Privacy Policy

Privacy Policy Notes

The protection of your personal data during the collection, processing, and use when visiting our homepage is important to us.

We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

We would like to point out that data transmission over the Internet (e.g., communication by e-mail) can have security vulnerabilities. A complete protection of data against access by third parties is not possible.

In the following, you will learn when which data is collected and how it is used (nature, scope, and purpose of the processing of personal data) within our online offer and the associated websites, functions, and content.

Who is responsible for the processing?

PiAL Consult GmbH
ABC Straße 15
20354 Hamburg
Phone: +49 (40) 3501884-0
E-Mail: info@pial-consult.com

represented by the managing directors Johannes Keplinger, Sebastian Schliewen

https://www.pial-consult.com/Impressum-1102

Data processing by visiting the website

Definition of terms

“Personal data” means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

„Profiling“ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

“Pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

“Controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Processor” means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

Types of data processed:

• Browser type and version
• Operating system used
• Referrer URL (the previously visited website)
• Pages accessed on the website
• Date and time of access
• Host name of the accessing computer
• Time of the server request
• IP address

We, or our hosting provider, collect data based on our legitimate interests according to Art. 6 (1) lit. f GDPR regarding access to the server on which this service is located, for the purpose of evaluating your browsing behavior using an analytics tool.

Categories of data subjects

Visitors and users of the online offer (hereinafter “users”).

Purpose of processing

Provision of the online offer, its functions, and content; optimization of the website; cost-benefit analysis of internet advertising.

Inquiries via email, telephone, fax, mail

When contacting us via email, telephone, fax, or mail, the data you provide will be stored by us in order to respond to your inquiries. The legal basis for this is our legitimate interest in addressing your concerns in accordance with Art. 6(1)(f) of the General Data Protection Regulation (GDPR). If your inquiry relates to the conclusion, performance, or termination of a contract in which you are a party, the additional legal basis for the processing is Art. 6(1)(b) of the GDPR. The data will be deleted after your request has been processed. If a contractual relationship between you and us arises as a result of your inquiry, we will store the data for as long as necessary to fulfill the contract. If we are legally obliged to store the data for a longer period, deletion will occur after the corresponding deadline has expired.

Cookies

We use cookies on our website to simplify and improve its use. Cookies are small text files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our website.

Most of the cookies we use are called “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them or they expire.

Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.

Borlabs Cookie does not process any personal data.

Your consents, which you gave when entering the website, are stored in the borlabs-cookie. If you want to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again.

Hosting And Content Delivery Networks (CDN)

In order to provide our product “DEIN RAUM,” we use a service provider (web hoster) who processes your data on our behalf and solely according to our instructions: netcup GmbH, Daimlerstraße 25, D-76185 Karlsruhe (https://www.netcup.de/).

Cloudfront

On our site, JavaScript code from Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States (Amazon CloudFront – Content Delivery Network (CDN)) is loaded. If you have JavaScript enabled in your browser and have not installed a JavaScript blocker, your browser may transmit personal data to Amazon CloudFront – Content Delivery Network (CDN). We are not aware of the data that Amazon CloudFront – Content Delivery Network (CDN) associates with the received data or the purposes for which Amazon CloudFront – Content Delivery Network (CDN) uses this data. For more information, please refer to the privacy policy of Amazon CloudFront – Content Delivery Network (CDN): https://aws.amazon.com/de/privacy/?nc1=f_pr. To prevent the execution of JavaScript code from Amazon CloudFront – Content Delivery Network (CDN) altogether, you can install a JavaScript blocker.

MATOMO

This website uses the open-source web analytics service Matomo.

With Matomo, we are able to collect and analyze data on the usage of our website by visitors. This allows us, among other things, to determine when certain page views occurred and from which region they originated. We also collect various log files (e.g., IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g., clicks, newsletter sign-ups, etc.).

The use of this analysis tool is based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both the website offering and advertising. If the corresponding consent has been requested, processing is based solely on Art. 6(1)(a) of the GDPR and § 25(1) of the German Telemedia Act (TMG), insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TMG. The consent can be revoked at any time.

IP-Anonymization
In the analysis with Matomo, we use IP anonymization. This means that your IP address is shortened before analysis, making it no longer directly attributable to you.

Hosting

We host Matomo exclusively on our own servers, so all analysis data remains with us and is not shared.

You have the option to prevent actions performed by you on this website from being analyzed and linked. This will protect your privacy but will also prevent the owner from learning from your actions and improving usability for you and other users. Your visit to this website is currently being recorded by the Matomo web analysis. Uncheck this checkbox for opt-out.

Use of SalesViewer®-Technologie

This website uses the SalesViewer® technology of SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Art. 6(1)(f) of the GDPR) for the purpose of collecting and storing data for marketing, market research, and optimization.

To do this, a JavaScript-based code is used, which serves to collect and use company-related data. The data collected with this technology is encrypted using a non-reversible one-way function (hashing). The data is immediately pseudonymized and not used to personally identify the visitor to this website.

The data stored within SalesViewer will be deleted as soon as it is no longer required for its intended purpose, and there are no legal retention obligations preventing its deletion.

The collection and storage of data can be objected to at any time with future effect by clicking this link https://www.salesviewer.com/opt-out to prevent the collection by SalesViewer® on this website in the future. This will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you will need to click this link again.

Google DoubleClick

We use Google DoubleClick, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google DoubleClick uses cookies and similar technologies to analyze user interactions on our website and display advertisements based on users’ interests. The data collected by Google DoubleClick is generally transferred to and stored on a server operated by Google in the USA.

To ensure data protection-compliant use of Google DoubleClick, we have entered into a contract data processing agreement with Google that complies with the requirements of the General Data Protection Regulation (GDPR). In particular, we have agreed that Google will process the data only on our behalf and in accordance with our instructions and will take appropriate technical and organizational measures to protect the data against unauthorized access and loss.

Furthermore, we have decided to anonymize users’ IP addresses before they are processed by Google DoubleClick. This prevents the identification of users based on their IP address and reduces the risk of linking with other personal data.

You can object to the processing of your data by Google DoubleClick at any time by disabling the storage of cookies in your browser settings or by using Google’s opt-out options. For more information, please visit:
https://www.google.com/policies/technologies/ads/

Microsoft Clarity

We use Microsoft Clarity, a web analytics service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). Microsoft Clarity uses cookies and similar technologies to analyze and improve user interactions on our website. The data collected by Microsoft Clarity is usually transferred to and stored on a Microsoft server in the USA.

To ensure the privacy-compliant use of Microsoft Clarity, we have entered into a data processing agreement with Microsoft that complies with the requirements of the General Data Protection Regulation (GDPR). In particular, we have agreed that Microsoft will process the data only on our behalf and in accordance with our instructions and will take appropriate technical and organizational measures to protect the data against unauthorized access and loss.

In addition, we have decided to anonymize the IP address of users before it is processed by Microsoft Clarity. This prevents the identification of users based on their IP address and reduces the risk of linking with other personal data.

You can object to the processing of your data by Microsoft Clarity at any time by disabling the storage of cookies in your browser settings or by setting an opt-out cookie using the following link: https://clarity.microsoft.com/optout.

Google Analytics

We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service to statistically evaluate our online offering. This includes, for example, the number of views of our online offering, visited subpages, and the duration of visits.

Google Analytics uses cookies and other browser technologies to analyze user behavior and recognize users. This information is used, among other things, to compile reports on website activity. We process data using Google Analytics for the purpose of optimizing our website and for marketing purposes based on your consent.

The specific storage period of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics:
https://policies.google.com/privacy.

Google Fonts

We use Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, a connection is made to servers of Google Ireland Limited, and your IP address is transmitted. If your browser does not support web fonts, a default font will be used from your computer.

The use of Google Fonts is based on our legitimate interests, i.e., the interest in a consistent provision and optimization of our online offering pursuant to Art. 6(1)(f) of the GDPR.

The specific storage period of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts:
https://policies.google.com/privacy.

Google Tag Manager

We use Google Tag Manager, a solution provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), which allows us to manage website tags through an interface. The Tag Manager itself (which implements the tags) does not process any personal data of users of the website. However, it allows us to activate other tags that may collect personal data. Google Tag Manager does not access this data. If you have disabled it at the domain or cookie level, this will remain in effect for all tracking tags implemented with Google Tag Manager. For more information about Google Tag Manager, please refer to Google’s terms of use: https://www.google.com/analytics/tag-manager/use-policy/.

Microsoft Advertising und Microsoft Conversion-Tracking

We use Microsoft Advertising and Microsoft Conversion Tracking, services provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Advertising is an advertising service that allows us to display ads on the search results page of Bing and Bing partner websites. Through Microsoft Conversion Tracking, we can measure the effectiveness of our Microsoft Advertising campaigns.

When you click on one of our ads on Bing, a cookie is set on your computer, which stores information about your use of our website. Microsoft receives information through this cookie that you clicked on our ad and forwards this information to us. The information generated by the cookie about your use of our website is usually transferred to and stored on a Microsoft server in the USA. For more information on data processing by Microsoft Advertising, please refer to Microsoft’s Privacy Statement at https://privacy.microsoft.com/en-us/privacystatement.

LinkedIn Insight Tag

We use the LinkedIn Insight Tag, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The LinkedIn Insight Tag is an analytics tool that allows us to measure the effectiveness of our LinkedIn advertising and create target audiences for future ads.

When you visit our website, the LinkedIn Insight Tag sets a cookie on your device that stores information about your use of our website. This information is usually transferred to and stored on a LinkedIn server in the USA. LinkedIn may link this information to your LinkedIn account and use it for its own advertising purposes. For more information on data processing by LinkedIn, please refer to LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy.

You can opt out of the use of the LinkedIn Insight Tag at any time by adjusting the advertising settings in your LinkedIn account: https://www.linkedin.com/psettings/advertising.

Google Ads and Google Conversion Tracking

We use Google Ads and Google Conversion Tracking, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an advertising service that allows us to display ads in the Google search results and on Google partner websites. Through Google Conversion Tracking, we can measure the effectiveness of our Google Ads campaigns.

When you click on one of our ads on Google, a cookie is set on your computer, which stores information about your use of our website. Google receives information through this cookie that you clicked on our ad and forwards this information to us. The information generated by the cookie about your use of our website is usually transferred to and stored on a Google server in the USA. For more information on data processing by Google, please refer to Google’s Privacy Policy at https://policies.google.com/privacy.

Subscription, Delivery, and Receipt of Our Newsletter

When you subscribe to our email newsletter, the data you provide will be processed for the creation and delivery of the newsletter, as well as for documenting your subscription to the newsletter, until you revoke your consent. The legal basis for processing is Art. 6(1)(a) of the GDPR. You can revoke your consent at any time by unsubscribing from the newsletter. You will find an unsubscribe link at the end of each newsletter. This also applies to revoking consent declarations that were given to us prior to the application of the GDPR, i.e., before May 25, 2018. Please note that the revocation only applies to the future. Processing that occurred before the revocation is not affected.

For sending our newsletter, we use HubSpot, Inc., Cambridge, Massachusetts, USA. HubSpot processes your data solely on our behalf and in accordance with our instructions. In addition, HubSpot allows us to analyze whether the emails sent have been opened, how many users have received an email, and whether users have unsubscribed from the newsletter after receiving.

As HubSpot is based in the USA, your consent must also include the transfer of data to the third country of the USA in accordance with Art. 49(1)(a) of the GDPR. In this regard, we would like to inform you that the USA is considered an unsafe third country, and it is currently not possible to enter into data protection agreements with providers located there that meet the requirements of the high European data protection standards. There is a risk that your data may be processed by authorities located there for purposes unknown to us. In most cases, you will not be aware of these processing activities, and you will not be able to actively exercise legal protection.

To effectively subscribe to our newsletter, you need to click on the confirmation link in the verification email we send you after you sign up on our website in order to provide proof of your consent. By clicking on the corresponding link, we will store the public IP address of the internet connection from which the link is accessed, along with the date and time of the click, and the associated email address. We process this data to be able to prove that you have confirmed the receipt of our email newsletter. The legal basis for this storage is Art. 6(1)(c) of the GDPR.

We delete your data when you unsubscribe from the newsletter. The data that we need as proof that you agreed to receive the newsletter will be deleted after the statute of limitations for corresponding evidentiary obligations has expired.

HubSpot Chat 

To enable you to contact us directly via chat, we use HubSpot Chat on our website. HubSpot Chat is offered and operated by HubSpot, Inc., located in Cambridge, Massachusetts, USA, and it allows us to communicate with visitors to our website via chat and provide targeted assistance with questions or advice regarding our product deinraum.io. HubSpot Chat uses cookies and other browser technologies to analyze user behavior and recognize users. Furthermore, HubSpot Chat is used to store and transmit data entered in chats using cookies. In this context, HubSpot also receives your IP address.

We only use HubSpot Chat if you give us your consent, and the legal basis is therefore Art. 6(1)(a) of the GDPR. As HubSpot is based in the USA, your consent must also include the transfer of data to the third country of the USA in accordance with Art. 49(1)(a) of the GDPR. In this regard, we would like to inform you that the USA is considered an unsafe third country, and it is currently not possible to enter into data protection agreements with providers located there that meet the requirements of the high European data protection standards. There is a risk that your data may be processed by authorities located there for purposes unknown to us. In most cases, you will not be aware of these processing activities, and you will not be able to actively exercise legal protection.

We store the data processed in connection with the use of HubSpot Chat (the chat contents) for 60 days. The data processed based on your consent will be stored until you revoke your consent. This can be done at any time and without further justification, but it will only be effective for the future. Regarding the storage period of data processed by HubSpot, we refer to HubSpot Chat’s privacy policy:
HubSpot Chat: https://legal.hubspot.com/privacy-policy. 

For more information on HubSpot’s privacy policy, please visit https://legal.hubspot.com/privacy-policy.
For more information on HubSpot’s compliance with EU data protection regulations, please visit https://legal.hubspot.com/data-privacy.
For more information on the cookies used by HubSpot, you can click here & here.

Contact Form

You can get in touch with us through the contact form on our website. This is done for the purpose of requesting a callback, obtaining a quote, or seeking other advice or support. By submitting your data, you consent to us processing this information. This is done in order to process your inquiries, as far as necessary to respond to your contact requests and any requested actions. The processed data may include:

Your name, email address, or phone number, as well as your company and the text of your inquiry. Providing additional data beyond contact information (email or phone) and the inquiry text is voluntary.

The legal basis for processing your data in the context of contacting us is Art. 6(1)(a) of the General Data Protection Regulation (GDPR), your consent.

An exception applies only if the content of your contact directly serves to initiate or fulfill a contractual relationship between you as an individual and us. In such cases, we base the processing of your data on Art. 6(1)(b) of the GDPR.

We store your data in our Customer Relationship System (CRM), which is operated by HubSpot, Inc., located in Cambridge, Massachusetts, USA. As HubSpot is based in the USA, your consent must also include the transfer of data to the third country of the USA according to Art. 49(1)(a) of the GDPR. In this regard, we would like to inform you that the USA is considered an unsafe third country, and it is currently not possible to enter into data protection agreements with providers located there that meet the requirements of the high European data protection standards. There is a risk that your data may be processed by authorities located there for purposes unknown to us. In normal circumstances, you will not be aware of these processing activities, and you will not be able to exercise active legal protection.

If you book an appointment through the website, your data will also be transmitted to HubSpot.

We will delete your data as soon as it is no longer necessary and does not fall under any legal retention obligations, or if you revoke your consent. If a contractual relationship with you or your employer arises from our contact, we will store the data until the end of the contractual relationship with you.

Further information on the processing of data by HubSpot can be found in HubSpot’s privacy policy at
https://legal.hubspot.com/privacy-policy.

Trustpilot Widget

We use the rating system provided by Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark.

Scope of data processing
We may embed the Trustpilot widget on our website to display the current DEIN RAUM rating on Trustpilot to our users. The Trustpilot widget is loaded when the user visits our site. The widget does not use cookies or similar technologies.

Legal basis and purpose of processing
The legal basis for processing data in the context of embedding the widget is Article 6(1)(f) of the GDPR. The widget is intended to show our users the current Trustpilot rating of DEIN RAUM and allow them to access further information about individual reviews.

Right to revoke and options for removal

The user has the right to object under Article 21(1) of the GDPR. DEIN RAUM will no longer process personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims. You can send your objection to us, for example, to the email address info@deinraum.de. For more information on data processing by Trustpilot, as well as information on objection rights and data subject rights, please refer to Trustpilot’s privacy policy: https://legal.trustpilot.com/end-user-privacy-terms.

Your Rights

Right to Information

According to Article 15 of the GDPR, you have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed. If such processing takes place, you have the right to access that personal data and receive further information as specified in Article 15 of the GDPR.

Right to Rectification

According to Article 16 of the GDPR, you have the right to request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to Erasure

You have the right to request the immediate erasure of personal data concerning you. We are obliged to erase personal data without undue delay if the conditions specified in Article 17 of the GDPR are met. For details, please refer to Article 17 of the GDPR.

According to legal requirements, data is retained for a period of 10 years, in particular according to §§ 147(1) AO, 257(1) No. 1 and 4, 4 HGB (books, records, management reports, booking vouchers, commercial books, documents relevant for taxation, etc.), and 6 years according to § 257(1) No. 2 and 3, 4 HGB (commercial letters).

Right to Restriction of Processing

Subject to Article 18 of the GDPR, under certain conditions, you have the right to request the restriction of the processing of your personal data by us.

Right to Data Portability

According to Article 20 of the GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us.