TIMEHOUSE – Serviced Apartments München

Logo Timehouse weiss

Datenschutz

(German version)

Information on Data Protection pursuant to Art. 13 GDPR for our Social Media Channels 

Contact details of the Controller 
The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is 
Timehouse Betreiber GmbH & Co. KG 
Leopoldstraße 204a 
80804 Munich 
Germany 
Email: wecare@timehouse.de 
Telephone: +49 89 23020000 
insofar as we process the data transmitted to us by you via Facebook (Meta) exclusively ourselves. 

Contact Data Protection Officer Timehouse Betreiber GmbH & Co. KG 
Sven Lenz 
Deutsche Datenschutzkanzlei – Datenschutzkanzlei Lenz GmbH & Co. KG 
Bahnhofstraße 50 
87435 Kempten 
Germany 
If you have any questions about data protection or other data protectionrelated concerns, you may send an email to the following address: datenschutz@timehouse.de 

Data Protection Information Facebook (Meta) 
The following information explains how we handle your personal data. Personal data means all data that can personally identify you. Please check carefully which personal data you share with us via Facebook (Meta). As long as you are logged into your Facebook (Meta) account and visit our Facebook (Meta) profile, Facebook (Meta) may associate this with your Facebook (Meta) profile. We explicitly point out that Facebook (Meta) stores the data of its users (e.g. personal information, IP address, etc.) and may also use this data for business purposes. Further information on Facebook (Meta)’s data processing can be found in Facebook (Meta)’s privacy policy at https://de-de.facebook.com/policy.php. 

We have no influence on data collection and further processing by Facebook (Meta). Nor is it apparent to us to what extent, where, and for how long the data is stored by Facebook (Meta), to what extent Facebook (Meta) complies with deletion obligations, what evaluations and links with data are carried out by Facebook (Meta), and to whom the data is passed on by Facebook (Meta). If you want to avoid Facebook (Meta) processing personal data transmitted to us by you, please contact us through other means. 

Insofar as the data transmitted to us by you via Facebook (Meta) is also or exclusively processed by Facebook (Meta) (Insights data), Facebook (Meta) Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is also a controller for data processing within the meaning of the GDPR in addition to us. The data processing takes place on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum. 

In addition, for the use of certain Facebook (Meta) products, such as the “Facebook (Meta) Business Tools,” and for data processing carried out through them, an additional agreement between us and Facebook (Meta) Ireland Ltd. as joint controllers pursuant to Art. 26 GDPR applies, which can be viewed here: https://www.Facebook(Meta).com/legal/controller_addendum 

The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data. 
You can contact Facebook (Meta)’s Data Protection Officer via the online contact form provided by Facebook (Meta). 

Data Processing for Statistical and Marketing Purposes 
Page Insights 
Facebook (Meta) provides us with socalled Page Insights for our Facebook (Meta) page: https://www.facebook.com/business/a/page/page-insights. These are aggregated data that give us insight into how people interact with our page. Page Insights may be based on personal data collected in connection with a visit to or interaction with our page and its content. This serves, pursuant to Art. 6 (1) lit. f GDPR, to protect our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties. 
You may object to the processing of your data for the purposes mentioned by changing your ad settings in your Facebook (Meta) user account at https://www.facebook.com/settings?tab=ads. 

Data Protection Information Instagram 
The following information explains how we handle your personal data in connection with our Instagram page. Personal data means all data that can personally identify you. 

For the processing of your personal data on this online presence, we are jointly responsible with Instagram Inc. (“Instagram”) within the meaning of Art. 26 GDPR, because we use the technical platform and services of Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, for the information service offered on Instagram under …. 
Instagram is part of the Facebook (Meta) corporate group and shares infrastructure, systems, technology, and possibly personal data (e.g. personal data, IP numbers, etc.) with Facebook (Meta) and other Facebook (Meta) companies. 

We ourselves process personal data on our Instagram page (see section 1), while data is also processed by Facebook (Meta) as operator of the Instagram platform (see section 2). 

Please check carefully which personal data you share with us via Instagram. As long as you are logged into your Instagram account and visit our Instagram page, Instagram may associate this with your Facebook (Meta) profile. We explicitly point out that Instagram passes on this data to Facebook (Meta) and its affiliated companies. Facebook (Meta) stores user data (e.g. personal information, IP address etc.) and may use it for business purposes. 

Further information on data processing by Instagram and Facebook (Meta) can be found at https://www.instagram.com/legal/privacy/ and https://de-de.facebook.com/policy.php. 

We collect personal data ourselves when you contact us (e.g. via a contact form or by liking or commenting on our posts or following our profile). The data collected when contacting us via a contact form can be found in the respective contact form. These data are stored and used solely for the purpose of responding to your inquiry and the related technical administration. The legal basis for processing is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR. 

The data you enter on Instagram, in particular your username and the content published under your account, is also processed by us insofar as we may link your posts, respond to them, or create our own posts referring to your account. The data you publish freely on Instagram is incorporated into our offer and made accessible to our followers. 

Recipients of data you enter or disclose on our Instagram page also include Instagram or Facebook (Meta), which may use the data for their own purposes and pass it on to third parties under their own responsibility. Recipients of published personal data, e.g. in posts, also include the public, i.e. potentially anyone. 

The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods). When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) lit. a GDPR, this data is stored until the data subject withdraws their consent. If statutory retention periods exist for data that is processed in the context of contractual or quasicontractual obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for the fulfilment of the contract or the initiation of a contract and/or we have no legitimate interest in its continued storage. 

When processing personal data on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. 

When processing personal data for the purpose of direct advertising on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR. Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed. 

Processing of personal data by Instagram and Facebook (Meta) 
Insofar as the data transmitted to us by you via Facebook (Meta) is also or exclusively processed by Facebook (Meta) (Insights Data), Facebook (Meta) Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is, in addition to us, a controller within the meaning of the General Data Protection Regulation (GDPR). The data processing in this respect is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR, which you can view here: https://www.Facebook (Meta).com/legal/controller_addendum 

The Instagram page is part of the online platform operated by Facebook (Meta) at https://www.instagram.com/. The purposes of the data processing associated with this platform by Instagram (in particular the operation of the platform itself and the placement of advertising on the platform), the legal bases for this and the legitimate interests pursued in this regard are described in Instagram’s Data Policy at https://www.instagram.com/legal/privacy/ 

We have no influence over the data collection and further processing by Instagram. Furthermore, it is not apparent to us to what extent, at what location and for what duration the data resulting from the visit to our Instagram page is stored by Instagram and Facebook (Meta), to what extent Facebook (Meta) complies with deletion obligations, what analyses and links with the data are carried out by Instagram and/or Facebook (Meta), and to whom the data is passed on. 

Which personal data and thus information about the users of the Instagram platform and Facebook (Meta) receive and how they are used is described by Instagram in general terms in its Data Use Guidelines at https://help.instagram.com/519522125107875. 

By using Instagram, your personal data is collected, transferred, stored, disclosed and used by Instagram and transferred and stored and used in the United States, Ireland and any other country in which Facebook (Meta) conducts business, regardless of your place of residence. 

Instagram and Facebook (Meta) process, on the one hand, the data you voluntarily enter, such as name and username, email address, telephone number. 

On the other hand, Instagram and Facebook (Meta) also analyse the content you share to determine which topics you are interested in, store and process confidential messages that you send directly to other users, and can determine your location based on GPS data, information on wireless networks or via your IP address in order to provide you with advertising or other content. 

Finally, Facebook (Meta) also receives information when you view content, even if you have not created an account. These socalled “log data” may include the IP address, browser type, operating system, information on the previously visited website and the pages you visit, your location, your mobile carrier, the device you use (including device ID and application ID), the search terms you use and cookie information. 

Furthermore, for the use of certain Facebook (Meta) products, such as the socalled “Facebook (Meta) Business Tools”, and for data processing carried out through them, an additional agreement between us and Facebook (Meta) Ireland Ltd. as joint controllers pursuant to Art. 26 GDPR applies, which can be viewed here: https://www.Facebook (Meta).com/legal/controller_addendum 

Data processing for statistical and marketing purposes 
Instagram provides us with socalled Page Insights for our Instagram page. These are aggregated data through which we can gain insight into how people interact with our page. Page Insights may be based on personal data that is collected in connection with a visit to or interaction with our page and its content. This serves, pursuant to Art. 6 (1) lit. f GDPR, to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties. You may object to the processing of your data for the purposes at any time by adjusting your advertising settings in your Instagram user account accordingly. 

Duration of the storage of personal data 
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods). When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) lit. a GDPR, this data is stored until the data subject withdraws their consent. If statutory retention periods exist for data that is processed in the context of contractual or quasicontractual obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for the fulfilment of the contract or the initiation of a contract and/or we have no legitimate interest in its continued storage. 

When processing personal data on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. When processing personal data for the purpose of direct advertising on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR. Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed. 

Data Protection Information LinkedIn 
The following information explains how we handle your personal data. Personal data means all data that can personally identify you. Please check carefully which personal data you share with us via the social medium LinkedIn. We explicitly point out that LinkedIn stores the data of its users (e.g. personal information, IP address etc.) and may also use these data for business purposes. Further information on data processing by LinkedIn can be found in LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv. 

We have no influence on data collection and further processing by LinkedIn. Nor is it apparent to us to what extent, where, and for how long the data is stored, to what extent LinkedIn complies with deletion obligations, what evaluations and links with data are carried out, and to whom the data is passed on. If you want to avoid LinkedIn processing personal data transmitted to us by you, please contact us through other means. Our complete contact details can be found in our imprint on LinkedIn. 

Insofar as the data transmitted to us by you via LinkedIn is also or exclusively processed by LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is, in addition to us, a controller within the meaning of the General Data Protection Regulation (GDPR) if you reside in a country of the European Union, Iceland, Liechtenstein, Norway or Switzerland. If you reside in another country, LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, is, in addition to us, also a controller within the meaning of the GDPR. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. 

Contact Data Protection Officer LinkedIn Ireland Unlimited Company 
You can contact LinkedIn Ireland Unlimited Company or LinkedIn Corporation via the contact form available at the following link: 
https://www.linkedin.com/help/linkedin/ask/TSO-DPO  

 

Data Protection Information for XING 
The following information explains how we handle your personal data. Personal data means all data that can personally identify you. Please check carefully which personal data you share with us via the social medium XING, which is operated by XING SE, Dammtorstraße 30, 20354 Hamburg. We explicitly point out that XING stores the data of its users (e.g. personal information, IP address, etc.) and may also use these data for business purposes. Further information on XING’s data processing can be found in XING’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung. 

We have no influence on data collection and further processing by XING. Nor is it apparent to us to what extent, at what location and for what duration the data is stored, to what extent XING complies with deletion obligations, what analyses and links with the data are carried out, and to whom the data is passed on. If you want to avoid XING processing personal data transmitted to us by you, please contact us through other means. Our complete contact details can be found in our imprint on XING. 

Insofar as the data transmitted to us by you via XING is also or exclusively processed by XING, XING SE, Dammtorstraße 30, 20354 Hamburg, Germany, is, in addition to us, a controller for data processing within the meaning of the General Data Protection Regulation (GDPR). The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. 

Data Protection Information YouTube 
The following informs you about how we handle your personal data. Personal data means all data that can personally identify you. Please check carefully which personal data you share with us via YouTube. We explicitly point out that YouTube stores the data of its users (e.g. personal information, IP address etc.) and may also use these data for business purposes. We have no influence on data collection and further processing by YouTube. Furthermore, it is not apparent to us to what extent, where, and for how long the data is stored, to what extent YouTube complies with deletion obligations, what analyses and links with the data are carried out and to whom the data is passed on. If you want to avoid YouTube processing personal data transmitted to us by you, please contact us through other means. 

Insofar as the data transmitted to us by you via YouTube is also or exclusively processed by YouTube, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is, in addition to us, a controller for data processing within the meaning of the General Data Protection Regulation (GDPR). 

Further information on the data processing of Google Ireland Limited can be found in the privacy policy of Google Ireland Limited at: https://policies.google.com/privacy?hl=de&gl=de. 

This privacy policy applies to all services offered by Google Ireland Limited and its affiliated companies – including YouTube. In the course of using YouTube, personal data may also be transferred to the servers of Google LLC in the USA. 

The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. 

Data processing when contacting us 
We ourselves collect personal data when you contact us, e.g. via contact form or messenger. Which data we collect when contacting us via contact form can be found in the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry and for contacting you and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1) lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your inquiry has been fully processed, unless statutory retention obligations prevent this. We consider processing completed when it can be inferred from the circumstances that the relevant matter has been finally clarified. 

Rights of the data subject 
The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) with regard to the processing of your personal data, about which we inform you below: 

  • Right of access pursuant to Art. 15 GDPR; 
  • Right to rectification pursuant to Art. 16 GDPR; 
  • Right to erasure pursuant to Art. 17 GDPR; 
  • Right to restriction of processing pursuant to Art. 18 GDPR; 
  • Right to notification pursuant to Art. 19 GDPR; 
  • Right to data portability pursuant to Art. 20 GDPR; 
  • Right to withdraw consent granted pursuant to Art. 7 (3) GDPR; 
  • Right to lodge a complaint pursuant to Art. 77 GDPR. 

Right to object (general) 
If we process your personal data on the basis of our overriding legitimate interest within the framework of a balancing of interests, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation. If you exercise your right to object, we will cease processing the data concerned. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.