Privacy Policy

Below, we inform you about the processing of personal data by us as the controller when you use our website. The processing of personal data (e.g. the name, address, email address or telephone number of a data subject) is carried out in accordance with the statutory provisions, in particular the requirements of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Controller

The controller within the meaning of the GDPR, the national data protection laws of the Member States and other data protection provisions is:

Rethinking Places GmbH

Trautenaustr. 16

10717 Berlin

Germany

Tel.: +49 30 83795269

Email: hello@rethinkingplaces.com

Data Processing

Personal data means any information relating to an identified or identifiable natural person, such as your name or email address. ‘Processing of data’ means, in particular, the collection, storage, use and transmission of your data.

Where we obtain the data subject’s consent for personal data processing operations, Art. 6(1), first sentence, lit. a GDPR serves as the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6(1), first sentence, lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.

​

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1), first sentence, lit. c GDPR serves as the legal basis.

Where vital interests of the data subject or of another natural person make the processing of personal data necessary, Art. 6(1), first sentence, lit. d GDPR serves as the legal basis.

Where processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6(1), first sentence, lit. f GDPR serves as the legal basis for the processing.

The personal data of data subjects will be erased or blocked as soon as the purpose of storage no longer applies. Storage after the purpose of storage has ceased to apply may take place if this is provided for by law. The data will also be blocked or erased when a storage period prescribed by the aforementioned provisions expires, unless continued storage of the data is necessary for the conclusion or performance of a contract.

Further information on the legal bases for processing and the storage period for specific personal data can be found in the respective subsection.

1. Rights of the Data Subject

The Rights in Detail

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller (where applicable, subject to any further requirements stipulated in the relevant provisions):

• Right of access (Art. 15 GDPR),
• Right to rectification and erasure (Arts. 16, 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to withdraw consent if you have consented to the processing,
• Right to data portability (Art. 20 GDPR)

Right to Object

Where, as explained above, we process personal data in order to safeguard our legitimate interests that prevail in the context of a balancing of interests, you may object to this processing with effect for the future, but only on grounds relating to your particular situation (Art. 21 GDPR). If processing is carried out for direct marketing purposes, you may exercise this right at any time without stating any grounds. After you have legitimately exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims. This restriction does not apply where the processing is carried out for direct marketing purposes.

Complaint

If you believe that we are not respecting your rights to the required extent, you have the right to lodge a complaint with a data protection supervisory authority concerning our processing of your personal data. Before doing so, however, we would appreciate it if you informed us of your concerns first so that we can remedy the reason for the complaint ourselves.

2. Visiting the Website and Log Files

• Scope of the Processing of Personal Data

Each time our website is accessed, our system automatically collects the following data and information from the computer system of the device accessing it.

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites from which the user’s system reaches our website
• Websites accessed by the user’s system via our website

These data are stored in our system’s log files.

3. Legal Basis for the Processing of Personal Data

The legal basis for the collection and storage of the data is Art. 6(1) lit. f GDPR.

3.1. Purpose of Data Processing

The temporary storage of the IP address is necessary in order to display the website to you. For this purpose, the IP address must remain stored for the duration of the session. The remaining data are collected for technical reasons in order to ensure stability and security.

This also constitutes the legitimate interest in processing pursuant to Art. 6(1) lit. f GDPR

3.2. Storage Period

The data will be erased as soon as they are no longer necessary for achieving the purpose for which they were collected. Where the data are collected to provide the website, this is the case when the respective session has ended.

Where the data are stored in log files, this is the case after no more than seven days. Storage beyond this period is possible. In this case, the users’ IP addresses will be erased or anonymised so that the accessing client can no longer be identified.

4 Contact Form

4.1 Scope of the Processing of Personal Data

You can use the contact form available on our website to contact us in this way. When it is used, the data entered there are transmitted to us and stored by us. These include at least the following data:

• First name
• Last name
• Email address
• Your message to us

At the same time, the following additional data are collected and stored when the enquiry is submitted:

• Your IP address
• Date and time of use

We process the data collected in order to respond to and deal with your enquiries. You are not obliged to provide us with your personal data. However, we will then be unable to respond to the enquiry.

5. Legal Basis for the Processing of Personal Data

If you transmit your data to us in a pre-contractual context, for example by requesting that we send you an offer or by asking questions about our products, Art. 6(1) lit. b GDPR is the legal basis. In all other cases, Art. 6(1) lit. f GDPR is the legal basis.

5.1 Purpose of Data Processing

The processing of the personal data from the input form serves solely to handle the contact request. If contact is made by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed when the form is submitted serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

5.2 Storage Period

Your data will be erased when it can be inferred from the circumstances that your enquiry or the matter concerned has been conclusively resolved.

The additional personal data collected when the form is submitted will be erased after a period of no more than seven days.

5.3 Other Forms of Contact

5.3.1 Scope of the Processing of Personal Data

If you contact us by email, by post or in another way, the data you provide (e.g. your email address and, where applicable, your name and telephone number) will be processed by us in order to handle or respond to your enquiry.

5.3.2 Legal Basis for the Processing of Personal Data

If you transmit your data to us in a pre-contractual context, for example by requesting that we send you an offer or by asking questions about our products, Art. 6(1) lit. b GDPR is the legal basis. If you have given us consent to contact you, Art. 6(1) lit. a GDPR is the legal basis. In all other cases, Art. 6(1) lit. f GDPR is the legal basis.

5.3.3 Purpose of Data Processing

The processing of personal data serves solely to handle the contact request. Where applicable, this also constitutes the necessary legitimate interest in processing the data.

5.3.4 Storage Period

Your data will be erased when it can be inferred from the circumstances that your enquiry or the matter concerned has been conclusively resolved.

6. Newsletter

Scope of the Processing of Personal Data

You can subscribe to a newsletter on our website. To do so, you must enter the following data in the relevant form on the website: email address.

These data are transmitted to us and stored by us:

• First name
• Last name
• Company
• Email address

​

At the same time, the following additional data are collected and stored when the enquiry is submitted:

• The user’s IP address
• Date and time of use

​

During the registration process, your consent is obtained for the processing of the data and reference is made to this Privacy Policy.

Legal Basis for the Processing of Personal Data

The legal basis for the processing of the data is Art. 6(1) lit. a or lit. f GDPR.

Purpose of Data Processing:

The collection and storage of the email address serve to enable us to send you the newsletter.

Storage Period:

The data collected will be stored for as long as the newsletter subscription remains active. You may cancel receipt of our newsletter at any time, i.e. withdraw your consent or object to further receipt. You will find a link for unsubscribing from the newsletter at the end of each newsletter.

7. Categories of Recipients of Personal Data

Personal data are transmitted to third parties only in the cases specified in this Policy or where we expressly inform you of this elsewhere. In addition, we use external processors (Art. 28 GDPR) in some cases to provide our services (e.g. hosting providers, email providers). However, they process personal data exclusively within the European Union.