Book now L:Close

Hotels

View all hotels

Campus

To the Bold Campus

Stories

Gallery

Stories

Gallery

L:Guests 0 Adults, 0 Children
L:AddRoom

Data Protection & Disclaimer


Contact details of the responsible person at Bold Hotels

Morten GmbH
Aidenbachstraße 54
81379 Munich
Germany
Tel: +49 89 2000159-2000
Fax: +49 89 2000159-2900
Email: info@morten-group.com

Contact details of the responsible person at Bold Campus 

KTC Kommunikations- und Trainings-Center Königstein GmbH
Ölmühlweg 65
61462 Königstein
Germany
Tel:+49 6174 295-0
Fax: +49 6174 295-160
Email: info@bold-campus.com

Contact details of the data protection officer

David Brandauer Lawyer, LL.M.
Lawyer
Group Data Protection Officer
Morten Group GmbH
Aidenbachstraße 54
81379 Munich
Germany
Tel: +49 89 2441929-2151
Email: david.brandauer@morten-group.com 



Privacy Statement and Cookie Policy

The protection of your data is very important to us. Therefore, we will show you below how we are processing your personal data.

  • Data Categories; Data Sources

    • In principle, we process the personal data that you provide to us in the context of an enquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases and insofar as this is necessary for the performance of the contract, we also process personal data that has been permissibly taken from publicly accessible sources (e.g. commercial register, debtors' registers, Internet) or permissibly transmitted to us by third parties (e.g. credit agencies).
      This may include personal data (name, birthday, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract term, purchased services, cancellations), communication data (correspondence, e-mail correspondence), advertising data (advertising letters) as well as other, comparable categories of personal data.

  • Hosting

    • This website is hosted externally. The personal information collected on this website is stored on the servers of the host(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal equipment (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time. Our host(s) will only process your data to the extent necessary to fulfil their obligations and will follow our instructions in relation to that data. We use the following host(s): IWAY AG Badenerstrasse 569 CH-8048 Zürich

      We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is an agreement required by the Data Protection Act, which guarantees that the personal data of visitors to our website will only be processed in accordance with our instructions and in compliance with the GDPR.

  • General Processing of Visitor Data

    • The use of our website is generally possible without providing personal data.
      However, we would like to point out that access data is also collected in this case and stored in the server log files. In particular, this involves the following data:

      • Browser type and browser version,
      • operating system,
      • referrer URL,
      • host name of accessing computer,
      • date and time of your visit,
      • IP address.

      As a matter of principle, we evaluate this information in anonymised form to defend against attacks and to improve our offer (processing of personal data within the framework of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f) DSGVO) and subsequently delete it. As a rule, the data cannot be traced back to your person and is not merged with other data. However, in the event of concrete indications of unlawful use, we reserve the right to subsequently evaluating the data.

  • Processing of Personal Data after Consent
    (Art. 6 para. 1 p. 1 lit. a) DSGVO)

    • We obtain consent from you in individual cases for certain purposes expressly designated in connection with the collection of data (e.g. newsletter dispatch).

      Data processing only takes place if you give us your consent. It may be that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data will be processed exclusively for the purpose(s) expressly stated.

      You can revoke your consent at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of the revocation.

  • Cross-border Data Transfer
    (Art. 49 para. 1 p. 1 lit. a) DSGVO)

    • Insofar as personal data is transferred to a third country, we comply with the data protection requirements in that the data transfer is based on standard contractual clauses or we obtain your consent to this in accordance with Art. 49 (1) sentence 1 lit. a) DSGVO.
      Data is transferred in connection with the use of Google and Meta services. Due to the use of these services, data is transferred to the United States of America.
      The data transfer only takes place if you give us your consent.
      The specific details of the recipient, the personal data transferred and the purpose of the data transfer can be found in the notes on the respective processing below.
      There is a risk to your personal data as a result of the data transfer. In the United States of America, there is no level of data protection comparable to EU law (DS-GVO) and / or national regulations (e.g. BDSG) or sufficient guarantees to ensure an adequate level of data protection. Any deficits cannot be compensated by other specific guarantees due to the US legal situation. Nevertheless, depending on the service, standard contractual clauses are used in order to achieve the greatest possible protection for your data. You can find out whether standard contractual clauses are used in the information on the respective services.
      You can revoke your consent at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of the revocation.

  • Processing of Personal Data for the Purpose of Concluding or Initiating a Contract
    (Art. 6 para. 1 p. 1 lit. b) DSGVO)

    • If a contract is concluded with us, we use personal data insofar as this is necessary for the performance of the contract or for the implementation of pre-contractual measures. The purposes of the data processing depend on the concrete contents of the contract, which you can find in the contract documents.
      If a contract already exists with us, we process your data in order to check that you are our contractual partner and in order to properly provide the contractual service owed.

  • Processing of Personal Data in the Context of a Balancing of Interests
    (Art. 6 para. 1 p. 1 lit. f) DSGVO)

    • We process personal data after balancing interests insofar as this is necessary to protect our interests or the interests of third parties. Examples of such purposes are:

      • ensuring IT security and integrity of our systems,
      • Prevention or investigation of criminal offences,
      • asserting or defending legal claims.
  • Contact Form

    • If you send us an enquiry via our contact form, we process the data you provide in connection with the initiation of a contractual relationship, thus based on Art. 6 para. 1 p. 1 lit. b) DSGVO. In principle, your data will be deleted after the request has been processed, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer this to our inventory system.

  • Contact

    • If you contact us by e-mail, telephone or fax, we process the personal data you provide in order to respond to your enquiry. We delete the data once we have completed processing your enquiry, unless there is a contractual or legal obligation to retain the data.

  • Data Transfer to a Third Country

    • Data transfer to a third country is intended or at least possible. This transfer takes place on the basis of your consent. The recipients of the data provided by you are the following companies:

      • IWAY AG: Badenerstrasse 569 CH-8048 Zürich, Switzerland
      • Positioner SA:Via Stazione 32, 6592 S. Antonino, Switzerland
      • Google-Dienste: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
      • Meta Platforms Ireland Limited: Gordon House, Barrow Street, Dublin 4, Irland
      • Cloudflare: Cloudflare Inc, 101 Townsend St San Francisco, CA 94107
      • SendGrid: SendGrid Inc, 1801 California St Ste 500 Denver, CO, 80202-2618 United States

      If data is transferred to a third country based on consent without an adequacy decision or other suitable guarantees being in place at the same time, reference must be made to the associated increased risk of data processing in the context of the transfer based on Art. 49 (1) sentence 1 a) DSGVO. However, we would like to assure you that thanks to careful selection and constant review of the standards of our contractual partners, potential risks are successfully minimised.

  • Booking

    • When you make a booking via our website, we require the personal data necessary to process the booking in order to conclude and execute the contract. In particular, we process the following data about you:

      • Name, first name
      • Company details
      • Account or credit card details
      • Period of stay
      • Room type
      • Address details
      • Telephone Number
      • Email address
      • Date of birth/age
      • Other information that you provide voluntarily

      The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b) DSGVO, as it concerns pre-contractual measures. If a contract is concluded with us, further data processing is based on Art. 6 Para. 1 S. 1 lit. b) DSGVO.

      You can find our General Terms and Conditions at https://bold-hotels.com/en/terms-conditions/

      Insofar as you contact us within the framework of an existing contractual relationship for a purpose that is necessary for the performance of the contract, we also process this data on the basis of Art. 6 para. 1 p. 1 lit. b) DSGVO.

      We use the service OnePageBooking of HotelNetSolutions GmbH, Genthiner Str. 8, 10785 Berlin, to register your booking and in the course of contract processing. If you would like to book a room with us, you will be redirected to our hotel page under the domain "onepagebooking.com", where you can enter the information required for booking and rent the room you want. We have concluded an order processing agreement with the provider. The data transfer is based on Art. 6 para. 1 p. 1 lit. f) DSGVO. The legitimate interest in this respect is the provision of an efficient, modern, cost-optimised and reliable booking service

      For the purpose of managing the processes in our company, we use the SIHOT software of the provider GUBSE AG, Bahnhofstraße 26-28, 66578 Schiffweiler. The processing of your data is based on Art. 6 para. 1 p. 1 lit. f) DSGVO, whereby the legitimate interest lies in the proper management of operations as well as the performance of contracts.

  • Newsletter

    • If you have registered for our newsletter, we will process the data you provide on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR in order to send you our newsletter regularly. To register, it is sufficient to provide an email address and your first name. All other information is voluntary. For legal reasons, we also store the IP address and the date of registration. Our newsletter is sent using the Brevo tool, a service provided by Sendinblue GmbH, Köpenickerstr. 126, 10179 Berlin. We have an order processing agreement with the provider. We use the so-called double opt-in procedure for registration, which means that you have to explicitly confirm your e-mail address in a second step after you have given your consent to receive the newsletter. Only then will the service be activated. The data you provide when registering will be transmitted to Brevo, where it will be stored and processed for the purposes of sending the newsletter and unsubscribing. The data is also processed for the purpose of analysing whether the newsletter has been opened and how it has actually been used. We do this to improve the attractiveness of our newsletter and to review our marketing activities. However, we do not process the data to evaluate individual user behaviour. This data processing is based on your consent.
      You can find more information about Brevo's privacy policy at https://www.brevo.com/de/legal/privacypolicy/. You can also withdraw your consent at any time with immediate effect. You will find an unsubscribe link at the bottom of each newsletter email. Of course, you can also revoke your consent using the other contact options provided. Withdrawal will not affect the lawfulness of any data processing that has already taken place.

      After you unsubscribe from the newsletter, your email address may be added to a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings. Data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest as defined by Article 6(1)(f) of the GDPR). Storage in the blacklist is not limited in time. You may object to the storage if your interests outweigh our legitimate interest.

  • Use of Cookies

    • Cookies may be used on various pages during your visit to our website. These are text files that are placed on your computer and enable, among other things, the smooth running of your visit to our website.
      We generally use cookies on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR, i.e. on the basis of a legitimate interest. The cookies are those that are technically necessary.
      Der Einsatz von Cookies erfolgt im Rahmen von sogenannten Nutzungsprofilen. You are assigned a pseudonym under which the usage data is stored.
      The cookies we use are deleted from your computer after you close your browser (session cookies). Other types of cookies may remain on your computer and enable us to recognise your computer the next time you visit our site by means of the user profile created (persistent cookies).
      You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

      As an exception, we also use technically unnecessary cookies, which we explain below.

      This cookie policy has been created and updated by Cookie Consent | CookieFirst.
  • Web Analytics and Marketing

    • We use the following services for the purpose of web analysis as well as retargeting.
      Within the scope of web analysis, cookies may be used on various pages. These are text files that are placed on your computer and, among other things, enable a smooth visit to our website.
      Cookies are used in the context of so-called user profiles. You will be assigned a pseudonym under which the usage data will be stored.

  • Google Analytics

    • This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies.

      When using cookies, we rely on your consent to the collection of data. If you do not consent to the use of data when you first visit our website, we will not collect your usage behaviour and other personal data that may be collected during your website visit and will therefore not use it for usage analysis and subsequent remarketing campaigns. This also applies to third-party cookies such as this Google Analytics plugin.
      Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively, for example by analysing which search terms have led to the display of our advertisements and how many advertisements have led to corresponding clicks.the use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.
      Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at https://policies.google.com/privacy/frameworks and at https://privacy.google.com/businesses/controllerterms/mccs/.

  • Google Conversion-Tracking

    • This website uses Google Conversion Tracking. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of Google conversion tracking, Google and we can recognise whether the user has carried out certain actions. For example, we can analyse which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who have clicked on our adverts and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.
      The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

      You can find more information about Google Conversion Tracking in Google's privacy policy:https://policies.google.com/privacy?hl=de

  • Google Remarketing

    • Google Remarketing, a retargeting function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is used on our website.
      Google Remarketing enables advertisements for and on our website to be displayed on an individualised basis according to the interests of visitors, in order to only show you ads that might be of interest to you.
      For these purposes, a code is executed by Google when our website is called up and so-called (re)marketing tags are integrated into the website. As a result, an individual cookie file is stored on your device, in which information about the websites you have visited, the content you have accessed and your browser and operating system is saved. Your IP address is also recorded. The IP address will not be merged with data about you within other Google offerings. However, the aforementioned information may be combined by Google with such information from other sources. If the user subsequently visits other websites, he or she can be shown ads tailored to his or her interests.
      As a matter of principle, your data will be processed pseudonymously within the scope of Google Remarketing. This does not apply if you have expressly allowed Google to process your data without pseudonymisation. The information collected about users by Google Remarketing will be transmitted to Google and stored on Google's servers.
      For more information about Google's use of data for marketing purposes, please visit Google's overview page or privacy policy: Overview page: https://policies.google.com/technologies/ads?hl=en
      Privacy policy: https://policies.google.com/privacy
      If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google.
      https://adssettings.google.com/anonymous?hl=en
      The legal basis for the use of Google Remarketing is the consent you declare when calling up our website in accordance with Art. 6 Para. 1 S.1 lit. a) DS-GVO. The transfer of data to the USA is permissible based on your consent in accordance with Art. 49 Para. 1 S. 1 lit. a) DSGVO.

  • Google Tag Manager

    • We use the Google Tag Manager on our website. The service enables us to manage tags (e.g. from Google Analytics or Facebook Pixel) on our website in one interface. No cookies are used, nor are any personal data collected. The Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

  • Use of Google Fonts

    • For the display of external fonts, we use Google Fonts in the so-called "online" mode. This service is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In this context, a server call is made, during which data (including your IP address) and the page from which the call is made are transmitted to a Google server in the USA. We do not know the details of the processing by Google.
      The transfer of data to the USA is permissible based on your consent in accordance with Art. 49 Para. 1 S. 1 lit. a) DSGVO. The processing is necessary for the proper presentation of our website and is therefore in our interest as well as yours. The legal basis of the processing is therefore Art. 6 para. 1 sentence 1 lit. f) DSGVO relating to the external appearance of the company through a functional website.
      You can find more information on Google's websites visiting the following links:
      https://developers.google.com/fonts/faq
      https://www.google.com/policies/privacy/

  • PlugIns and Tools

    • Friendly Captcha We use Friendly Captcha (hereinafter ‘Friendly Captcha’) on this website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany. Friendly Captcha is used to check whether the data input on this website (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, Friendly Captcha analyses the behaviour of the website visitor based on various characteristics. Friendly Captcha evaluates various information for the analysis (e.g. anonymised IP address, referrer, visit time, etc.). Further information on this can be found at:https://friendlycaptcha.com/legal/privacy-end-users/.
      The data is stored and analysed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

  • Meta Pixel

    • We place adverts on Facebook and Instagram. In this context, we have integrated the ‘Meta Pixel’ on our website.
      The Meta Pixel makes it possible:

        • Measure the success of Facebook or Instagram advertising campaigns.
        • To target visitors to our website again with adverts on Facebook and Instagram.
        • To personalise the advertisements to the previously accessed pages or products.

      The Meta Pixel is provided to us by Meta Platforms Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

      During your visit to the website, the following data, among others, is transmitted to Meta:

      • Pages or URLs accessed
      • The achievement of ‘website goals’ (e.g. contact enquiries and newsletter registrations)
      • Your Internet connection data (IP address)
      • Technical information such as browser, end device and screen resolution
      • A randomly generated user ID
      • A randomly generated advertising click ID if you have reached our website via an advert

      No personal data such as name, address or contact details are transferred to Facebook. This data is potentially also transferred to Meta servers in the USA.

      Meta stores cookies in your web browser for a period of one year since your last visit. These cookies contain a randomly generated user ID with which you can be recognised on future visits to the website. If you are logged in to Meta platforms such as Facebook/Instagram, Meta can also assign the visit to your Facebook/Instagram account.

      If you do not agree to the collection of data, you can prevent this by installing a tracking blocker add-on in your browser or by rejecting cookies via our cookie settings dialogue.
      Logged-in users can deactivate the function at https://www.facebook.com/settings/?tab=ads# possible. We process the data on the basis of your consent given when you access our website in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. The data transfer is permitted on the basis of your consent in accordance with Art. 49 para. 1 sentence 1 lit. a) GDPR. In addition, we have a legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR in an appealing presentation of our online offers and the data for marketing and targeting purposes. You can find more information on data processing by Meta at https://www.facebook.com/about/privacy.

      Source: traffic3.net

  • Facebook

    • Elements of the social network Facebook are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.
      You can find an overview of the Facebook social media elements here:https://developers.facebook.com/docs/plugins/?locale=de_DE.

      When the social media element is active, a direct connection is established between your end device and the Facebook server. Facebook receives the information that you have visited this website with your IP address. If you click on the Facebook ‘Like’ button while you are logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at:https://de-de.facebook.com/privacy/explanation.

      The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

      Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert your data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

      Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

      The company is certified in accordance with the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

  • Instagram

    • Functions of the Instagram service are integrated on this website. These functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.

      If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

      The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

      Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The processing carried out by Facebook or Instagram after forwarding is not part of the joint responsibility. The joint obligations incumbent on us have been set out in a joint processing agreement. You can find the wording of the agreement at https://www.facebook.com/legal/controller_addendum.

      According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook. Data transfer to the USA is based on the standard contractual clauses of the EU Commission, details of which can be found here:https://www.facebook.com/legal/controller_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381. Further information on this can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy.

      The company is certified in accordance with the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

  • Transfer of Data

    • As part of our business activities, we work together with various external organisations. In some cases, it is also necessary to transfer personal data to these external organisations. We only pass on personal data to external bodies if this is necessary for the fulfilment of a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 para. 1 lit. f GDPR or if another legal basis permits the transfer of data. When using processors, we only pass on our customers' personal data on the basis of a valid contract for order processing. In the case of joint processing, a joint processing agreement is concluded.

  • Duration of Data Storage

    • Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfilment of contractual and legal obligations.
      Personal data will be stored at least as long as necessary for the fulfilment of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contractual period, as the data may still be relevant after the end of the contract within the framework of the limitation periods. In addition, deletion can only take place once any retention periods under tax and commercial law have expired.
      The criteria for the duration of the storage of cookies can be found in the corresponding section.

  • Rights of the Data Subject

    • As a data subject of personal data processing, you have the following rights:

      You have the right to request confirmation as to whether personal data is being processed. If this is the case, you have the right to be informed about the personal data and to receive the information listed in detail in Article 15 of the GDPR.

      You have the right to obtain from the controller the rectification without undue delay of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

      You have the right to request from the controller that personal data concerning you be deleted without undue delay if one of the reasons listed in detail in paragraph 17 of the GDPR applies, e.g. if the data are no longer needed for the purposes pursued (right to erasure).

      You have the right to request the controller to restrict processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you have objected to the processing, for the duration of the controller's review.

      You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing of this data is based on your consent or on a contract and the processing is carried out with the help of automated procedures (Art. 20 DSGVO). When exercising the right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, where this is technically feasible (right to data portability).

      You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 DSGVO).

      With regard to exercising your rights, you can contact us at any time via the contact options provided on our website.

  • Right of Appeal

    • Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Art. 77 GDPR). You can assert this right before a supervisory authority in the member state of your residence, your place of work or the place of the alleged infringement.
      Of course, you can also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact person on the subject of data protection is to use the following contact details:

      David Brandauer, LL.M.
      Lawyer (in-house lawyer)
      Group Data Protection Officer
      Morten Group GmbH
      Tel: +49 89 2441929-2151
      E-Mail: david.brandauer@morten-group.com

  • Obligation to Provide Data

    • In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions or for the conclusion of a contract. If you do not provide the required data, you will not be able to use certain functions or services or a contract cannot be concluded.

Source: https://www.e-recht24.de
Munich, February 2025