Data protection in the DEIN RAUM application

Server location in Germany 

We guarantee the security of your data. DEIN RAUM operates its servers exclusively with the company Netcup in the Federal Republic of Germany. Under no circumstances will your data leave the country. Furthermore, Netcup is ISO 27001-certified and therefore meets the highest requirements for IT security procedures and information security management systems.  

Anonymization of the data 

With DEIN RAUM, you decide for yourself when personal data should be anonymized or removed from the system. However, booking details such as the start and end time of a booking are retained for capacity utilization analyses. However, these can no longer be traced back to a specific person. This allows you to maintain an overview of the utilization of available resources, optimize your office and protect your employees’ sensitive data at the same time.  

Encryption of data transmission 

The data is encrypted during transmission using the TLS method, which is also used for online banking or online shopping, for example. The security of the encryption can be verified here (https://www.ssllabs.com/ssltest/analyze.html?d=demo.deinraum.io).  

Continuous and transparent security 

We carry out regular internal and external quality controls in order to continuously review DEIN RAUM. In doing so, we identify potential security gaps and develop functions to improve data protection both at infrastructure level and within the application itself. We also regularly publish update information to offer our customers greater transparency.   

Contracts under German law 

DEIN RAUM is a product of PiAL Consult GmbH, which is based in Hamburg, Germany. Contracts are therefore concluded exclusively in accordance with German law.  

Incognito function & employee privacy 

With DEIN RAUM, you decide whether or not bookings of workstations or other objects should be visible to all of your company’s employees. Although we recommend this in the collaborative environment of a company, in special cases it can make sense to let users decide for themselves whether the booked seat is visible to others.  

Why DEIN RAUM is 100% GDPR-compliant

DEIN RAUM complies 100% with the requirements of the GDPR and consistently implements the following guidelines in particular: 

• Continuous improvement of security standards, adaptation of documentation, processes, structures, functionalities and technical and organizational measures.  
• Anonymization and storage of personal and private data for specific purposes only  
• No data exchange with third parties or cross-border data transfers – Regular training for all employees on data protection, data security and privacy  
• Conclusion of data processing agreements pursuant to Art. 28 (3) GDPR for order processing  

Contract on the processing of order data (AVV) 

Our agreement on commissioned data processing (AVV) in accordance with the provisions of the General Data Protection Regulation (GDPR) serves to contractually record the processing of personal data. This contract defines the purpose of the data processing, the type of data, the groups of persons affected, DEIN RAUM’s subcontractors and the rights of the data subjects.

Data storage for a specific purpose 

The stored personal data is used exclusively for the intended purpose.