The protection of your personal data during the collection, processing, and use when visiting our homepage is important to us.
We would like to point out that data transmission over the Internet (e.g., communication by e-mail) can have security vulnerabilities. A complete protection of data against access by third parties is not possible.
In the following, you will learn when which data is collected and how it is used (nature, scope, and purpose of the processing of personal data) within our online offer and the associated websites, functions, and content.
Who is responsible for the processing?
PiAL Consult GmbH
ABC Straße 15
Phone: +49 (40) 3501884-0
represented by the managing directors Johannes Keplinger, Sebastian Schliewen
Data processing by visiting the website
Definition of terms
“Personal data” means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
„Profiling“ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
“Pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
“Controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
“Processor” means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
Types of data processed:
- Browser type and version
- Operating system used
- Referrer URL (the previously visited website)
- Pages accessed on the website
- Date and time of access
- Host name of the accessing computer
- Time of the server request
- IP address
We, or our hosting provider, collect data based on our legitimate interests according to Art. 6 (1) lit. f GDPR regarding access to the server on which this service is located, for the purpose of evaluating your browsing behavior using an analytics tool.
Categories of data subjects
Visitors and users of the online offer (hereinafter “users”).
Purpose of processing
Provision of the online offer, its functions, and content; optimization of the website; cost-benefit analysis of internet advertising.
Inquiries via email, telephone, fax, mail
When contacting us via email, telephone, fax, or mail, the data you provide will be stored by us in order to respond to your inquiries. The legal basis for this is our legitimate interest in addressing your concerns in accordance with Art. 6(1)(f) of the General Data Protection Regulation (GDPR). If your inquiry relates to the conclusion, performance, or termination of a contract in which you are a party, the additional legal basis for the processing is Art. 6(1)(b) of the GDPR. The data will be deleted after your request has been processed. If a contractual relationship between you and us arises as a result of your inquiry, we will store the data for as long as necessary to fulfill the contract. If we are legally obliged to store the data for a longer period, deletion will occur after the corresponding deadline has expired.
Most of the cookies we use are called “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them or they expire.
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.
Borlabs Cookie does not process any personal data.
Your consents, which you gave when entering the website, are stored in the borlabs-cookie. If you want to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again.
Hosting And Content Delivery Networks (CDN)
In order to provide our product “DEIN RAUM,” we use a service provider (web hoster) who processes your data on our behalf and solely according to our instructions: netcup GmbH, Daimlerstraße 25, D-76185 Karlsruhe (https://www.netcup.de/).
This website uses the open-source web analytics service Matomo.
With Matomo, we are able to collect and analyze data on the usage of our website by visitors. This allows us, among other things, to determine when certain page views occurred and from which region they originated. We also collect various log files (e.g., IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g., clicks, newsletter sign-ups, etc.).
The use of this analysis tool is based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both the website offering and advertising. If the corresponding consent has been requested, processing is based solely on Art. 6(1)(a) of the GDPR and § 25(1) of the German Telemedia Act (TMG), insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TMG. The consent can be revoked at any time.
In the analysis with Matomo, we use IP anonymization. This means that your IP address is shortened before analysis, making it no longer directly attributable to you.
We host Matomo exclusively on our own servers, so all analysis data remains with us and is not shared.
You have the option to prevent actions performed by you on this website from being analyzed and linked. This will protect your privacy but will also prevent the owner from learning from your actions and improving usability for you and other users. Your visit to this website is currently being recorded by the Matomo web analysis. Uncheck this checkbox for opt-out.
Use of SalesViewer®-Technologie
This website uses the SalesViewer® technology of SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Art. 6(1)(f) of the GDPR) for the purpose of collecting and storing data for marketing, market research, and optimization.
The data stored within SalesViewer will be deleted as soon as it is no longer required for its intended purpose, and there are no legal retention obligations preventing its deletion.
The collection and storage of data can be objected to at any time with future effect by clicking this link https://www.salesviewer.com/opt-out to prevent the collection by SalesViewer® on this website in the future. This will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you will need to click this link again.
To ensure data protection-compliant use of Google DoubleClick, we have entered into a contract data processing agreement with Google that complies with the requirements of the General Data Protection Regulation (GDPR). In particular, we have agreed that Google will process the data only on our behalf and in accordance with our instructions and will take appropriate technical and organizational measures to protect the data against unauthorized access and loss.
Furthermore, we have decided to anonymize users’ IP addresses before they are processed by Google DoubleClick. This prevents the identification of users based on their IP address and reduces the risk of linking with other personal data.
You can object to the processing of your data by Google DoubleClick at any time by disabling the storage of cookies in your browser settings or by using Google’s opt-out options. For more information, please visit:
To ensure the privacy-compliant use of Microsoft Clarity, we have entered into a data processing agreement with Microsoft that complies with the requirements of the General Data Protection Regulation (GDPR). In particular, we have agreed that Microsoft will process the data only on our behalf and in accordance with our instructions and will take appropriate technical and organizational measures to protect the data against unauthorized access and loss.
In addition, we have decided to anonymize the IP address of users before it is processed by Microsoft Clarity. This prevents the identification of users based on their IP address and reduces the risk of linking with other personal data.
You can object to the processing of your data by Microsoft Clarity at any time by disabling the storage of cookies in your browser settings or by setting an opt-out cookie using the following link: https://clarity.microsoft.com/optout.
We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service to statistically evaluate our online offering. This includes, for example, the number of views of our online offering, visited subpages, and the duration of visits.
We use Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, a connection is made to servers of Google Ireland Limited, and your IP address is transmitted. If your browser does not support web fonts, a default font will be used from your computer.
The use of Google Fonts is based on our legitimate interests, i.e., the interest in a consistent provision and optimization of our online offering pursuant to Art. 6(1)(f) of the GDPR.
Google Tag Manager
Microsoft Advertising und Microsoft Conversion-Tracking
We use Microsoft Advertising and Microsoft Conversion Tracking, services provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Advertising is an advertising service that allows us to display ads on the search results page of Bing and Bing partner websites. Through Microsoft Conversion Tracking, we can measure the effectiveness of our Microsoft Advertising campaigns.
When you click on one of our ads on Bing, a cookie is set on your computer, which stores information about your use of our website. Microsoft receives information through this cookie that you clicked on our ad and forwards this information to us. The information generated by the cookie about your use of our website is usually transferred to and stored on a Microsoft server in the USA. For more information on data processing by Microsoft Advertising, please refer to Microsoft’s Privacy Statement at https://privacy.microsoft.com/en-us/privacystatement.
LinkedIn Insight Tag
We use the LinkedIn Insight Tag, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The LinkedIn Insight Tag is an analytics tool that allows us to measure the effectiveness of our LinkedIn advertising and create target audiences for future ads.
You can opt out of the use of the LinkedIn Insight Tag at any time by adjusting the advertising settings in your LinkedIn account: https://www.linkedin.com/psettings/advertising.
Google Ads and Google Conversion Tracking
We use Google Ads and Google Conversion Tracking, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an advertising service that allows us to display ads in the Google search results and on Google partner websites. Through Google Conversion Tracking, we can measure the effectiveness of our Google Ads campaigns.
Subscription, Delivery, and Receipt of Our Newsletter
When you subscribe to our email newsletter, the data you provide will be processed for the creation and delivery of the newsletter, as well as for documenting your subscription to the newsletter, until you revoke your consent. The legal basis for processing is Art. 6(1)(a) of the GDPR. You can revoke your consent at any time by unsubscribing from the newsletter. You will find an unsubscribe link at the end of each newsletter. This also applies to revoking consent declarations that were given to us prior to the application of the GDPR, i.e., before May 25, 2018. Please note that the revocation only applies to the future. Processing that occurred before the revocation is not affected.
For sending our newsletter, we use HubSpot, Inc., Cambridge, Massachusetts, USA. HubSpot processes your data solely on our behalf and in accordance with our instructions. In addition, HubSpot allows us to analyze whether the emails sent have been opened, how many users have received an email, and whether users have unsubscribed from the newsletter after receiving.
As HubSpot is based in the USA, your consent must also include the transfer of data to the third country of the USA in accordance with Art. 49(1)(a) of the GDPR. In this regard, we would like to inform you that the USA is considered an unsafe third country, and it is currently not possible to enter into data protection agreements with providers located there that meet the requirements of the high European data protection standards. There is a risk that your data may be processed by authorities located there for purposes unknown to us. In most cases, you will not be aware of these processing activities, and you will not be able to actively exercise legal protection.
To effectively subscribe to our newsletter, you need to click on the confirmation link in the verification email we send you after you sign up on our website in order to provide proof of your consent. By clicking on the corresponding link, we will store the public IP address of the internet connection from which the link is accessed, along with the date and time of the click, and the associated email address. We process this data to be able to prove that you have confirmed the receipt of our email newsletter. The legal basis for this storage is Art. 6(1)(c) of the GDPR.
We delete your data when you unsubscribe from the newsletter. The data that we need as proof that you agreed to receive the newsletter will be deleted after the statute of limitations for corresponding evidentiary obligations has expired.
We only use HubSpot Chat if you give us your consent, and the legal basis is therefore Art. 6(1)(a) of the GDPR. As HubSpot is based in the USA, your consent must also include the transfer of data to the third country of the USA in accordance with Art. 49(1)(a) of the GDPR. In this regard, we would like to inform you that the USA is considered an unsafe third country, and it is currently not possible to enter into data protection agreements with providers located there that meet the requirements of the high European data protection standards. There is a risk that your data may be processed by authorities located there for purposes unknown to us. In most cases, you will not be aware of these processing activities, and you will not be able to actively exercise legal protection.
HubSpot Chat: https://legal.hubspot.com/privacy-policy.
For more information on HubSpot’s compliance with EU data protection regulations, please visit https://legal.hubspot.com/data-privacy.
For more information on the cookies used by HubSpot, you can click here & here.
You can get in touch with us through the contact form on our website. This is done for the purpose of requesting a callback, obtaining a quote, or seeking other advice or support. By submitting your data, you consent to us processing this information. This is done in order to process your inquiries, as far as necessary to respond to your contact requests and any requested actions. The processed data may include:
Your name, email address, or phone number, as well as your company and the text of your inquiry. Providing additional data beyond contact information (email or phone) and the inquiry text is voluntary.
The legal basis for processing your data in the context of contacting us is Art. 6(1)(a) of the General Data Protection Regulation (GDPR), your consent.
An exception applies only if the content of your contact directly serves to initiate or fulfill a contractual relationship between you as an individual and us. In such cases, we base the processing of your data on Art. 6(1)(b) of the GDPR.
We store your data in our Customer Relationship System (CRM), which is operated by HubSpot, Inc., located in Cambridge, Massachusetts, USA. As HubSpot is based in the USA, your consent must also include the transfer of data to the third country of the USA according to Art. 49(1)(a) of the GDPR. In this regard, we would like to inform you that the USA is considered an unsafe third country, and it is currently not possible to enter into data protection agreements with providers located there that meet the requirements of the high European data protection standards. There is a risk that your data may be processed by authorities located there for purposes unknown to us. In normal circumstances, you will not be aware of these processing activities, and you will not be able to exercise active legal protection.
If you book an appointment through the website, your data will also be transmitted to HubSpot.
We will delete your data as soon as it is no longer necessary and does not fall under any legal retention obligations, or if you revoke your consent. If a contractual relationship with you or your employer arises from our contact, we will store the data until the end of the contractual relationship with you.
We use the rating system provided by Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark.
Scope of data processing
Legal basis and purpose of processing
The legal basis for processing data in the context of embedding the widget is Article 6(1)(f) of the GDPR. The widget is intended to show our users the current Trustpilot rating of DEIN RAUM and allow them to access further information about individual reviews.
Right to revoke and options for removal
Right to Information
According to Article 15 of the GDPR, you have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed. If such processing takes place, you have the right to access that personal data and receive further information as specified in Article 15 of the GDPR.
Right to Rectification
According to Article 16 of the GDPR, you have the right to request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to Erasure
You have the right to request the immediate erasure of personal data concerning you. We are obliged to erase personal data without undue delay if the conditions specified in Article 17 of the GDPR are met. For details, please refer to Article 17 of the GDPR.
According to legal requirements, data is retained for a period of 10 years, in particular according to §§ 147(1) AO, 257(1) No. 1 and 4, 4 HGB (books, records, management reports, booking vouchers, commercial books, documents relevant for taxation, etc.), and 6 years according to § 257(1) No. 2 and 3, 4 HGB (commercial letters).
Right to Restriction of Processing
Subject to Article 18 of the GDPR, under certain conditions, you have the right to request the restriction of the processing of your personal data by us.
Right to Data Portability
According to Article 20 of the GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us.
Right to Object
According to Article 21 of the GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you wish to exercise any of your rights, please contact us as the data controller using the contact information provided above or use one of the other contact methods we offer to submit your request. If you have any questions, please contact us.
Right to Lodge a Complaint with the Supervisory Authority
You have the right to lodge a complaint with a supervisory authority according to Article 77 of the GDPR.
We reserve the right to modify the security and data protection measures at any time, particularly if this becomes necessary due to technological developments. In such cases, we may also adapt these privacy notices accordingly. Therefore, please refer to the current version of these privacy notices.