Privacy Policy

Below, we inform you about the processing of personal data by us, as the data controller, when you use our website. The processing of personal data (e.g., name, address, email address, or telephone number of a data subject) is carried out in accordance with legal provisions, in particular the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

The controller within the meaning of the GDPR and the national data protection laws of the member states as well as other data protection regulations is:

Rethinking Places GmbH

Trautenaustr. 16

10717 Berlin

Germany

Tel.: +49 30 60530872

Email: info@rethinkingplaces.com

Personal Data refers to all information relating to an identified or identifiable natural person, such as your name or email address. The term “processing of data” particularly includes the collection, storage, use, and transmission of your data.

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) sentence 1 (a) GDPR serves as the legal basis.

When processing personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) sentence 1 (b) GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre-contractual measures.

Where processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 (1) sentence 1 (c) GDPR serves as the legal basis.

In the event that processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Art. 6 (1) sentence 1 (d) GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and such interests are not overridden by the interests, fundamental rights, or freedoms of the data subject, Art. 6 (1) sentence 1 (f) GDPR serves as the legal basis for processing.

Personal data of data subjects will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may continue after the purpose ceases if required by law. Data will also be deleted or blocked when a legally prescribed retention period expires, unless further storage of the data is necessary for the conclusion or fulfillment of a contract.

Further information on the legal bases for processing and storage duration of specific personal data can be found in the respective subsections.

1. Rights of the Data Subject

Detailed Rights

If your personal data are processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller (subject to additional requirements as set out in the respective provisions):

• Right of access (Art. 15 GDPR),

• Right to rectification and erasure (Art. 16, 17 GDPR),

• Right to restriction of processing (Art. 18 GDPR),

• Right to withdraw consent if you have consented to the processing,

• Right to data portability (Art. 20 GDPR).

Right to Object

Where we process personal data to safeguard our overriding legitimate interests within the framework of a balancing of interests as explained above, you may object to such processing with effect for the future — but only on grounds relating to your particular situation (Art. 21 GDPR). If processing is carried out for direct marketing purposes, you may object at any time without providing reasons. Upon valid objection, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where processing serves the establishment, exercise, or defense of legal claims. This limitation does not apply to processing for direct marketing purposes.

Complaint

If you believe that we are not respecting your rights to the extent required, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. However, we would appreciate it if you contact us first so that we can resolve your concerns directly.

2. Visiting the Website and Log Files

Scope of Personal Data Processing

Each time our website is accessed, our system automatically collects the following data and information from the computer system of the accessing device:

• Information about the browser type and version used

• The user’s operating system

• The user’s internet service provider

• The user’s IP address

• Date and time of access

• Websites from which the user’s system accessed our website

• Websites accessed by the user’s system via our website

These data are stored in our system’s log files.

3. Legal Basis for Processing Personal Data

The legal basis for collecting and storing the data is Art. 6 (1) (f) GDPR.

3.1. Purpose of Data Processing

Temporary storage of the IP address is necessary to display the website to you; the IP address must remain stored for the duration of the session. The other data are collected for technical reasons to ensure stability and security.

This also constitutes the legitimate interest in processing pursuant to Art. 6 (1) (f) GDPR.

3.2. Duration of Storage

The data are deleted once they are no longer required for the purpose for which they were collected. In the case of data collected to provide the website, this occurs when the respective session ends.

Data stored in log files are deleted after no more than seven days. Longer storage is possible; in such cases, the users’ IP addresses are deleted or anonymized so that assignment to the accessing client is no longer possible.

4. Contact Form

4.1. Scope of Personal Data Processing

You can use the contact form on our website to get in touch with us. When using it, the data entered into the form are transmitted to us and stored. These include at least:

• First name

• Last name

• Email address

• Your message to us

At the same time, the following additional data are collected and stored upon submission:

• Your IP address

• Date and time of use

The collected data are processed to respond to and handle your inquiries. You are not obliged to provide personal data; however, we will not be able to answer your inquiry without them.

5. Legal Basis for Processing Personal Data

If you transmit your data in a pre-contractual context (e.g., to request an offer or ask about our products), Art. 6 (1) (b) GDPR is the legal basis. In all other cases, Art. 6 (1) (f) GDPR applies.

5.1. Purpose of Data Processing

Processing personal data from the input form serves solely to handle your inquiry. In the case of contact by email, this also constitutes the legitimate interest in processing the data.

The additional personal data collected during submission serve to prevent misuse of the contact form and to ensure the security of our IT systems.

5.2. Duration of Storage

Your data will be deleted when it can be inferred from the circumstances that your inquiry or the related matter has been conclusively resolved.

The additional personal data collected during submission will be deleted no later than seven days thereafter.

5.3. Other Means of Contact

5.3.1. Scope of Personal Data Processing

If you contact us via email, post, or other means, the data you provide (e.g., email address, name, telephone number) will be processed to handle or respond to your request.

5.3.2. Legal Basis for Processing Personal Data

If you transmit your data in a pre-contractual context (e.g., requesting an offer or information about our products), Art. 6 (1) (b) GDPR applies. If you have given consent to be contacted, Art. 6 (1) (a) GDPR applies. In all other cases, Art. 6 (1) (f) GDPR applies.

5.3.3. Purpose of Data Processing

Processing personal data serves solely to handle your contact request. This may also constitute the legitimate interest in processing.

5.3.4. Duration of Storage

Your data will be deleted when it can be inferred that your inquiry or the related matter has been conclusively resolved.

6. Newsletter

Scope of Personal Data Processing

You can subscribe to our newsletter via our website. To do so, you must enter the following data in the corresponding form: email address.

The following data are transmitted to and stored by us:

• First name

• Last name

• Company

• Email address

At the same time, the following additional data are collected and stored upon submission:

• The user’s IP address

• Date and time of submission

During registration, your consent to data processing is obtained and reference is made to this Privacy Policy.

Legal Basis for Processing Personal Data

The legal basis for processing is Art. 6 (1) (a) or (f) GDPR.

Purpose of Data Processing:

Collecting and storing the email address enables us to send you the newsletter.

Duration of Storage:

The collected data are stored as long as the newsletter subscription remains active. You may unsubscribe at any time, thereby withdrawing your consent or objecting to further receipt. A link to unsubscribe is included at the end of each newsletter.

7. Categories of Recipients of Personal Data

Personal data will only be disclosed to third parties in the cases mentioned in this statement or if we explicitly inform you elsewhere. In addition, we partially use external processors (Art. 28 GDPR) to provide our services (e.g., hosting providers, email service providers). These processors handle personal data exclusively within the European Union.