I. Name and address of the responsible person
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is the:
FU. Life Service GmbH*
Office Berlin: Heidestraße 19, D-10557 Berlin
Office Leipzig: Petersstraße 22/Sporergäßchen 2, D-04109 Leipzig
Office Frankfurt am Main: Kennedyallee 101, D-60596 Frankfurt am Main
*A company of the FU. Life Group
II. General information on data processing
1. Scope of the processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services. The collection and use of personal data of our users is regularly carried out only on a legal basis. An exception applies in those cases where a legal basis is not apparent, and the processing of the data can only be legitimized by consent.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.
Data deletion and storage duration
The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
III. Provision of the website and creation of log files
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
– Information about the browser type and version used
– The operating system of the user
– The IP address of the user
– Date and time of access
– Websites from which the user's system accesses our Internet site
– Websites that are called up by the user's system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
To ensure the confidentiality of communication with you, we use TLS encryption for transmission. According to the current state of the art, the 128-bit encryption possible with this can be considered secure. All browsers of the younger generation achieve this level of security. If necessary, you should update the browser on your PC.
2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.
3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR.
4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after 365 days at the latest.
IP addresses are logged completely for a maximum of 24 hours. After that, the last octet is deleted to make it anonymous, so that it is no longer possible to assign the calling client.
5. Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
IV. Web analytics through Google Analytics
1. Description and scope of the processing of personal data
This website uses Google Analytics, a web analytics service provided by Google, with your consent. LLC. . The data controller for users based in the EEA is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site, so that we can use the statistics and reports to improve our offer and make them more interesting for you as a user of our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google by the last octet within member states of the European Union or in other contracting states to the Agreement on the European Economic Area (so-called “IP Masking”). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. For easier management of the tool, we use Google Tag Manager.
Our website uses Google conversion tracking with your consent. This is a service offered by Google to measure and verify the success of our advertising campaigns and advertising measures. For this purpose, the advertisements are provided with a technical feature, such as an ID, which can be used to determine how a user interacts with our website after clicking on the advertisement and whether one of our services is actually used. If you have reached our website via an ad placed by Google, Google AdWords sets a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.
If you do not wish to participate in the tracking, you can refuse the setting of a cookie required for this - for example, via the cookie-consent banner displayed on the first visit of our website, via browser settings that generally deactivates the automatic setting of cookies, or by setting your browser so that cookies from the domain "googleleadservices. com" are blocked.
2. Legal basis for the processing of personal data
The legal basis for the processing your personal data as described above is in each case your prior consent pursuant to Art. 6 (1) lit. a GDPR. Insofar as neither an adequacy decision of the European Commission (e.g. for the USA) nor other appropriate safeguards for the transfer are in place for the transfer and processing of your personal data to countries outside the European Economic Area, your express prior consent pursuant to Art. 49 (1) lit. a GDPR constitutes the legal basis for the said processing.
3. Purpose of data processing
The processing of the users' personal data enables us to analyze the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website, its user-friendliness, our marketing measures and reach, as well as the content we provide to you.
According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
4. Duration of storage
The data is deleted as soon as it is no longer required for our recording purposes.
The cookie "_ga" from Google Analytics, which is stored on your computer, has a longest lifetime of 2 years. After that, it is automatically deleted.
5. Possibility of objection and removal
You can also prevent the collection of data generated by the Google Analytics cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools. google. com/dlpage/ gaoptout? hl=en.6. IP anonymization is active on this website. On behalf of the operator of this website based on a contract pursuant to Art. 28 GDPR, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In this respect, Google acts as a processor. Insofar as Google transfers your data, such as your IP address, to a server in the USA and processes it there, Google has, according to its own statements, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. In addition, in order to establish an adequate level of data protection, we have concluded with Google the EU standard contractual clauses provided by the European Commission, which can be found at the following link: https://business.safety.google/adsprocessorterms/sccs/c2p/.
V. Facebook Pixel (Visitor Activity Pixel)
Furthermore, we use advertising measures of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (Meta) or, if you are a resident of the EU, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter "Meta") (formerly Facebook) on our website for the purpose of advertising measures and including reach measurement. By integrating the so-called "Facebook Pixel" on our website, we can display our advertising campaigns to users of our website and the social network Facebook and measure and evaluate the success. This connection between our website and Facebook is technically carried out via the so-called "Facebook Pixel".
Due to the Facebook Pixel used, your browser automatically connects to the Facebook server when you visit our website and may store a cookie on your device. If you subsequently log in or are already logged in to the social networks Facebook or Instagram, the visit to our website or the click on a certain ad placed by Meta will be recorded in your profile. The user data collected in this respect does not allow us to identify you, as this data is anonymous for us. However, Meta processes and stores this data itself, so that it is possible for Meta to draw conclusions about your user profile. Even if you are not registered with the social networks Facebook or Instagram, it is possible that Meta will obtain your IP address and other identifying information and use them to build a profile.
The collected data may also be stored by Meta on servers in the USA or transmitted to Meta's servers in the USA. For these cases, Meta has stated that it has imposed a standard on itself that is equivalent to the former EU-US Privacy Shield and has agreed to comply with applicable data protection laws for international data transfers. In addition, we have agreed with Meta on the standard data protection clauses, the purpose of which is to ensure compliance with an adequate level of data protection in the third country.
The legal basis for the processing of your data is Art. 6 (1) lit. a GDPR and, insofar as personal data is transmitted to Facebook in the USA as part of the use and no adequacy decision of the European Commission or other appropriate safeguards within the meaning of Art. 46 GDPR are in place, Art. 49 (1) s.1 lit. a GDPR. For your right to revoke your consent at any time with effect for the future, please refer to Section VIII "Rights of data subjects" below.
A cookie is a small text file that is stored on your computer by the operator of a website. Cookies primarily serve to make website visits more comfortable and secure and to speed them up.
You have the option to change your browser settings so that cookies are blocked if necessary or are only allowed after individual approval. If you block the storage of cookies, you may not be able to fully use the interactive features on this or any other website.
Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) lit. a GDPR if the user has consented to this.
Purpose of data processing
The user data collected through technically necessary cookies are not used to create user profiles.
The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.
VII. Inquiries from prospective tenants via our website
For the purpose of entering into and concluding a lease agreement with us, prospective tenants have the opportunity to submit availability and information requests regarding our offers via our website. For this purpose, interested customers and potential tenants can send us an inquiry via our inquiry form. Within the framework of the inquiry form, the potential tenants and customers have to provide details about the following personal information:
· Company (optional),
· First and last name
· Email address, and
· Phone number
Furthermore, the prospective tenants have the possibility to enter individual messages regarding their request in a text field.
Insofar as the prospective tenant's inquiry concerns property offered by our affiliated companies within the meaning of §§ 15ff of the German Stock Corporation Act (Aktiengesetz - AktG), we will forward the information you have provided to the responsible affiliated company. These companies may request further information from you in this context. We have no influence on the request for this further information. Affiliated companies in this sense may be, for example:
· FU.Students Service GmbH, Heidestraße 19/19A, 10557 Berlin
VIII. Rights of data subjects:
You have the right:
– in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
– in accordance with Art. 16 GDPR to immediately demand the correction of incorrect or completion of your personal data stored by us;
– pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
– to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
– pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
– to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
– to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
1. (Advertising) Right of Objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of revocation or objection, an e-mail to email@example.com is sufficient.
2. Changes to data protection standards
Should a change to these data protection standards become necessary in the future, you will find the current status here at all times.