Privacy Notice for www.h-hotels.com

This Privacy Notice informs you how we process your personal data and what rights you have under data protection law. For terms such as “personal data” or “processing”, the definitions in Art. 4 GDPR apply.

1. Controller

H-Hotels GmbH is the controller for the processing of personal data within the scope of this Privacy Notice:

H-Hotels GmbH
Hauptstr. 66
12159 Berlin
Tel.: +49 (0) 551 3057100
Email: [email protected]

By way of derogation, My H-Hotels GmbH, Hauptstr. 66, 12159 Berlin, Germany, is the controller for data processing in connection with the former HotMiles loyalty programme. Further information can be found in section 17. The contact details of the data protection officer remain unchanged.

2. Questions about data protection

If you have any questions about data protection, you can contact our data protection officer:

Stefan Burghardt
RKM Data GmbH
Theaterstraße 12
37073 Göttingen
Tel.: +49 (0) 551 707 280
Email: [email protected]

3. Scope of this Privacy Notice

This Privacy Notice applies to the use of the website www.h-hotels.com including the online booking process accessible via it as well as the functions and services of My H-Hotels GmbH offered on this website. If you book a hotel via the website or stay there, personal data in connection with your booking and your stay – e.g. for check-in, registration form, accommodation contract, on-site billing or other hotel services – will be processed by the respective operating company of the booked hotel. General information on this can be found in our Privacy Notice for hotel guests. The specific operating company can be found in particular in your booking confirmation, the contract documents or the information about the respective hotel.

4. Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, misuse, loss and other external disturbances. We regularly review and update our security measures in accordance with the state of the art.

5. Your rights

You have the following rights in relation to your personal data:

Right of access: You can request access to the personal data processed by us (Art. 15 GDPR).
Right to rectification: You can request the correction of inaccurate or incomplete personal data (Art. 16 GDPR).
Right to erasure: You can request the deletion of your personal data, provided that the requirements of Art. 17 GDPR are met.
Right to restriction of processing: You can request the restriction of the processing of your personal data in accordance with Art. 18 GDPR.
Right to object to processing: You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation, provided that it is based on Art. 6 (1) (e) or (f) GDPR (Art. 21 (1) GDPR). If your personal data is processed for direct marketing purposes, you can object to this at any time (Art. 21 (2) GDPR).
Right to withdraw your consent: If the processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7 (3) GDPR).
Right to data portability: You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format or to have it transmitted to another controller under the conditions of Art. 20 GDPR.

To exercise your rights, you can contact the contact details set out in section 1 or our Data Protection Officer.

In addition, you have the right to complain to a data protection supervisory authority (Art. 77 GDPR). The responsible supervisory authority for our company is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, e-mail: [email protected].

6. Using our website

In principle, you can use our website for purely informational purposes without disclosing your identity. When individual pages are accessed, the technically necessary access data is automatically processed so that the website can be displayed on your device. In particular, the following data is processed:

Browser type/version
Operating system used
Language and version of the browser software
Date and time of access
Hostname of the accessing device
IP address.

The processing of this data is necessary to ensure the provision and security of the website. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the functionality as well as the integrity and security of the website. The data will be deleted as soon as it is no longer required for these purposes. This is usually the case when your visit to the website ends. Log file information is stored for a maximum period of 30 days and then deleted or anonymised, unless longer retention is necessary to clarify a security-relevant incident.

Right to object: You may object to processing on grounds relating to your particular situation.

7. Device information

When using our website, we use technologies that store information on your device or access information stored there, such as cookies or similar technologies. These may be used to enable the use of the website, to ensure its security, to provide content and functions, or to manage consent and Privacy Settings. In accordance with Section 25 (1) TDDDG, we generally require your consent to use such technologies. Consent is not required under Section 25 (2) TDDDG if the storage of information or access to information on your device is strictly necessary to provide a telemedia service that you have expressly requested or to enable the transmission of a message via a public telecommunications network.

7.1 Technically necessary technologies

Some technologies are required to provide the website, the online booking process and its basic functions or to enable communication via the Internet. This includes, in particular, information necessary to store language preferences, to manage an ongoing session, to provide the website securely or to use log-in areas.

The technically necessary services may also include external technical resources that are required to provide website components, security functions, fonts, technical libraries or integrated basic functions. Further information on the services used in each case can be found in the Privacy Settings.

The storage period depends on the respective purpose. If the storage is not limited to the duration of your visit, you can delete the stored information via the settings of your browser.

7.2 Consent management and Privacy Settings

To manage your consents and data protection settings, we use a consent management tool. This enables us to obtain, manage, document and implement consents for the use of technologies requiring consent.

On our website, we use the consent management tool “Usercentrics” from the provider Usercentrics GmbH (Sendlinger Straße 7, 80331 Munich, Germany). In particular, your consent and withdrawals of consent, information about your browser and device as well as the time and scope of your selection may be processed. The processing is carried out to comply with statutory evidence and documentation obligations on the basis of Art. 6 (1) sentence 1 (c) GDPR. Insofar as Usercentrics stores information on your device or accesses information stored there, this is done in accordance with Section 25 (2) TDDDG, insofar as this is necessary for the provision, management and documentation of your Privacy Settings. Further information on data protection at Usercentrics can be found in the Privacy Settings and under https://usercentrics.com/de/datenschutzerklaerung/.

7.3 Technologies that are not technically necessary

In addition, we use technologies that are not strictly necessary for the operation of the website, for example for analytics, marketing, tracking or comparable purposes. We use these only on the basis of your consent. The legal basis is Art. 6 (1) sentence 1 (a) GDPR and, insofar as information is stored or read out on your device, Section 25 (1) TDDDG. Further information on the services used in each case can be found in the Privacy Settings and in the following sections.

Right to withdraw consent: You can withdraw your consent at any time with effect for the future via the Privacy Settings.

8. Recipients of personal data

We only disclose personal data if there is a legal basis for doing so and the disclosure is necessary for the provision of the website, the processing of your request, the implementation of pre-contractual measures or contracts, payment processing, the fulfilment of legal obligations, the protection of legitimate interests or on the basis of your consent. The legal bases may include, in particular, Art. 6 (1) sentence 1 (b) GDPR, Art. 6 (1) sentence 1 (c) GDPR, Art. 6 (1) sentence 1 (f) GDPR or Art. 6 (1) sentence 1 (a) GDPR.

Depending on the function used, the purpose of the processing and the specific processing operation, the recipients of personal data may be the following entities in particular:

technical service providers, in particular hosting, infrastructure, security, maintenance and IT service providers,
service providers for website functions, booking, reservation, communication and service processes,
the respective operating company of the booked hotel, insofar as this is necessary to process your booking, reservation or stay,
payment service providers, credit institutions, card providers and other entities involved in payment processing,
providers of consent management, analytics, marketing, card, communication or similar services, insofar as they are used,
affiliated companies, insofar as this is necessary for central administration, booking, service or billing processes,
professional advisors such as lawyers, tax advisors and auditors, debt collection service providers as well as courts, authorities or other public bodies, insofar as this is necessary in individual cases.

Insofar as recipients process personal data on our behalf, this is done on the basis of corresponding data processing agreements pursuant to Art. 28 GDPR. Other recipients process personal data independently, insofar as they themselves are responsible for this. Insofar as recipients are independently responsible, their own privacy notices or statutory information obligations also apply.

9. Transfer to third countries

We process personal data primarily within the European Union or the European Economic Area. If, in individual cases, a transfer is made to recipients in third countries, we ensure that the requirements of Art. 44 et seq. GDPR are complied with. This may be done in particular on the basis of an adequacy decision of the European Commission, appropriate safeguards such as EU standard contractual clauses or, to the extent permitted by law, on the basis of your consent. Further information on specific transfers to third countries, in particular for individual service providers, can be found in the respective sections of this Privacy Notice and in the Privacy Settings.

10. Retention period

We store personal data only for as long as this is necessary for the respective processing purposes or statutory retention, evidence or documentation obligations apply. Once the respective purpose no longer applies, the data will be deleted or its processing restricted if statutory retention obligations prevent deletion. If this Privacy Notice specifies specific retention periods for individual processing operations, these shall take precedence. Further information on the retention period of individual services, in particular in connection with cookies and comparable technologies, can be found in the Privacy Settings.

11. Automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

12. Provision of personal data

The use of our website for purely informational purposes is generally possible without actively providing personal data. However, technically necessary access data is required to provide the website and to ensure its security. If you use certain functions, in particular contact forms, booking or reservation functions or payment services, the data marked as mandatory information in each case is required. Without this data, we cannot process the respective function, enquiry, booking, reservation or payment, or cannot process it completely. Further information is voluntary and is not necessary for the processing or use of the respective function.

13. Contacting our company

If you contact our company, e.g. by e-mail, telephone or via the contact form on the website, the personal data you provide will be processed by us in order to answer your enquiry. The provision of your title, first and last name and a valid e-mail address is mandatory for processing enquiries via the contact form. At the time the message is sent, your IP address and the date and time of the enquiry will also be processed. The legal basis for the processing is Art. 6 (1) (f) GDPR or Art. 6 (1) (b) GDPR, provided that the contact is aimed at initiating or executing a contract. The provision of the data required for this is necessary in order to be able to process your enquiry. We will delete the data processed in connection with your enquiry as soon as its storage is no longer necessary for processing. As a rule, this takes place two years after the conclusion of the communication, provided that there are no statutory retention obligations to the contrary.

Right to object: If the processing is based on Art. 6 (1) (f) GDPR, you can object to the processing on grounds relating to your particular situation.

14. Bookings and reservations

14.1 Booking

If you make a booking via our website, we process the personal data required for this purpose as part of the online booking process and for the mediation of the booking with the respective operating company of the booked hotel. This includes, in particular, your first and last name, your e-mail address, booking data and payment data, insofar as these are necessary for the use of the online booking process, the processing of your booking and the referral to the booked hotel. Mandatory information is marked accordingly in the booking process; further information is provided voluntarily. If you provide information about fellow travellers or other third parties, we will only process this data to the extent necessary for the processing of the booking or enquiry; in this case, the data comes from you. You also have the option of viewing your reservation on our website under "My Reservation" independently of a customer account. In order to be able to display your reservation, you must provide your reservation number, your e-mail address and your first and last name. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR, insofar as the processing is necessary for the initiation, brokerage or execution of the booking. Insofar as we process personal data for the secure, efficient and customer-oriented provision of the online booking process, the processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the provision and processing of a functional online booking option. In order to prevent access to your personal data by unauthorised third parties, the booking process on the website is encrypted using SSL technology. The data generated in this context will be deleted as soon as it is no longer required for the aforementioned purposes, provided that there are no statutory retention or documentation obligations to the contrary.

Right to object: Insofar as the processing is based on Art. 6 (1) (f) GDPR, you can object to the processing on grounds relating to your particular situation. If the processing can be controlled via the Privacy Settings, you can adjust your selection there.

14.2 Group bookings

If you enquire about or make a group booking, we process the personal data required for this purpose. This may include, in particular, inventory and contact data such as name, address, e-mail address and telephone number, as well as booking-related information, communication data and technical usage data. Service providers who process personal data on our behalf may be used for the technical provision and processing of group bookings. The processing is carried out to process your enquiry, to carry out pre-contractual measures or to fulfil contractual obligations on the basis of Art. 6 (1) sentence 1 (b) GDPR. Insofar as the processing is necessary for the secure and efficient provision of the group booking function, it is based on Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in the provision and processing of a functional group booking option.

15. Application process

The application process takes place via a separate application page. Information on the processing of personal data in the context of applications can be found in the Privacy Notice of our application page https://your.career.hrg-hotels.com/datenschutzhinweise.html.

16. H-Hotels App

The H-Hotels app is no longer offered. Insofar as personal data is still stored in connection with previous use of the app, we process it only to the extent necessary to wind down the discontinuation, process open enquiries or fulfil statutory evidence and retention obligations. The legal bases are Art. 6 (1) sentence 1 (b) GDPR, insofar as the processing is necessary to wind down previous usage relationships or open matters, and Art. 6 (1) sentence 1 (c) GDPR, insofar as statutory evidence or retention obligations apply. There is no further use, registration or provision of new app functions.

17. HotMiles loyalty programme

The “HotMiles” loyalty programme has been discontinued. Registration, use or crediting of points is no longer possible. My H-Hotels GmbH, Hauptstr. 66, 12159 Berlin, Germany, is the controller for data processing in connection with the former HotMiles programme. If you have previously participated in the HotMiles programme, we will process the data stored for this purpose only to the extent necessary to wind down the programme, to process open matters and to fulfil statutory evidence and retention obligations. This may include, in particular, surname, first name, e-mail address, registration data, information on participation or conclusion of the contract, points balances, booking or billing data and communication data. The legal bases are Art. 6 (1) sentence 1 (b) GDPR, insofar as the processing is necessary to wind down the previous contractual relationship, and Art. 6 (1) sentence 1 (c) GDPR, insofar as statutory evidence or retention obligations apply. The data stored in connection with HotMiles will be deleted as soon as it is no longer required for winding down the programme and no statutory evidence or retention obligations prevent deletion.

18. E-mail marketing

18.1 Existing customer advertising

We may use the e-mail address provided by you in connection with a booking, in accordance with the legal requirements, to send you information about similar services of our own or service information by e-mail, unless you have objected to this.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in direct advertising for similar services of our own as well as in informing our customers about service-related content.

Right to object: You can object to this use at any time without incurring any costs other than the transmission costs according to the basic rates. To do this, click on the unsubscribe link in the respective e-mail or send us your objection to the contact details listed in section 1.

18.2 Newsletter

The sending of our newsletter has been discontinued. No further newsletter will be sent. The data stored for the newsletter dispatch has been deleted. This applies in particular to contact details as well as registration and unsubscribe data that were stored in connection with a previous newsletter registration.

18.3 Customer Feedback Management

In order to improve our services, we may send you inquiries about customer satisfaction by e-mail in connection with a booking. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in quality assurance and improvement of our services.

Right to object: You may object to processing at any time on grounds relating to your particular situation. You can send your objection to the contact details set out in section 1.

19. Payment service providers

If you book a fee-based service on our website, we process the data required for payment processing. This may include, in particular, booking and payment data, billing data, the selected payment method and transaction information. The processing is carried out for the execution of the contract and for the processing of the payment on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR. Insofar as payment service providers, credit institutions or other service providers are involved in payment processing, the data required for this purpose will be transmitted to these recipients.

19.1 PayPal

If you choose to pay via PayPal, the data required for payment processing will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes the payment data under its own responsibility. Further information on data processing by PayPal can be found under https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

19.2 Other payment service providers

Depending on the selected payment method, other payment service providers, credit institutions or card providers may be involved in payment processing. In this case, we transmit the data required for payment processing to the respective parties involved. Details on data processing by the respective payment service provider can be found in its privacy notice.

19.3 Enforcement of legal claims / debt collection

In the event of outstanding claims, we may process personal data and transmit it to lawyers, courts, authorities or debt collection service providers, insofar as this is necessary for the assertion, exercise or defence of legal claims. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the enforcement of justified claims and the protection of our rights. The data will be deleted as soon as it is no longer required for this purpose, provided that there are no statutory retention obligations to the contrary.

Right to object: You may object to processing at any time on grounds relating to your particular situation. You can send your objection to the contact details set out in section 1.

Services and technologies used

20. Communication and service functions

Communication, service, booking and hotel function services may be used on our website to process enquiries, provide online functions, support booking and service processes or offer additional digital functions. Insofar as the use of these services or the associated access to information on your device is not technically necessary, the use is only based on your consent. Further information on the services used in each case, in particular on the provider, purpose, processed data, legal basis, retention period and possible transfers to third countries, can be found in the Privacy Settings.

20.1 Quicktext

If you have any questions about our hotels, accommodation, leisure activities, your booking or our company, you can use a virtual assistance function via the chat window of Quicktext. The provider is Quicktext SAS, 64 Rue Jean-Pierre Timbaud, 75011 Paris, France. In particular, first name, last name, e-mail address and the content of your message can be processed via the chat. If Quicktext uses cookies or comparable technologies, their use is based on your settings in the Privacy Settings and the requirements in section 7. The legal basis for the processing is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in the provision of an additional communication and service channel. Further information on Quicktext can be found in the Privacy Settings and under https://www.quicktext.im/de/datenschutzrichtlinie/.

Right to object: You can object to processing on grounds relating to your particular situation. To the extent that the processing can be controlled via the Privacy Settings, you can adjust your selection there.

20.2 Cendyn

Services provided by Cendyn Group LLC, 980 N. Federal Highway, 2nd Floor, Boca Raton, FL 33432, USA, may be used on our website. Cendyn supports us in the management of hotel bookings and guest-related services as well as in the optimisation and personalisation of the booking and customer experience. In particular, contact and billing data, information about stays, IP address, geographical location, device information and browser information may be processed. Insofar as Cendyn is necessary for the administration, provision or handling of booking and service processes, the processing may be based on Art. 6 (1) sentence 1 (b) GDPR or Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in the efficient administration and optimisation of booking and service processes. Insofar as Cendyn uses cookies or comparable technologies or the processing is carried out for analytics, optimisation or personalisation purposes, the use is only based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and, insofar as information is stored or read out on your device, in accordance with Section 25 (1) TDDDG. A transfer of personal data to the USA cannot be ruled out. Further information on Cendyn can be found in the Privacy Settings and under https://www.cendyn.com/privacy-policy/.

Right to withdraw consent: You can withdraw your consent at any time with effect for the future via the Privacy Settings. The lawfulness of processing carried out before withdrawal remains unaffected.

20.3 Other service, booking and hotel function services

In addition, other functional services specified in the Privacy Settings may be used, in particular Customer Alliance, Duetto, Feratel, The Hotels Network and Treedis. Depending on the function, these services may be used to provide booking, rating, service, offer or hotel functions. Depending on the service, contact, booking, usage, device or communication data may be processed in particular. Insofar as the use of these services or the associated access to information on your device is not technically necessary, the use is only based on your consent. Further information on the provider, purpose, processed data, legal basis, retention period and possible transfers to third countries can be found in the Privacy Settings.

Right to withdraw consent: You can withdraw your consent at any time with effect for the future via the Privacy Settings.

21. Map and location services

Map, location and similar services may be used on our website to provide map content, location information or to make it easier to find hotels and offers. Insofar as the use of these services or the associated access to information on your device is not technically necessary, the use is only based on your consent. Further information can be found in the Privacy Settings.

21.1 Google Maps

The map service Google Maps is integrated into our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; recipients of personal data may also be Google LLC and Alphabet Inc. Google Maps is used to display map content and location information. In particular, IP address, date and time of access, URL, usage and interaction data, location information, search terms and device information may be processed. The use is only based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and, insofar as information is stored or read out on your device, in accordance with Section 25 (1) TDDDG. A transfer to third countries, in particular to the USA, cannot be ruled out. Further information on Google Maps can be found in the Privacy Settings and under https://business.safety.google/privacy/ and https://policies.google.com/technologies/cookies.

Right to withdraw consent: You can withdraw your consent at any time with effect for the future via the Privacy Settings.

22. Embedded content, translation and security features

Functional services may be used on our website to integrate external content, translate content or protect forms and online functions. According to the services listed in our consent management tool, these include, in particular, Google Fonts, Google Hosted Libraries, Google Translate, YouTube Video and reCAPTCHA. Depending on the function, technical information such as IP address, browser and device information, language settings or user interactions may be processed. Insofar as the use of these services or the associated access to information on your device is not technically necessary, the use is only based on your consent. Further information on the provider, purpose, processed data, legal basis, retention period and possible transfers to third countries can be found in the Privacy Settings.

Right to withdraw consent: You can withdraw your consent at any time with effect for the future via the Privacy Settings.

23. Hosting and Infrastructure

The infrastructure and provision services of our website may include, in particular, Amazon Web Services, Google Cloud and Cloudflare. These services may be necessary to provide the website technically, to deliver content, to improve loading times, to support security functions or to ensure the stability of the online offering. Insofar as information is stored or read out on your device in connection with these services, this is based on the requirements in section 7 and the respective Privacy Settings.

23.1 Hosting

For the operation and provision of our website, we make use of hosting and infrastructure services provided by external service providers. In particular, IP addresses, access data, technical usage data and communication data may be processed insofar as this is necessary to provide the website reliably, securely and efficiently. The processing is carried out on the basis of Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website. Insofar as service providers act on our behalf, this is done on the basis of corresponding data processing agreements. A transfer to third countries may take place if individual service providers or their subcontractors are used outside the European Union or the European Economic Area. In this case, the transfer will only take place if the data protection requirements are met.

23.2 Cloudflare

In order to provide our website securely and efficiently, we may use the services of a content delivery network, in particular Cloudflare. In particular, IP addresses, access data and technical usage data may be processed in order to deliver content more quickly, protect the website and ensure the stability of the online offering. The legal basis is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website. Further information can be found in the Privacy Settings.

24. Analytics, Marketing and Tracking Services

Analytics, marketing and tracking services may be used on our website to statistically evaluate the use of our website, to measure the reach of offers, to optimise content and advertising or to enable the control of technical and marketing-related services. We use these services only on the basis of your consent. The legal basis is Art. 6 (1) sentence 1 (a) GDPR and, if information is stored or read out on your device, Section 25 (1) TDDDG. Further information on the services used in each case, in particular on the provider, purpose, processed data, legal basis, retention period and possible transfers to third countries, can be found in the Privacy Settings.

Right to withdraw consent: You can withdraw your consent at any time with effect for the future via the Privacy Settings of our consent management tool. The lawfulness of processing carried out before withdrawal remains unaffected.

24.1 Google Tag Manager

We may use Google Tag Manager to technically manage services and functions on our website and to trigger them depending on your settings in the consent management tool. Google Tag Manager serves in particular to control integrated tags and does not itself trigger any further analysis for its own purposes. If further services are activated via Google Tag Manager, this will only be done in accordance with your respective selection in the Privacy Settings. Further information on the purpose, provider, processed data and retention period can be found in the Privacy Settings.

24.2 Google Analytics

We may use Google Analytics to statistically evaluate the use of our website and to improve our online offering. In particular, information about page views, interactions with the website, technical device and browser information as well as shortened or otherwise protected online identifiers may be processed. The use is only based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and, insofar as information is stored or read out on your device, in accordance with Section 25 (1) TDDDG. Further information on the purpose, provider, processed data, retention period, legal basis and possible transfers to third countries can be found in the Privacy Settings.

24.3 Google Ads, Google AdServices, DoubleClick Ad and Google Syndication

We may use Google services for advertising, conversion and reach measurement purposes, in particular Google Ads, Google AdServices, DoubleClick Ad and Google Syndication. These services can be used to measure the effectiveness of advertising measures, to evaluate conversion events, to control advertising or to create statistical evaluations. The use is only based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and, if information is stored or read out on your device, in accordance with Section 25 (1) TDDDG. Further information on the purpose, provider, processed data, retention period, legal basis and possible transfers to third countries can be found in the Privacy Settings.

24.4 Meta / Facebook Pixel and Facebook Social Plugins

We may use services from Meta or Facebook, in particular Facebook Pixel and Facebook social plugins. These services may be used to measure reach and conversions, to evaluate the use of our website in connection with Facebook services or to integrate content from social networks. The use is only based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and, insofar as information is stored or read out on your device, in accordance with Section 25 (1) TDDDG. Further information on the purpose, provider, processed data, retention period, legal basis and possible transfers to third countries can be found in the Privacy Settings.

24.5 Microsoft Advertising Remarketing and Microsoft Clarity

We may use services from Microsoft, in particular Microsoft Advertising Remarketing and Microsoft Clarity. These services may be used to evaluate the use of our website, to measure reach and conversions, to create usage-related evaluations or to control advertising based on usage. The use is only based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and, if information is stored or read out on your device, in accordance with Section 25 (1) TDDDG. Further information on the purpose, provider, processed data, retention period, legal basis and possible transfers to third countries can be found in the Privacy Settings.

24.6 Other marketing, affiliate and tracking services listed in the Privacy Settings

In addition, other marketing, affiliate, analytics and tracking services listed in the Privacy Settings may be used. According to the services currently listed in our consent management tool, these include, in particular, AWIN, Adform, Adition, Adobe Experience Cloud, Adscale, BIDSWITCH, Criteo, Freewheel, ID5 Technology, Improve Digital International, JENTIS, Media.net, Mediavine, OpenX Software, Outbrain, PubMatic, RTB House, Taboola, Teads, The Reach Group, TripleLift, Triptease, Twitter Advertising, Unruly, Xandr and reBounce. Depending on the service, these services may use cookies, pixels, comparable technologies or other identifiers in particular to measure reach, evaluate advertising measures, make affiliate or partner assignments, display personalised or usage-related advertising, provide embedded content or statistically analyse the use of our website. The use is only based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and, if information is stored or read out on your device, in accordance with Section 25 (1) TDDDG. Further information on the individual services, in particular on the provider, purpose, processed data, legal basis, retention period and possible transfers to third countries, can be found in the Privacy Settings.

25. Social Media Presences

We maintain publicly accessible profiles on social networks and online platforms, in particular Facebook, Instagram, LinkedIn, XING and YouTube. These social media presences serve our corporate presentation, the provision of information about our offers and communication with interested parties, customers and users.

When users visit or interact with our social media presences, master data, communication and content data, usage data and technical data may be processed, depending on user behaviour and account settings. Where we process personal data ourselves in connection with our social media presences, the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interests lie in modern corporate presentation, providing information about our offers and communication with users. Where communication serves the initiation or performance of a contract or pre-contractual measures, the legal basis is Art. 6 (1) (b) GDPR. Where users have given consent, processing is based on Art. 6 (1) (a) GDPR.

For certain processing activities, in particular statistical evaluations regarding the use of our profiles, joint controllership under Art. 26 GDPR with the respective platform operator may exist. Information on joint controllership for Facebook and Instagram is available at https://www.facebook.com/legal/terms/page_controller_addendum; information on joint controllership for LinkedIn is available at https://legal.linkedin.com/pages-joint-controller-addendum.

The platform operators are generally independently responsible for further processing activities, in particular after users access the respective platform. Further information on data processing, third country transfers, retention periods and data subject rights can be found in the privacy notices of the respective platform operators.

Users may exercise their data subject rights both against us and against the respective platform operator. However, it is often most effective to contact the platform operator directly, as the platform operator has direct access to the relevant usage data.

26. Final Provisions

Status: August 2026.

We reserve the right to amend this Privacy Notice in the future, in particular in the event of technical developments of our website, new functions or changes to the legal framework. The current version published on our website applies in each case.

» Data protection declaration for France

» Data protection declaration for Switzerland