visited website
    • Date and time at the time of access
    • Amount of data sent in bytes
    • Source/reference from which you reached the page
    • Browser used
    • Operating system used
    • IP address used (if applicable: in anonymized form)

    The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

  3. Cookies

    In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

    In part, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a DSGVO in the case of consent given, or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

    Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for each browser at the following links:

    Please note that if you do not accept cookies, the functionality of our website may be limited.

  4. Contacting

    Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted after final processing of your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

  5. Online appointment arrangement

    1. Own function for online appointment arrangement

      We process your personal data within the framework of the online appointment arrangement provided. You can see which data we collect for online appointment scheduling from the respective input form or the appointment request for appointment scheduling. If certain data is required in order to make an online appointment, we will indicate this accordingly in the entry form or the appointment request. If we provide you with a free text field in the input form, you can describe your request in more detail there. You can then also control which additional data you would like to enter. The data you provide will be stored and used exclusively for the purpose of making an appointment. When processing personal data that is required for the fulfillment of a contract with you (this also applies to processing operations that are required for the implementation of pre-contractual measures), Art. 6 (1) lit. b DSGVO serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) a DSGVO. Consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this statement.

    2. Calendly

      This website uses the “Calendly” software of the provider Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA to provide an online appointment booking function. For the purpose of assigning appointments, first and last name as well as email address (and possibly the telephone number, if a telephone appointment is desired) are collected in accordance with Art. 6 Para. 1 lit. b DSGVO and transmitted to Calendly in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in effective customer management and efficient appointment management and stored there for the appointment organization. This may also result in data transfers to the servers of Calendly, LLC, in the USA. After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by Calendly. We have concluded an order processing agreement with Calendly, in which we oblige Calendly to protect the data of our customers in accordance with the legal requirements. Details of Calendly’s privacy policy can be found here: https://calendly.com/de/pages/privacy

  6. Data processing when opening a customer account and for contract execution.

    Pursuant to Art. 6 (1) lit. b DSGVO, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiration of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data was reserved by us.

  7. Use of customer data for direct advertising

    1. Registration for our e-mail newsletter

      If you register for our e-mail newsletter, we will regularly send you information about our offers. Mandatory data for sending the newsletter is only your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on an appropriate link.

      By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond this, which is permitted by law and about which we inform you in this declaration.

    2. Sending the e-mail newsletter to existing customers

      If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you e-mail offers for similar goods or services to those already purchased from our range. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f DSGVO. If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. For this, you will only incur transmission costs according to the prime rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

    3. Advertising by mail

      On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your occupational, industry or business designation in accordance with Art. 6 (1) lit. f DSGVO and to use it to send you interesting offers and information about our products by letter post. You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible.

  8. Data processing for order processing

    1. In order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

      The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b DSGVO.

    2. Use of special service providers for order processing and fulfillment

      • DHL Fulfillment

        Order processing is carried out by the service provider DHL Home Delivery GmbH, Sträßchensweg 10, 53113 Bonn, Germany, within the scope of “shipping by DHL Fulfillment”. Your personal data will be passed on to DHL Fulfillment exclusively for the purpose of processing the online order in accordance with Art. 6 Para. 1 lit. b DSGVO.

    3. Use of payment service providers (payment services)

      • Paypal

        When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.

        PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal’s data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

        You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

  9. Use of Social Media: Videos

    1. Use of YouTube Videos

      This website utilizes the YouTube embedding feature to display and play videos from the provider “YouTube,” which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

      The extended privacy mode is used, which, according to the provider, only initiates the storage of user information upon playback of the videos. When the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube,” these cookies are used, among other things, to capture video statistics, improve user-friendliness, and prevent abusive actions. If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not wish this association with your YouTube profile, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them. Such evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR based on Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or customizing its website to users’ needs. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. As part of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.

      Regardless of whether the embedded videos are played, each time this website is accessed, a connection is established to the Google network, which can trigger further data processing operations beyond our control. For more information on data protection at “YouTube,” please refer to the provider’s privacy policy at: https://www.google.com/intl/en/policies/privacy/

      To the extent legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a GDPR for the processing of your data as described above. You can revoke your given consent at any time with effect for the future. To exercise your revocation, disable this service in the “Cookie Consent Tool” provided on the website.

  10. Online Marketing

    1. Use of Google Ads Conversion Tracking

      This website utilizes the online advertising program “Google Ads” and, as part of Google Ads, the Conversion Tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the Google Ads service to display advertisements (referred to as Google AdWords) on external websites to promote our attractive offers. We can analyze the success of individual advertising campaigns based on campaign data. Our aim is to display advertisements that are of interest to you, make our website more appealing to you, and achieve a fair calculation of the associated advertising costs.

      The conversion tracking cookie is set when a user clicks on a Google Ads advertisement. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a unique cookie. Therefore, cookies cannot be tracked across the websites of Google Ads customers. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers are provided with the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that could personally identify users. If you do not wish to participate in tracking, you can block this usage by disabling the Google Conversion Tracking cookie through your internet browser under the term “user settings”. You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising according to Art. 6 para. 1 lit. f GDPR. As part of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

      You can find more information about Google’s privacy policy at the following internet address: https://www.google.com/policies/privacy/

      You can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=en

      Please note that certain features of this website may not be available or only limited if you have deactivated the use of cookies.

      To the extent legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a GDPR for the processing of your data as described above. You can revoke your given consent at any time with effect for the future. To exercise your revocation, disable this service in the “Cookie Consent Tool” provided on the website or alternatively follow the aforementioned option for lodging an objection.

  11. Web Analytics Services

    1. Google (Universal) Analytics

      This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies,” which are text files that are stored on your device and allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transmitted to a Google server and stored there, which may also involve transmission to servers of Google LLC. in the USA.

      This website uses Google (Universal) Analytics exclusively with the “_anonymizeIp()” extension, which ensures anonymization of the IP address by truncation and excludes direct personal reference. With this extension, your IP address is previously truncated within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with further services related to website and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.

      Google Analytics also allows the creation of statistics with “demographic characteristics” using a special function. This involves generating statistics about age, gender, and interests of website visitors based on the evaluation of interest-based advertising and third-party information. This allows the definition and differentiation of user groups on the website for the purpose of targeted marketing measures. However, data sets collected through “demographic characteristics” cannot be attributed to a specific individual.

      All the processing described above, especially the setting of Google Analytics cookies to read information on the device you use, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of Google Analytics during your visit to our site will not occur.

      You can revoke your given consent at any time with effect for the future. To exercise your revocation, please disable this service using the “Cookie Consent Tool” provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, in which Google is obliged to protect the data of our website visitors and not to share it with third parties.

      For the transfer of data from the EU to the USA, Google relies on the so-called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

      Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en

  12. Retargeting / Remarketing / Recommendation Advertising

    1. Google Ads Remarketing

      Our website uses the features of Google Ads Remarketing, through which we advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in your browser that enables interest-based advertising to be displayed automatically using a pseudonymous cookie ID and based on the pages you have visited. The processing takes place based on our legitimate interest in the optimal marketing of our website according to Art. 6 para. 1 lit. f GDPR.

      Further data processing will only take place if you have given Google your consent to link your internet and app browser history with your Google account and to use information from your Google account to personalize ads that you view on the web. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define cross-device remarketing audience lists. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to create target audiences. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.

      You can permanently object to the setting of cookies for Google Ads Remarketing by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

      For further information and Google’s privacy policy regarding advertising and technology, you can visit: https://www.google.com/policies/technologies/ads/

      To the extent legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a GDPR for the processing of your data as described above. You can revoke your given consent at any time with effect for the future. To exercise your revocation, disable this service in the “Cookie Consent Tool” provided on the website or alternatively follow the aforementioned option for lodging an objection.

  13. Tools and Miscellaneous

    1. Shopware Cookie Consent Tool

      This website uses the Cookie Consent Tool provided by shopware AG, Ebbinghoff 10, 48624 Schöppingen (“Shopware”) to obtain effective user consents for cookies subject to consent and cookie-based applications. By incorporating the corresponding JavaScript code, users are presented with a banner when accessing the site, allowing them to give their consent for specific cookies and/or cookie-based applications by checking a box. The tool blocks the setting of all cookies subject to consent until the respective user grants corresponding consents by checking the boxes. This ensures that such cookies are only set on the user’s device when consent has been granted.

      In order for the Cookie Consent Tool to uniquely assign page views to individual users, as well as to individually record, log, and store the consent settings made by the user for the duration of a session, certain user information (including the IP address) is collected upon accessing our website by the Cookie Consent Tool. This information is transmitted to Shopware servers and stored there.

      These data processing activities are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in compliant, user-specific, and user-friendly consent management for cookies, and therefore, a compliant design of our website.

      Furthermore, the legal basis for the described data processing is also Art. 6 para. 1 lit. c GDPR. As controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user’s consent.

      For further information about data usage by Shopware, please refer to: https://www.shopware.com/en/privacy/

    2. Applications for Job Openings via Email

      On our website, we advertise currently vacant positions in a separate section, and interested parties can apply via email to the provided contact address.

      Inclusion in the application process requires that applicants provide us with all the necessary personal data required for a thorough and informed assessment and selection along with the application via email.

      The required information includes general personal details (name, address, telephone or electronic contact information) as well as performance-specific evidence of the qualifications necessary for the position. Additionally, health-related information may be required, which must receive special consideration under labor and social law in the interest of social protection for the applicant.

      The specific components that an application must contain for its eligibility and the format in which these components need to be submitted via email can be found in the respective job advertisement.

      After receiving an application sent using the provided email contact address, we store the applicant’s data and evaluate it solely for the purpose of processing the application. For any follow-up inquiries that arise during processing, we will use either the email address provided by the applicant with their application or a provided phone number at our discretion.

      The legal basis for these processes, including contacting applicants for inquiries, is generally Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG), as the application process is considered the initiation of an employment contract.

      If, in the context of the application process, special categories of personal data as defined in Art. 9 para. 1 GDPR (e.g., health data such as information about a severe disability) are requested from applicants, the processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR, in order to exercise the rights arising from labor law, social security, and social protection law.

      Cumulatively or alternatively, the processing of special data categories may also be based on Art. 9 para. 1 lit. h GDPR if it serves purposes of preventive or occupational medicine, the assessment of the applicant’s working capacity, medical diagnosis, the provision of health or social care, or the administration of systems and services in the health or social field.

      If, during the evaluation described above, an applicant is not selected or withdraws their application prematurely, the data transmitted via email and all electronic correspondence, including the original application email, will be deleted no later than 6 months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to fulfill our obligations under equal treatment regulations for applicants.

      In the case of a successful application, the provided data will be further processed for the purpose of employment relationship execution based on Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG).

    3. Online Applications via a Form

      On our website, we provide job seekers with the option to apply online through a dedicated form. Inclusion in the application process via this form requires applicants to provide us with all necessary personal data required for a thorough and informed assessment and selection.

      The required information includes general personal details (name, address, telephone or electronic contact information) as well as performance-specific evidence of the qualifications necessary for the position. Additionally, health-related information may be required, which must receive special consideration under labor and social law in the interest of social protection for the applicant.

      As the form is submitted, applicant data is encrypted using state-of-the-art technology, transmitted to us, stored, and evaluated solely for the purpose of processing the application.

      The legal basis for these processes is generally Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG), as the application process is considered the initiation of an employment contract.

      If, in the context of the application process, special categories of personal data as defined in Art. 9 para. 1 GDPR (e.g., health data such as information about a severe disability) are requested from applicants, the processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR, in order to exercise the rights arising from labor law, social security, and social protection law.

      Cumulatively or alternatively, the processing of special data categories may also be based on Art. 9 para. 1 lit. h GDPR if it serves purposes of preventive or occupational medicine, the assessment of the applicant’s working capacity, medical diagnosis, the provision of health or social care, or the administration of systems and services in the health or social field.

      If, during the evaluation described above, an applicant is not selected or withdraws their application prematurely, the data transmitted via the form will be deleted no later than 6 months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to fulfill our obligations under equal treatment regulations for applicants.

      In the case of a successful application, the provided data will be further processed for the purpose of employment relationship execution based on Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG).

    4. Zoom Usage

      We utilize the service “Zoom” provided by Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (hereinafter referred to as “Zoom”) to conduct online meetings, video conferences, and/or webinars.

      When using Zoom, various data is processed. The extent of processed data depends on the information you provide before or during your participation in an online meeting, video conference, or webinar. In the context of using Zoom, communication participant data is processed and stored on Zoom’s servers. This data may include your login information (name, email address, optional phone number, and password) and meeting data (topic, participant IP address, device information, optional description). Additionally, visual and auditory contributions from participants, as well as voice inputs in chats, may be processed.

      For the processing of personal data that is necessary for the fulfillment of a contract with you (including processing operations required to perform pre-contractual measures), Art. 6 para. 1 lit. b GDPR serves as the legal basis. If you have given us consent for the processing of your data, the processing is based on Art. 6 para. 1 lit. a GDPR. A given consent can be revoked at any time with future effect.

      Furthermore, the legal basis for data processing during the execution of online meetings, video conferences, or webinars is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the effective conduct of the online meeting, webinar, or video conference. Further information about data use by Zoom can be found in Zoom’s privacy policy at https://zoom.us/docs/de-de/privacy-and-legal.html

  14. Rechte des Betroffenen

    1. Under applicable data protection law, you have comprehensive rights as a data subject (data subject rights) in relation to the processing of your personal data by the controller. We would like to inform you about these rights:

      • Right of access pursuant to Art. 15 GDPR: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and where that is the case, access to the personal data and specific information about the processing.

      • Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.

      • Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR: You have the right to obtain the erasure of personal data concerning you under certain conditions.

      • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to obtain the restriction of processing under certain conditions.

      • Right to be informed pursuant to Art. 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obliged to inform recipients about this rectification, erasure, or restriction, unless this proves impossible or involves disproportionate effort.

      • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which you have provided to the controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller under certain conditions.

      • Right to withdraw consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your consent for the processing of your data at any time with effect for the future. In case of withdrawal, we will delete the relevant data without undue delay, unless further processing can be based on a legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

      • Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

    2. Right to object

      If we process your personal data based on our legitimate interests, you have the right to object to such processing at any time for reasons arising from your particular situation. In this case, we will cease the processing of the data concerned. However, we may continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

      If your personal data is processed by us for direct marketing purposes, you have the right to object to the processing of your personal data for such marketing at any time. You may exercise your right to object as described above.

      If you exercise your right to object, we will cease the processing of the data concerned for direct marketing purposes.

  15. Dauer der Speicherung personenbezogener Daten

    The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – the relevant statutory retention period (e.g. commercial and tax retention periods).

    When processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, these data will be stored until the data subject revokes their consent.

    If there are statutory retention periods for data processed within the scope of legal or similar obligations based on Art. 6 para. 1 lit. b GDPR, such data will be routinely deleted after the expiration of the retention periods, provided they are no longer necessary for contract fulfillment or contract initiation and/or there is no longer a legitimate interest on our part in further storage.

    When processing personal data based on Art. 6 para. 1 lit. f GDPR, these data will be stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject or the processing serves the assertion, exercise, or defense of legal claims.

    When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, these data will be stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.

    Unless otherwise indicated in the specific processing situations described in this statement, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.