• Home
  • Privacy Policy

Privacy Policy

Compliance with data protection regulations is of great importance to our company in order to protect your personal data and your privacy accordingly. Your data is collected in accordance with the relevant legal provisions. We use the information you provide solely to fulfil and process your order. The privacy notice below contains information about the processing of your data.

 

 



I. Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection provisions, is:

Arnold & Hanl Umzugslogistik GmbH
Am Hirschhügel 4–8 
63128 Dietzenbach
Germany

Tel: +49 (0)6074 91440-0
Fax: +49 (0)6074 91440-16
Email: info@ArnoldHanl.de
www.arnoldhanl.de



II. Name and address of the Data Protection Officer

The data protection officer of the data controller is:

Mr Frank Lierz
Karl-Wilhelm-Str. 1a
76359 Marxzell
datenschutzbeauftragter@arnoldhanl.de
 


 

III. General information on data processing

1. Scope of personal data processing 

As a general rule, we collect and use our users’ personal data only to the extent necessary for the performance of our contracts. Once our contractual obligations have been fulfilled, we process data only with the data subject’s consent. An exception applies in cases where it is not possible, for practical reasons, to obtain consent in advance, or where the processing of the data is permitted by statutory provisions.

2. Legal basis for the processing of personal data

Where we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis. Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

Where the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

Where processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

3. Data erasure and retention period

The data subject’s personal data shall be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased when a retention period prescribed by the aforementioned provisions expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

 

 


 

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected in this process: 1. Information about the browser type and version used 2. The user’s operating system 3. The user’s internet service provider 4.The user’s IP address 5. The date and time of access 6. Websites from which the user’s system accesses our website 7. Websites accessed
by the user’s system via our website 
The data is also stored in our system’s log files. This data is not stored together with any other personal data relating to the user.

2. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Article 6(1)(f) of the GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the website functions properly. Furthermore, we use the data to optimise the website and to ensure the security of our IT systems. The data is not analysed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this is the case once the relevant session has ended.

Where data is stored in log files, this occurs after seven days at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or anonymised so that it is no longer possible to identify the client making the request.

5. Right to object and right to erasure 

The collection of data for the purpose of providing the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no right to object.

 

 

 


V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the web browser or by the web browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s computer system. This cookie contains a unique string of characters that enables the browser to be uniquely identified when the website is visited again.

We use cookies to make our website more user-friendly. Some elements of our website require that the browser used to access the site can be identified even after changing pages.

The following data is stored and transmitted in the cookies:
1. Language settings
2. Log-in details
3. Session ID

We also use cookies on our website that enable us to analyse users’ browsing behaviour.

In this way, the following data may be transmitted:
1. Search terms
entered 2. Sources
of visitors 3. Frequency of page views
4. Use of website functions
 


Cookies used; purpose and validity
 

NamePurposeDescriptionValidity period
__fe_typo_userLogin to the secure area of the websiteThis cookie is a standard TYPO3 session cookie. When a user logs in, it stores the session ID, which is used to recognise the logged-in user and grant them access to restricted areas.End of session
PHPSESSIDWebsite administrationThis cookie provides a standard PHP session identifier (relevant to administrators only)End of session
CookieConsentCookie noticeThis cookie stores your cookie settings. It records whether you have consented to the use of cookies. If so, the cookie notice will no longer be displayed1 year
Be_lastLoginProviderWebsite administrationThis cookie contains the key for the Typo3 backend login provider being used (relevant to administrators only)90 days
__utmaGoogle AnalyticsThis third-party cookie, developed by Google Analytics, is used to distinguish between users and sessions. It also generates statistics on website traffic2 years
__utmbGoogle AnalyticsThis first-party cookie, developed by Google Analytics, is used to identify new sessions and page views. It also generates statistics on website traffic.30 minutes
__utmcGoogle AnalyticsThis first-party cookie, developed by Google Analytics, is configured to be interoperable with urchin.js. Previously, this cookie, in conjunction with __utmb, determined whether the user was in a new session or had visited a new page.End of session
__utmzGoogle AnalyticsThis first-party cookie, created by Google Analytics, is used to identify the visitor’s source or campaign. It determines how the visitor arrived at the page.6 months
__utmtGoogle AnalyticsThis third-party cookie, created by Google Analytics, is used to process user visits. It also generates statistics on website traffic.10 minutes
__gaGoogle AnalyticsThis third-party Google Analytics cookie is used to distinguish between visitors when collecting information about page views. For example, it can be used to identify areas of the website where improvements are needed. The _ga cookie does not allow users to be personally identified, as no personal data is collected.2 years
__gacGoogle AnalyticsContains information about campaigns for the user. If you have linked your Google Analytics and Google Ads accounts, elements used to measure effectiveness will read this cookie, unless you disable it.3 months
__gatGoogle AnalyticsThis third-party Google Analytics cookie is used by Google Analytics to monitor the rate of requests to the company’s servers. It can, for example, be used to identify areas of the website where improvements are needed. The cookie does not allow users to be personally identified, as no personal data is collected.10 minutes
__gidGoogle Tracking CodesThis is a third-party cookie from Google Tag Manager, which manages and facilitates the integration of tracking codes.N/A – determined by Google
longDigital TourThis cookie is only relevant when using the ‘Digital Tour’ tool. The cookie stores the user’s language setting.30 days


The user data collected in this way is pseudonymised through technical measures. Consequently, it is no longer possible to link the data to the user accessing the site. The data is not stored together with any other personal data relating to the user.

When visiting our website, users are informed via an information banner about the use of cookies for analytical purposes and are directed to this privacy policy. In this context, users are also advised on how to prevent cookies from being stored in their browser settings.

When visiting our website, users are informed about the use of cookies for analytical purposes and their consent is sought for the processing of personal data used in this context. In this context, reference is also made to this privacy policy.

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Article 6(1)(f) of the GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary for the browser to be recognised even after changing pages.

We require cookies for the following purposes:
1. Saving language settings
2. Remembering search terms
3. Remembering page settings and pages

visited The user data collected by technically necessary cookies is not used to create user profiles.

Analytical cookies are used for the purpose of improving the quality of our website and its content. Analytical cookies enable us to understand how the website is used, allowing us to continuously optimise our service.

These purposes also constitute our legitimate interest in the processing of personal data pursuant to Article 6(1)(f) of the GDPR.

4. Duration of storage, right to object and option

to delete Cookies are stored on the user’s computer and transmitted from there to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, you may no longer be able to make full use of all the website’s functions.


 

VI. Newsletter

If you would like to subscribe to the newsletter offered on the website, we require your email address and information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter.

To ensure that the newsletter is sent with your consent, we use the so-called double opt-in procedure. As part of this process, the potential recipient is added to a mailing list. The user is then sent a confirmation email, giving them the opportunity to confirm their subscription in a legally compliant manner. Only once confirmation has been received will the email address be actively added to the mailing list.

We use this data exclusively for sending the requested information and offers.

We use Brevo (formerly Sendinblue / Newsletter2Go) as our newsletter software. Your data is transmitted to Sendinblue GmbH in the process. Sendinblue GmbH is prohibited from selling your data or using it for any purpose other than sending newsletters. Sendinblue GmbH is a German, certified provider that has been selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

Further information can be found here: https://help.brevo.com/hc/de/sections/18503544961042

You may withdraw your consent to the storage of your data and email address, and to their use for sending the newsletter, at any time, for example via the ‘Unsubscribe’ link in the newsletter.

Data protection measures are subject to ongoing technical developments; for this reason, we ask you to keep yourself informed about our data protection measures at regular intervals by reviewing our Privacy Policy.

 

 


 

VII. Registration for our ‘Digital Viewing’ service

1. Description and scope of data processing

On our website, we offer users the option of carrying out a digital inspection of their removal goods themselves, on their own initiative and on a voluntary basis, by providing personal data. The data is entered into an input form. In addition, you may provide photographs of your removal goods as well as of the loading and unloading locations. The data and photographs are transmitted to us and stored. No data is disclosed to third parties outside the DMS partnership as part of the registration process.

The following data is collected during the registration process:
1. Email address or mobile phone number

At the time of registration, the following data is also stored:
2. The user’s IP address 3. Date and time of registration

As part of the registration process, the user’s consent to the processing of this data is obtained.

2. Legal basis for data processing

Where the user has given their consent, the legal basis for processing the data is Article 6(1)(a) of the GDPR.

If the registration serves to fulfil a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Article 6(1)(b) of the GDPR.

3. Purpose of data processing

The identification of the user, as well as various voluntary details regarding the user’s housing situation, relocation requirements and service preferences, are used to draw up a non-binding and as detailed as possible quotation for the customer.

3. Duration of storage

The data will be erased as soon as it is no longer necessary for the purpose for which it was collected. This applies to data collected during the registration process once the registration on our website has been cancelled or amended. Upon conclusion of the contract, it is necessary to store the contractual partner’s personal data in order to fulfil contractual or statutory obligations.

5. Right to object and right

to erasure As a user, you have the option to cancel your registration at any time. You may have the data stored about you amended at any time. You may request cancellation by telephone, post, fax or email using the contact details of the data controller provided above.

If the data is required to fulfil a contract or to carry out pre-contractual measures, early deletion of the data is only possible insofar as no contractual or statutory obligations preclude such deletion.

6. Disclosure of data

The technical provision of the application, as well as the central processing and storage of the personal data collected and the photographs transmitted during the digital viewing, are carried out by DMS Deutsche Möbelspedition GmbH & Co. KG as a data processor within the meaning of Article 28 of the GDPR. Processing takes place exclusively on the basis of a data processing agreement and in accordance with the instructions of the relevant DMS member company acting as the data controller. The data controller for the purposes of data protection law remains exclusively the removal company named in this privacy policy.

 

 


VIII. Contact form and email contact

1. Description and scope of data processing

Our website features a contact form which can be used to contact us electronically. If a user makes use of this option, the data entered in the form will be transmitted to us and stored. This data comprises: Mandatory

fields:
1. Surname
2. Email address
3. Indication of whether removal costs
will be covered 4. Preferred method of contact

Additional voluntary information:
1. Gender
2. Telephone number
3. Contact address, including postcode and town
4. Addresses of the loading and unloading locations, including street, postcode, town and country
for each 5. General details regarding the residential area at the loading and unloading locations, including floor level, lift availability, distance from front door to lorry, request for a parking space to be reserved, living space, number of people
moving 6. Services required (packing, unpacking)
7. Preferred removal date
8. Preferred transport insurance
9. Free text field for any other relevant information
10. Detailed list of removal items, including personal furniture and household effects
11. Further individual details in a free-text field.

When the message is sent, the following data is also stored:
1. The user’s
IP address 2. Date and time. Your consent

to the processing of this data is obtained as part of the submission process, and reference is made to this privacy policy.

Alternatively, you may contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored.

In this context, the data will not be disclosed to third parties. The data will be used exclusively for the purpose of handling the correspondence. 2

. Legal basis for data processing Where the user has given their consent, the legal basis

for processing the data is Article 6(1)(a) of the GDPR.

The legal basis for processing data transmitted when sending an email is Article 6(1)(f) of the GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

3. Purpose of data processing We

process the personal data entered via the contact form solely for the purpose of handling the enquiry. In the case of contact via email, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

4. Duration of storage The

data will be erased as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data entered via the contact form and that sent by email, this is the case once the relevant conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved. Any

personal data collected additionally during the submission process will be deleted within seven days at the latest.

5. Right to object and right to erasure

The user may withdraw their consent to the processing of personal data at any time. If the user contacts us, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

An objection to the storage of personal data may be made by telephone, post, fax or email using the following contact details:

Arnold & Hanl Umzugslogistik GmbH
Am Hirschhügel 4–8 
63128 Dietzenbach
Germany

Tel: +49 (0)6074 91440-0
Fax: +49 (0)6074 91440-16
Email: info@ArnoldHanl.de
www.arnoldhanl.de

In this case, all personal data stored in the course of establishing contact will be deleted.



 

IX. Rights of the data subject

If your personal data is being processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right of access 

You may request confirmation from the controller as to whether personal data relating to you is being processed by us.

If such processing is taking place, you may request the following information from the controller:

1. the purposes for which the personal data is processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom personal data relating to you have been or will be disclosed;
4. the envisaged period for which the personal data relating to you will be stored or, if it is not possible to provide specific details in this regard, the criteria used to determine the storage period;
5. the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the controller, or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. any available information on the origin of the data, where the personal data are not collected from the data subject;
8. the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR and – at least in such cases – meaningful information about the logic involved, as well as the significance and the intended consequences of such processing for the data subject.

You have the right to request information as to whether personal data concerning you is being transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards in accordance with Article 46 of the GDPR in relation to the transfer.

2. Right to rectification

You have the right to request that the controller rectify and/or complete the personal data concerning you where the personal data being processed is inaccurate or incomplete. The controller must carry out the rectification without delay.

3. Right to restriction of processing

You may request the restriction of the processing of your personal data 
under the following conditions:

1. where you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use;
3. the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defend legal claims, or
4. if you have objected to the processing in accordance with Article 21(1) of the GDPR and it has not yet been determined whether the controller’s legitimate grounds override your grounds.

Where the processing of your personal data has been restricted, such data – apart from its storage – may only be processed with your consent or for the purposes of establishing, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.

If the restriction on processing has been imposed in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to erasure

a. Obligation to erase data 

You may request that the controller erase personal data relating to you without delay, and the controller is obliged to erase such data without delay if any of the following grounds apply:

1. The personal data relating to you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You withdraw your consent on which the processing was based in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
3. You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
4. The personal data relating to you has been processed unlawfully.
5. The erasure of the personal data relating to you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
6. The personal data concerning you was collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.

b. Notification to third parties 

Where the controller has made the personal data relating to you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, the controller shall, taking into account the available technology and the costs of implementation, take reasonable measures, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of all links to that personal data or of copies or replicas of that personal data.

c. Exceptions

The right to erasure does not apply where the processing is necessary 

1. for the exercise of the right to freedom of expression and information;
2. to comply with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, in so far as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of such processing; or
5. for the establishment, exercise or defence of legal claims.

5. Right to be informed

If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom your personal data have been disclosed of such rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed by the controller of the identity of these recipients.

6. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that 

1. the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another, insofar as this is technically feasible. This must not adversely affect the freedoms and rights of other individuals.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object 

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where personal data relating to you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for the purposes of direct marketing, your personal data will no longer be processed for those purposes. In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you have the option of exercising your right to object by means of automated procedures using technical specifications.

8. Right to withdraw consent under data protection law 

You have the right to withdraw your consent under data protection law at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal.

9. Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and the data controller,
2. is authorised by Union or Member State law to which the controller is subject, and that law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests; or
3. is based on your explicit consent.

However, such decisions must not be based on special categories of personal data as referred to in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to safeguard your rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to set out your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your usual place of residence, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

 

 


 

X. Disclosure of personal data to third parties

1. Facebook Plugins (Like & Share buttons)

Plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated into our website. You can recognise the Facebook plugins by the Facebook logo or the ‘Like’ button on our website. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins. When you visit our website, the plugin establishes a direct connection between your browser and the Facebook server. This informs Facebook that you have visited our site using your IP address. If you click the Facebook ‘Like’ button whilst logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to associate your visit to our pages with your user account. Please note that, as the provider of this website, we have no knowledge of the content of the data transmitted or how it is used by Facebook. Further information on this can be found in Facebook’s privacy policy at: https://de-de.facebook.com/policy.php. If you do not wish Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

2. Twitter Plugin

Functions from the Twitter service are integrated into our website. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the ‘Retweet’ function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. Please note that, as the provider of this website, we have no knowledge of the content of the data transmitted or how it is used by Twitter. Further information on this can be found in Twitter’s privacy policy at: https://twitter.com/privacy.

You can change your privacy settings on Twitter in your account settings at twitter.com/settings/account.

3. Google+ Plugin

Our pages use features from Google+. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Collection and sharing of information: You can use the Google+ button to publish information worldwide. The Google+ button enables you and other users to receive personalised content from Google and our partners. Google stores both the information that you have given a +1 to a piece of content and information about the page you were viewing when you clicked +1. Your +1s may appear as recommendations alongside your profile name and photo in Google services, such as in search results or on your Google profile, or elsewhere on websites and in adverts across the internet.

Google records information about your +1 activity to improve Google services for you and others. To use the Google+ button, you need a public Google profile that is visible worldwide and must include at least the name you have chosen for the profile. This name is used across all Google services. In some cases, this name may also replace another name you have used when sharing content via your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.

Use of the information collected: In addition to the purposes explained above, the information you provide will be used in accordance with Google’s applicable privacy policy. Google may publish aggregated statistics on users’ +1 activity or share these with users and partners, such as publishers, advertisers or affiliated websites.

4. Instagram Plugin

Functions of the Instagram service are integrated into our pages. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This enables Instagram to associate your visit to our website with your user account. Please note that, as the provider of this website, we have no knowledge of the content of the data transmitted or how it is used by Instagram.

Further information on this can be found in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

5. Pinterest Plugin

On our website, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (‘Pinterest’).

When you visit a page containing such a plugin, your browser establishes a direct connection to Pinterest’s servers. In doing so, the plugin transmits log data to Pinterest’s server in the USA. This log data may include your IP address, the addresses of the websites you have visited that also contain Pinterest features, the type and settings of your browser, the date and time of the request, how you use Pinterest, and cookies.

Further information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights in this regard and options for protecting your privacy, can be found in Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy.

6. YouTube

Our website uses plugins from the YouTube website, which is operated by Google. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages featuring a YouTube plugin, a connection is established with YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of presenting our online content in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

 

7. Google Fonts in connection with the YouTube player

When the YouTube player is loaded, additional resources required for the player’s display may be retrieved from servers belonging to the Google group of companies. These may include, in particular, fonts or font files from Google Fonts. 

When these resources are retrieved, the IP address of the end device used is transmitted to Google for technical reasons. In addition, information such as browser type, operating system, language settings, the time of retrieval and the previously visited page may be processed. The font files are used to ensure the YouTube player is displayed consistently and correctly from a technical perspective.

According to Google, no cookies are set via the Google Fonts API. Google also states that it does not use the data processed via the Fonts API to create user profiles or for personalised advertising. 

Google Fonts are not integrated independently on this website, but are loaded exclusively in conjunction with the YouTube player. The YouTube player and the associated resources are only activated once you have consented to the use of external media via our cookie settings. 

The legal basis is your consent in accordance with Article 6(1)(a) of the GDPR and, insofar as information is stored on or read from your device, Section 25(1) of the TDDDG. You may withdraw your consent at any time with future effect via the cookie settings. 

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It cannot be ruled out that data may be processed by Google LLC in the USA and in other third countries.

Further information on the processing of personal data by Google can be found at: https://policies.google.com/privacy?hl=de


 

XI. Website analytics services

1. Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called ‘cookies’. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is usually transmitted to a Google server in the USA and stored there. The storage of Google Analytics cookies is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

a. IP anonymisation
We have enabled the IP anonymisation feature on this website. This means that your IP address is truncated by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

b. Browser plug-in
You can prevent the storage of cookies by adjusting the settings in your browser software accordingly; however, we would like to point out that, in this case, you may not be able to make full use of all the functions of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
c
. Objecting to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the collection of your data during future visits to this website: Disable Google Analytics. Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
d
. Data processing
on behalf of a client We have entered into a contract with Google for data processing on behalf of a client and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

e. Demographic features in Google Analytics
This website uses the ‘demographic features’ function of Google Analytics. This enables reports to be generated that provide information on the age, gender and interests of website visitors. This data is derived from Google’s interest-based advertising and from visitor data provided by third parties. This data cannot be attributed to any specific individual. You can disable this feature at any time via the ad settings in your Google Account, or generally prevent Google Analytics from collecting your data as described in the section ‘Objection to data collection’.

 

 


 

XII. Advertising and Marketing Services

1. Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature enables the advertising audiences created using Google Analytics Remarketing to be linked to the cross-device features of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages – which have been tailored to you based on your previous usage and browsing behaviour on one device (e.g. a mobile phone) – can also be displayed on another of your devices (e.g. a tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google Account for this purpose. This enables the same personalised advertising messages to be displayed on any device on which you sign in with your Google Account.

To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create audiences for cross-device advertising. You can permanently opt out of cross-device remarketing/targeting by disabling personalised advertising in your Google Account; to do so, follow this link: https://myadcenter.google.com/.

The aggregation of the data collected in your Google Account is based solely on your consent, which you may give or withdraw via Google (Article 6(1)(a) of the GDPR). In the case of data collection processes that are not consolidated within your Google Account (e.g. because you do not have a Google Account or have objected to the consolidation), the collection of data is based on Article 6(1)(f) of the GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of website visitors for advertising purposes.
Further
information and the data protection provisions can be found in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/.

2. Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising programme provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google AdWords, we use what is known as conversion tracking. When you click on an advert placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the web browser stores on the user’s computer. These cookies expire after 30 days and are not used to identify users personally. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advert and was redirected to that page.

Each Google AdWords customer is assigned a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information collected via the conversion cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking. Clients are informed of the total number of users who have clicked on their advert and been redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily disabling the Google conversion tracking cookie via your web browser’s user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
Further
information on Google AdWords and Google Conversion Tracking can be found in Google’s privacy policy: https://www.google.de/policies/privacy/.

You can configure your browser so that you are notified when cookies are set and can choose to allow cookies only on a case-by-case basis, block cookies in specific cases or generally, and enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.

3. Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

reCAPTCHA is designed to verify whether data entry on our websites (e.g. in a contact form) is carried out by a human or by an automated programme. To this end, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the purposes of the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, the length of time the website visitor spends on the website, or the mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place. Data processing is carried out on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web services from malicious automated scraping and spam.

Further information on Google reCAPTCHA and Google’s privacy policy can be found via the following links: https://policies.google.com/privacy?hl=de&gl=de and https://www.google.com/recaptcha/about/.

4. Facebook Pixel

Our website uses the Facebook visitor action pixel, provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), for conversion tracking.

This enables the behaviour of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advert. This allows the effectiveness of Facebook adverts to be analysed for statistical and market research purposes, and enables future advertising campaigns to be optimised.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions regarding the identity of users. However, the data is stored and processed by Facebook, meaning that a link to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook’s Data Use Policy. This enables Facebook to display adverts on Facebook pages as well as outside of Facebook. As the website operator, we have no control over this use of the data.
You can find further information on the protection of your privacy
in Facebook’s Privacy Policy: https://www.facebook.com/about/privacy/.

You can also disable the ‘Custom Audiences’ remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

To do this, you must be logged in to Facebook. If you do not have a Facebook account, you can opt out of Facebook’s usage-based advertising on the European Interactive Digital Advertising Alliance website: https://www.youronlinechoices.com/de/praferenzmanagement/.
5
. Google Maps

This site uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer.

The use of Google Maps is in the interests of presenting our online services in an attractive manner and ensuring that the locations specified on our website are easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
Further
information on the handling of user data can be found in Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

 

 


XIII. Internal processing procedures

A) Purpose of data collection, processing or use

The main purpose is the collection, processing and use of data on behalf of the company to fulfil customer orders. Specifically, this includes: customer management and acquisition, appointment scheduling, contract processing, service provision, invoicing, purchasing of goods and payment transactions.

1. Data collection from prospective customers

We collect the following data from prospective customers who request a quote from us:
• Name, address, size of the flat, contact details (telephone, email)
• Address of the new residence
• Photographs of furniture or removal goods 2

. Data collection from customers

We collect the following data from our customers:
• Name, address, size of the property, contact details (telephone, email)
• Address of the new residence
• Photographs of furniture or removal goods
• Depending on the order, we may pass on your data to subcontractors and/or tradespeople

B) Legal basis for processing

The legal basis for the processing of our customers’ personal data is Article 6(1)(b) of the GDPR, according to which processing is permitted for the performance of a contract with the data subject.

C) Recipients or categories of recipients to whom the data is

disclosed As a general rule, we do not disclose our customers’ personal data to third parties, unless such disclosure is mandatory under statutory provisions or strictly necessary for the fulfilment of the contract.

D) Transfer of data to third countries


There are no plans to transfer data to countries outside the EU or the EEA (third countries).

E) Retention period for personal data

collected As a general rule, we delete the data once the purpose for which it was collected no longer applies, e.g. upon termination of a contractual relationship, provided that no statutory retention obligations prevent such deletion. If deletion is not possible – for example, where data is stored in an electronic archiving system – it will be blocked from further processing.
The retention period or deletion deadlines for customer data depend on the type of data. We maintain a detailed list of the categories and types of data we process in an electronic record of processing activities in accordance with Article 30 of the GDPR, which we are happy to make available to data subjects on request. We do not delete data that we require to establish, exercise or defend legal claims, in accordance with Article 17(3)(e) of the GDPR.

F) Right of access, rectification, erasure and restriction of processing

You have the right to obtain information at any time about your personal data stored by us. You also have the right to have your personal data rectified, restricted or, apart from the mandatory data retention required for business purposes, erased. To ensure that a request to restrict data can be accommodated at any time, this data must be retained in a restriction file for monitoring purposes. You may also request the erasure of the data, provided there is no statutory obligation to retain it. Where such an obligation exists, we will block your data upon request.

G) Consent

You may amend or withdraw your consent with future effect by notifying us or our external data protection officer accordingly.

H) Provision of personal data

In order to fulfil the contract, the client or the data subject is obliged to provide personal data to the extent necessary for the fulfilment of the contract. It is the client’s responsibility to provide the contractor or the relevant authorities only with the data necessary for the performance of the contract (principle of minimal data collection).

I) Right to lodge a complaint with the supervisory authority

You have the right to contact the data protection supervisory authority and to obtain information there regarding your rights under the Federal Data Protection Act (BDSG) and other data protection regulations, including the General Data Protection Regulation (GDPR). Furthermore, the supervisory authority is the point of contact for complaints regarding the processing of personal data. The

competent supervisory authority for Hesse is:

The Hessian Data Protection Commissioner
PO Box 3163
65021 Wiesbaden
Telephone: +49 611 1408 – 0
Fax: +49 611 1408 – 611
Email: Poststelle@datenschutz.hessen.de



We look forward to hearing from you