Data privacy

We are happy that you are visiting our website and show interest in us. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect, when you visit our website and for what purpose it is used.

The data privacy applies to the Rabl & Hahn GmbH website, which is available under the domain https://www.change-consulting-muenchen.de/ as well as available in various subdomains (in the following: „Our website“). https://www.meetingraeume-mieten-muenchen-riem.com/

Who is responsible and how can I get in touch?

 

for the processing of personal data in line with the EU-General Data Protection Regulation (GDPR) and

a list of the regulatory authority (for the non-public area) with address can be found in:

Rabl & Hahn GmbH

Einsteinring 1

D-85609 Aschheim-Dornach bei München

 

phone: +49 89 90410210

email: info(at)rabl-hahn.com

 

Questions regarding our data privacy

 

If you have a question about our data protection, you can write us an email at info(at)rabl-hahn.com info(at)rabl-hahn.com

What is it about?

Our data privacy fulfils the legal requirements regarding the transparency in the processing of personal data. This concerns all information that relates to an identified or identifiable natural person.  This includes for example your name, your age, your address, your phone number, your date of birth, your email address, IP address or the user behaviour during the visit on our website. Information for which we can make no (or only with a disproportionate effort) reference to your person, e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, retrieving, use, storage or transmission) always requires a legal basis and a defined purpose.   

 

Stored personal data will be deleted as soon as the purpose of processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you in the individual processes about the specific storage periods and criteria for storage. Independently of this, we save your personal data in individual cases to assert, exercise or defend legal rights and in case of legal retention requirements.  

Who gets my data?

 

We only pass on your personal data, which process on our website, to third parties if this is necessary to fulfil purpose and in individual cases covered by a legal basis (e.g. consent or protection of legitimate interests). In addition, we pass on personal data to third parties in individual cases if this serves to assert, exercise or defend legal rights. Possible recipients can then be e.g. law enforcement authorities, lawyers, accountants, courts, etc.

 

As far as we use service providers for the operation of our website who process personal data on our behalf under section 28 GDPR, these can be the receiver of your personal data. You can find more information about the use of order processors and web services in the overview of the individual processing operations.

What rights do I have?

Under the requirements of the legal regulations of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), you as affected person have the following rights:

 

  • Information under section 15 GDPR, section 34 Federal Data Protection Act (BDSG) about the data stored about you in the form of meaningful information with the details of the processing and a copy of your data;

  • Correction of incorrect or incomplete data stored by us under section 16 GDPR;

  • Deletion of the data stored by us under section 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

  • Limitation of data processing under section 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse the deletion of your data because you need it to assert, exercise or defend legal claims or you object to the processing under section 21 GDPR.

  • Data portability under section 20 GDPR, as far as you give us personal data within the scope of a consent under section 6 (1a) GDPR or on the basis of a contract under section 6 (1b) GDPR and processed by our automatic method. You will receive your data in a structured, common and machine-readable format or we directly send your data to another responsible person, as far as this is technically feasible.

  • Objection against the processing of your personal data under section 21 GDPR, insofar as this is based on section 6 (1e, f) GDPR takes place and there are reasons for this, which result from your particular situation or the objection is directed against direct advertising.The right to object does not exist if predominant, compelling legitimate grounds for the processing are proven or the processing takes place to assert, exercise or defend legal claims. If the right to object to individual processing operations does not exist, this will be stated there.

  • Objection to your given consent with an effect in the future under section 7 (3) GDPR.

  • Complaint under section 77 GDPR with a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

How is my data processed in detail?

Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases including profiling does not take place.

 

Provision of the website

Type and scope of processing:

When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

 

  • IP address of the requesting computer

  • Date and time of access

  • Name and URL of the accessed file

  • Website, from which access is made (referrer URL)

  • The browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

 

Our website is not hosted by ourselves, but by a service provider who, for the purpose of providing the website, processes the previously mentioned data on our behalf under section 28 GDPR.

Purpose and legal basis:

The processing occurs to protect our overriding legitimate interest in displaying our website and guaranteeing security and stability on the basis of section 6 (f) GDPR. The collection of the data and the storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under section 21 (1) GDPR. Insofar as the further storage of the log files is required by law, processing takes place on the basis of section 6 (1c) GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.

Storage period:

The previously mentioned data is stored for the duration of the display of the website [and for technical reasons beyond that for a maximum of [7 days]].

 

Contact form

Type and scope of processing:

On our website we offer you to contact through a form provided. The information that is collected on the mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary to process the contact request.

When using the contact form, your personal data will not be passed on to third parties.

 

Purpose and legal basis:

The processing of your data by using our contact form takes place for the purpose of communicating and processing your request based on your consent under section 6 (1a) GDPR. Insofar as your request relates to an existing contractual relationship with us, processing takes place for the purpose of fulfilling the contract on the basis of section 6 (1b) GDPR. There is no legal or contractual obligation to provide your data, however, it is not possible to process your request without providing the information in the mandatory fields. If you do not want to provide this data, please contact us by other means.

 

Storage period:

As far as you use the contact form based on your consent, we save the data collected for each request for a period of three years, starting with the completion of your request or until your consent is withdrawn.

 

If you use the contact form in the context of a contractual relationship, we save the data collected for each request for a period of [three years] from the end of the contractual relationship.

Use of the booking system for our premises

Type and scope of processing:

To use our booking system, we need your personal data in order to provide our services and to be able to be able to invoice accordingly. The data collected is necessary to complete the process.

 

Purpose and legal basis:

We process your data for the purpose of providing the booking system and to fulfil a contract with you under section 6 (1b) GDPR. There is a contractual obligation to provide your data, as this information is necessary to identify you and to fulfil the contract on our part. There is no legal obligation to provide the data. Without the provision of this information, the booking and thus the conclusion of a contract is not possible.

 

Storage period:

We store your personal data in the context of booking and providing the premises within the contracted period and for the duration of the contractual relationship. After the end of the contract or use of the premises, your data will only be stored to the extent and for the duration of the statutory retention requirements (e.g. tax and commercial law). Your data will not be used for other purposes.

General information on presence in social networks

In order to be able to present our company in the best possible way and to communicate with you as a user, customer or prospect and to be able to inform you about our offered services, we rely on the presence in social networks.

You can find us on the following platforms or social networks:

  • Facebook

  • Instagram

  • LinkedIn

  • XING

  • Youtube

  • Google+

  • Twitter

When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). The same level of data privacy as in the EU cannot be guaranteed in all countries outside the EU.

In diesem Zusammenhang kann es für Sie als Nutzer zur Risiken führen, wenn die übermittelten Daten in sog. Drittländer mit einem nicht angemessenen Datenschutzniveau verarbeitet werden.

In this context, it can lead to risks for you as a user if the transmitted data is processed in so-called third countries with an inadequate level of data privacy.

This complicates the implementation of known user rights. In addition, it may happen that your data is not processed in your interest by the provider in the third country.

If providers from the USA have been certified under the so-called Privacy Shield Agreement - an agreement on data protection between the USA and the EU - these providers are obliged to comply with the EU data privacy standards.
 

The processing purposes pursued by social networks generally differ from ours. This usually means that the data collected on social networks is processed for the purposes of market research, advertising and the creation of user profiles for personalized advertising (e.g. Facebook, Google, Instagram, etc.).

To achieve this, cookies are used that record user behaviour and enable the user to be profiled. In the case of Facebook, a user profile is also created for people who do not have a registered account on Facebook.

You can find a specific list of the processing purposes of the user data in the data privacy information of the respective provider. By making the appropriate settings in your user account, you can limit the profile creation, at least to a certain extent. For the exact procedure, please read the corresponding data protection information of the respective provider.

 

Facebook Fanpage

 

When you visit our Facebook page, Facebook records, among other things, your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us as the operator of the Facebook pages with statistical information about the use of the Facebook page. Facebook provides more information on this under the following link: http://de-de.facebook.com/help/pages/insights.

By means of transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use these to respond to the interests of our users and to continuously improve our online presence and to ensure the quality of it.

We only collect your data via our fan page in order to implement a possible provision for communication and interaction with us. This inquiry usually includes your name, news content, comment content as well as the profile information you provided "publicly".

The processing of your personal data for our purposes mentioned above is based on our legitimate business and communicative interest in offering an information and communication channel under section 6 (1f) GDPR. If you as a user have given your consent to the respective provider of the social network for data processing, the legal basis of the processing extends to section 6 (1a), section 7 GDPR.

Due to the fact that the actual data processing is followed out by the provider of the social network, our access options to your data are limited. Only the provider of the social network is authorized to have full access to your data. Because of this, only the provider can directly take and implement appropriate measures to fulfil your user rights (request for information, request for deletion, objection, etc.). The most effective way of asserting such rights is directly against the respective provider.

Should you still need help in this situation, please do not hesitate to contact us.

Rights of those affected:

The Facebook "Page Controller Addendum" shows the rights and obligations to be observed with Facebook. You can find this under the following link: https://www.facebook.com/legal/terms/page_controller_addendum 

In case of a request for information, we will forward it to Facebook and ask you to fill out the appropriate contact form at: https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fhelp%2Fcontact%2F308592359910928 

Below you will find a detailed description of the respective data processing by the providers and their opt-out options via the corresponding links to the websites of the providers:

 

 

CDNJS

Type and scope of processing:

We use CDNJS to properly provide the content of our website. CDNJS is a service of Cloudflare, Inc., which functions as a content delivery network (CDN) on our website.

A CDN helps to provide content from our online offer, in particular files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. If you access this content, you will connect to servers of Cloudflare, Inc., whereby your IP address and possibly browser data such as your user agent will be transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of CDNJS.

Purpose and legal basis:

The use of the content delivery network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer under section 6 (1f) GDPR.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by Cloudflare, Inc. Further information can be found in the data protection declaration of CDNJS: https://www.cloudflare.com/privacypolicy/.

Google APIs

Art und Umfang der Verarbeitung:

We use Google APIs from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland to access other services and data from Google LLC. Your IP address is transferred to Google LLC. Please note that there is a single section in this privacy policy for each additional service that we use from Google LLC.

Purpose and legal basis:

The use of Google APIs is based on our legitimate interests, i.e. interest in optimizing our online offer under section 6 (1f) GDPR.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. For more information, see the privacy policy of Google APIs: https://policies.google.com/privacy.

Google CDN

 

Type and scope of processing

We use Google CDN to properly provide the content of our website. Google CDN is a service of Google LLC, which acts as a content delivery network (CDN) on our website.

A CDN helps to provide content from our online offer, in particular files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. If you access this content, you will connect to servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data will be transmitted like your user agent. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google CDN.

Purpose and legal basis:

The use of the content delivery network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer under section 6 (1f) GDPR.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration of Google CDN: https://policies.google.com/privacy.

Google Double Click

 

Type and scope of processing:

We have integrated components from DoubleClick by Google on our website. DoubleClick is a Google brand, under which special online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with every impression as well as with clicks or other activities.

Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID, which is required to complete the technical process. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid double placement. DoubleClick can also use the cookie ID to record conversions. Conversions are recorded, for example, if a DoubleClick advertisement was previously shown to a user and the user subsequently makes a purchase on the advertiser's website using the same Internet browser.

A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which you have already been in contact with on other websites. As part of this service, Google receives knowledge of data that Google also uses to prepare commission statements. Among other things, Google can understand that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of Double Click, Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Further information and the applicable data protection regulations of DoubleClick by Google can be found at https://www.google.com/intl/de/policies/

Purpose and legal basis:

We process your data with the help of the double-click cookie for the purpose of optimizing and displaying advertisements based on your consent under section 6 (1a) GDPR. You give your consent by using cookies (cookie banner / consent manager), with which you can revoke your consent at any time with future effect section 7 (3) GDPR. The cookie is used, among other things, to place and display user-relevant advertising and to create or improve reports on advertising campaigns. Furthermore, the cookie is used to avoid multiple displays of the same advertising. Each time you visit one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, however, not all functions may be fully available.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration of Google DoubleClick: https://policies.google.com/privacy.

 

Google Fonts

Type and scope of processing:

We use Google Fonts from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as a service for providing fonts for our online offers. To obtain these fonts, you connect to Google LLC servers and your IP address will be transmitted.

Purpose and legal basis:

The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision and optimization of our online offer under section 6 (1f) GDPR.

Storage period:

The specific storage period of the processed data cannot be influenced by us but is determined by Google LLC. Further information can be found in the data protection declaration of Google Fonts: https://policies.google.com/privacy.

 

Google Maps

Type and scope of processing:

We use the map service Google Maps to create directions. Google Maps is a service of Google LLC, which represents a map on our website.

If you access this content on our website, you will connect to servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent will be transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google Maps.

Purpose and legal basis:

The use of Google Maps is based on our legitimate interests under section 6 (1f) GDPR, i.e. our interest in making it easier for you to get to the locations mentioned on the website.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration of Google Maps: https://policies.google.com/privacy.

New Relic

 

Type and scope of processing:

We have integrated the New Relic JS Agent on our website. New Relic JS Agent is a service of New Relic, Inc., which develops cloud-based software that enables website and application owners to track the performance of their services.

New Relic JS Agent offers us the opportunity to determine and improve the stability of our services by monitoring the system and code errors.

Your IP address and activities carried out on our website are collected. In this case, your data will be passed on to the operator of New Relic JS Agent, New Relic, Inc., San Francisco, California, US.

Purpose and legal basis:

The use of New Relic JS Agent is based on our legitimate interests, i.e. interest in optimizing our services under section 6 (1f) GDPR.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by New Relic, Inc. Further information can be found in the data protection declaration for New Relic JS Agent: https://newrelic.com/termsandconditions/privacy.

New Relic Data Collection Server

 

Type and scope of processing:

We have integrated New Relic Data Collection Server on our website. New Relic Data Collection Server is a service of New Relic, Inc., which develops cloud-based software that enables website and application owners to track the performance of their services.

New Relic Data Collection Server offers the possibility to determine statistical evaluations of the technical performance of our services (e.g. the duration of a specific database query, the stability and accessibility of our servers, or the response time of our servers). For this purpose, application and browser data is collected and saved in the browser using cookies.

In this case, your data will be passed on to the operator of New Relic Data Collection Server, New Relic, Inc., San Francisco, California, US.

Purpose and legal basis:

The use of New Relic Data Collection Server is based on our legitimate interests, i.e. interest in optimizing our services under section 6 (1f) GDPR.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by New Relic, Inc. Further information can be found in the data protection declaration of New Relic Data Collection Server: https://newrelic.com/termsandconditions/privacy.

Wix

 

Type and scope of processing:

Our website was created using the Wix website modular system. Wix is ​​a service of Wix.com, Inc and offers web development technology, web design and layout tools, domain hosting and other applications for marketing and workflow management.

We use Wix, among other things, for web hosting and the presentation of our website. Wix also collects statistical data about your visit to our website.

The following data is usually transmitted: accessed website, date and time of access, amount of data transferred, notification of whether a retrieval was successful, browser type and browser version, user's operating system, the website previously visited (referrer) and the IP address.

 

This protocol data is processed exclusively for the purposes mentioned above, as well as to maintain the security, functionality and optimization of Wix's offer.

Purpose and legal basis:

The use of the service is based on our legitimate interests, i.e. interest in a safe and efficient provision, as well as the optimization of our online offer under section 6 (1f) GDPR

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by Wix.com, Inc. Further information can be found in the data protection declaration of Wix: https://de.wix.com/about/privacy.

Wix CDN

 

Type and scope of processing:

We use Wix CDN to properly provide the content of our website. Wix CDN is a service of Wix.com, Inc, which functions as a content delivery network (CDN) on our website.

A CDN helps to provide content from our online offer, in particular files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. If you access this content, you will establish a connection to servers of Wix.com, Inc, whereby your IP address and possibly browser data such as your user agent will be transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Wix CDN.

Purpose and legal basis:

The use of the content delivery network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer under section 6 (1f) GDPR.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by Wix.com, Inc. Further information can be found in the data protection declaration of Wix CDN: https://de.wix.com/about/privacy.

Youtube

 

Type and scope of processing:

We have integrated YouTube video on our website. YouTube Video is a component of the YouTube, LLC video platform where users can upload content, share it over the Internet, and get detailed statistics.

YouTube video enables us to integrate the content of the platform into our website.

YouTube Video uses cookies and other browser technologies to evaluate user behaviour, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to generate reports. If a user is registered with YouTube, LLC, YouTube Video can assign the played videos to the profile.

If you access this content, establish a connection to servers of YouTube, LLC, whereby your IP address and, if applicable, browser data such as your user agent are transmitted.

Purpose and legal basis:

The use of the service is based on our legitimate interests, i.e. interest in a platform-independent provision of content under section 6 (1f) GDPR.

Storage period:

The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the data protection declaration of YouTube video: https://policies.google.com/privacy.

Stated: 01.06.2020

 

© 2020 Rabl & Hahn GmbH  | Einsteinring 1  |
85609 Aschheim-Dornach near Munich Trade fair / Munich East | order(at)rabl-hahn.com

Rent a meeting room | Meeting room Munich | Meeting room Munich Riem | Rent a meeting room in Munich | Event location Munich Trade Fair in Riem

Event room Munich East | Coworking Munich Riem | Tagungsraum München | Rent a Event space Munich | Coworking space Munich | Rent a seminar room in Munich East