Data protection policy

The data controller within the meaning of data protection laws,
in particular the EU General Data Protection Regulation (GDPR), is:
PropOps GmbH
Bottwartalstraße 8
71672 Marbach am Neckar

Your rights as a data subject

You can exercise the following rights at any time using the contact details provided by our data protection officer:
– information about your data stored by us and its processing (Art. 15 GDPR),
– correction of incorrect personal data (Art. 16 GDPR),
– deletion of your data stored by us (Art. 17 GDPR),
– restriction of data processing, if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
– objection to the processing of your data with us (Art. 21 GDPR) and
– data portability, if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time going forward. You can complain to a supervisory authority at any time, e.g. to the competent supervisory authority of the federal state in which you reside or to the authority responsible for us. A list of supervisory authorities (for the non-public sector) and their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

 

Cookies

We use “”cookies””, as do many other websites. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. You can delete individual cookies or the entire set of cookies. In addition, you will receive information and instructions on how these cookies can be deleted or their storage blocked in advance. Depending on the browser provider, you will find the information needed under the following links:

– Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
– Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
– Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
– Opera: http://www.opera.com/help
– Safari: https://support.apple.com/en-gb/HT201265

 

Storage duration and cookies used:

If you allow us to use cookies through your browser settings or specific consent, the following cookies may be used on our websites:

Technically essential cookies

Nature and purpose of processing:

“We use cookies to make our website more user-friendly. Some elements of our website require that your browser be identified as you move on to another page within the site.

The purpose of using such technically essential cookies is to make the website easier to use. Some features of our website will not be available if the use of cookies is disallowed. In such cases, it is necessary that the browser is recognised even after changing the page. We require cookies for the following applications:”

Legal basis and legitimate interest:

Processing is carried out in accordance with Art. 6 para. 1 (f) GDPR based on our legitimate interest in a user-friendly design of our website.

Recipient:

The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Provision prescribed or required:

The provision of the above-mentioned personal data is neither required by law nor contractually prescribed. Without this data, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or restricted.

Objection

Please read the information about your right of objection according to Art. 21 GDPR below.

Technically unnecessary cookies

We also use cookies to better tailor the offer on our website to the interests of our visitors or to improve it in general on the basis of statistical evaluations. Please refer to the information below on the display, tracking, remarketing and web analysis technologies used to find out which providers set cookies.

Legal basis:

The legal basis for this processing is your consent, Art. 6 Para. 1 (a) GDPR.

Recipient:

The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website. For further recipients, please refer to the information listed below on the display, tracking, remarketing and web analysis technologies used.

Third country transfer:

For information on this, please refer to the lists of the individual display, tracking, remarketing and web analysis providers.

Provision prescribed or required:

Our website can, of course, be viewed without the use of cookies. Web browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via the settings of your browser (see Revocation of Consent).

Please note that some of our website features may not work if you have disabled the use of cookies.

Revocation of consent:

You can revoke your consent at any time using our cookie consent tool.

Profiling:

To understand to what extent we analyse the behaviour of website visitors with pseudonymised user profiles, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.

Registration on our website

Nature and purpose of processing:

To register on our website, we need some personal data, which is transmitted to us via an input mask. At the time of registration, the following data is also collected: Time stamp. User registration is required to provide certain content and services on our website.

Legal basis:

We will process the data provided during registration only on the basis of your consent (Art. 6 para. 1 (a) GDPR).

Recipient:

The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Third country transfer:

The data collected may be transferred to the following third countries: USA. The following data protection guarantees exist: Standard contractual clauses

Retention period:

In this context, data is only processed as long as the relevant consent is available.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. Without providing your personal data, we cannot grant you access to the content we offer.

 

Providing chargeable services

Nature and purpose of processing:

For the provision of chargeable services, we ask for additional data, e.g. payment details, in order to be able to fulfil your order.

Legal basis:

The processing of the data necessary for the conclusion of the contract is based on Art. 6 Para. (1) (b) of the GDPR.

Recipient:

The recipient of the data may be a processor.

Retention period:

We store this data in our systems until the legal retention periods have expired. These are generally 6 or 10 years based on proper bookkeeping and tax law requirements.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

Contact form

Nature and purpose of processing:

The data you enter will be stored for the purpose of individual communication with you. To do this, you must provide a valid email address and your name. This is used to evaluate the request and then reply to it. The provision of any further data is optional.

Legal basis:

“The processing of the data entered in the contact form takes place on the basis of a legitimate interest (Art. 6 para. 1 (f) GDPR).
We provide the contract form to make it easy for you to contact us. The information you enter will be stored for the purposes of processing the request, as well as for any follow-up questions. If you contact us to request an quotation, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 (b) GDPR).”

Recipient:

The recipient of the data may be a processor.

Third country transfer:

The data collected may be transferred to the following third countries: USA. The following data protection guarantees exist: Standard contractual clauses

Retention period:

Data will be deleted no later than 6 months after processing the request. If a contractual relationship is concluded, we are subject to the statutory retention periods according to the German Commercial Code (HBG) and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your email address and the reason for the request.

Use of script libraries (Google Web Fonts)

“In order to display our content correctly and so that they are graphically appealing across all browsers, we use “”Google Web Fonts”” by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “”Google””) to display fonts.

Further information about how user data is handled can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at: https://www.google.com/policies/privacy/.”

Embedded YouTube videos

“We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter referred to as “”YouTube””). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheater Pkwy, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). As soon as you visit a page with a YouTube plug-in, a connection to the YouTube servers will be established. In doing so, YouTube will be informed which pages you are visiting. If you are logged in to your YouTube account, YouTube can attribute your browsing habits to you personally. You can prevent this by logging out of your YouTube account beforehand.
As soon as a YouTube video starts, the provider uses cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy. There, you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy).”

CRM provider HubSpot

“We use the HubSpot service for various purposes on our website. HubSpot is a US software company with a subsidiary in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Tel: +353 1 5187500. This is an integrated software solution which we use for various aspects of our online marketing. These include, among other things: email marketing, social media publishing & reporting, reporting, contact management (e.g. user segmentation & CRM), landing pages and contact forms. Our service allows visitors to our website to learn more about our company, download content and provide their contact information and other demographic information. This information, as well as the content of our website, is stored on the servers of our software partner, HubSpot. We may use this information to contact visitors to our website and to determine which of our company’s services are of interest to them. All the information we collect will be governed by this Privacy Policy. We use all the information we collect for the sole purpose of optimising our marketing activities.

– More information on the data protection provisions of HubSpot https://legal.hubspot.com/privacy-policy
– More information from HubSpot regarding the EU data protection regulations https://legal.hubspot.com/data-privacy
– More information about the cookies used by HubSpot https://knowledge.hubspot.com/articles/kcs_article/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser, https://knowledge.hubspot.com/articles/kcs_article/account/hubspot-cookie-security-and-privacy

As part of the optimization of our marketing activities, the following data can be collected and processed via Hubspot: Geographical position, browser type, navigation information, referral URL, performance data, information about how often the application is used, mobile apps data, login information for the HubSpot subscription service, files that are displayed on site, domain names, pages viewed, aggregated usage, version of the operating system, ISP (internet service provider), IP address, device ID, duration of the visit, where the application was downloaded from, operating system, events that occur within the application, access time, clickstream data, device model and version. We also use Hubspot to provide contact forms.

The legal basis for processing is your consent in accordance with Art. 6 Para. 1 (a) GDPR. If you do not want the data mentioned to be collected and processed via Hubspot, you can refuse your consent or revoke it at any time going forward. Personal data is kept for as long as it are necessary to fulfil the processing purpose. The data will be deleted as soon as it is no longer required for the purpose.

As part of the processing via HubSpot, data can be transmitted to the USA. The security of the transmission is secured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to create an adequate level of security, your consent in accordance with Art. 49 Para. 1 (a) GDPR serves as the legal basis for the transfer to third countries.”

LinkedIn

“We use LinkedIn to publish company news from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”). For this purpose, LinkedIn posts are embedded on individual pages of our website, which enable LinkedIn to collect statistical data about your visit and the use of our website. The relevant information is stored in a cookie. Further information on data processing can be found in LinkedIn’s privacy policy. The following data is usually collected and processed: IP address, device information, browser information, referrer URL, timestamp.

The legal basis for processing is your consent in accordance with Art. 6 Para. 1 (a) GDPR. If you do not want the data mentioned to be collected and processed via LinkedIn, you can refuse your consent or revoke it at any time going forward. Personal data is kept for as long as it are necessary to fulfil the processing purpose. The data will be deleted as soon as it is no longer required for the purpose.

As part of processing via LinkedIn, data can be transmitted to the USA and Singapore. The security of the transmission is regularly secured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR.”

Revocation of consent:

The provider currently does not offer the option of simply opting out or blocking data transmission. If you want to prevent your activities on our website from being tracked, please revoke your consent in the cookie consent tool for the corresponding cookie category or for all technically unnecessary cookies and data transfers. However, in this case you will not be able to use our website completely or only to a limited extent.

SSL encryption

We use state-of-the-art encryption methods (e.g. SSL) via HTTPS to protect the security of your data during transmission.

 

Information about your right of objection according to Art. 21 GDPR

Right of objection on a case-by-case basis

You have the right to object, at any time, for reasons arising from your particular situation, to the processing of your personal data carried out on the basis of Art. 6 para. 1 (f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you lodge an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

Recipient of an objection

privacy@propops.com

Changes to our privacy policy

We reserve the right to adjust this privacy policy so that it always meets the current legal requirements or to include changes to our services in the privacy policy, such as the introduction of new services. Any subsequent website access will then be subject to the terms of the new privacy policy.

Questions for the data protection officer

If you have any questions about data protection, please email us or contact the person responsible for data protection in our organisation directly: Data protection officer, privacy@propops.com