en

Data protection

Privacy policy

Dear Sir or Madam, the protection and responsible handling of your personal data is a matter of course for us. The processing of your personal data is carried out in accordance with the provisions of the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR).

Below, we would like to inform you about the processing of your personal data by us, as well as your data protection rights.

I. Contact / Responsible Party

The entity responsible for processing your personal data is:

Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH
Ummelner Str. 4-6
33649 Bielefeld

E-Mail: carina.marschall@bei-heins.de

You can contact our Group Data Protection Officer at:

GOLDBECK GmbH
Data Protection
Ummelner Str. 4-6
33649 Bielefeld
dataprotection@goldbeck.de

II. Origin of the personal data

Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH processes personal data that has been expressly provided by you and that it has received from you in the course of the business relationship.

Additionally, Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH processes personal data that it has lawfully obtained from accessible sources (e.g., commercial and association registers, press, media) and is permitted to process.

In addition, usage data is generated when you visit our website. During your visit, the data is recorded anonymously, and no personal user profiles are created.

Data will only be shared with third parties in the case of booking co-working spaces, event spaces, and overnight accommodations with our partners Straiv and Mews, and, depending on the chosen payment method, with the payment service provider Mews Payment (with the payment provider Stripe).

III. Categories of personal data

We process the following categories of personal data about you:

  • Website IP address of the requesting device
  • Date and time of access
  • Name and URL of the accessed file
  • Other information necessary for collaboration

Booking a Co-Working Space

  • First name and last name
  • A valid email address
  • Billing address
  • Depending on the payment method: Bank details, IBAN and BIC, credit card/debit card information

Overnight Stay in the Boarding House (for GOLDBECK employees and guests only)

  • First name and last name
  • A valid email address
  • Organizational unit
  • Company details
  • Date of birth, home address, and nationality (for registration form details)

And other information related to the booking (e.g., allergy information, booking contact details).

  • Business partners
  • Salutation, first name, and last name
  • A valid email address
  • Billing Address
  • Phone number
  • Employer/Position, website, tax ID, account details

Booking of event spaces

  • Salutation, first name, and last name
  • A valid email address
  • Billing address
  • Other information related to the booking (e.g., allergy information, booking contact details)

IV. Purposes of processing personal data

Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH processes personal data within the meaning of Article 4(2) GDPR for the purpose of:

  • To identify you as our visitor or business partner
  • To inform you about new promotions and offer you the opportunity to participate in changes, updates, and events at our property
  • For correspondence (including complaint management) with you
  • For invoicing and billing of co-working spaces or event spaces, as well as services of the boarding house
  • To assert legal claims and for legal defense
  • To make the use of our online services more appealing for you

 

V. Legal basis for data processing

The processing of your personal data is carried out in accordance with the provisions of the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR).

1. Consent pursuant to Article 6(1) Sentence 1(a) GDPR

If you have given Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH consent to process your personal data for the booking and billing of co-working spaces, overnight accommodations in the boarding house, or event spaces, the lawfulness of this processing is based on your consent, Article 6(1) Sentence 1(a) GDPR. Any consent given may be withdrawn at any time. Please note that the withdrawal will only take effect in the future. Processes that have already occurred before the withdrawal are not affected by this.

2. For the fulfillment of contractual obligations, Article 6(1) Sentence 1(b) GDPR

At your request or after being commissioned with a specific delivery or service, the data processing takes place for the purposes mentioned in section IV and is necessary for the proper handling of the contractual relationship and for the mutual fulfillment of obligations arising from the contract.

3. To fulfill a legal obligation to which Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH is subject, Article 6(1) Sentence 1(c) GDPR.

When staying at our boarding house, we process your home address and nationality to comply with the legal registration requirements under the Federal Registration Act (Bundesmeldegesetz).

4. To safeguard the legitimate interests of Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH in accordance with Article 6(1) Sentence 1(f) GDPR.

From the contractual relationships already established between you and Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH, there is a legitimate interest of Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH in the processing and transmission of personal data for internal administrative purposes. In order to continue providing you with information about new offers and events and to continue the collaboration in the future, the processing of your personal data is necessary.

 

VI. Recipients of the data / Categories of recipients

Within Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH, those departments that require the data to fulfill contractual obligations will have access to your data. Additionally, third-party processors (Article 28 GDPR) engaged by Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH may receive data for these purposes. These include the following companies: Straiv GmbH, Mews Systems B.V., Stripe Payments Europe Limited, N+P Informationssysteme GmbH.

 

VII. Duration of storage

As far as necessary, Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH processes and stores personal data for the duration of the business relationship. This also includes the initiation and execution of the contract.

Personal data required for the duration of warranty and guarantee claims will be stored for this period.

Additionally, Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH stores personal data as long as it is legally required to do so. Corresponding retention and documentation obligations arise from the German Commercial Code (HGB) and the Fiscal Code (AO). The retention periods specified there are 6 years according to commercial law requirements under § 257 HGB and up to 10 years due to tax requirements under § 147 AO. In the case of booking an overnight stay at the boarding house, there is a retention obligation of 1 year after the departure of the hosted person according to § 30 of the Federal Registration Act, with an obligation to delete the data within the following 3 months.

 

VIII. Your rights

1. Information

You have the right, in accordance with Article 15 GDPR, to obtain information about the personal data stored about you.n

2. Correction

If incorrect personal data has been processed, you have the right to correction in accordance with Article 16 GDPR.

3. Deletion, restriction of processing, objection

If the legal requirements are met, you can request the deletion (Article 17 GDPR) or restriction of processing (Article 18 GDPR) of your personal data, as well as object to the processing of your data (Article 21 GDPR).

4. Data portability

In accordance with Article 20 GDPR, you have the right to data portability for data that is processed automatically based on your consent or a contract with you. This allows you to request the transfer of your personal data to another data controller.

These rights can be asserted against Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH at the address provided in section I „Responsible entity.“n

5. Right to lodge a complaint

If you believe that data processing violates data protection laws, you have the right to file a complaint with a data protection supervisory authority of your choice (Article 77 GDPR in conjunction with Section 19 BDSG).

 

IX. Right to object under Article 21 GDPR

You have the right to object to the processing of your personal data on grounds related to your particular situation, at any time, where the processing is based on legitimate interests or the performance of a task carried out in the public interest or in the exercise of official authority. In such cases, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.

If you lodge an objection, Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

In individual cases, Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH processes your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of your data for such advertising purposes. If you object to the processing for direct marketing purposes, Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH will no longer process your personal data for these purposes.

The objection can be made without any formal requirements and should ideally be addressed to:

Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH
Ummelner Str. 4-6
33649 Bielefeld
E-Mail widerspruch@bei-heins.de

 

X. Disclosure of personal data to third parties

The disclosure of your personal data by Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH to third parties will not occur for purposes other than those listed below. Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH will only share your personal data with third parties if:

• You have explicitly consented to the disclosure to third parties in accordance with Article 6(1) sentence 1(a) GDPR.

• It is necessary for the execution of contractual relationships with you, in accordance with Article 6(1) sentence 1(b) GDPR;

• In the event that there is a legal obligation to disclose data, in accordance with Article 6(1) sentence 1(c) GDPR.

If we use data processors, we ensure through separate agreements (so-called data processing agreements) that your data is protected with the processor in the same way as it is with us.

 

XI. Transmission to other countries

Data transmission to entities in countries outside the EU generally does not occur. However, transmission may take place in certain cases, such as:

  • to certified recipients, particularly based on Binding Corporate Rules (BCRs), EU Standard Contractual Clauses (SCCs), and Articles 45 and 47 of the GDPR;
  • based on your prior consent for this purpose, Article 49(1) sentence 1 letter a) of the GDPR.
  • if the transfer is necessary for the initiation or performance of a contract, Article 49(1) sentence 1 letter b) of the GDPR;

if this is necessary for the establishment, exercise, or defense of legal claims, Article 49(1) sentence 1 letter e) of the GDPR.

 

XII. Protection

Communication with Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH is generally encrypted.

 

XIII. Online presence on social media platforms

Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH maintains online presences on social networks and platforms (currently Facebook and Instagram) to communicate with business partners, potential customers, and users active there, and to inform them about its services. When visiting these networks and platforms, the terms of service and data processing policies of the respective operators apply.

Unless otherwise stated in our privacy notice, we process user data when they communicate with Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH on these social networks and platforms, for example, by posting content on our online presence or sending messages.

 

XIV. Social Media Plugins

Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH uses plugins from the social network Facebook on its website, based on legitimate interest under Article 6(1)(f) of the GDPR. These plugins are used to increase visibility and for analysis, optimization, and efficient operation of our online service.

Facebook is responsible for ensuring the privacy-compliant operation of the plugin. The integration of the plugin by Objekt Hochhaus Bielefeld Betriebsgesellschaft mbH follows the so-called 2-click method to best protect visitors to our website.

Facebook Social Media Plugins

Our website uses social media plugins from the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). These plugins can display interactive elements or content (e.g., videos, graphics, or text posts) and are identifiable by one of Facebook’s logos (a white “f” on a blue background, the terms “Like” or “Gefällt mir,” or a thumbs-up icon) or by the label “Facebook Social Plugin.”

You can view the list and appearance of Facebook Social Plugins here:

https://developers.facebook.com/docs/plugins/.

Facebook is certified under the EU-U.S. Data Privacy Framework, providing a guarantee of compliance with European data protection laws.

https.//de-de.facebook.com/privacy/policies/data_privacy_framework/

When you access a feature of this online service that includes such a plugin, your device establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your device and integrated into the online service. The processed data can be used to create user profiles.

We have no control over the extent of the data that Facebook collects through this plugin and are therefore informing you based on the information available to us.

By integrating the plugins, Facebook receives information that you have accessed the corresponding page of our online service. If you are logged into Facebook, Facebook can associate your visit with your Facebook account. When you interact with the plugins, such as clicking the Like button or leaving a comment, the corresponding information is transmitted directly from your device to Facebook and stored there.

Even if you are not a Facebook member, it is still possible for Facebook to obtain and store your IP address. According to Facebook, only an anonymized address is stored in Germany.

The purpose and scope of data collection, as well as the further processing and use of your data by Facebook, along with your rights and settings to protect your privacy, can be found in Facebook’s privacy policy:

https://www.facebook.com/about/privacy/.

If you are a Facebook member and do not want Facebook to collect data about you through this online service and link it to your member data stored on Facebook, you need to log out of Facebook and delete its cookies before using our online service. Additional settings and options to object to the use of your data for advertising purposes can be found within your Facebook profile settings:

https://www.facebook.com/settings?tab=ads or the US page https://www.aboutads.info/choices/ or the EU-page http://www.youronlinechoices.com/.

The settings are applied across platforms, meaning they will be implemented for all devices, such as desktop computers and mobile devices.

 

XV. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by these cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

If IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings. However, please note that if you do so, you may not be able to use all features of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Download Browser Plugin (new window) > https://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively, you can prevent the processing of your data by clicking on the following link. This will set an „opt-out cookie“ that prevents processing in your current browser.
Opt-out / Set Opt-out Cookie. For more information on terms of use and privacy, please visit http://www.google.com/analytics/terms/en.html or at http://www.google.de/intl/de/policies/privacy/

Anonymisation of IP Addresses. We would like to inform you that this website uses Google Analytics with the addition of the code „gat._anonymizeIp();“ to ensure the anonymised collection of IP addresses (known as IP masking).

 

XVI. Matterport

Our website includes so-called “Matterport Showcases.” These are interactive 3D tours provided by Matterport Inc., 352 East Java Drive, Sunnyvale, CA 94089, USA.

The integration of these services may involve the processing of personal data (e.g., IP addresses, usage data) by Matterport. Such processing may also take place in the United States. For data transfers to third countries, Matterport relies on the Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection.

For more information on how Matterport handles personal data, please refer to their privacy policy: https://matterport.com/legal/privacy-policy

XVII. ePrivacy Regulation

The visitor to our website has the option to consent to or decline the use of cookies at the beginning of their visit. This process is active and self-determined. If the user wishes to adjust this setting at a later time, they can do so at any time. To make changes, we ask the user to select the „Privacy“ section in the footer of our website and modify the privacy settings in the provided menu.

 

XVIII. Changes to Privacy Notice

The privacy notice is current as of November 2023 and is valid. Due to the ongoing development of our website, the services offered, or changes in legal or regulatory requirements, updates may be necessary. The most current privacy policy can be accessed and printed from the website under „Privacy“.