Privacy & Cookie Policy
as per the GDPR

I. Name and address of controller

The controller as defined by the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Staytoo Living Holding GmbH
Sachsendamm 4/5
10829 Berlin
Germany
E-Mail: info@stayurban.de
Website: www.stayurban.de
Tel.: +49 (0)341 24803705

II. General information on data processing

1. Scope of personal data processing

As a rule, we collect and utilise our users’ personal data only if this is required to provide a functional website as well as our content and services. Personal data of our users are regularly gathered and used only on a statutory basis. One exception applies in cases in which there is no apparent statutory basis and processing of the data can only be legitimised by means of consent.

2. Legal basis for processing of personal data

If we obtain consent for processing of personal data from the data subject, point (a) of Article 6 (1) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the event of processing of personal data that is required for fulfilment of a contract to which the data subject is party, point (b) of Article 6 (1) GDPR serves as the legal basis. This also applies to processing measures that are required in order to perform pre-contractual actions.

If processing of personal data is required in order to fulfil a legal obligation that is incumbent upon our company, point (c) of Article 6 (1) GDPR serves as the legal basis.

In the event that vital interests of the data subject or of another natural person necessitate the processing of personal data, point (d) of Article 6 (1) GDPR serves as the legal basis.
If processing is required in order to uphold a legitimate interest of our company or of a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, point (f) of Article 6 (1) GDPR serves as the legal basis for processing.

3. Erasure of data and period stored

The personal data of the data subject are erased or blocked as soon as the purpose of storage ceases to apply. Storage can additionally be carried out if the European or national legislature has made provisions for this in Union regulations, acts or other rules to which the controller is subject. Blocking or erasure of the data is also carried out if a storage period specified by the aforementioned standards expires, unless it is necessary to continue storing the data in order to conclude or fulfil a contract.

III. General information on data processing for Klinke-Viertel Haus 1 GmbH & Co. KG

1. description and scope of data processing

Our website uses services provided by Klinke-Viertel Haus 1 GmbH & Co. KG, Liegnitzer Straße 30, 10999 Berlin. Personal data is processed for the purpose of monitoring the rental process as part of monitoring the agreement made with us in the property and administration management contract.
The data is made available to the processor in the form of a monthly Excel report.
In particular, the following data may be processed:

Identification and contact data (e.g. name and e-mail address and, if applicable, date of birth, ID card number, as well as telephone number and other contact options)
Financial and transaction data (e.g. bank account information, credit card numbers, financial transaction data, as well as temporal data, viewing and collection dates)
Job-related data (e.g. job title, place of work, salary)

To protect your data, we have concluded an order processing contract with Klinke-Viertel Haus 1 GmbH & Co. KG for the protection of your data. Klinke-Viertel Haus 1 GmbH & Co. KG processes your data exclusively in accordance with our instructions. A transfer to third countries outside the EU is only permitted in compliance with the obligations set out in Chapter V GDPR.

2. Purpose of the data processing

The processor carries out monitoring to monitor and optimize marketing purposes and sales measures. The data is used exclusively for this purpose and may not be used by the processor to contact you.

3. legal basis for data processing

Insofar as the processing is necessary for the fulfillment of your contract with us, the data processing is generally carried out on the legal basis of Art. 6 para. 1 lit. b GDPR.
If necessary, data processing may also be based on other legal bases in accordance with the GDPR. In cases in which the processing cannot be based on Art. 6 para. 1 lit. b GDPR, it will only be carried out with your consent in accordance with Art. 6 para. 1 lit. a GDPR or on the basis of a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

4. duration of storage

The contractor is obliged to delete the reports provided within one week.

5. right of revocation, objection and removal

If the processing is based on your consent, you can withdraw this at any time by sending an email to privacy@stayurban.com. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If the processing is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR, you can object to the data processing.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically records data and information from the computer system of the accessing computer.
The following data are gathered here:Information on the browser type and the version used
(1) The user’s operating system
(2) The user’s IP address
(3) The data and time of access
(4) Websites from which the user’s system reaches our website
(5) Websites that are accessed by the user’s system via our website

The data are also stored in the log files of our system. These data are not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for temporary storage of the data and log files is point (f) of Article 6 (1) GDPR.

3. Purpose of data processing

Temporary storage of the IP address by the system is necessary in order to enable delivery of the website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session.

Storage in log files is carried out in order to ensure that the website works properly. In addition, we use the data to help us optimise the website and to ensure the security of our IT systems. No evaluation of the data for marketing purposes is performed in connection with this.

These purposes also account for our legitimate interest in data processing as per point (f) of Article 6 (1) GDPR.

4. Period saved

The data are erased as soon as they are no longer needed to fulfil the purpose for which they were gathered. In the event of data recording for provision of the website, this is the case when the respective session is ended.

In the event of data storage in log files, this is the case after no more than 365 days.
IP addresses are fully logged for a maximum of 24 hours. Thereafter, anonymisation is performed by erasing the last octet so that it is no longer possible to associate with the accessing client.

5. Option of objection and rectification

Data recording to provide the website and storage of data in log files are absolutely essential to operation of the website. Consequently, there is no possibility of objection on the part of the user.

V. Web analysis by means of Google Analytics

1. Description and scope of personal data processing

This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies, text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie regarding your use of this website is usually sent to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google shortens your IP address beforehand within member states of the European Union or in other countries that are signatories to the Agreement on the European Economic Area. The full IP address is only sent to a Google server in the USA and shortened there in exceptional cases.

Further information on conditions of use, data processing measures and data protection can be found at www.google.com/analytics/terms/gb.html and at support.google.com/analytics/answer/6004245?hl=.

Please note that on the Google Analytics website, the code “gat._anonymizeIp();” has been added in order to ensure anonymised collection of IP addresses (IP masking).

Our website uses Google conversion tracking. If you have reached our website via an advertisement delivered by Google, a cookie is deposited on your computer by Google AdWords. The cookie for conversion tracking is deposited if a user clicks on an advert delivered by Google. These cookies become invalid after 30 days and are not used for personal identification. If the user visits specific pages of our website and the cookie has not yet expired, we and Google can detect that the user has clicked on the advert and been forwarded to this page. Every Google AdWords customer receives another cookie. Therefore, cookies cannot be tracked via the websites of AdWords customers. The information obtained by means of the conversion cookies is used in preparing conversion statistics for AdWords customers who have opted for conversion tracking. The customers find out the total number of users who have clicked on their advert and been forwarded to a site provided with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

If you do not want to participate in tracking, you can reject the depositing of a cookie that is required for this – for instance via a browser setting that deactivates all automatic depositing of cookies, or by configuring your browser in such a way that cookies from the domain “googleleadservices.com“ are blocked.

We use the remarketing technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google“). Via this technology, users who have already visited our web pages and online services and are interested in the offering are addressed again by means of targeted advertising on the pages of the Google Partners network. The advertising is displayed through the use of cookies – these are small text files that are stored on the user’s computer. By means of the text files, user behaviour while visiting the site can be analysed, and can subsequently be used for targeted product recommendations and interest-based advertising.

DoubleClick by Google is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick by Google uses cookies to present you with adverts relevant to you. A pseudonymous identification number (ID) is assigned to your browser here in order to check which adverts have been displayed in your browser and which adverts have been accessed. The cookies do not contain any personal information. Use of the DoubleClick cookies only enables Google and its partner websites to deliver adverts on the basis of previous visits to our website or other websites on the internet. The information generated by the cookies is transmitted to a server in the USA by Google for evaluation and stored there. Google complies with the data protection regulations of the US Privacy Shield agreement and is registered with the Privacy Shield programme of the US Department of Commerce. The data are only transmitted to third parties by Google on the basis of statutory regulations or in the context of order data processing. Google will never combine your data with other data gathered by Google.

By using our web pages, you declare your consent to the processing by Google of the data gathered about you, and to the aforementioned manner of data processing as well as the stated purpose. You can prevent storage of cookies by configuring your browser software accordingly; however, please note that in this case, you may not be able to use all functions of our website to their full extent. In addition, you can prevent the data generated by the cookies and relating to your use of the web pages from being sent to Google and prevent Google from processing these data by downloading and installing the browser plug-in available at https://support.google.com/ads/answer/7395996. Alternatively, you can deactivate the DoubleClick cookies on the site of the Digital Advertising Alliance via the following link (optout.aboutads.info/#!/).

Googletagmanager.com: JavaScript code of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: Google) is uploaded on our site. If you have activated JavaScript in your browser and have not installed a JavaScript blocker, your browser may transmit personal data to Google. To prevent Google from executing JavaScript code altogether, you can install a JavaScript blocker (e.g. www.noscript.net).

2. Legal basis for processing of personal data

The legal basis for processing of the users’ personal data is point (f) of Article 6 (1) GDPR. Our legitimate interest consists of measuring and improving user acceptance of our website, and serves to make our advertising more effective.

According to Article 45 (3) GDPR, Google ensures that the IP address is transmitted with a level of data security that largely corresponds to EU standards. Google is certified under the Privacy Shield decision of the European Commission: www.privacyshield.gov/participant?id=a2zt000000001L5AAI

The US Department of Commerce has the certification documents. The adequacy decision of the European Commission regarding the Privacy Shield guarantees minimum standards for the protection of personal data of Europeans that are stored or processed in the USA.

IP anonymisation is active on this website. On behalf of the operator of this website, on the basis of a contract pursuant to Article 28 GDPR, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website use and internet use.

3. Purpose of data processing

Processing of the users’ personal data enables us to analyse our users’ surfing behaviour. Evaluating the extracted data allows us to compile information on the use of individual components of our website. This helps us to constantly improve our website and make it more user-friendly.

These purposes also account for our legitimate interest in processing the data as per point (f) of Article 6 (1) GDPR. The users’ interest in protection of their personal data is sufficiently taken into account through anonymisation of the IP address. The IP address sent from your browser in the context of Google Analytics is not combined with other Google data.

4. Period saved

The data are erased as soon as they are no longer needed for our record-keeping purposes.

The cookie “_ga“ from Google Analytics that is stored on your computer has a maximum lifetime of 2 years. After this, it will be automatically erased.

5. Option of objection and rectification

Cookies are stored on the user’s computer and transmitted from the computer to our site. Therefore, as the user, you have full control over the use of cookies. By changing the settings in your web browser, you can deactivate or restrict the transferring of cookies. Cookies that have already been stored can be erased at any time. This can also be performed automatically. If cookies are deactivated for our website, it is possible that some functions of the website will no longer be fully usable.

On our website, we give our users the opportunity to opt out of the analysis process. To do this, you must follow the relevant link. In this way, a further cookie is deposited on their system, telling our system not to store the user’s data. If the user erases the corresponding cookie from their own system in the meantime, they must deposit the opt-out cookie again.

In addition, to prevent the data generated by the Google Analytics cookie and relating to use of the website (including your IP address) from being sent to Google and prevent Google from processing these data, you can download and install the browser plug-in available via the following link: tools.google.com/dlpage/gaoptout?hl.

If you prevent your browser from accepting cookies, this means that the deactivation cookie cannot be deposited either.

If you erase the cookies on your computer, you must also deposit the deactivation cookie again by clicking on the link provided above.

VI. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the web browser and by the web browser on computer system of the user. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string of characters that enables clear identification of the browser when the website is next accessed.We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identifiable even after a page change.
The following data are stored and transmitted in the cookies:

Language settings
Login information

2. Legal basis for data processing

The legal basis for processing of personal data with the use of technically essential cookies is point (f) of Article 6 (1) GDPR.
The legal basis for processing of personal data with the use of cookies for analysis purposes, subject to the user’s consent to this, is point (a) of Article 6 (1) GDPR.

3. Purpose of data processing

The purpose of the use of technically essential cookies is to make websites easier to use. Some functions of our website cannot be offered without the use of cookies. To this end, it is also essential for the browser to be recognised again after a page change.
We need cookies for the following applications:

Savings of language settings
Session management

The user data gathered by means of technically essential cookies are not used to create user profiles.

4. Duration of storage, option of objection and rectification

If you prevent your browser from accepting cookies, this means that the deactivation cookie cannot be deposited either.
If you erase the cookies on your computer, you must also deposit the deactivation cookie again by clicking on the link provided above.

VII. Use of HCaptcha

1. Description and scope of data processing

We use “HCaptcha” from the provider Intuition Machines, Inc, 1065 SW 8th St #704, Miami FL 33130 to determine that you as our users are human beings. In some cases, analysis data may be collected through the use of cookies, web beacons and other tracking technologies. The following categories of information are collected:

Information that is automatically collected as a result of an Integrator’s or Customer’s use of the Sites or the Services (“Analytics Information”), such as IP addresses, browser type, Internet service provider, platform type, device type, operating system, date and timestamp of access, and other similar information. Other information collected from end users on the Service is necessary to determine whether they are human, such as mouse movements, scroll position, keystroke events, touch events and similar information.

Some analytics information is collected on behalf of HCaptcha by third parties engaged for this purpose. Some analytics information is collected through a variety of tracking technologies, including cookies.

Further information can be found at: https://www.hcaptcha.com/privacy

In order to ensure compliance with data protection requirements and the greatest possible data security, we have concluded an order processing agreement with Intuition Machines and have thus committed the provider of HCaptcha appropriately to the principles of data protection and data security. Intuition Machines is also part of the EU-U.S. Data Privacy Framework. This ensures an appropriate level of data protection for data transfers to the USA.

2. Purpose of data processing

The purpose of data processing is to determine whether the user is a human being and at the same time to prevent misuse in this process.

3. Legal basis for data processing

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information will generally be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

Information collected via technical means such as cookies, website counters and other analytics tools is discarded as soon as possible, but may be retained for a limited period of up to one year after the cookie expires. This is typically done in anonymized and aggregated form, unless potential abuse is detected. In this case, the information is retained to help prevent future misuse.

5. Right of revocation, objection, and removal

If the processing is based on your consent, you have the right to withdraw this consent at any time in the manner indicated in the service or by contacting support at support@hcaptcha.com.

You can prevent the collection and processing of your personal data by HCaptcha by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on objection and removal options for HCaptcha can be found at: https://www.hcaptcha.com/privacy

VIII. Rights of the data subject

You have the right:

pursuant to Article 15 GDPR to request information on your personal data that is processed by us. In particular, you may request information on the purposes of the processing, on the categories of personal data, on the categories of recipients to whom your personal data have been or will be disclosed, on the envisaged period stored, on the existence of the right to request rectification, erasure, restriction of processing or to object, on the existence of the right to lodge a complaint, on the source of your data if they are not collected by us and on the existence of automated decision-making, including profiling and any meaningful information about the particulars thereof;
pursuant to Article 16 GDPR to request prompt rectification of inaccurate personal data or completion of your personal data that is stored by us;
pursuant to Article 17 GDPR to request the erasure of your personal data that are stored by us, provided that processing is not required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
pursuant to Article 18 GDPR to request the restriction of processing of your personal data, if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure and we no longer need the data but you require them for the establishment, exercise or defence of legal claims or if you have objected to processing pursuant to Article 21 GDPR;
pursuant to Article 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller;
pursuant to Article 7 (3) GDPR to withdraw the consent you have already granted us at any time. The result of this will be that we are no longer permitted to continue the data processing that was based on this consent in future and
pursuant to Article 77 GDPR to lodge a complaint with a supervisory authority. To do so, you may generally contact the supervisory authority of your habitual residence or place of work or our company headquarters.

Right to object (to advertising)

Provided that your personal data are processed based on the legitimate interests under point (f) of Article 6 (1) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data to the extent that there are grounds for this relating to your particular situation or if the objection is to direct marketing. In the latter case, you have a general right to object that will be enforced by us without specifying a particular situation.
If you would like to assert your right to withdraw or object, it is sufficient to send an email to privacy@stayurban.com.

Changes to data protection standards

If any change to these data protection standards become necessary in future, you will always be able to find the latest version here.

August 2024

Privacy & Cookie Policy
as per the GDPR

Coming soon

Under development

Coming soon

Privacy & Cookie Policy as per the GDPR

Coming soon

Under development

Coming soon

Privacy & Cookie Policy
as per the GDPR