Privacy Policy

Mandatory information pursuant to Art. 12 et seq. GDPR

Contact details of the responsible party (management)

Name: Petrasch First name: Kathrin

Contact details (business)

Company: Pure Berlin Apartment UG (limited liability)

Address:

Mühlenstraße 20, 10243 Berlin E-Mail: pure-berlin-ug@gmx.de

Contact details of the data protection officer

pure-berlin-ug@gmx.de

Where do we obtain your personal data from?

Your data is generally collected directly from you. The processing of the personal data you provide is necessary for fulfilling the contractual obligations arising from the contract concluded with us. Due to your duty to cooperate, it is essential that you provide the personal data we request, as we would otherwise be unable to fulfill our contractual obligations. Failure to do so may result in accounting and/or tax disadvantages for you.

Providing your personal data is necessary for pre-contractual measures (e.g., collecting master data during the lead generation process). If you do not provide the requested data, a contract cannot be concluded.

To provide our services, it may be necessary to process personal data that we have lawfully obtained from other companies or other third parties, e.g., tax authorities, your business partners, etc., for the respective purpose.

Furthermore, we may process personal data from publicly accessible sources, e.g., websites, which we use lawfully and only for the respective contractual purpose.

Purposes and legal bases of processing

The personal data you provide will be processed in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

Based on consent (pursuant to Art. 6 para. 1 lit. a GDPR)

The purposes of processing personal data arise from the granting of consent. You can revoke your consent at any time with effect for the future. This also applies to consents granted before the GDPR came into effect (May 25, 2018). Processing that took place before the revocation remains unaffected. Examples include sending a newsletter or releasing us from professional confidentiality obligations to disclose your data to third parties (e.g., banks, insurance companies, shareholders, etc.) at your request.

To fulfill contractual obligations (pursuant to Art. 6 para. 1 lit. b GDPR)

The purposes of data processing arise firstly from the initiation of pre-contractual measures that precede a contractually regulated business relationship and secondly from the fulfillment of the obligations arising from the contract concluded with you.

Due to legal requirements (pursuant to Art. 6 para. 1 lit. c GDPR) or in the public interest (pursuant to Art. 6 para. 1 lit. e GDPR)

The purposes of data processing arise from legal requirements or are in the public interest (e.g. compliance with retention obligations, proof of compliance with the tax advisor's notification and information obligations).

Within the framework of the balancing of interests (pursuant to Art. 6 para. 1 lit. f GDPR)

The purposes of processing your data arise from the protection of our legitimate interests. It may be necessary to process the data you have provided beyond the actual fulfillment of the contract. Our legitimate interest can be used to justify the further processing of the data you have provided, provided that your interests or fundamental rights and freedoms do not override it. Our legitimate interest may, in specific cases, include: asserting legal claims, defending against liability claims, and preventing criminal offenses.

Who receives the personal data you have provided?

Within our company, access to the personal data you provide is granted only to those departments that require it to fulfill contractual and legal obligations and that are authorized to process this data.

In fulfillment of the contract concluded with you, only those bodies that require the data you have provided for legal reasons will receive it, e.g., tax authorities, social security institutions, competent authorities and courts.

As professionals bound by confidentiality, we are obligated to maintain and uphold professional secrecy. Other recipients will only receive the data you provide at your request, if you release us from our professional confidentiality obligations.

As part of our service provision, we engage data processors who contribute to fulfilling our contractual obligations, e.g., data center service providers, IT partners, document shredding companies, etc. These data processors are contractually obligated by us to maintain professional confidentiality and to comply with the requirements of the GDPR and the BDSG.

Will the data you provide be transferred to third countries or international organizations?

Under no circumstances will the data you provide be transferred to a third country or an international organization. Should you, in a specific case, wish for the data you provide to be transferred to a third country or an international organization, we will only do so with your written consent and release from professional confidentiality obligations.

Is automated decision-making, including profiling, taking place?

No fully automated decision-making (including profiling) pursuant to Art. 22 GDPR is used for processing the data you have provided.

Duration of processing (criteria for deletion)

The data you provide will be processed for as long as necessary to fulfill the contractually agreed purpose, generally for the duration of your contractual relationship with us. After the termination of the contractual relationship, your data will be processed to comply with statutory retention obligations or based on our legitimate interests. Once the statutory retention periods have expired and/or our legitimate interests no longer apply, your data will be deleted.

Expected retention periods for our legal obligations and legitimate interests:

Compliance with commercial, tax, and professional retention periods. The retention and documentation periods stipulated therein range from two to ten years.
Preservation of evidence within the framework of the statute of limitations. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the standard limitation period being three years.

Information about your rights

Right of access (Article 15 GDPR):

You have the right to request information free of charge as to whether and what data about you is stored and for what purpose the storage takes place.

Right to rectification (Article 16 GDPR):

You have the right to request that the controller rectify any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (“right to be forgotten”) Art. 17 GDPR:

You have the right to request that the data controller delete your data without undue delay. The data controller is obligated to delete personal data without undue delay if one of the following grounds applies:

The purposes for which the personal data were collected no longer apply.
You withdraw your consent to the processing. There is no other legal basis for the processing.
You object to the processing. There is no other legal basis for the processing.
The personal data was processed unlawfully.
The erasure of personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
The personal data were collected in relation to information society services offered in accordance with Article 8(1).
Right to restriction of processing Art. 18 GDPR & § 35 BDSG:

You have the right to request the restriction of processing if one of the following conditions is met:

You question the accuracy of the personal data.
The processing is unlawful; however, you refuse to have it deleted.
Personal data is no longer needed for the purposes of processing; however, you require the data for the establishment, exercise or defense of legal claims.
You have objected to the processing pursuant to Article 21(1) GDPR. Until it is determined whether the legitimate grounds of the controller override your interests, the processing will be restricted.
Right to data portability (Article 20 GDPR):

You have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format from the data controller. We may not hinder the transfer of this data to another data controller.

Right to object pursuant to Article 21 GDPR:

For this, please contact the data controller (so).

Right to lodge a complaint with the supervisory authority pursuant to Art. 13 para. 2 lit. d, 77 GDPR and § 19 BDSG:

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority. Please contact the relevant supervisory authority for this purpose.

Withdrawal of consent pursuant to Art. 7 para. 3 GDPR:

If the processing is based on your consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a (processing of special categories of personal data), you are entitled to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

Use of social media

The information on this website is supplemented by buttons from the social networks Facebook and Instagram, and the video portal YouTube. Simply visiting this page does not automatically transmit any data to the servers of these services. The buttons are only linked; that is, no plugins from the respective providers are implemented that would transmit data before the buttons are clicked. Data is only transmitted to the respective service providers when the buttons are clicked.

The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the legal provisions (GDPR, BDSG). In this privacy policy, we inform you about the most important aspects of data processing within the framework of our website.

General access data collection

We collect a range of general data and information each time a data subject or an automated system accesses our website. This general data and information is stored in the server's log files. The following data is collected:

an Internet Protocol address (IP address),
the date and time of access to the website,
the exact subpage that was accessed on our website,
the website from which you accessed our website (so-called referrer),
the browser used and its version
and the operating system used for access.

We process the aforementioned data for the following purposes:

to ensure a smooth connection to the website,
to optimize the content of our website for you,
and to ensure system security and stability.

These points are in your and our legitimate interest. We may also use this data to comply with our legal obligations in cooperation with law enforcement agencies. Under no circumstances will we use the collected data to draw conclusions about your identity. The legal basis for data processing is Article 6(1)(f) GDPR. These log files are stored for two months.

Appointment scheduling, complimentary initial consultation, apply online

When you contact us via the form on our website or by email, or when you apply for a position, we store the information you provide, as well as the general data described above. By using our form, you consent to the processing of your data. We do not share this data with third parties and use it exclusively to process your inquiry and respond to your request. In the case of contact via email, the processing of your inquiry constitutes the necessary legitimate interest in processing your data. The legal basis for processing your data, if you have given your consent, is Article 6(1)(a) GDPR. The legal basis for processing data transmitted via email is Article 6(1)(f) GDPR. The data transmitted to us during the contact process will be deleted as soon as it is no longer needed to achieve the aforementioned purpose. With regard to personal data from the contact form and data transmitted via email, this is the case as soon as the respective conversation has ended. This is the case once the facts of the case have been conclusively clarified. If the contact is also aimed at concluding a contract, the further legal basis is Article 6(1)(b) GDPR. In this case, we will retain your inquiry as a business letter for 7 years.

Reminder service

When you register for our reminder service, we process and store your email address to send you regular email reminders about upcoming appointments, as requested. Your consent to the processing of this data will be obtained during the registration process. We will retain your data until you unsubscribe from the reminder service. We will not share your email address without your consent. Registration is required for the reminder service. The legal basis for processing your data is Article 6(1)(a) of the GDPR. You can unsubscribe at any time. You can withdraw your consent to the reminder service and unsubscribe from this service at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent by clicking the link provided in every reminder email or by contacting us using the contact details provided in the legal notice.

Gründercheck

When you use our startup check, we collect your name, email address, phone number, and postal address in order to send you your personalized evaluation and offer you pre-contractual advice regarding your business startup. The legal basis for this is Article 6(1)(b) GDPR. As business correspondence, we retain this data for 7 years. We will not share this data without your consent.

Your rights

You have the fundamental rights to information, rectification or erasure, restriction of processing, data portability, withdrawal of consent, and objection to processing. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. A list of the competent supervisory authorities by federal state can be found at www.datenschutz-wiki.de.

Further information about your rights can be found, among other places, on the website of the BFDI - The Federal Commissioner for Data Protection and Freedom of Information.

To improve your experience on our website, we use small text files known as "cookies" to track user preferences and optimize our website accordingly. However, we do not use cookies to track individual visits to our website. Most websites routinely use cookies today. If you have any concerns, you can configure your browser to reject cookies.