Data Protection

Last updated: April 14, 2025

  • Data Controller
  • Your Rights as a Data Subject
  • Cookies
  • Storage Duration and Cookies Used
  • Registration
  • Provision of Paid Services
  • Contact Form
  • Use of Script Libraries
  • YouTube Videos
  • CRM Provider HubSpot
  • LinkedIn
  • SSL Encryption
  • Right to Object
  • Changes to our
    Privacy Policy
  • Questions for the
    Data Protection Officer

Data Controller

The controller responsible for data processing under applicable data protection laws, including the EU General Data Protection Regulation (GDPR), is:

PropOps GmbH
Bottwartalstraße 8
71672 Marbach am Neckar

Your Rights as a Data Subject

You have the right to:

  • Access: Obtain information about your personal data stored and its processing (Art. 15 GDPR).

  • Rectification: Correct inaccurate personal data (Art. 16 GDPR).

  • Erasure: Delete your personal data (Art. 17 GDPR).

  • Restriction: Limit the processing of your data (Art. 18 GDPR).

  • Objection: Object to the processing of your data (Art. 21 GDPR).

  • Data Portability: Receive your data in a structured, commonly used, and machine-readable format (Art. 20 GDPR).

If you have given consent for data processing, you can withdraw it at any time with future effect.

You also have the right to lodge a complaint with a supervisory authority, such as the competent authority in your state of residence or the authority responsible for us as the data controller. A list of supervisory authorities (for the non-public sector) with addresses is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

 

Cookies

Like many other websites, we use “cookies.” Cookies are small text files stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

You can delete individual cookies or the entire cookie inventory. Additionally, you can find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information at the following links:

Storage Duration and Cookies Used

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Technically Necessary Cookies

Type and Purpose of Processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized after a page change.

Legal Basis and Legitimate Interest:

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a user-friendly design of our website.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Provision Required or Necessary:

The provision of the aforementioned personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract.

However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and features may be unavailable or limited.

Objection

Please read the information about your right to object under Article 21 GDPR further below.

Non-essential Cookies

We also use cookies to better tailor the offerings on our website to the interests of our visitors or to generally improve them based on statistical evaluations.
Which providers set cookies can be found in the information below regarding the display, tracking, remarketing, and web analytics technologies used.

Legal basis:
The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR.

Recipients:
Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.
Additional recipients can be found in the information below on the display, tracking, remarketing, and web analytics technologies used.

Transfer to third countries:
For information on this, please refer to the individual listings of the providers of display, tracking, remarketing, and web analytics technologies.

Provision required or necessary:
Of course, you can generally view our website without cookies. Most web browsers are set to accept cookies by default. In general, you can deactivate the use of cookies at any time via your browser settings (see withdrawal of consent).
Please note that some functions of our website may not work properly if you disable the use of cookies.

Withdrawal of Consent

You can withdraw your consent at any time using our cookie consent tool.

Profiling

To what extent we analyze the behavior of website visitors using pseudonymized user profiles can be found in the information below on the display, tracking, remarketing, and web analytics technologies used.

Registration on Our Website

Type and Purpose of Processing:

To register on our website, we require some personal data that is submitted to us via an input form.
At the time of registration, the following data is also collected: timestamp.
Your registration is necessary to provide certain content and services on our website.

Legal Basis:

The processing of the data entered during registration is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

Recipients:

Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.

Transfer to Third Countries:

The collected data may be transferred to the following third countries: USA
The following data protection guarantees are in place: Standard Contractual Clauses

Storage Duration:

Data in this context is processed only as long as the corresponding consent is in place.

Provision Required or Necessary:

The provision of your personal data is voluntary and based solely on your consent.
Without providing your personal data, we cannot grant you access to the content we offer.

Provision of Paid Services

Type and Purpose of Processing:

To provide paid services, we collect additional data such as payment information in order to fulfill your order.

Legal Basis:

The processing of data required for contract execution is based on Article 6(1)(b) GDPR.

Recipients:

Recipients of the data may include data processors.

Storage Duration:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years due to proper accounting practices and tax regulations.

Provision Required or Necessary:

The provision of your personal data is voluntary. However, without providing your personal data, we cannot grant you access to the content and services we offer.

Contact Form

Type and Purpose of Processing:

The data you enter is stored for the purpose of individual communication with you. To do this, we require a valid email address and your name. This information is used to assign your inquiry and respond to it. Providing additional data is optional.

Legal Basis:

The processing of the data entered into the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR).
By providing the contact form, we aim to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for potential follow-up questions.
If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipients:

Recipients of the data may include data processors.

Transfer to Third Countries:

The collected data may be transferred to the following third countries: USA
The following data protection guarantees apply: Standard Contractual Clauses

Storage Duration:

Data will be deleted no later than 6 months after your inquiry has been processed.
If a contractual relationship results, we are subject to the statutory retention periods under the German Commercial Code (HGB) and will delete your data after these periods have expired.

Provision Required or Necessary:

The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, email address, and the reason for your inquiry.

Use of Script Libraries (Google Webfonts)

In order to display our content correctly and in a visually appealing manner across different browsers, we use Google Web Fonts provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) on this website for font display.
For more information about Google Web Fonts, please visit: https://developers.google.com/fonts/faq and consult Google’s privacy policy at: https://www.google.com/policies/privacy/.

Embedded Youtube Videos

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”).
When you visit a page with a YouTube plugin, a connection to YouTube’s servers is established. YouTube is then informed about which pages you visit. If you are logged into your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider sets cookies that collect information about user behavior.
For more information about the purpose and scope of data collection and processing by YouTube, please refer to the provider’s privacy policies. There you will also find further information on your rights and settings options for protecting your privacy: https://policies.google.com/privacy.

CRM Provider HubSpot

On our website, we use the HubSpot service for various purposes. HubSpot is a software company based in the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500. HubSpot is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others: email marketing, social media publishing & reporting, reporting, contact management (e.g., user segmentation & CRM), landing pages, and contact forms. Our service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic details. This information, as well as the content of our website, is stored on servers of our software partner, HubSpot. It can be used by us to contact website visitors and determine which services of our company are of interest to them. All information we collect is subject to this privacy policy. We use all collected information solely to optimize our marketing efforts.

For more information on HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy
For more information on HubSpot’s compliance with EU data protection regulations: https://legal.hubspot.com/data-privacy
For more information on the cookies used by HubSpot: https://knowledge.hubspot.com/articles/kcs_article/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser, https://knowledge.hubspot.com/articles/kcs_article/account/hubspot-cookie-security-and-privacy

As part of optimizing our marketing efforts, HubSpot can collect and process the following data: geographic location, browser type, navigation information, referrer URL, performance data, information on how often the application is used, mobile app data, login credentials for HubSpot subscription services, files displayed on site, domain names, pages viewed, aggregated usage, operating system version, internet service provider, IP address, device ID, visit duration, source of application download, operating system, events occurring within the application, access times, clickstream data, device model and version. Additionally, we use HubSpot to provide contact forms.

The legal basis for processing is your consent according to Art. 6 para. 1 lit. a GDPR. If you do not wish the aforementioned data to be collected and processed via HubSpot, you can refuse your consent or revoke it at any time with effect for the future. The personal data will be retained as long as necessary to fulfill the processing purpose. The data will be deleted once it is no longer required for the purpose.

As part of processing via HubSpot, data may be transferred to the USA. The security of the transfer is ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level comparable to that of the GDPR. If the standard contractual clauses are insufficient to ensure an adequate level of security, your consent under Art. 49 para. 1 lit. a GDPR may serve as the legal basis for the transfer to third countries.

LinkedIn

We use LinkedIn to publish company news, provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). For this purpose, LinkedIn posts are embedded on certain pages of our website, which allows LinkedIn to collect statistical data about your visit and use of our website. The relevant information is stored in a cookie. For more details on data processing, please refer to LinkedIn’s privacy policy. The following data is typically collected and processed: IP address, device information, browser information, referrer URL, timestamp.

The legal basis for processing is your consent according to Art. 6 para. 1 lit. a GDPR. If you do not want LinkedIn to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future. The personal data will be retained as long as necessary to fulfill the processing purpose. The data will be deleted once it is no longer required for the purpose.

As part of processing via LinkedIn, data may be transferred to the USA and Singapore. The security of the transfer is regularly ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that complies with the GDPR.

Revocation of consent:

Currently, the provider does not offer an easy opt-out or blocking option for data transmission. If you wish to prevent the tracking of your activities on our website, please revoke your consent for the relevant cookie category or all technically non-essential cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to a limited extent.

SSL Encryption

To protect the security of your data during transmission, we use encryption methods that comply with the current state of technology (e.g., SSL) via HTTPS.

Information about Your Right to Object under Article 21 GDPR

Right to Object Based on Specific Circumstances

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is based on Article 6(1)(f) GDPR (data processing based on balancing of interests); this also applies to profiling based on this provision as defined in Article 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Recipient of an Objection

privacy@propops.com

Changes to Our Privacy Policy

We reserve the right to amend this privacy policy to ensure it always meets current legal requirements or to implement changes to our services in the privacy policy, for example, when introducing new services. The new privacy policy will apply for your next visit.

 

 

 

Questions for the Data Protection Officer

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly: Data Protection Officer, privacy@propops.com

The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30).