DEEN

Privacy policy

Privacy policy last revised in: October 2021

Introduction

This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter abbreviated to “data”) on our online offer and the associated offers, contractual services, websites, mobile applications, functions and content as well as external online presences (hereinafter jointly referred to as “online offer”):

  • In the first section of the privacy policy, you will find information on the data controller and an overview of our processing operations.
  • In the second section you will find information on your rights, the relevant legal norms and general information about our processing of data.
  • The third section contains information on the individual processing operations. This section is divided into other areas, such as our core services, reach measurement and marketing.
  • The fourth section contains explanations and descriptions of the terms used in the context of the privacy policy. That is, if the terms used (such as “reference to a person” or “cookie”) are unknown to you, please look them up in the fourth section. All the terms used (e.g. “data controller” or “user”) should be understood to be gender-neutral.
  • In the last section you will find some final information.

Table of contents

Section I - Controller and overview of data processing

Data Controller
Contact details for data Protection Officer
Consent
Possibility of revocation of consent
Types of data processed
Processing of special categories of data (Art. 9 (1) GDPR)
Categories of data subject
Purpose of the processing
Automated decision-making in individual cases (Art. 22 GDPR)

Section II - Rights of data subjects, legal bases, and general information

Rights of data subjects
Right to revoke consent
Right to object
Cookies and the right to object in direct marketing
Exclusively automated data processing
Deletion of data and archiving obligations
Changes and updates to the privacy policy
Relevant legal bases
Security of data processing
Disclosure and transmission of data
Transmission to third countries

Section III - Processing operations

Core area of data processing
Comparison and brokerage services
Registration area (customer area)
Telephone qualification
Aroundhome phone number control
Responding to inquiries
Business analysis and market research
Data protection information for applicants
Application process
External online presences
Online presences in social media
Web server and security
Hosting
Server logs
Content Delivery Network (CDN)
Embedded content and functions
Google services and content
Facebook functions and content
Instagram functions and content
Pinterest functions and content
Twitter functions and content
Xing functions and content
LinkedIn functions and content
Marketing
Sending information via personalized newsletters
Communication via Messenger
Chatbots
Communication via mail, e-mail, fax, or telephone
Optimization and security
Mouseflow
Visual website optimizer
Reach measurement, online marketing, and technology partners
AdRoll
AdSpirit
Conversant
Criteo
Facebook pixels
Google Tag Manager
Google Analytics
Google AdWords
Google Double Click
Google Maps API
Boris-D
Kameleoon
Microsoft Bing Ads
Plista
PriceHubble
Sovendus
The Adex
United Internet Media Pixel
VG Wort / scalable central measuring method
Webtrekk reach measurement

Section IV – Definitions of terms

Section V – Further information

Section I – Controller and overview of data processing

DATA CONTROLLER

be Around GmbH
Potsdamer Platz 11
10785 Berlin
Germany
Directors: Moritz Kothe, Thomas Bruns
Tel: 0800-29 29 29 4
Fax: 030-29 04 55 35
Legal notice: https://www.aroundhome.de/impressum/
The data controller is also referred to below as “we” or “us”.

CONTACT DETAILS FOR DATA PROTECTION OFFICER:

DESCRIPTION OF OUR CORE SERVICES:

be Around offers comparison services on the Internet. Interested parties can make comparison requests for certain products and services. The comparison requests are then forwarded to companies, intermediaries or other providers of these products or services (collectively referred to as “providers”), who in turn can submit offers to the interested parties.

By submitting the comparison request (by clicking on the “Compare offers” button), the interested parties agree to the processing by us of their name and their contact and inquiry details for the purpose of processing their request, preparing to draft an offer and transmitting their request to selected providers.

POSSIBILITY OF REVOCATION OF CONSENT

Consent can be revoked at any time in any form, e.g. by e-mail to datenschutz@aroundhome.de or by mail to be Around GmbH, Potsdamer Platz 11, 10785 Berlin, Germany, with effect for the future.

TYPES OF DATA PROCESSED

  • Inventory data (e.g., names, addresses).
  • Contact data (e.g., e-mail addresses, telephone numbers).
  • Content data (e.g., information on comparison requests).
  • Contract data (e.g., content of comparison requests, Providers brokered).
  • Usage data (e.g., websites visited, interest in content, access times).
  • Meta/communication data (e.g., device information, IP addresses).
  • Applicant data (e.g., names, contact details, qualifications, application documents).

PROCESSING OF SPECIAL CATEGORIES OF DATA (ART. 9 (1) GDPR)

In principle, no special categories of data are processed, except health data if these are supplied by the users for processing, e.g. with information on desired comparison offers (e.g. information on mobility aids).

CATEGORIES OF DATA SUBJECT:

  • Interested parties.
  • Vendors, business partners.
  • Visitors to and users of the online offer.
  • Applicants.

In the following, we also refer to the data subjects as “users”.

PURPOSE OF THE PROCESSING:

  • Provision and execution of comparison and brokerage services.
  • Provision of the online offer, its content and functions.
  • Provision of contractual services, service, and customer care.
  • Answering contact requests and communicating with users.
  • Marketing, advertising, and market research.
  • Security measures.

AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES (ART. 22 GDPR):

We do not make automated decisions in individual cases.

Section II - Rights of data subjects, legal bases, and general information

Rights of data subjects

You have the right to request confirmation as to whether the data in question are being processed and information on these data and further information and to request a copy of the data in accordance with Art. 15 GDPR.

In accordance with Art. 16 GDPR, you have the right to request the completion of the data concerning your person or correction of any incorrect data concerning your person.

In accordance with Art. 17 GDPR, you have the right to request the immediate deletion of the relevant data or, alternatively, in accordance with Art. 18 GDPR, the restriction of the processing of the data.

You have the right to request that the data concerning your person that you have provided to us be sent to you in accordance with Art. 20 GDPR and to request their transmission to other data controllers.

According to Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.

Right to revoke consent

You have the right to revoke your consent in accordance with Art. 7 (3) GDPR with effect for the future.

Right to object

You can object at any time to the future processing of the data concerning your person in accordance with Art. 21 GDPR. The objection can be raised in particular against data processing for direct advertising purposes.

Cookies and the right to object in direct marketing

We use temporary and permanent cookies, i.e. small files that are stored on user devices (for explanation of the term and the function of cookies, see the “Definitions of terms” section of this privacy policy). In part, cookies are used for security purposes or are necessary for the operation of our online offer (e.g., for the presentation of the website) or to save the user’s decision when confirming the cookie banner. In addition, we or our technology partners use cookies for reach measurement and marketing purposes, about which users are informed in the privacy policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser’s system settings. Stored cookies can be deleted in the browser’s system settings. The exclusion of cookies can lead to functional restrictions of this online offer.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be blocked by switching them off in the browser settings. Please note that it may then not be possible to use all the functions of this online offer.

Exclusively automated data processing

In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – that has a legal effect on you or significantly affects you in a similar way.

We hereby inform you that we do not carry out exclusively automated data processing.

Deletion of data and archiving obligations

The data processed by us will be deleted or their processing restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any legal storage obligations. If the data are not deleted because they are necessary for other, legally permissible purposes, their processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.

According to the legal requirements, storage takes place in particular for 6 years in accordance with Section 257 (1) of the German Commercial Code (HGB) (trading books, inventories, opening balance sheets, annual financial statements, trading letters, accounting documents, etc.) and for 10 years in accordance with Section 147 (1) of the German Fiscal Code (AO) (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.)

Changes and updates to the privacy policy

We would ask you to keep regularly abreast of the content of our privacy policy. We will adapt the privacy policy as soon as the changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

Relevant legal bases

In accordance with Art. 13 GDPR, we provide you with information in this privacy policy on the legal basis for our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 (1) (a) and Art. 7 GDPR, the legal basis for processing for the provision of our services and the implementation of contractual measures as well as answering inquiries is Art. 6 (1) (b) GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) (c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Art. 6 (1) (f) GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR is the legal basis thereof.

The principles governing commercial communications outside business relationships, in particular via mail, telephone, fax and e-mail, are contained in Section 7 of the German Act on Unfair Competition (UWG).

Security of data processing

We take appropriate technical and organizational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the various degrees of probability of occurrence and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk; these measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and digital access to the data, input, disclosure, the securing of availability and the separation of the data. Furthermore, we have established procedures that guarantee the exercise of data subject rights, the deletion of data and reaction to the endangerment of data. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and privacy-friendly presets (Art. 25 GDPR).

The security measures include in particular the encrypted transmission of data between your browser and our server.

Employees are obliged, taught and instructed to maintain confidentiality with regard to data protection and made aware of possible liability implications.

Disclosure and transmission of data

If we disclose data to other persons and companies (contract processors or third parties) in the context of our processing, transfer data to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if the data are transmitted to third parties, such as payment service providers, in accordance with Art. 6 (1) (b) GDPR for the fulfillment of the contract), if you have consented to said disclosure, if a legal obligation provides for this or if the disclosure is based on our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties with the processing of data on the basis of a “data processing contract”, this takes place on the basis of Art. 28 GDPR.

If we disclose, transmit or otherwise grant access to data to other companies in our group of companies, this takes place based on our legitimate interest, in particular for administrative purposes, and, in addition, on the basis of a data processing contract.

Transmission to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this takes place in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it serves to fulfill our (pre)contractual obligations on the basis of your consent, a legal obligation, or our legitimate interests. Subject to legal or contractual permissions, we will process or arrange for the data to be processed in a third country only if the special requirements of Art. 44 et seq. GDPR are met. This means that the processing will take place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to that of the EU or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).

Section III - Processing operations

In the following presentation we give you an overview of the processing carried out by us, which we have subdivided into further areas of activity. Please note that the areas of activity are for guidance only, and that the processing activities may overlap (for example, the same data may be processed in several procedures).

For reasons of clarity and comprehensibility, you will find the frequently repeated terms in Section IV of this privacy policy.

Core area of data processing

In this area we give you information about our core services and tasks, such as answering inquiries and providing our contractual services as well as the associated ancillary tasks.

Comparison and brokerage services

We process the information provided by the interested parties in the context of the comparison request for the purpose of establishing, implementing and, if necessary, terminating a contract for the brokering of up to three offers from providers of the products or services you have requested. The brokerage of offers is free and non-binding.

We use the contact details of interested parties to specify your request with them by telephone and to suggest suitable providers to them based on the specified request. In addition, we will ask interested parties at a later date whether they have already received three offers from the selected providers.

By submitting the comparison request (by clicking on the “Compare offers” button), the interested parties agree to the processing by us of their name and their contact and inquiry details for the purpose of processing their request, preparing to draft an offer and transmitting their request to selected providers.

Depending on availability, we provide our interested parties (or customers) with a free appointment service (dates) in the relevant product area, which enables them to effectively contact the providers (or partners). We make specific appointments between interested parties and providers. The basis for this is a comparison of the date requests (entries) of the interested party with the date availabilities of the selected providers which is necessary for the purpose of the execution of the contract and, in the case of appointments which do not take place, feedback in this regard, including a statement of the cause (e.g. : cancellation and reason for cancellation) by the provider.

Consent can be revoked at any time in any form, e.g. by e-mail to datenschutz@aroundhome.de or by mail to be Around GmbH, Potsdamer Platz 11, 10785 Berlin, Germany, with effect for the future. be Around GmbH, Potsdamer Platz 11, 10785 Berlin, mit Wirkung für die Zukunft widerrufen werden.

We log the entries in the comparison form to verify the existence of the contractual relationship and the consent of the interested parties in accordance with the statutory accountability obligations (Art. 5 (2) GDPR).

  • Processed data: Inventory data, communication data, contract data, content data, usage / metadata; in the context of the logging, the time of retrieval of the comparison request is stored, as are the time the confirmation link is clicked on and the IP address.
  • Special categories of personal data: Health data, insofar as these are necessary for the brokerage activity.
  • Data subjects: Interested parties, online users or website visitors.
  • Purpose of the processing: Provision of contractual services, customer service, logging.
  • Processing bases: Art. 6 (1) (b) (Contract for the brokerage of settlement requests) and (c) (Legally required logging/archiving) GDPR.
  • Necessity / interest in processing: The data are required as the basis for and to fulfill the contractual services as well as to fulfill legal obligations to provide evidence.
  • External disclosure and purpose: Providers, for the purpose of submitting offers to interested parties within the framework of the comparison.
  • Processing in third countries: No.
  • Deletion of data: The data will be stored in accordance with the legal requirements and contractual agreements (Section 35 of the German data Protection Act (BDSG) in conjunction with Art. 18 GDPR). Initially, the data are only stored for as long as is necessary for the fulfilment of the contractual purposes. In particular, the data are required to process customary and regularly occurring service requests or information on the status of the contract in the course of business activities, for the purposes of which the data are stored in the active system for up to six months. In addition, the data will be stored within the regular statutory limitation period (Sections 195,199 BGB) within a period of three years from the end of the contractual relationship, provided that these data might become necessary on the basis of previous business experience and business processes customary in the industry to process any warranty claims and claims for damages or comparable complaints and queries and to provide necessary evidence, in particular also with regard to the permissibility under data protection law of the processing of the data. In this case, the processing of the data will be restricted solely to the aforementioned purposes in accordance with Section 35 BDSG in conjunction with Art. 18 GDPR. In addition, the data will be stored in accordance with the legal archiving requirements within the meaning of Art. 6 (1) (c) GDPR, i.e. for 10 years in accordance with Sections 147 (1) AO, 257 (1) nos. (1) and (4), Section 4 HGB (books, records, management reports, accounting documents, trading books, documents relevant for taxation, etc.) and 6 years in accordance with Section 257 (1) nos. (2) and (3), Section 4 HGB (commercial letters). Even in the case of legally prescribed archiving, the processing will be restricted to this purpose alone. The necessity of storing the data is implemented in ongoing processes and regularly reviewed.

Registration area (customer area)

We offer a private area for users which requires verified registration and allows users to manage their inquiries and data within the framework of the available technical functions.

  • Processed data: Inventory data, communication data, contract data, content data, usage data, metadata
  • Data subjects: Interested parties, existing customers, third parties.
  • Purpose of the processing: Provision of contractual services, customer service, provision of a closed area.
  • Processing basis: Art. 6 (1) (a), Art. 6 (1) (b) GDPR.
  • Necessity / interest in the processing: The data are required as the basis for and to fulfill the contractual services.
  • External disclosure and purpose: No.
  • Processing in third countries: No.
  • Deletion of data: We store the data until the user objects to the use of their data within the customer area; in the case of legal archiving obligations, the data will be deleted once those obligations have expired.

Telephone qualification

We process the information provided by the interested parties in the context of the comparison request for the purpose of establishing and implementing a contract for the brokering of offers from providers of the products or services you have requested. It may be necessary for us to make telephone contact in order to discuss product- and service-specific functions with the interested party or customer.

  • Processed data: Communication/contact data, metadata.
  • Data subjects: Interested parties, existing customers.
  • Purpose of the processing: Provision of contractual services, customer service.
  • Processing basis: Art. 6 (1) (b) GDPR.
  • Necessity / interest in the processing: The data are required as the basis for and to fulfill the contractual services as well as to fulfill.
  • External disclosure and purpose: Twilio Ireland Limited, 25-28 North Wall Quay Dublin 1, Ireland; provision and execution of the contractual service.
  • Special protective measures: Contract processing agreement.
  • Processing in third countries: No.
  • Deletion of data: The storage of the data of interested parties corresponds to the information on the deletion of the data within the framework of the above-mentioned “Comparison and brokerage services” processing activity; in all other cases, we will delete the contact data if their storage is no longer required, which is usually the case 6 months after the last contact; in the case of legal archiving obligations, the deletion will take place after those obligations have expired.

Aroundhome phone number control

We offer our customers and our commercial partners (hereinafter referred to as “Communication Participants”) the opportunity to communicate via telephone numbers provided specifically for these purposes instead of via their own telephone lines (hereinafter referred to as “Aroundhome Phone Number Control”). The use of the Aroundhome Phone Number Control is based on the following description of the technical processes and regulations.

As part of the Aroundhome Phone Number Control system, explicit phone numbers are assigned to the Communication Participants and automatically changed after six months. The telephone numbers are not published and are used solely for communication between the Communication Participants. The contents of the communication are transmitted in encrypted form and are not accessible to us or the operators of the technical infrastructure used.

Insofar as we process information relating to the communication process itself (i.e. not its content) (this includes the inventory data, such as the name of the communication partners, the assigned telephone number as well as data relating to the communication process, which include the time and the “engaged, answered, or unanswered” status), this allows us to provide our services to the communication partners. This includes the notification of callback requests, the availability of the communication partners and the sending of reminders to them via short messages (SMS). The processing of the data of the participants regarding the communication process takes place in compliance with the provisions of Sections 88 and 95 of the German Telecommunications Act (TKG). This processing is part of the be Around telephone service, is solely used for the provision thereof, and is not used for any other purposes.

The Communication Participants are asked for consent to the processing of their data before they can use the Aroundhome Phone Number Control. Consent is required for the provision of the Aroundhome Phone Number Control. The use of the Aroundhome Phone Number Control is voluntary for the Communication Participants, the use of the services of be Around GmbH and the necessary communication between the Communication Participants is also possible on other channels or ways (e.g. e-mail or public telephone networks).

The communication partners can revoke their consent at any time and, at the same time, terminate the agreement on the use of the Aroundhome Phone Number Control. We can terminate the provision of the Aroundhome Phone Number Control with a notice period of 2 weeks; the right of extraordinary termination is reserved for both contracting parties.

We provide the communication partners separately with the essential information on the Aroundhome Phone Number Control: https://www.twilio.com/docs/proxy. The technical infrastructure of the Aroundhome Phone Number Control is provided by the provider Twillio [Twilio Ireland Limited, 25-28 North Wall Quay Dublin 1, Ireland, https://www.twilio.com/legal/privacy] in compliance with the technically necessary security measures.

Responding to inquiries

We process the information in the inquiries that we receive via our contact form and in other ways, e.g. via e-mail, in order to respond to the inquiries. For these purposes, the inquiries can be processed in our customer relationship management system (CRM system) or in similar procedures that allow us to manage inquiries.

  • Processed data: Inventory data, communication data, contract data, content data, usage data, metadata
  • Data subjects: Interested parties, online users or website visitors, business partners, third parties.
  • Purpose of the processing: Responding to inquiries.
  • Processing basis: Art. 6 (1) (b) GDPR.
  • Necessity / interest in the processing: Necessary to respond to the inquiries.
  • External disclosure and purpose: No.
  • Processing in third countries: No.
  • Deletion of data: The storage of the data of interested parties corresponds to the information on the deletion of the data within the framework of the above-mentioned “Comparison and brokerage services” processing activity; in all other cases, we will delete the contact data if their storage is no longer required, which is usually the case 6 months after the last contact; in the case of legal archiving obligations, the deletion will take place after those obligations have expired.

Business analysis and market research

So that we can operate our business economically and recognize market trends, interested parties’ and users’ wishes, we analyze the data available to us on business transactions, contracts, inquiries, etc.

For this purpose, we combine the personal data of interested parties from registrations and comparison requests with customer usage data.

  • Processed data: Inventory data, communication data, contract data, content data, usage data, metadata.
  • Processing basis: Art. 6 (1) (f) GDPR.
  • Data subjects: Customers, interested parties, business partners, visitors and users of the online offer.
  • Purpose of the processing: Business analysis, marketing, advertising, market research.
  • Type, scope, mode of operation of the processing: Profiling, first-party cookies.
  • Necessity / interest in processing: Increase user-friendliness, optimization of the offer, business efficiency.
  • External disclosure and purpose: The analyses are used by us alone and are not disclosed externally unless they are anonymous analyses with summarized values.
  • Processing in third countries: No.
  • Deletion of data: The storage of the data of interested parties corresponds to the information on the deletion of the data within the framework of the above-mentioned “Comparison and brokerage services” processing activity; in all other cases, the macroeconomic analyses and general identification of trends are, where possible, generated anonymously.

Data protection information for applicants

This section informs applicants about the processing of their data in the context of the application process

Application process

Applicants can submit their applications to us via an online form on our website. The data are transmitted to us in encrypted form in accordance with the state of the art.

These transmitted data are stored in a database that is controlled by our company and managed by a third-party company called Personio GmbH (https://www.personio.de/). We have concluded an appropriate data protection agreement with Personio GmbH (Rundfunkplatz 4, 80335 Munich, Germany), which offers personnel management and applicant management software and stores data exclusively on ISO-certified servers in Germany, within the meaning of the relevant laws.

Alternatively, applicants can send us their applications via e-mail. However, please note that e-mails are generally not sent in encrypted form and applicants must themselves ensure that their e-mails are encrypted. We cannot therefore assume any responsibility for the transmission of the application from the sender to the point of receipt thereof on our server and would therefore recommend the use of the online form.

Instead of applying via the online form and e-mail, applicants continue to have the option of sending us the application by mail. As part of the application process, your data will be used by the human resources department as well as other authorized persons, in particular by the managers involved in the application process, at be Around to verify your suitability for the advertised position. In addition, consent can be granted to your inclusion in our talent pool for the purpose of the later filling of vacancies. As part of our application process, we also use data from public directories and career networks (e.g. Xing, LinkedIn).

  • Processed data: Inventory data, contact data, content data (content of application folder, correspondence, internal notes).
  • Special categories of personal data: Yes, to the extent required for the application procedure or submitted by applicants (e.g. health data).
  • Processing bases: Art. 6 (1) (b) GDPR, Section 26 BDSG, Art. 28 (3) (1) GDPR.
  • Data subjects: Applicants
    Purpose of the processing: Execution of the application procedure, selection of applicants.
  • Special protective measures: Restriction of access to application documents to positions that are involved in the application process; encrypted transmission option.
  • Necessity / interest in processing: Prerequisite for the selection of applicants; the use of our recruiting tool is based on our legitimate interests and those of the applicants in the implementation of a fast and effective application procedure.
  • Processing in third countries: no.
  • Deletion of data: The data provided by the applicants may be further processed by us in the event of a successful application for the purposes of the employment relationship; the data of the applicants will be deleted if an application is withdrawn, which applicants are entitled to do at any time. Deletion takes place, subject to a justified revocation on the part of the applicants, after the expiry of a period of six months, so that we can answer any follow-up questions to the application and meet our obligations to provide evidence under the German General Equal Treatment Act (AGG). You can revoke your consent at any time and in any form. To do so, write to jobs@aroundhome.de.

External online presences

In this section you will find information about our data processing in the context of the operation of external online presences, e.g. in social media.

ONLINE PRESENCES IN SOCIAL MEDIA

We maintain online presences within social networks and on platforms so that we can communicate with customers, interested parties and users who are active there and inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of the respective operators apply. Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

The links / buttons to social networks and platforms (hereinafter referred to as “Social Media”) used within our online offer only establish contact between social networks and users when those users click on the links / buttons and the respective networks or their websites are called up. This function corresponds to the mode of operation of a regular online link. We would point out that user data may be processed outside the European Union. This can result in risks to the users, because, for example, the enforcement of their rights might become more difficult.

Furthermore, the data of the users are usually processed for market research and advertising purposes. For example, usage profiles can be created from the user behavior and the resulting user interests. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that are presumed to correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers in which user behavior and interests are stored. Furthermore, data can also be stored in the usage profiles independently of the devices used (in particular if the users are members of the respective platforms and are logged in to them).

The processing of users’ personal data is based on our legitimate interests in effectively informing users and communicating with users in accordance with Art. 6 (1) (f) GDPR. If the users are asked by the respective providers for consent to the data processing (i.e. to declare their consent, e.g. by ticking a checkbox or confirming by touching a button), the legal basis for the processing is Art. 6 (1) (a) and Art. 7 GDPR.

For a detailed description of the data processing by those providers and their objection options (opt-out), we refer to the following linked information of the providers.

In the case of requests for information and the assertion of user rights, we would likewise point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, you can then contact us.

Social networks/platforms that we use:

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.
  • Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) - Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
  • Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.
  • Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland) - Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.
  • Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) - Privacy Policy/ Opt-Out: https://about.pinterest.com/de/privacy-policy.
  • LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Policy https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
  • Xing (XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany) - Privacy Policy/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
  • Necessity / interest in processing: Expectations of the users who are active on the platforms, business interests.

 

Overview of the processing:

  • Processed data: Inventory data, communication data, content data, usage data, metadata.
  • Special categories of personal data: In principle, no, except where stated by users.
    Processing basis: Art. 6 (1) (f) GDPR.
  • Data subjects: Users of the Social Media presences (these may include interested parties and business partners).
  • Purpose of the processing: Information and communication.
  • Type, scope, mode of operation of the processing: By operators of the respective platforms, as a rule: Permanent cookies, tracking, targeting, remarketing, content and behavioral advertising.
  • Necessity / interest in processing: Expectations of the users who are active on the platforms, business interests.
  • External disclosure and purpose: To the social networks / platforms.
  • Processing in third countries: No.
  • Deletion of data: The deletion rules of the respective platforms apply.

Web server and security

HOSTING

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage and database services, security services, technical maintenance services.

  • Processed data: Inventory data, contact data, content data, contract data, usage data, meta/communication data.
  • Special categories of personal data: no.
  • Processing basis: Art. 6 (1) (f) GDPR.
  • Data subjects: Customers, interested parties, visitors to the online offer.
  • Special protective measures: Contract processing agreement.
  • Processing in third countries: no.
  • External disclosure and purpose: Name, address, web host.
  • Necessity / interest in processing: Security, business interests.
  • Deletion of data: The storage of the data of interested parties corresponds to the information on the deletion of the data within the framework of the above-mentioned “Comparison and brokerage services” processing activity.

SERVER LOGS

The server on which this online offer is hosted collects log files in which user data are stored each time the online offer is accessed. The data are used, on the one hand, for statistical analysis to maintain and optimize server operation and, on the other, for security purposes, e.g. to detect potential unauthorized access attempts.

  • Processed data: Usage data and metadata (name of the retrieved website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider).
  • Special categories of personal data: no.
  • Processing basis: Art. 6 (1) (f) GDPR.
  • Data subjects: Customers, interested parties, visitors to the online offer.
  • Purpose of the processing: Optimization of server operation and security monitoring.
  • Necessity / interest in processing: Security, business interests.
  • Processing in third countries: no.
  • Deletion of data: After 7 days from collection.

CONTENT DELIVERY NETWORK (CDN)

A content delivery network is a service with the help of which contents of our online offer, in particular large media files, such as graphics or scripts, are delivered faster with the aid of regionally distributed servers that are connected with one another online.

  • Processed data: The data flow between the web server and the user’s browser, IP address.
  • Special categories of personal data: no.
    Processing bases: Art. 6 (1) (f) GDPR, Art. 28 (3) (1) GDPR.
  • Data subjects: Customers, interested parties, business partners, employees and other staffers, website visitors.
  • Special protective measures: Contract processing agreement.
  • Necessity / interest in processing: User-friendliness, business interests.
  • External disclosure and purpose: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States.
  • Processing in third countries: USA.
  • Deletion of data: Only short-term temporary storage within the scope of delivery.

Embedded content and functions

In this section, we inform you which content, software or functions (“content” for short) of other providers we embed as part of our online offer on the basis of Art. 6 (1) (f) GDPR . The embedding takes place to make our online offer more interesting for our users or for legal reasons, e.g. to allow us to present videos or Social Media posts at all within our online offer. The embedding can also be used to improve the speed or security of the online offer, e.g. if software elements or fonts are obtained from other sources. In all cases, the processed data include the usage data and metadata of the users and also the IP address that is necessarily transmitted to the provider so that the content may be embedded; the data subjects include the visitors to our online offer. The categories of data subjects include the users of our online offer, customers and interested parties. Further explanations can be found in the definitions of terms, in particular on the modes of operation and protective measures, at the end of this privacy policy. The deletion of the data is determined by the data protection conditions of the providers of the embedded content.

GOOGLE SERVICES AND CONTENT

We use the following services and content from Google: YouTube videos; Google Maps; Google Fonts; Google Recaptcha (recognition of bots when entering forms).

  • Processed data: Usage data, metadata.
    Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, interest-based marketing, tracking.
  • Special protective measures: Pseudonymization, opt-out.
  • Opt-out: http://tools.google.com/dlpage/gaoptout?hl=de, https://adssettings.google.com/authenticated.
  • External disclosure: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  • Privacy policy: https://www.google.com/policies/privacy/.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with Google’s provisions.

INSTAGRAM FEATURES AND CONTENT

Features and content of the Instagram service may be integrated in our online offer. These may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, or subscribe to the authors of the content or our posts.

  • Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to the data stored on the service (in particular inventory data).
  • Type, scope, mode of operation of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
  • External disclosure: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
  • Privacy policy: http://instagram.com/about/legal/privacy/.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with Instagram’s provisions.

PINTEREST FEATURES AND CONTENT

Features and content of the Pinterest service may be integrated in our online offer. These may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, or subscribe to the authors of the content or our posts.

  • Processed data: Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to the data stored on the service (in particular inventory data).
  • Type, scope, mode of operation of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
  • External disclosure: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
  • Privacy policy: https://about.pinterest.com/de/privacy-policy.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with Pinterest’s provisions.

TWITTER FEATURES AND CONTENT

Features and content of the Twitter service may be integrated in our online offer. These may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, or subscribe to the authors of the content or our posts.

  • Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to the data stored on the service (in particular inventory data).
  • Type, scope, mode of operation of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
  • Opt-out: https://twitter.com/personalization.
  • External disclosure: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.
  • Privacy policy:https://twitter.com/de/privacy.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with Twitter’s provisions.

XING FEATURES AND CONTENT

Features and content of the Xing service may be integrated in our online offer. These may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, or subscribe to the authors of the content or our posts.

  • Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to the data stored on the service (in particular inventory data).
  • Type, scope, mode of operation of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
  • External disclosure: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany.
    Privacy policy:https://www.xing.com/app/share?op=data_protection
  • Processing in third countries: no.
  • Deletion of data: The data will be deleted in accordance with Xing’s provisions.

LINKEDIN FEATURES AND CONTENT

Features and content of the LinkedIn service may be integrated in our online offer. These may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, or subscribe to the authors of the content or our posts.

  • Processed data: Usage data, metadata; if users are registered with the service, the above data can be linked to their profiles and to the data stored on the service (in particular inventory data).
  • Type, scope, mode of operation of the processing: Social plugins, permanent cookies, third-party cookies, interest-based marketing, tracking, remarketing.
  • Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
  • External disclosure: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
  • Privacy policy: https://www.linkedin.com/legal/privacy-policy
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with LinkedIn’s provisions.

Marketing

In this section you will find information on the data processing carried out by us for the purpose of optimizing our marketing and market research services.

SENDING INFORMATION VIA PERSONALIZED NEWSLETTERS

We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “Newsletters”) only with the consent of the recipients or legal permission. The data of the subscribers are logged, as we are obliged to prove that registrations have taken place. If the contents of a Newsletter are not expressly described when registering for the Newsletter, the Newsletters will contain information about our company and our services and offers, in particular concerning areas of service that the recipient has declared as being among their interests (e.g. if a user expresses an interest in kitchens as part of a consent process). On the other hand, advertising information does not include notifications sent within the framework of contractual or business relationships. This includes, for example, the sending of service e-mails with requested comparison offers or comparable services, technical or organizational information in the context of our service provision, information on technical and legal changes, queries about orders, etc. If we have received your consent to personalized information, we will evaluate your user behavior on our website and within the Newsletters we send and assign it to the user profile we maintain for you. We also store information about devices used, opening, clicking and reading behavior in e-mails, and subject areas that have been visited within the website. For technical reasons, this information is stored on a per-user basis; however, it is not used to observe individual users, but instead, for example, to adapt content and offers to the users. Information that we should collect in addition to the e-mail address (e.g. name) is used to address the users personally or to adapt the contents of the Newsletter to the users.

  • Content of the Newsletter: As stated in the registration form, the content also includes information about our services and our company.
  • Processed data: Inventory data (e-mail address), usage data (registration time, time of confirmation of double opt-in, IP address, time and place the e-mail was opened, time of clicking on a link in the Newsletter).
  • Special categories of personal data: no
  • Processing bases: Art 6 (1) (a), Art. 7 GDPR and Section 7 (2) (3) UWG, Section 3 (Shipping & performance measurement), Art 6 (1) (c) in conjunction with Art. 7 (1) GDPR (logging, performance measurement, if not part of the consent)
  • data subjects: E-mail recipients
    Purpose of the processing: Newsletter distribution, optimization, proof of consent.
  • Type, scope, mode of operation of the processing: Web beacon.
  • Necessity / interest in processing: The only information required for dispatch is the e-mail address, the other information is voluntary and serves to personalize and optimize the content based on user interests; the obligation to prove consent is the reason for logging; performance measurement is carried out for users whose consent includes performance measurement, on the basis of consent and otherwise on the basis of legitimate interests in optimizing the content for users and on the basis of business interests.
  • Opt-out: There is a cancellation link in every Newsletter.
  • External disclosure and purpose: Emarsys eMarketing Systems AG, Hans-Fischer-Strasse 10, 80339 Munich, Germany.
  • Privacy policy: https://emarsys.com/de/datenschutzrichtlinie/.
  • Special protective measures: Contract processing agreement with Emarsys.
  • Processing in third countries: No.
  • Deletion of data: We can store unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the Newsletter, so that we can prove consent has previously been granted. The processing of these data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that it is confirmed at the same time that consent was previously granted. Users can revoke their consent at any time to the storage of their data and their e-mail address and their use for the dispatch of Newsletters. Revocation can take place via a link in the Newsletters, using the unsubscribe function on our website, or by sending an e-mail to: datenschutz@aroundhome.de .

COMMUNICATION VIA MESSENGER

We use messenger services for communication purposes and would therefore ask you to observe the following notes on the functionality of the messengers, encryption, use of the metadata from the communication and your objection options. You can also contact us by alternative means, e.g. by telephone or e-mail. Please use the contact options provided to you or those provided within our online offer. In the case of encryption, end-to-end of content (i.e. the content of your message and attachments), we would point out that the communication content (i.e. the content of the message and attached images) are end-to-end encrypted. This means that the content of the messages is not visible, not even to the messenger providers themselves. You should always use an up-to-date version of the messengers with encryption enabled, so that the encryption of the message content is ensured. However, we would also point out to our communication partners that, although the providers of the messengers do not see the content, they can find out that and when communication partners communicate with us, along with technical information about the device used by the communication partners and, depending on the settings of their device, also process location information (so-called metadata).

Information on legal bases - if we ask communication partners for permission before communicating with them via messenger, the legal basis for our processing of their data is their consent. In addition, if we do not ask for consent and they, for example, contact us on their own initiative, we use messenger in relation to our contracting parties and in the context of contract initiation as a contractual measure and, in the case of other interested parties and communication partners, on the basis of our legitimate interests in fast and efficient communication and fulfillment of the needs of our communication partners in communication via messengers. Furthermore, we would point out that we will not transmit the contact data provided to us to the messengers for the first time without your consent.

Revocation, objection and erasure – you can revoke your consent at any time or object at any time to communication with us via messenger. In the case of communication via messenger, we delete the messages in accordance with our general deletion policy (e.g. as described above after the end of contractual relationships, archiving requirements, etc.) and, otherwise, as soon as we can assume that we have answered any information from the communication partners, if no reference to a previous conversation is to be expected and the deletion does not conflict with any legal storage obligations.

  • Processed data: Inventory data, contact data, usage data, contract data, content data
  • Processing bases: Art 6 (1) (a), Art. 7 GDPR in the case of consent, Art. 6 (1) (b) GDPR in the case of establishing contact in the context of contract processing, Art. 6 (1) (f) GDPR in connection with legal requirements for advertising communications.
  • Data subjects: Interested parties, business partners.
  • Purpose of the processing: Advertising communication.
  • Type, scope, mode of operation of the processing: The establishment of contact takes place only with the consent of the contact partners or within the framework of legal permissions.
  • Necessity / interest in processing: Information and business interests.
  • External disclosure and purpose: Facebook Messenger: Facebook Messenger with end-to-end encryption; service provider: https://www.facebook.com., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com.; Privacy policy: https://www.facebook.com/about/privacy.; Option to object (opt-out): https://www.facebook.com/settings?tab=ads… Note: The end-to-end encryption of the Facebook messenger requires activation.
  • Processing in third countries: USA.
  • Deletion of data: With objection to/revocation or omission of the authorization basis for establishing contact; the storage of the data of interested parties corresponds to the information on the deletion of the data in the context of the above processing activity for “comparison and brokerage services”.

CHATBOTS

We offer a “chatbot” as a communication option. A chatbot is a software program that answers users’ questions or informs them about messages. If you chat with our chatbot, we may process your personal data.

If you communicate with the chatbot within an online platform, your ID will also be stored within the platform (e.g., your Facebook ID in the case of Facebook Messenger). We may also collect information concerning which users interact with our chatbot and when. Furthermore, we will store the content of your conversations with the chatbot and log registration and consent processes in order to be able to provide evidence of them in accordance with legal requirements. We would point out that the relevant platform provider can find out that and when users communicate with our chatbot, along with technical information about the user's device used and, depending on the settings of their device, location information as well (so-called metadata) for the purposes of optimizing the services in question and for security purposes. Likewise, the metadata from the communication via chatbot (i.e., for example, the information concerning who has communicated with whom) may be used by the respective platform providers in accordance with their provisions, to which we refer for further information, for the purposes of marketing or displaying advertising tailored to users.

If users consent vis-a-vis the chatbot to the activation of information with regular messages, they have the option to unsubscribe from the information at any time with future effect. The chatbot informs users how and using which terms they can unsubscribe from the messages. By unsubscribing from the chatbot messages, user data will be deleted from the directory of message recipients.

We use the above information to operate our chatbot, e.g. to address users personally, to answer their inquiries to the chatbot, to transmit any requested content, and to improve our chatbot (e.g. to “teach” it answers to frequently asked questions or to recognize unanswered inquiries).

Notes on legal bases - We use the chatbot on the basis of consent if we first obtain permission from the users to the processing of their data by the chatbot (this applies to cases in which users are asked for consent.. If we use the chatbot to answer user inquiries about our services or our company, this takes place in the context of contractual and pre-contractual communication. In addition, we use the chatbot on the basis of our legitimate interests in optimizing the chatbot and its economic efficiency, and enhancing the positive user experience.

CHATCHAMP

  • Processed data: Inventory data, contact data, usage data, contract data, content data.
  • Processing bases: Art 6 (1) (a), Art. 7 GDPR in the case of consent, Art. 6 (1) (b) GDPR in the case of establishing contact in the context of contract processing, Art. 6 (1) (f) GDPR in connection with legal requirements for advertising communications.
  • Data subjects: Interested parties, business partners.
    Purpose of the processing: Advertising communication.
  • Type, scope, mode of operation of the processing: The establishment of contact takes place only with the consent of the contact partners or within the framework of legal permissions.
  • Necessity / interest in processing: Information and business interests.
  • External disclosure and purpose: Chatchamp: Chatbot and assistance software and related services; service provider: chatchamp UG (haftungsbeschränkt), c/o WERK1, Atelierstrasse 29, 81671 Munich, Germany; Website: https://www.chatchamp.com/de/; Privacy policy: https://www.chatchamp.com/privacy/. https://www.chatchamp.com/de/; Privacy policy: https://www.chatchamp.com/privacy/.
  • Processing in third countries: No.
  • Deletion of data: With objection to/revocation or omission of the authorization basis for establishing contact; the storage of the data of interested parties corresponds to the information on the deletion of the data in the context of the above processing activity for “comparison and brokerage services”.

OBI4WAN CHATBOT

With the chatbot platform from Obi4Wan, we create, implement, train and manage our own intelligent chatbots in order to ensure higher customer and employee satisfaction by providing an efficient service.

  • Processed data: Inventory data, contact data, usage data, contract data, content data.
  • Processing bases: Art 6 (1) (a), Art. 7 GDPR in the case of consent, Art. 6 (1) (b) GDPR in the case of establishing contact in the context of contract processing, Art. 6 (1) (f) GDPR in connection with legal requirements for advertising communications.
  • Data subjects: Business partners.
  • Purpose of the processing: Advertising communication.
  • Type, scope, mode of operation of the processing: The establishment of contact takes place only with the consent of the contact partners or within the framework of legal permissions.
  • Special protective measures: ISO 27001
    Necessity / interest in processing: Information and business interests.
  • External disclosure and purpose: Service provider: Obi4Wan GmbH, Oberwallstrasse 6, 10117 Berlin, Germany; Website: https://www.obi4wan.com/de/; Privacy policy: https://www.obi4wan.com/de/datenschutzerklaerung-obi4wan-software/. https://www.obi4wan.com/de/; Privacy policy: https://www.obi4wan.com/de/datenschutzerklaerung-obi4wan-software/.
  • Processing in third countries: No.
  • Deletion of data: With objection to/revocation or omission of the authorization basis for establishing contact; the storage of the data of interested parties corresponds to the information on the deletion of the data in the context of the above processing activity for “comparison and brokerage services”.

COMMUNICATION VIA MAIL, E-MAIL, FAX, OR TELEPHONE

Dispatch of information material, telephone contact for the processing of comparison and brokerage contracts.

  • Processed data: Inventory data, contact data, contract data, content data.
  • Special categories of personal data: no, except health data, which are part of the comparison and brokerage service.
  • Processing bases: Art 6 (1) (a), Art. 7 GDPR in the case of consent, Art. 6 (1) (b) GDPR in the case of establishing contact in the context of contract processing, Art. 6 (1) (f) GDPR in connection with legal requirements for advertising communications.
  • Data subjects: Interested parties, business partners.
  • Purpose of the processing: Advertising communication.
  • Type, scope, mode of operation of the processing: The establishment of contact takes place only with the consent of the contact partners or within the framework of legal permissions.
  • Necessity / interest in processing: Information and business interests.
  • External disclosure and purpose: No.
  • Processing in third countries: No.
  • Deletion of data: With objection to/revocation or omission of the authorization basis for establishing contact; the storage of the data of interested parties corresponds to the information on the deletion of the data in the context of the above processing activity for “comparison and brokerage services”.

Optimization and security

In this section you will find information on the data processing carried out by us for the purpose of optimizing our online offer. Above all, it serves us to improve the user-friendliness and functionality of our online offer.

MOUSEFLOW

Within the framework of “A/B testing” and with pseudonymous observation of user behavior, Mouseflow allows us to understand the effects of various changes to a website (e.g. changes to the input fields, design, etc.).

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Heatmaps, recording of the use of the online offer (pseudonymized), permanent cookies, third-party cookies.
  • Special protective measures: IP masking, pseudonymization, opt-out.
  • Opt-out: https://mouseflow.com/opt-out/.
  • External disclosure: Mouseflow, ApS, Flaesketorvet 68, 1711 Copenhagen V, Denmark.
  • Privacy policy: https://mouseflow.com/privacy/, https://mouseflow.com/gdpr/.
  • Processing in third countries: No.
  • Guarantee in the event of processing in third countries: https://www.privacyshield.gov/participant?id=a2zt0000000TS56AAG&status=Active https://www.privacyshield.gov/participant?id=a2zt0000000TS56AAG&status=Active
  • Deletion of data: 1-12 months.

VISUAL WEBSITE OPTIMIZER

Within the framework of “A/B testing, VISUAL WEBSITE OPTIMIZER allows us to understand the effects of various changes to a website (e.g. changes to the input fields, design, etc.).

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: A/B testing, heatmaps, click tracking, permanent cookies, third-party cookies.
  • Special protective measures: Opt-out, pseudonymization.
  • Opt-out: https://www.checkdomain.de/?vwo_opt_out=1..
  • External disclosure: Wingify Software Private Limited, 404, Gopal Heights, Netaji Subhash Place, Pitam Pura, Delhi 110034, India.
  • Privacy policy: https://vwo.com/privacy-policy/.
  • Processing in third countries: India.
  • Deletion of data: 6 months.

Reach measurement, online marketing, and technology partners

In this section we inform you of which services of technology partners we use for reach measurement and online marketing purposes. Their use is based on Art. 6 (1) (f) GDPR and our interest in increasing user-friendliness and optimizing our offer and its economic efficiency. In all cases, the processed data include usage and metadata. Further explanations can be found in the definitions of terms, in particular on the modes of operation and protective measures, at the end of this privacy policy. The deletion of data is determined, unless otherwise stated, in accordance with the privacy policies of the technology partners.

ADROLL

We use the services of AdRoll for purposes of personalized marketing, e.g. presentation of advertisements within other online offers on the basis of the presumed interests of the users.

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, tracking, remarketing, targeting, interest-based marketing, profiling.
  • Special protective measures: Opt-out.
  • Opt-out: http://www.networkadvertising.org/choices/.
  • External disclosure: AdRoll Advertising Limited, Attn: Privacy Level 6 1, Burlington Plaza Burlington Road Dublin 4, Ireland.
  • Privacy policy: https://www.nextroll.com/privacy.
  • Processing in third countries: no.
  • Deletion of data: 12 months.

ADSPIRIT

We use tracking cookies from the ad server of AdSpirit GmbH on behalf of Kühne und Loos GmbH for the purposes of personalized marketing.

  • Processed data: Order data (value of the order and order number), anonymized IP address and time of visit.
  • Type, scope, mode of operation of the processing: Transmission via cookies, use of data: Payment and analysis purposes for the provision of evidence of advertising services.
  • Special protective measures: Access control, duty of confidentiality to be observed by employees, use of password protection, use of firewalls to protect data, encryption.
  • Opt-out: http://kl1.adspirit.de/privacy.php?lang=0.
  • External disclosure: Kühne & Loos GmbH, Bergstrasse 18, 61231 Bad Nauheim, Germany.
  • Privacy policy: https://kuehne-loos.de/datenschutz/
  • Processing in third countries: No.
  • Deletion of data: If a data subject asserts rights, for instance to the provision of information or to correction or erasure with regard to its data, directly to Kühne & Loos, the latter does not react independently, but instead refers the data subject immediately to the customer and waits for their instructions.

CONVERSANT

We use the Conversant service for purposes of personalized marketing, e.g. displaying advertisements within other online offers based on the presumed interests of the users.

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, fingerprints, tracking, remarketing, interest-based marketing, web beacons, profiling, location data.
  • Special protective measures: Opt-out.
  • Opt-out: https://www.conversantmedia.eu/de/optout.
  • External disclosure: Conversant, LLC., 1406 Pearl St, Boulder, CO 80302, USA.
  • Privacy policy http://de.conversantmedia.eu/legal/datenschutzerklaerung.
  • Processing in third countries: USA.
    Deletion of data: 6 months.

CRITEO

We use the services of Criteo for purposes of personalized marketing, e.g. presentation of advertisements within other online offers based on the presumed interests of the users.

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, tracking, conversion measurement, remarketing, interest-based marketing, profiling, cross-device tracking.
  • Special protective measures: Opt-out, IP masking (complete IP addresses are only used for the purpose of fraud detection and assignment of sales to users for the purpose of measuring success).
  • Opt-out: https://www.criteo.com/de/privacy/.
  • External disclosure: Criteo GmbH, Gewürzmühlstr. 11, 80538 Munich, Germany.
  • Privacy policy: https://www.criteo.com/de/privacy/.
    Processing in third countries: no.
    Deletion of data: 6 months.

FACEBOOK PIXEL

We use the Facebook pixel to create target groups and measure the success of the advertisements we place on Facebook.

  • Processed data: User data, metadata; if users are registered with Facebook, the data will be linked to their Facebook profiles and data associated with them (in particular inventory data).
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, tracking, conversion measurement, interest-based marketing, profiling, custom audiences from website.
  • Special protective measures: Encrypted communication between Facebook and our online offer.
  • Opt-out: https://www.facebook.com/settings?tab=ads, http://www.youronlinechoices.com/uk/your-ad-choices/ (EU), http://www.aboutads.info/choices (US).
  • External disclosure: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
  • Privacy policy: https://www.facebook.com/policy.php.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted by Facebook if the customer’s data are deleted in the context of cancellation.

GOOGLE TAG MANAGER

Google Tag Manager is a solution which we can use to manage website tags via an interface (and thus integrate Google Analytics and other Google marketing services into our online offer, for example). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of personal user data, we refer the reader to the following information about the Google services. Use policy: https://www.google.com/intl/de/tagmanager/use-policy.html.

GOOGLE ANALYTICS

We use Google Analytics for the purposes of reach measurement and target group formation.

  • Processed data: Usage data, metadata, customer ID with us (Google is sent the customer ID only as a pseudonymous datum without the associated inventory data, such as the name, address or e-mail of the customer).
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, tracking, interest-based marketing, profiling, custom audiences, remarketing.
  • Special protective measures: Pseudonymization, IP masking, conclusion of an order processing contract, opt-out.
  • Opt-Out: http://tools.google.com/dlpage/gaoptout?hl=de (browser add-on for Google Analytics), https://adssettings.google.com/, https://adssettings.google.com/authenticated (setting for advertisements).
  • External disclosure: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  • Privacy policy: https://www.google.com/policies/privacy/
  • Processing in third countries: No.
  • Deletion of data: 14 months.

GOOGLE ADWORDS

We use Google AdWords to measure the success of the advertisements we place on Google.

  • Processed data: Usage data, metadata, customer ID with us (Google is sent the customer ID only as a pseudonymous datum without the associated inventory data, such as the name, address or e-mail of the customer).
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, tracking, conversion measurement, interest-based marketing, profiling.
  • Special protective measures: Pseudonymization, IP masking, conclusion of an order processing contract, opt-out.
  • Opt-out: http://tools.google.com/dlpage/gaoptout?hl=de (Browser-Add-On Google Analytics), https://adssettings.google.com/, https://adssettings.google.com/authenticated (setting for advertisements).
  • External disclosure: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
    Privacy policy: https://www.google.com/policies/privacy/.
  • Processing in third countries: No.
  • Deletion of data: 14 months.

GOOGLE DOUBLE CLICK

We use Google Double Click to measure the success of the advertisements we place on Google.

  • Processed data: Usage data, metadata, customer ID with us (Google is sent the customer ID only as a pseudonymous datum without the associated inventory data, such as the name, address or e-mail of the customer).
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, tracking, conversion measurement, interest-based marketing, profiling.
  • Special protective measures: Pseudonymization, IP masking, conclusion of an order processing contract, opt-out.
  • Opt-out: http://tools.google.com/dlpage/gaoptout?hl=de (Browser-Add-On Google Analytics), https://adssettings.google.com/, https://adssettings.google.com/authenticated (setting for advertisements).
  • External disclosure: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  • Privacy policy: https://www.google.com/policies/privacy/.
  • Processing in third countries: No.
  • Deletion of data: 14 months.

GOOGLE MAPS API

We use the map service of the Google Maps platform on this page.

  • Processed data: Usage data, metadata, IP address.
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies.
  • Opt-out: If you do not want Google Maps to collect, process or use data concerning your person via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to display maps.
  • External disclosure: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  • Privacy policy: https://maps.google.com/help/terms_maps.html.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with Google’s provisions.

BORIS-D

Features and content of the German property value system are integrated in our online offer. These may include, for example, content such as images, videos, graphics or texts and buttons with which we can request information about the value of your property.

  • Processed data: User data (property data), contact data.
  • Type, scope, mode of operation of the processing: API interface transfer.
  • External disclosure: Higher Valuation Committee for Property Values in the State of North Rhine-Westphalia, c/o District Government of Cologne, Muffendorfer Strasse 19-21, 53177 Bonn.
  • Privacy policy:https://www.bodenrichtwerte-boris.de/borisde/?lang=de.
  • Processing in third countries: No.

KAMELEOON

This website uses the Kameleoon test and web analysis service. The program enables an analysis of user behavior based on user segmentations. Based on the evaluation of the log file data, we can determine how the individual user segments visit the website, which landing pages are visited and how an increase in clickthrough rates can be achieved.

  • Processed data: Bounce & exit rates, clicks, views of certain pages, conversion rates, metadata: Devices, time, location, etc.
  • Type, scope, mode of operation of the processing: Conversion measurement, interest-based marketing, tracking.
  • Special protective measures: Opt-out, pseudonymization.
  • Opt-out: https://www.aroundhome.de/heizung/formular#kameleoonOptout=true
  • External disclosure: Kameleoon AG, Beim Alten Ausbesserungswerk 4, 77654 Offenburg, Germany; LEAP/ Digital Marketing GmbH, Hardenbergstrasse 9a, 10629 Berlin.
  • Privacy policy: https://www.kameleoon.com/de/datenschutz/.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with Kameleoon’s provisions.

MICROSOFT BING ADS

We use the “Bing Ads” conversion and tracking tool to measure the success of the advertisements we place on Google.

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, tracking, conversion measurement, profiling.
  • Special protective measures: IP masking, opt-out.
  • Opt-out: http://choice.microsoft.com/de-DE/opt-out
  • External disclosure: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland.
  • Privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
  • Processing in third countries: No.
  • Deletion of data: 6 months.

PLISTA

Plista uses technologies to control and optimize the display of advertising material for the user (usage-based advertising).

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Permanent cookies.
  • Special protective measures: Anonymization, opt-out.
  • Opt-out: https://www.plista.com/de/about/opt-out/.
  • External disclosure: Plista GmbH, Torstrasse 33, 10119 Berlin, Germany.
  • Privacy policy: https://www.plista.com/de/about/privacy/.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with Plista’s provisions.

PRICEHUBBLE

Features and content of the PriceHubble company are integrated in our online offer. These may include, for example, content such as images, videos, graphics or texts and buttons with which users can request information concerning the value of their property.

  • Processed data: User data (property data), contact data.
  • Type, scope, mode of operation of the processing: third-party cookies, pseudonymization.
  • External disclosure: PriceHubble Deutschland GmbH, Poststrasse 33, 20354 Hamburg.
  • Privacy policy: https://pricehubble.com/de/privacy/privacy-policy/.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with PriceHubble’s provisions.

SOVENDUS

Sovendus offers you interesting discount and voucher offers.

  • Processed data: Usage, contact, metadata, IP address.
  • Type, scope, mode of operation of the processing: Selection and preparation of interesting discount and voucher offers taking into account objections to advertising, data security, billing purposes.
  • Special protective measures: Pseudonymization, encryption, data protection agreement.
  • Opt-out: https://www.sovendus.com/de/datenschutz/#c14085.
  • External disclosure: Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe.
  • Privacy policy: https://www.sovendus.com/de/datenschutz/.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with Sovendus’s provisions.

THE ADEX

We use the services of The ADEX GmbH. This is a company based in Germany, at Torstrasse 19, 10119 Berlin. ADEX offers technologies to optimally place and control advertising for the user on the basis of their individual interests based on usage behavior on websites and to make measurable their percentage share in conversion, the path from the first advertisement to the final purchase. Cookies, web beacons or similar technologies are used for this purpose. The collected usage data are stored under a pseudonym. This pseudonym is assigned information about user activities on our websites, services, applications and tools (e.g. advertising banners clicked on, subpages visited, search queries made, etc.). The transmitted IP address of a user device is completely anonymized and used to form household networks. In household networks, the devices connected to the Internet, such as computers, telephones, connected TVs and others, can be recognized and the usage data collected from websites aggregated across the various devices. Neither personal data nor the specific whereabouts of a user can be determined with the information obtained. Personal identification of the user is thus excluded.

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Permanent cookies.
  • Special protective measures: Pseudonymization, opt-out.
  • Opt-out: https://www.theadex.com/privacy opt-out/#opt-in-out.
  • External disclosure: The ADEX GmbH, Torstrasse 19, 10119 Berlin, Germany.
  • Privacy policy: https://www.theadex.com/privacy-opt-out/.
  • Processing in third countries: No.
  • Deletion of data: The data will be deleted in accordance with the provisions of The Adex.

UNITED INTERNET MEDIA PIXEL

With the use of the United Internet Media third-party retargeting provider, this website is provided with a tracking cookie. With the help of this technology, we can show you only relevant advertising.

  • Processed data: Usage data.
  • Type, scope, mode of operation of the processing: Third-party cookies, tracking, interest-based marketing.
  • Special protective measures: Pseudonymization, anonymization, opt-out.
  • Opt-out: https://www.united-internet-media.de/de/services/optin-optout/.
  • External disclosure: United Internet Media GmbH, Elgendorfer Strasse 57, 56410 Montabaur.
  • Privacy policy: https://web.de/datenschutz/werbung/ or https://gmx.net/datenschutz/werbung/
  • Processing in third countries: No.
  • Deletion of data: 12 months.

VG WORT / SCALABLE CENTRAL MEASURING METHOD

We use the “Scalable Central Measurement Method” of INFOnline GmbH (https://www.infonline.de) for the determination of statistical characteristic values to determine the probability of that texts will be copied. Anonymous measured values are collected. The access number measurement alternatively uses a session cookie or a signature created from various automatically transmitted pieces of information from your browser to recognize computer systems. IP addresses are only processed in anonymized form. The procedure was developed in compliance with data protection. The only goal of the procedure is to determine the probability of that individual texts will be copied. At no time are individual users identified. Your identity will always be protected. You will not receive any advertising via the system.

Many of our pages are furnished with JavaScript calls, via which we report the accesses to the Wort collection company (VG Wort). In this way, we enable our authors to participate in the payouts from VG Wort, which guarantees payment of the statutory remuneration for the use of copyrighted works in accordance with Section 53 of the German Copyright Act (UrhG).

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Permanent cookies, third-party cookies, session cookies, web beacons.
  • Special protective measures: IP masking, pseudonymization, if possible anonymization, opt-out.
  • Opt-out: https://optout.ioam.de/.
  • External disclosure: INFOnline GmbH, Brühler Str. 9, D-53119 Bonn.
  • Privacy policy: https://www.infonline.de/datenschutz/.
  • Processing in third countries: no.
  • Deletion of data: 6 months.

WEBTREKK REACH MEASUREMENT

We use the technologies of Webtrekk GmbH for the statistical evaluation of our websites. With the help of the Webtrekk services, we collect statistical data about the use of our website. These data are used to permanently improve and optimize our offers and services and thus make them more interesting for you.

  • Processed data: Usage data, metadata.
  • Type, scope, mode of operation of the processing: Targeting, permanent cookies, third-party cookies.
  • Special protective measures: Webtrekk GmbH has been certified by TÜV Saarland in the area of data protection for the Web controlling software used by be Around. In particular, the collection and processing of tracking data was checked and certified for data protection compliance and data security; opt-out; IP masking, pseudonymization.
  • Opt-out: https://www.webtrekk.com/de/legal/opt-out-webtrekk/ (Opt-out-cookie)
  • External disclosure: Webtrekk GmbH, Boxhagener Str. 76-78, 10245 Berlin.
  • Privacy policy: https://www.webtrekk.com/de/legal/opt-out-webtrekk/.
  • Deletion of data: 6 months.

Section IV – Definitions of terms

In this section you will find an overview of the terms used in this privacy policy. Many of the terms are taken from the law and are defined especially in Art. 4 GDPR. The legal definitions are binding. The following explanations, on the other hand, are intended primarily for comprehension purposes. The terms are sorted alphabetically.

  • A/B Tests – “A/B tests” are used to improve the user-friendliness and performance of online offers. For example, users are shown different versions of a website or its elements, such as input forms, on which the placement of the content or labels of the navigation elements may differ. Subsequently, based on the behavior of the users, e.g. prolonged stay on the website or more frequent interaction with the elements, it can be determined which of these websites or elements correspond more to the needs of the users.
  • Affiliate-Links - “Affiliate links” are links with the help of which the linking websites refer users to websites with product or other offers. The operators of the linked websites can receive a commission if users follow the affiliate links and then take advantage of the offers. For this purpose, it is necessary for the providers to be able to track whether users who are interested in certain offers subsequently take advantage of them by means of the affiliate links. Therefore, it is necessary for the functionality of affiliate links for them to be supplemented by certain values that become a part of the link or are stored elsewhere, e.g. in a cookie. The values include, in particular, the source website (referrer), time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the user, as well as tracking-specific values such as, for example, advertising ID, partner ID and categorizations.
  • After-Sales - “After sales” are marketing procedures in which, for example, promotional offers from other providers are presented to customers of an online shop (usually based on the services or products purchased in the online shop). In all other respects, After-sales function in the same way as Affiliate links.
  • Aggregated data - Aggregated data are summarized data which do not allow any conclusions to be drawn about a person and are therefore not personal. For example, the visit times to a website can be stored as average values.
  • Anonyme Daten - Anonymity exists if a person is not at least identifiable by the data controller on the basis of a datum using the means available to it by the data controller. In particular, aggregated data may be anonymous.
  • Contract processor – a “Contract processor” is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  • Special categories of personal data – These are data that reveal racial and ethnic origin, political opinions, religious or ideological beliefs or trade union membership, as well as genetic data, biometric data for the unambiguous identification of a natural person, health data or data on the sexual life or sexual orientation of a natural person.
  • Data subject – See “Personal datum”.
  • Clicktracking – “Clicktracking” allows monitoring of the movements of users within an entire online offer. Since the results of these tests are more accurate if the interaction of the users can be tracked over a certain period of time (for example, it can be seen whether a user likes to return), cookies are usually stored on the users’ computers for these test purposes.
  • Conversion – “Conversion” or “Conversion measurement” refers to a method with which the effectiveness of marketing measures can be determined. For this purpose, a cookie is usually placed on the users’ devices during their stay on the websites on which the marketing measures are executed and then retrieved again on the target website (for example, this allows us to track whether the ads we placed on other websites have been successful).
  • Cookies - “Cookies” are small files stored on users’ computers. Different information can be stored in the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after their visit to an online offer. Temporary cookies or, as the case may be, “session cookies” or “transient cookies” are cookies that are deleted after a user leaves an online offer and closes their browser. For example, the content of a shopping cart in an online shop or login status within a community can be stored in such a cookie. Cookies referred to as “permanent” or “persistent” remain on the user’s computer even after the browser is closed. For example, the login status in a community can be stored if users visit it after several days. Likewise, user interests can be stored in such a cookie and are then used for reach measurement or marketing purposes (see e.g. remarketing). “Third-party cookies” are cookies offered by providers other than the data controller for the online offer (otherwise, if the cookies are theirs only, we speak of “first-party cookies”).
  • Custom Audiences - “Custom audiences” are used when target groups are determined for advertising purposes, e.g. the placement of advertisements. For example, based on a user’s interest in certain products or topics on the Internet, it can be concluded that this user is interested in advertisements for similar products or the online shop in which they have viewed the products. In turn, the term “Lookalike audiences” is used in those cases when content deemed suitable is displayed to users whose profiles or interests presumably correspond to those of the users for whom the profiles were created. Cookies and web beacons are usually used for the purpose of creating custom audiences and lookalike audiences. “Custom Audiences from Website” means that the target groups are formed on the basis of the visitors to your own website. “Custom Audiences from File” means, for example, that a list of e-mail addresses are uploaded to the relevant advertising network or platform to form the target groups.
  • Demographic data - Demographic data is general information about groups of people or persons, e.g. characteristics such as age, gender, place of residence and social characteristics such as occupation, marital status, or income. Demographic data are collected in the context of reach measurement and in online marketing for the purposes of interest-based marketing or for business analyses, which are used, for example, to determine target groups.
  • Third party – A “third party” means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the contract processor, and the persons authorized to process the personal data under the direct responsibility of the controller or contract processor.
  • Third country - Third countries are understood as states in which the GDPR is not a directly applicable law, i.e. in principle, states that do not belong to the European Union (EU) or the European Economic Area (EEA).
  • Consent – “Consent” on the part of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which, by means of a statement or a clear affirmative action, they signify agreement to the processing of personal data concerning their person.
  • Embedding - See “Embedding”.
  • Embedding - in the course of embedding, external content or software functions (see plugins) are integrated into your own online presence in such a way that they are displayed or executed on this online presence. No copy of the content is created because it is accessed from the original server (e.g. videos, images, posts on social networks, widgets with ratings). When embedding, it is technically necessary for the provider of the content to collect the IP address of the users in order to output the embedded content in the users’ browsers. Furthermore, the content provider may, for example, store cookies on users’ devices.
  • Advanced matching – “Advanced matching” is an option provided by the Facebook pixel, which means that inventory data such as telephone numbers, e-mail addresses or Facebook IDs of users are transmitted to Facebook in encrypted form to form target groups for Facebook ads and are only used for this purpose.
  • Error tracking - With error tracking, for example, incorrectly executed program code is detected in order to eliminate it and thus ensure the functionality and security of online offers.
  • First-Party Cookies - See “Cookies”.
  • Heatmaps - “Heatmaps” are user mouse movements which are combined into an overall picture, with the help of which, for example, it can be ascertained which website elements users prefer to engage with and which elements they prefer less.
  • IP address - The IP address (“IP” stands for Internet Protocol) is a sequence of numbers that can be used to identify devices connected to the Internet. When a user accesses a website on a server, they communicates their IP address to the server. The server then knows that it has to send the data packets with the content of the website to this address.
  • IP masking - “IP masking” is a method in which the last octet, i.e. the last two numbers of an IP address, are deleted so that the IP address can no longer be used to uniquely identify a person. Therefore, IP masking is a means of pseudonymizing processing methods, especially in online marketing.
  • Interest-based marketing or interest and online behavioral advertising (OBA for short) - interest-based and/or behavioral advertising is referred to when profiling is used to determine the potential interest of users in advertisements. Cookies and web beacons are usually used for these purposes.
  • Lookalike Audiences - See Custom Audiences.
  • Opt-in – The term “opt-in” basically means the same as registration. If registration (e.g. by entering an e-mail address in an online form field) is confirmed by sending a confirmation e-mail to the owner of the e-mail address, we speak of a double opt-in (DOI).
  • Opt-Out - The term “opt-out” basically means the same as subscribing and can, for example, constitute an objection (e.g. against tracking) or cancellation (e.g. for newsletter subscriptions).
  • Opt-out cookie - An “opt-out cookie” is a small file (see “Cookies”) that is stored in your browser and in which it is noted that, for example, a tracking service should not process your data. The “opt-out cookie” only applies to the browser in which it was stored, i.e. in which you clicked on the opt-out link. If cookies are deleted in this browser, you must click again on the opt-out link. Furthermore, an opt-out link can only be limited to the domain on which the opt-out link was clicked.
  • Permanent cookies - See “Cookies”.
  • Personal data/Personal reference - “Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is considered to be identifiable who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special functions that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
  • Plugins/ Social plugins - Plugins (or “social plugins” in the case of social functions) are third-party software functions that are integrated into the online offer. They can be used, for example, to output interaction elements (e.g., a “Like” button) or content (e.g. external commenting function or posts in social networks).
  • Profiling - “Profiling” means any type of automated processing of personal data whereby these personal data are used to analyze, evaluate or predict certain personal aspects relating to a natural person (depending on the type of profiling, this includes information regarding age, gender, location data and movement data, interaction with websites and their content, shopping behavior, social interactions with other people) (e.g. interests in certain content or products, clicking behavior on a website or location). Cookies and web beacons are often used for profiling purposes.
  • Pseudonymization / Pseudonyms – “Pseudonymization” means that the processing of personal data is guaranteed in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately or it is guaranteed that the personal data will not be assigned to an identified or identifiable natural person; i.e. if an exact interest profile of the computer user is stored in a cookie (as it were, a “marketing avatar”), but not the name of the user, then their data will be processed pseudonymously. If their name is are stored, e.g. as part of their e-mail or IP address, then the processing is basically no longer a pseudonymous.
  • Reach measurement - Reach measurement is used to evaluate the visitor flows to an online offer and may include their behavior, interests or demographic information, such as age or gender. With the help of the reach analysis, website owners, for instance, can recognize which types of people visit their website at what time and which content they are interested in. This allows them, for example, to optimize the content of the website more effectively to the needs of their visitors. Cookies and web beacons are often used for the purpose of reach analysis.
  • Remarketing / Retargeting - “Remarketing” or “Retargeting” is used when, for example, it is noted for advertising purposes which products a user has been interested in on a website in order to remind the user of these products on other websites, e.g. in advertisements. Cookies are usually used for profiling purposes.
  • Session Cookies - See “Cookies”.
  • Single sign-on - “Single sign-on” or “single sign-on authentication” is a method that allows users to log in to an online offer, including other online offers, with the help of a user account. The prerequisite for single sign-on authentication is that users are registered with the relevant single sign-on provider and enter the required access data into the web form provided for this purpose. Authentication takes place directly with the single sign-on provider in question. In the context of such authentication, we receive a user ID with the information that the user is logged in to the relevant single sign-on provider under this user ID and an ID that can no longer be used by us (“user handle”). Whether we receive further data depends solely on the single sign-on procedure used, the selected data releases as part of the authentication and also which data users have released in the privacy or other settings of the user account with the single sign-on provider. Depending on the single sign-on provider and the choice of the users, the data may differ: They are usually the e-mail address and the user name. The password entered as part of the single sign-on procedure is neither visible to us, nor is it stored by us. Users are asked to note that any of their information stored with us can be automatically compared with their user account with the single sign-on provider, but this is not always possible, nor does it always actually takes place. If, for example, a user’s e-mail address changes, the user must change it manually in their user account with us. If users decide that they no longer want to use the link between their user account and the single sign-on provider for the single sign-on procedure, they must cancel this link within their user account with the single sign-on provider. If users want to delete their data held by us, they must first cancel their registration with us.
  • Third–party cookies - See “Cookies”.
  • Tracking - “Tracking” means that the behavior of users can be tracked across several online offers, e.g. for remarketing purposes. The behavioral and interest information collected with regard to the online offers used is stored as user profiles in cookies or on servers of the marketing service providers (e.g. Google or Facebook).
  • Data Controller - “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Processing - “Processing” means any operation carried out with or without the aid of automated procedures or any such series of operations in connection with personal data. The term has a very broad application and covers practically every instance of data handling.
  • Web beacons - “Web beacons” (also referred to as “pixels”, “measuring pixels” or “tracking pixels”) are small, pixel-sized graphics that are integrated into web pages or HTML e-mails. In this way, they make it possible, for example, to determine whether an e-mail has been opened (at least if the image display function in e-mails is activated) or how often a website is accessed by a user.
  • Widgets - See Embedding.
  • Web beacons - See web beacons.

Section V – Further information

Please note that this privacy policy applies exclusively to be Around websites. Insofar as our pages contain links to third-party websites, our privacy policy does not apply to them. Please consult the sites in question concerning the data protection regulations applicable there.

Further information about us can be found in our legal notice: www.aroundhome.de/impressum/. www.aroundhome.de/impressum/.

If you still have questions, suggestions and requests, you can contact us at any time by e-mail at datenschutz@aroundhome.de.