Data Protection Declaration


General information
The protection of your personal data is very important to us. Therefore, we would like to take this opportunity to inform you about the collection and processing of your personal data when you access this website.


Our data protection practice is in accordance with the legal regulations of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG). The following data protection declaration serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.


Person responsible for data protection
The person responsible within the meaning of Art. 4 No. 7 GDPR is the person who, alone or together with others, decides on the purposes and means of processing personal data. With regard to our website, the controller is:


INPOLIS GmbH
Dunckerstraße 90A
D-10437 Berlin
Tel.: +49 30 405059 0
Mail: office(at)inpolis.de


Represented by the managing directors Kirsten Jurchen and Vivien Gutzeit
Registered office: Berlin
Registry court: Amtsgericht Charlottenburg von Berlin

Registration number: HRB 111036B
Tax number: 37/359/30141
VAT registration number: DE814924343


Name and address of the data protection officer
The data protection officer of the data controller is:
Laureen Schaper
INPOLIS GmbH
Dunckerstraße 90a

D-10437 Berlin
Tel.: +49 30 405059 0
E-Mail: datenschutz(at)inpolis.de


Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.


Personal data
When you visit our website, we do not collect any personal data (e.g. names, addresses, telephone numbers or e-mail addresses) unless you voluntarily provide us with this data (e.g. when contacting us by e-mail), have consented to its collection or the relevant legal provisions regarding the protection of your data permit its collection.


We may collect information through this site that, on its own, cannot be used to directly identify you. In certain cases, however, especially in combination with other data, this information may constitute “personal data” within the meaning of data protection law. We also collect information through this site that does not directly or indirectly identify you, such as aggregated information about all users of our site.


Provision of the website and creation of log files


Every time you visit our website, our server automatically collects data and information from the device accessing the site (e.g. computer, cell phone, tablet, etc.). The following information is collected:


• Information about your browser type and the version used,
• The operating system of the device you are using,
• Host name of the accessing computer,

• The IP address of the device you are using,
• Date and time of access,
• Websites and resources (e.g. images, documents or media files) accessed on our website,
• Websites from which you accessed our website (referrer tracking),
• Message indicating whether the retrieval was successful.
• Amount of data transferred


This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors are not identified.


Legal basis for the processing of personal data
Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in ensuring that the purpose described below is achieved.


Purpose of data processing

The temporary, automated storage of data is necessary to enable the correct delivery of this website. The storage and processing of personal data is also carried out to maintain the compatibility of this website for as many visitors as possible, as well as to combat misuse and to rectify faults. To do this, it is necessary to log the technical data of the retrieving computer in order to be able to react as quickly as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website.


Recipient
Technical service providers involved in the operation and maintenance of our website as processors may act as recipients of the data.


Duration of storage

The aforementioned technical data will be deleted as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but no later than three months after accessing our website.


Right to object and right to erasure
You can object to the processing at any time in accordance with Art. 21 GDPR and request the erasure of data in accordance with Art. 17 GDPR. You can find out what rights you have and how to exercise them in the “Your Rights” section of this privacy policy.
Contact forms
If you contact us using the contact forms on our website, we will receive the personal data you have entered (e.g. your name, telephone number, email address), as well as other data that you provide to us in the contact form.


Legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR (consent through clear affirmative act or behavior)


Purpose of data processing
The data collected via our contact form will be used by us exclusively for processing your request to us.


Duration of storage

We will delete the data you have transmitted to us as soon as it is no longer required for answering your enquiry or providing the contractually agreed services, provided that there are no other reasons for not deleting this data (e.g. statutory retention periods or the enforcement of claims).


Right to object and right to erasure
You can revoke your consent at any time in accordance with Art. 7 (3) GDPR. However, this does not affect the processing carried out up to the time of revocation. With regard to further rights, we refer you to the “Your Rights” section of this data protection declaration.


Necessity of providing personal data

If you wish to contact us by email, you must complete the mandatory fields of the contact form. Completing the contact form is neither necessary to enter into a contract with us nor legally required. They serve exclusively to answer your request.
Integration of external web services
The following external web services are integrated on our website:
Google Maps

We use Google Maps on our website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This enables us to display interactive maps directly on the website and offers you convenient access to a map function. Further information about the processing of data by Google can be found in Google’s privacy policy: https://policies.google.com/privacy. You can also use the same link to change your personal data protection settings in the data protection center. You can find detailed instructions for managing your data when using Google products at: https://www.dataliberation.org.

When you visit our website, Google receives the information that you have accessed the corresponding subpage of our website. This notification is sent regardless of whether you have a Google user account and whether you are logged into your account. If you are logged into your Google account, your data will be linked directly to your account.

If you do not want your data to be linked to your Google profile, you must log out of Google before activating the button. Google stores data in the form of user profiles and uses this data for the purposes of advertising, market research and/or demand-oriented website design. Such evaluations are carried out in particular (even for users who are not logged in) for the purpose of designing advertising to meet demand and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.
Use of cookies

We use cookies on our website to enable certain functions of the website and to integrate external web services. These so-called “cookies” are small text files that your browser can store on your access device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also referred to as “setting a cookie”. Cookies can be set by the website itself or by external web services. The cookies are set by our website or the external web services in order to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose stated with your consent.


Legal basis for the processing of personal data

Insofar as cookies are processed on the basis of consent in accordance with Art. 6 (1) point a GDPR, this consent also counts as consent in the sense of Section 25 (1) TTDSG for the setting of cookies on the user’s device. Insofar as another legal basis is mentioned in the GDPR (e.g. for the fulfillment of a contract or for the fulfillment of legal obligations), the storage or setting is carried out on the basis of an exception in accordance with Section 25 (2) TTDSG. This applies if “the sole purpose of the storage of information in the end device of the end user or the sole purpose of access to information already stored in the end device of the end user is to carry out the transmission of a message via a public telecommunications network” or “if the storage of information in the end device of the end user or access to information already stored in the end device of the end user is absolutely necessary for a telemedia service provider to provide a telemedia service explicitly requested by the user”.


Purpose of data processing

Our website or external web services set cookies in order to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose stated with your consent. Cookie technology also enables us to recognize individual visitors by means of pseudonyms, e.g. an individual or random ID, so that we can offer more personalized services.


Duration of storage

Our cookies are stored in your browser until you delete them or, if they are session cookies, until the session has expired. Details are listed in the following table.


Objection and deletion option

You can adjust your browser settings as you wish to generally prevent cookies from being set. You can then decide whether to accept cookies on a case-by-case basis or to accept them as a matter of principle. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to store recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until revocation.
Communication security

Your personal data is protected by technical and organizational measures during collection, storage and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information with a high confidentiality requirement.

Transfer to recipients within the EEA


Data transfer to other controllers
Your personal data will only be passed on to other controllers if this is necessary for the performance of a contract, if we or the third party have a legitimate interest in the transfer or if you have given your consent. If data is transferred to third parties based on a legitimate interest, this is explained in this data protection notice. In addition, data may be transferred to other controllers if we are obliged to do so by law or enforceable administrative or judicial orders.


Service providers

We have contracted external service providers for tasks such as programming and data hosting. We have carefully selected these service providers and regularly review them, particularly with regard to the careful handling and protection of the data stored by them. All service providers are bound to secrecy and compliance with legal provisions.
Transfer to recipients outside the EEA

We may also transfer personal data to recipients located outside the EEA in so-called third countries. In these cases, we either ensure that the data recipient provides an adequate level of data protection (e.g. based on an adequacy decision by the European Commission for the respective country or based on the agreement of so-called EU model clauses with the recipient) or that you have consented to the transfer.

You have the right to receive an overview of the third-country recipients and a copy of the specific provisions agreed to ensure an adequate level of data protection.


Your rights

On the basis of the applicable statutory provisions, you have the right to request information about what personal data we have stored about you, to request the correction of incorrect personal data or the deletion of personal data, provided that we are not obliged to store this data, to request information about who we may pass on your personal data to and to revoke the consent you have given to the handling of your personal data at any time. Specifically, you have the following rights:


Right of access
You have the right to request confirmation as to whether we process your personal data. If this is the case, you have the right to request information about the data specified in Art. 15 (1) GDPR, provided that the rights and freedoms of other persons are not affected (see Art. 15 (4) GDPR). We will also be happy to provide you with a copy of the data.


Right to rectification
In accordance with Art. 16 of the GDPR, you have the right to have any of your personal data that we have stored incorrectly (such as address, name, etc.) corrected at any time. You can also request that the data we have stored be completed at any time. Any such adjustment will be made without undue delay.


Right to erasure

Pursuant to Art. 17 (1) GDPR, you have the right to request that we delete the personal data collected about you if
the data is no longer required,
the legal basis for the processing has ceased to exist without replacement due to the revocation of your consent,
you have objected to the processing and there are no legitimate reasons for the processing,

your data is being processed unlawfully,
a legal obligation requires it or a survey in accordance with Art. 8 (1) GDPR has taken place.
The right does not exist in accordance with Art. 17 (3) GDPR if
the processing is necessary to exercise the right to freedom of expression and information,
your data has been collected on the basis of a legal obligation,
the processing is necessary for reasons of public interest,

the data is required for the assertion, exercise or defense of legal claims.


Right to restriction of processing
Pursuant to Art. 18 (1) GDPR, you have the right in individual cases to demand the restriction of the processing of your personal data.
This is the case if
the accuracy of the personal data is contested by you,

the processing is unlawful and you do not consent to deletion,
the data is no longer needed for the purpose of processing, but the data collected is used to assert, exercise or defend legal claims,
an objection to the processing has been lodged in accordance with Art. 21 (1) GDPR and it is still unclear which interests prevail.


Right of revocation

If you have given us your express consent to process your personal data (Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can revoke this at any time. Please note that the legality of the processing carried out on the basis of the consent until the revocation is not affected by this.


Right to object

Pursuant to Art. 21 of the GDPR, you have the right to object at any time to the processing of personal data concerning you, which has been collected on the basis of Art. 6 (1) (f) (in the context of a legitimate interest). You only have this right if there are special circumstances that speak against the storage and processing.


Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format. You have the option to have the data sent to you or to a controller designated by you.


Right to lodge a complaint with a supervisory authority in accordance with Art. 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our site, you can of course seek a judicial clarification of the issue at any time. In addition, every other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. You have the right to lodge a complaint in accordance with Article 77 of the GDPR in the EU Member State of your habitual residence, place of work and/or place of the alleged infringement, i.e. you can choose the supervisory authority to which you are addressing your complaint from the above-mentioned places. The supervisory authority to which the complaint has been submitted will then inform you of the status and the results of your submission, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.


How do you exercise your rights?
You can exercise your rights at any time by contacting the above contact details.

The revocation of your consent or the deletion or blocking of personal data may mean that we are no longer able to provide certain services and functions. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
If you have any questions or complaints, you can also contact the Berlin data protection authority (0049 030 13889-0).

schutzerklärung