DATA PROTECTION POLICY

Protecting your privacy when processing personal data is a serious matter for us. For this reason, we are informing you here about how we handle your data and our data protection principles.

We process personal data collected when our websites are visited in accordance with the applicable legal provisions regarding data protection and data security according to the General Data Protection Regulations and the German Federal Data Protection Act.

Your data is only used by us for processing your matters. Your data is treated with the strictest of confidence.
Controller:
DQuadrat Living GmbH
Solitudestraße 48
71638 Ludwigsburg
Tel.: +49 7141 - 6964 600
Email: Datenschutz-DQL@DQuadrat.com

Personal data and purpose 
Personal data is any information about your identity. By way of example, this includes your name, address and email address. Only data that you have automatically or voluntarily provided us with is kept. You do not need to disclose any personal data to be able to visit our website.

Any personal data collected when using online services is processed in accordance with applicable requirements for protecting personal data, only for the purpose of processing the customer enquiry or, as may apply, safeguarding our own legitimate business interests with regard to advising and serving our customers, designing products according to needs, and advertising by post.

Use and disclosure of personal data in general
We use your personal data in general to answer and process your enquiry, or provide you with access to special information or offers. For this reason we may be required to forward your data to group companies or external service providers when processing an order. Where this is permitted by law or you have consented, we forward your data to third parties (e.g. for processing credit card payments). We will neither sell your personal data to third parties nor otherwise market it.

Data is transferred to third countries for administering, developing and operating IT systems and only where a) disclosure is fundamentally permitted and b) the particular requirements for transfer to a third country exist, in particular the data importer guarantees an appropriate level of data protection in accordance with EU standard contractual clauses for the transfer of personal data to processors in third countries. The provisions of the General Data Protection Regulation, the German Federal Data Protection Act, and the German Telemedia Act are the basis.

Objecting to postal advertising/market research
The use and processing of data for the purposes of advertising by post, the design of products according to needs, and market research can be objected to at any time with future effect by contacting, without formal requirement, DQuadrat Living GmbH, Solitudestraße 48, 71638 Ludwigsburg, by phone: +49 7141 - 6964 600 or email at Living@DQ-Living.com.

Security
We maintain technical and administrative security precautions for safeguarding data security, in particular for protecting your personal data against loss, destruction, corruption, manipulation and unauthorised access, risks with data transfer and third parties becoming aware of it. Whenever we collect and process personal data, it is encrypted before being transferred. It is appropriately adapted according to the current state of technology. We would like to point out that transferring data via the internet (e.g. when communicating by email) may present gaps in security. Completely protecting data from access by third parties is not possible. In this respect, our security precautions are subject to a process of continual improvement and our data protection policies are constantly updated. Please ensure that you have the most up-to-date version.

As such, the statutory data protection provisions of the Federal Republic of Germany are, of course, observed. All of our employees as well as service providers acting for us are bound by applicable data protection legislation.

Transferring data via the internet
The internet has global reach. By using these sites or communicating with us via contact forms, you agree to the unencrypted transfer of all data you would like to send to us. Due to the very nature of the way the internet works and risks inherent to the system, all data transfers arranged by you are at your own risk. Anything else only applies by us offering you unencrypted communication.

Children
We recommend that all parents and guardians show their children how to handle personal data online safely and responsibly. Children should not send any personal data to our website without the consent of their parents or guardians. We do not knowingly collect, use in any way or disclose to third parties the personal data of children.

Links to other websites
The web pages on this site may contain links to other providers inside and outside the WOLFF & MÜLLER Group to which the data protection policy does not extend. Please familiarise yourself separately with the data protection advice for websites of each company. If you leave our website, carefully reading the data protection guideline of each website that collects personal data is recommended.

Automatically collected non-personal data
If you visit our websites, we keep certain information for administrative and technical reasons. This is: The type and version of the browser used, date and time of access, and IP address.

This information is mandatory for the technical aspects of transferring with aspects and the secure operation of servers. This data is not evaluated on a personal level. This data is anonymised and only used for statistical purposes or, as may apply, improving our internet and online services.
This anonymised data is kept (separate from personal data) on secure systems and cannot be assigned to individuals. This means that your personal data remains protected at all times.

Cookies
If you visit our websites, we may store information on your computer in the form of cookies. Cookies are small text files transferred from an internet server to your browser and stored on its hard drive. Only the internet protocol address is saved in this way – no personal data. This information saved in the cookies allows you to be automatically recognised when you next visit our website making it easier to use.

Of course, you can also visit our websites without accepting cookies. If you would not like your computer to be recognised on your next visit, you can also reject the use of cookies by changing your browser settings to 'reject cookies'. You will find the appropriate procedure in your browser's operating instructions. Rejecting the use of cookies may, however, lead to restrictions in the use of some areas of our websites.

Use of Google Analytics with anonymisation function
For our websites, we use Google Analytics, the web analysis service from Google Inc. (hereinafter 'Google'). Google Analytics uses Cookies, text suggestion files stored on your computer that allow analysis of how you use the website. The information generated by the cookie about your usage of this website (including your IP address) is generally passed to and stored on a Google server in the USA. Files transferred are automatically deleted by Google Analytics after 14 months.

In the event of IP anonymisation activated on this website, your IP address is abbreviated within Member States of the European Union or in other Signatory States to the Agreement on the European Economic Area beforehand. The full IP address is only forwarded to and abbreviated on a Google server in the USA in exceptional cases. Google will use this information on behalf of the website's operator to evaluate your use of the website, compile reports about website activity for the website operator, and to provide the website operator with services associated with use of the website and internet. The IP address provided from your browser by Google Analytics is not combined with other data from Google.

Users of this website not wanting their data to be collected by Google Analytics can install the browser add-on for disabling Google Analytics. This add-on directs to Google Analytics JavaScript listed on website (ga.js, analytics.js und dc.js) allowing the sending of information to Google Analytics.

If you would like to disable Google Analytics, go to this page and install the add-on for disabling Google Analytics for your browser. You will find detailed information about installing and uninstalling the add-on in the relevant help resources for your browser.

Browser and operating system updates may lead to the disabling add-on no longer working as intended. You will find further information hereabout administering add-ons. If you do not use Chrome, find out directly from your browser's supplier whether add-ons work properly in the browser version used by you.

The latest versions of Internet Explorer occasionally load the add-on for disabling Google Analytics after data has been sent to Google Analytics. If you use Internet Explorer, cookies will be installed on your computer by the add-on. Any data collected being immediately deleted from the server having collected the data is ensured by this cookie. Ensure that third-party provider cookies are not disabled for Internet Explorer. If you delete your cookies, they are reset for a brief period by the add-on to ensure that your Google Analytics browser add-on continues working without restriction.

The browser add-on for disabling Google Analytics does not prevent data from being sent to the website or to other web analysis services.
You will find more detailed information about the terms and conditions of use and data protection at
http://www.google.com/analytics/terms/de.html or, as may apply
https://support.google.com/analytics/answer/6004245?hl=de.
IP anonymisation is enabled on this website.

Google remarketing
This website uses Google remarketing. Google remarketing is a web service of Google Inc. ('Google', 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA), which allows us to present to you targeted advertising that may be of interest to you based on your pattern of usage during previous visits. Your visits across all devices are also recorded where you have provided Google with consent. This advertising only appears in Google advertising spaces, either in advertising panels from Google Adwords or the Google Display Network,

You can object to Google remarketing in the Ads Preferences Manager or, as may apply, edit in your settings. Alternatively you can block remarketing by disabling cookies in your browser settings.

Social plug-ins
Our website uses social plug-ins ('Plug-ins') from different social networks such as Facebook.com oder twitter.com. Plug-ins can be easily identified from the respective logos.
If you go to one of our websites online containing such a plug-in, your browser establishes a direct connection with your respective operator's servers. The contents of this plug-in are sent by the operator directly to your browser and integrated by it into the website.
We would like to point out that data is processed by different social networks outside the European Union.
Integrating the plug-ins informs each operator that you have accessed the corresponding website of our online presence. Provided that you are logged in to the respective network, the operator is able to assign the visit to your network account. If you interact with the plug-ins, for example by adding a comment, the corresponding information is sent from your browser directly the respective operator and stored there.
Please find the purpose and scope of data collection and the onward use and processing of the data by the operator of the respective social network as well as your associated rights and options for protecting your privacy in the social network's respective data protection policy.
Where you would not like social networks to receive data via our website, you need to log out of the respective social network before visiting our website.

Content and withdrawal of declarations of consent
Where you have agreed to us using your data for advertising purposes, it is to be worded as follows:
I consent to DQuadrat Living GmbH contacting me for the purpose of advertising for the hotel industry and overnight accommodation solutions, both in general terms and tailored to me

• by telephone
• by electronic post (e.g. email)

.
You can withdraw your consent at any time without stating why by contacting DQuadrat Living GmbH, Solitudestraße 48, 71638 Ludwigsburg or emailing Datenschutz-DQL@DQuadrat.com with future effect. This results in you no longer being contacted for advertising purposes by DQuadrat Living GmbH via the respective communication path.

Registering for the newsletter
By registering for the newsletter, I consent to receiving personalised and customised emails about products and services from DQuadrat Living GmbH. I agree to user specific evaluation and profiling taking place. When displaying the newsletter and accessing links from the newsletter, information is collected and evaluated for this purpose, which is transferred automatically. This can be combined with information already stored about me. In this respect, a cookie with an unlimited life is placed when a link is accessed for the first time from the newsletter. If the cookie has been deleted in the meantime or you use another browser, the cookie is saved again. You can be recognised and your pattern of use can be assessed on our websites with the help of the cookie.

Cancellation of the newsletter is possible at any time with the option of withdrawing your agreement from DQuadrat Living GmbH, Soliudestraße 48, 71638 Ludwigsburg by phone: +49 7141 - 6964 600 or email at Datenschutz-DQL@DQuadrat.com.

Using the booking portal 
The following applies when using the booking portal at www.harbr.de:
By using the card payment option offered by us (VISA, MasterCard, Maestro) you have agreed to the following terms and conditions of use: When selecting the card payment option, we redirect to a payment page of the payment service provider ConCardis GmbH, Helfmann-Park 7, 65670 Eschborn (ConCardis). In doing so we forward your personal data (contract account number, email address, payment address, alias where applicable) to ConCardis. The alias is a shortcut for a card saved with ConCardis and can be used for requesting further payments. The card details are entered directly on the payment service provider's page. Once the transaction has been made, we receive an electronic payment notification from ConCardis containing the name of the cardholder, the masked card number, the card expiry date and, where applicable, the alias. We will save these details. With regard to data protection and security with card payments, ConCardis is subject to the policy of the Payment Card Industry Data Security Standard (PCI-DSS) supported by the card companies. Data is only forwarded by ConCardis for the purpose of processing card payments.

Applicants
With vacancies and speculative applications, we only process your application documents and the personal and sensitive date they contain for the recruitment process. By sending the documents, you state your agreement to the data being kept in accordance with statutory provisions. If a contract is created, the data required for it such as name, address, and details for processing the contract are kept by us. 
No third parties are provided with access to the data unless it serves to defend third-party claims in judicial proceedings and is to be deleted without delay after the end of proceedings. 

Your personal application details are invariably automatically deleted three months after conclusion of the recruitment process. This does not apply where statutory provisions oppose deletion, the continued storage is required for the purposes of evidence, or you have expressly agreed to longer storage.

Should we currently have no positions to fill, but due to your profile are of the opinion that your application my be of interest for future vacancies, we will keep you personal application data for twelve months provided that you expressly agree to such processing.

Rights of data subjects
Please contact us at any time if you would like to find out what personal data we keep about you or, as may apply, if you would like to have it rectified or erased. In addition, you are entitled to the right to restriction of processing (Article 18 GDPR), a right to object to processing (Article 21 GDPR), and the right to data portability (Article 20 GDPR).

In these cases, please contact our data protection officer directly:
Datenschutzbeauftragter
DQuadrat Living GmbH
Solitudestraße 48
71638 Ludwigsburg
Tel.: Datenschutz-DQL@DQuadrat.com 
As required, you will be informed in accordance with the applicable law of and what personal data we have kept about you.

DialogShift chat application on our website

Our website uses the chat application of DialogShift GmbH, Rheinsberger Str. 76/77, 10115 Berlin. This application processes and stores data for the purpose of web analysis, to operate the chat application and to answer queries. 

For the operation of the chat function, the chat texts are stored and a cookie with a unique ID is set - this is used to recognise you as a customer. 

A cookie is a small text file that is stored locally in the cache on your device. Using this cookie, our application recognises the device and can retrieve past chat logs. This cookie is stored for 90 days since last use. You can disable the storage of cookies in your browser settings. However, without the use of cookies, the chat function cannot be performed.

The possible disclosure of e.g. name, e-mail address or a telephone number is voluntary and with the consent to temporarily use and store this data for the purpose of contacting you until the end of the contact. This personal data is deleted after 90 days. 

The legal basis for data processing is Article 6 (1) lit. F DS-GVO based on our legitimate interest in effective customer support, for statistical analysis of user behaviour and for optimisation purposes of our offers.

DialogShift offers at https://www.dialogshift.com/de/dsvgo for further information on the collection and use of data and on your rights and options for protecting your privacy. 

Amendments to this data protection policy
We reserve the right to amend our data protection policies where necessary due to new technology. Please ensure that you have the most up-to-date version. Where fundamental amendments are made to this data protection policy, we will give notice of them on our website.
All interested parties and visitors to our website can reach us regarding data protection matters at Datenschutz-DQL@DQuadrat.com.

In the event of our data protection officer being unable to answer your matter to your satisfaction, you are still entitled to complain to the competent data protection supervisory authority for your Federal State.