The controller within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR) is: Trockland Sixty2 West GmbH, and Trockland Sixty2 East GmbH, Project companies of the Trockland Management GmbH, Hauptstrasse 27, 10827 Berlin, p +49 30 2363137-0, datenschutz[at]trockland.com (see our imprint)
You can reach our data protection officer, Mr. Christian Krösch, Attorney-at-law, SLK Compliance Services GmbH, Königsbruecker Straße 76, 01099 Dresden, by telephone: +49 351 89676360 or by e-mail: datenschutz[at]slk-compliance.de.
Primarily, the data processing serves the provision of access to our website as well as the establishment and fulfillment of a contractual relationship with you. When you contact us by e-mail, via a contact form or by telephone, the data you provide (e.g. your e-mail address, name and telephone number, if applicable) will be stored by us in order to process your request. The primary legal basis for this is Art. 6 (1) (b) GDPR. In addition, your separate consent pursuant to Art. 6 (1) (a) GDPR may be used, if applicable. We also process your data in order to be able to fulfill our legal obligations, in particular in the area of commercial and tax law. This is done on the basis of Art. 6 (1) (c) GDPR. Where necessary, we also process your data on the basis of Art. 6 (1) (f) GDPR in order to protect legitimate interests of us or of third parties. These interests may arise, for example, for advertising, insofar as you have not objected to the use of your data, the assertion of legal claims and defense in legal disputes, ensuring the IT security of our company and for measures for business management and further development of services and products.
We will only disclose your personal data to third parties if you have given your consent in accordance with Art. 6 (1) (a) GDPR, the disclosure is necessary for the assertion, exercise or defense of legal claims or for the protection of our legitimate interests in accordance with Art. 6 (1) (f) GDPR (e.g. affiliated companies, courts, tax advisors, lawyers) and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) (c) GDPR (e.g. tax authorities) and this is legally permissible and required pursuant to Art. 6 (1) (b) GDPR for the processing of contractual relationships with you (e.g. banks, logistics service providers, IT service providers).
Depending on which services you use on our website or request from us, your personal data may be transferred to a third country. If we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection, if other appropriate data protection guarantees (e.g. binding corporate data protection regulations or EU standard contractual clauses) are in place, or if an exception for the transfer pursuant to Article 49 GDPR applies.
We will erase your personal data as soon as such data is no longer required for the following purposes. After termination of the contractual relationship, your personal data will be stored as long as we are legally obliged to do so. This typically results from legal verification and storage obligations which are laid down, among other things, in the Commercial Code (HGB, Handelsgesetzbuch) and Fiscal Code of Germany (AO, Abgabenordnung). Pursuant to these laws, storage periods can be as long as ten years. Furthermore, personal data may be stored for the period during which claims can be established against us (subject to a statutory limitation period of three or up to thirty years).
You only need to provide us with the personal data that is required for the provision and use of certain functions of our website or the establishment and performance of a contractual relationship and the fulfillment of the associated contractual obligations, or which we are required to collect by law. Without this data, we will not be able to provide the website and certain functions of the website and to enter into and perform a contract with you.
When you use the website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server and that are technically necessary for the presentation of our website and the guarantee of stability and security. These are the IP address, the request of your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used and the operating system of your system. We further collect from which website the access of our site took place.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to your browser. For this purpose, your IP address must remain stored for the duration of the session. The processing of the remaining data takes place in order to ensure the functionality of the website. In addition, the data serve us to optimize the website and to ensure the stability and security of our systems. The legal basis is Art. 6 (1) (f) GDPR, based on a weighing of our legitimate and overriding interests mentioned above.
We transmit the collected data to external service providers (hosting provider, IT service provider, web agency), which support us in data processing for the above-mentioned purposes.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Otherwise, deletion takes place at the latest within 7 days after calling up the website.
When you use our website, we may collect information through the use of cookies or similar technologies (“Cookies”). Cookies are small text files that are placed on your terminal device by your browser to store certain information. If you later visit our website again using the same terminal device, the information stored in Cookies is subsequently sent back either to our website or to another website to which the Cookie belongs. Through the stored and returned information, the respective website recognizes that you have already called up and visited it with the browser of your end device. Only the cookie itself is identified on your end device. We use cookies to improve our website, to store information about your preferred activities on the website and thus to tailor our website to your individual interests, as well as to fulfill legal requirements.
This website uses the following types of cookies, the scope and functionality of which are explained below:
Strictly necessary cookies
Performance cookies
Strictly necessary cookies are cookies without which you would not be able to use our website as intended or without which we would not be able to provide our website to you. These include, for example, functions such as setting and saving your privacy preferences, filling in and saving user input, and security functions. These cookies are used without your consent. However, you have the option to disable these cookies via your browser settings. The legal basis for the processing of personal data using strictly necessary cookies is Art. 6 (1) (c) GDPR or Art. 6 (1) (f) GDPR, based on a consideration of our legitimate and overriding interests in the technically smooth provision of our website and the services offered through it.
We use performance cookies to understand how visitors use our website, in particular which areas they visit and how much time they spend on the website. In addition, we collect information and register error messages with the aim of improving our website. The legal basis for the processing of personal data using performance cookies is your consent pursuant to Art. 6 (1) (a) GDPR.
You have the option of deleting all cookies once they have been set via your browser. In addition, you can set your browser so that websites are prevented from storing and reading cookies. You can revoke your consent to the use of cookies, unless they are absolutely necessary, at any time with effect for the future. You will find the link to the cookie settings in the footer of our website.
We use the web analytics service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies, which are stored on your terminal device and which enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Your IP address will be truncated beforehand by Google through the use of the extension “_anonymizeIP()” within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 (1) (a) GDPR.
In addition to the processing of the above data by Google, we transfer the collected data for processing to external service providers (e.g. platform, hosting, support and analysis service providers) in accordance with the above purposes (implementation and support of web analysis).
For the exceptional cases in which personal data is transferred from Google to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. These are available here: https://business.safety.google/adsprocessorterms/sccs/eu-p2p-intra-group/.
You can prevent the storage of cookies by selecting the appropriate settings on your browser software. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
The collected personal data will be deleted as soon as they are no longer needed for the processing purposes, which is regularly the case after 14 months from the collection of the data.
On our website we use the offer of Google Fonts, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, communication data (e.g. IP address, browser information, device information) is transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
We use this service in the interest of a consistent and appealing presentation of our website. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. If your browser does not support web fonts, a standard font is used by your computer. The legal basis for the use of Google Fonts is Art. 6 (1) (f) GDPR.
In addition to the processing of the above data by Google, we transfer the collected data for processing to external service providers (e.g. platform, hosting, support and analysis service providers) in accordance with the above purposes (implementation and support in the delivery of the website).
For the exceptional cases in which personal data is transferred from Google to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. These can be requested from Google for inspection.
The personal data collected are deleted as soon as they are no longer needed for the processing purposes, which is regularly the case after the end of the visit to the website.
We collect your personal data as a customer, business partner, interested party or supplier when you provide it to us of your own accord by e-mail, via a contact form on our website, by mail or by telephone. We then collect the information that comes about as part of the contact and/or cooperation. This includes in particular names and transmitted contact data, date and reason for contact.
The personal data collected from you will be used for the purpose of providing you with the requested products or services and corresponding with you (legal basis Art. 6 (1) (b) GDPR), for the fulfillment of legal obligations (legal basis Art. 6 (1) (c) GDPR) or on the basis of legitimate interests of us or of third parties (legal basis Art. 6 (1) (f) GDPR), which are described in this Privacy Policy.
You are not obliged to provide the aforementioned personal data. The data provided may be necessary for the conclusion of a contract. Without the provision of the data, communication, conclusion of a contract or contract execution may not be possible.
A transmission of the data relevant in the respective individual case takes place on the basis of the legal provisions or a contractual agreement to public bodies in the presence of overriding legal provisions, to external service providers or other contractors and to other external bodies, insofar as you have given your consent or a transmission is permissible for predominant interest.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Insofar as the data provided is subject to retention obligations under tax and commercial law, it will be stored for the duration of the retention obligations of ten years and then deleted, unless you have consented to storage beyond this or the further processing of the data is necessary for the assertion, exercise or defense of legal claims (statutory limitation period of three or up to thirty years).
We collect your personal data as an applicant only if you provide it to us voluntarily by e-mail, by mail or by telephone. This applies both to applications in response to job advertisements and to unsolicited applications. In this case, we record the information provided in the application. This includes in particular name, date of birth, contact data, interests, qualification data as well as educational and professional background. The personal data collected from you will only be used for the purpose of carrying out the application process. The legal bases are Art. 6 (1) (a), (b) and (f) GDPR, sec. 26 of the Federal Data Protection Act (BDSG, Bundesdatenschutzgesetz).
You are not obliged to provide the aforementioned personal data. The data provided may be required for a future conclusion of a contract after completion of the application process. Without the provision of the data, communication, the implementation of the application process or the conclusion of a contract may not be possible.
A transmission of the data relevant in the respective individual case takes place on the basis of the legal provisions or a contractual agreement. Data is transferred to employees of the personnel department, employees of the management and the respective head of department. Your personal data will not be transferred to third parties. There is no intention to transfer your data to a recipient in a third country (not a member state of the EU / EEA) or an international organization.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Therefore, after the application procedure has been carried out, we retain your data for six months after you have been notified of the rejection decision in the event of a rejection. If you have consented to longer storage, the storage period is regularly two years. After that, we will either delete your data or obtain your consent again. You have the option to revoke your consent to the processing of personal data at any time.
We also process your personal data when you visit us on our social media accounts. We maintain these social media accounts primarily to communicate with customers, interested parties and users, to increase our brand awareness and to promote our products and services. The respective provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research, and/or demand-oriented design of its network. Such an evaluation is carried out in particular (also for non-logged-in users) for the display of needs-based advertising. For the respective data processing purposes and data categories, we refer to the individual social media accounts, which are explained in more detail below.
The legal basis for the use of these social media accounts is Art. 6 (1) (f) GDPR, as we have a legitimate interest in communicating with and informing customers and interested parties via these accounts. Insofar as you wish to enter into a contractual relationship with us with your request, the legal basis for this processing is Art. 6 (1) (b) GDPR.
In addition to the processing of the above data by the respective providers, we transfer the collected data to external service providers (e.g. platform, hosting, support and analysis service providers) for processing in accordance with the above-mentioned purposes (implementation and support of communication and information as well as advertising).
The personal data collected will be deleted as soon as they are no longer needed for the processing purposes.
We operate a social media account on Facebook (“Fanpage”), an online service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). When you visit our Fanpage, Facebook processes your personal data in accordance with Facebook’s privacy policy. For more information, please visit: https://de-de.facebook.com/policy.php.
We process your personal data depending on your interaction with our Fan Page, including your Facebook username as well as comments you have posted on our Fan Page and your activity on our Fan Page via the Facebook Page Insights service. Page Insights are aggregate statistics created based on certain events logged by Facebook’s servers when people interact with Pages and their associated content, such as visits to our Fan Page, the volume of interactions, visits and average duration of video plays, information about what countries and cities you are from, and statistics about our visitors’ general relationships (“Events”) and other information necessary to respond to your potential inquiries. For more information about such Events, please visit: https://www.facebook.com/legal/terms/page_controller_addendum. Facebook provides Page Insights to us so that we can gain insights about how visitors interact with our Fan Page and with content associated with them. We do not have access to the personal data processed as part of events, only to the aggregated Page Insights.
We are jointly responsible with Facebook for some of the processing of this personal data into Page Insights events (“Insights Data”) in connection with the Fan Page within the meaning of Art. 26 GDPR. The joint responsibility includes the creation of the events and their aggregation into Page Insights, which are then made available to us. We have entered into an agreement with Facebook for this purpose (“Page Insights Supplement”, https://www.facebook.com/legal/terms/page_controller_addendum), which sets out the respective responsibilities for fulfilling the obligations under the GDPR with regard to joint processing. Facebook provides the essence of this Page Insights Supplement to data subjects (Art. 26 (2) GDPR). This is currently done via the Page Insights data information available here: https://www.facebook.com/legal/terms/information_about_page_insights_data. We are responsible for providing information on the joint processing of personal data. Facebook is responsible for enabling the rights of data subjects under Art. 15-20 GDPR with respect to personal data stored by Facebook after joint processing. The contact details of the data controller as well as the data protection officer of Facebook are available here: https://www.facebook.com/about/privacy.
In cases where personal data is transferred from Facebook to Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. The Facebook EU Data Transfer Addendum with reference to the standard contractual clauses is available here: https://www.facebook.com/legal/EU_data_transfer_addendum.
We operate a social media account on Instagram, an online service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”). When you visit our Instagram page, Instagram processes your personal data in accordance with Instagram’s privacy policy. For more information, please visit: https://www.instagram.com/legal/privacy/.
We process your personal data depending on your interaction with our Instagram page, including your Instagram username as well as comments you have posted on our Instagram page and your activity on our Instagram page via the Instagram “Insights” service. Insights are aggregate statistics created based on certain events logged by Instagram servers when people interact with pages and their associated content, such as visits to our Instagram page, the volume of interactions, visits and average duration of video plays, information about what countries and cities you are from, and statistics about our visitors’ general relationships and other information necessary to respond to your potential inquiries. Instagram provides Insights to us so that we can gain insights about how visitors interact with our Instagram page and content associated with it. We do not have access to the personal data, but only to the aggregated insights.
In cases where personal data is transferred from Instagram to Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. The Facebook EU Data Transfer Addendum with reference to the standard contractual clauses is available here: https://www.facebook.com/legal/EU_data_transfer_addendum.
We operate a social media account on LinkedIn, an online service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). When you visit us on our LinkedIn page, LinkedIn processes your personal data in accordance with LinkedIn’s privacy policy. For more information, please visit: https://www.linkedin.com/legal/privacy-policy.
We process your personal data depending on your interaction with us on our LinkedIn page, including your LinkedIn username as well as comments you have posted on our LinkedIn page and your activity on our LinkedIn page via the LinkedIn “Page Insights” service. “Page Insights” are aggregate statistics created based on certain interactions logged by LinkedIn servers when people interact on our LinkedIn Page and related content, such as visits to our LinkedIn Page, the volume of interactions, information about what countries and cities you are from, and statistics about our visitors’ area of work and other information necessary to respond to your potential inquiries. LinkedIn provides Page Insights to us so that we can gain insights about how visitors interact with our LinkedIn Page and with content associated with it. We do not have access to the personal data in this process, only to the aggregate statistics.
For some of the processing of this personal data for Page Insights that takes place in connection with the LinkedIn Page, we are jointly responsible with LinkedIn within the meaning of Art. 26 GDPR. The joint responsibility includes the processing of personal data for the creation of Page Insights, which are then made available to us. We have entered into an agreement with LinkedIn for this purpose (“Page Insights Joint Controller Addendum”, https://legal.linkedin.com/pages-joint-controller-addendum), which sets out the respective responsibilities for fulfilling the obligations under the GDPR with regard to joint processing. LinkedIn provides the essence of this Page Insights Joint Controller Addendum to data subjects at the link above (Art. 26 (2) GDPR). LinkedIn has thereafter committed to assume responsibility under the GDPR for the provision of Page Insights and will comply with all applicable obligations under the GDPR with respect to the processing of Page Insights (including, but not limited to, Articles 12-22 and Articles 32-34 of the GDPR). This means that LinkedIn will, among other things, ensure that users are informed about the data being processed and assist members with their rights of access and erasure. The contact details of the data controller as well as LinkedIn’s data protection officer are available here: https://www.linkedin.com/legal/privacy-policy.
In cases where personal data is transferred from LinkedIn to LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. You can request a copy of these standard contractual clauses from LinkedIn via https://www.linkedin.com/legal/privacy-policy.
We operate a social media account on Twitter, an online service provided by Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland (“Twitter”). When you visit us on Twitter, Twitter processes your personal data in accordance with Twitter’s privacy policy. For more information, please visit: https://twitter.com/de/privacy.
We process your personal data depending on your interaction with us on Twitter, including your Twitter username as well as comments you have posted in response to our Tweets and your activity on our Tweets via the Twitter “Analytics” service. “Analytics” are aggregate statistics compiled based on certain interactions logged by Twitter’s servers when people interact on Tweets and related content, such as visits to Twitter, the volume of interactions, information about what countries and cities you are from, and statistics about our visitors’ general relationships and other information necessary to respond to your potential inquiries. Twitter provides us with analytics to help us gain insights into how visitors interact with our Tweets and with content associated with them. We do not have access to the personal data in this process, only the aggregate statistics.
In cases where personal data is transferred from Twitter to Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. You can request a copy of these standard contractual clauses from Twitter via https://twitter.com/de/privacy.
We operate a social media account on XING, an online service of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany (“XING”). When you visit us on our XING page, XING processes your personal data in accordance with XING’s privacy policy. For more information, please visit: https://privacy.xing.com/de.
We process your personal data depending on your interaction with us on our XING Page, including your XING username as well as comments you have posted on our XING Page and your activity on our XING Page. We receive aggregate statistics based on certain interactions when people interact on our XING Page and related content, such as visits to our XING Page, the volume of interactions, information about which countries and cities you are from, and statistics about our visitors’ area of work and other information necessary to respond to your potential inquiries. XING provides us with these statistics so that we can gain insights into how visitors interact with our XING site and with the content associated with them. We do not have access to the personal data in this process, only to the aggregated
If you have given your consent to the processing of your data, you may revoke this consent at any time. Such revocation affects the permissibility of processing your personal data after you have expressed it to us.
Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the contact details given in section I.
You have the right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.
In accordance with Art. 16 GDPR, you have the right to demand the correction of inaccurate or incomplete personal data stored by us without undue delay. In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
According to Art. 7 (3) GDPR, you have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.
You also have the right under Article 77 GDPR to lodge a complaint about the processing of your personal data by us with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
